Edit tour

Windows Analysis Report
http://api.myuhchvision.com/

Overview

General Information

Sample URL:	http://api.myuhchvision.com/
Analysis ID:	1587129
Tags:	urlscan
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected suspicious Javascript

Performs DNS queries to domains with low reputation

HTML page contains hidden javascript code

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6656 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 6212 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 --field-trial-handle=1912,i,3466874189630771730,1920044593678216292,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 4984 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://api.myuhchvision.com/" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-10T00:22:20.107615+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.10	50017	35.71.185.236	443	TCP
2025-01-10T00:22:27.468392+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.10	50141	216.239.34.181	443	TCP
2025-01-10T00:22:27.670355+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.10	50140	142.250.186.130	443	TCP
2025-01-10T00:22:27.764412+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.10	50143	142.250.186.130	443	TCP
2025-01-10T00:22:29.240439+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.10	50171	64.202.112.31	443	TCP
2025-01-10T00:22:29.243918+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.10	50169	34.231.219.101	443	TCP
2025-01-10T00:22:30.409691+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.10	50188	64.202.112.127	443	TCP
2025-01-10T00:22:30.514042+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.10	50197	151.101.65.44	443	TCP
2025-01-10T00:22:31.262144+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.10	50206	3.130.114.26	443	TCP
2025-01-10T00:22:31.407437+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.10	50204	142.250.74.196	443	TCP
2025-01-10T00:22:31.475793+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.10	50208	142.250.74.196	443	TCP
2025-01-10T00:22:31.476405+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.10	50201	141.226.228.48	443	TCP
2025-01-10T00:22:32.008528+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.10	50212	3.131.211.191	443	TCP
2025-01-10T00:22:32.322570+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.10	50216	172.217.16.196	443	TCP
2025-01-10T00:22:32.385636+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.10	50222	172.217.16.196	443	TCP
2025-01-10T00:22:32.516673+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.10	50224	216.239.34.181	443	TCP
2025-01-10T00:22:33.994923+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.10	50232	141.226.228.48	443	TCP
2025-01-10T00:22:36.630061+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.10	50258	142.250.74.196	443	TCP
2025-01-10T00:22:36.845332+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.10	50260	142.250.74.196	443	TCP
2025-01-10T00:22:37.490806+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.10	50264	172.217.16.196	443	TCP
2025-01-10T00:22:37.688877+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.10	50265	172.217.16.196	443	TCP
2025-01-10T00:22:39.941223+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.10	50266	141.226.228.48	443	TCP
2025-01-10T00:22:48.017496+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.10	50282	142.250.74.196	443	TCP
2025-01-10T00:22:48.878651+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.10	50284	172.217.16.196	443	TCP
2025-01-10T00:22:51.898479+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.10	50286	141.226.228.48	443	TCP
2025-01-10T00:22:56.884288+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.10	50294	142.250.74.196	443	TCP
2025-01-10T00:22:57.871706+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.10	50296	172.217.16.196	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected suspicious Javascript

Source: 0.1.id.script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: http://api.myuhchvision.com/... The provided JavaScript snippet exhibits several high-risk behaviors, including data exfiltration, redirects to potentially malicious domains, and the use of obfuscated code. While some contextual factors, such as the use of analytics-related functionality, may suggest a legitimate purpose, the overall behavior of the script is highly suspicious and raises significant security concerns.

Source: http://api.myuhchvision.com/

HTTP Parser: Base64 decoded: <svg fill='#D7D7D7' style="float: right" xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Source: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-NQTKCNK
Source: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE	HTTP Parser: Iframe src: https://a24403740715.cdn.optimizely.com/client_storage/a24403740715.html
Source: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-NQTKCNK
Source: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/408830293?random=1736464945641&cv=11&fst=1736464945641&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be5170z8841278742za201zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE	HTTP Parser: Iframe src: https://a24403740715.cdn.optimizely.com/client_storage/a24403740715.html
Source: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-G99G7L25WL&gacid=1197952561.1736464946&gtm=45je5170v875571548z8841278742za200zb841278742&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101925629~102067555~102067808~102081485~102198178&z=2058577249
Source: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/1042882457?random=1736464945734&cv=11&fst=1736464945734&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548z8841278742za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-NQTKCNK
Source: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/408830293?random=1736464945641&cv=11&fst=1736464945641&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be5170z8841278742za201zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE	HTTP Parser: Iframe src: https://a24403740715.cdn.optimizely.com/client_storage/a24403740715.html
Source: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-G99G7L25WL&gacid=1197952561.1736464946&gtm=45je5170v875571548z8841278742za200zb841278742&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101925629~102067555~102067808~102081485~102198178&z=2058577249
Source: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/1042882457?random=1736464945734&cv=11&fst=1736464945734&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548z8841278742za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/1042882457?random=1736464953014&cv=11&fst=1736464953014&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dform_start
Source: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/1042882457?random=1736464953044&cv=11&fst=1736464953044&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dform_submit
Source: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-NQTKCNK
Source: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/408830293?random=1736464945641&cv=11&fst=1736464945641&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be5170z8841278742za201zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Source: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE	HTTP Parser: Iframe src: https://a24403740715.cdn.optimizely.com/client_storage/a24403740715.html
Source: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-G99G7L25WL&gacid=1197952561.1736464946&gtm=45je5170v875571548z8841278742za200zb841278742&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101925629~102067555~102067808~102081485~102198178&z=2058577249
Source: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/1042882457?random=1736464945734&cv=11&fst=1736464945734&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548z8841278742za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/1042882457?random=1736464953014&cv=11&fst=1736464953014&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dform_start
Source: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/1042882457?random=1736464953044&cv=11&fst=1736464953044&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dform_submit
Source: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/1042882457?random=1736464965083&cv=11&fst=1736464965083&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dform_submit
Source: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/1042882457?random=1736464974036&cv=11&fst=1736464974036&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dform_submit

Source: http://api.myuhchvision.com/	HTTP Parser: No favicon
Source: http://api.myuhchvision.com/	HTTP Parser: No favicon
Source: http://api.myuhchvision.com/	HTTP Parser: No favicon
Source: http://api.myuhchvision.com/	HTTP Parser: No favicon
Source: http://api.myuhchvision.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTA5Ljc3OTR8NmE2MDdhMzFkNzdlNzA2ZmVjOTAwNjczMmM0NDE0NDJjODU1MzliZXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%3D%3D&query=United+Healthcare+Medicare&afdToken=ChMIpK7J8uPpigMVqoX9Bx1cfACQEmoBlLqpjxgmjCzROndp4cIsoUpMclKqzmCF8A4idqYAc6BRFXzqpQZr5mHskq-o8oROHsWon_E3VNBfAnPv0EnTUZ4xhapxEHMsWhLX36L28YhUgQYpSE5TWYluVMNln-ErnASvWEH_lO70IAE&pcsa=false&nb=0&nm=7&nx=264&ny=69&is=530x496&clkt=3&suid=32397724909	HTTP Parser: No favicon
Source: http://api.myuhchvision.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTA5Ljc3OTR8NmE2MDdhMzFkNzdlNzA2ZmVjOTAwNjczMmM0NDE0NDJjODU1MzliZXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%3D%3D&query=United+Healthcare+Medicare&afdToken=ChMIpK7J8uPpigMVqoX9Bx1cfACQEmoBlLqpjxgmjCzROndp4cIsoUpMclKqzmCF8A4idqYAc6BRFXzqpQZr5mHskq-o8oROHsWon_E3VNBfAnPv0EnTUZ4xhapxEHMsWhLX36L28YhUgQYpSE5TWYluVMNln-ErnASvWEH_lO70IAE&pcsa=false&nb=0&nm=7&nx=264&ny=69&is=530x496&clkt=3&suid=32397724909	HTTP Parser: No favicon
Source: http://api.myuhchvision.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTA5Ljc3OTR8NmE2MDdhMzFkNzdlNzA2ZmVjOTAwNjczMmM0NDE0NDJjODU1MzliZXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%3D%3D&query=United+Healthcare+Medicare&afdToken=ChMIpK7J8uPpigMVqoX9Bx1cfACQEmoBlLqpjxgmjCzROndp4cIsoUpMclKqzmCF8A4idqYAc6BRFXzqpQZr5mHskq-o8oROHsWon_E3VNBfAnPv0EnTUZ4xhapxEHMsWhLX36L28YhUgQYpSE5TWYluVMNln-ErnASvWEH_lO70IAE&pcsa=false&nb=0&nm=7&nx=264&ny=69&is=530x496&clkt=3&suid=32397724909	HTTP Parser: No favicon
Source: http://api.myuhchvision.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTA5Ljc3OTR8NmE2MDdhMzFkNzdlNzA2ZmVjOTAwNjczMmM0NDE0NDJjODU1MzliZXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%3D%3D&query=United+Healthcare+Medicare&afdToken=ChMIpK7J8uPpigMVqoX9Bx1cfACQEmoBlLqpjxgmjCzROndp4cIsoUpMclKqzmCF8A4idqYAc6BRFXzqpQZr5mHskq-o8oROHsWon_E3VNBfAnPv0EnTUZ4xhapxEHMsWhLX36L28YhUgQYpSE5TWYluVMNln-ErnASvWEH_lO70IAE&pcsa=false&nb=0&nm=7&nx=264&ny=69&is=530x496&clkt=3&suid=32397724909	HTTP Parser: No favicon
Source: http://api.myuhchvision.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTA5Ljc3OTR8NmE2MDdhMzFkNzdlNzA2ZmVjOTAwNjczMmM0NDE0NDJjODU1MzliZXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%3D%3D&query=United+Healthcare+Medicare&afdToken=ChMIpK7J8uPpigMVqoX9Bx1cfACQEmoBlLqpjxgmjCzROndp4cIsoUpMclKqzmCF8A4idqYAc6BRFXzqpQZr5mHskq-o8oROHsWon_E3VNBfAnPv0EnTUZ4xhapxEHMsWhLX36L28YhUgQYpSE5TWYluVMNln-ErnASvWEH_lO70IAE&pcsa=false&nb=0&nm=7&nx=264&ny=69&is=530x496&clkt=3&suid=32397724909	HTTP Parser: No favicon
Source: http://api.myuhchvision.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTA5Ljc3OTR8NmE2MDdhMzFkNzdlNzA2ZmVjOTAwNjczMmM0NDE0NDJjODU1MzliZXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%3D%3D&query=United+Healthcare+Medicare&afdToken=ChMIpK7J8uPpigMVqoX9Bx1cfACQEmoBlLqpjxgmjCzROndp4cIsoUpMclKqzmCF8A4idqYAc6BRFXzqpQZr5mHskq-o8oROHsWon_E3VNBfAnPv0EnTUZ4xhapxEHMsWhLX36L28YhUgQYpSE5TWYluVMNln-ErnASvWEH_lO70IAE&pcsa=false&nb=0&nm=7&nx=264&ny=69&is=530x496&clkt=3&suid=32397724909	HTTP Parser: No favicon
Source: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE	HTTP Parser: No favicon

Source: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE	HTTP Parser: No <meta name="author".. found
Source: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE	HTTP Parser: No <meta name="author".. found
Source: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE	HTTP Parser: No <meta name="author".. found
Source: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE	HTTP Parser: No <meta name="author".. found

Source: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE	HTTP Parser: No <meta name="copyright".. found
Source: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE	HTTP Parser: No <meta name="copyright".. found
Source: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE	HTTP Parser: No <meta name="copyright".. found
Source: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 173.222.162.55:443 -> 192.168.2.10:49853 version: TLS 1.2

Networking

Performs DNS queries to domains with low reputation

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: cdn.qa.gohealth.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: cdn.qa.gohealth.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: cdn.qa.gohealth.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: cdn.qa.gohealth.xyz

Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.10:50017 -> 35.71.185.236:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.10:50141 -> 216.239.34.181:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.10:50171 -> 64.202.112.31:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.10:50188 -> 64.202.112.127:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.10:50212 -> 3.131.211.191:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.10:50206 -> 3.130.114.26:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.10:50294 -> 142.250.74.196:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.10:50197 -> 151.101.65.44:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.10:50258 -> 142.250.74.196:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.10:50224 -> 216.239.34.181:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.10:50222 -> 172.217.16.196:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.10:50143 -> 142.250.186.130:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.10:50204 -> 142.250.74.196:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.10:50232 -> 141.226.228.48:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.10:50216 -> 172.217.16.196:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.10:50265 -> 172.217.16.196:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.10:50201 -> 141.226.228.48:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.10:50264 -> 172.217.16.196:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.10:50169 -> 34.231.219.101:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.10:50284 -> 172.217.16.196:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.10:50296 -> 172.217.16.196:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.10:50208 -> 142.250.74.196:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.10:50266 -> 141.226.228.48:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.10:50140 -> 142.250.186.130:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.10:50260 -> 142.250.74.196:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.10:50282 -> 142.250.74.196:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.10:50286 -> 141.226.228.48:443

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.85
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.55
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /sxp/i/c4601e5f6cdd73216cafdd5af209201c.js HTTP/1.1Host: euob.netgreencolumn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://api.myuhchvision.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://api.myuhchvision.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sxp/i/c4601e5f6cdd73216cafdd5af209201c.js HTTP/1.1Host: euob.netgreencolumn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ct?id=77721&url=http%3A%2F%2Fapi.myuhchvision.com%2F&sf=0&tpi=&ch=landingpage&uvid=11052&tsf=0&tsfmi=&tsfu=&cb=1736464910344&hl=1&op=0&ag=300509663&rand=14051295291260029285102956577261120510298117822828918216292562052265181912101826277150&fs=1280x907&fst=1280x907&np=win32&nv=google%20inc.&ref=&ss=1280x1024&nc=0&at=&di=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
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fapi.myuhchvision.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTA5Ljc3OTR8NmE2MDdhMzFkNzdlNzA2ZmVjOTAwNjczMmM0NDE0NDJjODU1MzliZXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%253D%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2541811284092968&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=131736464911089&num=0&output=afd_ads&domain_name=api.myuhchvision.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-300&dt=1736464911090&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=754&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=712519386&rurl=http%3A%2F%2Fapi.myuhchvision.com%2F HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://api.myuhchvision.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tracker/tc_imp.gif?e=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&cri=ARbORgBYUV&ts=1230&cb=1736464911575 HTTP/1.1Host: obseu.netgreencolumn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://api.myuhchvision.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
Source: global traffic	HTTP traffic detected: GET /ct?id=77721&url=http%3A%2F%2Fapi.myuhchvision.com%2F&sf=0&tpi=&ch=landingpage&uvid=11052&tsf=0&tsfmi=&tsfu=&cb=1736464910344&hl=1&op=0&ag=300509663&rand=14051295291260029285102956577261120510298117822828918216292562052265181912101826277150&fs=1280x907&fst=1280x907&np=win32&nv=google%20inc.&ref=&ss=1280x1024&nc=0&at=&di=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
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?pac=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tracker/tc_imp.gif?e=37dfbd8ee84e001269e8c333ee4e8b9f9225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d59168a6f2617071a10acf9f29f671f83d7890529361ff62e7705853d8b379551375171c150540a3d030990eb3d1c77be26bb25cb43e29b25f45471ad0f2e6410d25afe5aecd2948a7fe07f52a13ad2a24710d14e681f2d1586d31c64e56ac8bf88b71208fe59f1d329e921c46bcf40e25c7ea8290ee95c400035db386ee683e99332bd06b442c316f0496f70bfc72f02431e24f97999c140ab51258fc6e279126332a5de6c7fd6d5431f2b436f0715a7902c701e56f2ab0b2093aef6298ee35d60013ee9f3e4869265badad60ebf029d586b6acdee9eb0f4629388ea6892340685fd9c2d1815f2606aba8c063abbcaf1778807fc4eae965d8013d9c56d9c7c71d69338c734d08bf6aec6aabb4a72b076f5e2a5774f67e38e7c82a850e710540bd64148c78580d9ccf0c568877e82ccfbc879ae243b03b53865d494d116749ea864a841bfc503d667a879455b44cb26ff559c87e03fb98d789f5ce98cd0dd6c825c566ef859541d3e457dd3a766b753dfc18b64fdde69bdde6cdf81c8f07688bcf174603ed0a9110495f70d5a23fae7e538e043cef856fdfd3cae6ee26d8759bf09d1a83caa0635b0ebcb322d357202340a5b14ace58a68db03b75b4e237db1f705d6cb1159f8fbd8c9df65d0f1f6bfc3a1fbe3415d3de54681b55f6a85476c1ad77d55293eaf12fa1459b6bd9f61e215d14099b73e89fd54cd690533211c7d149fc6e0dd3872549a0620d6b188bfe6ac3401c1f8c07ec4907569c4c0507c3feb9bb23b3da565c1068d10e32389468a8c4284e561b3dfd18dc62537b8b9643d907ca491a2ff43de7e3e0b0394685f42f1fe0e9de614d68bdb95018f958d2e083747a22feb58e847b88175846d00721028777ffd48d1c26000fb7dcabaf335d9d35fd33720ed03762c83fa885c0ffc7bf492028b44230a49bf3e2a9ebd8e2bb2174cc6da40fa8683a892488c0c096140bf&cri=ARbORgBYUV&ts=1230&cb=1736464911575 HTTP/1.1Host: obseu.netgreencolumn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?pac=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obseu.netgreencolumn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=8wea56wuq97p&aqid=EVqAZ9i1E_e7juwPqPrk8Q4&psid=7840396037&pbt=bs&adbx=375&adby=129&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=712519386&csala=5%7C0%7C1335%7C1195%7C199&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://api.myuhchvision.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=hnp8w9dqetfj&aqid=EVqAZ9i1E_e7juwPqPrk8Q4&psid=7840396037&pbt=bv&adbx=375&adby=129&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=712519386&csala=5%7C0%7C1335%7C1195%7C199&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://api.myuhchvision.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obseu.netgreencolumn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obseu.netgreencolumn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obseu.netgreencolumn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
Source: global traffic	HTTP traffic detected: GET /sxp/i/eface9ae07046ed0ab532b93a8338a63.js HTTP/1.1Host: euob.netgreencolumn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://api.myuhchvision.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://api.myuhchvision.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&sct=ID%3Dc2d96085edb8c52a%3AT%3D1736464913%3ART%3D1736464913%3AS%3DALNI_MYPZC8TKmtU-_fM69ccp9F25OCunQ&sc_status=6&hl=en&rpbu=http%3A%2F%2Fapi.myuhchvision.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTI2LjI2MDl8NjIzYzkxMDZmNjA5NGYyZWI5YWIxZjc0ZTk1MzgwZjM4MjNiZTI4Ynx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%253D%253D&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2541811284092968&q=United%20Healthcare%20Medicare&afdt=ChMIpK7J8uPpigMVqoX9Bx1cfACQEmoBlLqpjxgmjCzROndp4cIsoUpMclKqzmCF8A4idqYAc6BRFXzqpQZr5mHskq-o8oROHsWon_E3VNBfAnPv0EnTUZ4xhapxEHMsWhLX36L28YhUgQYpSE5TWYluVMNln-ErnASvWEH_lO70IAE&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717107&format=n3&ad=n3&nocache=9231736464925879&num=0&output=afd_ads&domain_name=api.myuhchvision.com&v=3&bsl=8&pac=0&u_his=2&u_tz=-300&dt=1736464925879&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=754&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=712519386&rurl=http%3A%2F%2Fapi.myuhchvision.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTA5Ljc3OTR8NmE2MDdhMzFkNzdlNzA2ZmVjOTAwNjczMmM0NDE0NDJjODU1MzliZXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%253D%253D%26query%3DUnited%2BHealthcare%2BMedicare%26afdToken%3DChMIpK7J8uPpigMVqoX9Bx1cfACQEmoBlLqpjxgmjCzROndp4cIsoUpMclKqzmCF8A4idqYAc6BRFXzqpQZr5mHskq-o8oROHsWon_E3VNBfAnPv0EnTUZ4xhapxEHMsWhLX36L28YhUgQYpSE5TWYluVMNln-ErnASvWEH_lO70IAE%26pcsa%3Dfalse%26nb%3D0%26nm%3D7%26nx%3D264%26ny%3D69%26is%3D530x496%26clkt%3D3%26suid%3D32397724909&referer=https%3A%2F%2Fsyndicatedsearch.goog%2F HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://api.myuhchvision.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sxp/i/eface9ae07046ed0ab532b93a8338a63.js HTTP/1.1Host: euob.netgreencolumn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ct?id=78709&url=http%3A%2F%2Fapi.myuhchvision.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTA5Ljc3OTR8NmE2MDdhMzFkNzdlNzA2ZmVjOTAwNjczMmM0NDE0NDJjODU1MzliZXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%253D%253D%26query%3DUnited%2BHealthcare%2BMedicare%26afdToken%3DChMIpK7J8uPpigMVqoX9Bx1cfACQEmoBlLqpjxgmjCzROndp4cIsoUpMclKqzmCF8A4idqYAc6BRFXzqpQZr5mHskq-o8oROHsWon_E3VNBfAnPv0EnTUZ4xhapxEHMsWhLX36L28YhUgQYpSE5TWYluVMNln-ErnASvWEH_lO70IAE%26pcsa%3Dfalse%26nb%3D0%26nm%3D7%26nx%3D264%26ny%3D69%26is%3D530x496%26clkt%3D3%26suid%3D32397724909&sf=0&tpi=&ch=adpage&uvid=11052&tsf=0&tsfmi=&tsfu=&cb=1736464926642&hl=2&op=0&ag=300509663&rand=54226698551811820785069686057829982621069821800111001112907065107209766710201798711117&fs=1280x907&fst=1280x907&np=win32&nv=google%20inc.&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&ss=1280x1024&nc=0&at=&di=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
Source: global traffic	HTTP traffic detected: GET /afs/ads/i/iframe.html HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://api.myuhchvision.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
Source: global traffic	HTTP traffic detected: GET /svg/right_chevron_icon.svg?c=%23000000 HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/afs/snowman.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tracker/tc_imp.gif?e=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&cri=a8C26DlD0I&ts=1002&cb=1736464927644 HTTP/1.1Host: obseu.netgreencolumn.comConnection: keep-alivesec-ch-ua: "Google Chrome";
Source: global traffic	HTTP traffic detected: GET /ct?id=78709&url=http%3A%2F%2Fapi.myuhchvision.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTA5Ljc3OTR8NmE2MDdhMzFkNzdlNzA2ZmVjOTAwNjczMmM0NDE0NDJjODU1MzliZXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%253D%253D%26query%3DUnited%2BHealthcare%2BMedicare%26afdToken%3DChMIpK7J8uPpigMVqoX9Bx1cfACQEmoBlLqpjxgmjCzROndp4cIsoUpMclKqzmCF8A4idqYAc6BRFXzqpQZr5mHskq-o8oROHsWon_E3VNBfAnPv0EnTUZ4xhapxEHMsWhLX36L28YhUgQYpSE5TWYluVMNln-ErnASvWEH_lO70IAE%26pcsa%3Dfalse%26nb%3D0%26nm%3D7%26nx%3D264%26ny%3D69%26is%3D530x496%26clkt%3D3%26suid%3D32397724909&sf=0&tpi=&ch=adpage&uvid=11052&tsf=0&tsfmi=&tsfu=&cb=1736464926642&hl=2&op=0&ag=300509663&rand=54226698551811820785069686057829982621069821800111001112907065107209766710201798711117&fs=1280x907&fst=1280x907&np=win32&nv=google%20inc.&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&ss=1280x1024&nc=0&at=&di=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
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=53hcct3kfj7x&aqid=H1qAZ-LAN4awiM0Pv6GiyQU&psid=7840396037&pbt=bs&adbx=366.5&adby=145&adbh=976&adbw=530&adbah=358%2C284%2C334&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=712519386&csala=16%7C0%7C1275%7C11%7C366&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://api.myuhchvision.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/afs/snowman.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tracker/tc_imp.gif?e=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&cri=a8C26DlD0I&ts=1002&cb=1736464927644 HTTP/1.1Host: obseu.netgreencolumn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Wi
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=82f7a52yc2eh&aqid=H1qAZ-LAN4awiM0Pv6GiyQU&psid=7840396037&pbt=bv&adbx=366.5&adby=145&adbh=976&adbw=530&adbah=358%2C284%2C334&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=712519386&csala=16%7C0%7C1275%7C11%7C366&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://api.myuhchvision.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obseu.netgreencolumn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obseu.netgreencolumn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obseu.netgreencolumn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
Source: global traffic	HTTP traffic detected: GET /medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE HTTP/1.1Host: medicare.gohealth.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/css/8506ea82eb1ef2da.css HTTP/1.1Host: medicare.gohealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/css/7739801640ced06a.css HTTP/1.1Host: medicare.gohealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/css/b8e92ad69f85b8b9.css HTTP/1.1Host: medicare.gohealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obseu.netgreencolumn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/webpack-fecf5287dadd8e47.js HTTP/1.1Host: medicare.gohealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/framework-209d228742ce58bd.js HTTP/1.1Host: medicare.gohealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/main-001bd2769c48104e.js HTTP/1.1Host: medicare.gohealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/_app-b18dce690669cf4a.js HTTP/1.1Host: medicare.gohealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/4619-31e9d68b459c55d8.js HTTP/1.1Host: medicare.gohealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/3365-49fcb6c89fee57c0.js HTTP/1.1Host: medicare.gohealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lead-generation-sites/medicare/gohealth_logo_monochrome.1716538295.svg HTTP/1.1Host: cdn.gohealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lead-generation-sites/medicare/trustpilot-stars.1716278912.svg HTTP/1.1Host: cdn.gohealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/4619-31e9d68b459c55d8.js HTTP/1.1Host: medicare.gohealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/1048-71f1a1614a540721.js HTTP/1.1Host: medicare.gohealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/3365-49fcb6c89fee57c0.js HTTP/1.1Host: medicare.gohealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/framework-209d228742ce58bd.js HTTP/1.1Host: medicare.gohealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/webpack-fecf5287dadd8e47.js HTTP/1.1Host: medicare.gohealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/medicare-marketplace-6d439b8e5c426b00.js HTTP/1.1Host: medicare.gohealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/6Pd7UXE0cORMG2cg_igAQ/_buildManifest.js HTTP/1.1Host: medicare.gohealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/6Pd7UXE0cORMG2cg_igAQ/_ssgManifest.js HTTP/1.1Host: medicare.gohealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/_app-b18dce690669cf4a.js HTTP/1.1Host: medicare.gohealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lead-generation-sites/medicare/trustpilot-logo.1716278912.svg HTTP/1.1Host: cdn.gohealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lead-generation-sites/medicare/carrier-map.1728363876.jpg HTTP/1.1Host: cdn.gohealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lead-generation-sites/medicare/gohealth_logo_monochrome.1716538295.svg HTTP/1.1Host: cdn.gohealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lead-generation-sites/medicare/trustpilot-badge.1716283270.svg HTTP/1.1Host: cdn.gohealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lead-generation-sites/medicare/trustpilot-stars.1716278912.svg HTTP/1.1Host: cdn.gohealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/medicare-marketplace-6d439b8e5c426b00.js HTTP/1.1Host: medicare.gohealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/1048-71f1a1614a540721.js HTTP/1.1Host: medicare.gohealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lead-generation-sites/medicare/verified.1716283293.svg HTTP/1.1Host: cdn.gohealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/main-001bd2769c48104e.js HTTP/1.1Host: medicare.gohealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/geo-location/ip HTTP/1.1Host: medicare.gohealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"gh-request-id: 392a938b-a094-4bd6-9d72-ce521ff09bbdsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: form_url=%2Fmedicare-marketplace
Source: global traffic	HTTP traffic detected: GET /api/consent/message/62b5af34-0370-11ee-be56-0242ac120002 HTTP/1.1Host: medicare.gohealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"gh-request-id: 392a938b-a094-4bd6-9d72-ce521ff09bbdsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: form_url=%2Fmedicare-marketplace
Source: global traffic	HTTP traffic detected: GET /_next/static/6Pd7UXE0cORMG2cg_igAQ/_buildManifest.js HTTP/1.1Host: medicare.gohealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/6Pd7UXE0cORMG2cg_igAQ/_ssgManifest.js HTTP/1.1Host: medicare.gohealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: form_url=%2Fmedicare-marketplace
Source: global traffic	HTTP traffic detected: GET /lead-generation-sites/medicare/trustpilot-logo.1716278912.svg HTTP/1.1Host: cdn.gohealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lead-generation-sites/medicare/trustpilot-badge.1716283270.svg HTTP/1.1Host: cdn.gohealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lead-generation-sites/medicare/carrier-map.1728363876.jpg HTTP/1.1Host: cdn.gohealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lead-generation-sites/medicare/verified.1716283293.svg HTTP/1.1Host: cdn.gohealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/24547810247.js HTTP/1.1Host: cdn.optimizely.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/moca-state-data HTTP/1.1Host: medicare.gohealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"gh-request-id: 392a938b-a094-4bd6-9d72-ce521ff09bbdsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwEAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: form_url=%2Fmedicare-marketplace; gh-session-id=fc99a7c8-08f9-4875-be9f-f97a9821de17
Source: global traffic	HTTP traffic detected: GET /api/consent/message/62b5af34-0370-11ee-be56-0242ac120002 HTTP/1.1Host: medicare.gohealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: form_url=%2Fmedicare-marketplace; gh-session-id=fc99a7c8-08f9-4875-be9f-f97a9821de17
Source: global traffic	HTTP traffic detected: GET /lead-generation-sites/medicare/x_logo_dark_gray.1724068743.svg HTTP/1.1Host: cdn.gohealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lead-generation-sites/medicare/facebook_logo_dark_gray.1724069057.svg HTTP/1.1Host: cdn.gohealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lead-generation-sites/medicare/linkedin_logo_dark_gray.1724069057.svg HTTP/1.1Host: cdn.gohealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lead-generation-sites/medicare/instagram_logo_dark_gray.1724069057.svg HTTP/1.1Host: cdn.gohealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/geo-location/ip HTTP/1.1Host: medicare.gohealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: form_url=%2Fmedicare-marketplace; gh-session-id=fc99a7c8-08f9-4875-be9f-f97a9821de17
Source: global traffic	HTTP traffic detected: GET /lead-generation-sites/medicare/norton_logo_gray.1716543816.svg HTTP/1.1Host: cdn.gohealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/moca-state-data HTTP/1.1Host: medicare.gohealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: form_url=%2Fmedicare-marketplace; gh-session-id=fc99a7c8-08f9-4875-be9f-f97a9821de17; _gcl_aw=GCL.1736464944.EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE; _gcl_gs=2.1.k5$i1736464937$u41793726; _gcl_au=1.1.1804017665.1736464944
Source: global traffic	HTTP traffic detected: GET /lead-generation-sites/medicare/x_logo_dark_gray.1724068743.svg HTTP/1.1Host: cdn.gohealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_aw=GCL.1736464944.EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE; _gcl_gs=2.1.k5$i1736464937$u41793726; _gcl_au=1.1.1804017665.1736464944
Source: global traffic	HTTP traffic detected: GET /lead-generation-sites/medicare/facebook_logo_dark_gray.1724069057.svg HTTP/1.1Host: cdn.gohealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_aw=GCL.1736464944.EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE; _gcl_gs=2.1.k5$i1736464937$u41793726; _gcl_au=1.1.1804017665.1736464944
Source: global traffic	HTTP traffic detected: GET /js/24547810247.js HTTP/1.1Host: cdn.optimizely.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lead-generation-sites/medicare/bbb_logo_gray.1716543816.svg HTTP/1.1Host: cdn.gohealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_aw=GCL.1736464944.EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE; _gcl_gs=2.1.k5$i1736464937$u41793726; _gcl_au=1.1.1804017665.1736464944
Source: global traffic	HTTP traffic detected: GET /lead-generation-sites/medicare/linkedin_logo_dark_gray.1724069057.svg HTTP/1.1Host: cdn.gohealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_aw=GCL.1736464944.EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE; _gcl_gs=2.1.k5$i1736464937$u41793726; _gcl_au=1.1.1804017665.1736464944
Source: global traffic	HTTP traffic detected: GET /lead-generation-sites/medicare/norton_logo_gray.1716543816.svg HTTP/1.1Host: cdn.gohealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_aw=GCL.1736464944.EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE; _gcl_gs=2.1.k5$i1736464937$u41793726; _gcl_au=1.1.1804017665.1736464944
Source: global traffic	HTTP traffic detected: GET /client_storage/a24403740715.html HTTP/1.1Host: a24403740715.cdn.optimizely.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lead-generation-sites/medicare/instagram_logo_dark_gray.1724069057.svg HTTP/1.1Host: cdn.gohealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_aw=GCL.1736464944.EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE; _gcl_gs=2.1.k5$i1736464937$u41793726; _gcl_au=1.1.1804017665.1736464944
Source: global traffic	HTTP traffic detected: GET /lead-generation-sites/medicare/gohealth_logo_gray.1716542403.svg HTTP/1.1Host: cdn.qa.gohealth.xyzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lead-generation-sites/medicare/arrow-down-gray.1726470758.svg HTTP/1.1Host: cdn.qa.gohealth.xyzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/hotjar-1419317.js?sv=7 HTTP/1.1Host: static.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obseu.netgreencolumn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://a24403740715.cdn.optimizely.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://a24403740715.cdn.optimizely.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /A4782568-7cfe-4f0c-8bd3-4f4c594e53291.js HTTP/1.1Host: utt.impactcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/408830293?random=1736464945641&cv=11&fst=1736464945641&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be5170z8841278742za201zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a-06nm.min.js HTTP/1.1Host: b-code.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-G99G7L25WL&gacid=1197952561.1736464946&gtm=45je5170v875571548z8841278742za200zb841278742&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101925629~102067555~102067808~102081485~102198178&z=2058577249 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/1042882457?random=1736464945734&cv=11&fst=1736464945734&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548z8841278742za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lead-generation-sites/medicare/bbb_logo_gray.1716543816.svg HTTP/1.1Host: cdn.gohealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_gs=2.1.k5$i1736464937$u41793726; _gcl_au=1.1.1804017665.1736464944; optimizelyEndUserId=oeu1736464944079r0.8329921030541232; optimizelySession=1736464944099; _gcl_aw=GCL.1736464946.EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE; _ga=GA1.1.1197952561.1736464946; _ga_G99G7L25WL=GS1.1.1736464945.1.0.1736464945.60.0.0
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/hotjar-1419317.js?sv=7 HTTP/1.1Host: static.hotjar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/event/lead-generation_consumer_loads-lead-form-action HTTP/1.1Host: medicare.gohealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: form_url=%2Fmedicare-marketplace; gh-session-id=fc99a7c8-08f9-4875-be9f-f97a9821de17; _gcl_gs=2.1.k5$i1736464937$u41793726; _gcl_au=1.1.1804017665.1736464944; optimizelyEndUserId=oeu1736464944079r0.8329921030541232; optimizelySession=1736464944099; _gcl_aw=GCL.1736464946.EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE; _ga=GA1.1.1197952561.1736464946; _ga_G99G7L25WL=GS1.1.1736464945.1.0.1736464945.60.0.0
Source: global traffic	HTTP traffic detected: GET /api/v1/event/lead-generation_consumer_click-ad HTTP/1.1Host: medicare.gohealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: form_url=%2Fmedicare-marketplace; gh-session-id=fc99a7c8-08f9-4875-be9f-f97a9821de17; _gcl_gs=2.1.k5$i1736464937$u41793726; _gcl_au=1.1.1804017665.1736464944; optimizelyEndUserId=oeu1736464944079r0.8329921030541232; optimizelySession=1736464944099; _gcl_aw=GCL.1736464946.EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE; _ga=GA1.1.1197952561.1736464946; _ga_G99G7L25WL=GS1.1.1736464945.1.0.1736464945.60.0.0
Source: global traffic	HTTP traffic detected: GET /lead-generation-sites/medicare/arrow-down-gray.1726470758.svg HTTP/1.1Host: cdn.qa.gohealth.xyzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lead-generation-sites/medicare/gohealth_logo_gray.1716542403.svg HTTP/1.1Host: cdn.qa.gohealth.xyzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /A4782568-7cfe-4f0c-8bd3-4f4c594e53291.js HTTP/1.1Host: utt.impactcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libtrc/unip/1190412/tfa.js HTTP/1.1Host: cdn.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /en_US/fbevents.js HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tm/2G21D2G5FC7G65237799.js HTTP/1.1Host: static.synccake.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/event/lead-generation_consumer_loads-geo-location HTTP/1.1Host: medicare.gohealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: form_url=%2Fmedicare-marketplace; gh-session-id=fc99a7c8-08f9-4875-be9f-f97a9821de17; _gcl_gs=2.1.k5$i1736464937$u41793726; _gcl_au=1.1.1804017665.1736464944; optimizelyEndUserId=oeu1736464944079r0.8329921030541232; optimizelySession=1736464944099; _gcl_aw=GCL.1736464946.EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE; _ga=GA1.1.1197952561.1736464946; _ga_G99G7L25WL=GS1.1.1736464945.1.0.1736464945.60.0.0; IR_gbd=gohealth.com; IR_21320=1736464946314%7Cc-42778%7C1736464946314%7C%7C; _uetsid=96720a30cee011ef9fd7a32c31084dbc; _uetvid=967229b0cee011efae4b7b3fd2cccb6c
Source: global traffic	HTTP traffic detected: GET /events.js HTTP/1.1Host: tags.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /topics_api HTTP/1.1Host: psb.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://medicare.gohealth.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/753743931636742?v=2.9.179&r=stable&domain=medicare.gohealth.com&hme=b8122d5d96cd6f542162ba4f497489972d1ebe228d24c39d34f560e30ae932ce&ex_m=70%2C122%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C173%2C176%2C188%2C184%2C185%2C187%2C29%2C101%2C53%2C77%2C186%2C168%2C171%2C181%2C182%2C189%2C132%2C41%2C191%2C192%2C34%2C144%2C15%2C50%2C197%2C196%2C134%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C169%2C172%2C141%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1Host: connect.facebook.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tv2track.js HTTP/1.1Host: collector-47776.us.tvsquared.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xch/42778/1799340/21320 HTTP/1.1Host: gohealth.sjv.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: brwsr=97672532-cee0-11ef-af94-ef1d83635a26; irld=LwTHS2H2oS0OWX49zIKSEvT4j; irtps=1
Source: global traffic	HTTP traffic detected: GET /libtrc/unip/1190412/tfa.js HTTP/1.1Host: cdn.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j?dtstmp=1736464947236&aid=a-06nm&se=e30&duid=268be191801d--01jh6p0nx115ahtaqq7ymqjjak&tv=v3.6.0&pu=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&wpn=lc-bundle&wpv=v3.6.0&refr=https%3A%2F%2Fsyndicatedsearch.goog%2F&cd=.gohealth.com&c=PGxpbmsgcmVsPSJjYW5vbmljYWwiIGhyZWY9Imh0dHBzOi8vbWVkaWNhcmUuZ29oZWFsdGguY29tIj48bGluayByZWw9ImNhbm9uaWNhbCIgaHJlZj0iaHR0cHM6Ly9tZWRpY2FyZS5nb2hlYWx0aC5jb20iPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSJXZSBoZWxwIHBlb3BsZSBvbiBNZWRpY2FyZSBmaW5kIHNhdmluZ3MiPjx0aXRsZT5Hb0hlYWx0aCB8IEdldCBNb3JlIE1lZGljYXJlIEJlbmVmaXRzPC90aXRsZT4&pv=b61e8b82-d60b-45dd-8dbf-dcceab4b539b HTTP/1.1Host: rp.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://medicare.gohealth.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /unifiedPixel?au=false&bust=004892440068507509&referrer=https%3A%2F%2Fsyndicatedsearch.goog%2F&marketerId=003678ec07dcd7129be54125730b23cabc&name=PAGE_VIEW&dl=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&g=0&zone=all&obApiVersion=1.1&obtpVersion=2.18.158 HTTP/1.1Host: tr.outbrain.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger;event-sourceReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /modules.60031afbf51fb3e88a5b.js HTTP/1.1Host: script.hotjar.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a-06nm.min.js HTTP/1.1Host: b-code.liadm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sa.jpeg HTTP/1.1Host: tags.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://medicare.gohealth.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sa.css HTTP/1.1Host: tags.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCC0tIG8BjABOgT87-jmQgQ_QCZc.O3M9N%2FjNocxDAkJgoeKCY4eteFsk5sYBegvZtk1NJzo; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCC0tIG8BjABOgT87-jmQgQ_QCZc.O3M9N%2FjNocxDAkJgoeKCY4eteFsk5sYBegvZtk1NJzo
Source: global traffic	HTTP traffic detected: GET /j?dtstmp=1736464947236&aid=a-06nm&se=e30&duid=268be191801d--01jh6p0nx115ahtaqq7ymqjjak&tv=v3.6.0&pu=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&wpn=lc-bundle&wpv=v3.6.0&refr=https%3A%2F%2Fsyndicatedsearch.goog%2F&cd=.gohealth.com&c=PGxpbmsgcmVsPSJjYW5vbmljYWwiIGhyZWY9Imh0dHBzOi8vbWVkaWNhcmUuZ29oZWFsdGguY29tIj48bGluayByZWw9ImNhbm9uaWNhbCIgaHJlZj0iaHR0cHM6Ly9tZWRpY2FyZS5nb2hlYWx0aC5jb20iPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSJXZSBoZWxwIHBlb3BsZSBvbiBNZWRpY2FyZSBmaW5kIHNhdmluZ3MiPjx0aXRsZT5Hb0hlYWx0aCB8IEdldCBNb3JlIE1lZGljYXJlIEJlbmVmaXRzPC90aXRsZT4&pv=b61e8b82-d60b-45dd-8dbf-dcceab4b539b&n3pc=true HTTP/1.1Host: rp.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://medicare.gohealth.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=1dabb312-2853-42f0-9d67-1eb0b9e15f00
Source: global traffic	HTTP traffic detected: GET /saq_pxl?uid=jBubxyJLG1_zSNqfyTn1Aw&is_js=true&landing_url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&t=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&tip=r2VBjeI2kzLuvBdN1PsckXCwQNMHVWQ9n_4OeHoRHDU&host=https%3A%2F%2Fmedicare.gohealth.com&l_src=syndicatedsearch.goog&l_src_d=2025-01-09T23%3A22%3A27.616Z&u_src=&u_src_d=&shop=false&sa-user-id-v3=s%253AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCC0tIG8BjABOgT87-jmQgQ_QCZc.O3M9N%252FjNocxDAkJgoeKCY4eteFsk5sYBegvZtk1NJzo&sa-user-id-v2=s%253AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%252Bwm4OfOz4n4F%252FPoM&sa-user-id=s%253A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%252FL7%252F67hBh4a3iUq5VBv7eLYiyAmcJqNB%252B4cJQ HTTP/1.1Host: tags.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://medicare.gohealth.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCC0tIG8BjABOgT87-jmQgQ_QCZc.O3M9N%2FjNocxDAkJgoeKCY4eteFsk5sYBegvZtk1NJzo; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCC0tIG8BjABOgT87-jmQgQ_QCZc.O3M9N%2FjNocxDAkJgoeKCY4eteFsk5sYBegvZtk1NJzo
Source: global traffic	HTTP traffic detected: GET /medicare?link_id=18767&irclickid=RFq2geQ7sxyKW-gX4FUVr1MvUks0BqzgU257TY0&sharedid=&irpid=0&irgwc=1 HTTP/1.1Host: medicare.gohealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: form_url=%2Fmedicare-marketplace; gh-session-id=fc99a7c8-08f9-4875-be9f-f97a9821de17; _gcl_gs=2.1.k5$i1736464937$u41793726; _gcl_au=1.1.1804017665.1736464944; optimizelyEndUserId=oeu1736464944079r0.8329921030541232; optimizelySession=1736464944099; _gcl_aw=GCL.1736464946.EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE; _ga=GA1.1.1197952561.1736464946; _ga_G99G7L25WL=GS1.1.1736464945.1.0.1736464945.60.0.0; IR_gbd=gohealth.com; IR_21320=1736464946314%7Cc-42778%7C1736464946314%7C%7C; _uetsid=96720a30cee011ef9fd7a32c31084dbc; _uetvid=967229b0cee011efae4b7b3fd2cccb6c; IR_PI=97672532-cee0-11ef-af94-ef1d83635a26%7C1736464946314; _li_dcdm_c=.gohealth.com; _lc2_fpi=268be191801d--01jh6p0nx115ahtaqq7ymqjjak; sa-r-source=syndicatedsearch.goog; sa-r-date=2025-01-09T23:22:27.616Z; sa-user-id=s%253A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%252FL7%252F67hBh4a3iUq5VBv7eLYiyAmcJqNB%252B4cJQ; sa-user-id-v2=s%253AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%252Bwm4OfOz4n4F%252FPoM; sa-user-id-v3=s%253AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCC0tIG8BjABOgT87-jmQgQ_QCZc.O3M9N%252FjNocxDAkJgoeKCY4eteFsk5sYBegvZtk1NJzo; _tq_id.TV-5427272736-1.8925=30d50068786238ee.1736464948.0.1736464948..
Source: global traffic	HTTP traffic detected: GET /topics_api HTTP/1.1Host: psb.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /unifiedPixel?au=false&bust=004892440068507509&referrer=https%3A%2F%2Fsyndicatedsearch.goog%2F&marketerId=003678ec07dcd7129be54125730b23cabc&name=PAGE_VIEW&dl=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&g=0&zone=all&obApiVersion=1.1&obtpVersion=2.18.158 HTTP/1.1Host: tr.outbrain.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/?return=&cid=21320&tpsync=no&auth= HTTP/1.1Host: www.ojrq.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1190412/trc/3/json?tim=1736464947180&data=%7B%22id%22%3A215%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1736464947162%2C%22cv%22%3A%2220250102-8-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fmedicare.gohealth.com%2F%22%2C%22e%22%3A%22https%3A%2F%2Fsyndicatedsearch.goog%2F%22%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dgohealthnew-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1736464947178%2C%22ref%22%3A%22https%3A%2F%2Fsyndicatedsearch.goog%2F%22%2C%22item-url%22%3A%22https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE%22%2C%22tos%22%3A3%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22ler%22%3A%22other%22%2C%22it%22%3A%22JS_PIXEL%22%2C%22supv%22%3Atrue%7D%2C%22pa%22%3A%7B%22su%22%3Atrue%7D%2C%22psb%22%3Atrue%7D&pubit=i HTTP/1.1Host: trc.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cachedClickId?marketerId=003678ec07dcd7129be54125730b23cabc HTTP/1.1Host: tr.outbrain.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signals/config/753743931636742?v=2.9.179&r=stable&domain=medicare.gohealth.com&hme=b8122d5d96cd6f542162ba4f497489972d1ebe228d24c39d34f560e30ae932ce&ex_m=70%2C122%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C173%2C176%2C188%2C184%2C185%2C187%2C29%2C101%2C53%2C77%2C186%2C168%2C171%2C181%2C182%2C189%2C132%2C41%2C191%2C192%2C34%2C144%2C15%2C50%2C197%2C196%2C134%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C169%2C172%2C141%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1Host: connect.facebook.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events.js HTTP/1.1Host: tags.srv.stackadapt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCC0tIG8BjABOgT87-jmQgQ_QCZc.O3M9N%2FjNocxDAkJgoeKCY4eteFsk5sYBegvZtk1NJzo; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCC0tIG8BjABOgT87-jmQgQ_QCZc.O3M9N%2FjNocxDAkJgoeKCY4eteFsk5sYBegvZtk1NJzo
Source: global traffic	HTTP traffic detected: GET /sa.jpeg HTTP/1.1Host: tags.srv.stackadapt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCC0tIG8BjABOgT87-jmQgQ_QCZc.O3M9N%2FjNocxDAkJgoeKCY4eteFsk5sYBegvZtk1NJzo; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCC0tIG8BjABOgT87-jmQgQ_QCZc.O3M9N%2FjNocxDAkJgoeKCY4eteFsk5sYBegvZtk1NJzo
Source: global traffic	HTTP traffic detected: GET /tv2track.js HTTP/1.1Host: collector-47776.us.tvsquared.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j?dtstmp=1736464947236&aid=a-06nm&se=e30&duid=268be191801d--01jh6p0nx115ahtaqq7ymqjjak&tv=v3.6.0&pu=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&wpn=lc-bundle&wpv=v3.6.0&refr=https%3A%2F%2Fsyndicatedsearch.goog%2F&cd=.gohealth.com&c=PGxpbmsgcmVsPSJjYW5vbmljYWwiIGhyZWY9Imh0dHBzOi8vbWVkaWNhcmUuZ29oZWFsdGguY29tIj48bGluayByZWw9ImNhbm9uaWNhbCIgaHJlZj0iaHR0cHM6Ly9tZWRpY2FyZS5nb2hlYWx0aC5jb20iPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSJXZSBoZWxwIHBlb3BsZSBvbiBNZWRpY2FyZSBmaW5kIHNhdmluZ3MiPjx0aXRsZT5Hb0hlYWx0aCB8IEdldCBNb3JlIE1lZGljYXJlIEJlbmVmaXRzPC90aXRsZT4&pv=b61e8b82-d60b-45dd-8dbf-dcceab4b539b&n3pc=true HTTP/1.1Host: rp.liadm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=1dabb312-2853-42f0-9d67-1eb0b9e15f00; lidid=1dabb312-2853-42f0-9d67-1eb0b9e15f00
Source: global traffic	HTTP traffic detected: GET /p/?return=&cid=21320&tpsync=no&auth= HTTP/1.1Host: www.ojrq.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: brwsr=98d9c7d6-cee0-11ef-a81b-7bf008f49174
Source: global traffic	HTTP traffic detected: GET /1190412/trc/3/json?tim=1736464947180&data=%7B%22id%22%3A215%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1736464947162%2C%22cv%22%3A%2220250102-8-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fmedicare.gohealth.com%2F%22%2C%22e%22%3A%22https%3A%2F%2Fsyndicatedsearch.goog%2F%22%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dgohealthnew-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1736464947178%2C%22ref%22%3A%22https%3A%2F%2Fsyndicatedsearch.goog%2F%22%2C%22item-url%22%3A%22https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE%22%2C%22tos%22%3A3%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22ler%22%3A%22other%22%2C%22it%22%3A%22JS_PIXEL%22%2C%22supv%22%3Atrue%7D%2C%22pa%22%3A%7B%22su%22%3Atrue%7D%2C%22psb%22%3Atrue%7D&pubit=i HTTP/1.1Host: trc.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=8a63bd1e-8899-49af-97e3-4d55cc239acf-tucte79dfb6
Source: global traffic	HTTP traffic detected: GET /saq_pxl?uid=jBubxyJLG1_zSNqfyTn1Aw&is_js=true&landing_url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&t=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&tip=r2VBjeI2kzLuvBdN1PsckXCwQNMHVWQ9n_4OeHoRHDU&host=https%3A%2F%2Fmedicare.gohealth.com&l_src=syndicatedsearch.goog&l_src_d=2025-01-09T23%3A22%3A27.616Z&u_src=&u_src_d=&shop=false&sa-user-id-v3=s%253AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCC0tIG8BjABOgT87-jmQgQ_QCZc.O3M9N%252FjNocxDAkJgoeKCY4eteFsk5sYBegvZtk1NJzo&sa-user-id-v2=s%253AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%252Bwm4OfOz4n4F%252FPoM&sa-user-id=s%253A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%252FL7%252F67hBh4a3iUq5VBv7eLYiyAmcJqNB%252B4cJQ HTTP/1.1Host: tags.srv.stackadapt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCC0tIG8BjABOgT87-jmQgQ_QCZc.O3M9N%2FjNocxDAkJgoeKCY4eteFsk5sYBegvZtk1NJzo; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCC0tIG8BjABOgT87-jmQgQ_QCZc.O3M9N%2FjNocxDAkJgoeKCY4eteFsk5sYBegvZtk1NJzo
Source: global traffic	HTTP traffic detected: GET /cachedClickId?marketerId=003678ec07dcd7129be54125730b23cabc HTTP/1.1Host: tr.outbrain.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tv2track.php?action_name=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&idsite=TV-5427272736-1&rec=1&r=063113&h=18&m=22&s=28&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&urlref=https%3A%2F%2Fsyndicatedsearch.goog%2F&_id=30d50068786238ee&_idts=1736464948&_idvc=0&_idn=1&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=394 HTTP/1.1Host: collector-47776.us.tvsquared.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/408830293/?random=1736464945641&cv=11&fst=1736463600000&bg=ffffff&guid=ON&async=1&gtm=45be5170z8841278742za201zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7d3KtgmnjlAxryj8dEAb1_RN-6f5dwNfB_8l-M9yXgDp4dRg7a&random=1349857119&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1042882457/?random=1736464945734&cv=11&fst=1736463600000&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548z8841278742za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7doJKWvFOF-xeG3o3LZb3EMQxeqcJdkthT16DJZNlTTJk4KIf3&random=646483866&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=753743931636742&ev=PageView&dl=https%3A%2F%2Fmedicare.gohealth.com&rl=https%3A%2F%2Fsyndicatedsearch.goog&if=false&ts=1736464948624&sw=1280&sh=1024&v=2.9.179&r=stable&ec=0&o=4124&fbp=fb.1.1736464948620.226565617121219778&pm=1&hrl=fb43e0&ler=other&cdl=API_unavailable&it=1736464945616&coo=false&cs_cc=1&cas=7825542554162229%2C7488615677882261%2C7534444600001959%2C7421858761167733%2C7465458423536507%2C9244211778929530%2C5564367660249982&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tv2track.php?action_name=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&idsite=TV-5427272736-1&rec=1&r=063113&h=18&m=22&s=28&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&urlref=https%3A%2F%2Fsyndicatedsearch.goog%2F&_id=30d50068786238ee&_idts=1736464948&_idvc=0&_idn=1&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=394 HTTP/1.1Host: collector-47776.us.tvsquared.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=753743931636742&ev=PageView&dl=https%3A%2F%2Fmedicare.gohealth.com&rl=https%3A%2F%2Fsyndicatedsearch.goog&if=false&ts=1736464948624&sw=1280&sh=1024&v=2.9.179&r=stable&ec=0&o=4124&fbp=fb.1.1736464948620.226565617121219778&pm=1&hrl=fb43e0&ler=other&cdl=API_unavailable&it=1736464945616&coo=false&cs_cc=1&cas=7825542554162229%2C7488615677882261%2C7534444600001959%2C7421858761167733%2C7465458423536507%2C9244211778929530%2C5564367660249982&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: trigger;navigation-source, event-sourceReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tag/uet/247010167?conversions=1 HTTP/1.1Host: www.clarity.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=053df85494334621814d16ef9c35129f.20250109.20260109
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/408830293/?random=1736464945641&cv=11&fst=1736463600000&bg=ffffff&guid=ON&async=1&gtm=45be5170z8841278742za201zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7d3KtgmnjlAxryj8dEAb1_RN-6f5dwNfB_8l-M9yXgDp4dRg7a&random=1349857119&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1190412/log/3/unip?en=pre_d_eng_tb&tos=2026&scd=0&ssd=1&est=1736464947175&ver=36&isls=true&src=i&invt=1500&msa=2317&rv=1&tim=1736464948731&mrir=to&vi=1736464947162&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&cv=20250102-8-RELEASE&item-url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ler=other&it=JS_PIXEL HTTP/1.1Host: trc-events.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: triggersec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://medicare.gohealth.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=8a63bd1e-8899-49af-97e3-4d55cc239acf-tucte79dfb6; t_pt_gid=8a63bd1e-8899-49af-97e3-4d55cc239acf-tucte79dfb6; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1042882457/?random=1736464945734&cv=11&fst=1736463600000&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548z8841278742za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7doJKWvFOF-xeG3o3LZb3EMQxeqcJdkthT16DJZNlTTJk4KIf3&random=646483866&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tr/?id=753743931636742&ev=PageView&dl=https%3A%2F%2Fmedicare.gohealth.com&rl=https%3A%2F%2Fsyndicatedsearch.goog&if=false&ts=1736464948624&sw=1280&sh=1024&v=2.9.179&r=stable&ec=0&o=4124&fbp=fb.1.1736464948620.226565617121219778&pm=1&hrl=fb43e0&ler=other&cdl=API_unavailable&it=1736464945616&coo=false&cs_cc=1&cas=7825542554162229%2C7488615677882261%2C7534444600001959%2C7421858761167733%2C7465458423536507%2C9244211778929530%2C5564367660249982&rqm=GET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/0.7.59/clarity.js HTTP/1.1Host: www.clarity.msConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CLID=053df85494334621814d16ef9c35129f.20250109.20260109
Source: global traffic	HTTP traffic detected: GET /nr-rum-1.278.1.min.js HTTP/1.1Host: js-agent.newrelic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://medicare.gohealth.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy_sandbox/pixel/register/trigger/?id=753743931636742&ev=PageView&dl=https%3A%2F%2Fmedicare.gohealth.com&rl=https%3A%2F%2Fsyndicatedsearch.goog&if=false&ts=1736464948624&sw=1280&sh=1024&v=2.9.179&r=stable&ec=0&o=4124&fbp=fb.1.1736464948620.226565617121219778&pm=1&hrl=fb43e0&ler=other&cdl=API_unavailable&it=1736464945616&coo=false&cs_cc=1&cas=7825542554162229%2C7488615677882261%2C7534444600001959%2C7421858761167733%2C7465458423536507%2C9244211778929530%2C5564367660249982&rqm=FGET HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lead-generation-sites/medicare/favicon.1631190026.ico HTTP/1.1Host: cdn.gohealth.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_gs=2.1.k5$i1736464937$u41793726; _gcl_au=1.1.1804017665.1736464944; optimizelyEndUserId=oeu1736464944079r0.8329921030541232; optimizelySession=1736464944099; _gcl_aw=GCL.1736464946.EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE; _ga=GA1.1.1197952561.1736464946; _ga_G99G7L25WL=GS1.1.1736464945.1.0.1736464945.60.0.0; IR_gbd=gohealth.com; IR_21320=1736464946314%7Cc-42778%7C1736464946314%7C%7C; _uetsid=96720a30cee011ef9fd7a32c31084dbc; _uetvid=967229b0cee011efae4b7b3fd2cccb6c; IR_PI=97672532-cee0-11ef-af94-ef1d83635a26%7C1736464946314; _li_dcdm_c=.gohealth.com; _lc2_fpi=268be191801d--01jh6p0nx115ahtaqq7ymqjjak; _tq_id.TV-5427272736-1.8925=30d50068786238ee.1736464948.0.1736464948..; _fbp=fb.1.1736464948620.226565617121219778; _clck=11hheu6%7C2%7Cfsf%7C0%7C1835
Source: global traffic	HTTP traffic detected: GET /nr-rum-1.278.1.min.js HTTP/1.1Host: js-agent.newrelic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/event/lead-generation_consumer_loads-page HTTP/1.1Host: medicare.gohealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: form_url=%2Fmedicare-marketplace; gh-session-id=fc99a7c8-08f9-4875-be9f-f97a9821de17; _gcl_gs=2.1.k5$i1736464937$u41793726; _gcl_au=1.1.1804017665.1736464944; optimizelyEndUserId=oeu1736464944079r0.8329921030541232; optimizelySession=1736464944099; _gcl_aw=GCL.1736464946.EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE; _ga=GA1.1.1197952561.1736464946; _ga_G99G7L25WL=GS1.1.1736464945.1.0.1736464945.60.0.0; IR_gbd=gohealth.com; IR_21320=1736464946314%7Cc-42778%7C1736464946314%7C%7C; _uetsid=96720a30cee011ef9fd7a32c31084dbc; _uetvid=967229b0cee011efae4b7b3fd2cccb6c; IR_PI=97672532-cee0-11ef-af94-ef1d83635a26%7C1736464946314; _li_dcdm_c=.gohealth.com; _lc2_fpi=268be191801d--01jh6p0nx115ahtaqq7ymqjjak; sa-r-source=syndicatedsearch.goog; sa-r-date=2025-01-09T23:22:27.616Z; sa-user-id=s%253A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%252FL7%252F67hBh4a3iUq5VBv7eLYiyAmcJqNB%252B4cJQ; sa-user-id-v2=s%253AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%252Bwm4OfOz4n4F%252FPoM; sa-user-id-v3=s%253AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCC0tIG8BjABOgT87-jmQgQ_QCZc.O3M9N%252FjNocxDAkJgoeKCY4eteFsk5sYBegvZtk1NJzo; _tq_id.TV-5427272736-1.8925=30d50068786238ee.1736464948.0.1736464948..; _fbp=fb.1.1736464948620.226565617121219778; dicbo_id=%7B%22dicbo_fetch%22%3A1736464949477%7D; _clck=11hheu6%7C2%7Cfsf%7C0%7C1835; _clsk=1txogt6%7C1736464952227%7C1%7C0%7Cz.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /lead-generation-sites/medicare/favicon.1631190026.ico HTTP/1.1Host: cdn.gohealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_gs=2.1.k5$i1736464937$u41793726; _gcl_au=1.1.1804017665.1736464944; optimizelyEndUserId=oeu1736464944079r0.8329921030541232; optimizelySession=1736464944099; _gcl_aw=GCL.1736464946.EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE; _ga=GA1.1.1197952561.1736464946; _ga_G99G7L25WL=GS1.1.1736464945.1.0.1736464945.60.0.0; IR_gbd=gohealth.com; IR_21320=1736464946314%7Cc-42778%7C1736464946314%7C%7C; _uetsid=96720a30cee011ef9fd7a32c31084dbc; _uetvid=967229b0cee011efae4b7b3fd2cccb6c; IR_PI=97672532-cee0-11ef-af94-ef1d83635a26%7C1736464946314; _li_dcdm_c=.gohealth.com; _lc2_fpi=268be191801d--01jh6p0nx115ahtaqq7ymqjjak; _tq_id.TV-5427272736-1.8925=30d50068786238ee.1736464948.0.1736464948..; _fbp=fb.1.1736464948620.226565617121219778; _clck=11hheu6%7C2%7Cfsf%7C0%7C1835; _clsk=1txogt6%7C1736464952227%7C1%7C0%7Cz.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /lead-generation-sites/common/icon_warning.1726478862.svg HTTP/1.1Host: cdn.qa.gohealth.xyzConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1190412/log/3/unip?en=pre_d_eng_tb&tos=4562&scd=0&ssd=1&est=1736464947175&ver=36&isls=true&src=i&invt=3000&msa=2317&rv=1&tim=1736464951737&mrir=tto&vi=1736464947162&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&cv=20250102-8-RELEASE&item-url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ler=other&it=JS_PIXEL HTTP/1.1Host: trc-events.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: triggersec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://medicare.gohealth.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=8a63bd1e-8899-49af-97e3-4d55cc239acf-tucte79dfb6; t_pt_gid=8a63bd1e-8899-49af-97e3-4d55cc239acf-tucte79dfb6; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /td/rul/1042882457?random=1736464953014&cv=11&fst=1736464953014&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dform_start HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmSODJ-CPub7ODlAuRWZw4DKX4hvH0D7aCM9m5vQFzyFdOTShifpA_J-mwK
Source: global traffic	HTTP traffic detected: GET /1/NRBR-b3c45bbe1222aa00f54?a=1431935965&v=1.278.1&to=Z1VbZUVUDBECUUBZCV4fblRVcxADDldDXxRbZUtYGHsHGhdYRx8hdWQWHlpQBgsAU0ZVS11RS1pSQRIOAlFR&rst=15502&ck=0&s=ea6f09a0c0d66cfe&ref=https://medicare.gohealth.com/medicare-marketplace&ptid=7890b4df395e3836&tt=24640de1b395e70c&ap=20.606372&be=2078&fe=12613&dc=2989&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1736464936927,%22n%22:0,%22f%22:1151,%22dn%22:1166,%22dne%22:1232,%22c%22:1232,%22s%22:1235,%22ce%22:1870,%22rq%22:1870,%22rp%22:2079,%22rpe%22:2265,%22di%22:2266,%22ds%22:5067,%22de%22:5067,%22dc%22:14681,%22l%22:14689,%22le%22:14691%7D,%22navigation%22:%7B%7D%7D&fp=3463&fcp=3463 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/1042882457?random=1736464953044&cv=11&fst=1736464953044&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dform_submit HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmSODJ-CPub7ODlAuRWZw4DKX4hvH0D7aCM9m5vQFzyFdOTShifpA_J-mwK
Source: global traffic	HTTP traffic detected: GET /ccm/form-data/1042882457?gtm=45je5170p3v875571548za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&npa=0&frm=0&gclgs=5&gclst=16022&gcllp=41793726&gclaw=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_mode=a&em=tv.1 HTTP/1.1Host: google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.googletagmanager.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/form-data/1042882457?gtm=45je5170p3v875571548za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&npa=0&frm=0&gclgs=5&gclst=16047&gcllp=41793726&gclaw=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_mode=a&em=tv.1 HTTP/1.1Host: google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.googletagmanager.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ccm/form-data/1042882457?gtm=45je5170p3v875571548za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&npa=0&frm=0&gclgs=5&gclst=16052&gcllp=41793726&gclaw=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_mode=a&em=tv.1 HTTP/1.1Host: google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.googletagmanager.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v1/event/lead-generation_consumer_clicks-lead-form HTTP/1.1Host: medicare.gohealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: form_url=%2Fmedicare-marketplace; gh-session-id=fc99a7c8-08f9-4875-be9f-f97a9821de17; _gcl_gs=2.1.k5$i1736464937$u41793726; _gcl_au=1.1.1804017665.1736464944; optimizelyEndUserId=oeu1736464944079r0.8329921030541232; optimizelySession=1736464944099; _gcl_aw=GCL.1736464946.EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE; _ga=GA1.1.1197952561.1736464946; _ga_G99G7L25WL=GS1.1.1736464945.1.0.1736464945.60.0.0; IR_gbd=gohealth.com; IR_21320=1736464946314%7Cc-42778%7C1736464946314%7C%7C; _uetsid=96720a30cee011ef9fd7a32c31084dbc; _uetvid=967229b0cee011efae4b7b3fd2cccb6c; IR_PI=97672532-cee0-11ef-af94-ef1d83635a26%7C1736464946314; _li_dcdm_c=.gohealth.com; _lc2_fpi=268be191801d--01jh6p0nx115ahtaqq7ymqjjak; sa-r-source=syndicatedsearch.goog; sa-r-date=2025-01-09T23:22:27.616Z; sa-user-id=s%253A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%252FL7%252F67hBh4a3iUq5VBv7eLYiyAmcJqNB%252B4cJQ; sa-user-id-v2=s%253AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%252Bwm4OfOz4n4F%252FPoM; sa-user-id-v3=s%253AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCC0tIG8BjABOgT87-jmQgQ_QCZc.O3M9N%252FjNocxDAkJgoeKCY4eteFsk5sYBegvZtk1NJzo; _tq_id.TV-5427272736-1.8925=30d50068786238ee.1736464948.0.1736464948..; _fbp=fb.1.1736464948620.226565617121219778; dicbo_id=%7B%22dicbo_fetch%22%3A1736464949477%7D; _clck=11hheu6%7C2%7Cfsf%7C0%7C1835; _clsk=1txogt6%7C1736464952227%7C1%7C0%7Cz.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /api/v1/event/lead-generation_consumer_loads-lead-form-action HTTP/1.1Host: medicare.gohealth.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: form_url=%2Fmedicare-marketplace; gh-session-id=fc99a7c8-08f9-4875-be9f-f97a9821de17; _gcl_gs=2.1.k5$i1736464937$u41793726; _gcl_au=1.1.1804017665.1736464944; optimizelyEndUserId=oeu1736464944079r0.8329921030541232; optimizelySession=1736464944099; _gcl_aw=GCL.1736464946.EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE; _ga=GA1.1.1197952561.1736464946; _ga_G99G7L25WL=GS1.1.1736464945.1.0.1736464945.60.0.0; IR_gbd=gohealth.com; IR_21320=1736464946314%7Cc-42778%7C1736464946314%7C%7C; _uetsid=96720a30cee011ef9fd7a32c31084dbc; _uetvid=967229b0cee011efae4b7b3fd2cccb6c; IR_PI=97672532-cee0-11ef-af94-ef1d83635a26%7C1736464946314; _li_dcdm_c=.gohealth.com; _lc2_fpi=268be191801d--01jh6p0nx115ahtaqq7ymqjjak; sa-r-source=syndicatedsearch.goog; sa-r-date=2025-01-09T23:22:27.616Z; sa-user-id=s%253A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%252FL7%252F67hBh4a3iUq5VBv7eLYiyAmcJqNB%252B4cJQ; sa-user-id-v2=s%253AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%252Bwm4OfOz4n4F%252FPoM; sa-user-id-v3=s%253AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCC0tIG8BjABOgT87-jmQgQ_QCZc.O3M9N%252FjNocxDAkJgoeKCY4eteFsk5sYBegvZtk1NJzo; _tq_id.TV-5427272736-1.8925=30d50068786238ee.1736464948.0.1736464948..; _fbp=fb.1.1736464948620.226565617121219778; dicbo_id=%7B%22dicbo_fetch%22%3A1736464949477%7D; _clck=11hheu6%7C2%7Cfsf%7C0%7C1835; _clsk=1txogt6%7C1736464952227%7C1%7C0%7Cz.clarity.ms%2Fcollect
Source: global traffic	HTTP traffic detected: GET /lead-generation-sites/common/icon_warning.1726478862.svg HTTP/1.1Host: cdn.qa.gohealth.xyzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1042882457/?random=1736464953014&cv=11&fst=1736463600000&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dform_start&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7dlTH1zZDvLwAfFOGaclStRHhV_qzkAchGBfn4QyJO8e-tNwAr&random=2710097614&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1042882457/?random=1736464953044&cv=11&fst=1736463600000&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dform_submit&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7d_K6bdBmkn1tefsOcsD-ggzFWd7gL2D9s6NnBOUA5l2Jfqefp&random=3285983588&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1042882457/?random=1736464953014&cv=11&fst=1736463600000&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dform_start&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7dlTH1zZDvLwAfFOGaclStRHhV_qzkAchGBfn4QyJO8e-tNwAr&random=2710097614&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1042882457/?random=1736464953044&cv=11&fst=1736463600000&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dform_submit&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7d_K6bdBmkn1tefsOcsD-ggzFWd7gL2D9s6NnBOUA5l2Jfqefp&random=3285983588&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js_tracking?url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace&uid=jBubxyJLG1_zSNqfyTn1Aw&v=1&host=https%3A%2F%2Fmedicare.gohealth.com&l_src=syndicatedsearch.goog&l_src_d=2025-01-09T23%3A22%3A27.616Z&u_src=&u_src_d=&shop=false HTTP/1.1Host: tags.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://medicare.gohealth.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCC0tIG8BjABOgT87-jmQgQ_QCZc.O3M9N%2FjNocxDAkJgoeKCY4eteFsk5sYBegvZtk1NJzo; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCC0tIG8BjABOgT87-jmQgQ_QCZc.O3M9N%2FjNocxDAkJgoeKCY4eteFsk5sYBegvZtk1NJzo
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obseu.netgreencolumn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
Source: global traffic	HTTP traffic detected: GET /1190412/log/3/unip?en=pre_d_eng_tb&tos=10577&scd=0&ssd=1&est=1736464947175&ver=36&isls=true&src=i&invt=6000&msa=2317&rv=1&tim=1736464957752&mrir=tto&vi=1736464947162&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&cv=20250102-8-RELEASE&item-url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ler=other&it=JS_PIXEL HTTP/1.1Host: trc-events.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: triggersec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://medicare.gohealth.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=8a63bd1e-8899-49af-97e3-4d55cc239acf-tucte79dfb6; t_pt_gid=8a63bd1e-8899-49af-97e3-4d55cc239acf-tucte79dfb6; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /td/rul/1042882457?random=1736464965083&cv=11&fst=1736464965083&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dform_submit HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmSODJ-CPub7ODlAuRWZw4DKX4hvH0D7aCM9m5vQFzyFdOTShifpA_J-mwK
Source: global traffic	HTTP traffic detected: GET /pagead/form-data/1042882457?gtm=45je5170p3v875571548za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&npa=0&frm=0&gclgs=5&gclst=28089&gcllp=41793726&gclaw=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_mode=a&em=tv.1 HTTP/1.1Host: google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.googletagmanager.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ccm/form-data/1042882457?gtm=45je5170p3v875571548za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&npa=0&frm=0&gclgs=5&gclst=28092&gcllp=41793726&gclaw=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_mode=a&em=tv.1 HTTP/1.1Host: google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.googletagmanager.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1042882457/?random=1736464965083&cv=11&fst=1736463600000&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dform_submit&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7dOX-7kNtpfdRoHY9yyJoCWCu1AoRXZ3QYjF8S2xj6cvWJb_gN&random=2803979459&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1042882457/?random=1736464965083&cv=11&fst=1736463600000&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dform_submit&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7dOX-7kNtpfdRoHY9yyJoCWCu1AoRXZ3QYjF8S2xj6cvWJb_gN&random=2803979459&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1190412/log/3/unip?en=pre_d_eng_tb&tos=22608&scd=0&ssd=1&est=1736464947175&ver=36&isls=true&src=i&invt=12000&msa=2317&rv=1&tim=1736464969877&mrir=tto&vi=1736464947162&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&cv=20250102-8-RELEASE&item-url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ler=other&it=JS_PIXEL HTTP/1.1Host: trc-events.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Attribution-Reporting-Eligible: triggersec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://medicare.gohealth.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: t_gid=8a63bd1e-8899-49af-97e3-4d55cc239acf-tucte79dfb6; t_pt_gid=8a63bd1e-8899-49af-97e3-4d55cc239acf-tucte79dfb6; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /td/rul/1042882457?random=1736464974036&cv=11&fst=1736464974036&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dform_submit HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmSODJ-CPub7ODlAuRWZw4DKX4hvH0D7aCM9m5vQFzyFdOTShifpA_J-mwK
Source: global traffic	HTTP traffic detected: GET /pagead/form-data/1042882457?gtm=45je5170p3v875571548za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&npa=0&frm=0&gclgs=5&gclst=37040&gcllp=41793726&gclaw=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_mode=a&em=tv.1 HTTP/1.1Host: google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.googletagmanager.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ccm/form-data/1042882457?gtm=45je5170p3v875571548za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&npa=0&frm=0&gclgs=5&gclst=37044&gcllp=41793726&gclaw=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&ec_mode=a&em=tv.1 HTTP/1.1Host: google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.googletagmanager.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1042882457/?random=1736464974036&cv=11&fst=1736463600000&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dform_submit&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7dOptxkzB6kDPoGEn_x-lzs9F8knRDbnnpBUCk_y2X3f7YcJVt&random=548978335&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://medicare.gohealth.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1042882457/?random=1736464974036&cv=11&fst=1736463600000&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dform_submit&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQCa7L7dOptxkzB6kDPoGEn_x-lzs9F8knRDbnnpBUCk_y2X3f7YcJVt&random=548978335&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /events/1/NRBR-b3c45bbe1222aa00f54?a=1431935965&v=1.278.1&to=Z1VbZUVUDBECUUBZCV4fblRVcxADDldDXxRbZUtYGHsHGhdYRx8hdWQWHlpQBgsAU0ZVS11RS1pSQRIOAlFR&rst=46263&ck=0&s=ea6f09a0c0d66cfe&ref=https://medicare.gohealth.com/medicare-marketplace&ptid=7890b4df395e3836 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: api.myuhchvision.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/sale_form.js HTTP/1.1Host: c.parkingcrew.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://api.myuhchvision.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=myuhchvision.com&toggle=browserjs&uid=MTczNjQ2NDkwOS43NDM2OjQ3ZGQ4MDVlNDY3ODk5YzdhZmE5ODJiZWIxZTNjZGFmZDhjNDExNzliNWIxNWJjNzM0ZjRhZDI1NGI5MTFjMTE6Njc4MDVhMGRiNTg3Zg%3D%3D HTTP/1.1Host: api.myuhchvision.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://api.myuhchvision.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/sale_form.js HTTP/1.1Host: c.parkingcrew.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1Host: d38psrni17bvxu.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://api.myuhchvision.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=myuhchvision.com&toggle=browserjs&uid=MTczNjQ2NDkwOS43NDM2OjQ3ZGQ4MDVlNDY3ODk5YzdhZmE5ODJiZWIxZTNjZGFmZDhjNDExNzliNWIxNWJjNzM0ZjRhZDI1NGI5MTFjMTE6Njc4MDVhMGRiNTg3Zg%3D%3D HTTP/1.1Host: api.myuhchvision.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ls.php?t=67805a0d&token=97d63dc638987051951f6cde063e6a972a611362 HTTP/1.1Host: api.myuhchvision.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://api.myuhchvision.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Port_Lligat_Slab/latin.woff2 HTTP/1.1Host: d38psrni17bvxu.cloudfront.netConnection: keep-aliveOrigin: http://api.myuhchvision.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://api.myuhchvision.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1Host: d38psrni17bvxu.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=myuhchvision.com&caf=1&toggle=answercheck&answer=yes&uid=MTczNjQ2NDkwOS43NDM2OjQ3ZGQ4MDVlNDY3ODk5YzdhZmE5ODJiZWIxZTNjZGFmZDhjNDExNzliNWIxNWJjNzM0ZjRhZDI1NGI5MTFjMTE6Njc4MDVhMGRiNTg3Zg%3D%3D HTTP/1.1Host: api.myuhchvision.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://api.myuhchvision.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _cq_duid=1.1736464910.0Pdysz9c9e6s7CS9; _cq_suid=1.1736464910.8hbiYeRpDfn2XE6U; __gsas=ID=c2d96085edb8c52a:T=1736464913:RT=1736464913:S=ALNI_MYPZC8TKmtU-_fM69ccp9F25OCunQ
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: api.myuhchvision.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://api.myuhchvision.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _cq_duid=1.1736464910.0Pdysz9c9e6s7CS9; _cq_suid=1.1736464910.8hbiYeRpDfn2XE6U; __gsas=ID=c2d96085edb8c52a:T=1736464913:RT=1736464913:S=ALNI_MYPZC8TKmtU-_fM69ccp9F25OCunQ
Source: global traffic	HTTP traffic detected: GET /track.php?domain=myuhchvision.com&caf=1&toggle=answercheck&answer=yes&uid=MTczNjQ2NDkwOS43NDM2OjQ3ZGQ4MDVlNDY3ODk5YzdhZmE5ODJiZWIxZTNjZGFmZDhjNDExNzliNWIxNWJjNzM0ZjRhZDI1NGI5MTFjMTE6Njc4MDVhMGRiNTg3Zg%3D%3D HTTP/1.1Host: api.myuhchvision.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _cq_duid=1.1736464910.0Pdysz9c9e6s7CS9; _cq_suid=1.1736464910.8hbiYeRpDfn2XE6U; __gsas=ID=c2d96085edb8c52a:T=1736464913:RT=1736464913:S=ALNI_MYPZC8TKmtU-_fM69ccp9F25OCunQ
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: api.myuhchvision.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _cq_duid=1.1736464910.0Pdysz9c9e6s7CS9; _cq_suid=1.1736464910.8hbiYeRpDfn2XE6U; __gsas=ID=c2d96085edb8c52a:T=1736464913:RT=1736464913:S=ALNI_MYPZC8TKmtU-_fM69ccp9F25OCunQ
Source: global traffic	HTTP traffic detected: GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTA5Ljc3OTR8NmE2MDdhMzFkNzdlNzA2ZmVjOTAwNjczMmM0NDE0NDJjODU1MzliZXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%3D%3D&query=United+Healthcare+Medicare&afdToken=ChMIpK7J8uPpigMVqoX9Bx1cfACQEmoBlLqpjxgmjCzROndp4cIsoUpMclKqzmCF8A4idqYAc6BRFXzqpQZr5mHskq-o8oROHsWon_E3VNBfAnPv0EnTUZ4xhapxEHMsWhLX36L28YhUgQYpSE5TWYluVMNln-ErnASvWEH_lO70IAE&pcsa=false&nb=0&nm=7&nx=264&ny=69&is=530x496&clkt=3&suid=32397724909 HTTP/1.1Host: api.myuhchvision.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _cq_duid=1.1736464910.0Pdysz9c9e6s7CS9; _cq_suid=1.1736464910.8hbiYeRpDfn2XE6U; __gsas=ID=c2d96085edb8c52a:T=1736464913:RT=1736464913:S=ALNI_MYPZC8TKmtU-_fM69ccp9F25OCunQ
Source: global traffic	HTTP traffic detected: GET /track.php?domain=myuhchvision.com&toggle=browserjs&uid=MTczNjQ2NDkyNi4yMzk1OmQ2MzliYTM3ZDFjNWQ4ZTdlMjkzYWMzYzA4MDc3YmM5M2ZmZjc1MTRjZmI1NWZkMDVmNDhiZjMwNTgyNWUxMjg6Njc4MDVhMWUzYTdhYw%3D%3D HTTP/1.1Host: api.myuhchvision.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://api.myuhchvision.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTA5Ljc3OTR8NmE2MDdhMzFkNzdlNzA2ZmVjOTAwNjczMmM0NDE0NDJjODU1MzliZXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%3D%3D&query=United+Healthcare+Medicare&afdToken=ChMIpK7J8uPpigMVqoX9Bx1cfACQEmoBlLqpjxgmjCzROndp4cIsoUpMclKqzmCF8A4idqYAc6BRFXzqpQZr5mHskq-o8oROHsWon_E3VNBfAnPv0EnTUZ4xhapxEHMsWhLX36L28YhUgQYpSE5TWYluVMNln-ErnASvWEH_lO70IAE&pcsa=false&nb=0&nm=7&nx=264&ny=69&is=530x496&clkt=3&suid=32397724909Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _cq_duid=1.1736464910.0Pdysz9c9e6s7CS9; _cq_suid=1.1736464910.8hbiYeRpDfn2XE6U; __gsas=ID=c2d96085edb8c52a:T=1736464913:RT=1736464913:S=ALNI_MYPZC8TKmtU-_fM69ccp9F25OCunQ
Source: global traffic	HTTP traffic detected: GET /ls.php?t=67805a1e&token=39959dc862d6c4777e5f274659ded6a1236f127b HTTP/1.1Host: api.myuhchvision.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://api.myuhchvision.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTA5Ljc3OTR8NmE2MDdhMzFkNzdlNzA2ZmVjOTAwNjczMmM0NDE0NDJjODU1MzliZXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%3D%3D&query=United+Healthcare+Medicare&afdToken=ChMIpK7J8uPpigMVqoX9Bx1cfACQEmoBlLqpjxgmjCzROndp4cIsoUpMclKqzmCF8A4idqYAc6BRFXzqpQZr5mHskq-o8oROHsWon_E3VNBfAnPv0EnTUZ4xhapxEHMsWhLX36L28YhUgQYpSE5TWYluVMNln-ErnASvWEH_lO70IAE&pcsa=false&nb=0&nm=7&nx=264&ny=69&is=530x496&clkt=3&suid=32397724909Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _cq_duid=1.1736464910.0Pdysz9c9e6s7CS9; _cq_suid=1.1736464910.8hbiYeRpDfn2XE6U; __gsas=ID=c2d96085edb8c52a:T=1736464913:RT=1736464913:S=ALNI_MYPZC8TKmtU-_fM69ccp9F25OCunQ
Source: global traffic	HTTP traffic detected: GET /track.php?domain=myuhchvision.com&toggle=browserjs&uid=MTczNjQ2NDkyNi4yMzk1OmQ2MzliYTM3ZDFjNWQ4ZTdlMjkzYWMzYzA4MDc3YmM5M2ZmZjc1MTRjZmI1NWZkMDVmNDhiZjMwNTgyNWUxMjg6Njc4MDVhMWUzYTdhYw%3D%3D HTTP/1.1Host: api.myuhchvision.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _cq_duid=1.1736464910.0Pdysz9c9e6s7CS9; _cq_suid=1.1736464910.8hbiYeRpDfn2XE6U; __gsas=ID=c2d96085edb8c52a:T=1736464913:RT=1736464913:S=ALNI_MYPZC8TKmtU-_fM69ccp9F25OCunQ
Source: global traffic	HTTP traffic detected: GET /track.php?domain=myuhchvision.com&caf=1&toggle=answercheck&answer=yes&uid=MTczNjQ2NDkyNi4yMzk1OmQ2MzliYTM3ZDFjNWQ4ZTdlMjkzYWMzYzA4MDc3YmM5M2ZmZjc1MTRjZmI1NWZkMDVmNDhiZjMwNTgyNWUxMjg6Njc4MDVhMWUzYTdhYw%3D%3D HTTP/1.1Host: api.myuhchvision.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://api.myuhchvision.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTA5Ljc3OTR8NmE2MDdhMzFkNzdlNzA2ZmVjOTAwNjczMmM0NDE0NDJjODU1MzliZXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%3D%3D&query=United+Healthcare+Medicare&afdToken=ChMIpK7J8uPpigMVqoX9Bx1cfACQEmoBlLqpjxgmjCzROndp4cIsoUpMclKqzmCF8A4idqYAc6BRFXzqpQZr5mHskq-o8oROHsWon_E3VNBfAnPv0EnTUZ4xhapxEHMsWhLX36L28YhUgQYpSE5TWYluVMNln-ErnASvWEH_lO70IAE&pcsa=false&nb=0&nm=7&nx=264&ny=69&is=530x496&clkt=3&suid=32397724909Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _cq_duid=1.1736464910.0Pdysz9c9e6s7CS9; _cq_suid=1.1736464910.8hbiYeRpDfn2XE6U; __gsas=ID=c2d96085edb8c52a:T=1736464913:RT=1736464913:S=ALNI_MYPZC8TKmtU-_fM69ccp9F25OCunQ
Source: global traffic	HTTP traffic detected: GET /track.php?domain=myuhchvision.com&caf=1&toggle=answercheck&answer=yes&uid=MTczNjQ2NDkyNi4yMzk1OmQ2MzliYTM3ZDFjNWQ4ZTdlMjkzYWMzYzA4MDc3YmM5M2ZmZjc1MTRjZmI1NWZkMDVmNDhiZjMwNTgyNWUxMjg6Njc4MDVhMWUzYTdhYw%3D%3D HTTP/1.1Host: api.myuhchvision.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: _cq_duid=1.1736464910.0Pdysz9c9e6s7CS9; _cq_suid=1.1736464910.8hbiYeRpDfn2XE6U; __gsas=ID=c2d96085edb8c52a:T=1736464913:RT=1736464913:S=ALNI_MYPZC8TKmtU-_fM69ccp9F25OCunQ

Source: chromecache_165.4.dr, chromecache_320.4.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},Mk:function(){e=nb()},Kd:function(){d()}}};var Vb=wa(["data-gtm-yt-inspected-"]),LE=["www.youtube.com","www.youtube-nocookie.com"],ME,NE=!1; equals www.youtube.com (Youtube)
Source: chromecache_235.4.dr, chromecache_165.4.dr, chromecache_320.4.dr, chromecache_327.4.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=qC(a,c,e);T(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return T(122),!0;if(d&&f){for(var m=yb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},tC=function(){var a=[],b=function(c){return bb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_165.4.dr, chromecache_320.4.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Lh:e,Jh:f,Kh:g,si:k,ui:m,af:n,Kb:b},q=A.YT;if(q)return q.ready&&q.ready(d),b;var r=A.onYouTubeIframeAPIReady;A.onYouTubeIframeAPIReady=function(){r&&r();d()};H(function(){for(var u=E.getElementsByTagName("script"),v=u.length,t=0;t<v;t++){var w=u[t].getAttribute("src");if(WE(w,"iframe_api")\|\|WE(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!NE&&UE(x[B],p.af))return lc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_235.4.dr, chromecache_222.4.dr, chromecache_327.4.dr	String found in binary or memory: return b}JE.F="internal.enableAutoEventOnTimer";var Vb=wa(["data-gtm-yt-inspected-"]),LE=["www.youtube.com","www.youtube-nocookie.com"],ME,NE=!1; equals www.youtube.com (Youtube)
Source: chromecache_220.4.dr	String found in binary or memory: return b}OE.F="internal.enableAutoEventOnTimer";var Vb=wa(["data-gtm-yt-inspected-"]),QE=["www.youtube.com","www.youtube-nocookie.com"],RE,SE=!1; equals www.youtube.com (Youtube)
Source: chromecache_318.4.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(b){var c=typeof a.URL==="function"?a.URL:a.webkitURL;c=new c(b);c=c.hostname.endsWith(".facebook.com")&&c.pathname=="/signals/iwl.js";if(!c)throw new Error("Disallowed script URL");return b}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_318.4.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_318.4.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_235.4.dr, chromecache_165.4.dr, chromecache_320.4.dr, chromecache_327.4.dr	String found in binary or memory: var YD=function(a,b,c,d,e){var f=OB("fsl",c?"nv.mwt":"mwt",0),g;g=c?OB("fsl","nv.ids",[]):OB("fsl","ids",[]);if(!g.length)return!0;var k=TB(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);T(121);if(m==="https://www.facebook.com/tr/")return T(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!xA(k,zA(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: api.myuhchvision.com
Source: global traffic	DNS traffic detected: DNS query: c.parkingcrew.net
Source: global traffic	DNS traffic detected: DNS query: euob.netgreencolumn.com
Source: global traffic	DNS traffic detected: DNS query: d38psrni17bvxu.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: obseu.netgreencolumn.com
Source: global traffic	DNS traffic detected: DNS query: syndicatedsearch.goog
Source: global traffic	DNS traffic detected: DNS query: afs.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: trkpc.net
Source: global traffic	DNS traffic detected: DNS query: medicare.gohealth.com
Source: global traffic	DNS traffic detected: DNS query: p.typekit.net
Source: global traffic	DNS traffic detected: DNS query: use.typekit.net
Source: global traffic	DNS traffic detected: DNS query: cdn.gohealth.com
Source: global traffic	DNS traffic detected: DNS query: cdn.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: cdn.qa.gohealth.xyz
Source: global traffic	DNS traffic detected: DNS query: static.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: a24403740715.cdn.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: logx.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: utt.impactcdn.com
Source: global traffic	DNS traffic detected: DNS query: b-code.liadm.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn.taboola.com
Source: global traffic	DNS traffic detected: DNS query: gohealth.sjv.io
Source: global traffic	DNS traffic detected: DNS query: tags.srv.stackadapt.com
Source: global traffic	DNS traffic detected: DNS query: static.synccake.com
Source: global traffic	DNS traffic detected: DNS query: amplify.outbrain.com
Source: global traffic	DNS traffic detected: DNS query: collector-47776.us.tvsquared.com
Source: global traffic	DNS traffic detected: DNS query: script.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: psb.taboola.com
Source: global traffic	DNS traffic detected: DNS query: rp.liadm.com
Source: global traffic	DNS traffic detected: DNS query: tr.outbrain.com
Source: global traffic	DNS traffic detected: DNS query: www.ojrq.net
Source: global traffic	DNS traffic detected: DNS query: trc.taboola.com
Source: global traffic	DNS traffic detected: DNS query: wave.outbrain.com
Source: global traffic	DNS traffic detected: DNS query: trc-events.taboola.com
Source: global traffic	DNS traffic detected: DNS query: www.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: z.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: js-agent.newrelic.com
Source: global traffic	DNS traffic detected: DNS query: c.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: bam.nr-data.net
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Source: unknown

HTTP traffic detected: POST /mon HTTP/1.1Host: obseu.netgreencolumn.comConnection: keep-aliveContent-Length: 2800sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: */*Origin: http://api.myuhchvision.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: http://api.myuhchvision.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Thu, 09 Jan 2025 23:22:07 GMTContent-Type: text/html; charset=UTF-8Content-Length: 0Connection: closeAccess-Control-Allow-Origin: *Status: 403 ForbiddenX-Http-Caddy: yesX-Invalid-Click: true
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 09 Jan 2025 23:22:27 GMTContent-Type: text/html; charset=utf-8Content-Length: 55258Connection: closeContent-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://.optimizely.com https://optimizely.s3.amazonaws.com https://cdn-assets-prod.s3.amazonaws.com https: ; style-src 'self' 'unsafe-inline' https: ; object-src 'none'; worker-src data:; connect-src 'self' https: wss://.hotjar.com https://.optimizely.com ; img-src 'self' https: http: data: https://.optimizely.com; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://.typekit.net; frame-src 'self' https://.googletagmanager.com https://.hotjar.com https://.snapchat.com https://.google.com https://.mediaalpha.com https://.optimizely.com https://.taboola.com https://.doubleclick.net; frame-ancestors 'self' https://.optimizely.comStrict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Frame-Options: sameoriginX-Download-Options: noopenX-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=blockCache-Control: no-cache, no-store, max-age=0, must-revalidateETag: "i8egu8mg4l16mp"Vary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 09 Jan 2025 23:22:27 GMTContent-Type: text/html; charset=utf-8Content-Length: 55258Connection: closeContent-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://.optimizely.com https://optimizely.s3.amazonaws.com https://cdn-assets-prod.s3.amazonaws.com https: ; style-src 'self' 'unsafe-inline' https: ; object-src 'none'; worker-src data:; connect-src 'self' https: wss://.hotjar.com https://.optimizely.com ; img-src 'self' https: http: data: https://.optimizely.com; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://.typekit.net; frame-src 'self' https://.googletagmanager.com https://.hotjar.com https://.snapchat.com https://.google.com https://.mediaalpha.com https://.optimizely.com https://.taboola.com https://.doubleclick.net; frame-ancestors 'self' https://.optimizely.comStrict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Frame-Options: sameoriginX-Download-Options: noopenX-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=blockCache-Control: no-cache, no-store, max-age=0, must-revalidateETag: "xqy33piqbq16mp"Vary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 09 Jan 2025 23:22:28 GMTContent-Length: 0Connection: closeCache-Control: max-age=14400CF-Cache-Status: HITAge: 1406899Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IIUw0EYQDbBnVb1ZydO6UU4gv5qF%2FYy1TSQwfx3H5Rm4TsUfUzhGTUqm5Qdr3ZnKmG6kIDxMwj%2FvsQUnfQEGikVKU%2BEZFhBiTZpocQmgYrLJ35oucazUzTb5yKRWdDG8o%2BaMPmh%2F"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8ff82b659b906a55-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1864&min_rtt=1816&rtt_var=715&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1128&delivery_rate=1607929&cwnd=235&unsent_bytes=0&cid=00d8490ee8bbef1b&ts=135&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 09 Jan 2025 23:22:28 GMTContent-Type: text/html; charset=utf-8Content-Length: 55259Connection: closeContent-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://.optimizely.com https://optimizely.s3.amazonaws.com https://cdn-assets-prod.s3.amazonaws.com https: ; style-src 'self' 'unsafe-inline' https: ; object-src 'none'; worker-src data:; connect-src 'self' https: wss://.hotjar.com https://.optimizely.com ; img-src 'self' https: http: data: https://.optimizely.com; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://.typekit.net; frame-src 'self' https://.googletagmanager.com https://.hotjar.com https://.snapchat.com https://.google.com https://.mediaalpha.com https://.optimizely.com https://.taboola.com https://.doubleclick.net; frame-ancestors 'self' https://.optimizely.comStrict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Frame-Options: sameoriginX-Download-Options: noopenX-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=blockCache-Control: no-cache, no-store, max-age=0, must-revalidateETag: "krhaf43k3016mq"Vary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 09 Jan 2025 23:22:34 GMTContent-Type: text/html; charset=utf-8Content-Length: 55258Connection: closeContent-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://.optimizely.com https://optimizely.s3.amazonaws.com https://cdn-assets-prod.s3.amazonaws.com https: ; style-src 'self' 'unsafe-inline' https: ; object-src 'none'; worker-src data:; connect-src 'self' https: wss://.hotjar.com https://.optimizely.com ; img-src 'self' https: http: data: https://.optimizely.com; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://.typekit.net; frame-src 'self' https://.googletagmanager.com https://.hotjar.com https://.snapchat.com https://.google.com https://.mediaalpha.com https://.optimizely.com https://.taboola.com https://.doubleclick.net; frame-ancestors 'self' https://.optimizely.comStrict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Frame-Options: sameoriginX-Download-Options: noopenX-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=blockCache-Control: no-cache, no-store, max-age=0, must-revalidateETag: "520j8djvk316mp"Vary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 09 Jan 2025 23:22:35 GMTContent-Type: text/html; charset=utf-8Content-Length: 55259Connection: closeContent-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://.optimizely.com https://optimizely.s3.amazonaws.com https://cdn-assets-prod.s3.amazonaws.com https: ; style-src 'self' 'unsafe-inline' https: ; object-src 'none'; worker-src data:; connect-src 'self' https: wss://.hotjar.com https://.optimizely.com ; img-src 'self' https: http: data: https://.optimizely.com; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://.typekit.net; frame-src 'self' https://.googletagmanager.com https://.hotjar.com https://.snapchat.com https://.google.com https://.mediaalpha.com https://.optimizely.com https://.taboola.com https://.doubleclick.net; frame-ancestors 'self' https://.optimizely.comStrict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Frame-Options: sameoriginX-Download-Options: noopenX-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=blockCache-Control: no-cache, no-store, max-age=0, must-revalidateETag: "f25oxuupts16mq"Vary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 09 Jan 2025 23:22:35 GMTContent-Type: text/html; charset=utf-8Content-Length: 55259Connection: closeContent-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://.optimizely.com https://optimizely.s3.amazonaws.com https://cdn-assets-prod.s3.amazonaws.com https: ; style-src 'self' 'unsafe-inline' https: ; object-src 'none'; worker-src data:; connect-src 'self' https: wss://.hotjar.com https://.optimizely.com ; img-src 'self' https: http: data: https://.optimizely.com; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://.typekit.net; frame-src 'self' https://.googletagmanager.com https://.hotjar.com https://.snapchat.com https://.google.com https://.mediaalpha.com https://.optimizely.com https://.taboola.com https://.doubleclick.net; frame-ancestors 'self' https://.optimizely.comStrict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Frame-Options: sameoriginX-Download-Options: noopenX-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=blockCache-Control: no-cache, no-store, max-age=0, must-revalidateETag: "rhlmhvse6g16mq"Vary: Accept-Encoding

Source: chromecache_270.4.dr, chromecache_295.4.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_216.4.dr, chromecache_180.4.dr	String found in binary or memory: http://piwik.org
Source: chromecache_216.4.dr, chromecache_180.4.dr	String found in binary or memory: http://piwik.org/free-software/bsd/
Source: chromecache_234.4.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735a1c5
Source: chromecache_234.4.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735a1c8
Source: chromecache_234.4.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735a1e1
Source: chromecache_234.4.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735a1e4
Source: chromecache_234.4.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000007735a1e6
Source: chromecache_234.4.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000774d56ef
Source: chromecache_234.4.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000774d56f1
Source: chromecache_234.4.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000774d56f5
Source: chromecache_234.4.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000774d56f7
Source: chromecache_234.4.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000774d56f8
Source: chromecache_234.4.dr	String found in binary or memory: http://typekit.com/eulas/0000000000000000774d56fa
Source: chromecache_327.4.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_170.4.dr, chromecache_184.4.dr	String found in binary or memory: https://app.optimizely.com/js/innie.js
Source: chromecache_235.4.dr, chromecache_165.4.dr, chromecache_220.4.dr, chromecache_222.4.dr, chromecache_320.4.dr, chromecache_327.4.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_170.4.dr, chromecache_184.4.dr	String found in binary or memory: https://cdn-assets-prod.s3.amazonaws.com/js/preview2/24547810247.js
Source: chromecache_263.4.dr, chromecache_269.4.dr	String found in binary or memory: https://cdn.taboola.com/scripts/cds-pips.js
Source: chromecache_263.4.dr, chromecache_269.4.dr	String found in binary or memory: https://cdn.taboola.com/scripts/eid.es5.js
Source: chromecache_319.4.dr, chromecache_318.4.dr	String found in binary or memory: https://connect.facebook.net/
Source: chromecache_319.4.dr, chromecache_318.4.dr	String found in binary or memory: https://connect.facebook.net/log/fbevents_telemetry/
Source: chromecache_210.4.dr, chromecache_302.4.dr, chromecache_159.4.dr, chromecache_328.4.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=
Source: chromecache_309.4.dr, chromecache_151.4.dr	String found in binary or memory: https://github.com/microsoft/clarity
Source: chromecache_216.4.dr, chromecache_180.4.dr	String found in binary or memory: https://github.com/piwik/piwik/blob/master/js/piwik.js
Source: chromecache_327.4.dr	String found in binary or memory: https://google.com
Source: chromecache_327.4.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_259.4.dr, chromecache_257.4.dr	String found in binary or memory: https://hertzen.com
Source: chromecache_259.4.dr, chromecache_257.4.dr	String found in binary or memory: https://html2canvas.hertzen.com
Source: chromecache_263.4.dr	String found in binary or memory: https://i.liadm.com/s/66627?bidder_id=88068&bidder_uuid=8a63bd1e-8899-49af-97e3-4d55cc239acf-tucte79
Source: chromecache_270.4.dr, chromecache_295.4.dr	String found in binary or memory: https://medicare.qa.internal.gohealth.net/
Source: chromecache_234.4.dr	String found in binary or memory: https://p.typekit.net/p.css?s=1&k=pys1zzw&ht=tk&f=17007.17008.17017.17018.17019.47081.47083.47084.47
Source: chromecache_327.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_235.4.dr, chromecache_165.4.dr, chromecache_210.4.dr, chromecache_302.4.dr, chromecache_159.4.dr, chromecache_220.4.dr, chromecache_222.4.dr, chromecache_328.4.dr, chromecache_320.4.dr, chromecache_327.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_210.4.dr, chromecache_302.4.dr, chromecache_159.4.dr, chromecache_328.4.dr	String found in binary or memory: https://partner.googleadservices.com/gampad/cookie.js
Source: chromecache_186.4.dr	String found in binary or memory: https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
Source: chromecache_220.4.dr, chromecache_222.4.dr	String found in binary or memory: https://static.hotjar.com/c/hotjar-
Source: chromecache_165.4.dr, chromecache_320.4.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_210.4.dr, chromecache_302.4.dr, chromecache_159.4.dr, chromecache_328.4.dr	String found in binary or memory: https://syndicatedsearch.goog
Source: chromecache_326.4.dr	String found in binary or memory: https://syndicatedsearch.goog/
Source: chromecache_235.4.dr, chromecache_165.4.dr, chromecache_220.4.dr, chromecache_222.4.dr, chromecache_320.4.dr, chromecache_327.4.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_234.4.dr	String found in binary or memory: https://use.typekit.net/af/2eeb33/00000000000000007735a1c5/30/a?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_234.4.dr	String found in binary or memory: https://use.typekit.net/af/2eeb33/00000000000000007735a1c5/30/d?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_234.4.dr	String found in binary or memory: https://use.typekit.net/af/2eeb33/00000000000000007735a1c5/30/l?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_234.4.dr	String found in binary or memory: https://use.typekit.net/af/2f38f7/00000000000000007735a1e4/30/a?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_234.4.dr	String found in binary or memory: https://use.typekit.net/af/2f38f7/00000000000000007735a1e4/30/d?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_234.4.dr	String found in binary or memory: https://use.typekit.net/af/2f38f7/00000000000000007735a1e4/30/l?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_234.4.dr	String found in binary or memory: https://use.typekit.net/af/346587/0000000000000000774d56fa/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_234.4.dr	String found in binary or memory: https://use.typekit.net/af/346587/0000000000000000774d56fa/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_234.4.dr	String found in binary or memory: https://use.typekit.net/af/346587/0000000000000000774d56fa/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_234.4.dr	String found in binary or memory: https://use.typekit.net/af/457df2/0000000000000000774d56f5/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_234.4.dr	String found in binary or memory: https://use.typekit.net/af/457df2/0000000000000000774d56f5/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_234.4.dr	String found in binary or memory: https://use.typekit.net/af/457df2/0000000000000000774d56f5/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_234.4.dr	String found in binary or memory: https://use.typekit.net/af/6f86f9/00000000000000007735a1e6/30/a?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_234.4.dr	String found in binary or memory: https://use.typekit.net/af/6f86f9/00000000000000007735a1e6/30/d?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_234.4.dr	String found in binary or memory: https://use.typekit.net/af/6f86f9/00000000000000007735a1e6/30/l?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_234.4.dr	String found in binary or memory: https://use.typekit.net/af/7741ba/0000000000000000774d56f7/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_234.4.dr	String found in binary or memory: https://use.typekit.net/af/7741ba/0000000000000000774d56f7/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_234.4.dr	String found in binary or memory: https://use.typekit.net/af/7741ba/0000000000000000774d56f7/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_234.4.dr	String found in binary or memory: https://use.typekit.net/af/826486/0000000000000000774d56ef/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_234.4.dr	String found in binary or memory: https://use.typekit.net/af/826486/0000000000000000774d56ef/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_234.4.dr	String found in binary or memory: https://use.typekit.net/af/826486/0000000000000000774d56ef/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_234.4.dr	String found in binary or memory: https://use.typekit.net/af/853f4c/00000000000000007735a1e1/30/a?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_234.4.dr	String found in binary or memory: https://use.typekit.net/af/853f4c/00000000000000007735a1e1/30/d?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_234.4.dr	String found in binary or memory: https://use.typekit.net/af/853f4c/00000000000000007735a1e1/30/l?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_234.4.dr	String found in binary or memory: https://use.typekit.net/af/aa897e/00000000000000007735a1c8/30/a?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_234.4.dr	String found in binary or memory: https://use.typekit.net/af/aa897e/00000000000000007735a1c8/30/d?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_234.4.dr	String found in binary or memory: https://use.typekit.net/af/aa897e/00000000000000007735a1c8/30/l?primer=7fa3915bdafdf03041871920a205b
Source: chromecache_234.4.dr	String found in binary or memory: https://use.typekit.net/af/dfd707/0000000000000000774d56f8/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_234.4.dr	String found in binary or memory: https://use.typekit.net/af/dfd707/0000000000000000774d56f8/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_234.4.dr	String found in binary or memory: https://use.typekit.net/af/dfd707/0000000000000000774d56f8/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_234.4.dr	String found in binary or memory: https://use.typekit.net/af/f0ad5c/0000000000000000774d56f1/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_234.4.dr	String found in binary or memory: https://use.typekit.net/af/f0ad5c/0000000000000000774d56f1/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_234.4.dr	String found in binary or memory: https://use.typekit.net/af/f0ad5c/0000000000000000774d56f1/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8
Source: chromecache_206.4.dr, chromecache_189.4.dr	String found in binary or memory: https://www.clarity.ms/tag/uet/
Source: chromecache_327.4.dr	String found in binary or memory: https://www.google.com
Source: chromecache_210.4.dr, chromecache_302.4.dr, chromecache_159.4.dr, chromecache_328.4.dr	String found in binary or memory: https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5
Source: chromecache_327.4.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_210.4.dr, chromecache_302.4.dr, chromecache_159.4.dr, chromecache_328.4.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk
Source: chromecache_210.4.dr, chromecache_302.4.dr, chromecache_159.4.dr, chromecache_328.4.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/16521530460/?gad_source=1&adview_type=3
Source: chromecache_327.4.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_235.4.dr, chromecache_165.4.dr, chromecache_220.4.dr, chromecache_222.4.dr, chromecache_320.4.dr, chromecache_327.4.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_235.4.dr, chromecache_165.4.dr, chromecache_220.4.dr, chromecache_222.4.dr, chromecache_320.4.dr, chromecache_327.4.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_165.4.dr, chromecache_320.4.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_165.4.dr, chromecache_320.4.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50293 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 50209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50281 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50216
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50215
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50217
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50212
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50211
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50214
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50229
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50228
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50221
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50222
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50225
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50224
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50238
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50239
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50230
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50232
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50231
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50234
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50236
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50249
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50241
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50240
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50243
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50242
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50245
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50244
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 50224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50247
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50246
Source: unknown	Network traffic detected: HTTP traffic on port 50266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50204
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50207
Source: unknown	Network traffic detected: HTTP traffic on port 50196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50208
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50203
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50179
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50180
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50183
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50188
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50191
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50195
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50194
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50197
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50196
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50199
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50139
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50130
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50136
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50140
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 50253 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50149
Source: unknown	Network traffic detected: HTTP traffic on port 50299 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50141
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50143
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50145
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50148
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50147
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50150
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 50298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50154
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50157
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50156
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50159
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50158
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 50265 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50280
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 50137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50161
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50282
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50164
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50163
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50165
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50286
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50289
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50288
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50169
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50171
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50292
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50291
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50294
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50172
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50293
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50214 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50231 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50145 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50271 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50111 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50294 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50296 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50206 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50238 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50123 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50098 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50285 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 50191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50179 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 50228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50157 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 50273 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443

Source: unknown

HTTPS traffic detected: 173.222.162.55:443 -> 192.168.2.10:49853 version: TLS 1.2

Source: classification engine

Classification label: mal48.troj.win@21/308@176/59

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 --field-trial-handle=1912,i,3466874189630771730,1920044593678216292,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://api.myuhchvision.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 --field-trial-handle=1912,i,3466874189630771730,1920044593678216292,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://api.myuhchvision.com/	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
http://api.myuhchvision.com/track.php?domain=myuhchvision.com&caf=1&toggle=answercheck&answer=yes&uid=MTczNjQ2NDkwOS43NDM2OjQ3ZGQ4MDVlNDY3ODk5YzdhZmE5ODJiZWIxZTNjZGFmZDhjNDExNzliNWIxNWJjNzM0ZjRhZDI1NGI5MTFjMTE6Njc4MDVhMGRiNTg3Zg%3D%3D	0%	Avira URL Cloud	safe
https://trkpc.net/track.php?click=caf&domain=myuhchvision.com&uid=MTczNjQ2NDkwOS43NDM2OjQ3ZGQ4MDVlNDY3ODk5YzdhZmE5ODJiZWIxZTNjZGFmZDhjNDExNzliNWIxNWJjNzM0ZjRhZDI1NGI5MTFjMTE6Njc4MDVhMGRiNTg3Zg%3D%3D&ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTA5Ljc3OTN8ZGVlN2I5ZGVkM2MzYmI1Yzc3NWI1MWI1NzQ5OWRlZTc3MmY5YWI1ZHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%3D%3D&adtest=off&nc=17616151736464924908	0%	Avira URL Cloud	safe
https://trkpc.net/track.php?click=caf&domain=myuhchvision.com&uid=MTczNjQ2NDkyNi4yMzk1OmQ2MzliYTM3ZDFjNWQ4ZTdlMjkzYWMzYzA4MDc3YmM5M2ZmZjc1MTRjZmI1NWZkMDVmNDhiZjMwNTgyNWUxMjg6Njc4MDVhMWUzYTdhYw%3D%3D&ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTI2LjI2MDh8OWNjZTgxZmEzMjM2NTY3MWMzZmUyMTAwNWZhOGEyMjMwNzhmOTI2Znx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%3D%3D&adtest=off&kw=United+Healthcare+Medicare&nc=1040211736464936914	0%	Avira URL Cloud	safe
https://a24403740715.cdn.optimizely.com/client_storage/a24403740715.html	0%	Avira URL Cloud	safe
http://piwik.org/free-software/bsd/	0%	Avira URL Cloud	safe
https://cdn-assets-prod.s3.amazonaws.com/js/preview2/24547810247.js	0%	Avira URL Cloud	safe
http://api.myuhchvision.com/ls.php?t=67805a1e&token=39959dc862d6c4777e5f274659ded6a1236f127b	0%	Avira URL Cloud	safe
http://d38psrni17bvxu.cloudfront.net/fonts/Port_Lligat_Slab/latin.woff2	0%	Avira URL Cloud	safe
http://api.myuhchvision.com/track.php?domain=myuhchvision.com&toggle=browserjs&uid=MTczNjQ2NDkwOS43NDM2OjQ3ZGQ4MDVlNDY3ODk5YzdhZmE5ODJiZWIxZTNjZGFmZDhjNDExNzliNWIxNWJjNzM0ZjRhZDI1NGI5MTFjMTE6Njc4MDVhMGRiNTg3Zg%3D%3D	0%	Avira URL Cloud	safe
http://api.myuhchvision.com/ls.php?t=67805a0d&token=97d63dc638987051951f6cde063e6a972a611362	0%	Avira URL Cloud	safe
https://a24403740715.cdn.optimizely.com/cdn-cgi/rum?	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0016.t-0009.t-msedge.net	13.107.246.44	true	false	high
fastly-tls12-bam.nr-data.net	162.247.243.29	true	false	high
static.cloudflareinsights.com	104.16.80.73	true	false	high
tls13.taboola.map.fastly.net	151.101.65.44	true	false	high
static.synccake.com	172.67.154.89	true	false	high
collectoru.us.tvsquared.com	3.130.114.26	true	false	high
stats.g.doubleclick.net	173.194.76.154	true	false	high
obseu.netgreencolumn.com	54.75.69.192	true	false	high
scontent.xx.fbcdn.net	157.240.0.6	true	false	high
livepixel-production.bln.liveintent.com	34.231.219.101	true	false	high
utt.impactcdn.com	35.186.249.72	true	false	high
gohealth.sjv.io	35.227.211.136	true	false	high
script.hotjar.com	13.33.187.74	true	false	high
dualstack.tls13.taboola.map.fastly.net	151.101.65.44	true	false	high
medicare.gohealth.com	35.71.185.236	true	false	high
www.google.com	142.250.74.196	true	false	high
cdn.gohealth.com	18.173.205.126	true	false	high
euob.netgreencolumn.com	52.222.236.17	true	false	high
d38psrni17bvxu.cloudfront.net	18.66.121.190	true	false	high
static-cdn.hotjar.com	18.66.102.11	true	false	high
am-vip001.taboola.com	141.226.228.48	true	false	high
logx.optimizely.com	34.49.241.189	true	false	high
www.ojrq.net	34.95.127.121	true	false	high
star-mini.c10r.facebook.com	157.240.0.35	true	false	high
google.com	142.250.186.174	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
nydc1.outbrain.org	64.202.112.31	true	false	high
trkpc.net	185.53.179.31	true	false	unknown
syndicatedsearch.goog	142.250.186.110	true	false	high
js-agent.newrelic.com	162.247.243.39	true	false	high
d36xrmg228nws5.cloudfront.net	18.66.147.56	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
detgh1asa1dg4.cloudfront.net	3.167.227.110	true	false	high
ax-0001.ax-msedge.net	150.171.27.10	true	false	high
cdn.optimizely.com	104.18.65.57	true	false	high
analytics-alv.google.com	216.239.34.181	true	false	high
googleads.g.doubleclick.net	216.58.206.66	true	false	high
td.doubleclick.net	142.250.186.130	true	false	high
a24403740715.cdn.optimizely.com	104.18.66.57	true	false	unknown
tags.srv.stackadapt.com	3.74.15.141	true	false	high
googlehosted.l.googleusercontent.com	216.58.206.65	true	false	high
c.parkingcrew.net	185.53.178.30	true	false	high
api.myuhchvision.com	185.53.177.50	true	true	unknown
amplify.outbrain.com	unknown	unknown	false	high
psb.taboola.com	unknown	unknown	false	high
collector-47776.us.tvsquared.com	unknown	unknown	false	high
z.clarity.ms	unknown	unknown	false	high
wave.outbrain.com	unknown	unknown	false	high
static.hotjar.com	unknown	unknown	false	high
trc-events.taboola.com	unknown	unknown	false	high
c.clarity.ms	unknown	unknown	false	high
use.typekit.net	unknown	unknown	false	high
www.facebook.com	unknown	unknown	false	high
afs.googleusercontent.com	unknown	unknown	false	high
www.clarity.ms	unknown	unknown	false	high
trc.taboola.com	unknown	unknown	false	high
b-code.liadm.com	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high
bam.nr-data.net	unknown	unknown	false	high
p.typekit.net	unknown	unknown	false	high
cdn.taboola.com	unknown	unknown	false	high
analytics.google.com	unknown	unknown	false	high
cdn.qa.gohealth.xyz	unknown	unknown	false	high
rp.liadm.com	unknown	unknown	false	high
tr.outbrain.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true	false		high
https://trkpc.net/track.php?click=caf&domain=myuhchvision.com&uid=MTczNjQ2NDkyNi4yMzk1OmQ2MzliYTM3ZDFjNWQ4ZTdlMjkzYWMzYzA4MDc3YmM5M2ZmZjc1MTRjZmI1NWZkMDVmNDhiZjMwNTgyNWUxMjg6Njc4MDVhMWUzYTdhYw%3D%3D&ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTI2LjI2MDh8OWNjZTgxZmEzMjM2NTY3MWMzZmUyMTAwNWZhOGEyMjMwNzhmOTI2Znx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%3D%3D&adtest=off&kw=United+Healthcare+Medicare&nc=1040211736464936914	false	Avira URL Cloud: safe	unknown
https://medicare.gohealth.com/api/v1/event/lead-generation_consumer_click-ad	false		high
https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015	false		high
http://d38psrni17bvxu.cloudfront.net/fonts/Port_Lligat_Slab/latin.woff2	false	Avira URL Cloud: safe	unknown
http://api.myuhchvision.com/ls.php?t=67805a1e&token=39959dc862d6c4777e5f274659ded6a1236f127b	false	Avira URL Cloud: safe	unknown
https://bam.nr-data.net/events/1/NRBR-b3c45bbe1222aa00f54?a=1431935965&v=1.278.1&to=Z1VbZUVUDBECUUBZCV4fblRVcxADDldDXxRbZUtYGHsHGhdYRx8hdWQWHlpQBgsAU0ZVS11RS1pSQRIOAlFR&rst=20860&ck=0&s=ea6f09a0c0d66cfe&ref=https://medicare.gohealth.com/medicare-marketplace&ptid=7890b4df395e3836	false		high
https://medicare.gohealth.com/_next/static/chunks/4619-31e9d68b459c55d8.js	false		high
https://trkpc.net/track.php?click=caf&domain=myuhchvision.com&uid=MTczNjQ2NDkwOS43NDM2OjQ3ZGQ4MDVlNDY3ODk5YzdhZmE5ODJiZWIxZTNjZGFmZDhjNDExNzliNWIxNWJjNzM0ZjRhZDI1NGI5MTFjMTE6Njc4MDVhMGRiNTg3Zg%3D%3D&ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTA5Ljc3OTN8ZGVlN2I5ZGVkM2MzYmI1Yzc3NWI1MWI1NzQ5OWRlZTc3MmY5YWI1ZHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%3D%3D&adtest=off&nc=17616151736464924908	false	Avira URL Cloud: safe	unknown
https://www.clarity.ms/s/0.7.59/clarity.js	false		high
https://medicare.gohealth.com/_next/static/chunks/pages/medicare-marketplace-6d439b8e5c426b00.js	false		high
http://d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png	false		high
https://medicare.gohealth.com/_next/static/chunks/webpack-fecf5287dadd8e47.js	false		high
https://js-agent.newrelic.com/nr-rum-1.278.1.min.js	false		high
http://api.myuhchvision.com/track.php?domain=myuhchvision.com&toggle=browserjs&uid=MTczNjQ2NDkwOS43NDM2OjQ3ZGQ4MDVlNDY3ODk5YzdhZmE5ODJiZWIxZTNjZGFmZDhjNDExNzliNWIxNWJjNzM0ZjRhZDI1NGI5MTFjMTE6Njc4MDVhMGRiNTg3Zg%3D%3D	false	Avira URL Cloud: safe	unknown
https://medicare.gohealth.com/api/consent/message/62b5af34-0370-11ee-be56-0242ac120002	false		high
http://api.myuhchvision.com/ls.php?t=67805a0d&token=97d63dc638987051951f6cde063e6a972a611362	false	Avira URL Cloud: safe	unknown
https://connect.facebook.net/en_US/fbevents.js	false		high
http://c.parkingcrew.net/scripts/sale_form.js	false		high
https://www.google.com/images/afs/snowman.png	false		high
https://bam.nr-data.net/events/1/NRBR-b3c45bbe1222aa00f54?a=1431935965&v=1.278.1&to=Z1VbZUVUDBECUUBZCV4fblRVcxADDldDXxRbZUtYGHsHGhdYRx8hdWQWHlpQBgsAU0ZVS11RS1pSQRIOAlFR&rst=46263&ck=0&s=ea6f09a0c0d66cfe&ref=https://medicare.gohealth.com/medicare-marketplace&ptid=7890b4df395e3836	false		high
https://cdn.qa.gohealth.xyz/lead-generation-sites/medicare/gohealth_logo_gray.1716542403.svg	false		high
http://api.myuhchvision.com/track.php?domain=myuhchvision.com&caf=1&toggle=answercheck&answer=yes&uid=MTczNjQ2NDkwOS43NDM2OjQ3ZGQ4MDVlNDY3ODk5YzdhZmE5ODJiZWIxZTNjZGFmZDhjNDExNzliNWIxNWJjNzM0ZjRhZDI1NGI5MTFjMTE6Njc4MDVhMGRiNTg3Zg%3D%3D	false	Avira URL Cloud: safe	unknown
https://syndicatedsearch.goog/afs/ads/i/iframe.html	false		high
https://medicare.gohealth.com/_next/static/chunks/main-001bd2769c48104e.js	false		high
https://cdn.gohealth.com/lead-generation-sites/medicare/trustpilot-stars.1716278912.svg	false		high
https://medicare.gohealth.com/_next/static/6Pd7UXE0cORMG2cg_igAQ/_ssgManifest.js	false		high
https://cdn.gohealth.com/lead-generation-sites/medicare/verified.1716283293.svg	false		high
https://medicare.gohealth.com/_next/static/css/8506ea82eb1ef2da.css	false		high
https://medicare.gohealth.com/_next/static/chunks/pages/_app-b18dce690669cf4a.js	false		high
https://cdn.gohealth.com/lead-generation-sites/medicare/linkedin_logo_dark_gray.1724069057.svg	false		high
https://script.hotjar.com/modules.60031afbf51fb3e88a5b.js	false		high
https://www.ojrq.net/p/?return=&cid=21320&tpsync=no&auth=	false		high
https://medicare.gohealth.com/_next/static/css/b8e92ad69f85b8b9.css	false		high
https://trc-events.taboola.com/1190412/log/3/unip?en=pre_d_eng_tb&tos=22608&scd=0&ssd=1&est=1736464947175&ver=36&isls=true&src=i&invt=12000&msa=2317&rv=1&tim=1736464969877&mrir=tto&vi=1736464947162&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&cv=20250102-8-RELEASE&item-url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ler=other&it=JS_PIXEL	false		high
https://tr.outbrain.com/cachedClickId?marketerId=003678ec07dcd7129be54125730b23cabc	false		high
https://obseu.netgreencolumn.com/tracker/tc_imp.gif?e=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&cri=a8C26DlD0I&ts=1002&cb=1736464927644	false		high
https://medicare.gohealth.com/api/moca-state-data	false		high
https://bam.nr-data.net/1/NRBR-b3c45bbe1222aa00f54?a=1431935965&v=1.278.1&to=Z1VbZUVUDBECUUBZCV4fblRVcxADDldDXxRbZUtYGHsHGhdYRx8hdWQWHlpQBgsAU0ZVS11RS1pSQRIOAlFR&rst=15502&ck=0&s=ea6f09a0c0d66cfe&ref=https://medicare.gohealth.com/medicare-marketplace&ptid=7890b4df395e3836&tt=24640de1b395e70c&ap=20.606372&be=2078&fe=12613&dc=2989&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1736464936927,%22n%22:0,%22f%22:1151,%22dn%22:1166,%22dne%22:1232,%22c%22:1232,%22s%22:1235,%22ce%22:1870,%22rq%22:1870,%22rp%22:2079,%22rpe%22:2265,%22di%22:2266,%22ds%22:5067,%22de%22:5067,%22dc%22:14681,%22l%22:14689,%22le%22:14691%7D,%22navigation%22:%7B%7D%7D&fp=3463&fcp=3463	false		high
https://medicare.gohealth.com/_next/static/chunks/1048-71f1a1614a540721.js	false		high
https://cdn.gohealth.com/lead-generation-sites/medicare/trustpilot-badge.1716283270.svg	false		high
https://a24403740715.cdn.optimizely.com/client_storage/a24403740715.html	false	Avira URL Cloud: safe	unknown
https://medicare.gohealth.com/_next/static/chunks/3365-49fcb6c89fee57c0.js	false		high
https://www.clarity.ms/tag/uet/247010167?conversions=1	false		high
https://cdn.gohealth.com/lead-generation-sites/medicare/instagram_logo_dark_gray.1724069057.svg	false		high
https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE	false		high
https://cdn.gohealth.com/lead-generation-sites/medicare/facebook_logo_dark_gray.1724069057.svg	false		high
https://medicare.gohealth.com/medicare?link_id=18767&irclickid=RFq2geQ7sxyKW-gX4FUVr1MvUks0BqzgU257TY0&sharedid=&irpid=0&irgwc=1	false		high
https://medicare.gohealth.com/api/geo-location/ip	false		high
https://syndicatedsearch.goog/adsense/domains/caf.js?pac=0	false		high
https://cdn.qa.gohealth.xyz/lead-generation-sites/common/icon_warning.1726478862.svg	false		high
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff	false		high
https://collector-47776.us.tvsquared.com/tv2track.php?action_name=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&idsite=TV-5427272736-1&rec=1&r=063113&h=18&m=22&s=28&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&urlref=https%3A%2F%2Fsyndicatedsearch.goog%2F&_id=30d50068786238ee&_idts=1736464948&_idvc=0&_idn=1&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=394	false		high
https://tr.outbrain.com/unifiedPixel?au=false&bust=004892440068507509&referrer=https%3A%2F%2Fsyndicatedsearch.goog%2F&marketerId=003678ec07dcd7129be54125730b23cabc&name=PAGE_VIEW&dl=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&g=0&zone=all&obApiVersion=1.1&obtpVersion=2.18.158	false		high
https://a24403740715.cdn.optimizely.com/cdn-cgi/rum?	false	Avira URL Cloud: safe	unknown
https://medicare.gohealth.com/api/v1/event/lead-generation_consumer_loads-geo-location	false		high
https://connect.facebook.net/signals/config/753743931636742?v=2.9.179&r=stable&domain=medicare.gohealth.com&hme=b8122d5d96cd6f542162ba4f497489972d1ebe228d24c39d34f560e30ae932ce&ex_m=70%2C122%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C173%2C176%2C188%2C184%2C185%2C187%2C29%2C101%2C53%2C77%2C186%2C168%2C171%2C181%2C182%2C189%2C132%2C41%2C191%2C192%2C34%2C144%2C15%2C50%2C197%2C196%2C134%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C169%2C172%2C141%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113	false		high
https://afs.googleusercontent.com/svg/right_chevron_icon.svg?c=%23000000	false		high
https://cdn.gohealth.com/lead-generation-sites/medicare/norton_logo_gray.1716543816.svg	false		high
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=hnp8w9dqetfj&aqid=EVqAZ9i1E_e7juwPqPrk8Q4&psid=7840396037&pbt=bv&adbx=375&adby=129&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=712519386&csala=5%7C0%7C1335%7C1195%7C199&lle=0&ifv=1&hpt=1	false		high
https://cdn.taboola.com/libtrc/unip/1190412/tfa.js	false		high
http://api.myuhchvision.com/	true		unknown
https://static.synccake.com/tm/2G21D2G5FC7G65237799.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_165.4.dr, chromecache_320.4.dr	false		high
https://syndicatedsearch.goog	chromecache_210.4.dr, chromecache_302.4.dr, chromecache_159.4.dr, chromecache_328.4.dr	false		high
https://use.typekit.net/af/6f86f9/00000000000000007735a1e6/30/d?primer=7fa3915bdafdf03041871920a205b	chromecache_234.4.dr	false		high
https://use.typekit.net/af/f0ad5c/0000000000000000774d56f1/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_234.4.dr	false		high
https://html2canvas.hertzen.com	chromecache_259.4.dr, chromecache_257.4.dr	false		high
https://use.typekit.net/af/7741ba/0000000000000000774d56f7/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_234.4.dr	false		high
https://use.typekit.net/af/346587/0000000000000000774d56fa/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_234.4.dr	false		high
https://app.optimizely.com/js/innie.js	chromecache_170.4.dr, chromecache_184.4.dr	false		high
https://use.typekit.net/af/dfd707/0000000000000000774d56f8/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_234.4.dr	false		high
https://www.google.com	chromecache_327.4.dr	false		high
https://www.youtube.com/iframe_api	chromecache_165.4.dr, chromecache_320.4.dr	false		high
https://use.typekit.net/af/6f86f9/00000000000000007735a1e6/30/a?primer=7fa3915bdafdf03041871920a205b	chromecache_234.4.dr	false		high
https://syndicatedsearch.goog/	chromecache_326.4.dr	false		high
https://use.typekit.net/af/826486/0000000000000000774d56ef/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_234.4.dr	false		high
https://use.typekit.net/af/2f38f7/00000000000000007735a1e4/30/l?primer=7fa3915bdafdf03041871920a205b	chromecache_234.4.dr	false		high
https://github.com/microsoft/clarity	chromecache_309.4.dr, chromecache_151.4.dr	false		high
https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5	chromecache_210.4.dr, chromecache_302.4.dr, chromecache_159.4.dr, chromecache_328.4.dr	false		high
https://i.liadm.com/s/66627?bidder_id=88068&bidder_uuid=8a63bd1e-8899-49af-97e3-4d55cc239acf-tucte79	chromecache_263.4.dr	false		high
https://use.typekit.net/af/853f4c/00000000000000007735a1e1/30/a?primer=7fa3915bdafdf03041871920a205b	chromecache_234.4.dr	false		high
https://use.typekit.net/af/aa897e/00000000000000007735a1c8/30/l?primer=7fa3915bdafdf03041871920a205b	chromecache_234.4.dr	false		high
https://use.typekit.net/af/f0ad5c/0000000000000000774d56f1/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_234.4.dr	false		high
https://use.typekit.net/af/346587/0000000000000000774d56fa/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_234.4.dr	false		high
https://p.typekit.net/p.css?s=1&k=pys1zzw&ht=tk&f=17007.17008.17017.17018.17019.47081.47083.47084.47	chromecache_234.4.dr	false		high
https://cct.google/taggy/agent.js	chromecache_235.4.dr, chromecache_165.4.dr, chromecache_220.4.dr, chromecache_222.4.dr, chromecache_320.4.dr, chromecache_327.4.dr	false		high
https://use.typekit.net/af/2eeb33/00000000000000007735a1c5/30/a?primer=7fa3915bdafdf03041871920a205b	chromecache_234.4.dr	false		high
http://piwik.org/free-software/bsd/	chromecache_216.4.dr, chromecache_180.4.dr	false	Avira URL Cloud: safe	unknown
https://connect.facebook.net/	chromecache_319.4.dr, chromecache_318.4.dr	false		high
https://github.com/piwik/piwik/blob/master/js/piwik.js	chromecache_216.4.dr, chromecache_180.4.dr	false		high
https://use.typekit.net/af/2eeb33/00000000000000007735a1c5/30/d?primer=7fa3915bdafdf03041871920a205b	chromecache_234.4.dr	false		high
https://cdn.taboola.com/scripts/cds-pips.js	chromecache_263.4.dr, chromecache_269.4.dr	false		high
https://use.typekit.net/af/457df2/0000000000000000774d56f5/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_234.4.dr	false		high
https://cdn-assets-prod.s3.amazonaws.com/js/preview2/24547810247.js	chromecache_170.4.dr, chromecache_184.4.dr	false	Avira URL Cloud: safe	unknown
https://use.typekit.net/af/826486/0000000000000000774d56ef/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_234.4.dr	false		high
https://use.typekit.net/af/dfd707/0000000000000000774d56f8/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_234.4.dr	false		high
https://use.typekit.net/af/853f4c/00000000000000007735a1e1/30/d?primer=7fa3915bdafdf03041871920a205b	chromecache_234.4.dr	false		high
http://typekit.com/eulas/00000000000000007735a1c5	chromecache_234.4.dr	false		high
http://typekit.com/eulas/0000000000000000774d56ef	chromecache_234.4.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
18.66.102.11	static-cdn.hotjar.com	United States	3	MIT-GATEWAYSUS	false
173.194.76.154	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
216.239.34.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
13.107.246.44	s-part-0016.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.53.179.31	trkpc.net	Germany	61969	TEAMINTERNET-ASDE	false
104.16.80.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
34.95.127.121	www.ojrq.net	United States	15169	GOOGLEUS	false
34.231.219.101	livepixel-production.bln.liveintent.com	United States	14618	AMAZON-AESUS	false
34.49.241.189	logx.optimizely.com	United States	2686	ATGS-MMD-ASUS	false
142.250.186.110	syndicatedsearch.goog	United States	15169	GOOGLEUS	false
18.173.205.126	cdn.gohealth.com	United States	3	MIT-GATEWAYSUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.250.184.228	unknown	United States	15169	GOOGLEUS	false
54.75.69.192	obseu.netgreencolumn.com	United States	16509	AMAZON-02US	false
52.222.236.26	unknown	United States	16509	AMAZON-02US	false
172.67.154.89	static.synccake.com	United States	13335	CLOUDFLARENETUS	false
104.18.65.57	cdn.optimizely.com	United States	13335	CLOUDFLARENETUS	false
157.240.0.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
18.173.205.63	unknown	United States	3	MIT-GATEWAYSUS	false
151.101.1.44	unknown	United States	54113	FASTLYUS	false
3.167.227.50	unknown	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
151.101.65.44	tls13.taboola.map.fastly.net	United States	54113	FASTLYUS	false
3.130.114.26	collectoru.us.tvsquared.com	United States	16509	AMAZON-02US	false
185.53.177.50	api.myuhchvision.com	Germany	61969	TEAMINTERNET-ASDE	true
52.222.236.17	euob.netgreencolumn.com	United States	16509	AMAZON-02US	false
172.217.16.196	unknown	United States	15169	GOOGLEUS	false
18.66.102.51	unknown	United States	3	MIT-GATEWAYSUS	false
104.18.66.57	a24403740715.cdn.optimizely.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.130	td.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.186.174	google.com	United States	15169	GOOGLEUS	false
3.131.211.191	unknown	United States	16509	AMAZON-02US	false
18.194.6.240	unknown	United States	16509	AMAZON-02US	false
157.240.0.6	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
18.66.121.190	d38psrni17bvxu.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
185.53.178.30	c.parkingcrew.net	Germany	61969	TEAMINTERNET-ASDE	false
3.248.162.96	unknown	United States	16509	AMAZON-02US	false
141.226.228.48	am-vip001.taboola.com	Israel	200478	TABOOLA-ASIL	false
18.66.147.56	d36xrmg228nws5.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
64.202.112.31	nydc1.outbrain.org	United States	22075	AS-OUTBRAINUS	false
142.250.184.206	unknown	United States	15169	GOOGLEUS	false
104.16.79.73	unknown	United States	13335	CLOUDFLARENETUS	false
162.247.243.39	js-agent.newrelic.com	United States	13335	CLOUDFLARENETUS	false
157.240.252.35	unknown	United States	32934	FACEBOOKUS	false
142.250.74.196	www.google.com	United States	15169	GOOGLEUS	false
23.21.229.6	unknown	United States	14618	AMAZON-AESUS	false
216.58.212.132	unknown	United States	15169	GOOGLEUS	false
216.58.206.65	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
64.202.112.127	unknown	United States	22075	AS-OUTBRAINUS	false
35.227.211.136	gohealth.sjv.io	United States	15169	GOOGLEUS	false
151.101.129.44	unknown	United States	54113	FASTLYUS	false
35.186.249.72	utt.impactcdn.com	United States	15169	GOOGLEUS	false
3.74.15.141	tags.srv.stackadapt.com	United States	16509	AMAZON-02US	false
157.240.253.1	unknown	United States	32934	FACEBOOKUS	false
13.33.187.74	script.hotjar.com	United States	16509	AMAZON-02US	false
3.167.227.110	detgh1asa1dg4.cloudfront.net	United States	16509	AMAZON-02US	false
162.247.243.29	fastly-tls12-bam.nr-data.net	United States	13335	CLOUDFLARENETUS	false
35.71.185.236	medicare.gohealth.com	United States	237	MERIT-AS-14US	false

Private

IP
192.168.2.10

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1587129
Start date and time:	2025-01-10 00:20:47 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 5s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://api.myuhchvision.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.troj.win@21/308@176/59
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, Sgrmuserer.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.195, 142.250.186.46, 64.233.167.84, 142.250.186.78, 142.250.181.238, 142.250.185.98, 216.58.206.66, 199.232.214.172, 172.217.18.14, 172.217.16.206, 142.250.185.206, 142.250.185.161, 142.250.181.225, 172.217.16.194, 216.58.212.174, 2.16.168.125, 2.16.168.105, 2.16.168.109, 2.16.168.106, 142.250.186.142, 142.250.185.168, 172.217.18.10, 216.58.212.170, 142.250.185.74, 142.250.186.170, 172.217.23.106, 142.250.184.202, 216.58.206.42, 172.217.16.202, 142.250.184.234, 216.58.206.74, 142.250.186.106, 142.250.181.234, 172.217.16.138, 216.58.212.138, 142.250.185.170, 142.250.185.106, 142.250.185.232, 142.250.185.72, 184.28.89.148, 23.56.253.247, 172.217.18.2, 20.10.16.51, 13.74.129.1, 13.107.21.237, 204.79.197.237, 142.250.186.67, 34.104.35.123, 13.107.246.45, 184.28.90.27, 172.202.163.200, 150.171.27.10, 150.171.28.10
Excluded domains from analysis (whitelisted): www.googleadservices.com, slscr.update.microsoft.com, c-msn-com-nsatc.trafficmanager.net, partner.googleadservices.com, clientservices.googleapis.com, a1874.dscg1.akamai.net, clients2.google.com, redirector.gvt1.com, use-stls.adobe.com.edgesuite.net, www.googletagmanager.com, bat.bing.com, update.googleapis.com, azurefd-t-prod.trafficmanager.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, c-bing-com.dual-a-0034.a-msedge.net, ctldl.windowsupdate.com, wildcard.outbrain.com.edgekey.net, fe3cr.delivery.mp.microsoft.com, p.typekit.net-stls-v3.edgesuite.net, clarity-ingest-eus2-f-sc.eastus2.cloudapp.azure.com, edgedl.me.gvt1.com, c.bing.com, tpc.googlesyndication.com, e10883.g.akamaiedge.net, dual-a-0034.a-msedge.net, clients.l.google.com, a1988.dscg1.akamai.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://api.myuhchvision.com/

Input	Output
URL: http://api.myuhchvision.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: http://api.myuhchvision.com
URL: http://api.myuhchvision.com/... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The script uses an XMLHttpRequest to fetch data from a server, which is a common practice. However, the use of a hardcoded token and the lack of transparency around the purpose of the request raise some moderate concerns. Further investigation may be needed to determine the legitimacy of the script's behavior." }
var ls = function(xhr, path, token) { xhr.onreadystatechange = function () { if (xhr.readyState === XMLHttpRequest.DONE) { if (xhr.status >= 200 && xhr.status <= 400) { if (xhr.responseText.trim() === '') { return; } console.log(JSON.parse(xhr.responseText)) } else { console.log('There was a problem with the request.'); } } } xhr.open('GET', path + '/ls.p' + 'hp?t=67805a0d&token=' + encodeURI(token), true); xhr.send(); }; ls(new XMLHttpRequest(), scriptPath, '97d63dc638987051951f6cde063e6a972a611362');
URL: http://api.myuhchvision.com/... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "The provided JavaScript snippet exhibits several high-risk behaviors, including data exfiltration, redirects to potentially malicious domains, and the use of obfuscated code. While some contextual factors, such as the use of analytics-related functionality, may suggest a legitimate purpose, the overall behavior of the script is highly suspicious and raises significant security concerns." }
let isAdult=false; let containerNames=[]; let uniqueTrackingID='MTczNjQ2NDkwOS43NDM2OjQ3ZGQ4MDVlNDY3ODk5YzdhZmE5ODJiZWIxZTNjZGFmZDhjNDExNzliNWIxNWJjNzM0ZjRhZDI1NGI5MTFjMTE6Njc4MDVhMGRiNTg3Zg=='; let search=''; let themedata='fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTA5Ljc3OTN8ZGVlN2I5ZGVkM2MzYmI1Yzc3NWI1MWI1NzQ5OWRlZTc3MmY5YWI1ZHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA=='; let domain='myuhchvision.com'; let scriptPath=''; let adtest='off';if(top.location!==location) { top.location.href=location.protocol + '//' + location.host + location.pathname + (location.search ? location.search + '&' : '?') + '_xafvr=YjllNDY2OGMyZmYyOTExM2E5M2RjNzQyYzExZDZmMDUzYmU4MjZhYSw2NzgwNWEwZGJlNDA2'; }let pageLoadedCallbackTriggered = false;let fallbackTriggered = false;let formerCalledArguments = false;let pageOptions = {'pubId': 'dp-teaminternet01','resultsPageBaseUrl': '//' + location.host + '/?ts=','fontFamily': 'arial','optimizeTerms': true,'maxTermLength': 40,'adtest': true,'clicktrackUrl': '//' + location.host + '/track.php?','attributionText': 'Ads','colorAttribution': '#b7b7b7','fontSizeAttribution': 16,'attributionBold': false,'rolloverLinkBold': false,'fontFamilyAttribution': 'arial','adLoadedCallback': function(containerName, adsLoaded, isExperimentVariant, callbackOptions) {let data = {containerName: containerName,adsLoaded: adsLoaded,isExperimentVariant: isExperimentVariant,callbackOptions: callbackOptions,terms: pageOptions.terms};if (!adsLoaded \|\| (containerName in containerNames)) {ajaxQuery(scriptPath + "/track.php"+ "?toggle=adloaded"+ "&uid=" + encodeURIComponent(uniqueTrackingID)+ "&domain=" + encodeURIComponent(domain)+ "&data=" + encodeURIComponent(JSON.stringify(data)));}},'pageLoadedCallback': function (requestAccepted, status) {document.body.style.visibility = 'visible';pageLoadedCallbackTriggered = true;if ((status.faillisted === true \|\| status.faillisted == "true" \|\| status.blocked === true \|\| status.blocked == "true" ) && status.error_code != 25) {ajaxQuery(scriptPath + "/track.php?domain=" + encodeURIComponent(domain) + "&caf=1&toggle=block&reason=other&uid=" + encodeURIComponent(uniqueTrackingID));}if (status.errorcode && !status.error_code) {status.error_code = status.errorcode;}if (status.error_code) {ajaxQuery(scriptPath + "/track.php?domain=" + encodeURIComponent(domain) + "&caf=1&toggle=errorcode&code=" + encodeURIComponent(status.error_code) + "&uid=" + encodeURIComponent(uniqueTrackingID));if ([18, 19].indexOf(parseInt(status.error_code)) != -1 && fallbackTriggered == false) {fallbackTriggered = true;if (typeof loadFeed === "function") {window.location.href = '//' + location.host;}}if (status.error_code == 20) {window.location.replace("//dp.g.doubleclick.net/apps/domainpark/domainpark.cgi?client=" + encodeURIComponent((pageOptions.pubid.match(/^ca-/i) ? "" : "ca-") + pageOptions.pubid) + "&domain_name=" + encodeURIComponent(domain) + "&output=html&drid=" + encodeURIComponent(pageOptions.domainRegistrant));}}if (status.needsreview === true \|\| status.needsreview == "true") {ajaxQuery(scriptPath + "/track.php?domain=" + encodeURIComponent(domain) + "&caf=1&toggle=needsreview&uid=" + encodeURIComponent(uniqueTrackingID));}if ((status.adult === true \|\| status.adult == "true") && !isAdult) {ajaxQuery(scriptPath + "/track.php?domain=" + encodeURIComponent(domain) + "&caf=1&toggle=adult&uid=" + encodeURIComponent(uniqueTrackingID));} else if ((status.adult === false \|\| status.adult == "false") && isAdult) {ajaxQuery(scriptPath + "/track.php?domain=" + encodeURIComponent(domain) + "&caf=1&toggle=nonadult&uid=" + encodeURIComponent(uniqueTrackingID));}if (requestAccepted) {if (status.feed) {ajaxQuery(scriptPath + "/track.php?domain=" + encodeURIComponent(domain)
URL: http://api.myuhchvision.com/?ts=fENsZWFuUGVwcGVybW... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The script exhibits several moderate-risk behaviors, including external data transmission, fallback domains, and aggressive DOM manipulation. While it does not contain any high-risk indicators like dynamic code execution or data exfiltration, the overall behavior is somewhat suspicious and requires further review." }
let isAdult=false; let containerNames=[]; let uniqueTrackingID='MTczNjQ2NDkyNi4yMzk1OmQ2MzliYTM3ZDFjNWQ4ZTdlMjkzYWMzYzA4MDc3YmM5M2ZmZjc1MTRjZmI1NWZkMDVmNDhiZjMwNTgyNWUxMjg6Njc4MDVhMWUzYTdhYw=='; let search='United Healthcare Medicare'; let themedata='fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTI2LjI2MDh8OWNjZTgxZmEzMjM2NTY3MWMzZmUyMTAwNWZhOGEyMjMwNzhmOTI2Znx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA=='; let domain='myuhchvision.com'; let scriptPath=''; let adtest='off';if(top.location!==location) { top.location.href=location.protocol + '//' + location.host + location.pathname + (location.search ? location.search + '&' : '?') + '_xafvr=ZTc3OGMxMGJmYjZmOWZjMjAyNTQ3YzEwM2FiYjg1YjgyN2NhNzgwNiw2NzgwNWExZTNmYWNk'; }let pageLoadedCallbackTriggered = false;let fallbackTriggered = false;let formerCalledArguments = false;let pageOptions = {'pubId': 'dp-teaminternet01','resultsPageBaseUrl': '//' + location.host + '/?ts=','fontFamily': 'arial','optimizeTerms': true,'maxTermLength': 40,'adtest': true,'clicktrackUrl': '//' + location.host + '/track.php?','attributionText': 'Ads','colorAttribution': '#b7b7b7','fontSizeAttribution': 16,'attributionBold': false,'rolloverLinkBold': false,'fontFamilyAttribution': 'arial','adLoadedCallback': function(containerName, adsLoaded, isExperimentVariant, callbackOptions) {let data = {containerName: containerName,adsLoaded: adsLoaded,isExperimentVariant: isExperimentVariant,callbackOptions: callbackOptions,terms: pageOptions.terms};if (!adsLoaded \|\| (containerName in containerNames)) {ajaxQuery(scriptPath + "/track.php"+ "?toggle=adloaded"+ "&uid=" + encodeURIComponent(uniqueTrackingID)+ "&domain=" + encodeURIComponent(domain)+ "&data=" + encodeURIComponent(JSON.stringify(data)));}},'pageLoadedCallback': function (requestAccepted, status) {document.body.style.visibility = 'visible';pageLoadedCallbackTriggered = true;if ((status.faillisted === true \|\| status.faillisted == "true" \|\| status.blocked === true \|\| status.blocked == "true" ) && status.error_code != 25) {ajaxQuery(scriptPath + "/track.php?domain=" + encodeURIComponent(domain) + "&caf=1&toggle=block&reason=other&uid=" + encodeURIComponent(uniqueTrackingID));}if (status.errorcode && !status.error_code) {status.error_code = status.errorcode;}if (status.error_code) {ajaxQuery(scriptPath + "/track.php?domain=" + encodeURIComponent(domain) + "&caf=1&toggle=errorcode&code=" + encodeURIComponent(status.error_code) + "&uid=" + encodeURIComponent(uniqueTrackingID));if ([18, 19].indexOf(parseInt(status.error_code)) != -1 && fallbackTriggered == false) {fallbackTriggered = true;if (typeof loadFeed === "function") {window.location.href = '//' + location.host;}}if (status.error_code == 20) {window.location.replace("//dp.g.doubleclick.net/apps/domainpark/domainpark.cgi?client=" + encodeURIComponent((pageOptions.pubid.match(/^ca-/i) ? "" : "ca-") + pageOptions.pubid) + "&domain_name=" + encodeURIComponent(domain) + "&output=html&drid=" + encodeURIComponent(pageOptions.domainRegistrant));}}if (status.needsreview === true \|\| status.needsreview == "true") {ajaxQuery(scriptPath + "/track.php?domain=" + encodeURIComponent(domain) + "&caf=1&toggle=needsreview&uid=" + encodeURIComponent(uniqueTrackingID));}if ((status.adult === true \|\| status.adult == "true") && !isAdult) {ajaxQuery(scriptPath + "/track.php?domain=" + encodeURIComponent(domain) + "&caf=1&toggle=adult&uid=" + encodeURIComponent(uniqueTrackingID));} else if ((status.adult === false \|\| status.adult == "false") && isAdult) {ajaxQuery(scriptPath + "/track.php?domain=" + encodeURIComponent(domain) + "&caf=1&toggle=nonadult&uid=" + encodeURIComponent(uniqueTrackingID));}if (requestAccepted) {if (status.feed) {ajaxQuery(scriptPath + "/track.php?domain=" + e
URL: http://api.myuhchvision.com/?ts=fENsZWFuUGVwcGVybW... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The script uses an XHR request to fetch data from a server, which is a moderate-risk indicator. However, the data being fetched does not appear to be sensitive, and the script is not exhibiting any high-risk behaviors like dynamic code execution or data exfiltration. The use of a token and the lack of suspicious domains or obfuscation suggest this is likely a legitimate script, but the lack of transparency around the purpose and the use of the legacy XDomainRequest API warrant further review." }
var ls = function(xhr, path, token) { xhr.onreadystatechange = function () { if (xhr.readyState === XMLHttpRequest.DONE) { if (xhr.status >= 200 && xhr.status <= 400) { if (xhr.responseText.trim() === '') { return; } console.log(JSON.parse(xhr.responseText)) } else { console.log('There was a problem with the request.'); } } } xhr.open('GET', path + '/ls.p' + 'hp?t=67805a1e&token=' + encodeURI(token), true); xhr.send(); }; ls(new XMLHttpRequest(), scriptPath, '39959dc862d6c4777e5f274659ded6a1236f127b');
URL: https://a24403740715.cdn.optimizely.com/client_sto... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a legitimate implementation of a localStorage-based messaging system. It includes a list of allowed and blocked origins, and the main functionality is to handle messages received from other windows or frames, allowing them to perform CRUD operations on localStorage items. While the code uses some legacy APIs like `XDomainRequest`, it does not exhibit any high-risk behaviors like dynamic code execution or data exfiltration. The overall behavior is consistent with a typical messaging or storage-related functionality, and the use of a whitelist for allowed origins suggests a security-conscious approach. Therefore, this script is considered to be of low risk." }
var allowedOrigins = [["^https?://(.+\\.)?www\\.gomedicare\\.com$", ""], ["^https?://(.+\\.)?gohealth\\.com$", ""], ["^https?://(.+\\.)?survey\\.gohealthinsurance\\.com$", ""], ["^https?://(.+\\.)?internal\\.gohealth\\.net$", ""], ["^https?://(.+\\.)?localhost:9090$", ""], ["^https?://(.+\\.)?gohealthdev\\.wpengine\\.com$", ""], ["^https?://(.+\\.)?localhost:8080$", ""], ["^https?://(.+\\.)?localhost:3000$", ""], ["^https?://(.+\\.)?gohealthwebdev\\.wpenginepowered\\.com$", ""], ["^https?://(.+\\.)?gohealthcom\\.l$", ""]]; var blockedOrigins = []; !function(){"use strict";var d,l,r,c;try{d=window.localStorage}catch(e){l=e}function u(e){return!c\|\|0!==e.indexOf(c.origin)}function v(e,i){return new RegExp(i[0],i[1]).test(e)}function p(e){if(!r){var i={id:"iframeerror",type:"ERROR",response:"Error accessing localStorage: "+(r=e?e.toString():"Localstorage is undefined")};0,event.source.postMessage(JSON.stringify(i),event.origin)}}window.addEventListener("message",function(e){var i,r,t,n,o,s=!1;for(o=0;o<allowedOrigins.length;o++)if(v(e.origin,allowedOrigins[o])){s=!0;break}if(s)for(o=0;o<blockedOrigins.length;o++)if(v(e.origin,blockedOrigins[o])){0,s=!1;break}if(s){c=e;try{i=JSON.parse(e.data)}catch(e){return void 0}if(t=e.origin+"_"+i.key,!d)return p(l);if("GET"===i.type)r=d.getItem(t);else if("PUT"===i.type)try{r=d.setItem(t,i.value)}catch(e){return p(e)}else if("GETALL"===i.type)for(var a in r={},d)d.hasOwnProperty(a)&&u(a)&&(r[a]=d.getItem(a));else{if("DELETE"!==i.type)return void 0;for(var a in d)if(d.hasOwnProperty(a)&&!u(a)){var g=(void 0,1===(f=a.split("$$")).length?null:f[0].split("_")[1]);g&&g!==i.visitorId&&d.removeItem(a)}}var f;void 0!==i.id&&(n={id:i.id,response:r},e.source.postMessage(JSON.stringify(n),e.origin))}},!0),window.addEventListener("storage",function(e){c&&u(e.key)&&c.source.postMessage(JSON.stringify({type:"SYNC",response:{key:e.key,value:e.newValue}}),c.origin)},!0)}();
URL: http://api.myuhchvision.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: http://api.myuhchvision.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: http://api.myuhchvision.com/ Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: http://api.myuhchvision.com/ Model: Joe Sandbox AI	{ "brands": [ "Unitedhealthcare Vision", "United Healthcare Medicare", "Unitedhealthcare Insurance" ] }

URL: http://api.myuhchvision.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTA5Ljc3OTR8NmE2MDdhMzFkNzdlNzA2ZmVjOTAwNjczMmM0NDE0NDJjODU1MzliZXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "2025 Medicare Plans + Benefits - UnitedHealthcare Company", "prominent_button_name": "Visit Website", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: http://api.myuhchvision.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTA5Ljc3OTR8NmE2MDdhMzFkNzdlNzA2ZmVjOTAwNjczMmM0NDE0NDJjODU1MzliZXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "2025 Medicare Plans + Benefits - UnitedHealthcare Company", "prominent_button_name": "Visit Website", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: http://api.myuhchvision.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTA5Ljc3OTR8NmE2MDdhMzFkNzdlNzA2ZmVjOTAwNjczMmM0NDE0NDJjODU1MzliZXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx Model: Joe Sandbox AI	{ "brands": [ "GoHealth", "UnitedHealthcare Company", "Uber Health", "PlanEnroll" ] }

URL: http://api.myuhchvision.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTA5Ljc3OTR8NmE2MDdhMzFkNzdlNzA2ZmVjOTAwNjczMmM0NDE0NDJjODU1MzliZXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx Model: Joe Sandbox AI	{ "brands": [ "GoHealth", "UberHealth", "PlanEnroll" ] }
	{ "brands": [ "GoHealth", "UberHealth", "PlanEnroll" ] }
URL: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bde Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Find a Medicare Advantage Plan in 3 Simple Steps", "prominent_button_name": "Find My Ideal Plan", "text_input_field_labels": "Enter ZIP Code", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bde Model: Joe Sandbox AI	{ "brands": [ "GoHealth" ] }
	{ "brands": [ "GoHealth" ] }
URL: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bde Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Find a Medicare Advantage Plan in 3 Simple Steps", "prominent_button_name": "Find My Ideal Plan", "text_input_field_labels": "Enter ZIP Code", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bde Model: Joe Sandbox AI	{ "brands": [ "GoHealth" ] }
	{ "brands": [ "GoHealth" ] }
URL: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bde Model: Joe Sandbox AI	```json{ "legit_domain": "gohealth.com", "classification": "known", "reasons": [ "The URL 'medicare.gohealth.com' is a subdomain of 'gohealth.com', which is the legitimate domain for the brand GoHealth.", "GoHealth is a known brand in the health insurance and healthcare services sector.", "The use of a subdomain 'medicare' is plausible as it could relate to a specific service or product offered by GoHealth.", "There are no suspicious elements in the URL such as misspellings or unusual domain extensions." ], "riskscore": 2}
URL: medicare.gohealth.com Brands: GoHealth Input Fields: Enter ZIP Code
URL: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bde Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Find a Medicare Advantage Plan in 3 Simple Steps", "prominent_button_name": "Find My Ideal Plan", "text_input_field_labels": "Enter ZIP Code", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bde Model: Joe Sandbox AI	{ "brands": [ "GoHealth" ] }
	{ "brands": [ "GoHealth" ] }
URL: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bde Model: Joe Sandbox AI	```json{ "legit_domain": "gohealth.com", "classification": "known", "reasons": [ "The URL 'medicare.gohealth.com' is a subdomain of 'gohealth.com', which is the legitimate domain for the brand GoHealth.", "GoHealth is a known brand in the health insurance and healthcare services sector.", "The use of a subdomain 'medicare' is relevant to the services GoHealth provides, as they deal with health insurance, including Medicare.", "There are no suspicious elements in the URL such as misspellings, extra characters, or unusual domain extensions.", "The input field 'Enter ZIP Code' is consistent with a legitimate service that might require location-based information." ], "riskscore": 2}
URL: medicare.gohealth.com Brands: GoHealth Input Fields: Enter ZIP Code
URL: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bde Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Find a Medicare Advantage Plan in 3 Simple Steps", "prominent_button_name": "Find My Ideal Plan", "text_input_field_labels": "Enter ZIP Code", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bde Model: Joe Sandbox AI	```json { "brands": [ "GoHealth", "Trustpilot" ] }
	```json { "brands": [ "GoHealth", "Trustpilot" ] }
URL: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bde Model: Joe Sandbox AI	```json{ "legit_domain": "gohealth.com", "classification": "known", "reasons": [ "The URL 'medicare.gohealth.com' is a subdomain of 'gohealth.com', which is the legitimate domain for the brand GoHealth.", "GoHealth is a known brand in the health insurance and healthcare services sector.", "The use of a subdomain 'medicare' is consistent with legitimate practices for organizing content related to specific services or topics.", "There are no suspicious elements in the URL such as misspellings, extra characters, or unusual domain extensions." ], "riskscore": 2}
URL: medicare.gohealth.com Brands: GoHealth Input Fields: Enter ZIP Code

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jan 9 22:21:43 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9913403191080112
Encrypted:	false
SSDEEP:	48:8vSbdcTsTHCTidAKZdA1uehwiZUklqehly+3:8vFQ2u+y
MD5:	88D9B20E90400BD248F7679A60788727
SHA1:	A6ADC58979DE6474A68B0130131D33640173E82C
SHA-256:	CBB4E50DB16BBB371ED0A596B1C0949BF76C53B30951FE9CEE95E2075CFD41C5
SHA-512:	F17EA11E2D2DC543872E7030E8DCB9FB639831CA69E274A73F4094203328F53BAC829ECF9D09A7F37D60D7CD963F5A7DDDE5D2FB6583CE4841FBF9D3976ABE16
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......>.b......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.I)Z......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V)Z......L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.V)Z......M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.V)Z.............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V)Z......N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............g.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jan 9 22:21:43 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.008034941768171
Encrypted:	false
SSDEEP:	48:8mSbdcTsTHCTidAKZdA1Heh/iZUkAQkqehuy+2:8mFQ249Qny
MD5:	A2FF6E855C9A4832A9EA365091283BF2
SHA1:	EA5155490F845A888A00FA28721DE3451D6826F2
SHA-256:	B20A09CCD8127A7BDD303E165E615B4B6D0C4A67271A67DC169AE3251982C379
SHA-512:	98BA73617B4972563AB040452494B9E8D03FE0EB5FC01E038BF08ACCC8C0CB0B6890289EF8DFBD49D4F8D2CC604281CE6209B99B99067B270F70606581F6727B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....dv>.b......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.I)Z......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V)Z......L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.V)Z......M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.V)Z.............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V)Z......N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............g.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 08:59:33 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.013765463254422
Encrypted:	false
SSDEEP:	48:8FSbdcTsbHCTidAKZdA149eh7sFiZUkmgqeh7s4y+BX:8FFQ+EnSy
MD5:	DAF354DE4E9A4363BF340746341BD9F5
SHA1:	5029048B2B02ACFBCC8C2462FDF08407928B1F26
SHA-256:	6F7636FC262FAD735558731630DD3710CBFD8E77246F35EA7C9132ACE0CF23AA
SHA-512:	8C9D6393F33D72DF4AD0EA88056256674B96A56D1E6FB2F56E5D546D51ACB67417C81979E890585136EBA11042D3B00F5EEEA7059785765454FA157D37295CF8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....K..r.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.I)Z......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V)Z......L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.V)Z......M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.V)Z.............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VEW.L....N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............g.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jan 9 22:21:43 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.0031962984540534
Encrypted:	false
SSDEEP:	48:8HBSbdcTsTHCTidAKZdA14ehDiZUkwqehqy+R:8HBFQ2zQy
MD5:	B061B5335D0F7A84B2A3AED54B9978BC
SHA1:	BB20565C3A9FE55286F625C0ACDB583EE0FF4837
SHA-256:	9AC7D5F11A43A70A3C06C335D1E2E102F5B68A20461F60A0956AFF85B1F6AE82
SHA-512:	746A6A8DB149FB083239BE2D23BEBB7EAE497850D1424F22A747A11669D2CC24F9ED43A1B48E2700A8571670F3CA46EF9BE9835BCB169DEC14CEA8FA8A396571
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....=o>.b......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.I)Z......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V)Z......L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.V)Z......M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.V)Z.............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V)Z......N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............g.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jan 9 22:21:43 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.99494147202613
Encrypted:	false
SSDEEP:	48:8sSbdcTsTHCTidAKZdA1mehBiZUk1W1qehcy+C:8sFQ2T98y
MD5:	8162ACE28B0B1F32B22499E12EB28A3A
SHA1:	D083DBC2E37339760D0AC13E845F9E5E1B1B8712
SHA-256:	DE42ADAD7FA27442E5099CFF013C0B1B8CF09348CA934A3DB0F62202F27E9BB9
SHA-512:	6DAD516EC4F154E61167F93528FE1E24E3389B482B1F2511D2B62DACF07C9187CF51024D761B54B9FAD80AEF969A97B8E0DBBB226344590EF820EB753DA5C0E0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....}>.b......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.I)Z......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V)Z......L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.V)Z......M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.V)Z.............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V)Z......N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............g.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jan 9 22:21:43 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.002515454367088
Encrypted:	false
SSDEEP:	48:85SbdcTsTHCTidAKZdA1duT1ehOuTbbiZUk5OjqehOuTbSy+yT+:85FQ2STyTbxWOvTbSy7T
MD5:	B77C82ACE54EBF8E9B960265BF7AFC8E
SHA1:	FEBEC3E3FAA86F05ACC89D7075CAF208380D5951
SHA-256:	8F3C13ADE2C545460DDAF7F8FEC749D27E8F1E64182045B88A7E6EAE3451096B
SHA-512:	E89D9C3525E33BDECE01590039DF2329D00F3A3D02D2028D79AD386C15D60C9E4B5DD2130F83D0691770828ABCE4A6AC96893D5EDC7FA33F6904BCCC1B1A1D0E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....6.e>.b......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW$O..PROGRA~1..t......O.I)Z......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V)Z......L.....................p+j.G.o.o.g.l.e.....T.1.....EW.L..Chrome..>......CW.V)Z......M......................k..C.h.r.o.m.e.....`.1.....EW.L..APPLIC~1..H......CW.V)Z.............................k..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V)Z......N.......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............g.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (10152), with no line terminators
Category:	downloaded
Size (bytes):	10156
Entropy (8bit):	5.326661777620607
Encrypted:	false
SSDEEP:	192:LfoVo5klW2A+7KlvaE57g+IU98fm0AAb+Tmld2m/HdkheOmDlui4zeUuisgevYEm:LxX2A+7KlyY7gIubpb+qlAm2EDIX
MD5:	DAB15C71247668BFFAFD995C8ADC3545
SHA1:	DB964F4A5FFE30567FB5206B05DAD379738A8DD8
SHA-256:	7BE6A292474B71C85B885D4D4FF75E427CF7898A2B88E7929B80051C0BC927B2
SHA-512:	3D8B2ACC8F1B08A9DB05EACA3E66A853958ECD4EB75B43B92A6A08E7F617838882DD79E4D68AF655658F1D0EE2D638957B94A78C8DE39922057D5B6F5DFB2F18
Malicious:	false
Reputation:	low
URL:	https://medicare.gohealth.com/_next/static/chunks/1048-71f1a1614a540721.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[1048],{72763:function(e,t,s){"use strict";s.d(t,{C:function(){return MedicarePlans}});var i=s(52322),o=s(75841),n=s(72841),r=s(97438),l=s(4769),a=s.n(l),MedicarePlans=function(){var e=(0,r.$G)("common").t;return(0,i.jsx)("div",{className:a().container,children:(0,i.jsxs)("div",{className:a().plans,children:[(0,i.jsx)("img",{alt:"Carrier map",src:"".concat(n.rf,"/carrier-map.1728363876.jpg"),srcSet:o.PpQ.buildSrcSet([["".concat(n.rf,"/carrier-map.1728363876.jpg")],["".concat(n.rf,"/carrier-map@2x.1728363874.jpg"),"2x"],["".concat(n.rf,"/carrier-map@3x.1728363874.jpg"),"3x"]]),className:a().img,width:"600",height:"492"}),(0,i.jsxs)("div",{className:a().wrapper,children:[(0,i.jsx)("h2",{className:a().title,children:(0,i.jsxs)(r.cC,{t:e,i18nKey:"medicarePlans.title",children:["GoHealth Has Helped Over"," ",(0,i.jsxs)("span",{className:a().together,children:["10 Million",(0,i.jsx)("sup",{children:"1"})]})," ","Medicare Customers"]})})

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	143063
Entropy (8bit):	5.3863567441702465
Encrypted:	false
SSDEEP:	1536:Cbn8XV+PV62xWeWaOAu2/xEcF0vuAmpzye454WyHEeQjR+itpXncZNmr6wG:VaVGvYwe454W/jntpXINOrG
MD5:	1DF186E33EA13BEC7E7FF0140C51D2CB
SHA1:	ACCE479BAC91610908605021D440028C23984566
SHA-256:	7E21009D2D7904BE623826AD17B73461B127795BE72D338FDCE3AFDB64786396
SHA-512:	BC1BC28D807A29E0B85674A81988CCE82AD3272F5E5C95D1B859903FE0A06B30A477096AD0B7A228A6C48CFA3D155C5D72EB6CAFC7B9EE6245FD3317746F0C33
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{98749:function(r,n){"use strict";function getDeploymentIdQueryOrEmptyString(){return""}Object.defineProperty(n,"__esModule",{value:!0}),Object.defineProperty(n,"getDeploymentIdQueryOrEmptyString",{enumerable:!0,get:function(){return getDeploymentIdQueryOrEmptyString}})},11541:function(){"trimStart"in String.prototype\|\|(String.prototype.trimStart=String.prototype.trimLeft),"trimEnd"in String.prototype\|\|(String.prototype.trimEnd=String.prototype.trimRight),"description"in Symbol.prototype\|\|Object.defineProperty(Symbol.prototype,"description",{configurable:!0,get:function(){var r=/$(.*)$/.exec(this.toString());return r?r[1]:void 0}}),Array.prototype.flat\|\|(Array.prototype.flat=function(r,n){return n=this.concat.apply([],this),r>1&&n.some(Array.isArray)?n.flat(r-1):n},Array.prototype.flatMap=function(r,n){return this.map(r,n).flat()}),Promise.prototype.finally\|\|(Promise.prototype.finally=function(r){if("function"!=typeof r)re

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10664), with no line terminators
Category:	dropped
Size (bytes):	10664
Entropy (8bit):	5.409231808742436
Encrypted:	false
SSDEEP:	192:BM+KIRyZTvAcrJsuNDF0TPKVc63trg5Ia+UZvofWyla4:BM+KIRyZTvBsS0TPKVgIUoeU
MD5:	70B8155997078A1D96AA5AC48027AB1D
SHA1:	2F9916620F8FE6D14D4B1AD13F2780F338C7A8A4
SHA-256:	53DB919295DD19B3CE0697251A0F0EA4EC3C0C549367F04489470BF1A5D439D1
SHA-512:	F9AC82E6654B6C9D35A080BC5D1BB3644F134F95B596DE055E91FDADC4EBC12CB307C596A21FEABD4F093755D80A54895378AF8D3B881E2771C3C2CEABEBF4ED
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[3365],{52045:function(e,n,o){"use strict";o.d(n,{j:function(){return ConsentSection},V:function(){return ZipCodeSection}});var i=o(85333),a=o(6692),t=o(2281),r=o(26969),s=o(52322),l=o(2784),c=o(82876),m=o(97438),d=o(75841),u=o(13146),h=o(83452),_=o(61517),f=o(65414),p=o(12524),g=o.n(p),v=o(72792),b=o.n(v),ConsentSection=function(e){var n=(0,d.oR4)(),o=n.state,p=n.dispatch,v=(0,r._)((0,d.B4k)(),1)[0],y=(0,c.useSearchParams)(),x=(0,c.usePathname)(),N=(0,r._)((0,l.useState)(!1),2),j=N[0],k=N[1],w=(0,r._)((0,l.useState)(!1),2),C=w[0],S=w[1],E=(0,d.Cg)("med",{searchParams:y}),K=E.hasConsent,I=(0,t._)(E,["hasConsent"]),A=(0,m.$G)("common").t,M=(0,d.iSs)(o),P=M.phone,L=M.firstName,q=M.lastName,B=M.email;(0,l.useEffect)(function(){S(function(e){return e\|\|["/ma"].includes(x)\|\|(0,d.NX0)()&&!!B})},[B,x]);var onInput=function(e){var n=e.currentTarget,o=n.name,i=n.value;switch(o){case d.mAK.phone:p((0,d.ydV)({phone:(0,d.jVl)(i,P)}));break;cas

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65441), with CRLF line terminators
Category:	downloaded
Size (bytes):	68544
Entropy (8bit):	5.353273780967634
Encrypted:	false
SSDEEP:	768:zDoev7ihlr+MwjqU+s2SL3iY0w2+4PMdj4dZOfDxh1GiqxvC+24VfRzYshiP/Xt5:zD7Dihlr+MUQKI0f9h1Gib4LA8Bs
MD5:	A07833512D877DC182973CF42CDA7D79
SHA1:	28DCFE97957BBB239FCE68DBF64BB22338ABE500
SHA-256:	83146C62110F911CBC9E66DAA824D1F4E1D8F8AA6508AA45FE061932DB65FA27
SHA-512:	3656CCE575FC835853AA0B0F4AAF38D65DD3E4CA5985E1E64A9C211F6D5350A640D4AC48EE90507F7C3657E804DB9CB6DBB6A80B4475C12FF658C75CF4EB29AF
Malicious:	false
Reputation:	low
URL:	https://www.clarity.ms/s/0.7.59/clarity.js
Preview:	/* clarity-js v0.7.59: https://github.com/microsoft/clarity (License: MIT) */..!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return br},get start(){return yr},get stop(){return wr},get track(){return hr}}),e=Object.freeze({__proto__:null,get clone(){return Xr},get compute(){return Yr},get data(){return jr},get keys(){return Ar},get reset(){return qr},get start(){return Hr},get stop(){return Fr},get trigger(){return Wr},get update(){return Ur}}),n=Object.freeze({__proto__:null,get check(){return Zr},get compute(){return $r},get data(){return Dr},get start(){return Kr},get stop(){return ti},get trigger(){return Qr}}),a=Object.freeze({__proto__:null,get compute(){return ui},get data(){return ei},get log(){return oi},get reset(){return ci},get start(){return ri},get stop(){return ii},get updates(){return ni}}),r=Object.freeze({__proto__:null,get callback(){return wi},get callbacks(){return di},get clear(){return bi},get consent(){return yi},get data(){return li},

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	79
Entropy (8bit):	2.716326985350135
Encrypted:	false
SSDEEP:	3:tQTltaL5UJjV9GjUJjVE:6XG5UJjGjUJj2
MD5:	8E3DB10AF5A3E1CABE7AA67674E21188
SHA1:	E2314B0038DF2D49DDBE461F33A6797D4586CDE0
SHA-256:	87ECD5BABD6FD9F4F6F796D745AA38751FAF3985E3B55F87A2F53E506FE07362
SHA-512:	A4F136016F4591E021D54F06141896581371828BF02F662A050B2A36567DFEC6068A4C758815D481E01BD7D68692329B5EE228C854AB2D85246D05B56692FB09
Malicious:	false
Reputation:	low
Preview:	[71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	810
Entropy (8bit):	7.613098649032756
Encrypted:	false
SSDEEP:	12:6v/74/tDrFteOlUqmolJm2QDRJpWigiO7sz0CPTB81z1pa2qv0QWfO3vcUnKJri2:rtDRc0dlY1gIhPTB6PaBWm3v98WG7l
MD5:	8A42A43A6400B1B2B70F361D5522AB67
SHA1:	F0D03C0A05C96AAFD9A40507FAFB15ED2B1ECAB8
SHA-256:	7153107AC9582AF62278C8292C24C19495E820655ED3371870551C8BE536C5E3
SHA-512:	36D64901D3A0D9F9FA994557CE7B1E7D8E6B7EFB0EB08E76FB0F517B28A28E4BBBF46767B020DF4CFAC303BB979B0991A18AAE7896EACE5162E101C56E15695B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...(........m....IDATX..Mk.P....i.~.1..ZE;..E[..?....h@."Q........kTD..H......U..b.B.Z1N-.;.."38...~l..%..7..p.s.u.U....`.A....!.\.3......v...b....y.@.Y.?2....p...;8...h.A7.Y#...B..;...I..uF+h..........vp..2.iFh..-....<sx...;.........;...O.V....9..P..[.i....x.tI.=...:`gHm)x.p.B......#&...\|J.k...`a.n..f...'..h.-.U......V.......o......Z...p8#......d.n9/&....n.Dp...).Zu.y..w.hs...gN.=.x..t.n9........si....oj.Uvq7.;....[.....O..6A.. _..I3(C...S..563/.2$7W#,V.....C.G.........X.\|....T...W...%;..tM...T D...!?....z...&...X...4%.P..O......TnA..a......}P+~}.H..>...a...b. ..%l.@.......!GzA.+(4.........H.....K....F..Y.c..............D...Q%.....>.DU.I.A.%.J~J..6.p..T.[.N..8Ax...'.EU.D...]I.k"...1.p.b.....3.l..}..PU).S.....@..I.<.Pu.UW.......(z.S....IEND.B`.

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65450)
Category:	downloaded
Size (bytes):	179504
Entropy (8bit):	5.345321704344366
Encrypted:	false
SSDEEP:	1536:9wovhwvwV3sMwH+0G+ZBTr9ix6HeTX0XLDDDbGw5wyPGbFkKvyraIGw:RhwvwV8Mw9ZXixontAFkqon
MD5:	B7439FEE52BD06FCA840F47D0070CE89
SHA1:	C227008AB9E30A92FA2542418D879CDDEBC3A965
SHA-256:	1D8FC9555793CECEB306A49881AF4A8A92F419C9D64653821C9A842123073793
SHA-512:	1DF7D5C97E82665D6D7768EFA05729B7421C266BB79822F43EC4FC694BE9D83F88DA99B47686D5CBEA56D602DF5BAD043D82A100D4771801FE6D120FC2DC92B6
Malicious:	false
Reputation:	low
URL:	https://script.hotjar.com/modules.60031afbf51fb3e88a5b.js
Preview:	/! For license information please see modules.60031afbf51fb3e88a5b.js.LICENSE.txt /.!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_recording",TAG_RECORDING:"tag_recording",HEATMAP_HELO:"heatmap_helo",RECORDING_HELO:"recording_helo",REPORT_USER_ID:"report_user_id",MUTATION:"mutation",MOUSE_CLICK:"mouse_click",INPUT_CHOICE_CHANGE:"input_choice_change",KEY_PRESS:"key_press",MOUSE_MOVE:"mouse_move",RELATIVE_MOUSE_MOVE:"relative_mouse_move",CLIPBOARD:"clipboard",PAGE_VISIBILITY:"page_visibility",SCROLL_REACH:"scroll_reach",SCROLL:"scroll",SELECT_CHANGE:"select_change",VIEWPORT_RESIZE:"viewport_resize",SCRIPT_PERFORMANCE:"script_performance",REPORT_CONTENT:"report_content",INSERTED_RULE:"inserted_rule",DELETED_RULE:"deleted_rule"})},6939:function(e,t,n){"use strict";n.d(t,{f:function(){return f},W:function(){return g}});const r=Object.freeze({LIVE:"LIVE",REVIEW_WEBAPP:"REVI

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1x1, components 3
Category:	downloaded
Size (bytes):	651
Entropy (8bit):	6.8464925348326915
Encrypted:	false
SSDEEP:	12:FC9YM8fwy0lJ0Xx0WzOsvWGKkCHdcfmcGHMf/qXzUOrS07DAzEgOsvWGKkCHdcf5:49YMWbo0XxDuLHeOWXG4OZ7DAJuLHenx
MD5:	6E9CB3C3A7914653B2D2E7AEF186E71E
SHA1:	89AF7B8900C4297A93A2B43AAB59D9A3A4716C63
SHA-256:	EBC24EAD25EB3C06D3E6DEAB6403105722925BF74A469271A1A923CB78FE1BFB
SHA-512:	633E886A3268E0532C12F9EF01800D56F388BCE67BD504F5E32909225C84ADC976B1E79A556D445C9DD51203A048396F15985C7DF4B70F2E37EDDEE7AC074142
Malicious:	false
Reputation:	low
URL:	https://tags.srv.stackadapt.com/sa.jpeg
Preview:	......JFIF.....`.`.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(..?...Q.{.V~qz.C.....{.

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	2.1395785763988275
Encrypted:	false
SSDEEP:	12:QANxOjHa+O8dTaoAgQUPaaRwayaaRalSXooh55555555555555R:FOp7dOoAgQmwlaY
MD5:	C93FBAF4A9F627AB88F45A0125751D06
SHA1:	5AC844234FC19F865D2F5366F85B2485B236CAC0
SHA-256:	DE9777A9F2958EA5752EFDD56BE9B22E875059355B4217A1D70FDE7D1FDF5894
SHA-512:	091CF31A03663823FF31073BECEE4CF771B38BB69ABD23FBEBF091232363B0DBDC65C65B908086A89A36B7BC6CCDF4E56A4A75A0D5A070FEAB914E4B21553951
Malicious:	false
Reputation:	low
URL:	https://cdn.gohealth.com/lead-generation-sites/medicare/favicon.1631190026.ico
Preview:	............ .h.......(....... ..... ..............................................................................................................b0.n>..n>...b0................................................n>..n>..n>..n>..n>....`..........................................p.n>..n>..n>..n>..n>....p................................n>..n>...V ..{P..{P..n@...p..................................n@.n>..n>..n>..n>...............................................n@.n>..n>..n>..n>..n>....p......................................n@.n>..n>..n>..n>..n>..n>........................................n>..n>..n>..n>..n>..n>...V ......................................b0.n>..n>..n>..n>..n>..n>.........................................wJ..n>..n>..n>..n>..n>....`.........................................wJ..n>..n>..n>..n>...V ..............................................n@.n>..n>..n>..n>.....................................................wJ..n>..n>............................................................

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 53872, version 1.0
Category:	downloaded
Size (bytes):	53872
Entropy (8bit):	7.994443259610615
Encrypted:	true
SSDEEP:	768:tggTy9VBKDoIFGbT/UXwmm9j+BVMajL5S3gHCP7gv3q/l8/qvxuB1TR8q8DE71Ow:g1gGbygj+BKue7A32XxurO1DEBNcJS
MD5:	CEC16884ADA3069CD7349A8E90BBAD63
SHA1:	E76DBC9E787C468AFFF2B5538E1FF596F0688818
SHA-256:	196B3DF4748ADDE6E5C2BAFFDD046A45D97E77D375EB9C18E175142BB955DCFE
SHA-512:	256B0ECCDA353ABC3FBCA89A2036E55D5F3CA13D294BB078F007BECCB95E61F3B5CD18F0388E7DB0DC2093A082501367D9BDA02FE748411C6C8827988933F212
Malicious:	false
Reputation:	low
URL:	https://use.typekit.net/af/7741ba/0000000000000000774d56f7/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n6&v=3
Preview:	wOF2OTTO...p.......(.............................F....?DYNA.....?GDYN.y.......D.`..&.6.$..Z....v. [.....<.N...{....J....1..UUUUUU....k.^U...?...~............_.....?.....................R.T.vV.^4...-..sGE.\L..F.T..BuUvs.{cr....+...W.~}I).. ..Z...#..\|..m.S....v..8.)Ph.25....5..w7L\A......\|...y.....>#....CpN....D"..j.kA.....@.C.......; ]..C....,.K.%..ux............8ts...0.......`.MJ,0....Y.>.........W.M.3sb......N.,....N.../....H.@......e:..j..^.7.h...'...~..u;.^;.....Gx...G.)c)".=B..0Q.\|3.....2L.!4.1"c...L.........[..[oG..x......C.C..0`.1 ,)-IX....pdaII1..().....w.......,.A...d....0.U....I..HL.V.G4.?!.K..K%/...m.UD."..R..`.....O!..Tp-V.PS.S.g....{...y..f...'..`-.....i..5.J........Cs~.....d..&q<@m...,...\|N....O...7.."...u..sKK.....J...K+M}...,...X@......W~..V.85..]...G6...;...I..c;C?J3.iM\..k.1f\|j.SW..&..OD$...`?.V.D.. ".<.ODD.H.......'A$..$......'A.O?.g...$t..'..].V,X1[.OT....R.Xq.!"g......s..h{tq...2..9F.kV.....`.........].,Y.9.$....e.Lz.......$..U.]

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.56399877426736
Encrypted:	false
SSDEEP:	3:fFwNyhId5pQTSAvwIANpvdvY:fFvu5+TzUpvdA
MD5:	38CAF85B238B9609EA7319E818FCC03F
SHA1:	1FB6202B2E2C5C9D5AC4538FA0F6A63EC0461464
SHA-256:	752C7E33A9B5457AACCD32DDFDB00D0B8DA9A3CDC8F51F575E917218EDF78F06
SHA-512:	1335F4F4FC8B0B69BF956090C1A70371F13DE75223352E9E2730E4C82F0EC160DD8A3B1CE692F923060DD7F6CB0E4C86A7D3B726B75110369889BF7B13B9575E
Malicious:	false
Reputation:	low
URL:	https://tags.srv.stackadapt.com/sa.css
Preview:	:root {. --sa-uid: '0-96b851f9-7bb6-567e-717a-e943de1df0ac';.}

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1895)
Category:	downloaded
Size (bytes):	147117
Entropy (8bit):	5.528586287179935
Encrypted:	false
SSDEEP:	1536:Ej4EEHxzJkfKnTi/cteUEOKl16X5II615nUnU/WD3g78JSzg2SmAtGFUI/+r9334:vKl1KII6fXsS2mpB+N3QgHMOYXQzG
MD5:	23CDDD0EB6B46DE7881C44E559CDA790
SHA1:	7A4CDED31134793439F142F724388EC866A991F4
SHA-256:	16C22C8F3AF4E77F26A967C89371EF1ED26E3B49A6611E5F8773B036C9F3845F
SHA-512:	18748F5D453DD6DEA39FA42456606712F15A1072B2E4F305BF8A812378DBBF353761DAD7BA2DD12ED19D8046B712A356DDC1C4F3E346B244478CC51C6B05AC2E
Malicious:	false
Reputation:	low
URL:	https://www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"5942599812270562725",packages:"domains",module:"ads",version:"1",m:{cei:"17300003,17301431,17301433,17301436,17301548,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_chatbot_aa":500,"afs_gpp_api":0,"disable_usp_api":10,"heterodyne_test":85

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	523
Entropy (8bit):	4.791717215916153
Encrypted:	false
SSDEEP:	12:tr/BWGuXM65e+hTMBi2NXkLnrn4dUgp4AQ2n:tzBXuXMMZCi2NXzdUguA/
MD5:	0B851BB95C11C46CDA6E567C0C1B3FC2
SHA1:	8EA93A43ADBF60416912715E50D76CFDB2A21DAC
SHA-256:	BCF0AB6BD4CE36E592D673E3C10E0E88942452DD97B918D70D21E205EE6E4FF3
SHA-512:	86A8F1A6FD3B8ABC6FEA642070869D96ED399D961BED75DBD3832A7FA62ABACBE18E6CF27C7407CF0ACDF9ED26F8A55552D313BB622C6510033A27942F423BAB
Malicious:	false
Reputation:	low
URL:	https://cdn.gohealth.com/lead-generation-sites/medicare/x_logo_dark_gray.1724068743.svg
Preview:	<svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M0 16C0 7.17867 7.17733 0 16 0C24.8227 0 32 7.17867 32 16C32 24.8227 24.8227 32 16 32C7.17733 32 0 24.8227 0 16ZM23.7131 9.14286H21.1895L17.0312 13.8962L13.4358 9.14286H8.22857L14.4504 17.2787L8.55355 24.0186H11.0786L15.6298 18.8182L19.6074 24.0186H24.6857L18.1999 15.4441L23.7131 9.14286ZM21.7022 22.5081H20.3039L11.1755 10.574H12.676L21.7022 22.5081Z" fill="#1B1D1F"/>.</svg>.

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5518
Entropy (8bit):	4.641104351808004
Encrypted:	false
SSDEEP:	96:pKa2OyWW1QuuqBhbWO7xZzcommfl/ZD93T443Q2LYzHZnLbFiSqovjh:pKxWWV1BhbWOj1mm9bVLMVLD
MD5:	4037528AA2C0060922EE6C8A2674C929
SHA1:	6CD2760EB1D62C87301CAD5345CDF62B4AD44DA3
SHA-256:	F4B6120AA1AD65A429ACE356C555D04FBF07039E4EC1D255D4AF0491F5844E1C
SHA-512:	E4C4160679ED512C9DACF6338AC516A2D796D5B7FAB901385DE6B961A6571032941DF2E582CEFEBE63971398BDDE4A28F2B8BEF54197EE771DA85475F4557008
Malicious:	false
Reputation:	low
Preview:	<svg width="144" height="29" viewBox="0 0 144 29" fill="none" xmlns="http://www.w3.org/2000/svg">.<g id="GoHealthLogo">.<g id="Group 3">.<mask id="mask0_12_2771" style="mask-type:luminance" maskUnits="userSpaceOnUse" x="0" y="2" width="25" height="27">.<path id="Clip 2" fill-rule="evenodd" clip-rule="evenodd" d="M0 2.15039H24.3393V29.0002H0V2.15039Z" fill="white"/>.</mask>.<g mask="url(#mask0_12_2771)">.<path id="Fill 1" fill-rule="evenodd" clip-rule="evenodd" d="M21.0493 28.3994H18.1896V25.7063H18.1177C16.3303 27.9684 13.4696 29.0099 11.3247 29.0099C4.03068 29.0099 -0.00976562 24.1621 -0.00976562 17.8063C-0.00976562 7.03401 7.03373 2.15039 13.6843 2.15039C19.6912 2.15039 24.3037 4.95146 24.3393 10.9478H19.8699C19.6912 7.46483 17.2955 5.81326 13.5412 5.81326C7.46287 5.81326 4.45966 11.9534 4.45966 17.6629C4.45966 22.4385 6.9981 25.3472 11.4675 25.3472C15.8655 25.3472 18.261 22.4026 19.2262 18.3094H12.2185L12.9336 14.8979H23.91L21.0493 28.3994Z" fill="#151D8E"/>.</g>.</g>.<path id="Fill

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5177), with no line terminators
Category:	dropped
Size (bytes):	5177
Entropy (8bit):	5.869323719489077
Encrypted:	false
SSDEEP:	96:1g2VilZtckx+9DgTlPJdiLW+iSah8vf1dtzlTaiVHRvPCFH:12cV9sT3AW7NIzLVxvPCFH
MD5:	2333B015CC364F8724C5E109D318F961
SHA1:	D5E44E12A665FA6EA63D04F870B40CECC7B4B96D
SHA-256:	0E993963455A96E86635375A121A7BE3D2BAC6BF650900B91C06F4D9A06B5283
SHA-512:	C70799E37937968951AF17F0F2F19691D9169ACA068906D208A9CAE7A30904D7107A74C4B42E280DD0C4CC3116B2A76A5767667AB4B537EEF1B8C8FF3EC7BFED
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]}d=d[d.length-1];c=n&&c==="es6"?g[d]:null;b=b(c);b!=null&&(a?h(q,d,{configurable:!0,writable:!0,value:b}):b!==c&&(t[d]===void 0&&(a=Math.random()*1E9>>>0,t[d]=n?m.Symbol(d):"$jscp$"+a+"$"+d),h(g,t[d],{co

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (10152), with no line terminators
Category:	dropped
Size (bytes):	10156
Entropy (8bit):	5.326661777620607
Encrypted:	false
SSDEEP:	192:LfoVo5klW2A+7KlvaE57g+IU98fm0AAb+Tmld2m/HdkheOmDlui4zeUuisgevYEm:LxX2A+7KlyY7gIubpb+qlAm2EDIX
MD5:	DAB15C71247668BFFAFD995C8ADC3545
SHA1:	DB964F4A5FFE30567FB5206B05DAD379738A8DD8
SHA-256:	7BE6A292474B71C85B885D4D4FF75E427CF7898A2B88E7929B80051C0BC927B2
SHA-512:	3D8B2ACC8F1B08A9DB05EACA3E66A853958ECD4EB75B43B92A6A08E7F617838882DD79E4D68AF655658F1D0EE2D638957B94A78C8DE39922057D5B6F5DFB2F18
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[1048],{72763:function(e,t,s){"use strict";s.d(t,{C:function(){return MedicarePlans}});var i=s(52322),o=s(75841),n=s(72841),r=s(97438),l=s(4769),a=s.n(l),MedicarePlans=function(){var e=(0,r.$G)("common").t;return(0,i.jsx)("div",{className:a().container,children:(0,i.jsxs)("div",{className:a().plans,children:[(0,i.jsx)("img",{alt:"Carrier map",src:"".concat(n.rf,"/carrier-map.1728363876.jpg"),srcSet:o.PpQ.buildSrcSet([["".concat(n.rf,"/carrier-map.1728363876.jpg")],["".concat(n.rf,"/carrier-map@2x.1728363874.jpg"),"2x"],["".concat(n.rf,"/carrier-map@3x.1728363874.jpg"),"3x"]]),className:a().img,width:"600",height:"492"}),(0,i.jsxs)("div",{className:a().wrapper,children:[(0,i.jsx)("h2",{className:a().title,children:(0,i.jsxs)(r.cC,{t:e,i18nKey:"medicarePlans.title",children:["GoHealth Has Helped Over"," ",(0,i.jsxs)("span",{className:a().together,children:["10 Million",(0,i.jsx)("sup",{children:"1"})]})," ","Medicare Customers"]})})

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://wave.outbrain.com/mtWavesBundler/handler/003678ec07dcd7129be54125730b23cabc
Preview:	{}

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11806)
Category:	dropped
Size (bytes):	450193
Entropy (8bit):	5.633748497007141
Encrypted:	false
SSDEEP:	6144:t4XAiDy+3IsyyHPQSVUvcv4fSTnhsGf5X0+GDhNcvnzH08n:mXJ3ItaPQyv8+GDfiTj
MD5:	37B4722DC24913C2E9CEA676E48F6D56
SHA1:	F4674791A6A652EF0D4629D41D206FAAF028053C
SHA-256:	3DF228368388B6739265051AB46B7C82D1E8AA44ACC274F2A2A5F16409D354DF
SHA-512:	7A04027AA8DBBB83EA24C13F1369776650D60A057EDFBE33CA83C0A318B24810C578973629C7AF9E250DA548D79E9A6D40A2BA56EAE39D395DB281CAA4EF4C38
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ads_datatos","priority":36,"vtp_instanceDestinationId":"AW-1042882457","tag_id":39},{"function":"__ogt_1p_data_v2","priority":26,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_manualEmailEnabled":false,"vtp_cityValue":"","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneValue":"","vtp_autoPhoneEnabled":false,"vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"","vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":6},{"function":"__ccd_ga_first","priority":25,"vtp_instanceDestinationId":"G-G99G7L25WL","tag_id":33},{"function":"__set_product_settings","pr

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	65
Entropy (8bit):	4.0299097360388085
Encrypted:	false
SSDEEP:	3:IskNjygbU8e2r+nqh8oO:wj3o2GoO
MD5:	2489B6BEDA4E86203D22D9C4D2E67094
SHA1:	590C361A0E91BB56D08DDEC98BF49A02E017D191
SHA-256:	E7112B70EED95D42B178135728E6153E34F07001827870748DE87CD7DEC3538E
SHA-512:	2DB08EB201F83DD7C2B7293A1E8375C0FE06B1787E21EC0D2F6EF3BC9D5355CCC06208B79FF2457C0175B30A1643AE3B624684E4E834AFDEEA727D7E61A0FB3C
Malicious:	false
Reputation:	low
Preview:	<HTML><HEAD> <TITLE>200 OK</TITLE></HEAD><BODY>.OK.</BODY></HTML>

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5189), with no line terminators
Category:	dropped
Size (bytes):	5189
Entropy (8bit):	5.879353542659422
Encrypted:	false
SSDEEP:	96:1g2VilZtckx+9DgTlPJdiLW+iSah8vf1dtzlTasVuRv2I:12cV9sT3AW7NIzxVsv2I
MD5:	00A0F53EFAB331677426268E9FDD52F6
SHA1:	6BCCC39C8D5008C6D1A2CA14564A10B49448ED04
SHA-256:	3793F04ECFDFC07BE97B89B2E6DDB0939FDAD58B27F5F53F91CA0F41DFBDFBD9
SHA-512:	86725D46BC66C88EAE82C034DDC4E4473E4635F9D57AB09EAA14A1DDB851EA0113E5904F119FB89BA4AD8DA59A948B13B85BF03E05CF1049B8B7DB8845A604BB
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]}d=d[d.length-1];c=n&&c==="es6"?g[d]:null;b=b(c);b!=null&&(a?h(q,d,{configurable:!0,writable:!0,value:b}):b!==c&&(t[d]===void 0&&(a=Math.random()*1E9>>>0,t[d]=n?m.Symbol(d):"$jscp$"+a+"$"+d),h(g,t[d],{co

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 17280
Category:	downloaded
Size (bytes):	6654
Entropy (8bit):	7.971094984177332
Encrypted:	false
SSDEEP:	192:gi1BQ2Fz6/uL/O6DfbqocI3AKv8Pkw/oi:gWFe+W6Dbqol/EP/Qi
MD5:	62B1412D7F9F007803350CC41D44DB89
SHA1:	0ACC2C248817DBA7C007F63818B7789870CEC7D8
SHA-256:	A0CB5F9A81701E505B0B4D805D3EDA854808B7CA647BF422232EDA95B37839F7
SHA-512:	0ED3145821874DB587E033BA61F9873CCFDB405163671061C7EB326C2E106EB8767D63D9ACBA07E8B571ABC57509F86AB320CCAC10310D3EFCE2270CB5F5630E
Malicious:	false
Reputation:	low
URL:	http://api.myuhchvision.com/
Preview:	...........\yw.......97...I.^H.6^c..Nlr.\|..@H.$.x....U.$...7...KUuuu........G...[....dh.......[T....~u.......f.....V...f7....o...Q...O]...,.......}9..N.......<.G..3.a..<.......).w.;...n..+5...R...fG..U..0.]O{.....u..^..\|...[.'..N........z......atp.s..n...n..u._L.u&..E.<...4.[.WM.\|.....f..,.u.~N..........~5...q.i..7.~.....8..a.M..j..}f...b..........A...z.N.^.......U..&.M..M...?.....Y...%.6}S.2..Y...%o...(.;...Wm'...>...>x4=...3..v..._XL.3...Ow._jV.@..k.,..f....LmcW..V......smS)w...n9S..b.Y..9.....q0^.....^r[....&L.%..b..-..]I.O.x.0.?...W..&....-.f...{o......ID.%.......>...3pwD.N4.0.~....D.@...e1.Z...I..MH.l&I..g.<2wC....##.t\2....X.{..b3.>u=.....1.:..i..,A.$U....v.X.s.K04..1P..G....;m..-G...H....EV-p..E6x...w.^.....+U8J.>..P..XI....23...~.. !.j.9.v%.(3v.6.l............'..`.u....).i........N..=_...{8.66-.QO....\.k&.\|?5..c+..N.\|.g>.].ec...]........Y@$..Y.lw`..........;...].@.b..L.....'OLZJ..#.......X.@.N2...h..\|\.`.H.

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65468)
Category:	downloaded
Size (bytes):	326285
Entropy (8bit):	5.466486702829229
Encrypted:	false
SSDEEP:	6144:Fd9aRwfJEQ2SG2PALWbKow/i/BrRflOGP/devJXCtLIF:FHrfd/YLmK1i/BrRflOGndCF
MD5:	1CEBE4BA01A1DB2A2EDB49F5530A4A8D
SHA1:	AF60D957A8DDE65FD1156FCDCBB46B20E86D080C
SHA-256:	DB11E14372E70843F1D371C09099399C15FB0035355CA4F01DCF523A391A88E0
SHA-512:	4F0500C234BAD5686AFC8CFB9764FEDD900CFEEC3ABAD0E0C6A3A21EA59F8FE80AACDE15E86B73B0902177A45E49519DDA79DA86CDB754E88C2647FE34BB05A8
Malicious:	false
Reputation:	low
URL:	https://cdn.optimizely.com/js/24547810247.js
Preview:	/! For license information please see client.min.js.LICENSE.txt /.(function(){var __webpack_modules__={5817:function(t,n,i){var e;!function(r,o){"use strict";var a="function",u="undefined",c="object",s="string",f="model",l="name",d="type",v="vendor",h="version",p="architecture",g="console",m="mobile",_="tablet",y="smarttv",w="wearable",b="embedded",E="Amazon",I="Apple",A="ASUS",T="BlackBerry",S="Browser",k="Chrome",R="Firefox",C="Google",N="Huawei",D="LG",O="Microsoft",x="Motorola",M="Opera",P="Samsung",L="Sharp",V="Sony",U="Xiaomi",F="Zebra",B="Facebook",z=function(t){for(var n={},i=0;i<t.length;i++)n[t[i].toUpperCase()]=t[i];return n},G=function(t,n){return typeof t===s&&-1!==j(n).indexOf(j(t))},j=function(t){return t.toLowerCase()},q=function(t,n){if(typeof t===s)return t=t.replace(/^\s\s*/,""),typeof n===u?t:t.substring(0,350)},H=function(t,n){for(var i,e,r,u,s,f,l=0;l<n.length&&!s;){var d=n[l],v=n[l+1];for(i=e=0;i<d.length&&!s&&d[i];)if(s=d[i++].exec(t))for(r=0;r<v.length;r++)f=

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9849), with no line terminators
Category:	dropped
Size (bytes):	9849
Entropy (8bit):	5.072239606971038
Encrypted:	false
SSDEEP:	96:uHER8ln+hjHvYRr8/85XzJ2rHoeAY/Q06IMl9oLQ/kiO8nF/cJsNxankxp6EtIMx:uW8N+h7vY18kRz4rIePI06tvLeMaDRap
MD5:	2B3BAD6DEC171977DB486EA4B6900986
SHA1:	8B88269EDEE4C5CD7D71AC72FC66D82E310AC35A
SHA-256:	E93DD325337E549C83BAD8B4E096E4DF24F887A6DDB0C408AEFC57DC938349FE
SHA-512:	3F851769AC2180A7DD5A960637E4035C07F8AF5853BEF82AD6725147AC75BAF1409E54BC92A0F1EA1908CF17AF889B5C4923F78A6E19792376960B75B2C4CD39
Malicious:	false
Reputation:	low
Preview:	self.__BUILD_MANIFEST=function(c,s,e,a,t,i,d,r,n,u,h,f,l,b,k,m,o){return{__rewrites:{afterFiles:[],beforeFiles:[],fallback:[]},"/":[c,s,e,"static/css/7e39246cedc4a755.css","static/chunks/pages/index-a21b158ab4d5f8d7.js"],"/_error":[c,s,"static/css/25a0e90db974b3b4.css","static/chunks/pages/_error-d72d5dbcb4d82b13.js"],"/goodrx/schedule-call":["static/chunks/4866-5425bd04ac2cac71.js",c,s,"static/css/c163371b7d4c8221.css","static/chunks/pages/goodrx/schedule-call-d20fed71574a298d.js"],"/grocery-benefit-chat":[c,s,e,a,"static/chunks/pages/grocery-benefit-chat-ddc767831f750767.js"],"/grocery-benefit-chat/l1706":[c,s,n,"static/chunks/pages/grocery-benefit-chat/l1706-58eeb678e025cb5d.js"],"/grocery-benefit-chat-full":[c,s,e,a,"static/chunks/pages/grocery-benefit-chat-full-4cde546fa593eb9a.js"],"/l1294/v1":[c,s,u,h,"static/chunks/pages/l1294/v1-6bf32f084f231e2e.js"],"/l1294/v2":[c,s,u,h,"static/chunks/pages/l1294/v2-fc3b9e79a906d1d3.js"],"/licensing":[c,s,d,"static/chunks/pages/licensing-e722

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	77
Entropy (8bit):	4.37144473219773
Encrypted:	false
SSDEEP:	3:k0WYL12AvZ/W6QfpX/W6Qee:UYR2AvZO6EpXO6I
MD5:	B6652DF95DB52FEB4DAF4ECA35380933
SHA1:	65451D110137761B318C82D9071C042DB80C4036
SHA-256:	6F5B4AA00D2F8D6AED9935B471806BF7ACEF464D0C1D390260E5FE27F800C67E
SHA-512:	3390C5663EF9081885DF8CDBC719F6C2F1597A4E25168529598097E9472608A4A62EC7F7E0BC400D22AAC81BF6EA926532886E4DC6E4E272D3B588490A090473
Malicious:	false
Reputation:	low
URL:	https://medicare.gohealth.com/_next/static/6Pd7UXE0cORMG2cg_igAQ/_ssgManifest.js
Preview:	self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/1042882457?random=1736464953014&cv=11&fst=1736464953014&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dform_start
Preview:	<html></html>

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	143063
Entropy (8bit):	5.3863567441702465
Encrypted:	false
SSDEEP:	1536:Cbn8XV+PV62xWeWaOAu2/xEcF0vuAmpzye454WyHEeQjR+itpXncZNmr6wG:VaVGvYwe454W/jntpXINOrG
MD5:	1DF186E33EA13BEC7E7FF0140C51D2CB
SHA1:	ACCE479BAC91610908605021D440028C23984566
SHA-256:	7E21009D2D7904BE623826AD17B73461B127795BE72D338FDCE3AFDB64786396
SHA-512:	BC1BC28D807A29E0B85674A81988CCE82AD3272F5E5C95D1B859903FE0A06B30A477096AD0B7A228A6C48CFA3D155C5D72EB6CAFC7B9EE6245FD3317746F0C33
Malicious:	false
Reputation:	low
URL:	https://medicare.gohealth.com/_next/static/chunks/main-001bd2769c48104e.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{98749:function(r,n){"use strict";function getDeploymentIdQueryOrEmptyString(){return""}Object.defineProperty(n,"__esModule",{value:!0}),Object.defineProperty(n,"getDeploymentIdQueryOrEmptyString",{enumerable:!0,get:function(){return getDeploymentIdQueryOrEmptyString}})},11541:function(){"trimStart"in String.prototype\|\|(String.prototype.trimStart=String.prototype.trimLeft),"trimEnd"in String.prototype\|\|(String.prototype.trimEnd=String.prototype.trimRight),"description"in Symbol.prototype\|\|Object.defineProperty(Symbol.prototype,"description",{configurable:!0,get:function(){var r=/$(.*)$/.exec(this.toString());return r?r[1]:void 0}}),Array.prototype.flat\|\|(Array.prototype.flat=function(r,n){return n=this.concat.apply([],this),r>1&&n.some(Array.isArray)?n.flat(r-1):n},Array.prototype.flatMap=function(r,n){return this.map(r,n).flat()}),Promise.prototype.finally\|\|(Promise.prototype.finally=function(r){if("function"!=typeof r)re

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (21436)
Category:	downloaded
Size (bytes):	22260
Entropy (8bit):	5.328059934670498
Encrypted:	false
SSDEEP:	384:BXDWhDNyyu0sfL7mQYDbJF3C95D/EeD0ereRt4zveHcCMdNVb:ZDW9NUfmQxrAeYere8zveHcCcj
MD5:	A29C0DA2846FC2188472CCEF3239C22C
SHA1:	A6D633AE1E35CD475A43B613919422C61C8210B0
SHA-256:	A9453AE3C27755EFF18C8B35203EAFE4DDC53DDCDDBC66EAEBE6FBFAFA6A7B36
SHA-512:	C6342497E7D48D36505C6A10D1DC17C7167744A345F246541F295D52455AB8607C3AEB3F63594F784EDDA86CA0409011479174D8A6C1028AC9CC20289F6CEE2E
Malicious:	false
Reputation:	low
URL:	https://tags.srv.stackadapt.com/events.js
Preview:	(function (w) {. // Begin doc.. var is_dev = false;.. if ( false ) {. is_dev = true;. }.. var disable_sync = false;.. if ( true ) {. disable_sync = true. }.. var tip = "r2VBjeI2kzLuvBdN1PsckXCwQNMHVWQ9n_4OeHoRHDU". . var userIdCookieValue = "s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ". var userIdV2CookieValue = "s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM". var userIdV3CookieValue = "s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCC0tIG8BjABOgT87-jmQgQ_QCZc.O3M9N%2FjNocxDAkJgoeKCY4eteFsk5sYBegvZtk1NJzo". var campCookieName = "". var campCookieValue = "". var campaignCookieLiveDuration = 7776000. var userIdCookiesLiveDuration = 31536000. var accountID = ""..var globals={load_num:0,init:!1,addr:is_dev?"http://127.0.0.1":"https://tags.srv.stackadapt.com",aid:"",impid:"",default_params:"",landing_page:"",secs_passed:0,total_secs_passed:0,hidden:!1,host:encodeURIComponent(

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10664), with no line terminators
Category:	downloaded
Size (bytes):	10664
Entropy (8bit):	5.409231808742436
Encrypted:	false
SSDEEP:	192:BM+KIRyZTvAcrJsuNDF0TPKVc63trg5Ia+UZvofWyla4:BM+KIRyZTvBsS0TPKVgIUoeU
MD5:	70B8155997078A1D96AA5AC48027AB1D
SHA1:	2F9916620F8FE6D14D4B1AD13F2780F338C7A8A4
SHA-256:	53DB919295DD19B3CE0697251A0F0EA4EC3C0C549367F04489470BF1A5D439D1
SHA-512:	F9AC82E6654B6C9D35A080BC5D1BB3644F134F95B596DE055E91FDADC4EBC12CB307C596A21FEABD4F093755D80A54895378AF8D3B881E2771C3C2CEABEBF4ED
Malicious:	false
Reputation:	low
URL:	https://medicare.gohealth.com/_next/static/chunks/3365-49fcb6c89fee57c0.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[3365],{52045:function(e,n,o){"use strict";o.d(n,{j:function(){return ConsentSection},V:function(){return ZipCodeSection}});var i=o(85333),a=o(6692),t=o(2281),r=o(26969),s=o(52322),l=o(2784),c=o(82876),m=o(97438),d=o(75841),u=o(13146),h=o(83452),_=o(61517),f=o(65414),p=o(12524),g=o.n(p),v=o(72792),b=o.n(v),ConsentSection=function(e){var n=(0,d.oR4)(),o=n.state,p=n.dispatch,v=(0,r._)((0,d.B4k)(),1)[0],y=(0,c.useSearchParams)(),x=(0,c.usePathname)(),N=(0,r._)((0,l.useState)(!1),2),j=N[0],k=N[1],w=(0,r._)((0,l.useState)(!1),2),C=w[0],S=w[1],E=(0,d.Cg)("med",{searchParams:y}),K=E.hasConsent,I=(0,t._)(E,["hasConsent"]),A=(0,m.$G)("common").t,M=(0,d.iSs)(o),P=M.phone,L=M.firstName,q=M.lastName,B=M.email;(0,l.useEffect)(function(){S(function(e){return e\|\|["/ma"].includes(x)\|\|(0,d.NX0)()&&!!B})},[B,x]);var onInput=function(e){var n=e.currentTarget,o=n.name,i=n.value;switch(o){case d.mAK.phone:p((0,d.ydV)({phone:(0,d.jVl)(i,P)}));break;cas

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (386), with no line terminators
Category:	dropped
Size (bytes):	386
Entropy (8bit):	5.45173527225824
Encrypted:	false
SSDEEP:	12:xW/NW7RuaSq2bMZm7HwQtRuOLsq2bMZm7n:oaSbXzr+OKX7n
MD5:	BF5DA7DE7C72FD87937E90D0AC74C4B7
SHA1:	4E2A787202794CB1B34DDFDE646F5DB6FD94A3EF
SHA-256:	0DEB9EA492FA07CD9362EB55E5E24F73D0A55191D84BD58E6D9CA81E4801EDAA
SHA-512:	E9E9741D892691443297C052A6BEFFDFC6A7109E9B5F75FAB9DDF17A267B3625FBE9B09BA91EDA8EF6E332FDCA0AC8D733C0FAE2359DD06447B14DC5B1368AD0
Malicious:	false
Reputation:	low
Preview:	__sasCookie({"_cookies_":[{"_value_":"ID=c4482ad8c0ed25d1:T=1736464914:RT=1736464914:S=ALNI_MZGdY2JfTnT1zwOfUwv7BzhpoILjQ","_expires_":1770160914,"_path_":"/","_domain_":"myuhchvision.com","_version_":1},{"_value_":"UID=00000fb1327adc5d:T=1736464914:RT=1736464914:S=ALNI_Mbn40tTuvTnpbfM40Dt1UUtfNDOHw","_expires_":1770160914,"_path_":"/","_domain_":"myuhchvision.com","_version_":2}]});

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52310)
Category:	downloaded
Size (bytes):	52386
Entropy (8bit):	5.27581955029593
Encrypted:	false
SSDEEP:	768:bEGF86NlvAxLYWFYrhA2nS8bZredSW+FJLEUZ1NSPjRaYGmXoQ4PGOWCq0fdy0gI:j3lSE04+OWPAm7WOffQYmG1bIL
MD5:	9CE21CA7EA1EA56A8F19202A75CB6F0C
SHA1:	1F2B88FE14F6E0E3B4795A9AF8E5924A5DCE6C39
SHA-256:	2F4F346A8C4AAA740C54B9F93B801B05DD665CEB56624B9C5E1385669E253075
SHA-512:	5BA20B5E7397714695162D382C58A0C94ACC836041B5DFAE48401DAE2FDE175BF91DF6867840C434A5E3EBABE6E9083BDE7E818226CC0A553C836DD12AB6CD8D
Malicious:	false
Reputation:	low
URL:	https://js-agent.newrelic.com/nr-rum-1.278.1.min.js
Preview:	/! For license information please see nr-rum-1.278.1.min.js.LICENSE.txt /."use strict";(self["webpackChunk:NRBA-1.278.1.PROD"]=self["webpackChunk:NRBA-1.278.1.PROD"]\|\|[]).push([[296],{119:(e,t,r)=>{r.d(t,{L:()=>a});var n=/([^?#])[^#](#[^?]\|$)./,i=/([^?#])()./;function a(e,t){return e.replace(t?n:i,"$1$2")}},903:(e,t,r)=>{r.d(t,{p:()=>i});var n=r(154);function i(){return Boolean("file:"===n.gm?.location?.protocol)}},304:(e,t,r)=>{r.d(t,{A:()=>a});var n=r(836);const i=()=>{const e=new WeakSet;return(t,r)=>{if("object"==typeof r&&null!==r){if(e.has(r))return;e.add(r)}return r}};function a(e){try{return JSON.stringify(e,i())??""}catch(e){try{n.ee.emit("internal-error",[e])}catch(e){}return""}}},83:(e,t,r)=>{r.d(t,{w:()=>n});const n={FIRST_PAINT:"fp",FIRST_CONTENTFUL_PAINT:"fcp",FIRST_INPUT_DELAY:"fi",LARGEST_CONTENTFUL_PAINT:"lcp",CUMULATIVE_LAYOUT_SHIFT:"cls",INTERACTION_TO_NEXT_PAINT:"inp",TIME_TO_FIRST_BYTE:"ttfb"}},963:(e,t,r)=>{r.d(t,{j:()=>s});var n=r(226),i=r(154),a=r(83);co

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	11375
Entropy (8bit):	7.645494653990172
Encrypted:	false
SSDEEP:	192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/
MD5:	0CB2E5165DC9324EB462199F04E1FFA9
SHA1:	9E0F89847EC8A98D98A6020BC5C4ED32B7A48BF8
SHA-256:	67DFF0AAD873050F12609885F2264417CCDD0D438311000A704C89F0865F7865
SHA-512:	7A285C4A87B9F9093B7BA720D8FE08E0AD7E2EBDE9EF8C8D11B70AFA08245AF8F8A7281C7B3FBE8BAD21C3AFDE4F32634D3BD416822892AA47BA82C12F4B8191
Malicious:	false
Reputation:	low
URL:	http://d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
Preview:	.PNG........IHDR.......X.....Om......tEXtSoftware.Adobe ImageReadyq.e<....PLTE......cdtIK^IK]IK\03IHK_acsceubdtcet..0=@SHK]IL]HK\MPbNQbORc.....0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes..-..0. 5.!6."7.#8."6.$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.....-../.....0../.....0../..1..1..2..3..4. 5.!6.#8.$9.%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.....0.!5."6.#7.$8.%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs..-.....0..1. 4.!5."6.#7.$8 '< ';*0B.4F06H06G..-..0.!5 (< (;...................................................................................................................................................................................................................................................t....tRNS..............................................................................................................................................

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1162)
Category:	dropped
Size (bytes):	20818
Entropy (8bit):	5.592463908396929
Encrypted:	false
SSDEEP:	384:XIgJV0fiJF+sLQld20p28JXHABsOEsoc1/1hUP88J1c7lVMF/fQpDUriKo36n:tJV6iJfwgvoc1/1hUP07jMxIpPKoqn
MD5:	A1F3145E1DC107AAD3B57974B8817B57
SHA1:	507EA38AA8AD7BBE3AB3FA7E4C85016E3DCA2960
SHA-256:	A463AA6666CE0ABCABF8033013CFE881FDBFB570389AFF471D400A45B3A496D4
SHA-512:	8ADDDA4A0F27DB8DCE9706E87C1C5716949EA8111E05A7CEE46E027252D0EEECAB2DCADD02CA505021DB7DFF7ADF88272027A4FE156DAA95A1D75F7CC73C2822
Malicious:	false
Reputation:	low
Preview:	/!. Piwik - Web Analytics. . JavaScript tracking client. . @link http://piwik.org. * @source https://github.com/piwik/piwik/blob/master/js/piwik.js. * @license http://piwik.org/free-software/bsd/ Simplified BSD (also in js/LICENSE.txt). */.if(typeof JSON2!=="object"){JSON2={}}(function(){function d(f){return f<10?"0"+f:f}function l(n,m){var f=Object.prototype.toString.apply(n);if(f==="[object Date]"){return isFinite(n.valueOf())?n.getUTCFullYear()+"-"+d(n.getUTCMonth()+1)+"-"+d(n.getUTCDate())+"T"+d(n.getUTCHours())+":"+d(n.getUTCMinutes())+":"+d(n.getUTCSeconds())+"Z":null}if(f==="[object String]"\|\|f==="[object Number]"\|\|f==="[object Boolean]"){return n.valueOf()}if(f!=="[object Array]"&&typeof n.toJSON==="function"){return n.toJSON(m)}return n}var c=new RegExp("[\u0000\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]","g"),e='\\\\\\"\x00-\x1f\x7f-\x9f\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\uf

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6818), with no line terminators
Category:	dropped
Size (bytes):	6818
Entropy (8bit):	5.475333301916774
Encrypted:	false
SSDEEP:	192:EtsjlS8SjFM93Fpd9qmW6q+545vGnQJFNg5DxasoAloW:EtsjlS8SjSDXsmVepGnv5Dc45
MD5:	7ABB57F6F3EC9BD1B22580B301B99D35
SHA1:	4D2406D14087D0BCE1B3AF42D4100932056984D9
SHA-256:	4BA008814F2620742FE77366281D9A98270ACD4310A55340F21E04DED4EC7D13
SHA-512:	54AB82A891CC3B889C80764475BE188E72C0C2EF998E377372AF67620378F3EF30CC48B8E95E38A16C2637F38061C0759A4BC561DD178EE4CF4D61E6E559A1CF
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var e,r,_,c,t,a,n,b,f,u={},i={};function __webpack_require__(e){var r=i[e];if(void 0!==r)return r.exports;var _=i[e]={id:e,loaded:!1,exports:{}},c=!0;try{u[e].call(_.exports,_,_.exports,__webpack_require__),c=!1}finally{c&&delete i[e]}return _.loaded=!0,_.exports}__webpack_require__.m=u,__webpack_require__.c=i,__webpack_require__.amdO={},e=[],__webpack_require__.O=function(r,_,c,t){if(_){t=t\|\|0;for(var a=e.length;a>0&&e[a-1][2]>t;a--)e[a]=e[a-1];e[a]=[_,c,t];return}for(var n=1/0,a=0;a<e.length;a++){for(var _=e[a][0],c=e[a][1],t=e[a][2],b=!0,f=0;f<_.length;f++)n>=t&&Object.keys(__webpack_require__.O).every(function(e){return __webpack_require__.O[e](_[f])})?_.splice(f--,1):(b=!1,t<n&&(n=t));if(b){e.splice(a--,1);var u=c()}}return u},__webpack_require__.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return __webpack_require__.d(r,{a:r}),r},_=Object.getPrototypeOf?function(e){return Object.getPrototypeOf(e)}:function(e){retur

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19948), with no line terminators
Category:	dropped
Size (bytes):	19948
Entropy (8bit):	5.261902742187293
Encrypted:	false
SSDEEP:	384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65
MD5:	EC18AF6D41F6F278B6AED3BDABFFA7BC
SHA1:	62C9E2CAB76B888829F3C5335E91C320B22329AE
SHA-256:	8A18D13015336BC184819A5A768447462202EF3105EC511BF42ED8304A7ED94F
SHA-512:	669B0E9A545057ACBDD3B4C8D1D2811EAF4C776F679DA1083E591FF38AE7684467ABACEF5AF3D4AABD9FB7C335692DBCA0DEF63DDAC2CD28D8E14E95680C3511
Malicious:	false
Reputation:	low
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var r=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),r[t]=e>>>((3&t)<<3)&255;return r}}},508:function(e,t,n){"use strict";var r=n(944),i=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|r)();if(

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	163
Entropy (8bit):	4.849688311423567
Encrypted:	false
SSDEEP:	3:t6WCCV//GRcBH8+hH0DDmJS4RKb58ZSFuH1NLQxL/VCUtqfvy6RLkqIv:t68/e0dhU3mc4slvIcVqfaAS
MD5:	D5344EE8FAE2E17D50BA12142B585A59
SHA1:	BB35CE3267F197C51DFC5C714097C8DBFF83E5E1
SHA-256:	A159E0DD61B231BEE139F047F47EDB0C0E798663798E1D09E43628C74644A49A
SHA-512:	BDE345EE8A83B938F0C0367D90C032E575CD65FE1D9C8AA513B4B0EC74B55D455ACB7DDAD8112178C6760FF28EBA01918562BE93DCA71032F1E8D3FA2D5373AF
Malicious:	false
Reputation:	low
Preview:	<svg fill='#000000' width="24" height="24" xmlns="http://www.w3.org/2000/svg">.<path d="M7.59003 18.59L9.00003 20L17 12L9.00003 4L7.59003 5.41L14.17 12"/>.</svg>.

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65468)
Category:	dropped
Size (bytes):	326285
Entropy (8bit):	5.466486702829229
Encrypted:	false
SSDEEP:	6144:Fd9aRwfJEQ2SG2PALWbKow/i/BrRflOGP/devJXCtLIF:FHrfd/YLmK1i/BrRflOGndCF
MD5:	1CEBE4BA01A1DB2A2EDB49F5530A4A8D
SHA1:	AF60D957A8DDE65FD1156FCDCBB46B20E86D080C
SHA-256:	DB11E14372E70843F1D371C09099399C15FB0035355CA4F01DCF523A391A88E0
SHA-512:	4F0500C234BAD5686AFC8CFB9764FEDD900CFEEC3ABAD0E0C6A3A21EA59F8FE80AACDE15E86B73B0902177A45E49519DDA79DA86CDB754E88C2647FE34BB05A8
Malicious:	false
Reputation:	low
Preview:	/! For license information please see client.min.js.LICENSE.txt /.(function(){var __webpack_modules__={5817:function(t,n,i){var e;!function(r,o){"use strict";var a="function",u="undefined",c="object",s="string",f="model",l="name",d="type",v="vendor",h="version",p="architecture",g="console",m="mobile",_="tablet",y="smarttv",w="wearable",b="embedded",E="Amazon",I="Apple",A="ASUS",T="BlackBerry",S="Browser",k="Chrome",R="Firefox",C="Google",N="Huawei",D="LG",O="Microsoft",x="Motorola",M="Opera",P="Samsung",L="Sharp",V="Sony",U="Xiaomi",F="Zebra",B="Facebook",z=function(t){for(var n={},i=0;i<t.length;i++)n[t[i].toUpperCase()]=t[i];return n},G=function(t,n){return typeof t===s&&-1!==j(n).indexOf(j(t))},j=function(t){return t.toLowerCase()},q=function(t,n){if(typeof t===s)return t=t.replace(/^\s\s*/,""),typeof n===u?t:t.substring(0,350)},H=function(t,n){for(var i,e,r,u,s,f,l=0;l<n.length&&!s;){var d=n[l],v=n[l+1];for(i=e=0;i<d.length&&!s&&d[i];)if(s=d[i++].exec(t))for(r=0;r<v.length;r++)f=

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5
Entropy (8bit):	1.5219280948873621
Encrypted:	false
SSDEEP:	3:U8n:U8n
MD5:	83D24D4B43CC7EEF2B61E66C95F3D158
SHA1:	F0CAFC285EE23BB6C28C5166F305493C4331C84D
SHA-256:	1C0FF118A4290C99F39C90ABB38703A866E47251B23CCA20266C69C812CCAFEB
SHA-512:	E6E84563D3A55767F8E5F36C4E217A0768120D6E15CE4D01AA63D36AF7EC8D20B600CE96DCC56DE91EC7E55E83A8267BADDD68B61447069B82ABDB2E92C6ACB6
Malicious:	false
Reputation:	low
URL:	https://p.typekit.net/p.css?s=1&k=pys1zzw&ht=tk&f=17007.17008.17017.17018.17019.47081.47083.47084.47086.47089.47090&a=109097892&app=typekit&e=css
Preview:	/**/.

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1371)
Category:	downloaded
Size (bytes):	2420
Entropy (8bit):	5.5942022969451255
Encrypted:	false
SSDEEP:	48:TxjNpAoN5NzQA+s7lNO5lhY8gY/r3YZtJUCRG5IfRuvItXnh+ML6T1Uhq1D:TFJQePeDf0luveR+ML6RUhq5
MD5:	A300B56CD122D2C03CE78953D303F9F5
SHA1:	2915AFD236A4B427B669D7CE16D1B9A978E33BAE
SHA-256:	EA056BD127C10E1E46A2BD5721272EA8E3249DE983E2EEBD246B3644D5893353
SHA-512:	A9C99183880754D486EA1AC3544B75D025D7DDB49A7674A0D529A765AEAEBAC76F65FF50F0CA232224D240DFD1BF133CCA40B3D027B115D392AEE560B8731A8B
Malicious:	false
Reputation:	low
URL:	https://a24403740715.cdn.optimizely.com/client_storage/a24403740715.html
Preview:	.<script>..var allowedOrigins = [["^https?://(.+\\.)?www\\.gomedicare\\.com$", ""], ["^https?://(.+\\.)?gohealth\\.com$", ""], ["^https?://(.+\\.)?survey\\.gohealthinsurance\\.com$", ""], ["^https?://(.+\\.)?internal\\.gohealth\\.net$", ""], ["^https?://(.+\\.)?localhost:9090$", ""], ["^https?://(.+\\.)?gohealthdev\\.wpengine\\.com$", ""], ["^https?://(.+\\.)?localhost:8080$", ""], ["^https?://(.+\\.)?localhost:3000$", ""], ["^https?://(.+\\.)?gohealthwebdev\\.wpenginepowered\\.com$", ""], ["^https?://(.+\\.)?gohealthcom\\.l$", ""]];.var blockedOrigins = [];..!function(){"use strict";var d,l,r,c;try{d=window.localStorage}catch(e){l=e}function u(e){return!c\|\|0!==e.indexOf(c.origin)}function v(e,i){return new RegExp(i[0],i[1]).test(e)}function p(e){if(!r){var i={id:"iframeerror",type:"ERROR",response:"Error accessing localStorage: "+(r=e?e.toString():"Localstorage is undefined")};0,event.source.postMessage(JSON.stringify(i),event.origin)}}window.addEventListener("message",function(e){var

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	884
Entropy (8bit):	7.597764747842629
Encrypted:	false
SSDEEP:	24:C4HJC+V4vj2z0CAcyQ8910/3O6Yz2cpuEkva:vsfj2xAi896/+Z2czAa
MD5:	CA8F51D43AB6482141D8FD3BD13F0CFD
SHA1:	774FFA16AEFE93B710663B6B73AAFDE6B2236686
SHA-256:	F258A17763968BF7796EE6E324937891DE1CA4E49F6E69A8952770728E28B2F6
SHA-512:	051965D38258DDBD4DC019559154601054C59727B398F18D2B43EC86FBF03B942054933BA18A50B873F1A1BB2918763F7C90665185B70E1B51ED078804C519F2
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/430517164553595186?sqp=-oaymwEKCCgQKCABUAFYAQ&rs=AOga4qltQhN5WHHQqkyzXm4O9pWXRAd0sA
Preview:	.PNG........IHDR...(...(........m...;IDATX..K+K....J.uU.$.....Q.x!..AD..Xh'......~ ........X0........K.(&..R.`.>...].....>0...33..y.f.. ...P../R4!.....\|. ."....h.d\|Mi.^i...g..N6.U.Ve.Z..hU..`2.D6.55...C.4...!......>..c.=...n..Q.e............uuu........7.......,.`.T...64MC.T...9.~......UUQ.pss...Y........188............t:M....p8L.......2I.R..$ONN.L&.C...z...c.d&....>s..I2....766.z.r..........e./...m..A.d$...(.B..z.\YY..i..?......!699.h4.p8...^.........r.P..>......d2....U.>j._.n...a..R)Clgg..h.N.........-.6]..TU..T.SO.&..r....n.......z..X ...d.Y..y..$I..........=..=22B........i=...`.ZeGGG..X,.9...H....5.P(.D"A.\__'I....nw....=.&.N.P(..........I.0WWW.....MLL...b1....3...x{{..j............Ng,......N'.......p8.H$......T.U....>.!.....F.R)...#.H.....BUU.\...n..Elnnb``.......&..q......vZ..hU6.U.Ve.Z._..}6./...B...~6........$..u&?....R.$i..........LN....IEND.B`.

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/1042882457?random=1736464965083&cv=11&fst=1736464965083&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dform_submit
Preview:	<html></html>

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	dropped
Size (bytes):	4109
Entropy (8bit):	4.694807930301017
Encrypted:	false
SSDEEP:	96:12oecRWT9BvpXKZhUyXuXsk8hLb3Dhm2ykOoSc:12oecRWNXK3XuXW5Oc
MD5:	5CCD848126EDEFA4619B3611918ADB66
SHA1:	FDF6E588FCC866CB4BAF1629D9E41AA8CE648AC5
SHA-256:	1C40777119FC5594A6EE0E5E01C6E2814F286EDC7CE5EC082E661E321C7BE06E
SHA-512:	932F72F8AD91D38AAC35E64955BAB715F846D533CB0652A9516EC1F710859FB0ACA8EB25022E2918ACC6FF8BBE664633FCCEE879368E9604BAFCEBED6577941D
Malicious:	false
Reputation:	low
Preview:	(function(w,d,c,k,a,b,t,e) {. var cs = d.currentScript;. if (cs) {. var uo = cs.getAttribute('data-ueto');. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {. w[uo].setUserSignals({'ea': c, 'kc': k, 'at': a, 'bi': b, 'dt': t, 'ec': e});. }. }.})(window, document, false, false, false, false, false, false);..(function(w,d,s,i) {.. var c=d.currentScript;.. if (c) {.. var uo = c.getAttribute('data-ueto');.. if (uo && w[uo] && w[uo].uetConfig && w[uo].uetConfig.deBlock === true).. return;.. }.. var f,j; f=d.getElementsByTagName(s)[0]; j=d.createElement(s); j.async=true;.. j.src='https://www.clarity.ms/tag/uet/'+i+'?conversions=1';.. j.onload = function () {.. if (!c) return;.. var co = function(u) { return u && typeof u === 'object' && !(u instanceof Array) && u.beaconParams && u.beaconParams.mid && w.clarity; };.. var r = 40;.. var cl = function() {.. if

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-G99G7L25WL&gacid=1197952561.1736464946&gtm=45je5170v875571548z8841278742za200zb841278742&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101925629~102067555~102067808~102081485~102198178&z=2058577249
Preview:	<html></html>

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	13031
Entropy (8bit):	4.029383106648655
Encrypted:	false
SSDEEP:	192:LgNs1dLHufKMbevaqEFOCXsTUqGseIa56ETdRRVUoiL98WdsZ:Lg8VHWgPXGsLaYE5R4bL9m
MD5:	4E4073589578C3728DC5C606033CE657
SHA1:	7C8D18A1490D6432D67B522256F8FF9E37073C64
SHA-256:	73BF546089D59A8E9E88F4555081D38EB555B009B67B37AB758AA6D08EAE030C
SHA-512:	7C8B84ACDA631C3315CF75E5F447B3D42393909324561226B51852C171DBFC5523DC053A0FE9A2B421F17F579BBD6FA2DDD8D7E74EECD62051161BAB2A03BB9D
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="106.999893px" height="26.2684465px" viewBox="0 0 106.999893 26.2684465" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>trustpilot-logo</title>. <g id="Final" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="V1---MOBILE---Agent" transform="translate(-1119.000036, -676.000036)">. <g id="trustpilot-logo" transform="translate(1119.000000, 676.000000)">. <path d="M101.311095,13.0004822 L102.934107,13.0004822 L102.934107,10.0758155 L105.074107,10.0758155 L105.074107,12.9826488 L106.999929,12.9826488 L106.999929,14.5698155 L105.074107,14.5698155 L105.074107,19.7414822 C105.074107,19.9733155 105.091762,20.1516488 105.109774,20.3299822 C105.127429,20.4904822 105.180929,20.6331488 105.234429,20.7401488 C105.305762,20.8471488 105.412762,20.9363155 105.537595,20.9898155 C105.680262,21.0433155 105.858595,21.0789822 106.108262,21.07898

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	83821
Entropy (8bit):	4.635100143361791
Encrypted:	false
SSDEEP:	1536:Uxh//xQiJ+OEa80rpJOVUBvj7x1hD38coWldfkQQFlncQiE4RCzTvcw:q0yw
MD5:	62857FADFFE9A42A11A968C2964AC93A
SHA1:	0F50FCEF405252308B901647B457F50120AA7FEF
SHA-256:	59A15A9D889E04DFCBDA0AE8F6D52257FA8DD8B5FA4C9C14D7BC0BF7286D9E20
SHA-512:	C5668210BFF8DF54A4FA307393E008EF520C4A9AF2F52E515FB08FAB9AB4D3C0527A8446ECB117150EA0AC6BED45C739901FD7DE856CCE92DC9495031B986844
Malicious:	false
Reputation:	low
URL:	https://medicare.gohealth.com/api/moca-state-data
Preview:	{"DE":{"state_abbreviation":"DE","carriers_included_MA_pipe_delimiter":"Cigna Healthcare \| Highmark Health \| Humana \| UnitedHealthcare. \| Wellcare","carriers_included_MA_count":5,"distinct_MA_plans_offered":16,"dental_preventative_yearly_benefit_min":1000,"dental_preventative_yearly_benefit_avg":1685,"dental_comprehensive_yearly_benefit_min":2000,"dental_comprehensive_yearly_benefit_avg":2000,"dental_yearly_benefit_avg":1757,"vision_eye_wear_yearly_benefit_min":100,"vision_eye_wear_yearly_benefit_avg":225,"vision_eye_exam_yearly_benefit_min":40,"vision_eye_exam_yearly_benefit_avg":61,"vision_yearly_benefit_avg":245,"hearing_aid_yearly_benefit_min":500,"hearing_aid_yearly_benefit_avg":500,"hearing_exam_yearly_benefit_min":null,"hearing_exam_yearly_benefit_avg":null,"hearing_yearly_benefit_avg":500,"otc_drug_yearly_benefit_avg":749,"otc_drug_yearly_benefit_min":100,"food_card_yearly_benefit_min":1680,"food_card_yearly_benefit_avg":1920,"carrier_overall_1":"Cigna Healthcare","carrier_ove

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65200)
Category:	dropped
Size (bytes):	141041
Entropy (8bit):	5.335474203783951
Encrypted:	false
SSDEEP:	1536:M5hSrvLquKUTTh8I5ZNn38xEk5eASPdxqznicW8KvvADFJ+X4WtNmpH:M5hSrDqM5ZNn38xfSnqGf7vIO4Wty
MD5:	2CD69CE748877124D1CA35096F03C57E
SHA1:	67E97EC5D41B2820ACE038FF11FE2D1963088C22
SHA-256:	FB096E6B4017CA06FBE50FE288CB8DCB32A2D1828979F5ECE8EEB278026DB36A
SHA-512:	E33747954C8D9F814D4A3E91CDAC09245F454CF94E7DB98DA747BDA73F3CD705AC5F8470C81F0F18C7D1A0857817B25DA95571E4A7A4F235078F48A2C65149FE
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9774],{52967:function(n,t,a){/*. @license React. * react-dom.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */var i,u,o,s,w,x,C=a(2784),_=a(14616);function p(n){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+n,a=1;a<arguments.length;a++)t+="&args[]="+encodeURIComponent(arguments[a]);return"Minified React error #"+n+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}var N=new Set,z={};function fa(n,t){ha(n,t),ha(n+"Capture",t)}function ha(n,t){for(z[n]=t,n=0;n<t.length;n++)N.add(t[n])}var j=!("undefined"==typeof window\|\|void 0===window.document\|\|void 0===window.document.createElement),L=Object.prototype.hasOwnProperty,U=/^[:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02F

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	11375
Entropy (8bit):	7.645494653990172
Encrypted:	false
SSDEEP:	192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/
MD5:	0CB2E5165DC9324EB462199F04E1FFA9
SHA1:	9E0F89847EC8A98D98A6020BC5C4ED32B7A48BF8
SHA-256:	67DFF0AAD873050F12609885F2264417CCDD0D438311000A704C89F0865F7865
SHA-512:	7A285C4A87B9F9093B7BA720D8FE08E0AD7E2EBDE9EF8C8D11B70AFA08245AF8F8A7281C7B3FBE8BAD21C3AFDE4F32634D3BD416822892AA47BA82C12F4B8191
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......X.....Om......tEXtSoftware.Adobe ImageReadyq.e<....PLTE......cdtIK^IK]IK\03IHK_acsceubdtcet..0=@SHK]IL]HK\MPbNQbORc.....0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes..-..0. 5.!6."7.#8."6.$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.....-../.....0../.....0../..1..1..2..3..4. 5.!6.#8.$9.%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.....0.!5."6.#7.$8.%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs..-.....0..1. 4.!5."6.#7.$8 '< ';*0B.4F06H06G..-..0.!5 (< (;...................................................................................................................................................................................................................................................t....tRNS..............................................................................................................................................

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24123), with no line terminators
Category:	dropped
Size (bytes):	24123
Entropy (8bit):	5.253241421773731
Encrypted:	false
SSDEEP:	384:oBruM+6GiAkKFZcG5L0wUYs1JLVUkw9imMM69dojKNCxtq5fD9gmXh:uyM+6GLkQcM0wUfBSYFoKNMtO5h
MD5:	B2FE43FD522E935E78232911D38CC8D1
SHA1:	952B81D18A7A7C9CB32636A9C28611B023F89EEA
SHA-256:	5D8B64182368F0E4E9DE66868984B558FF5ECE992EF495DF80EEB353E4A35AE9
SHA-512:	49B780CFB7698CDA9282AD93635B8C1A59600FD13485A80088FB949EE4E30EE1B2A66C9955D49C54FE67A2C34DAF966A95EA937B68AB8E74C5CE3EC67DC50DD8
Malicious:	false
Reputation:	low
Preview:	!function(t,e){var define;"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports?exports.obtp=e():t.obtp=e()}(this,(()=>(()=>{"use strict";var t,e,n={},o={};function r(t){var e=o[t];if(void 0!==e)return e.exports;var i=o[t]={exports:{}};return n[t](i,i.exports,r),i.exports}r.m=n,r.d=(t,e)=>{for(var n in e)r.o(e,n)&&!r.o(t,n)&&Object.defineProperty(t,n,{enumerable:!0,get:e[n]})},r.f={},r.e=t=>Promise.all(Object.keys(r.f).reduce(((e,n)=>(r.f[n](t,e),e)),[])),r.u=t=>t+".js",r.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(t){if("object"==typeof window)return window}}(),r.o=(t,e)=>Object.prototype.hasOwnProperty.call(t,e),t={},e="conversion-pixel-tag:",r.l=(n,o,i,a)=>{if(t[n])t[n].push(o);else{var s,c;if(void 0!==i)for(var u=document.getElementsByTagName("script"),p=0;p<u.length;p++){var l=u[p];if(l.getAttribute("src")==n\|\|l.getAttrib

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 656x539, components 3
Category:	downloaded
Size (bytes):	84108
Entropy (8bit):	7.977518364574232
Encrypted:	false
SSDEEP:	1536:qauyZWqjtNXZXbkuVi/uoA4e8T2JHTyxPGalkSgFhS70TqWx2Ccvw+TrEZEqbVpj:udOLlb5okAJeFUwTqRRaxbVd
MD5:	A402298B9954C484A4F76E7D3623AAAB
SHA1:	1D460777BAB942115F000B17D8A7F3C74898866B
SHA-256:	87A9178945216C3FEF123A231CE95241BD27BE2E5E8A2B15B49387D00A82EF39
SHA-512:	3102321E5C4E6C9DBCAD09050E28848D74418FBDCBFFEF599AEC2CC387435EA5270D32A96BD725CF7CA87099E99ACDA07C4124771737274C44E78937A54393E3
Malicious:	false
Reputation:	low
URL:	https://cdn.gohealth.com/lead-generation-sites/medicare/carrier-map.1728363876.jpg
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222........................................................................................................+.........>............................................(....................................@....../...........................................^0................................""8.&..!.......^0.........................3...~U. .\|......g.V...US .j.j...4.x.Y.l(.8.y.t.Q...Hm..c_F....z..6.Ik....d..i1......:L...O5q)._(...k".X......g.vw1...K.U.........[.3m4."..h.t...k.R./.0....E.W.U.........'...N4w..<(.....mV..=;...L...w... .XW...cy[.Y...V\|.,.{Iz0..&x...,Vz....b....=..,..Z&,Ex..Gj..X..=.}F......,.O.9..%4.Nu3.Bn;..s..o....1..Z-d....k....S.l.{.......B.uw..z...v..E..TQ.l.:"z...{..(......(......4.4.K....yA}.Z........!..F~..b.....W.~9..A.&.t.F.5.^.".fd.K....*.7.4j6.........y.....C.1..1.3.&Yh.....`.o.f...;rd;..

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 18704, version 1.0
Category:	downloaded
Size (bytes):	18704
Entropy (8bit):	7.986340565013402
Encrypted:	false
SSDEEP:	384:9oVGdv4SgUl7TfUKriOf0eihg+FTAENyd4OfXoEe5hhZ8t0CBEgUOWE:9AnETfxcHh7ZAEdHcBhSE
MD5:	E13FD5E3544FF0E4A5F6A7EEB7D136B8
SHA1:	AB3C2AEEA30ED635016B9E887DE2BBA910756F98
SHA-256:	CDA39F3EB22AEAF7BB81E49B677D766D11A3592368E941AA6676FBDC2864B1A1
SHA-512:	7536D3F8252ACE82563423C624E1C6ED1759F324412193BF3A4CDD7B0847A9C34BD70DD41F0412ABE82FEAD1E9B74DCF62493388982E375993D142F36AFD7AE9
Malicious:	false
Reputation:	low
URL:	https://use.typekit.net/af/aa897e/00000000000000007735a1c8/30/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=n7&v=3
Preview:	wOF2OTTO..I........@..H..........................:...v?DYNA.G.\?GDYN.-..P.`..p.6.$..L....Y. .D.E!Y..PDE..#R.z.T-.2/X....?..#t..7.@..g_u......2giY.5i.;.pz.l.B..H.hL."$..H"jE..... ..,B22.2).,B28dB:.'j......3...W..}.q1.PQ..(...a5.0((3C...lB.....}bRF.F^..7~ ............C..... .R.....Dh.b.u...w..]...<.e....F@Ofa\|..<...P0..PE.I.....i.O..,.=:7....8m...d..TX.9rX9......0..+...R.u...`.a.:[......B..v.....4..s..O.......`.8...i..i.Dce..N.K.[.h...Sza.JV....M...F`.2..r.K.M..@,/QM.&..?.Fh0.u..1+,....A.d...X..Ur.3#.@. j.I&@....G.{..}....G.R.Z....~P.qDsC.Bb...?..F..0....lD.....].o.N.os.?2.#s.....D.......?.. "5.o...(.../..&.M\|.!...J(......?.O.\|...<x@.%.T\|.Z.nx.........m...;....0..d.!.dqe!a....X.1..)Jlq..O\|.$.HbI$.Lr)..Jji..Nz.d.IfYd.Mv9.Kny.O~..THaE.ULq%.TJie.UNy.TTIeUTUMu5.TKmu.UO}.4.HcM4.Ls-..Jkm..N{.t.Ig]t.Mw=..Ko}..O...4.`C.5.p#.4.hc.5.x.L4.dSL5.t3.4.ls.5.\|.,..bK,..r+...jk...z.l..f[l..v;..n{..~..t.aG.u.q'.t2222._....dHn.+..j*$7..,b....S.`...........'D...t...

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	2.1395785763988275
Encrypted:	false
SSDEEP:	12:QANxOjHa+O8dTaoAgQUPaaRwayaaRalSXooh55555555555555R:FOp7dOoAgQmwlaY
MD5:	C93FBAF4A9F627AB88F45A0125751D06
SHA1:	5AC844234FC19F865D2F5366F85B2485B236CAC0
SHA-256:	DE9777A9F2958EA5752EFDD56BE9B22E875059355B4217A1D70FDE7D1FDF5894
SHA-512:	091CF31A03663823FF31073BECEE4CF771B38BB69ABD23FBEBF091232363B0DBDC65C65B908086A89A36B7BC6CCDF4E56A4A75A0D5A070FEAB914E4B21553951
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... ..............................................................................................................b0.n>..n>...b0................................................n>..n>..n>..n>..n>....`..........................................p.n>..n>..n>..n>..n>....p................................n>..n>...V ..{P..{P..n@...p..................................n@.n>..n>..n>..n>...............................................n@.n>..n>..n>..n>..n>....p......................................n@.n>..n>..n>..n>..n>..n>........................................n>..n>..n>..n>..n>..n>...V ......................................b0.n>..n>..n>..n>..n>..n>.........................................wJ..n>..n>..n>..n>..n>....`.........................................wJ..n>..n>..n>..n>...V ..............................................n@.n>..n>..n>..n>.....................................................wJ..n>..n>............................................................

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11813)
Category:	dropped
Size (bytes):	13108
Entropy (8bit):	5.397641449510539
Encrypted:	false
SSDEEP:	192:CbnLDr5tmjHCR/UeHjXWb2pTOnstdo5CpcNNOWqRObyAzJ3NSl:CbnLajURHjXo2BtcCvOby0J3NSl
MD5:	16FA72F22822661137FDE4156A344296
SHA1:	9EC9849AB624693BD4F46CFF709CCDC574B913C6
SHA-256:	856AE71A4346B2B63C0BF3B23DD8137968E1E0F5D01C21FFE338537A803178CA
SHA-512:	C0EB75571BF44EE40F454DC9D50F6FFFBD965BAD33C0D887E19B5A85E997F22477E6E1979274412AE28CC6CEFAD03D92B46BF8902AFE0FF37C08CED31BA572DF
Malicious:	false
Reputation:	low
Preview:	window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":1419317,"rec_value":0.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":false,"session_capture_console_consent":false,"anonymize_digits":true,"anonymize_emails":true,"suppress_all":false,"suppress_all_on_specific_pages":[],"suppress_text":false,"suppress_location":false,"user_attributes_enabled":false,"legal_name":"","privacy_policy_url":"","deferred_page_contents":[],"record_targeting_rules":[],"feedback_widgets":[],"heatmaps":[],"polls":[],"integrations":{"optimizely":{"tag_recordings":false},"abtasty":{"tag_recordings":false},"kissmetrics":{"send_user_id":false},"mixpanel":{"send_events":false},"unbounce":{"tag_recordings":false},"hubspot":{"enabled":false,"send_recordings":false,"send_surveys":false}},"features":["ask.popover_redesign","client_script.compression.pc","csq_theme","error_reporting","feedback.embeddable_widget","feedback.widgetV2","feedback.

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5188), with no line terminators
Category:	downloaded
Size (bytes):	5188
Entropy (8bit):	5.877173320141779
Encrypted:	false
SSDEEP:	96:1g2VilZtckx+9DgTlPJdiLW+iSah8vf1dtzlTasVuRvYfl:12cV9sT3AW7NIzxVsva
MD5:	E409B9B0B993F6A4898DBCD713E61DEB
SHA1:	27520384BD7FDCB47D020A471CA60233AA3CC8E2
SHA-256:	5B71F096C0B6D77B47E33B2F57FBC87C158CF4AA7621B0F6A1C389D9A23FFCD4
SHA-512:	31AB382E1419ACF21752BFD85DB210C9C9D93C4327C95DB4AF38326D246F742343C204D068F40E8CD08EFC8AA03BECA7E6972FCFC727EF634372540D6DF9F5CC
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1042882457/?random=1736464945734&cv=11&fst=1736464945734&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548z8841278742za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]}d=d[d.length-1];c=n&&c==="es6"?g[d]:null;b=b(c);b!=null&&(a?h(q,d,{configurable:!0,writable:!0,value:b}):b!==c&&(t[d]===void 0&&(a=Math.random()*1E9>>>0,t[d]=n?m.Symbol(d):"$jscp$"+a+"$"+d),h(g,t[d],{co

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (815)
Category:	downloaded
Size (bytes):	3501
Entropy (8bit):	5.383873370647921
Encrypted:	false
SSDEEP:	96:EI5cZUiKliCJ86U+QTEVWfeLwTauSEegdkZ5edOIC:EI5hiWNJ8kQTEVWfeUauRfdkZ5edO1
MD5:	147FD3B00C22BA9C939712E9213C24CA
SHA1:	3B48369B86FA0574F35379AACD1F42CC9C98A52B
SHA-256:	70F5B11C1870CF90201A6D5F770CA318A3FA5827C74A8765EDE22B487F7D4532
SHA-512:	E8419A71232EDAC8FD131446777F7D034B3171EFE07B3267479B439E4982650DB65A0D1DDC9F516315D5ED1B01ECFD2F7EB55D75D44AA51EE0AD494D441586D2
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/static/service_worker/5190/sw_iframe.html?origin=https%3A%2F%2Fmedicare.gohealth.com
Preview:	<!DOCTYPE html>.<html>.<head>. <link rel="shortcut icon" href="data:image/x-icon;," type="image/x-icon">.</head>.<body>. <script>.'use strict';class m{constructor(a){this.j=a;this.g={};this.h={};this.i=0;this.id=String(Math.floor(Number.MAX_SAFE_INTEGERMath.random()))}}function n(a){return a.performance&&a.performance.now()\|\|Date.now()}.var p=function(a,b){class d{constructor(c,g,f){this.failureType=c;this.data=g;this.g=f;this.h=new m(n(f))}s(c,g){const f=c.clientId;if(c.type===0){c.isDead=!0;var e=this.h,h=n(this.g);e.g[f]==null&&(e.g[f]=0,e.h[f]=h,e.i++);e.g[f]++;c.stats={targetId:e.id,clientCount:e.i,totalLifeMs:Math.round(h-e.j),heartbeatCount:e.g[f],clientLifeMs:Math.round(h-e.h[f])}}c.failure={failureType:this.failureType,data:this.data};g(c)}}return new d(5,a,b)};/.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0.*/.let q=globalThis.trustedTypes,r;function t(){let a=null;if(!q)return a;try{const b=d=>d;a=q.createPolicy("goog#html",{createHTML:b,createScript:b,crea

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	202
Entropy (8bit):	4.959516153576625
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5zMcG8N+nHFIKcvXUyqlfQrFuHkX1BcU/Lpzd0waxVA9+UCsRaOy:tI9mc4slzMnlG+qRIGLp+t49rB4Z7
MD5:	CA543D8A57515596482A871320D39416
SHA1:	831CF1C9B368788C1B0E95101B374E45A049D807
SHA-256:	9973AA5DFEF3AC419284FA92E6F088D448B6BECF28114492195EC74E481C9AD6
SHA-512:	C3A07E9376FA080EA28B18C4203FD3E30BB7BEAC937D9F76E42B75AC032AFD75C584CD1824F22D205EA45AA6712362BCB34163E4C5CE8BCAB110725B84370F69
Malicious:	false
Reputation:	low
URL:	https://cdn.qa.gohealth.xyz/lead-generation-sites/medicare/arrow-down-gray.1726470758.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="23" height="22" viewBox="0 0 23 22" fill="none">. <path d="M6.20239 8.32434L11.7024 13.8243L17.2024 8.32434" stroke="#1B1D1F" stroke-width="2" />.</svg>

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	53
Entropy (8bit):	3.324196936570766
Encrypted:	false
SSDEEP:	3:CU7KNpKThE/xlSle:s2Eule
MD5:	414BD2A5161DB03FDD910327B42C6DAA
SHA1:	65D4CF50496813C5F1A34EDDD5C50DC67D44FF47
SHA-256:	B51F3497B0A65F1E1E87E75F5E7E823D871C23BCF76A5EE4101783C8F939E553
SHA-512:	633F304A2024C3B6EBB92B3EED8059F8232C316D70FBE8EF353106C2105F7A9662D8FD935B89A5F10E09204C6886EDCE4FB1B19938123B7E057A34F2BF78FF85
Malicious:	false
Reputation:	low
URL:	https://tr.outbrain.com/unifiedPixel?au=false&bust=004892440068507509&referrer=https%3A%2F%2Fsyndicatedsearch.goog%2F&marketerId=003678ec07dcd7129be54125730b23cabc&name=PAGE_VIEW&dl=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&g=0&zone=all&obApiVersion=1.1&obtpVersion=2.18.158
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5177), with no line terminators
Category:	downloaded
Size (bytes):	5177
Entropy (8bit):	5.873996734892003
Encrypted:	false
SSDEEP:	96:1g2VilZtckx+9DgTlPJdiLW+iSah8vf1dtzlTaiVHRvPzc:12cV9sT3AW7NIzLVxvPY
MD5:	50E70063BE22526A96A1DB2BD0B4DFEC
SHA1:	032EC15CA25AD9CA85C77D577A3ADEF2B859921C
SHA-256:	F7FE8B104F333807DB4A77FE416E39F7F666981C15768CABF99E95EA51A95F77
SHA-512:	6E9FBC8C3EC7FAAFEE4105E5245FDF37F88F7B0A26D4D3572AD58E4447AF93860235F5F8B32BCF4C561C5E18A1A46B6B0E9FB1A6A82F442F64A32ED7CEE7814C
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1042882457/?random=1736464953014&cv=11&fst=1736464953014&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dform_start&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]}d=d[d.length-1];c=n&&c==="es6"?g[d]:null;b=b(c);b!=null&&(a?h(q,d,{configurable:!0,writable:!0,value:b}):b!==c&&(t[d]===void 0&&(a=Math.random()*1E9>>>0,t[d]=n?m.Symbol(d):"$jscp$"+a+"$"+d),h(g,t[d],{co

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	341
Entropy (8bit):	6.712629775187863
Encrypted:	false
SSDEEP:	6:6v/lhPuVIOl1Kpx0JNKbSe0gg/Ndmg8Ou1auY8qJRKep:6v/74LlUpx0Lfe0gVOu1DY8YcM
MD5:	603ED6BA44311A72FDC196C583BBF4E8
SHA1:	52E68B7BE0311C1A10395DB0652BC701614B6903
SHA-256:	A41DB732883095E32A87741D6FB20EA6A3346AC0B04E1C61498686CB8D8704C9
SHA-512:	6B7C06BBA422A488D9B7E188DEC1717313222784B61E9BB6DA0EE9F8FCF70AA5A74F3A083402A17933E0AF5BF77AB0BB6606312CB47D33B97F9F60BE59162A62
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...(...... H_...PLTEGpL.<n.<n.<n.<n.<n.<n.<n.<n.<n.<n.<n.<n.<nd.u....tRNS..r.].....=H..u.....IDAT8...I.. ..P.......m.Va..EUK.......`c.ac....`......qh.;p..Y..Av.g ....X..%.&.l:..{.g'...hK.H{.8.-K.R.i.{..'...N.d).8....itc...k.........\...3.T....T.k..,..\|.4VI\|.utbV........'.......P..9..M<.....W..C....IEND.B`.

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	4109
Entropy (8bit):	4.694807930301017
Encrypted:	false
SSDEEP:	96:12oecRWT9BvpXKZhUyXuXsk8hLb3Dhm2ykOoSc:12oecRWNXK3XuXW5Oc
MD5:	5CCD848126EDEFA4619B3611918ADB66
SHA1:	FDF6E588FCC866CB4BAF1629D9E41AA8CE648AC5
SHA-256:	1C40777119FC5594A6EE0E5E01C6E2814F286EDC7CE5EC082E661E321C7BE06E
SHA-512:	932F72F8AD91D38AAC35E64955BAB715F846D533CB0652A9516EC1F710859FB0ACA8EB25022E2918ACC6FF8BBE664633FCCEE879368E9604BAFCEBED6577941D
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/p/action/247010167.js
Preview:	(function(w,d,c,k,a,b,t,e) {. var cs = d.currentScript;. if (cs) {. var uo = cs.getAttribute('data-ueto');. if (uo && w[uo] && typeof w[uo].setUserSignals === 'function') {. w[uo].setUserSignals({'ea': c, 'kc': k, 'at': a, 'bi': b, 'dt': t, 'ec': e});. }. }.})(window, document, false, false, false, false, false, false);..(function(w,d,s,i) {.. var c=d.currentScript;.. if (c) {.. var uo = c.getAttribute('data-ueto');.. if (uo && w[uo] && w[uo].uetConfig && w[uo].uetConfig.deBlock === true).. return;.. }.. var f,j; f=d.getElementsByTagName(s)[0]; j=d.createElement(s); j.async=true;.. j.src='https://www.clarity.ms/tag/uet/'+i+'?conversions=1';.. j.onload = function () {.. if (!c) return;.. var co = function(u) { return u && typeof u === 'object' && !(u instanceof Array) && u.beaconParams && u.beaconParams.mid && w.clarity; };.. var r = 40;.. var cl = function() {.. if

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	163
Entropy (8bit):	4.849688311423567
Encrypted:	false
SSDEEP:	3:t6WCCV//GRcBH8+hH0DDmJS4RKb58ZSFuH1NLQxL/VCUtqfvy6RLkqIv:t68/e0dhU3mc4slvIcVqfaAS
MD5:	D5344EE8FAE2E17D50BA12142B585A59
SHA1:	BB35CE3267F197C51DFC5C714097C8DBFF83E5E1
SHA-256:	A159E0DD61B231BEE139F047F47EDB0C0E798663798E1D09E43628C74644A49A
SHA-512:	BDE345EE8A83B938F0C0367D90C032E575CD65FE1D9C8AA513B4B0EC74B55D455ACB7DDAD8112178C6760FF28EBA01918562BE93DCA71032F1E8D3FA2D5373AF
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/svg/right_chevron_icon.svg?c=%23000000
Preview:	<svg fill='#000000' width="24" height="24" xmlns="http://www.w3.org/2000/svg">.<path d="M7.59003 18.59L9.00003 20L17 12L9.00003 4L7.59003 5.41L14.17 12"/>.</svg>.

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	523
Entropy (8bit):	4.791717215916153
Encrypted:	false
SSDEEP:	12:tr/BWGuXM65e+hTMBi2NXkLnrn4dUgp4AQ2n:tzBXuXMMZCi2NXzdUguA/
MD5:	0B851BB95C11C46CDA6E567C0C1B3FC2
SHA1:	8EA93A43ADBF60416912715E50D76CFDB2A21DAC
SHA-256:	BCF0AB6BD4CE36E592D673E3C10E0E88942452DD97B918D70D21E205EE6E4FF3
SHA-512:	86A8F1A6FD3B8ABC6FEA642070869D96ED399D961BED75DBD3832A7FA62ABACBE18E6CF27C7407CF0ACDF9ED26F8A55552D313BB622C6510033A27942F423BAB
Malicious:	false
Reputation:	low
Preview:	<svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M0 16C0 7.17867 7.17733 0 16 0C24.8227 0 32 7.17867 32 16C32 24.8227 24.8227 32 16 32C7.17733 32 0 24.8227 0 16ZM23.7131 9.14286H21.1895L17.0312 13.8962L13.4358 9.14286H8.22857L14.4504 17.2787L8.55355 24.0186H11.0786L15.6298 18.8182L19.6074 24.0186H24.6857L18.1999 15.4441L23.7131 9.14286ZM21.7022 22.5081H20.3039L11.1755 10.574H12.676L21.7022 22.5081Z" fill="#1B1D1F"/>.</svg>.

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	736
Entropy (8bit):	5.053783684564299
Encrypted:	false
SSDEEP:	12:tr/BWGuoRhNKG+WU8FzaAZRsnJn4GBD3kAHF4uhthclQqoZ3mdVvyuiHFkAHFPER:tzBXuoh3Z5NRsnJn4Gd3ka4uhthU/u3w
MD5:	43D8E68D205EB8274E967A25542A4402
SHA1:	E05E727AC0A3369C35943D7CAEB1A6A5527CF871
SHA-256:	E401724D4736C404C4FF68FB7AB120021A1A7F3CBA181EB70B022E6418232963
SHA-512:	B851852A1D35B89244B16BA868D23346723283F1D69A93BA618677FE80A2F3BAAF3196689BB3090FD26C6D2672DA46A03166AFA2CD348BCBF32E8F95A9077D00
Malicious:	false
Reputation:	low
Preview:	<svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<g id="warning icon">.<g id="Group">.<path id="Polygon 2" d="M3.17445 27.1428L15.9999 5.16839L28.8254 27.1428H3.17445ZM3.13787 27.2055L3.13791 27.2055L3.13787 27.2055Z" fill="#E25530" stroke="#E25530" stroke-width="1.71429"/>.<path id="Line 1" d="M16 13.4852L16 19.2093" stroke="white" stroke-width="1.71429" stroke-linecap="round"/>.<path id="Ellipse 4" d="M17.3037 23.0936C17.3037 23.8036 16.7214 24.3817 15.9999 24.3817C15.2783 24.3817 14.6961 23.8036 14.6961 23.0936C14.6961 22.3836 15.2783 21.8054 15.9999 21.8054C16.7214 21.8054 17.3037 22.3836 17.3037 23.0936Z" fill="white" stroke="white" stroke-width="0.285714"/>.</g>.</g>.</svg>.

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1895)
Category:	dropped
Size (bytes):	147115
Entropy (8bit):	5.528377249335284
Encrypted:	false
SSDEEP:	1536:ej4EEHxzJkfKnTi/cteUEOKl16X5II615nUnU/WD3g78JSzg2SmAtGFUI/+r9334:NKl1KII6fXsS2mpB+N3QgHMOYXQzG
MD5:	053139B6BF5C8898F82612CD93311C0C
SHA1:	FD6CCB46C43E8B67FA2CEBDBB873CB18F038544B
SHA-256:	84D090CECE831A4CEB8D39506A52E5B1BD1B1B67A1096340948DBE6E84146074
SHA-512:	3B32B28F76050E3A1F80B32FCDF93DEE00675719F87814526060D5A5001D1FCB5EB532ABEF91AC0E73DD433D03A2E7F127EEA1F5A42F7D4CB10E208E669C4288
Malicious:	false
Reputation:	low
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"5942599812270562725",packages:"domains",module:"ads",version:"1",m:{cei:"17301437,17301439,17301442,17301548,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_chatbot_aa":500,"afs_gpp_api":0,"disable_usp_api":10,"heterodyne_test":851,

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52310)
Category:	dropped
Size (bytes):	52386
Entropy (8bit):	5.27581955029593
Encrypted:	false
SSDEEP:	768:bEGF86NlvAxLYWFYrhA2nS8bZredSW+FJLEUZ1NSPjRaYGmXoQ4PGOWCq0fdy0gI:j3lSE04+OWPAm7WOffQYmG1bIL
MD5:	9CE21CA7EA1EA56A8F19202A75CB6F0C
SHA1:	1F2B88FE14F6E0E3B4795A9AF8E5924A5DCE6C39
SHA-256:	2F4F346A8C4AAA740C54B9F93B801B05DD665CEB56624B9C5E1385669E253075
SHA-512:	5BA20B5E7397714695162D382C58A0C94ACC836041B5DFAE48401DAE2FDE175BF91DF6867840C434A5E3EBABE6E9083BDE7E818226CC0A553C836DD12AB6CD8D
Malicious:	false
Reputation:	low
Preview:	/! For license information please see nr-rum-1.278.1.min.js.LICENSE.txt /."use strict";(self["webpackChunk:NRBA-1.278.1.PROD"]=self["webpackChunk:NRBA-1.278.1.PROD"]\|\|[]).push([[296],{119:(e,t,r)=>{r.d(t,{L:()=>a});var n=/([^?#])[^#](#[^?]\|$)./,i=/([^?#])()./;function a(e,t){return e.replace(t?n:i,"$1$2")}},903:(e,t,r)=>{r.d(t,{p:()=>i});var n=r(154);function i(){return Boolean("file:"===n.gm?.location?.protocol)}},304:(e,t,r)=>{r.d(t,{A:()=>a});var n=r(836);const i=()=>{const e=new WeakSet;return(t,r)=>{if("object"==typeof r&&null!==r){if(e.has(r))return;e.add(r)}return r}};function a(e){try{return JSON.stringify(e,i())??""}catch(e){try{n.ee.emit("internal-error",[e])}catch(e){}return""}}},83:(e,t,r)=>{r.d(t,{w:()=>n});const n={FIRST_PAINT:"fp",FIRST_CONTENTFUL_PAINT:"fcp",FIRST_INPUT_DELAY:"fi",LARGEST_CONTENTFUL_PAINT:"lcp",CUMULATIVE_LAYOUT_SHIFT:"cls",INTERACTION_TO_NEXT_PAINT:"inp",TIME_TO_FIRST_BYTE:"ttfb"}},963:(e,t,r)=>{r.d(t,{j:()=>s});var n=r(226),i=r(154),a=r(83);co

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (55897), with NEL line terminators
Category:	downloaded
Size (bytes):	138980
Entropy (8bit):	5.40509343289392
Encrypted:	false
SSDEEP:	1536:Y3XHpZ0JwDkoZDgRA5RC/Zk5ox40ELRLRqIP60wZ3680/IKwI1WJMEfXhYfaU:gHz0JwDkfR8RC/Oox40HIP6ybE+1
MD5:	2E2A6748D45FEC47E5783039F1DA1E31
SHA1:	19DD72476412941E228EEBE440600D18E331D451
SHA-256:	49ACF2B9718F0A50582CDA0AEC815D3A861777EBEE8C942E33E1E4CEA1BD2652
SHA-512:	5F3B0CCE9A05F7D272B0506E902B0121D0FDA38FAA041EE3326EEE7230B0BC534D7258508D1ACCDF57A7085E5F3B514650F2C7ADF322E4DAF66CAAB8D91D8A9C
Malicious:	false
Reputation:	low
URL:	https://b-code.liadm.com/a-06nm.min.js
Preview:	!function(){window.LI={"appId":"a-06nm","advertiserId":67848,"sync":false,"euns":false,"identifiersToResolve":"_aalyticsuid,trc_cookie_storage,dtm_token,_pubcid,hid,muuid,globalTI_SID,ajs_user_id,_li_uuid,s_ecid,_shopify_y,gup_anonid,s_vi,IXWRAPPERLiveIntentIp,_parrable_id,tmguid,_sharedid,dsq__u,dsq__s","contextSelectors":"title,meta[name='description'],h1,link[rel='canonical']","contextElementsLength":5000}}();!function(){"use strict";var e="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function t(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}var n=function(e){try{return!!e()}catch(e){return!0}},r=!n((function(){var e=function(){}.bind();return"function"!=typeof e\|\|e.hasOwnProperty("prototype")})),o=r,i=Function.prototype,s=i.call,a=o&&i.bind.bind(s,s),l=o?a:function(e){return function(){return s.apply(e,arguments)}},c=function(e){return null==e},

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	77
Entropy (8bit):	4.37144473219773
Encrypted:	false
SSDEEP:	3:k0WYL12AvZ/W6QfpX/W6Qee:UYR2AvZO6EpXO6I
MD5:	B6652DF95DB52FEB4DAF4ECA35380933
SHA1:	65451D110137761B318C82D9071C042DB80C4036
SHA-256:	6F5B4AA00D2F8D6AED9935B471806BF7ACEF464D0C1D390260E5FE27F800C67E
SHA-512:	3390C5663EF9081885DF8CDBC719F6C2F1597A4E25168529598097E9472608A4A62EC7F7E0BC400D22AAC81BF6EA926532886E4DC6E4E272D3B588490A090473
Malicious:	false
Reputation:	low
Preview:	self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (21436)
Category:	dropped
Size (bytes):	22260
Entropy (8bit):	5.327527879006782
Encrypted:	false
SSDEEP:	384:GDWhDNyyu0sfL7mQYDbJF3C95D/EeD0ereRt4zveHcCMdNVb:GDW9NUfmQxrAeYere8zveHcCcj
MD5:	18F8CFD7C604DB24599DB7FC03AF9F4F
SHA1:	FD414B1057F1BF3EA6237BE862A5FC86B0F71F66
SHA-256:	A09060DF454EE58B9DB338DC4203F19B7DE78E463CA31A93D7730000FDBFE175
SHA-512:	7092102BEC8B88621960194EF4E18F49F997CC5964740EBC2C15C974B9E157D734ADF8FC0E77499EB9367D6273BD9B08EF07395AC568F1D5ECD63B73074AFDCE
Malicious:	false
Reputation:	low
Preview:	(function (w) {. // Begin doc.. var is_dev = false;.. if ( false ) {. is_dev = true;. }.. var disable_sync = false;.. if ( true ) {. disable_sync = true. }.. var tip = "rZZfcCEqTfJv2XsQEoxsRg8JMTkthxHoqAYtcMHoEa0". . var userIdCookieValue = "s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ". var userIdV2CookieValue = "s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM". var userIdV3CookieValue = "s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCC0tIG8BjABOgT87-jmQgQ_QCZc.O3M9N%2FjNocxDAkJgoeKCY4eteFsk5sYBegvZtk1NJzo". var campCookieName = "". var campCookieValue = "". var campaignCookieLiveDuration = 7776000. var userIdCookiesLiveDuration = 31536000. var accountID = ""..var globals={load_num:0,init:!1,addr:is_dev?"http://127.0.0.1":"https://tags.srv.stackadapt.com",aid:"",impid:"",default_params:"",landing_page:"",secs_passed:0,total_secs_passed:0,hidden:!1,host:encodeURIComponent(

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5177), with no line terminators
Category:	downloaded
Size (bytes):	5177
Entropy (8bit):	5.873604265441957
Encrypted:	false
SSDEEP:	96:1g2VilZtckx+9DgTlPJdiLW+iSah8vf1dtzlTamVIRvM:12cV9sT3AW7NIzXVuvM
MD5:	19FBD923E0BD2315F9B34F6F1C4E0AAD
SHA1:	BB2FF190E1FC018BF06FD19A76FB0EA33F7089A6
SHA-256:	7D53EA91D68442994FC0AD1CC728706AC56D8F91115F67936B103325BF771D94
SHA-512:	50F6982B087EE0AE00F9216BC5014E71E19EC595168629D0E3E9B97C010BEB53F4AC9B1A04B85DE8BB46DE95347AD4981E50BB87F7FCC41624FCAD2F31C8DE8D
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1042882457/?random=1736464974036&cv=11&fst=1736464974036&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dform_submit&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]}d=d[d.length-1];c=n&&c==="es6"?g[d]:null;b=b(c);b!=null&&(a?h(q,d,{configurable:!0,writable:!0,value:b}):b!==c&&(t[d]===void 0&&(a=Math.random()*1E9>>>0,t[d]=n?m.Symbol(d):"$jscp$"+a+"$"+d),h(g,t[d],{co

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1162)
Category:	downloaded
Size (bytes):	20818
Entropy (8bit):	5.592463908396929
Encrypted:	false
SSDEEP:	384:XIgJV0fiJF+sLQld20p28JXHABsOEsoc1/1hUP88J1c7lVMF/fQpDUriKo36n:tJV6iJfwgvoc1/1hUP07jMxIpPKoqn
MD5:	A1F3145E1DC107AAD3B57974B8817B57
SHA1:	507EA38AA8AD7BBE3AB3FA7E4C85016E3DCA2960
SHA-256:	A463AA6666CE0ABCABF8033013CFE881FDBFB570389AFF471D400A45B3A496D4
SHA-512:	8ADDDA4A0F27DB8DCE9706E87C1C5716949EA8111E05A7CEE46E027252D0EEECAB2DCADD02CA505021DB7DFF7ADF88272027A4FE156DAA95A1D75F7CC73C2822
Malicious:	false
Reputation:	low
URL:	https://collector-47776.us.tvsquared.com/tv2track.js
Preview:	/!. Piwik - Web Analytics. . JavaScript tracking client. . @link http://piwik.org. * @source https://github.com/piwik/piwik/blob/master/js/piwik.js. * @license http://piwik.org/free-software/bsd/ Simplified BSD (also in js/LICENSE.txt). */.if(typeof JSON2!=="object"){JSON2={}}(function(){function d(f){return f<10?"0"+f:f}function l(n,m){var f=Object.prototype.toString.apply(n);if(f==="[object Date]"){return isFinite(n.valueOf())?n.getUTCFullYear()+"-"+d(n.getUTCMonth()+1)+"-"+d(n.getUTCDate())+"T"+d(n.getUTCHours())+":"+d(n.getUTCMinutes())+":"+d(n.getUTCSeconds())+"Z":null}if(f==="[object String]"\|\|f==="[object Number]"\|\|f==="[object Boolean]"){return n.valueOf()}if(f!=="[object Array]"&&typeof n.toJSON==="function"){return n.toJSON(m)}return n}var c=new RegExp("[\u0000\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\ufeff\ufff0-\uffff]","g"),e='\\\\\\"\x00-\x1f\x7f-\x9f\u00ad\u0600-\u0604\u070f\u17b4\u17b5\u200c-\u200f\u2028-\u202f\u2060-\u206f\uf

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2734
Entropy (8bit):	4.48106417864042
Encrypted:	false
SSDEEP:	48:jpjgkjKitejJm3OjVTzFHU/nIc4v44Qva2HaX5CEOm85xjY7uhwabhLEdm:FjgkxteN1TU/Ic4g4Qva2u5C93Y7uHhL
MD5:	09ABDEDB9D270D570ED3CF9D37D1C856
SHA1:	F6F140E627214D829A8BDB96E96F8F3D10A9B551
SHA-256:	607CD74667C885553832462D6E8DFC5FA296813B6526C9144F40F3FCF75580D7
SHA-512:	E6E96098B764D78DE058FC70534477926D7387B5A5F12DD52945468579F4B212BF15B063F696E42C87619BE343858BCED9B924474C0FB409430152F417C3AB97
Malicious:	false
Reputation:	low
Preview:	<svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M20.538 12.5812C19.9353 12.5852 19.4327 12.0879 19.4327 11.4879C19.434 10.8919 19.922 10.4026 20.522 10.3972C21.1247 10.3906 21.626 10.8866 21.626 11.4892C21.626 12.0826 21.1327 12.5772 20.538 12.5812ZM15.9997 20.3465C13.6104 20.3385 11.6504 18.3731 11.6637 15.9931C11.6757 13.6051 13.6211 11.6625 16.0037 11.6598C18.3864 11.6558 20.3504 13.6198 20.3477 16.0038C20.3464 18.3905 18.3811 20.3532 15.9997 20.3465ZM21.5887 9.64656C21.0167 9.23322 20.3687 9.06789 19.67 9.06922C18.4527 9.07056 17.2353 9.06922 16.018 9.06922C14.794 9.06922 13.5713 9.06922 12.3487 9.07056C11.9633 9.07056 11.5833 9.11056 11.2167 9.24122C9.88335 9.71856 9.07668 10.8666 9.07402 12.3159C9.07002 14.7746 9.06602 17.2306 9.08068 19.6892C9.08335 20.0546 9.13535 20.4386 9.25268 20.7852C9.70468 22.1266 10.8687 22.9319 12.3153 22.9346C14.7727 22.9386 17.23 22.9426 19.686 22.9279C20.

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21642), with no line terminators
Category:	downloaded
Size (bytes):	21642
Entropy (8bit):	5.211300230863477
Encrypted:	false
SSDEEP:	192:OgDogI+WFbAzgCNrWiNr0H0f0O0o0m0tMl0330c06EGa087sUsS3+05opYP0v2ID:jEgZgbijdQV2vF+64uip
MD5:	D26FEE00B7100913344AAF2EF1DE8F0F
SHA1:	1950779FB1B64A5CE9331CA6319CE1E1A4DAE55D
SHA-256:	44C3858A10132F28D378E3B720C10C971457B25E1680ACA0FA3005DF64E74F01
SHA-512:	CE2E87D36D256FD1D5A6A11C78544C6E756FB9615BE4BBDE50FA90C5268217C008A8827121F7156D4C484867F77E92D3CE2AD52D77DD503D0EFAF87DED771874
Malicious:	false
Reputation:	low
URL:	https://medicare.gohealth.com/_next/static/css/b8e92ad69f85b8b9.css
Preview:	@media only screen and (max-width:680px){.progress-bar_hide-on-mobile__aoM4B{display:none!important}}@media only screen and (min-width:681px){.progress-bar_show-on-mobile__Btrg2{display:none!important}}@media only screen and (max-width:880px){.progress-bar_hide-on-tablet__p9dDe{display:none!important}}@media only screen and (min-width:881px){.progress-bar_show-on-tablet__Gj0tC{display:none!important}}@media only screen and (max-width:1180px){.progress-bar_hide-on-desktop__jNXu1{display:none!important}}@media only screen and (min-width:1181px){.progress-bar_show-on-desktop__RMMuI{display:none!important}}.progress-bar_text__OUwcq{color:#f67b00;font-size:18px;font-weight:700;line-height:36px;margin-top:18px;text-align:center}@media only screen and (max-width:680px){.progress-bar_text__OUwcq{margin-top:9px}.footer_hide-on-mobile__73bdS{display:none!important}}@media only screen and (min-width:681px){.footer_show-on-mobile__m1CX6{display:none!important}}@media only screen and (max-width:880

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	166
Entropy (8bit):	5.852184084844084
Encrypted:	false
SSDEEP:	3:yionv//thPlGARtjmA66MF5DpwloyzFZp0xdkgl08mzsPS98WInwgblSHxp2p/Hb:6v/lhPIARoA6b5tQoEZCkglFmRhawgB5
MD5:	D2D649B406D7A325683E2CCBD3297E43
SHA1:	819D6E6BF4CE1219BF83DEB5CB33A04A57E12C07
SHA-256:	E9BDAE625005100947D641A34F00BDD51B435D2C5979DF3F3F32F0D812CB17F7
SHA-512:	19E7F5D74C422DB0DC24B1748C174931CCC59EA0F80EE7F92293C7EF05956D477C8287F21CB10FCFF6867E10AC81C96DC138F9C5FF1F83F3AC4FC66A7F7D1AE0
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/afs/snowman.png
Preview:	.PNG........IHDR...0...0......,.....PLTE....................r.....tRNS. ... ..<~...=IDATx.c.~.Q.I......!V....'......X%L.2.....b.U.U.(.&.0.V.a5...-...........IEND.B`.

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60245)
Category:	downloaded
Size (bytes):	407641
Entropy (8bit):	5.586927436854537
Encrypted:	false
SSDEEP:	6144:VF2l9yICDMaR9GtUsYyzNMexc+E3OPoKtYm:72RC9RGDNMe0eSm
MD5:	D3FB9517F4C06DE2243178F91521A04B
SHA1:	9DC9E3CBED5AFD6EF66BD0696D906D6D70FA2137
SHA-256:	391A2DC49D78E45E1A140B3BD7D8AEFE7E2EEBBA58432C520A29D6D6C1F75BA7
SHA-512:	E940E16B2699579071793B11DAA8EE4CBC44C1C2B92495D84EFA3A42F33F7D76CA6366B7E93F1C0E020C1C257D2CC70F30E1021BC45FD2F6A2237507DBC2B6A1
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-NQTKCNK
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"67",. . "macros":[{"function":"__e"},{"function":"__v","vtp_name":"gtm.elementId","vtp_dataLayerVersion":1},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"leadScoreValue"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"countryValue"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"lastNameValue"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"phoneValue"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"zipCodeValue"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"firstNameValue"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"email

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	341
Entropy (8bit):	6.712629775187863
Encrypted:	false
SSDEEP:	6:6v/lhPuVIOl1Kpx0JNKbSe0gg/Ndmg8Ou1auY8qJRKep:6v/74LlUpx0Lfe0gVOu1DY8YcM
MD5:	603ED6BA44311A72FDC196C583BBF4E8
SHA1:	52E68B7BE0311C1A10395DB0652BC701614B6903
SHA-256:	A41DB732883095E32A87741D6FB20EA6A3346AC0B04E1C61498686CB8D8704C9
SHA-512:	6B7C06BBA422A488D9B7E188DEC1717313222784B61E9BB6DA0EE9F8FCF70AA5A74F3A083402A17933E0AF5BF77AB0BB6606312CB47D33B97F9F60BE59162A62
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/8697923874958303198?sqp=-oaymwEKCCgQKCABUAFYAQ&rs=AOga4qleskZWbiU7WsLbRqNq32La3QBiqw
Preview:	.PNG........IHDR...(...(...... H_...PLTEGpL.<n.<n.<n.<n.<n.<n.<n.<n.<n.<n.<n.<n.<nd.u....tRNS..r.].....=H..u.....IDAT8...I.. ..P.......m.Va..EUK.......`c.ac....`......qh.;p..Y..Av.g ....X..%.&.l:..{.g'...hK.H{.8.-K.R.i.{..'...N.d).8....itc...k.........\...3.T....T.k..,..\|.4VI\|.utbV........'.......P..9..M<.....W..C....IEND.B`.

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60245)
Category:	dropped
Size (bytes):	406698
Entropy (8bit):	5.586326985786572
Encrypted:	false
SSDEEP:	3072:uSfjR2KK2+EG+3bw/DH42/rl0nYQ1A5yCOA7LcGc84x94cexKonhsGffqjvbH:VF2Ky+3bsDHP6SVUvTv4bKonhsGC7
MD5:	E23F9D06319DF85915C047F46AE5E42D
SHA1:	D71908825F016C5CF225BE607AD3857E53CF564E
SHA-256:	DF1AC9E8668930B9894A27340C085FD6A64BB6D7D19945BCAA7C6E8548A6864C
SHA-512:	C2772827BADEC85F92E61A23B2696E2E65634B797A0B3D65F13FBEF8BC40309E65630C0A7417A8FD3CCAD29FD04CD92F2427718E5D9A7F319F073B61344A447C
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"67",. . "macros":[{"function":"__e"},{"function":"__v","vtp_name":"gtm.elementId","vtp_dataLayerVersion":1},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"leadScoreValue"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"countryValue"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"lastNameValue"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"phoneValue"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"zipCodeValue"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"firstNameValue"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"email

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	106599
Entropy (8bit):	5.433226333251586
Encrypted:	false
SSDEEP:	1536:Cb5Uv0wWaM56B1X1FL6/9YHjrx4ziYtCRl69JLtaLBrDgfnH1OBeFWySrbyqEcu7:CV61THjiPsLBw5XSCb/
MD5:	753E1B5591A3F7E9ECA63CD59D1F329D
SHA1:	878ECBC6D00C4D5A649BF8C853D0376860038566
SHA-256:	FAB5EC76C535E5FDCA180A0B6A51358C09672181D765562A44BA5A7A86AF8B0A
SHA-512:	8417CAEFB006E5037815F83C881CAC8D77B812819DA5B6D7DDFDB1F2C3955F2929B90E1D8CB2D4CB7BEB9D2A280891A0690B12ACA4C4B9C2AC08F63A01E0F10B
Malicious:	false
Reputation:	low
Preview:	!function(t){var n={};function r(e){if(n[e])return n[e].exports;var i=n[e]={i:e,l:!1,exports:{}};return t[e].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=n,r.d=function(t,n,e){r.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:e})},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"_",{value:!0})},r.t=function(t,n){if(1&n&&(t=r(t)),8&n)return t;if(4&n&&"object"==typeof t&&t&&t._)return t;var e=Object.create(null);if(r.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:t}),2&n&&"string"!=typeof t)for(var i in t)r.d(e,i,function(n){return t[n]}.bind(null,i));return e},r.n=function(t){var n=t&&t._?function(){return t.default}:function(){return t};return r.d(n,"a",n),n},r.o=function(t,n){return Object.prototype.hasOwnProperty.call(t,n)},r.p="",r(r.s=5)}([function(t,n,r){var e=r(1),i=window,a=i.document,c=i.location,o=encodeURIComponent,u=decodeURIComponent,f=i.navigat

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	761
Entropy (8bit):	4.695768067919445
Encrypted:	false
SSDEEP:	12:UeKpKct5WuSz7inigFM7xKlwoGEk5Cs+rTKESJ1nHmdUTAcUGslAfC:OpRt5WZjgFm24rCAJAdUTIGslA6
MD5:	64F809E06446647E192FCE8D1EC34E09
SHA1:	5B7CED07DA42E205067AFA88615317A277A4A82C
SHA-256:	F52CBD664986AD7ED6E71C448E2D31D1A16463E4D9B7BCA0C6BE278649CCC4F3
SHA-512:	5F61BBE241F6B8636A487E6601F08A48BFFD62549291DB83C1F05F90D26751841DB43357D7FE500FFBA1BC19A8AB63C6D4767BA901C7EDED5D65A1B443B1DD78
Malicious:	false
Reputation:	low
Preview:	/. Sales form click tracker. . tlink() will load a 1x1 GIF to track clickouts to the contact form. * Some basic scrambling prevents (a lot of) web scrapers to follow the link. . Date: 2016-03-22.*/..// function tlink(v, wow).// v is a fixed string.// wow will contain the current domain name.function tlink(v, wow) {. if (document.location.search.indexOf('_xas') === -1) {. // define some compenents that will later form the link to the 1x1 GIF. var proto_suf = "tp",. string = "omainb",. parameter = "php?salelink=1";. // generate and load the 1x1 GIF. new Image().src= "ht" + proto_suf + ":" + "//" + "ww" + "w.myd" + string + "uy.com/sale_form." + parameter + "&dom" + "ain_name=" + wow;. }.}.

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	391
Entropy (8bit):	4.7474201749507134
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slzTPl2O4UYaeLIT4W+KS4S1UpMTQpi6jUs8sh6B+BSmK0C:t6qFPUPkHSt1UiT6i6jUs8b0I0C
MD5:	8959DDCD9712196961D93F58064ED655
SHA1:	62AB1E38E7E9FBF58A04381B76C2D96A9C829F24
SHA-256:	17C7A89BF169C2EE400E31B042CEA68513F06B9CD7D1E8990DBEC800F0D771C7
SHA-512:	5E9EFFA313C30B351345DB963238B4AFD0728CA302FD79A853C80C89F042266D44CC1D29492520FB0FA80B47135E54E6963DFC21972F6B236B84C1DA2FAD809D
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"/><path d="M0 0h24v24H0z" fill="none"/></svg>.

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	downloaded
Size (bytes):	85289
Entropy (8bit):	5.46527363157299
Encrypted:	false
SSDEEP:	1536:R7hpwPCHM9ZVK01QYaKTZ02LKVsdmpyKcicIFs6jL7eb:R7Vs9ZVKBYaKj8wKcHIiR
MD5:	9B1BEB4865AF2A15ADEFEA849E56CCB5
SHA1:	B0D6B90FC0D4C799366588D259DCD527702ACE2F
SHA-256:	6085ED92CD5AA3E03E768CCF34184DA73CA8C792E3976E78C0E3BE888BF05D4C
SHA-512:	0CD72825D85C967DDAF1E899DA16B8073EE9CC64B37890D4A8E6E06C1BF2DF20C8D6525B9FDF13E1B7A5BDFEB6C6FA708085CB211DA8CF67B144A61DF33C1711
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/753743931636742?v=2.9.179&r=stable&domain=medicare.gohealth.com&hme=b8122d5d96cd6f542162ba4f497489972d1ebe228d24c39d34f560e30ae932ce&ex_m=70%2C122%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C173%2C176%2C188%2C184%2C185%2C187%2C29%2C101%2C53%2C77%2C186%2C168%2C171%2C181%2C182%2C189%2C132%2C41%2C191%2C192%2C34%2C144%2C15%2C50%2C197%2C196%2C134%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C169%2C172%2C141%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	710
Entropy (8bit):	4.168229211473121
Encrypted:	false
SSDEEP:	12:YGQ4BuMW0dsVOGD8RgcW7ZRRYH84IHMFrggAlboU6UEiYcWu3YJfF:YCzsVrD8qfq84IqrB1HcWu3a
MD5:	A3EA45D2A7E5A3146B9563B08091E6BD
SHA1:	F949C8E31FC12FDF61641919F307FF6571037371
SHA-256:	78A8DD9E0E5B030A71B2C342F236DF84CF093350E69591F508A71A82D2ECBE5F
SHA-512:	81815B132B98B598FA91BF32D4FC63354F820D448F9C54F726889335CBB67EF158AE43895BE50DCFD2A4838F3396C727305405FFAA463A85F1D94F8D937EF06D
Malicious:	false
Reputation:	low
URL:	https://medicare.gohealth.com/api/geo-location/ip
Preview:	{"city":"New York City","ipAddress":"8.46.123.189","state":"New York","stateAbbrev":"NY","fipsCodes":["36001","36003","36005","36007","36009","36011","36013","36015","36017","36019","36021","36023","36025","36027","36029","36031","36033","36035","36037","36039","36041","36043","36045","36047","36049","36051","36053","36055","36057","36059","36061","36063","36065","36067","36069","36071","36073","36075","36077","36079","36081","36083","36085","36087","36089","36091","36093","36095","36097","36099","36101","36103","36105","36107","36109","36111","36113","36115","36117","36119","36121","36123"],"stateCode":"36","fips":"","medicaidData":{"programName":"New York Medicaid","excludeAdditionalLanguage":true}}

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	9500
Entropy (8bit):	4.349587466104534
Encrypted:	false
SSDEEP:	192:RieLs9z+4s6xJZvEjezieLs9z+4s6xJZvEjeieLs9z+4s6xJZvEjjieLs9z+4s6C:4eYz7s6xXvEje+eYz7s6xXvEj/eYz7s3
MD5:	594191931DA06CE81F1A08D9D8801936
SHA1:	4186CE29E36A2C0E3DF29022A39E7EFF75E75137
SHA-256:	FFBE9EECC08829AB621670F60C4DB539F3E3FE58DAA3BF483D37F80E2CC1C7FB
SHA-512:	A4814CDA79B8E96ED5A72A47E74317763E89839FAE1D9FDF7A35255353294E68442EDC6495E1E040005E8DDF1AB2C03D13B32310CB128366F7F6D4E829D7F345
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="190px" height="35px" viewBox="0 0 190 35" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>trustpilot-stars</title>. <g id="Final" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="V1---MOBILE---Agent" transform="translate(-537.000000, -670.000000)">. <g id="trustpilot-stars" transform="translate(537.000000, 670.000000)">. <g id="Group-9">. <polygon id="Fill-1" fill="#00B67A" points="0 35 35.8209534 35 35.8209534 0 0 0"></polygon>. <path d="M30.3275933,14.9681769 C26.38973,17.7274188 22.4518667,20.4866606 18.5140034,23.2459024 C18.5267924,23.2867969 18.5407441,23.3265555 18.5546958,23.3685859 C19.9580028,23.0312064 21.370611,22.7267697 22.7588038,22.340544 C23.3157086,22.1860537 23.5354476,22.2814741 23.7028678,22.8165103 C24.2365198,24.5181753 24.821328,26.2062088 25.3817207,27.8999221

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	29215
Entropy (8bit):	4.473350866176571
Encrypted:	false
SSDEEP:	768:0IaMZRgBm0BePYXs3ZWuKZDWUCs5NhFNbWr:0koBT+0uFEIr
MD5:	7EA2AA63ADD37FC5EF70D084FE6D264F
SHA1:	39187F30F004EA22569258547BA1A728BDF2B152
SHA-256:	20E58839516ADEF7F0AEF35A16C69A74C0C27D43F2E4B520A110C704F0F9012F
SHA-512:	7CCEA2D72786B0099AEEF3DB3126D87DCA9CBAE1D4DDFCEA088E35AB61F5DE5876F90C299B2B518AF35209B98D463838B3DF4A127288A73A8F0532A4D78D7017
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="146.817053px" height="61.999px" viewBox="0 0 146.817053 61.999" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>trustpilot-badge</title>. <defs>. <polygon id="path-1" points="6.759 1.11022302e-16 8.153 1.255 1.394 8.762 0 7.506"></polygon>. <polygon id="path-3" points="6.418 10.182 2.452 12.28 3.209 7.837 1.42108547e-14 4.691 4.435 4.042 6.418 0 8.402 4.042 12.836 4.691 9.627 7.837 10.385 12.28"></polygon>. </defs>. <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="trustpilot-badge" transform="translate(-0.000000, -0.802000)">. <path d="M19.4807107,61.6 C19.8857107,62.009 21.4147107,62.696 21.6227107,62.801 C20.6007107,60.904 17.8277107,58.211 16.4837107,57.157 C16.1147107,56.696 15.7007107,56.288 15.2607107,55.922 C15.1127107,54.96 15.2087107,54.012 15.1267107,53.055 C15.0037107,51.621 14.4617107,49.673

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24123), with no line terminators
Category:	downloaded
Size (bytes):	24123
Entropy (8bit):	5.253241421773731
Encrypted:	false
SSDEEP:	384:oBruM+6GiAkKFZcG5L0wUYs1JLVUkw9imMM69dojKNCxtq5fD9gmXh:uyM+6GLkQcM0wUfBSYFoKNMtO5h
MD5:	B2FE43FD522E935E78232911D38CC8D1
SHA1:	952B81D18A7A7C9CB32636A9C28611B023F89EEA
SHA-256:	5D8B64182368F0E4E9DE66868984B558FF5ECE992EF495DF80EEB353E4A35AE9
SHA-512:	49B780CFB7698CDA9282AD93635B8C1A59600FD13485A80088FB949EE4E30EE1B2A66C9955D49C54FE67A2C34DAF966A95EA937B68AB8E74C5CE3EC67DC50DD8
Malicious:	false
Reputation:	low
URL:	https://amplify.outbrain.com/cp/obtp.js
Preview:	!function(t,e){var define;"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports?exports.obtp=e():t.obtp=e()}(this,(()=>(()=>{"use strict";var t,e,n={},o={};function r(t){var e=o[t];if(void 0!==e)return e.exports;var i=o[t]={exports:{}};return n[t](i,i.exports,r),i.exports}r.m=n,r.d=(t,e)=>{for(var n in e)r.o(e,n)&&!r.o(t,n)&&Object.defineProperty(t,n,{enumerable:!0,get:e[n]})},r.f={},r.e=t=>Promise.all(Object.keys(r.f).reduce(((e,n)=>(r.f[n](t,e),e)),[])),r.u=t=>t+".js",r.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(t){if("object"==typeof window)return window}}(),r.o=(t,e)=>Object.prototype.hasOwnProperty.call(t,e),t={},e="conversion-pixel-tag:",r.l=(n,o,i,a)=>{if(t[n])t[n].push(o);else{var s,c;if(void 0!==i)for(var u=document.getElementsByTagName("script"),p=0;p<u.length;p++){var l=u[p];if(l.getAttribute("src")==n\|\|l.getAttrib

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	dropped
Size (bytes):	26
Entropy (8bit):	3.469670487371862
Encrypted:	false
SSDEEP:	3:qVZqz:qz0
MD5:	4E43C09312DA47F5D540BF874ECB46F7
SHA1:	AB25ABAE19ED156908C76D641F1449AA3F1724D5
SHA-256:	6D0291F90718DC0537F65DC6A4F68D8E75F0A8A3A0B62836D9CF41350ECAF552
SHA-512:	B86531F838FF48C2715313D50D433C74A57B15E8B6D515B86BFB031E3C4048AC9F0DB4AC7EE143890379A4A59808EF46929811AC938EB83C1E0547E4DDA2DFAF
Malicious:	false
Reputation:	low
Preview:	<html><bode></body></html>

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	http://api.myuhchvision.com/ls.php?t=67805a0d&token=97d63dc638987051951f6cde063e6a972a611362
Preview:	{"success":true}

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.687144312913345
Encrypted:	false
SSDEEP:	3:CU9yltxlEun:Vu
MD5:	00657DD79637A8DAF5E6196CA17F1887
SHA1:	3E064855D1FE7C6EAC52981A646EC5840BA7EFB5
SHA-256:	F0C71E3DA5B3FCAB3C66AF1CF0CDBF262C97B9330B7B37116F1AE2AB18BDC660
SHA-512:	27524EAAD778B2C220D655BAE2AC4A6C4CF54112FAF9133E34A4C25C3CD2A8A04CB7CEC35A09F80D4F51DFC73B1F94C63BBC92171220FE83F6F0BDB204645485
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........(.;

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (516)
Category:	downloaded
Size (bytes):	8293
Entropy (8bit):	5.197650744936359
Encrypted:	false
SSDEEP:	96:pbzQdpSCvvbMMMmMdMtM9M3MI7zXMvMYMiMxA:pwSCvvbMMMmMdMtM9M3MYMvMYMiMxA
MD5:	F75248537ECDC9C019D3A857400F083A
SHA1:	346D0029C1D59A26A4CCB4AC26562B9A70D38E7F
SHA-256:	40D3CF808B8B1450E6D97FB4150ACC18FC84D561CF4BADFE2E14D2000AEBEED4
SHA-512:	AC0DE1DAAC7C5E4664954E441971BC30D53923AE1C771AF5813BA0356295D521CC023E535EFD666E0854804EB58882C673E9EDE65B40A7C1E0212C7BFF0721F2
Malicious:	false
Reputation:	low
URL:	https://use.typekit.net/pys1zzw.css
Preview:	/. The Typekit service used to deliver this font or fonts for use on websites. * is provided by Adobe and is subject to these Terms of Use. * http://www.adobe.com/products/eulas/tou_typekit. For font license. * information, see the list below.. . adelle-sans:. * - http://typekit.com/eulas/00000000000000007735a1c8. * - http://typekit.com/eulas/00000000000000007735a1c5. * - http://typekit.com/eulas/00000000000000007735a1e1. * - http://typekit.com/eulas/00000000000000007735a1e4. * - http://typekit.com/eulas/00000000000000007735a1e6. * source-sans-3:. * - http://typekit.com/eulas/0000000000000000774d56f5. * - http://typekit.com/eulas/0000000000000000774d56f1. * - http://typekit.com/eulas/0000000000000000774d56f8. * - http://typekit.com/eulas/0000000000000000774d56f7. * - http://typekit.com/eulas/0000000000000000774d56fa. * - http://typekit.com/eulas/0000000000000000774d56ef. . . 2009-2025 Adobe Systems Incorporated. All Rights Reserved.. /./{"last_publishe

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5268)
Category:	dropped
Size (bytes):	300209
Entropy (8bit):	5.563086021912129
Encrypted:	false
SSDEEP:	3072:qzK2+EG+3Iw/OH42Trl094Q1A5yCOA7LcGJ84x94cqxSTnhsGZpDYbI:yy+3IsOHPKSVUaTv4fSTnhsGZhh
MD5:	5903BAC5051EAEE6950BF4BEDB1917F1
SHA1:	84D0948D08F1D829BC23211B0CAC7553B74F66F0
SHA-256:	AFC3612A0C5F0B56F1A6A60A62C2065E01A749B7D2E4AFEABAF3B27A738A5C50
SHA-512:	8E5F37D10524D26EE11334EF5F729236836B048DA2C7A89B46540E0CAFB0CEFEDB0ED58F8D5BE3FAED10C28E6C035028D179FFD11066D359B48FF0BA07BB5AC0
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":16,"vtp_instanceDestinationId":"AW-408830293","tag_id":10},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regi

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	7043
Entropy (8bit):	4.524212090966373
Encrypted:	false
SSDEEP:	96:4qa2BOrd8sFFvpdXzJKmymfmLL7a2xL9qDqZqSzpAFZ00o+9wskNr/yLheT:4qMrys/hdN/ymC7xhqU3zCF1dkNryYT
MD5:	027D4DF1A0B41FE0DA94BA6111CA03E7
SHA1:	1D3A8450074F9E09910A7A684DF815E4203E52C0
SHA-256:	59B13F759F1E157688C14B450F98B3A61F55BAFADF84CE61BF755DF4FDE28098
SHA-512:	F8AF9EA7B0DE3E85823B436B1DE5389C4AA799AF427C973BCD9BADC39ACE4B11C20D3D05D809B69F3E0FF1DFFEA764EA95D285B7680C1DAAF93E85605BFC97AE
Malicious:	false
Reputation:	low
Preview:	<svg width="157" height="31" viewBox="0 0 157 31" fill="none" xmlns="http://www.w3.org/2000/svg">.<mask id="mask0_2_68" style="mask-type:luminance" maskUnits="userSpaceOnUse" x="0" y="0" width="28" height="31">.<path fill-rule="evenodd" clip-rule="evenodd" d="M0 0.947754H27.3101V30.9478H0V0.947754Z" fill="white"/>.</mask>.<g mask="url(#mask0_2_68)">.<path fill-rule="evenodd" clip-rule="evenodd" d="M23.6184 30.2657H20.4097V27.2577H20.329C18.3235 29.7845 15.1136 30.9478 12.7069 30.9478C4.52262 30.9478 -0.0109863 25.5331 -0.0109863 18.4342C-0.0109863 6.40237 7.8922 0.947754 15.3546 0.947754C22.0946 0.947754 27.27 4.07633 27.31 10.7738H22.2951C22.0946 6.88356 19.4065 5.03889 15.1939 5.03889C8.37373 5.03889 5.00396 11.8969 5.00396 18.274C5.00396 23.608 7.85223 26.8566 12.8672 26.8566C17.802 26.8566 20.4898 23.5678 21.5728 18.9959H13.7098L14.5122 15.1857H26.8283L23.6184 30.2657Z" fill="#1B1D1F"/>.</g>.<path fill-rule="evenodd" clip-rule="evenodd" d="M32.2214 21.8831C32.2214 24.9317 33.6653 2

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	761
Entropy (8bit):	4.695768067919445
Encrypted:	false
SSDEEP:	12:UeKpKct5WuSz7inigFM7xKlwoGEk5Cs+rTKESJ1nHmdUTAcUGslAfC:OpRt5WZjgFm24rCAJAdUTIGslA6
MD5:	64F809E06446647E192FCE8D1EC34E09
SHA1:	5B7CED07DA42E205067AFA88615317A277A4A82C
SHA-256:	F52CBD664986AD7ED6E71C448E2D31D1A16463E4D9B7BCA0C6BE278649CCC4F3
SHA-512:	5F61BBE241F6B8636A487E6601F08A48BFFD62549291DB83C1F05F90D26751841DB43357D7FE500FFBA1BC19A8AB63C6D4767BA901C7EDED5D65A1B443B1DD78
Malicious:	false
Reputation:	low
URL:	http://c.parkingcrew.net/scripts/sale_form.js
Preview:	/. Sales form click tracker. . tlink() will load a 1x1 GIF to track clickouts to the contact form. * Some basic scrambling prevents (a lot of) web scrapers to follow the link. . Date: 2016-03-22.*/..// function tlink(v, wow).// v is a fixed string.// wow will contain the current domain name.function tlink(v, wow) {. if (document.location.search.indexOf('_xas') === -1) {. // define some compenents that will later form the link to the 1x1 GIF. var proto_suf = "tp",. string = "omainb",. parameter = "php?salelink=1";. // generate and load the 1x1 GIF. new Image().src= "ht" + proto_suf + ":" + "//" + "ww" + "w.myd" + string + "uy.com/sale_form." + parameter + "&dom" + "ain_name=" + wow;. }.}.

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	106599
Entropy (8bit):	5.433226333251586
Encrypted:	false
SSDEEP:	1536:Cb5Uv0wWaM56B1X1FL6/9YHjrx4ziYtCRl69JLtaLBrDgfnH1OBeFWySrbyqEcu7:CV61THjiPsLBw5XSCb/
MD5:	753E1B5591A3F7E9ECA63CD59D1F329D
SHA1:	878ECBC6D00C4D5A649BF8C853D0376860038566
SHA-256:	FAB5EC76C535E5FDCA180A0B6A51358C09672181D765562A44BA5A7A86AF8B0A
SHA-512:	8417CAEFB006E5037815F83C881CAC8D77B812819DA5B6D7DDFDB1F2C3955F2929B90E1D8CB2D4CB7BEB9D2A280891A0690B12ACA4C4B9C2AC08F63A01E0F10B
Malicious:	false
Reputation:	low
URL:	https://euob.netgreencolumn.com/sxp/i/c4601e5f6cdd73216cafdd5af209201c.js
Preview:	!function(t){var n={};function r(e){if(n[e])return n[e].exports;var i=n[e]={i:e,l:!1,exports:{}};return t[e].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=n,r.d=function(t,n,e){r.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:e})},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"_",{value:!0})},r.t=function(t,n){if(1&n&&(t=r(t)),8&n)return t;if(4&n&&"object"==typeof t&&t&&t._)return t;var e=Object.create(null);if(r.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:t}),2&n&&"string"!=typeof t)for(var i in t)r.d(e,i,function(n){return t[n]}.bind(null,i));return e},r.n=function(t){var n=t&&t._?function(){return t.default}:function(){return t};return r.d(n,"a",n),n},r.o=function(t,n){return Object.prototype.hasOwnProperty.call(t,n)},r.p="",r(r.s=5)}([function(t,n,r){var e=r(1),i=window,a=i.document,c=i.location,o=encodeURIComponent,u=decodeURIComponent,f=i.navigat

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	523
Entropy (8bit):	4.762352085546821
Encrypted:	false
SSDEEP:	12:tr/BWGuXM656LnxTuRpwKC+mTo4Lt4+K3hORQ2n:tzBXuXMMwwLC+mToC6fsR/
MD5:	10269217A8DB4E8E0EBD2862F3BF61A2
SHA1:	CE700AE653C8784337086B83D98843D4ECD0FC5A
SHA-256:	971C9C074365E06DEA019CF069846F67F5395F39641FBF0910AC09CB76BD26BE
SHA-512:	2A6497F026800E50FF3EF3959897C54EE04E5DCD41B96235D2C6B8E3254EC752FDEA5F1448CED4CCF43820C0C6B90F102A604CE653BF378C44939C170E680B3F
Malicious:	false
Reputation:	low
URL:	https://cdn.gohealth.com/lead-generation-sites/medicare/facebook_logo_dark_gray.1724069057.svg
Preview:	<svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M20.4314 15.0624H17.6381V24.1291H13.6381V15.0624H10.9714V12.4719H13.6381V10.9643C13.6381 9.5408 14.1074 7.31429 17.1714 7.31429L20.3048 7.32206V10.3089H18.4274C18.1021 10.3089 17.6381 10.4695 17.6381 11.1482V12.4719H20.7568L20.4314 15.0624ZM0 16C0 24.8227 7.17733 32 16 32C24.8227 32 32 24.8227 32 16C32 7.17733 24.8227 0 16 0C7.17733 0 0 7.17733 0 16Z" fill="#1B1D1F"/>.</svg>.

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	106599
Entropy (8bit):	5.433285183348882
Encrypted:	false
SSDEEP:	1536:Cb5Uv0wWaM56w1X1FL6/9YHjrx4ziYtCRl69JLtaLBrDgfnH1OBeFWySrbyqEcu7:CVz1THjiPsLBw5XSCb/
MD5:	F19919A33B4D78A8CC59F09ADCCD1A34
SHA1:	9130F706535C170152BC189418ED0B60EF4DFDF6
SHA-256:	6E3451747BD12561A98C93DB2ED9EE0B4A56CB896A685539A87808FB99A396F6
SHA-512:	A3B39E61222C08CBFB881431D7F1F0F3A0618E96EBD1778D27F86D1232B0DB57DBAA8F9798FF09523FBB34A7B85076DD8E34F32116DB01A2DD106C6B05E6E16C
Malicious:	false
Reputation:	low
Preview:	!function(t){var n={};function r(e){if(n[e])return n[e].exports;var i=n[e]={i:e,l:!1,exports:{}};return t[e].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=n,r.d=function(t,n,e){r.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:e})},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"_",{value:!0})},r.t=function(t,n){if(1&n&&(t=r(t)),8&n)return t;if(4&n&&"object"==typeof t&&t&&t._)return t;var e=Object.create(null);if(r.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:t}),2&n&&"string"!=typeof t)for(var i in t)r.d(e,i,function(n){return t[n]}.bind(null,i));return e},r.n=function(t){var n=t&&t._?function(){return t.default}:function(){return t};return r.d(n,"a",n),n},r.o=function(t,n){return Object.prototype.hasOwnProperty.call(t,n)},r.p="",r(r.s=5)}([function(t,n,r){var e=r(1),i=window,a=i.document,c=i.location,o=encodeURIComponent,u=decodeURIComponent,f=i.navigat

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	391
Entropy (8bit):	4.7474201749507134
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slzTPl2O4UYaeLIT4W+KS4S1UpMTQpi6jUs8sh6B+BSmK0C:t6qFPUPkHSt1UiT6i6jUs8b0I0C
MD5:	8959DDCD9712196961D93F58064ED655
SHA1:	62AB1E38E7E9FBF58A04381B76C2D96A9C829F24
SHA-256:	17C7A89BF169C2EE400E31B042CEA68513F06B9CD7D1E8990DBEC800F0D771C7
SHA-512:	5E9EFFA313C30B351345DB963238B4AFD0728CA302FD79A853C80C89F042266D44CC1D29492520FB0FA80B47135E54E6963DFC21972F6B236B84C1DA2FAD809D
Malicious:	false
Reputation:	low
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"/><path d="M0 0h24v24H0z" fill="none"/></svg>.

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7131
Entropy (8bit):	4.492964603621543
Encrypted:	false
SSDEEP:	192:CK2qu04QNsTqZ1HSWRcr4Hi0eh7zQtc/yxTRH+:VeQNqqZ1XRcm24tckc
MD5:	AB9C9A4EA610572C867EF77362E54D3C
SHA1:	64977F02DE36D20B9BA147AC4B6CADAE9789D7AA
SHA-256:	66EE27218824936DC1B35D84995204FCEC362D8380ADA174BA7F11B98DF86CF0
SHA-512:	EE55C2DE4AF8BA8F85E5608EA41B9DA4443EEAAC4B204C97BD0553246E0684A9D6C2B1CB8F63DE74D2BCFF6987D6CF999CE16B9356E797754C4D164720E4F6C5
Malicious:	false
Reputation:	low
URL:	https://cdn.gohealth.com/lead-generation-sites/medicare/norton_logo_gray.1716543816.svg
Preview:	<svg width="93" height="39" viewBox="0 0 93 39" fill="none" xmlns="http://www.w3.org/2000/svg">.<mask id="mask0_2_165" style="mask-type:luminance" maskUnits="userSpaceOnUse" x="1" y="6" width="92" height="32">.<path fill-rule="evenodd" clip-rule="evenodd" d="M1.31177 6.08081H92.9338V37.3349H1.31177V6.08081Z" fill="white"/>.</mask>.<g mask="url(#mask0_2_165)">.<path fill-rule="evenodd" clip-rule="evenodd" d="M16.9978 37.3349H77.2479C85.8972 37.3349 92.9339 30.324 92.9339 21.7076C92.9339 13.0911 85.8972 6.08081 77.2479 6.08081H16.9978C8.34847 6.08081 1.31177 13.0911 1.31177 21.7076C1.31177 30.324 8.34847 37.3349 16.9978 37.3349ZM2.54291 21.7076C2.54291 13.767 9.02752 7.30728 16.9978 7.30728H77.2479C85.2175 7.30728 91.7025 13.767 91.7025 21.7076C91.7025 29.6479 85.2175 36.1082 77.2479 36.1082H16.9978C9.02752 36.1082 2.54291 29.6479 2.54291 21.7076Z" fill="#3B3E3F"/>.</g>.<path d="M31.6489 7.30431H32.8812V6.07666H31.6489V7.30431Z" fill="#3B3E3F"/>.<path d="M34.0566 2.2507H35.3622V0.947754H

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	847
Entropy (8bit):	4.4725480876375245
Encrypted:	false
SSDEEP:	12:tr/BWGuXM65DdS0nZqT9RQLHU5MQOF86Aeujhwu8J8sD7QnBZ36Q2n:tzBXuXMMDRngT9JS5Z8jhDC8J6/
MD5:	B107C91992BBE80C09488D4219EA6A14
SHA1:	A9DFB27B54A89096639C97EC35B7C4102483EDBD
SHA-256:	A4A973E1E23FA6D7661C09229A75F463735296436440E13C425F3C80484A6DDD
SHA-512:	3B7837EA00D2948347585874FA04DC5F9623B918C021445C8F50F189430E303C3A85B45B11BE0932B34014DEF4FB589BBEE89AEF5CA1342866ED7AECFCFAD0D7
Malicious:	false
Reputation:	low
URL:	https://cdn.gohealth.com/lead-generation-sites/medicare/linkedin_logo_dark_gray.1724069057.svg
Preview:	<svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M24.864 21.7717H21.0253V16.5518C21.0253 15.7281 20.3373 15.0597 19.4907 15.0597C18.6413 15.0597 17.9547 15.7281 17.9547 16.5518V21.7717H14.116C14.116 21.7717 14.1613 12.8229 14.116 12.0768H17.9547V13.1842C17.9547 13.1842 19.1427 12.1079 20.9787 12.1079C23.252 12.1079 24.864 13.7062 24.864 16.8096V21.7717ZM10.6543 10.5862H10.6317C9.47166 10.5862 8.72233 9.70543 8.72233 8.73529C8.72233 7.74444 9.49566 6.9375 10.677 6.9375C11.8597 6.9375 12.5863 7.77034 12.6103 8.76249C12.6103 9.73133 11.8597 10.5862 10.6543 10.5862ZM8.74267 21.7717H12.5813V12.0768H8.74267V21.7717ZM16 0C7.176 0 0 7.17733 0 16C0 24.8227 7.176 32 16 32C24.8227 32 32 24.8227 32 16C32 7.17733 24.8227 0 16 0Z" fill="#1B1D1F"/>.</svg>.

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	847
Entropy (8bit):	4.4725480876375245
Encrypted:	false
SSDEEP:	12:tr/BWGuXM65DdS0nZqT9RQLHU5MQOF86Aeujhwu8J8sD7QnBZ36Q2n:tzBXuXMMDRngT9JS5Z8jhDC8J6/
MD5:	B107C91992BBE80C09488D4219EA6A14
SHA1:	A9DFB27B54A89096639C97EC35B7C4102483EDBD
SHA-256:	A4A973E1E23FA6D7661C09229A75F463735296436440E13C425F3C80484A6DDD
SHA-512:	3B7837EA00D2948347585874FA04DC5F9623B918C021445C8F50F189430E303C3A85B45B11BE0932B34014DEF4FB589BBEE89AEF5CA1342866ED7AECFCFAD0D7
Malicious:	false
Reputation:	low
Preview:	<svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M24.864 21.7717H21.0253V16.5518C21.0253 15.7281 20.3373 15.0597 19.4907 15.0597C18.6413 15.0597 17.9547 15.7281 17.9547 16.5518V21.7717H14.116C14.116 21.7717 14.1613 12.8229 14.116 12.0768H17.9547V13.1842C17.9547 13.1842 19.1427 12.1079 20.9787 12.1079C23.252 12.1079 24.864 13.7062 24.864 16.8096V21.7717ZM10.6543 10.5862H10.6317C9.47166 10.5862 8.72233 9.70543 8.72233 8.73529C8.72233 7.74444 9.49566 6.9375 10.677 6.9375C11.8597 6.9375 12.5863 7.77034 12.6103 8.76249C12.6103 9.73133 11.8597 10.5862 10.6543 10.5862ZM8.74267 21.7717H12.5813V12.0768H8.74267V21.7717ZM16 0C7.176 0 0 7.17733 0 16C0 24.8227 7.176 32 16 32C24.8227 32 32 24.8227 32 16C32 7.17733 24.8227 0 16 0Z" fill="#1B1D1F"/>.</svg>.

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (51384), with no line terminators
Category:	downloaded
Size (bytes):	51385
Entropy (8bit):	5.293328685395304
Encrypted:	false
SSDEEP:	768:IaOFhhRC5JFhLjfRysgLzQynDw5YyDMFW8KQ:IaOFnR2DRszQKaoWtQ
MD5:	6626C1362840EBFC8F48294E8F023E18
SHA1:	4EC0DFB37C3E536C1B5EC04B68C9846FDBAF9EEF
SHA-256:	AABC88A6DB8B22022F96CA88E4F0A7BE426ABEF2B35169A71515A2D55246402A
SHA-512:	B037A19B52C1047198EC7F19E99066054E454964380E2354239834260D11248E617D6759B944DDF39A25B883C8F430603D8E13097396E2DEDA9BB6905C1CD42A
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5147), with no line terminators
Category:	downloaded
Size (bytes):	5147
Entropy (8bit):	5.872020396393012
Encrypted:	false
SSDEEP:	96:1g2VilZtckx+9DgTlPJdiLW+iSah8vf1dtzlTaiHmvE:12cV9sT3AW7NIzHHmvE
MD5:	2BFA68114FFB048F07B9BB3FD329CEE0
SHA1:	4DCD4B685D2CE90EC58FDA8E5411E3E8334E8173
SHA-256:	C7CD44E2B703478E3073A470BCD07BD4DB2F7282FEB97066741BD5F51DA2573D
SHA-512:	D956DA3DA42E5AC206093B53BBC68756D9628CA221A22E5EF091A3867B447038C608696DF13C1CB03C10C5C260F672583A972B0CEC29A0E7E00C9595C19604B2
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/408830293/?random=1736464945641&cv=11&fst=1736464945641&bg=ffffff&guid=ON&async=1&gtm=45be5170z8841278742za201zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]}d=d[d.length-1];c=n&&c==="es6"?g[d]:null;b=b(c);b!=null&&(a?h(q,d,{configurable:!0,writable:!0,value:b}):b!==c&&(t[d]===void 0&&(a=Math.random()*1E9>>>0,t[d]=n?m.Symbol(d):"$jscp$"+a+"$"+d),h(g,t[d],{co

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9849), with no line terminators
Category:	downloaded
Size (bytes):	9849
Entropy (8bit):	5.072239606971038
Encrypted:	false
SSDEEP:	96:uHER8ln+hjHvYRr8/85XzJ2rHoeAY/Q06IMl9oLQ/kiO8nF/cJsNxankxp6EtIMx:uW8N+h7vY18kRz4rIePI06tvLeMaDRap
MD5:	2B3BAD6DEC171977DB486EA4B6900986
SHA1:	8B88269EDEE4C5CD7D71AC72FC66D82E310AC35A
SHA-256:	E93DD325337E549C83BAD8B4E096E4DF24F887A6DDB0C408AEFC57DC938349FE
SHA-512:	3F851769AC2180A7DD5A960637E4035C07F8AF5853BEF82AD6725147AC75BAF1409E54BC92A0F1EA1908CF17AF889B5C4923F78A6E19792376960B75B2C4CD39
Malicious:	false
Reputation:	low
URL:	https://medicare.gohealth.com/_next/static/6Pd7UXE0cORMG2cg_igAQ/_buildManifest.js
Preview:	self.__BUILD_MANIFEST=function(c,s,e,a,t,i,d,r,n,u,h,f,l,b,k,m,o){return{__rewrites:{afterFiles:[],beforeFiles:[],fallback:[]},"/":[c,s,e,"static/css/7e39246cedc4a755.css","static/chunks/pages/index-a21b158ab4d5f8d7.js"],"/_error":[c,s,"static/css/25a0e90db974b3b4.css","static/chunks/pages/_error-d72d5dbcb4d82b13.js"],"/goodrx/schedule-call":["static/chunks/4866-5425bd04ac2cac71.js",c,s,"static/css/c163371b7d4c8221.css","static/chunks/pages/goodrx/schedule-call-d20fed71574a298d.js"],"/grocery-benefit-chat":[c,s,e,a,"static/chunks/pages/grocery-benefit-chat-ddc767831f750767.js"],"/grocery-benefit-chat/l1706":[c,s,n,"static/chunks/pages/grocery-benefit-chat/l1706-58eeb678e025cb5d.js"],"/grocery-benefit-chat-full":[c,s,e,a,"static/chunks/pages/grocery-benefit-chat-full-4cde546fa593eb9a.js"],"/l1294/v1":[c,s,u,h,"static/chunks/pages/l1294/v1-6bf32f084f231e2e.js"],"/l1294/v2":[c,s,u,h,"static/chunks/pages/l1294/v2-fc3b9e79a906d1d3.js"],"/licensing":[c,s,d,"static/chunks/pages/licensing-e722

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5145), with no line terminators
Category:	dropped
Size (bytes):	5145
Entropy (8bit):	5.87598058623932
Encrypted:	false
SSDEEP:	96:1g2VilZtckx+9DgTlPJdiLW+iSah8vf1dtzlTaiHmvF:12cV9sT3AW7NIzHHmvF
MD5:	C59DF5579364DB6933651F53BEF3A5FA
SHA1:	E02799B3F4C79A44560947B81D48E25E12F85A07
SHA-256:	9661D88CCEF46BAEF3D97C9203DFEB6B859CAB6AD8C11263B582C7DA1BA61135
SHA-512:	EDDF250A3CB684354001D9EB292C797C058185FC9A4D34165C083826D4BE344492DDDC199C553C13BB8B7C83071FCFBC234AFC646EE8E5C00475DC26D2DEED97
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]}d=d[d.length-1];c=n&&c==="es6"?g[d]:null;b=b(c);b!=null&&(a?h(q,d,{configurable:!0,writable:!0,value:b}):b!==c&&(t[d]===void 0&&(a=Math.random()*1E9>>>0,t[d]=n?m.Symbol(d):"$jscp$"+a+"$"+d),h(g,t[d],{co

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://api.myuhchvision.com/track.php?domain=myuhchvision.com&caf=1&toggle=answercheck&answer=yes&uid=MTczNjQ2NDkwOS43NDM2OjQ3ZGQ4MDVlNDY3ODk5YzdhZmE5ODJiZWIxZTNjZGFmZDhjNDExNzliNWIxNWJjNzM0ZjRhZDI1NGI5MTFjMTE6Njc4MDVhMGRiNTg3Zg%3D%3D
Preview:	....................

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	65851
Entropy (8bit):	5.236315168457295
Encrypted:	false
SSDEEP:	768:BX7PIzomeq8nb4sAZy+NK43+aXrhb2hu7u3N3a58r+sQ8M2UYWpxW:Oom+4sSXrhb2hz3NJCy
MD5:	7BC9F0099D7ADDB69C7247F563EC8175
SHA1:	36618C42852AC190225BDC1D3DC411D8961776B4
SHA-256:	BFC973D159DC973D195627A6DC3CF0DE56EFCB084A3A2BAA471B6A51186B5416
SHA-512:	E25AB2BA691F56D7370ED818A49BC0BDFA287DBCFA2F9DFFE3889C9BA9B6ADD46F6B28C4DB07E22CA3CE52D1CBD15A78F79D3BF90D999ECBB437ABF4320634B5
Malicious:	false
Reputation:	low
URL:	https://medicare.gohealth.com/_next/static/css/7739801640ced06a.css
Preview:	@media only screen and (max-width:680px){.button_hide-on-mobile__63Naw{display:none!important}}@media only screen and (min-width:681px){.button_show-on-mobile__qHvFb{display:none!important}}@media only screen and (max-width:880px){.button_hide-on-tablet__mQxgl{display:none!important}}@media only screen and (min-width:881px){.button_show-on-tablet___Go2P{display:none!important}}@media only screen and (max-width:1180px){.button_hide-on-desktop___cq7p{display:none!important}}@media only screen and (min-width:1181px){.button_show-on-desktop__SDVFY{display:none!important}}.button_content__42pfK{background-color:#e25530;border:none;border-radius:5px;-webkit-box-shadow:none;box-shadow:none;color:#fff;cursor:pointer;display:block;font-family:source-sans-3,sans-serif;font-size:25px;font-weight:700;line-height:1.2;max-width:400px;padding:7px 15px;text-align:center;width:100%;min-height:64px;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;text-decoration:none}

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5518
Entropy (8bit):	4.641104351808004
Encrypted:	false
SSDEEP:	96:pKa2OyWW1QuuqBhbWO7xZzcommfl/ZD93T443Q2LYzHZnLbFiSqovjh:pKxWWV1BhbWOj1mm9bVLMVLD
MD5:	4037528AA2C0060922EE6C8A2674C929
SHA1:	6CD2760EB1D62C87301CAD5345CDF62B4AD44DA3
SHA-256:	F4B6120AA1AD65A429ACE356C555D04FBF07039E4EC1D255D4AF0491F5844E1C
SHA-512:	E4C4160679ED512C9DACF6338AC516A2D796D5B7FAB901385DE6B961A6571032941DF2E582CEFEBE63971398BDDE4A28F2B8BEF54197EE771DA85475F4557008
Malicious:	false
Reputation:	low
URL:	https://cdn.gohealth.com/lead-generation-sites/medicare/gohealth_logo_monochrome.1716538295.svg
Preview:	<svg width="144" height="29" viewBox="0 0 144 29" fill="none" xmlns="http://www.w3.org/2000/svg">.<g id="GoHealthLogo">.<g id="Group 3">.<mask id="mask0_12_2771" style="mask-type:luminance" maskUnits="userSpaceOnUse" x="0" y="2" width="25" height="27">.<path id="Clip 2" fill-rule="evenodd" clip-rule="evenodd" d="M0 2.15039H24.3393V29.0002H0V2.15039Z" fill="white"/>.</mask>.<g mask="url(#mask0_12_2771)">.<path id="Fill 1" fill-rule="evenodd" clip-rule="evenodd" d="M21.0493 28.3994H18.1896V25.7063H18.1177C16.3303 27.9684 13.4696 29.0099 11.3247 29.0099C4.03068 29.0099 -0.00976562 24.1621 -0.00976562 17.8063C-0.00976562 7.03401 7.03373 2.15039 13.6843 2.15039C19.6912 2.15039 24.3037 4.95146 24.3393 10.9478H19.8699C19.6912 7.46483 17.2955 5.81326 13.5412 5.81326C7.46287 5.81326 4.45966 11.9534 4.45966 17.6629C4.45966 22.4385 6.9981 25.3472 11.4675 25.3472C15.8655 25.3472 18.261 22.4026 19.2262 18.3094H12.2185L12.9336 14.8979H23.91L21.0493 28.3994Z" fill="#151D8E"/>.</g>.</g>.<path id="Fill

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6818), with no line terminators
Category:	downloaded
Size (bytes):	6818
Entropy (8bit):	5.475333301916774
Encrypted:	false
SSDEEP:	192:EtsjlS8SjFM93Fpd9qmW6q+545vGnQJFNg5DxasoAloW:EtsjlS8SjSDXsmVepGnv5Dc45
MD5:	7ABB57F6F3EC9BD1B22580B301B99D35
SHA1:	4D2406D14087D0BCE1B3AF42D4100932056984D9
SHA-256:	4BA008814F2620742FE77366281D9A98270ACD4310A55340F21E04DED4EC7D13
SHA-512:	54AB82A891CC3B889C80764475BE188E72C0C2EF998E377372AF67620378F3EF30CC48B8E95E38A16C2637F38061C0759A4BC561DD178EE4CF4D61E6E559A1CF
Malicious:	false
Reputation:	low
URL:	https://medicare.gohealth.com/_next/static/chunks/webpack-fecf5287dadd8e47.js
Preview:	!function(){"use strict";var e,r,_,c,t,a,n,b,f,u={},i={};function __webpack_require__(e){var r=i[e];if(void 0!==r)return r.exports;var _=i[e]={id:e,loaded:!1,exports:{}},c=!0;try{u[e].call(_.exports,_,_.exports,__webpack_require__),c=!1}finally{c&&delete i[e]}return _.loaded=!0,_.exports}__webpack_require__.m=u,__webpack_require__.c=i,__webpack_require__.amdO={},e=[],__webpack_require__.O=function(r,_,c,t){if(_){t=t\|\|0;for(var a=e.length;a>0&&e[a-1][2]>t;a--)e[a]=e[a-1];e[a]=[_,c,t];return}for(var n=1/0,a=0;a<e.length;a++){for(var _=e[a][0],c=e[a][1],t=e[a][2],b=!0,f=0;f<_.length;f++)n>=t&&Object.keys(__webpack_require__.O).every(function(e){return __webpack_require__.O[e](_[f])})?_.splice(f--,1):(b=!1,t<n&&(n=t));if(b){e.splice(a--,1);var u=c()}}return u},__webpack_require__.n=function(e){var r=e&&e.__esModule?function(){return e.default}:function(){return e};return __webpack_require__.d(r,{a:r}),r},_=Object.getPrototypeOf?function(e){return Object.getPrototypeOf(e)}:function(e){retur

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	26
Entropy (8bit):	3.469670487371862
Encrypted:	false
SSDEEP:	3:qVZqz:qz0
MD5:	4E43C09312DA47F5D540BF874ECB46F7
SHA1:	AB25ABAE19ED156908C76D641F1449AA3F1724D5
SHA-256:	6D0291F90718DC0537F65DC6A4F68D8E75F0A8A3A0B62836D9CF41350ECAF552
SHA-512:	B86531F838FF48C2715313D50D433C74A57B15E8B6D515B86BFB031E3C4048AC9F0DB4AC7EE143890379A4A59808EF46929811AC938EB83C1E0547E4DDA2DFAF
Malicious:	false
Reputation:	low
URL:	https://amplify.outbrain.com/topics
Preview:	<html><bode></body></html>

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	19010
Entropy (8bit):	4.045562982234317
Encrypted:	false
SSDEEP:	384:vZbtSYsO9j9OdxIj9LJfypJphzLa0Wl9ku+LE5N/cEUS9ysYdDp1pMjEq:vZbZJ9Odxq9LJ6pxzLi6A/cK9MdN1WX
MD5:	0CB0D20627D16B3987097865827DBD72
SHA1:	6A59643FED3B92572606EC75CE3F309B03D8DEB3
SHA-256:	ECA496D55E17A5DC9ACEB0578CA2EFAD9D6D9CBBA82054D28971724376E19DD0
SHA-512:	2D6E09C510DA0C7B69F5CE859F82F8D7D4404B26720D7456EB19718F6FEA32EDAEA41254233D6F12F2E72C96FBB1BDD129A39C9951A32D04E8315B9365A89548
Malicious:	false
Reputation:	low
Preview:	<svg width="124" height="43" viewBox="0 0 124 43" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M123.737 36.8529C123.737 40.1032 121.096 42.738 117.837 42.738H5.90023C2.64156 42.738 0.000244141 40.1032 0.000244141 36.8529V6.12096C0.000244141 2.87066 2.64156 0.23584 5.90023 0.23584H117.837C121.096 0.23584 123.737 2.87066 123.737 6.12096V36.8529Z" fill="#3B3E3F"/>.<path d="M42.9786 42.2796V0.694092H5.90015C2.89441 0.694092 0.458496 3.12391 0.458496 6.12088V36.8528C0.458496 39.8498 2.89441 42.2796 5.90015 42.2796H42.9786Z" fill="#F2F2F3"/>.<path d="M20.563 13.4502L18.72 15.9813C17.7959 17.2503 18.0821 19.4989 19.3439 20.4074L22.7606 22.8676C23.3468 23.2899 23.393 23.7081 23.115 24.1545L23.611 24.5223L25.3405 22.1325C26.4092 20.6557 26.3164 18.646 24.7311 17.4945L21.2859 14.9915C20.8733 14.6917 20.831 14.2732 21.059 13.8039L20.563 13.4502Z" fill="#3B3E3F"/>.<path d="M23.5195 2.25903L20.6504 6.21655C19.3049 8.07294 19.7942 11.2423 21.6324 12.5882L26.3491 16.041C27.3053 16.7409 27

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5178), with no line terminators
Category:	downloaded
Size (bytes):	5178
Entropy (8bit):	5.869737718802351
Encrypted:	false
SSDEEP:	96:1g2VilZtckx+9DgTlPJdiLW+iSah8vf1dtzlTazNVMRvEU:12cV9sT3AW7NIzoNVCvB
MD5:	8EE6765FA63B2A57E8AB40128E04CC56
SHA1:	2B6D904A1F2727C34F32ECEEED8F6B8E423B617E
SHA-256:	A77D0C3FF83D90C58FE62A3FD88281E54452B613AE84FC9F670FAE92A0E3E0EA
SHA-512:	C77A2F8E15CF5CF001F0AECCDADAE4B4CAA73FAC32D4952002CF35A63C07FA8CA07E108459E8F5787D58F4514EEA240D6211E88935E3B8644F72A9A0BC8EFFAA
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1042882457/?random=1736464953044&cv=11&fst=1736464953044&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dform_submit&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]}d=d[d.length-1];c=n&&c==="es6"?g[d]:null;b=b(c);b!=null&&(a?h(q,d,{configurable:!0,writable:!0,value:b}):b!==c&&(t[d]===void 0&&(a=Math.random()*1E9>>>0,t[d]=n?m.Symbol(d):"$jscp$"+a+"$"+d),h(g,t[d],{co

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 656x539, components 3
Category:	dropped
Size (bytes):	84108
Entropy (8bit):	7.977518364574232
Encrypted:	false
SSDEEP:	1536:qauyZWqjtNXZXbkuVi/uoA4e8T2JHTyxPGalkSgFhS70TqWx2Ccvw+TrEZEqbVpj:udOLlb5okAJeFUwTqRRaxbVd
MD5:	A402298B9954C484A4F76E7D3623AAAB
SHA1:	1D460777BAB942115F000B17D8A7F3C74898866B
SHA-256:	87A9178945216C3FEF123A231CE95241BD27BE2E5E8A2B15B49387D00A82EF39
SHA-512:	3102321E5C4E6C9DBCAD09050E28848D74418FBDCBFFEF599AEC2CC387435EA5270D32A96BD725CF7CA87099E99ACDA07C4124771737274C44E78937A54393E3
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222........................................................................................................+.........>............................................(....................................@....../...........................................^0................................""8.&..!.......^0.........................3...~U. .\|......g.V...US .j.j...4.x.Y.l(.8.y.t.Q...Hm..c_F....z..6.Ik....d..i1......:L...O5q)._(...k".X......g.vw1...K.U.........[.3m4."..h.t...k.R./.0....E.W.U.........'...N4w..<(.....mV..=;...L...w... .XW...cy[.Y...V\|.,.{Iz0..&x...,Vz....b....=..,..Z&,Ex..Gj..X..=.}F......,.O.9..%4.Nu3.Bn;..s..o....1..Z-d....k....S.l.{.......B.uw..z...v..E..TQ.l.:"z...{..(......(......4.4.K....yA}.Z........!..F~..b.....W.~9..A.&.t.F.5.^.".fd.K....*.7.4j6.........y.....C.1..1.3.&Yh.....`.o.f...;rd;..

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34044)
Category:	dropped
Size (bytes):	765596
Entropy (8bit):	5.687997976275439
Encrypted:	false
SSDEEP:	6144:qk6DxP0g71EBIprJn9VkdiwmPYTcDwAW8hSDIoywlOKnW+0Czvgw4kr8M+JVG/45:8cg4QuTlOKnhzvT4krCrphx
MD5:	FD33CC11B4CB0E36F2B7B9E8A196DE78
SHA1:	6FBC71C8A291CA722650C1627D7DE9DBFA1FCEED
SHA-256:	3DBF90382C3BB067EF2C373B6B6C39F4AA4F2082DC947AE01002F8540E6B42CC
SHA-512:	7811C7622ACED49EC5D6501B57C272803CFAAC83873375F8073FBE9875F7447DA493FD6BDC7FFF29B1A7C51C760E4454D314E21F9CA465907002E93EC728E8E4
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2888],{66306:function(t,i){"use strict";Object.defineProperty(i,"__esModule",{value:!0}),i.isUndefined=i.isDefined=void 0,i.isDefined=function(t){return null!=t},i.isUndefined=function(t){return!i.isDefined(t)}},58847:function(t,i){"use strict";i.c=void 0;var l=function(){function Analytics(){}return Analytics.prototype.track=function(t){if(t.isValid())return this.handleTrack(t.getName(),this.transformEventProperties(t))},Analytics}();i.c=l},1327:function(t,i){"use strict";Object.defineProperty(i,"__esModule",{value:!0}),i.formatPhoneNumber=void 0,i.formatPhoneNumber=function(t){return t.replace(/[^0-9]/g,"")}},95070:function(t,i,l){"use strict";var u=this&&this.__assign\|\|function(){return(u=Object.assign\|\|function(t){for(var i,l=1,u=arguments.length;l<u;l++)for(var d in i=arguments[l])Object.prototype.hasOwnProperty.call(i,d)&&(t[d]=i[d]);return t}).apply(this,arguments)};Object.defineProperty(i,"__esModule",{value:!0}),i.Consum

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://api.myuhchvision.com/track.php?domain=myuhchvision.com&caf=1&toggle=answercheck&answer=yes&uid=MTczNjQ2NDkyNi4yMzk1OmQ2MzliYTM3ZDFjNWQ4ZTdlMjkzYWMzYzA4MDc3YmM5M2ZmZjc1MTRjZmI1NWZkMDVmNDhiZjMwNTgyNWUxMjg6Njc4MDVhMWUzYTdhYw%3D%3D
Preview:	....................

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34044)
Category:	downloaded
Size (bytes):	765596
Entropy (8bit):	5.687997976275439
Encrypted:	false
SSDEEP:	6144:qk6DxP0g71EBIprJn9VkdiwmPYTcDwAW8hSDIoywlOKnW+0Czvgw4kr8M+JVG/45:8cg4QuTlOKnhzvT4krCrphx
MD5:	FD33CC11B4CB0E36F2B7B9E8A196DE78
SHA1:	6FBC71C8A291CA722650C1627D7DE9DBFA1FCEED
SHA-256:	3DBF90382C3BB067EF2C373B6B6C39F4AA4F2082DC947AE01002F8540E6B42CC
SHA-512:	7811C7622ACED49EC5D6501B57C272803CFAAC83873375F8073FBE9875F7447DA493FD6BDC7FFF29B1A7C51C760E4454D314E21F9CA465907002E93EC728E8E4
Malicious:	false
Reputation:	low
URL:	https://medicare.gohealth.com/_next/static/chunks/pages/_app-b18dce690669cf4a.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2888],{66306:function(t,i){"use strict";Object.defineProperty(i,"__esModule",{value:!0}),i.isUndefined=i.isDefined=void 0,i.isDefined=function(t){return null!=t},i.isUndefined=function(t){return!i.isDefined(t)}},58847:function(t,i){"use strict";i.c=void 0;var l=function(){function Analytics(){}return Analytics.prototype.track=function(t){if(t.isValid())return this.handleTrack(t.getName(),this.transformEventProperties(t))},Analytics}();i.c=l},1327:function(t,i){"use strict";Object.defineProperty(i,"__esModule",{value:!0}),i.formatPhoneNumber=void 0,i.formatPhoneNumber=function(t){return t.replace(/[^0-9]/g,"")}},95070:function(t,i,l){"use strict";var u=this&&this.__assign\|\|function(){return(u=Object.assign\|\|function(t){for(var i,l=1,u=arguments.length;l<u;l++)for(var d in i=arguments[l])Object.prototype.hasOwnProperty.call(i,d)&&(t[d]=i[d]);return t}).apply(this,arguments)};Object.defineProperty(i,"__esModule",{value:!0}),i.Consum

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	19010
Entropy (8bit):	4.045562982234317
Encrypted:	false
SSDEEP:	384:vZbtSYsO9j9OdxIj9LJfypJphzLa0Wl9ku+LE5N/cEUS9ysYdDp1pMjEq:vZbZJ9Odxq9LJ6pxzLi6A/cK9MdN1WX
MD5:	0CB0D20627D16B3987097865827DBD72
SHA1:	6A59643FED3B92572606EC75CE3F309B03D8DEB3
SHA-256:	ECA496D55E17A5DC9ACEB0578CA2EFAD9D6D9CBBA82054D28971724376E19DD0
SHA-512:	2D6E09C510DA0C7B69F5CE859F82F8D7D4404B26720D7456EB19718F6FEA32EDAEA41254233D6F12F2E72C96FBB1BDD129A39C9951A32D04E8315B9365A89548
Malicious:	false
Reputation:	low
URL:	https://cdn.gohealth.com/lead-generation-sites/medicare/bbb_logo_gray.1716543816.svg
Preview:	<svg width="124" height="43" viewBox="0 0 124 43" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M123.737 36.8529C123.737 40.1032 121.096 42.738 117.837 42.738H5.90023C2.64156 42.738 0.000244141 40.1032 0.000244141 36.8529V6.12096C0.000244141 2.87066 2.64156 0.23584 5.90023 0.23584H117.837C121.096 0.23584 123.737 2.87066 123.737 6.12096V36.8529Z" fill="#3B3E3F"/>.<path d="M42.9786 42.2796V0.694092H5.90015C2.89441 0.694092 0.458496 3.12391 0.458496 6.12088V36.8528C0.458496 39.8498 2.89441 42.2796 5.90015 42.2796H42.9786Z" fill="#F2F2F3"/>.<path d="M20.563 13.4502L18.72 15.9813C17.7959 17.2503 18.0821 19.4989 19.3439 20.4074L22.7606 22.8676C23.3468 23.2899 23.393 23.7081 23.115 24.1545L23.611 24.5223L25.3405 22.1325C26.4092 20.6557 26.3164 18.646 24.7311 17.4945L21.2859 14.9915C20.8733 14.6917 20.831 14.2732 21.059 13.8039L20.563 13.4502Z" fill="#3B3E3F"/>.<path d="M23.5195 2.25903L20.6504 6.21655C19.3049 8.07294 19.7942 11.2423 21.6324 12.5882L26.3491 16.041C27.3053 16.7409 27

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5178), with no line terminators
Category:	downloaded
Size (bytes):	5178
Entropy (8bit):	5.876475993607314
Encrypted:	false
SSDEEP:	96:1g2VilZtckx+9DgTlPJdiLW+iSah8vf1dtzlTa2VqRvx:12cV9sT3AW7NIz7VIvx
MD5:	1909CF96171BC733271ED172E87AF5FC
SHA1:	CBB7222A206028B647E7F92EBBCC0D82DDB83C5F
SHA-256:	19ACC9A5E80F5EEE25C0EBBD0CE4234534DC56C4B6230E89367A5EA65DB3E4B2
SHA-512:	62019F02BD319096135844D5F3E6B25EB177C2CE4C48F356C7A15E32BF59DF8E77212A5A4AFA97BDDC1C839FB627C218695E7AEB7F92DA9DF61222EBEDE76BDF
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1042882457/?random=1736464965083&cv=11&fst=1736464965083&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dform_submit&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]}d=d[d.length-1];c=n&&c==="es6"?g[d]:null;b=b(c);b!=null&&(a?h(q,d,{configurable:!0,writable:!0,value:b}):b!==c&&(t[d]===void 0&&(a=Math.random()*1E9>>>0,t[d]=n?m.Symbol(d):"$jscp$"+a+"$"+d),h(g,t[d],{co

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	3.5465935642949384
Encrypted:	false
SSDEEP:	3:YHAXW2Vn:YglVn
MD5:	97EFE0B7EE61E154D57E80758BB797D8
SHA1:	810B4E115FE9F5AE697666FEBF2A9ABF0B21C9EC
SHA-256:	EFABBA3678B85FCAB831B778EA2DDAAD1E2A1E952584D3566BC39B7CCB3429D9
SHA-512:	AA02209CF80FC2564CE0DB0BF9F30241E92EA33101B55FFE5E26D617F90B74277AE68D714A7B00C792EF2B88B582E3F299213A5C3C9BF9AFE6C6C1800FC276AF
Malicious:	false
Reputation:	low
URL:	https://rp.liadm.com/j?dtstmp=1736464947236&aid=a-06nm&se=e30&duid=268be191801d--01jh6p0nx115ahtaqq7ymqjjak&tv=v3.6.0&pu=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&wpn=lc-bundle&wpv=v3.6.0&refr=https%3A%2F%2Fsyndicatedsearch.goog%2F&cd=.gohealth.com&c=PGxpbmsgcmVsPSJjYW5vbmljYWwiIGhyZWY9Imh0dHBzOi8vbWVkaWNhcmUuZ29oZWFsdGguY29tIj48bGluayByZWw9ImNhbm9uaWNhbCIgaHJlZj0iaHR0cHM6Ly9tZWRpY2FyZS5nb2hlYWx0aC5jb20iPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSJXZSBoZWxwIHBlb3BsZSBvbiBNZWRpY2FyZSBmaW5kIHNhdmluZ3MiPjx0aXRsZT5Hb0hlYWx0aCB8IEdldCBNb3JlIE1lZGljYXJlIEJlbmVmaXRzPC90aXRsZT4&pv=b61e8b82-d60b-45dd-8dbf-dcceab4b539b&n3pc=true
Preview:	{"bakers":[]}

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2895), with no line terminators
Category:	dropped
Size (bytes):	2895
Entropy (8bit):	5.570413113210422
Encrypted:	false
SSDEEP:	48:nUJjH2fbgoHoJUwv6RYPuHp2om4wZZ8Cm3+tzah5IEuNrRB4SNhcGDPzeD/:nUJD2fbBUUDRYWHhm4kZIOtH/rRhW4Pm
MD5:	7CFFCF44AA6BE64E758131064F0F1654
SHA1:	8759ED290E32FBC14B600BA0F2130F5594F42EA0
SHA-256:	879D94BF5744BE484726F494C8D4C00304B33C9C5B8DDBFAC964CAF8B6FDA45E
SHA-512:	CA7288CB916C4EC675E456F8E215612F98DD5B41476DE64C661B77E50AF18180943E1D5162E153046CBD80A1E917A7A60629428C333658A7A476897C3055CCB9
Malicious:	false
Reputation:	low
Preview:	TFASC.trkCallback({"trc":{"si":"96bee7d5f6d7cd2bb72979c4cadb86ac","sd":"v2_96bee7d5f6d7cd2bb72979c4cadb86ac_8a63bd1e-8899-49af-97e3-4d55cc239acf-tucte79dfb6_1736464951_1736464951_CNyR1CcQjNRIGNqvgevEMiABKAMw4QE4kaQOQNWmD0jZiNcDUPUDWABgAGiI6d315YeYt1lwAYABAA","ui":"8a63bd1e-8899-49af-97e3-4d55cc239acf-tucte79dfb6","plc":"DESK","wi":"882559214594588744","cc":"US","route":"US:US:V","el2r":["bulk-metrics","debug","social","abtests","metrics","perf","supply-feature"],"uvpw":"1","pi":"1190412","cpb":"EhIyMDI1MDEwMi04LVJFTEVBU0UYASCc__________8BKhl1cy50YWJvb2xhc3luZGljYXRpb24uY29tMg90cmMtdHJhY2tpbmcxMDI4gPa5QUCRpA5I1aYPUNmI1wNY9QNjCN7__________wEQ3v__________ARgiZGMI1xYQ1R8YI2RjCNIDEOAGGAhkYwicXBDYeRgJZGMIpCcQgzUYL2RjCO51EIGXARgwZGMI9T8Q2IMBGDJkYwjKLhCRPhgzZGMIlhQQmRwYGGRjCKiFARDtqAEYOmRjCMP__________wEQw___________ARg9ZGMIg24Q5I0BGD5kYwj0FBCeHRgfZHgBgAHiI4gBy5mQ0gGQARiYAafOgevEMtsBEAHcAQ","evh":"1158497638","evi":{"48":"15086\|19329","50":"8181\|16856","61":"-61\|-61","62":"14083\|18148","47":"5

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	810
Entropy (8bit):	7.613098649032756
Encrypted:	false
SSDEEP:	12:6v/74/tDrFteOlUqmolJm2QDRJpWigiO7sz0CPTB81z1pa2qv0QWfO3vcUnKJri2:rtDRc0dlY1gIhPTB6PaBWm3v98WG7l
MD5:	8A42A43A6400B1B2B70F361D5522AB67
SHA1:	F0D03C0A05C96AAFD9A40507FAFB15ED2B1ECAB8
SHA-256:	7153107AC9582AF62278C8292C24C19495E820655ED3371870551C8BE536C5E3
SHA-512:	36D64901D3A0D9F9FA994557CE7B1E7D8E6B7EFB0EB08E76FB0F517B28A28E4BBBF46767B020DF4CFAC303BB979B0991A18AAE7896EACE5162E101C56E15695B
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/3190654853315615621?sqp=-oaymwEKCCgQKCABUAFYAQ&rs=AOga4qliV0RBe6jVz3-Ncvqt_7S_guod-Q
Preview:	.PNG........IHDR...(...(........m....IDATX..Mk.P....i.~.1..ZE;..E[..?....h@."Q........kTD..H......U..b.B.Z1N-.;.."38...~l..%..7..p.s.u.U....`.A....!.\.3......v...b....y.@.Y.?2....p...;8...h.A7.Y#...B..;...I..uF+h..........vp..2.iFh..-....<sx...;.........;...O.V....9..P..[.i....x.tI.=...:`gHm)x.p.B......#&...\|J.k...`a.n..f...'..h.-.U......V.......o......Z...p8#......d.n9/&....n.Dp...).Zu.y..w.hs...gN.=.x..t.n9........si....oj.Uvq7.;....[.....O..6A.. _..I3(C...S..563/.2$7W#,V.....C.G.........X.\|....T...W...%;..tM...T D...!?....z...&...X...4%.P..O......TnA..a......}P+~}.H..>...a...b. ..%l.@.......!GzA.+(4.........H.....K....F..Y.c..............D...Q%.....>.DU.I.A.%.J~J..6.p..T.[.N..8Ax...'.EU.D...]I.k"...1.p.b.....3.l..}..PU).S.....@..I.<.Pu.UW.......(z.S....IEND.B`.

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.0299097360388085
Encrypted:	false
SSDEEP:	3:IskNjygbU8e2r+nqh8oO:wj3o2GoO
MD5:	2489B6BEDA4E86203D22D9C4D2E67094
SHA1:	590C361A0E91BB56D08DDEC98BF49A02E017D191
SHA-256:	E7112B70EED95D42B178135728E6153E34F07001827870748DE87CD7DEC3538E
SHA-512:	2DB08EB201F83DD7C2B7293A1E8375C0FE06B1787E21EC0D2F6EF3BC9D5355CCC06208B79FF2457C0175B30A1643AE3B624684E4E834AFDEEA727D7E61A0FB3C
Malicious:	false
Reputation:	low
URL:	https://psb.taboola.com/topics_api
Preview:	<HTML><HEAD> <TITLE>200 OK</TITLE></HEAD><BODY>.OK.</BODY></HTML>

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.025855206845441
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slhohC/vmI4SmK0xhFELE47zF:t6qnoU/vmRI0xQTF
MD5:	11B3089D616633CA6B73B57AA877EEB4
SHA1:	07632F63E06B30D9B63C97177D3A8122629BDA9B
SHA-256:	809FB4619D2A2F1A85DBDA8CC69A7F1659215212D708A098D62150EEE57070C1
SHA-512:	079B0E35B479DFDBE64A987661000F4A034B10688E26F2A5FE6AAA807E81CCC5593D40609B731AB3340E687D83DD08DE4B8B1E01CDAC9D4523A9F6BB3ACFCBA0
Malicious:	false
Reputation:	low
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2780), with no line terminators
Category:	downloaded
Size (bytes):	2780
Entropy (8bit):	5.549239635877219
Encrypted:	false
SSDEEP:	48:nG8FiOFeh2fbgoHoJUwvSRQJuOKp2om4wZZ8Cm3+tzah5IEuNrRB4SNhcGDPA:nZFiOFeh2fbBUU7RQkthm4kZIOtH/rR0
MD5:	8B34FFF06E5BD92945D562D93403CE29
SHA1:	161B823B02431D652705D5C7FDA5CBE4FD34CC3E
SHA-256:	83D073D9E289013D0ECBCEFBF379BD5632E46FA24EE5F9B0E1A94255A946AD35
SHA-512:	70328A9E86DE118FB2F1FFF823A0ED7C42A8227F2F6FA288819D5C25C89AF33CE29753396CD3C65907D6CEE82E60320B44521ECA4400B956B84420053A8C2000
Malicious:	false
Reputation:	low
URL:	https://trc.taboola.com/1190412/trc/3/json?tim=1736464947180&data=%7B%22id%22%3A215%2C%22ii%22%3A%22%2F%22%2C%22it%22%3A%22video%22%2C%22sd%22%3Anull%2C%22ui%22%3Anull%2C%22vi%22%3A1736464947162%2C%22cv%22%3A%2220250102-8-RELEASE%22%2C%22uiv%22%3A%22default%22%2C%22u%22%3A%22https%3A%2F%2Fmedicare.gohealth.com%2F%22%2C%22e%22%3A%22https%3A%2F%2Fsyndicatedsearch.goog%2F%22%2C%22cb%22%3A%22TFASC.trkCallback%22%2C%22qs%22%3A%22%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE%22%2C%22r%22%3A%5B%7B%22li%22%3A%22rbox-tracking%22%2C%22s%22%3A0%2C%22uim%22%3A%22rbox-tracking%3Apub%3Dgohealthnew-sc%3Aabp%3D0%22%2C%22uip%22%3A%22rbox-tracking%22%2C%22orig_uip%22%3A%22rbox-tracking%22%7D%5D%2C%22mpvd%22%3A%7B%22en%22%3A%22page_view%22%2C%22tim%22%3A1736464947178%2C%22ref%22%3A%22https%3A%2F%2Fsyndicatedsearch.goog%2F%22%2C%22item-url%22%3A%22https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE%22%2C%22tos%22%3A3%2C%22ssd%22%3A1%2C%22scd%22%3A0%2C%22ler%22%3A%22other%22%2C%22it%22%3A%22JS_PIXEL%22%2C%22supv%22%3Atrue%7D%2C%22pa%22%3A%7B%22su%22%3Atrue%7D%2C%22psb%22%3Atrue%7D&pubit=i
Preview:	TFASC.trkCallback({"trc":{"si":"4f1feeec57b6d5aeccac8abb3a88fc80","sd":"v2_4f1feeec57b6d5aeccac8abb3a88fc80_8a63bd1e-8899-49af-97e3-4d55cc239acf-tucte79dfb6_1736464950_1736464950_CNyR1CcQjNRIGNqvgevEMiABKAEw4QE4kaQOQNWmD0jZiNcDUPUDWABgAGiI6d315YeYt1lwAYABAA","ui":"8a63bd1e-8899-49af-97e3-4d55cc239acf-tucte79dfb6","plc":"DESK","wi":"882559214594588744","cc":"US","route":"US:US:V","el2r":["bulk-metrics","debug","social","abtests","metrics","perf","supply-feature"],"uvpw":"1","pi":"1190412","cpb":"EhIyMDI1MDEwMi04LVJFTEVBU0UYASCc__________8BKhl1cy50YWJvb2xhc3luZGljYXRpb24uY29tMg90cmMtdHJhY2tpbmcxMDQ4gPa5QUCRpA5I1aYPUNmI1wNY9QNjCN7__________wEQ3v__________ARgiZGMI1xYQ1R8YI2RjCNIDEOAGGAhkYwicXBDYeRgJZGMIpCcQgzUYL2RjCO51EIGXARgwZGMI9T8Q2IMBGDJkYwjKLhCRPhgzZGMIlhQQmRwYGGRjCKiFARDtqAEYOmRjCMP__________wEQw___________ARg9ZGMIg24Q5I0BGD5kYwj0FBCeHRgfZHgBgAHiI4gBy5mQ0gGQARiYAbHJgevEMtsBEAHcAQ","evh":"1158497638","evi":{"48":"15086\|19329","50":"8181\|16856","61":"-61\|-61","62":"14083\|18148","47":"5

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Category:	downloaded
Size (bytes):	81071
Entropy (8bit):	5.39070266364305
Encrypted:	false
SSDEEP:	1536:1+0GzlSA2NuY/6nMPifkSy9r6Ud/NkfqG:10Y/6MPiEOUBN8
MD5:	818D52EB9ABCAACDF0428AD47A7E5DD3
SHA1:	B035B13EC431D295EFF070AB8058A03C8CE0847A
SHA-256:	A43218A24D8245480C99870ACD3B39700833E243B31498D3939A3B2289EC137E
SHA-512:	6FD79E9C96B03F1160982C945CCFA4DAA99F47E9D33D1130DDFF8AD014673F1FFC02505ABD54E65351006DCD95F6D69A9AC714DA30727A97A6E37DB87573E95A
Malicious:	false
Reputation:	low
URL:	https://medicare.gohealth.com/_next/static/chunks/4619-31e9d68b459c55d8.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[4619],{53753:function(e,n,t){"use strict";t.d(n,{b:function(){return Alert}});var o=t(52322),i=t(2784),r=t(12524),a=t.n(r),s=t(60299),l=t.n(s),Alert=function(e){var n=e.children,t=e.id,r=e.role,s=e.visible,c=e.modifier,d=(0,i.useMemo)(function(){return Array.isArray(c)?c:[c]},[c]);return s?(0,o.jsx)("p",{className:a()(l().content,d.map(function(e){return l()["content--".concat(e)]})),id:t,role:void 0===r?"alert":r,children:n}):null}},83452:function(e,n,t){"use strict";t.d(n,{z:function(){return m}});var o=t(85333),i=t(6692),r=t(2281),a=t(52322),s=t(12524),l=t.n(s),c=t(97438),d=t(2784),u=t(41284),_=t.n(u),m=(0,d.forwardRef)(function(e,n){var t=e.children,s=e.visible,u=e.className,m=e.modifier,f=void 0===m?[]:m,h=(0,r._)(e,["children","visible","className","modifier"]),p=(0,c.$G)("common").t,b=(0,d.useMemo)(function(){return Array.isArray(f)?f:[f]},[f]);return void 0===s\|\|s?(0,a.jsx)("button",(0,i._)((0,o._)({ref:n,className:l()(_(

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	29215
Entropy (8bit):	4.473350866176571
Encrypted:	false
SSDEEP:	768:0IaMZRgBm0BePYXs3ZWuKZDWUCs5NhFNbWr:0koBT+0uFEIr
MD5:	7EA2AA63ADD37FC5EF70D084FE6D264F
SHA1:	39187F30F004EA22569258547BA1A728BDF2B152
SHA-256:	20E58839516ADEF7F0AEF35A16C69A74C0C27D43F2E4B520A110C704F0F9012F
SHA-512:	7CCEA2D72786B0099AEEF3DB3126D87DCA9CBAE1D4DDFCEA088E35AB61F5DE5876F90C299B2B518AF35209B98D463838B3DF4A127288A73A8F0532A4D78D7017
Malicious:	false
Reputation:	low
URL:	https://cdn.gohealth.com/lead-generation-sites/medicare/trustpilot-badge.1716283270.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="146.817053px" height="61.999px" viewBox="0 0 146.817053 61.999" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>trustpilot-badge</title>. <defs>. <polygon id="path-1" points="6.759 1.11022302e-16 8.153 1.255 1.394 8.762 0 7.506"></polygon>. <polygon id="path-3" points="6.418 10.182 2.452 12.28 3.209 7.837 1.42108547e-14 4.691 4.435 4.042 6.418 0 8.402 4.042 12.836 4.691 9.627 7.837 10.385 12.28"></polygon>. </defs>. <g id="Page-1" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="trustpilot-badge" transform="translate(-0.000000, -0.802000)">. <path d="M19.4807107,61.6 C19.8857107,62.009 21.4147107,62.696 21.6227107,62.801 C20.6007107,60.904 17.8277107,58.211 16.4837107,57.157 C16.1147107,56.696 15.7007107,56.288 15.2607107,55.922 C15.1127107,54.96 15.2087107,54.012 15.1267107,53.055 C15.0037107,51.621 14.4617107,49.673

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	523
Entropy (8bit):	4.762352085546821
Encrypted:	false
SSDEEP:	12:tr/BWGuXM656LnxTuRpwKC+mTo4Lt4+K3hORQ2n:tzBXuXMMwwLC+mToC6fsR/
MD5:	10269217A8DB4E8E0EBD2862F3BF61A2
SHA1:	CE700AE653C8784337086B83D98843D4ECD0FC5A
SHA-256:	971C9C074365E06DEA019CF069846F67F5395F39641FBF0910AC09CB76BD26BE
SHA-512:	2A6497F026800E50FF3EF3959897C54EE04E5DCD41B96235D2C6B8E3254EC752FDEA5F1448CED4CCF43820C0C6B90F102A604CE653BF378C44939C170E680B3F
Malicious:	false
Reputation:	low
Preview:	<svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M20.4314 15.0624H17.6381V24.1291H13.6381V15.0624H10.9714V12.4719H13.6381V10.9643C13.6381 9.5408 14.1074 7.31429 17.1714 7.31429L20.3048 7.32206V10.3089H18.4274C18.1021 10.3089 17.6381 10.4695 17.6381 11.1482V12.4719H20.7568L20.4314 15.0624ZM0 16C0 24.8227 7.17733 32 16 32C24.8227 32 32 24.8227 32 16C32 7.17733 24.8227 0 16 0C7.17733 0 0 7.17733 0 16Z" fill="#1B1D1F"/>.</svg>.

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 18324, version 1.0
Category:	downloaded
Size (bytes):	18324
Entropy (8bit):	7.983440302438559
Encrypted:	false
SSDEEP:	384:UvPPtWnC6VdIl3F83zrKvYUZvOpnI2j9QWYocIOp0DN7/r+sa:APgC6VeWvKv9v+nIk9TcHuxrr+sa
MD5:	7796E3BE54291C311169DF8C7AF094CF
SHA1:	E89BA3FA4C89B580A485E3CA6D050785BD307858
SHA-256:	09533D62E5A35028BD0E22B53C2F14AA915D31AC3EB0D64FA94226C18B0CA66B
SHA-512:	4FAA3C10AE09465AC08E14509A02E673A6C1910015AA93081D940D36B368942A167BD95AEC13638F8E9F059C10337BA67BB0B606F8487B01D99C5E2582C7A535
Malicious:	false
Reputation:	low
URL:	https://use.typekit.net/af/6f86f9/00000000000000007735a1e6/30/l?primer=7fa3915bdafdf03041871920a205bef951d72bf64dd4c4460fb992e3ecc3a862&fvd=n1&v=3
Preview:	wOF2OTTO..G........ ..G5.........................:....?DYNA.G.\?GDYN.-....`..p.6.$..L....k. .#.E.i...ET.z8"1..U....V.........>.M.....N...:...`..3.G....e.....".(B4 R.D...QHH....P$.M.!...Nw.)..LL.....{...y~m..o.pEv....D,.uh#.z.0.......<`4... Y...m..>.....sv2..h...}....._..Z..b........e./<...ofS..T....A=a/..>.f.m...'.\....I..01.c....N...{/g......I~}.R`.r.T.r.T.\.;u..T..[..;...a.a,.n.y....V..m...\...U&.+R.p...G.Y%;K.1..2.F.@f.A.\|\.....:]..]u.<E.....Yx.a...Y1...J..l...11..J...T ...#...c..M.4y....u...$u..Es...A.B.$.._BY&........FL.8~....M.s~K..Q..U..wO.....w..o..Z...+..x...k2K...!..$.*K..j....../.3.A.....^0.0.Q..g...q.Z.5.k.4...c'..>iq.zM.\H......7$,.^...%.H."U.t.2e.#W.\|...)V.T.._...TVEU.TWCM..VG]...@C.4.DS.4.BK...F[..AG.t.EWQ...z....o....l....n..F.m....o..&.l....n..f.m...o...Yl...Yn..VYm...Yo..6.l....n..v.m......9..9.N9..9..q..\..W...q..\..7...nq.....w....q......F".H$..D.N.?2...J.vp.=..S.}\.!.p..D..m..L.J .S(.,'..}.V2.0..qK...%.`.3.WsM.:..

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5178), with no line terminators
Category:	dropped
Size (bytes):	5178
Entropy (8bit):	5.878283034822993
Encrypted:	false
SSDEEP:	96:1g2VilZtckx+9DgTlPJdiLW+iSah8vf1dtzlTamVIRv7:12cV9sT3AW7NIzXVuv7
MD5:	83A8345CEC2505C37BD681FE4AFE74CD
SHA1:	2D0ADB2FD941C7C14F3CCB5DA83BF18E836DC8D2
SHA-256:	8DB31EE7CA77B4DF655D25C037A4F543C3A580ECFC504019B8A630ED4DD82C3B
SHA-512:	024E2E114EFCAA9FC999A52D7CDD99CBA87F79DF28680C9BE96578E5871862B82F2B9B3C2D216F672949D929B4B16CA5638D122B73398A43EBB816746953818B
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]}d=d[d.length-1];c=n&&c==="es6"?g[d]:null;b=b(c);b!=null&&(a?h(q,d,{configurable:!0,writable:!0,value:b}):b!==c&&(t[d]===void 0&&(a=Math.random()*1E9>>>0,t[d]=n?m.Symbol(d):"$jscp$"+a+"$"+d),h(g,t[d],{co

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	83821
Entropy (8bit):	4.635100143361791
Encrypted:	false
SSDEEP:	1536:Uxh//xQiJ+OEa80rpJOVUBvj7x1hD38coWldfkQQFlncQiE4RCzTvcw:q0yw
MD5:	62857FADFFE9A42A11A968C2964AC93A
SHA1:	0F50FCEF405252308B901647B457F50120AA7FEF
SHA-256:	59A15A9D889E04DFCBDA0AE8F6D52257FA8DD8B5FA4C9C14D7BC0BF7286D9E20
SHA-512:	C5668210BFF8DF54A4FA307393E008EF520C4A9AF2F52E515FB08FAB9AB4D3C0527A8446ECB117150EA0AC6BED45C739901FD7DE856CCE92DC9495031B986844
Malicious:	false
Reputation:	low
Preview:	{"DE":{"state_abbreviation":"DE","carriers_included_MA_pipe_delimiter":"Cigna Healthcare \| Highmark Health \| Humana \| UnitedHealthcare. \| Wellcare","carriers_included_MA_count":5,"distinct_MA_plans_offered":16,"dental_preventative_yearly_benefit_min":1000,"dental_preventative_yearly_benefit_avg":1685,"dental_comprehensive_yearly_benefit_min":2000,"dental_comprehensive_yearly_benefit_avg":2000,"dental_yearly_benefit_avg":1757,"vision_eye_wear_yearly_benefit_min":100,"vision_eye_wear_yearly_benefit_avg":225,"vision_eye_exam_yearly_benefit_min":40,"vision_eye_exam_yearly_benefit_avg":61,"vision_yearly_benefit_avg":245,"hearing_aid_yearly_benefit_min":500,"hearing_aid_yearly_benefit_avg":500,"hearing_exam_yearly_benefit_min":null,"hearing_exam_yearly_benefit_avg":null,"hearing_yearly_benefit_avg":500,"otc_drug_yearly_benefit_avg":749,"otc_drug_yearly_benefit_min":100,"food_card_yearly_benefit_min":1680,"food_card_yearly_benefit_avg":1920,"carrier_overall_1":"Cigna Healthcare","carrier_ove

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (51384), with no line terminators
Category:	dropped
Size (bytes):	51385
Entropy (8bit):	5.293328685395304
Encrypted:	false
SSDEEP:	768:IaOFhhRC5JFhLjfRysgLzQynDw5YyDMFW8KQ:IaOFnR2DRszQKaoWtQ
MD5:	6626C1362840EBFC8F48294E8F023E18
SHA1:	4EC0DFB37C3E536C1B5EC04B68C9846FDBAF9EEF
SHA-256:	AABC88A6DB8B22022F96CA88E4F0A7BE426ABEF2B35169A71515A2D55246402A
SHA-512:	B037A19B52C1047198EC7F19E99066054E454964380E2354239834260D11248E617D6759B944DDF39A25B883C8F430603D8E13097396E2DEDA9BB6905C1CD42A
Malicious:	false
Reputation:	low
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0,enforced:!1};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.uetConfig.cusig={hasLoaded:!1,timeoutId:null,blob:{}};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://api.myuhchvision.com/track.php?domain=myuhchvision.com&toggle=browserjs&uid=MTczNjQ2NDkyNi4yMzk1OmQ2MzliYTM3ZDFjNWQ4ZTdlMjkzYWMzYzA4MDc3YmM5M2ZmZjc1MTRjZmI1NWZkMDVmNDhiZjMwNTgyNWUxMjg6Njc4MDVhMWUzYTdhYw%3D%3D
Preview:	....................

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	141
Entropy (8bit):	5.10595793809344
Encrypted:	false
SSDEEP:	3:YGKy++6QMBWHjt0C0MT6QMBWHWDSBcEmKCuJeN800rDCHuJRWRQMBWHjV:YGKY6ZBAJ70MT6ZBAWDYHmQENl0LWRZ8
MD5:	A588776E3450E51B753D08230ECB5FB2
SHA1:	8BA07963BD256DA0D846C6175046B5549A3C4461
SHA-256:	CA889371A5023E6C938CCABBAD00222D59EDFF3AF6BCFEE9A9D6076A9821909A
SHA-512:	FF9E2369B4A7D890F486F115780F36B777843F86C30C4733AA43F8FC6E07CA854E23EA27DADF941BCA362B3196D2ABF7D0DCFEF58076AEBD4819243E43737B1A
Malicious:	false
Reputation:	low
Preview:	{"conversion_tracker_uids":null,"retargeting_tracker_uids":["OL4ewzBKcQ6GG5tEFoQoKa","qgMPebO4jniMhYQu17XNfg"],"lookalike_tracker_uids":null}

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/1042882457?random=1736464974036&cv=11&fst=1736464974036&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dform_submit
Preview:	<html></html>

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	http://api.myuhchvision.com/ls.php?t=67805a1e&token=39959dc862d6c4777e5f274659ded6a1236f127b
Preview:	{"success":true}

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	7131
Entropy (8bit):	4.492964603621543
Encrypted:	false
SSDEEP:	192:CK2qu04QNsTqZ1HSWRcr4Hi0eh7zQtc/yxTRH+:VeQNqqZ1XRcm24tckc
MD5:	AB9C9A4EA610572C867EF77362E54D3C
SHA1:	64977F02DE36D20B9BA147AC4B6CADAE9789D7AA
SHA-256:	66EE27218824936DC1B35D84995204FCEC362D8380ADA174BA7F11B98DF86CF0
SHA-512:	EE55C2DE4AF8BA8F85E5608EA41B9DA4443EEAAC4B204C97BD0553246E0684A9D6C2B1CB8F63DE74D2BCFF6987D6CF999CE16B9356E797754C4D164720E4F6C5
Malicious:	false
Reputation:	low
Preview:	<svg width="93" height="39" viewBox="0 0 93 39" fill="none" xmlns="http://www.w3.org/2000/svg">.<mask id="mask0_2_165" style="mask-type:luminance" maskUnits="userSpaceOnUse" x="1" y="6" width="92" height="32">.<path fill-rule="evenodd" clip-rule="evenodd" d="M1.31177 6.08081H92.9338V37.3349H1.31177V6.08081Z" fill="white"/>.</mask>.<g mask="url(#mask0_2_165)">.<path fill-rule="evenodd" clip-rule="evenodd" d="M16.9978 37.3349H77.2479C85.8972 37.3349 92.9339 30.324 92.9339 21.7076C92.9339 13.0911 85.8972 6.08081 77.2479 6.08081H16.9978C8.34847 6.08081 1.31177 13.0911 1.31177 21.7076C1.31177 30.324 8.34847 37.3349 16.9978 37.3349ZM2.54291 21.7076C2.54291 13.767 9.02752 7.30728 16.9978 7.30728H77.2479C85.2175 7.30728 91.7025 13.767 91.7025 21.7076C91.7025 29.6479 85.2175 36.1082 77.2479 36.1082H16.9978C9.02752 36.1082 2.54291 29.6479 2.54291 21.7076Z" fill="#3B3E3F"/>.</g>.<path d="M31.6489 7.30431H32.8812V6.07666H31.6489V7.30431Z" fill="#3B3E3F"/>.<path d="M34.0566 2.2507H35.3622V0.947754H

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	106599
Entropy (8bit):	5.433285183348882
Encrypted:	false
SSDEEP:	1536:Cb5Uv0wWaM56w1X1FL6/9YHjrx4ziYtCRl69JLtaLBrDgfnH1OBeFWySrbyqEcu7:CVz1THjiPsLBw5XSCb/
MD5:	F19919A33B4D78A8CC59F09ADCCD1A34
SHA1:	9130F706535C170152BC189418ED0B60EF4DFDF6
SHA-256:	6E3451747BD12561A98C93DB2ED9EE0B4A56CB896A685539A87808FB99A396F6
SHA-512:	A3B39E61222C08CBFB881431D7F1F0F3A0618E96EBD1778D27F86D1232B0DB57DBAA8F9798FF09523FBB34A7B85076DD8E34F32116DB01A2DD106C6B05E6E16C
Malicious:	false
Reputation:	low
URL:	https://euob.netgreencolumn.com/sxp/i/eface9ae07046ed0ab532b93a8338a63.js
Preview:	!function(t){var n={};function r(e){if(n[e])return n[e].exports;var i=n[e]={i:e,l:!1,exports:{}};return t[e].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=n,r.d=function(t,n,e){r.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:e})},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"_",{value:!0})},r.t=function(t,n){if(1&n&&(t=r(t)),8&n)return t;if(4&n&&"object"==typeof t&&t&&t._)return t;var e=Object.create(null);if(r.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:t}),2&n&&"string"!=typeof t)for(var i in t)r.d(e,i,function(n){return t[n]}.bind(null,i));return e},r.n=function(t){var n=t&&t._?function(){return t.default}:function(){return t};return r.d(n,"a",n),n},r.o=function(t,n){return Object.prototype.hasOwnProperty.call(t,n)},r.p="",r(r.s=5)}([function(t,n,r){var e=r(1),i=window,a=i.document,c=i.location,o=encodeURIComponent,u=decodeURIComponent,f=i.navigat

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	53
Entropy (8bit):	3.324196936570766
Encrypted:	false
SSDEEP:	3:CU7KNpKThE/xlSle:s2Eule
MD5:	414BD2A5161DB03FDD910327B42C6DAA
SHA1:	65D4CF50496813C5F1A34EDDD5C50DC67D44FF47
SHA-256:	B51F3497B0A65F1E1E87E75F5E7E823D871C23BCF76A5EE4101783C8F939E553
SHA-512:	633F304A2024C3B6EBB92B3EED8059F8232C316D70FBE8EF353106C2105F7A9662D8FD935B89A5F10E09204C6886EDCE4FB1B19938123B7E057A34F2BF78FF85
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,........@..D..;

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19948), with no line terminators
Category:	downloaded
Size (bytes):	19948
Entropy (8bit):	5.261902742187293
Encrypted:	false
SSDEEP:	384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65
MD5:	EC18AF6D41F6F278B6AED3BDABFFA7BC
SHA1:	62C9E2CAB76B888829F3C5335E91C320B22329AE
SHA-256:	8A18D13015336BC184819A5A768447462202EF3105EC511BF42ED8304A7ED94F
SHA-512:	669B0E9A545057ACBDD3B4C8D1D2811EAF4C776F679DA1083E591FF38AE7684467ABACEF5AF3D4AABD9FB7C335692DBCA0DEF63DDAC2CD28D8E14E95680C3511
Malicious:	false
Reputation:	low
URL:	https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var r=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),r[t]=e>>>((3&t)<<3)&255;return r}}},508:function(e,t,n){"use strict";var r=n(944),i=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|r)();if(

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	884
Entropy (8bit):	7.597764747842629
Encrypted:	false
SSDEEP:	24:C4HJC+V4vj2z0CAcyQ8910/3O6Yz2cpuEkva:vsfj2xAi896/+Z2czAa
MD5:	CA8F51D43AB6482141D8FD3BD13F0CFD
SHA1:	774FFA16AEFE93B710663B6B73AAFDE6B2236686
SHA-256:	F258A17763968BF7796EE6E324937891DE1CA4E49F6E69A8952770728E28B2F6
SHA-512:	051965D38258DDBD4DC019559154601054C59727B398F18D2B43EC86FBF03B942054933BA18A50B873F1A1BB2918763F7C90665185B70E1B51ED078804C519F2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...(........m...;IDATX..K+K....J.uU.$.....Q.x!..AD..Xh'......~ ........X0........K.(&..R.`.>...].....>0...33..y.f.. ...P../R4!.....\|. ."....h.d\|Mi.^i...g..N6.U.Ve.Z..hU..`2.D6.55...C.4...!......>..c.=...n..Q.e............uuu........7.......,.`.T...64MC.T...9.~......UUQ.pss...Y........188............t:M....p8L.......2I.R..$ONN.L&.C...z...c.d&....>s..I2....766.z.r..........e./...m..A.d$...(.B..z.\YY..i..?......!699.h4.p8...^.........r.P..>......d2....U.>j._.n...a..R)Clgg..h.N.........-.6]..TU..T.SO.&..r....n.......z..X ...d.Y..y..$I..........=..=22B........i=...`.ZeGGG..X,.9...H....5.P(.D"A.\__'I....nw....=.&.N.P(..........I.0WWW.....MLL...b1....3...x{{..j............Ng,......N'.......p8.H$......T.U....>.!.....F.R)...#.H.....BUU.\...n..Elnnb``.......&..q......vZ..hU6.U.Ve.Z._..}6./...B...~6........$..u&?....R.$i..........LN....IEND.B`.

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	15654
Entropy (8bit):	4.310398179778066
Encrypted:	false
SSDEEP:	384:dy/cKYnHy5gYxTiMom6MomxMomkMomPMomG:GcDHyGYxTiG6GxGkGPGG
MD5:	991D81BD709D8CBE593EFACCDCED2EFF
SHA1:	7E4650EA3EFD117D501393512915A744F2F312A9
SHA-256:	3F934C76F543F1D7B2C5ED14DA0AC1496E82837CA81B6B4616C73B0769D62A5C
SHA-512:	BEA615AD22456FED73FC4B227EAE9678D7B42977C3CEC54C61E3781DDF496C284459C8CB53EA7CA6C3AEFF7856F8DB05DBBE7F05FD881937179E04CEF3161BF8
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="166.148px" height="18px" viewBox="0 0 166.148 18" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>verified</title>. <g id="Final" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="verified">. <g id="Verified" transform="translate(125.000000, 5.000000)" fill="#6C6C85" fill-rule="nonzero">. <polygon id="Path" points="4.308 8.664 7.356 0.096 6.168 0.096 3.696 7.524 3.672 7.524 1.224 0.096 0 0.096 3.012 8.664"></polygon>. <path d="M12.148,4.968 L8.584,4.968 C8.6,4.728 8.652,4.502 8.74,4.29 C8.828,4.078 8.948,3.892 9.1,3.732 C9.252,3.572 9.434,3.446 9.646,3.354 C9.858,3.262 10.096,3.216 10.36,3.216 C10.616,3.216 10.85,3.262 11.062,3.354 C11.274,3.446 11.458,3.57 11.614,3.726 C11.77,3.882 11.894,4.068 11.986,4.284 C12.078,4.5 12.132,4.728 12.148,4.968 Z M13.132,6.696 L12.124,6.696 C12.036,7.104 11.854,7.408 11.578,

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13
Entropy (8bit):	3.5465935642949384
Encrypted:	false
SSDEEP:	3:YHAXW2Vn:YglVn
MD5:	97EFE0B7EE61E154D57E80758BB797D8
SHA1:	810B4E115FE9F5AE697666FEBF2A9ABF0B21C9EC
SHA-256:	EFABBA3678B85FCAB831B778EA2DDAAD1E2A1E952584D3566BC39B7CCB3429D9
SHA-512:	AA02209CF80FC2564CE0DB0BF9F30241E92EA33101B55FFE5E26D617F90B74277AE68D714A7B00C792EF2B88B582E3F299213A5C3C9BF9AFE6C6C1800FC276AF
Malicious:	false
Reputation:	low
Preview:	{"bakers":[]}

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	736
Entropy (8bit):	5.053783684564299
Encrypted:	false
SSDEEP:	12:tr/BWGuoRhNKG+WU8FzaAZRsnJn4GBD3kAHF4uhthclQqoZ3mdVvyuiHFkAHFPER:tzBXuoh3Z5NRsnJn4Gd3ka4uhthU/u3w
MD5:	43D8E68D205EB8274E967A25542A4402
SHA1:	E05E727AC0A3369C35943D7CAEB1A6A5527CF871
SHA-256:	E401724D4736C404C4FF68FB7AB120021A1A7F3CBA181EB70B022E6418232963
SHA-512:	B851852A1D35B89244B16BA868D23346723283F1D69A93BA618677FE80A2F3BAAF3196689BB3090FD26C6D2672DA46A03166AFA2CD348BCBF32E8F95A9077D00
Malicious:	false
Reputation:	low
URL:	https://cdn.qa.gohealth.xyz/lead-generation-sites/common/icon_warning.1726478862.svg
Preview:	<svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<g id="warning icon">.<g id="Group">.<path id="Polygon 2" d="M3.17445 27.1428L15.9999 5.16839L28.8254 27.1428H3.17445ZM3.13787 27.2055L3.13791 27.2055L3.13787 27.2055Z" fill="#E25530" stroke="#E25530" stroke-width="1.71429"/>.<path id="Line 1" d="M16 13.4852L16 19.2093" stroke="white" stroke-width="1.71429" stroke-linecap="round"/>.<path id="Ellipse 4" d="M17.3037 23.0936C17.3037 23.8036 16.7214 24.3817 15.9999 24.3817C15.2783 24.3817 14.6961 23.8036 14.6961 23.0936C14.6961 22.3836 15.2783 21.8054 15.9999 21.8054C16.7214 21.8054 17.3037 22.3836 17.3037 23.0936Z" fill="white" stroke="white" stroke-width="0.285714"/>.</g>.</g>.</svg>.

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	4.2430101595548555
Encrypted:	false
SSDEEP:	3:KQCZAK+uP:K9GruP
MD5:	75C843C7B717E7B722777907475C67A3
SHA1:	983D1C9A05B315288039B9D4694CE3B402259240
SHA-256:	1D348F9F803C95305F63DEF9D75FD50E79E54A375E1A4A888EDBBEA366845580
SHA-512:	41F58C029586198B0F5E7AB6D2CC1EDEB113184F82C8ADFFC81F0E229FF5CE44CC9AABB8BDA82F923984A3CFE5E42C68EF2F4620FF94AE0B1809B03B9A6FD37F
Malicious:	false
Reputation:	low
URL:	https://tr.outbrain.com/cachedClickId?marketerId=003678ec07dcd7129be54125730b23cabc
Preview:	obApi.setCachedClickId("NoClickId")

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	166
Entropy (8bit):	5.852184084844084
Encrypted:	false
SSDEEP:	3:yionv//thPlGARtjmA66MF5DpwloyzFZp0xdkgl08mzsPS98WInwgblSHxp2p/Hb:6v/lhPIARoA6b5tQoEZCkglFmRhawgB5
MD5:	D2D649B406D7A325683E2CCBD3297E43
SHA1:	819D6E6BF4CE1219BF83DEB5CB33A04A57E12C07
SHA-256:	E9BDAE625005100947D641A34F00BDD51B435D2C5979DF3F3F32F0D812CB17F7
SHA-512:	19E7F5D74C422DB0DC24B1748C174931CCC59EA0F80EE7F92293C7EF05956D477C8287F21CB10FCFF6867E10AC81C96DC138F9C5FF1F83F3AC4FC66A7F7D1AE0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0......,.....PLTE....................r.....tRNS. ... ..<~...=IDATx.c.~.Q.I......!V....'......X%L.2.....b.U.U.(.&.0.V.a5...-...........IEND.B`.

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1x1, components 3
Category:	dropped
Size (bytes):	651
Entropy (8bit):	6.8464925348326915
Encrypted:	false
SSDEEP:	12:FC9YM8fwy0lJ0Xx0WzOsvWGKkCHdcfmcGHMf/qXzUOrS07DAzEgOsvWGKkCHdcf5:49YMWbo0XxDuLHeOWXG4OZ7DAJuLHenx
MD5:	6E9CB3C3A7914653B2D2E7AEF186E71E
SHA1:	89AF7B8900C4297A93A2B43AAB59D9A3A4716C63
SHA-256:	EBC24EAD25EB3C06D3E6DEAB6403105722925BF74A469271A1A923CB78FE1BFB
SHA-512:	633E886A3268E0532C12F9EF01800D56F388BCE67BD504F5E32909225C84ADC976B1E79A556D445C9DD51203A048396F15985C7DF4B70F2E37EDDEE7AC074142
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(..?...Q.{.V~qz.C.....{.

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 20598
Category:	downloaded
Size (bytes):	7157
Entropy (8bit):	7.968830372356471
Encrypted:	false
SSDEEP:	192:+nwdLb+S0p8ZoYkOFgDs+XalkRNSJqgAlep7:+wdbX0p8ZLkOFg4IamvjgSeh
MD5:	C90E0AD275BBC5B9DC48709E3F66B0BC
SHA1:	5E05E1E0F21C6E29412BA639D73E623583B733CF
SHA-256:	4B973310611E1882BF26018CDA213B551C1B42CB444A74DC0123EE74CDF0EDE5
SHA-512:	B963203FEA0DB32971EC9999F98569C123F54A621FC6011736B4D9D89ED367A99826F4B00FBF0C0A2F681A5FC41B121CDD7C057E977671C2166D3F5F701BEEBE
Malicious:	false
Reputation:	low
URL:	http://api.myuhchvision.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTA5Ljc3OTR8NmE2MDdhMzFkNzdlNzA2ZmVjOTAwNjczMmM0NDE0NDJjODU1MzliZXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%3D%3D&query=United+Healthcare+Medicare&afdToken=ChMIpK7J8uPpigMVqoX9Bx1cfACQEmoBlLqpjxgmjCzROndp4cIsoUpMclKqzmCF8A4idqYAc6BRFXzqpQZr5mHskq-o8oROHsWon_E3VNBfAnPv0EnTUZ4xhapxEHMsWhLX36L28YhUgQYpSE5TWYluVMNln-ErnASvWEH_lO70IAE&pcsa=false&nb=0&nm=7&nx=264&ny=69&is=530x496&clkt=3&suid=32397724909
Preview:	...........\yw.......9.........bc......s.\|.....I..\.....@d.3ys.yIlP...W)/.......a0._=yI....zA7{.k.Fl..Of..........i.?><\|.l}.5g.....L['.......Sk..w.........n..7i/......Sg.0..hv...s......\|.....n..[{M....Zm.9;n6.7..o&.....=....~b.........M.e.J..vO?.X..U....S...7.u.9}g....v.Q.8?S.f.uzrb..F#....72. ..K..lV.U..7(i....9.#..3hd..!.1.\|.D...c..@\0).?..}#s.:.s.Bw1a...O.L..A.V:P....,hL.~a/S./..c...[l6q. 6}f...a.{.`...W,..,....n...W..g9.B...V.p.h...l.j......[.S4...h......~...2f..72..1~.g>....\|....m..d....'_.pm.+..S...}...........0..}`..h..\.=.......3...CF..JY..E.D7M..`...U..o..qTW..h.X....T.}..b.C.rL6.5..<.N..)......Lf.....ue.E< ..U7..NX..&....R......<,aX..+vU...g^..2.._...~........I.....].....0.....t.a.....r..n....,....Jfeo.{.......a.S....E...`.../..._..5..8q..m.c.....Px.rK.3`..b...GG.1.....=7..1....er.*...G2V...;.N...ng3..#....8.!.El..5..[.}..4I.?6@....;n.m..Ol}QW...c:.C..c.V..O.....B...l-..0q}Hc......r.g.......y...Z..H...>.l./..EO.0I.

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7043
Entropy (8bit):	4.524212090966373
Encrypted:	false
SSDEEP:	96:4qa2BOrd8sFFvpdXzJKmymfmLL7a2xL9qDqZqSzpAFZ00o+9wskNr/yLheT:4qMrys/hdN/ymC7xhqU3zCF1dkNryYT
MD5:	027D4DF1A0B41FE0DA94BA6111CA03E7
SHA1:	1D3A8450074F9E09910A7A684DF815E4203E52C0
SHA-256:	59B13F759F1E157688C14B450F98B3A61F55BAFADF84CE61BF755DF4FDE28098
SHA-512:	F8AF9EA7B0DE3E85823B436B1DE5389C4AA799AF427C973BCD9BADC39ACE4B11C20D3D05D809B69F3E0FF1DFFEA764EA95D285B7680C1DAAF93E85605BFC97AE
Malicious:	false
Reputation:	low
URL:	https://cdn.qa.gohealth.xyz/lead-generation-sites/medicare/gohealth_logo_gray.1716542403.svg
Preview:	<svg width="157" height="31" viewBox="0 0 157 31" fill="none" xmlns="http://www.w3.org/2000/svg">.<mask id="mask0_2_68" style="mask-type:luminance" maskUnits="userSpaceOnUse" x="0" y="0" width="28" height="31">.<path fill-rule="evenodd" clip-rule="evenodd" d="M0 0.947754H27.3101V30.9478H0V0.947754Z" fill="white"/>.</mask>.<g mask="url(#mask0_2_68)">.<path fill-rule="evenodd" clip-rule="evenodd" d="M23.6184 30.2657H20.4097V27.2577H20.329C18.3235 29.7845 15.1136 30.9478 12.7069 30.9478C4.52262 30.9478 -0.0109863 25.5331 -0.0109863 18.4342C-0.0109863 6.40237 7.8922 0.947754 15.3546 0.947754C22.0946 0.947754 27.27 4.07633 27.31 10.7738H22.2951C22.0946 6.88356 19.4065 5.03889 15.1939 5.03889C8.37373 5.03889 5.00396 11.8969 5.00396 18.274C5.00396 23.608 7.85223 26.8566 12.8672 26.8566C17.802 26.8566 20.4898 23.5678 21.5728 18.9959H13.7098L14.5122 15.1857H26.8283L23.6184 30.2657Z" fill="#1B1D1F"/>.</g>.<path fill-rule="evenodd" clip-rule="evenodd" d="M32.2214 21.8831C32.2214 24.9317 33.6653 2

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	141
Entropy (8bit):	5.10595793809344
Encrypted:	false
SSDEEP:	3:YGKy++6QMBWHjt0C0MT6QMBWHWDSBcEmKCuJeN800rDCHuJRWRQMBWHjV:YGKY6ZBAJ70MT6ZBAWDYHmQENl0LWRZ8
MD5:	A588776E3450E51B753D08230ECB5FB2
SHA1:	8BA07963BD256DA0D846C6175046B5549A3C4461
SHA-256:	CA889371A5023E6C938CCABBAD00222D59EDFF3AF6BCFEE9A9D6076A9821909A
SHA-512:	FF9E2369B4A7D890F486F115780F36B777843F86C30C4733AA43F8FC6E07CA854E23EA27DADF941BCA362B3196D2ABF7D0DCFEF58076AEBD4819243E43737B1A
Malicious:	false
Reputation:	low
URL:	https://tags.srv.stackadapt.com/saq_pxl?uid=jBubxyJLG1_zSNqfyTn1Aw&is_js=true&landing_url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&t=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&tip=r2VBjeI2kzLuvBdN1PsckXCwQNMHVWQ9n_4OeHoRHDU&host=https%3A%2F%2Fmedicare.gohealth.com&l_src=syndicatedsearch.goog&l_src_d=2025-01-09T23%3A22%3A27.616Z&u_src=&u_src_d=&shop=false&sa-user-id-v3=s%253AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCC0tIG8BjABOgT87-jmQgQ_QCZc.O3M9N%252FjNocxDAkJgoeKCY4eteFsk5sYBegvZtk1NJzo&sa-user-id-v2=s%253AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%252Bwm4OfOz4n4F%252FPoM&sa-user-id=s%253A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%252FL7%252F67hBh4a3iUq5VBv7eLYiyAmcJqNB%252B4cJQ
Preview:	{"conversion_tracker_uids":null,"retargeting_tracker_uids":["OL4ewzBKcQ6GG5tEFoQoKa","qgMPebO4jniMhYQu17XNfg"],"lookalike_tracker_uids":null}

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Category:	dropped
Size (bytes):	81071
Entropy (8bit):	5.39070266364305
Encrypted:	false
SSDEEP:	1536:1+0GzlSA2NuY/6nMPifkSy9r6Ud/NkfqG:10Y/6MPiEOUBN8
MD5:	818D52EB9ABCAACDF0428AD47A7E5DD3
SHA1:	B035B13EC431D295EFF070AB8058A03C8CE0847A
SHA-256:	A43218A24D8245480C99870ACD3B39700833E243B31498D3939A3B2289EC137E
SHA-512:	6FD79E9C96B03F1160982C945CCFA4DAA99F47E9D33D1130DDFF8AD014673F1FFC02505ABD54E65351006DCD95F6D69A9AC714DA30727A97A6E37DB87573E95A
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[4619],{53753:function(e,n,t){"use strict";t.d(n,{b:function(){return Alert}});var o=t(52322),i=t(2784),r=t(12524),a=t.n(r),s=t(60299),l=t.n(s),Alert=function(e){var n=e.children,t=e.id,r=e.role,s=e.visible,c=e.modifier,d=(0,i.useMemo)(function(){return Array.isArray(c)?c:[c]},[c]);return s?(0,o.jsx)("p",{className:a()(l().content,d.map(function(e){return l()["content--".concat(e)]})),id:t,role:void 0===r?"alert":r,children:n}):null}},83452:function(e,n,t){"use strict";t.d(n,{z:function(){return m}});var o=t(85333),i=t(6692),r=t(2281),a=t(52322),s=t(12524),l=t.n(s),c=t(97438),d=t(2784),u=t(41284),_=t.n(u),m=(0,d.forwardRef)(function(e,n){var t=e.children,s=e.visible,u=e.className,m=e.modifier,f=void 0===m?[]:m,h=(0,r._)(e,["children","visible","className","modifier"]),p=(0,c.$G)("common").t,b=(0,d.useMemo)(function(){return Array.isArray(f)?f:[f]},[f]);return void 0===s\|\|s?(0,a.jsx)("button",(0,i._)((0,o._)({ref:n,className:l()(_(

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	9500
Entropy (8bit):	4.349587466104534
Encrypted:	false
SSDEEP:	192:RieLs9z+4s6xJZvEjezieLs9z+4s6xJZvEjeieLs9z+4s6xJZvEjjieLs9z+4s6C:4eYz7s6xXvEje+eYz7s6xXvEj/eYz7s3
MD5:	594191931DA06CE81F1A08D9D8801936
SHA1:	4186CE29E36A2C0E3DF29022A39E7EFF75E75137
SHA-256:	FFBE9EECC08829AB621670F60C4DB539F3E3FE58DAA3BF483D37F80E2CC1C7FB
SHA-512:	A4814CDA79B8E96ED5A72A47E74317763E89839FAE1D9FDF7A35255353294E68442EDC6495E1E040005E8DDF1AB2C03D13B32310CB128366F7F6D4E829D7F345
Malicious:	false
Reputation:	low
URL:	https://cdn.gohealth.com/lead-generation-sites/medicare/trustpilot-stars.1716278912.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="190px" height="35px" viewBox="0 0 190 35" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>trustpilot-stars</title>. <g id="Final" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="V1---MOBILE---Agent" transform="translate(-537.000000, -670.000000)">. <g id="trustpilot-stars" transform="translate(537.000000, 670.000000)">. <g id="Group-9">. <polygon id="Fill-1" fill="#00B67A" points="0 35 35.8209534 35 35.8209534 0 0 0"></polygon>. <path d="M30.3275933,14.9681769 C26.38973,17.7274188 22.4518667,20.4866606 18.5140034,23.2459024 C18.5267924,23.2867969 18.5407441,23.3265555 18.5546958,23.3685859 C19.9580028,23.0312064 21.370611,22.7267697 22.7588038,22.340544 C23.3157086,22.1860537 23.5354476,22.2814741 23.7028678,22.8165103 C24.2365198,24.5181753 24.821328,26.2062088 25.3817207,27.8999221

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	35
Entropy (8bit):	4.2430101595548555
Encrypted:	false
SSDEEP:	3:KQCZAK+uP:K9GruP
MD5:	75C843C7B717E7B722777907475C67A3
SHA1:	983D1C9A05B315288039B9D4694CE3B402259240
SHA-256:	1D348F9F803C95305F63DEF9D75FD50E79E54A375E1A4A888EDBBEA366845580
SHA-512:	41F58C029586198B0F5E7AB6D2CC1EDEB113184F82C8ADFFC81F0E229FF5CE44CC9AABB8BDA82F923984A3CFE5E42C68EF2F4620FF94AE0B1809B03B9A6FD37F
Malicious:	false
Reputation:	low
Preview:	obApi.setCachedClickId("NoClickId")

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65509)
Category:	dropped
Size (bytes):	72982
Entropy (8bit):	5.385121065061083
Encrypted:	false
SSDEEP:	1536:6Fb2sh8DSBSBHY/Zkb3A2FWKlt3WCl7u011Q84k2c7FNBAacV8O2LrW:6Fb2x/CTMtF6D8jFhFO2O
MD5:	02E1CC68C7C8A2524EA36562CF55B694
SHA1:	BA7291DAB80C0DC572E06E32FFAB1A24A66A4136
SHA-256:	37140553C702D54E617CC03B7159AB0FE098EA7CFD8041F24F5489C23A05F420
SHA-512:	0B6494C40E0E3D66919E15F22E962404FDA753CAA1E26A1BA038D5CA2B329A7F6154968429068A1E7C3F75D53DBF6E614F7812E755B49A6A9CA64FA7C6C90488
Malicious:	false
Reputation:	low
Preview:	/! 20250102-8-RELEASE /..function _typeof(t){"@babel/helpers - typeof";return(_typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(t)}!function(t){var e='TFASC';e.indexOf("{jsScope}")>-1&&(e="TRC"),t[e]\|\|(t[e]={})}(window),function(t,e){t.TRC=t.TRC\|\|{};var n=function t(){return!0},r=function n(r,i,o,a){var s=r+"/"+encodeURIComponent(o\|\|t.TRC.publisherId)+"/log/3"+"/"+i;return a&&(s+="?"+e.TRCLogger.formatParams(a)),s},i=function e(r,i,a,s){var c,u=new(t.XDomainRequest\|\|t.XMLHttpRequest);return u.open(r,i),u.onload="function"==typeof s?s:n,u.onerror=n,u.ontimeout=n,u.onprogress=n,u.withCredentials=!0,a&&o(u,a),u},o=function t(e,n){for(var r in n)n.hasOwnProperty(r)&&e.setRequestHeader(r,n[r])};t.TRC.TRCLogger=e.TRCLogger={post:function n(o,a,s,c,u,l){var f=r(o,a,c,u),d=i("POST",f);l&&"function"==typeof t.navigator.sendBeacon?t.na

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (14144)
Category:	downloaded
Size (bytes):	14939
Entropy (8bit):	5.485235339527336
Encrypted:	false
SSDEEP:	96:2E/yk2iIlb5lphMzwronb86Lgh3hvLNYrWfHhMVDXw96DOjMVDXzw96DvEMVDRwP:2E12iMpgbLLgh3VLWrUSmsHO1
MD5:	8855449C516F563571A9B8884FC53461
SHA1:	1D2D4A2BAB19A306733F861A87133E03707A4C40
SHA-256:	3BE8E17C9F22D80BA8CD074B0208ABFA2F35EBC211291992A15E5E30194C6159
SHA-512:	7AF06191A4738BB4F374AB5C5B5C82CF8D3F9D0B667F4EBFE82EC48613A7080B9B505BA8AA456A1E32907E63D8F8441B3A64C00022227F6EAAD68BADBAECD9C1
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fapi.myuhchvision.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTA5Ljc3OTR8NmE2MDdhMzFkNzdlNzA2ZmVjOTAwNjczMmM0NDE0NDJjODU1MzliZXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%253D%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2541811284092968&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=131736464911089&num=0&output=afd_ads&domain_name=api.myuhchvision.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-300&dt=1736464911090&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=754&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=712519386&rurl=http%3A%2F%2Fapi.myuhchvision.com%2F
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.687144312913345
Encrypted:	false
SSDEEP:	3:CU9yltxlEun:Vu
MD5:	00657DD79637A8DAF5E6196CA17F1887
SHA1:	3E064855D1FE7C6EAC52981A646EC5840BA7EFB5
SHA-256:	F0C71E3DA5B3FCAB3C66AF1CF0CDBF262C97B9330B7B37116F1AE2AB18BDC660
SHA-512:	27524EAAD778B2C220D655BAE2AC4A6C4CF54112FAF9133E34A4C25C3CD2A8A04CB7CEC35A09F80D4F51DFC73B1F94C63BBC92171220FE83F6F0BDB204645485
Malicious:	false
Reputation:	low
URL:	https://collector-47776.us.tvsquared.com/tv2track.php?action_name=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&idsite=TV-5427272736-1&rec=1&r=063113&h=18&m=22&s=28&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&urlref=https%3A%2F%2Fsyndicatedsearch.goog%2F&_id=30d50068786238ee&_idts=1736464948&_idvc=0&_idn=1&_viewts=&pdf=1&qt=0&realp=0&wma=0&dir=0&fla=0&java=0&gears=0&ag=0&cookie=1&res=1280x1024&gt_ms=394
Preview:	GIF89a.............!.......,...........(.;

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65200)
Category:	downloaded
Size (bytes):	141041
Entropy (8bit):	5.335474203783951
Encrypted:	false
SSDEEP:	1536:M5hSrvLquKUTTh8I5ZNn38xEk5eASPdxqznicW8KvvADFJ+X4WtNmpH:M5hSrDqM5ZNn38xfSnqGf7vIO4Wty
MD5:	2CD69CE748877124D1CA35096F03C57E
SHA1:	67E97EC5D41B2820ACE038FF11FE2D1963088C22
SHA-256:	FB096E6B4017CA06FBE50FE288CB8DCB32A2D1828979F5ECE8EEB278026DB36A
SHA-512:	E33747954C8D9F814D4A3E91CDAC09245F454CF94E7DB98DA747BDA73F3CD705AC5F8470C81F0F18C7D1A0857817B25DA95571E4A7A4F235078F48A2C65149FE
Malicious:	false
Reputation:	low
URL:	https://medicare.gohealth.com/_next/static/chunks/framework-209d228742ce58bd.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9774],{52967:function(n,t,a){/*. @license React. * react-dom.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */var i,u,o,s,w,x,C=a(2784),_=a(14616);function p(n){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+n,a=1;a<arguments.length;a++)t+="&args[]="+encodeURIComponent(arguments[a]);return"Minified React error #"+n+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}var N=new Set,z={};function fa(n,t){ha(n,t),ha(n+"Capture",t)}function ha(n,t){for(z[n]=t,n=0;n<t.length;n++)N.add(t[n])}var j=!("undefined"==typeof window\|\|void 0===window.document\|\|void 0===window.document.createElement),L=Object.prototype.hasOwnProperty,U=/^[:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02F

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1895)
Category:	dropped
Size (bytes):	147117
Entropy (8bit):	5.528629901787042
Encrypted:	false
SSDEEP:	1536:ij4EEHxzJkfKnTi/cteUEOKl16X5II615nUnU/WD3g78JSzg2SmAtGFUI/+r9334:5Kl1KII6fXsS2mpB+N3QgHMOYXQzG
MD5:	B2C81872992D99DFFE09765FACE89E55
SHA1:	412758FCBFDBC7A39E05299979149C73EAFD7FF9
SHA-256:	0EC8A4691D91D84B19206DB9A9B962D407ABDC2CCC7694BF5FE09967B4348C8E
SHA-512:	88364D4827CD6972EA43858E65EF017EA7AD5199B3A66020896835F6D277304E8C05900380E185D7C2ABE5D7F6774B10CD5E8CAD9698FE0AA0758D2C220CA8A0
Malicious:	false
Reputation:	low
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"5942599812270562725",packages:"domains",module:"ads",version:"1",m:{cei:"17301437,17301439,17301442,17301519,17301548,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_chatbot_aa":500,"afs_gpp_api":0,"disable_usp_api":10,"heterodyne_test":85

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5177), with no line terminators
Category:	dropped
Size (bytes):	5177
Entropy (8bit):	5.872538815406181
Encrypted:	false
SSDEEP:	96:1g2VilZtckx+9DgTlPJdiLW+iSah8vf1dtzlTazNVMRvw:12cV9sT3AW7NIzoNVCvw
MD5:	FDB587844F941C18CCE5F84C8F2E373B
SHA1:	2274860491F5C19E66977E036DA681F7A11F7C80
SHA-256:	A6D0CB290B725A4AF85624D41BC8B73A754442B11C59332907B7CC5366398EE1
SHA-512:	2CE8AEF579D714E7BB1DA5DB20353227907698DE627D5D85EBF82E397419BB4D83CEF93121DBC68D4EA73740BD1AC0016C7433ED606EDF07A9A43F6253C9E52F
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]}d=d[d.length-1];c=n&&c==="es6"?g[d]:null;b=b(c);b!=null&&(a?h(q,d,{configurable:!0,writable:!0,value:b}):b!==c&&(t[d]===void 0&&(a=Math.random()*1E9>>>0,t[d]=n?m.Symbol(d):"$jscp$"+a+"$"+d),h(g,t[d],{co

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/1042882457?random=1736464953044&cv=11&fst=1736464953044&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dform_submit
Preview:	<html></html>

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10664), with no line terminators
Category:	dropped
Size (bytes):	10664
Entropy (8bit):	5.44836607334764
Encrypted:	false
SSDEEP:	192:Y5iMtOJ8r/beYyWKEGmOiEzBDda0GguglM0KsdE6:Y3Y8r7ZKNmOiEz7+guglMWj
MD5:	5F3F3D824ECEBFDFAD8770D91ACF5E41
SHA1:	1409D4E5438CC21A340889F596C22E5B4A3552EF
SHA-256:	1AF3FDFF3B4C701DA9BD8076E93EA5254247B6AC1F9134DC9B0980B3C1E8293E
SHA-512:	453F62C4006683CBBCEC4A0F30C3BA5981E9450421C699281A159E26445CD37BCADB7EF9A55557E9EFDAD93E032EC91D1534CABE095D106DB32FA66177E7131F
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[7187],{65404:function(e,t,n){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/medicare-marketplace",function(){return n(1878)}])},54636:function(e,t,n){"use strict";n.d(t,{v:function(){return returningCustomerFlow}});var i=n(46425),a=n(52045),returningCustomerFlow=function(){return{animation:"toggle",sections:[{animation:"slide",sections:[a.V,i.$D,a.j]}]}}},99828:function(e,t,n){"use strict";n.d(t,{P:function(){return AgeRangeSection}});var i=n(52322),a=n(2784),o=n(75841),s=n(97438),r=n(2684),AgeRangeSection=function(e){var t=(0,s.$G)("common").t,n=(0,a.useMemo)(function(){return[{label:t("ageRange.under60","Under 60"),value:o.gzN.UNDER_60},{label:"60 - 69",value:o.gzN.OVER_60},{label:"70 - 79",value:o.gzN.OVER_70},{label:"80 +",value:o.gzN.OVER_80_PLUS}]},[t]);return(0,i.jsx)(r.bo,{onSubmit:function(t,n){e.goToSection(e.nextSectionName,{partialContactInfoEventData:{custom_question_ageRange_value:t,custom_question_ageRange_label:n}}

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1033), with no line terminators
Category:	downloaded
Size (bytes):	1033
Entropy (8bit):	4.903536188301988
Encrypted:	false
SSDEEP:	12:cAR6rQPJrIAR4/oL/IARpCecsBeiy3R+RHuq8hvhFEzfoW6MroW6Ewg7BlBobPXt:t6rGrxm2xp4BcOq8hDoQK08NkPOzW
MD5:	774F94188702F224364250C63D5F0331
SHA1:	E554D3F49E5822897575399C3F53CA972886E6CF
SHA-256:	5A2776DCCDB240C586C3F7BBC253BBBF205E9DB0483D9A3F080AEB15AF0BE907
SHA-512:	A5D54B3EA4FA8ECE3DB2FEB4FD55F9D09099E00EA9935664B075EF2CA11005CE77176D97B83228105FF772A8891AEE8E796473E3ACCF32679AF18D4A9E6A579F
Malicious:	false
Reputation:	low
URL:	https://medicare.gohealth.com/_next/static/css/8506ea82eb1ef2da.css
Preview:	@media only screen and (max-width:680px){.hide-on-mobile{display:none!important}}@media only screen and (min-width:681px){.show-on-mobile{display:none!important}}@media only screen and (max-width:880px){.hide-on-tablet{display:none!important}}@media only screen and (min-width:881px){.show-on-tablet{display:none!important}}@media only screen and (max-width:1180px){.hide-on-desktop{display:none!important}}@media only screen and (min-width:1181px){.show-on-desktop{display:none!important}}*{margin:0;padding:0;-webkit-box-sizing:border-box;box-sizing:border-box;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}html{height:100%;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{height:100vh;min-width:320px;margin:0;font-family:source-sans-3,sans-serif;font-size:16px}body>img{display:none}main{display:block}:focus{outline:none}::-moz-focus-inner{border:0}.no-wrap{white-space:nowrap}.underline{text-decoration:underline}.disabled{pointer-events:none;cursor:default}.

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/1042882457?random=1736464945734&cv=11&fst=1736464945734&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548z8841278742za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (386), with no line terminators
Category:	downloaded
Size (bytes):	386
Entropy (8bit):	5.471880527728632
Encrypted:	false
SSDEEP:	6:xWzPESAbHXWMWavhszoObYpLdV2FqPOTcZTpM7M+dwIEvSVqHB2FqPOTcZTpMAen:xWoSAbGMWUDObYjqAZm7HwxSqHWAZm7n
MD5:	B8491E0F8DFE540A709402C1DD7C3AB5
SHA1:	39EEEC0D1398F80B6881E1772BC46265CCAC9F8C
SHA-256:	BCFC6BE1F8EF499434739FB92E0B02AD39D8D995C7FC4AF4F6368A793E842397
SHA-512:	ABA606893E271089E08E3F61C2847E684C8DF42E33EB364AAD76B93FC7D6ABC33BBC177CC26D1F9A5686F3C1E07AB6826E21FD5154755C92218732EE1A3D3F24
Malicious:	false
Reputation:	low
URL:	https://partner.googleadservices.com/gampad/cookie.js?domain=api.myuhchvision.com&client=dp-teaminternet09_3ph&product=SAS&callback=__sasCookie&cookie_types=v1%2Cv2
Preview:	__sasCookie({"_cookies_":[{"_value_":"ID=c2d96085edb8c52a:T=1736464913:RT=1736464913:S=ALNI_MYPZC8TKmtU-_fM69ccp9F25OCunQ","_expires_":1770160913,"_path_":"/","_domain_":"myuhchvision.com","_version_":1},{"_value_":"UID=00000fb131a870f9:T=1736464913:RT=1736464913:S=ALNI_MZTpgXcg_c-n7eOXD0_yElSRSg4mg","_expires_":1770160913,"_path_":"/","_domain_":"myuhchvision.com","_version_":2}]});

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65441), with CRLF line terminators
Category:	dropped
Size (bytes):	68544
Entropy (8bit):	5.353273780967634
Encrypted:	false
SSDEEP:	768:zDoev7ihlr+MwjqU+s2SL3iY0w2+4PMdj4dZOfDxh1GiqxvC+24VfRzYshiP/Xt5:zD7Dihlr+MUQKI0f9h1Gib4LA8Bs
MD5:	A07833512D877DC182973CF42CDA7D79
SHA1:	28DCFE97957BBB239FCE68DBF64BB22338ABE500
SHA-256:	83146C62110F911CBC9E66DAA824D1F4E1D8F8AA6508AA45FE061932DB65FA27
SHA-512:	3656CCE575FC835853AA0B0F4AAF38D65DD3E4CA5985E1E64A9C211F6D5350A640D4AC48EE90507F7C3657E804DB9CB6DBB6A80B4475C12FF658C75CF4EB29AF
Malicious:	false
Reputation:	low
Preview:	/* clarity-js v0.7.59: https://github.com/microsoft/clarity (License: MIT) */..!function(){"use strict";var t=Object.freeze({__proto__:null,get queue(){return br},get start(){return yr},get stop(){return wr},get track(){return hr}}),e=Object.freeze({__proto__:null,get clone(){return Xr},get compute(){return Yr},get data(){return jr},get keys(){return Ar},get reset(){return qr},get start(){return Hr},get stop(){return Fr},get trigger(){return Wr},get update(){return Ur}}),n=Object.freeze({__proto__:null,get check(){return Zr},get compute(){return $r},get data(){return Dr},get start(){return Kr},get stop(){return ti},get trigger(){return Qr}}),a=Object.freeze({__proto__:null,get compute(){return ui},get data(){return ei},get log(){return oi},get reset(){return ci},get start(){return ri},get stop(){return ii},get updates(){return ni}}),r=Object.freeze({__proto__:null,get callback(){return wi},get callbacks(){return di},get clear(){return bi},get consent(){return yi},get data(){return li},

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1559)
Category:	downloaded
Size (bytes):	1560
Entropy (8bit):	5.3404181072517805
Encrypted:	false
SSDEEP:	48:0JhAVOnK8lwSb6YS4tyPWp2PXihm0wQR2FgbnYfblV:8egDbL1tzAXr+0P
MD5:	86D657AC52D155CF115EC41BB9AD2AC7
SHA1:	6421F64B86621246968408D17DCBED5E69CB55CC
SHA-256:	7D6B9A83492EC0FDD537237BB7DE6E64035E2C75B4B6BEE02E0FF03BAA07EDCD
SHA-512:	A14F0AE05ECD7F1ACC65E3E98EA66DA6B61A411311FC3C153CA4D3B22F975B1090312BBEB5F421DA3CDDA58E89FDBA78FFB6E01510168E50DFB2DD8A12F199C4
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads/i/iframe.html
Preview:	<!doctype html><html><head><meta name="ROBOTS" content="NOINDEX, NOFOLLOW"><meta name="format-detection" content="telephone=no"><meta content="origin" name="referrer"></head><body><div id="adBlock"></div><script nonce="weuQNaibm1uBb8FjMwRNFw">if (window.name.match(/^{"name":"master-\d+"/)) {var script = document.createElement('script');script.src = "/adsense/search/ads.js";var href = window.location.href;if (!!href && (href.indexOf('?pac=') > 0 \|\| href.indexOf('&pac=') > 0)) {if (href.indexOf('?pac=1') > 0 \|\| href.indexOf('&pac=1') > 0) {script.src += '?pac=1';} else if (href.indexOf('?pac=2') > 0 \|\| href.indexOf('&pac=2') > 0) {script.src += '?pac=2';} else {script.src += '?pac=0';}}document.head.appendChild(script);window.IS_GOOGLE_AFS_IFRAME_ = true;}function populate(el) {var adBlock = document.getElementById('adBlock');adBlock.innerHTML += el;}function getMaster() {var m = null;var pIndex = window.name.indexOf('\|');if (pIndex > -1 && window.name.charAt(0) != '{') {try {m = window.

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/408830293?random=1736464945641&cv=11&fst=1736464945641&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be5170z8841278742za201zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html></html>

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	200
Entropy (8bit):	5.025855206845441
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slhohC/vmI4SmK0xhFELE47zF:t6qnoU/vmRI0xQTF
MD5:	11B3089D616633CA6B73B57AA877EEB4
SHA1:	07632F63E06B30D9B63C97177D3A8122629BDA9B
SHA-256:	809FB4619D2A2F1A85DBDA8CC69A7F1659215212D708A098D62150EEE57070C1
SHA-512:	079B0E35B479DFDBE64A987661000F4A034B10688E26F2A5FE6AAA807E81CCC5593D40609B731AB3340E687D83DD08DE4B8B1E01CDAC9D4523A9F6BB3ACFCBA0
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1234)
Category:	downloaded
Size (bytes):	21351
Entropy (8bit):	5.503622110294562
Encrypted:	false
SSDEEP:	384:HdQm0XyQHiUtmxKLjL9jRiKPS4XYunqu9MVkWth5nXg5d7yFsiTtgfgelMBS5So2:HdR6yeiUtmELjTiMSQ5ndSVkWb5CduFn
MD5:	AC43CF3B4914E73C29910415BD19DB97
SHA1:	AB38BFA238B44E53F05AA778721D9585D0C6EA9D
SHA-256:	FA98E49ACB4BA980865779FA22B7CE1C48BDD56CB44A0FE19A8D6899F5FFE077
SHA-512:	8E36FC6B94073AA48C729342AC02287B0965A4375DB8A6F056F034044F43BCA51CE449FDD581B49839BE592BB4375D3891C90C0AFCCF6C326ED0CD43E27C43C1
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/static/service_worker/5190/sw.js?origin=https%3A%2F%2Fmedicare.gohealth.com
Preview:	'use strict';var ca=function(a){function b(d){return a.next(d)}function c(d){return a.throw(d)}return new Promise(function(d,e){function f(g){g.done?d(g.value):Promise.resolve(g.value).then(b,c).then(f,e)}f(a.next())})},h=function(a){return ca(a())};/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var p=this\|\|self;var t,y;a:{for(var da=["CLOSURE_FLAGS"],A=p,B=0;B<da.length;B++)if(A=A[da[B]],A==null){y=null;break a}y=A}var ea=y&&y[610401301];t=ea!=null?ea:!1;var E;const fa=p.navigator;E=fa?fa.userAgentData\|\|null:null;function F(a){return t?E?E.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function G(a){var b;a:{const c=p.navigator;if(c){const d=c.userAgent;if(d){b=d;break a}}b=""}return b.indexOf(a)!=-1};function H(){return t?!!E&&E.brands.length>0:!1}function I(){return H()?F("Chromium"):(G("Chrome")\|\|G("CriOS"))&&!(H()?0:G("Edge"))\|\|G("Silk")};!G("Android")\|\|I();I();G("Safari")&&(I()\|\|(H()?0:G("Coast"))\|\|(H()?0:G("Opera"))\|\|(H()?0:G("Edge"))\|\|(

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2734
Entropy (8bit):	4.48106417864042
Encrypted:	false
SSDEEP:	48:jpjgkjKitejJm3OjVTzFHU/nIc4v44Qva2HaX5CEOm85xjY7uhwabhLEdm:FjgkxteN1TU/Ic4g4Qva2u5C93Y7uHhL
MD5:	09ABDEDB9D270D570ED3CF9D37D1C856
SHA1:	F6F140E627214D829A8BDB96E96F8F3D10A9B551
SHA-256:	607CD74667C885553832462D6E8DFC5FA296813B6526C9144F40F3FCF75580D7
SHA-512:	E6E96098B764D78DE058FC70534477926D7387B5A5F12DD52945468579F4B212BF15B063F696E42C87619BE343858BCED9B924474C0FB409430152F417C3AB97
Malicious:	false
Reputation:	low
URL:	https://cdn.gohealth.com/lead-generation-sites/medicare/instagram_logo_dark_gray.1724069057.svg
Preview:	<svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M20.538 12.5812C19.9353 12.5852 19.4327 12.0879 19.4327 11.4879C19.434 10.8919 19.922 10.4026 20.522 10.3972C21.1247 10.3906 21.626 10.8866 21.626 11.4892C21.626 12.0826 21.1327 12.5772 20.538 12.5812ZM15.9997 20.3465C13.6104 20.3385 11.6504 18.3731 11.6637 15.9931C11.6757 13.6051 13.6211 11.6625 16.0037 11.6598C18.3864 11.6558 20.3504 13.6198 20.3477 16.0038C20.3464 18.3905 18.3811 20.3532 15.9997 20.3465ZM21.5887 9.64656C21.0167 9.23322 20.3687 9.06789 19.67 9.06922C18.4527 9.07056 17.2353 9.06922 16.018 9.06922C14.794 9.06922 13.5713 9.06922 12.3487 9.07056C11.9633 9.07056 11.5833 9.11056 11.2167 9.24122C9.88335 9.71856 9.07668 10.8666 9.07402 12.3159C9.07002 14.7746 9.06602 17.2306 9.08068 19.6892C9.08335 20.0546 9.13535 20.4386 9.25268 20.7852C9.70468 22.1266 10.8687 22.9319 12.3153 22.9346C14.7727 22.9386 17.23 22.9426 19.686 22.9279C20.

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11813)
Category:	downloaded
Size (bytes):	13108
Entropy (8bit):	5.397641449510539
Encrypted:	false
SSDEEP:	192:CbnLDr5tmjHCR/UeHjXWb2pTOnstdo5CpcNNOWqRObyAzJ3NSl:CbnLajURHjXo2BtcCvOby0J3NSl
MD5:	16FA72F22822661137FDE4156A344296
SHA1:	9EC9849AB624693BD4F46CFF709CCDC574B913C6
SHA-256:	856AE71A4346B2B63C0BF3B23DD8137968E1E0F5D01C21FFE338537A803178CA
SHA-512:	C0EB75571BF44EE40F454DC9D50F6FFFBD965BAD33C0D887E19B5A85E997F22477E6E1979274412AE28CC6CEFAD03D92B46BF8902AFE0FF37C08CED31BA572DF
Malicious:	false
Reputation:	low
URL:	https://static.hotjar.com/c/hotjar-1419317.js?sv=7
Preview:	window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":1419317,"rec_value":0.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":false,"session_capture_console_consent":false,"anonymize_digits":true,"anonymize_emails":true,"suppress_all":false,"suppress_all_on_specific_pages":[],"suppress_text":false,"suppress_location":false,"user_attributes_enabled":false,"legal_name":"","privacy_policy_url":"","deferred_page_contents":[],"record_targeting_rules":[],"feedback_widgets":[],"heatmaps":[],"polls":[],"integrations":{"optimizely":{"tag_recordings":false},"abtasty":{"tag_recordings":false},"kissmetrics":{"send_user_id":false},"mixpanel":{"send_events":false},"unbounce":{"tag_recordings":false},"hubspot":{"enabled":false,"send_recordings":false,"send_surveys":false}},"features":["ask.popover_redesign","client_script.compression.pc","csq_theme","error_reporting","feedback.embeddable_widget","feedback.widgetV2","feedback.

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.5
Encrypted:	false
SSDEEP:	3:HT8X8yY:QX8L
MD5:	19F8D5E68C5513A450DC48C105CC89B0
SHA1:	6280E6ED880AE08FAF4FDCDA6ECA19341A89F749
SHA-256:	98A52E2EE7451905EAABAED61652E717D9EF95F9CB884A2699D0E5993D935C56
SHA-512:	A6757F6448588106DD38A2CBC178D055B9487C2158218C883D38C7D2467A7C80B48A769DAF0B558D0B5802F7885AE4D273360271DC47E97A9DB5803E96E95F19
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSEAnAh3qTsYv6YBIFDffBjZg=?alt=proto
Preview:	CgkKBw33wY2YGgA=

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	710
Entropy (8bit):	4.168229211473121
Encrypted:	false
SSDEEP:	12:YGQ4BuMW0dsVOGD8RgcW7ZRRYH84IHMFrggAlboU6UEiYcWu3YJfF:YCzsVrD8qfq84IqrB1HcWu3a
MD5:	A3EA45D2A7E5A3146B9563B08091E6BD
SHA1:	F949C8E31FC12FDF61641919F307FF6571037371
SHA-256:	78A8DD9E0E5B030A71B2C342F236DF84CF093350E69591F508A71A82D2ECBE5F
SHA-512:	81815B132B98B598FA91BF32D4FC63354F820D448F9C54F726889335CBB67EF158AE43895BE50DCFD2A4838F3396C727305405FFAA463A85F1D94F8D937EF06D
Malicious:	false
Reputation:	low
Preview:	{"city":"New York City","ipAddress":"8.46.123.189","state":"New York","stateAbbrev":"NY","fipsCodes":["36001","36003","36005","36007","36009","36011","36013","36015","36017","36019","36021","36023","36025","36027","36029","36031","36033","36035","36037","36039","36041","36043","36045","36047","36049","36051","36053","36055","36057","36059","36061","36063","36065","36067","36069","36071","36073","36075","36077","36079","36081","36083","36085","36087","36089","36091","36093","36095","36097","36099","36101","36103","36105","36107","36109","36111","36113","36115","36117","36119","36121","36123"],"stateCode":"36","fips":"","medicaidData":{"programName":"New York Medicaid","excludeAdditionalLanguage":true}}

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9284)
Category:	dropped
Size (bytes):	245020
Entropy (8bit):	5.453937864649824
Encrypted:	false
SSDEEP:	3072:6FLeYH8W1WJ/37Oec8NteqZEbkxZNsucrl0xYurPK7d3OCX:6FLeYcgWJzm8NNfFcrHurPK7d3/X
MD5:	645219BB69D1C9F06CC935CC54DC1C2A
SHA1:	F14ACE0F9745356BC77D888857EF32A5EADC8615
SHA-256:	5332FD32D8BE28EB2531721220E8C3C561000378988BE4B4D7F97568F0B3F224
SHA-512:	CB41C3768945DA663B54A29758D6BDFFFD4666C6EEEB253017748831CB424CB54113CFE9DF06959E980E0A7B9EACB6F0D9DD1016B3A9B1BC900FAB79A30AF837
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9284)
Category:	downloaded
Size (bytes):	245020
Entropy (8bit):	5.453937864649824
Encrypted:	false
SSDEEP:	3072:6FLeYH8W1WJ/37Oec8NteqZEbkxZNsucrl0xYurPK7d3OCX:6FLeYcgWJzm8NNfFcrHurPK7d3/X
MD5:	645219BB69D1C9F06CC935CC54DC1C2A
SHA1:	F14ACE0F9745356BC77D888857EF32A5EADC8615
SHA-256:	5332FD32D8BE28EB2531721220E8C3C561000378988BE4B4D7F97568F0B3F224
SHA-512:	CB41C3768945DA663B54A29758D6BDFFFD4666C6EEEB253017748831CB424CB54113CFE9DF06959E980E0A7B9EACB6F0D9DD1016B3A9B1BC900FAB79A30AF837
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11806)
Category:	downloaded
Size (bytes):	450183
Entropy (8bit):	5.633673170396178
Encrypted:	false
SSDEEP:	6144:t4XAiDy+3IsyyHPASVUvcv4fSTnhsGf5X0+GDhNcvnzH08n:mXJ3ItaPAyv8+GDfiTj
MD5:	1137DEC93B33BF0529FF167745B9601F
SHA1:	28A12C09C1E4CF3A3F13B4BBEEF56380EF43056E
SHA-256:	2E67B39CCEBDC970F822063DB9D74370B951ED39D7AD19C0D2880EA7B280CBE5
SHA-512:	484240F7E020DC41366850D1B1FB18DC4EE5AB4AFBC2E18BE3EF44075F524EE17436D1444C9309C366396E36A25D2CCE94A8F7620C71E46592C9DE568C2F62C5
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-G99G7L25WL&l=dataLayer&cx=c&gtm=45He5190h2v841278742za200
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ads_datatos","priority":36,"vtp_instanceDestinationId":"AW-1042882457","tag_id":39},{"function":"__ogt_1p_data_v2","priority":26,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_manualEmailEnabled":false,"vtp_cityValue":"","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneValue":"","vtp_autoPhoneEnabled":false,"vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"","vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":6},{"function":"__ccd_ga_first","priority":25,"vtp_instanceDestinationId":"G-G99G7L25WL","tag_id":33},{"function":"__set_product_settings","pr

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65509)
Category:	downloaded
Size (bytes):	72982
Entropy (8bit):	5.385121065061083
Encrypted:	false
SSDEEP:	1536:6Fb2sh8DSBSBHY/Zkb3A2FWKlt3WCl7u011Q84k2c7FNBAacV8O2LrW:6Fb2x/CTMtF6D8jFhFO2O
MD5:	02E1CC68C7C8A2524EA36562CF55B694
SHA1:	BA7291DAB80C0DC572E06E32FFAB1A24A66A4136
SHA-256:	37140553C702D54E617CC03B7159AB0FE098EA7CFD8041F24F5489C23A05F420
SHA-512:	0B6494C40E0E3D66919E15F22E962404FDA753CAA1E26A1BA038D5CA2B329A7F6154968429068A1E7C3F75D53DBF6E614F7812E755B49A6A9CA64FA7C6C90488
Malicious:	false
Reputation:	low
URL:	https://cdn.taboola.com/libtrc/unip/1190412/tfa.js
Preview:	/! 20250102-8-RELEASE /..function _typeof(t){"@babel/helpers - typeof";return(_typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t})(t)}!function(t){var e='TFASC';e.indexOf("{jsScope}")>-1&&(e="TRC"),t[e]\|\|(t[e]={})}(window),function(t,e){t.TRC=t.TRC\|\|{};var n=function t(){return!0},r=function n(r,i,o,a){var s=r+"/"+encodeURIComponent(o\|\|t.TRC.publisherId)+"/log/3"+"/"+i;return a&&(s+="?"+e.TRCLogger.formatParams(a)),s},i=function e(r,i,a,s){var c,u=new(t.XDomainRequest\|\|t.XMLHttpRequest);return u.open(r,i),u.onload="function"==typeof s?s:n,u.onerror=n,u.ontimeout=n,u.onprogress=n,u.withCredentials=!0,a&&o(u,a),u},o=function t(e,n){for(var r in n)n.hasOwnProperty(r)&&e.setRequestHeader(r,n[r])};t.TRC.TRCLogger=e.TRCLogger={post:function n(o,a,s,c,u,l){var f=r(o,a,c,u),d=i("POST",f);l&&"function"==typeof t.navigator.sendBeacon?t.na

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 11460, version 1.0
Category:	downloaded
Size (bytes):	11460
Entropy (8bit):	7.9805817139985376
Encrypted:	false
SSDEEP:	192:gcKmVlpfcVl69G2Tpf6yqgkPlNRYpN/JtQEm7BjgwNti+x7fOe8gtu6gyx1HpNOn:gcpq49GKf6yqgaYNBeNU+xSlgtu6bbhy
MD5:	530281CA203B403BA954D0652EB4072F
SHA1:	51A62F96562FF94B45A02AEE4476ABB3518DA3BD
SHA-256:	B938A950C28B1CEC409F935D79A2FAADD658BB6A461CA3EE8E2F6E2D716511F5
SHA-512:	30F8569A091A2007B47AA25BBE04AEF663E2F6D161363A4D9FD696A913E7135FE42B6A5CF8D732BE316EE82C9D53F3DEA0DAF37230EE0288E32827E2FD6051DF
Malicious:	false
Reputation:	low
URL:	http://d38psrni17bvxu.cloudfront.net/fonts/Port_Lligat_Slab/latin.woff2
Preview:	wOF2......,.......v...,l............................\.(.`..D...........,..6.$..T. .....Q.\|Y.".8../.........!y"C....DL.. ..RyB...[.r....ly.aJ.`....f.3.m.Or....f.#.......D..J.Ra` b4b..N.q.m..tQ}..zH.......U.C#_.U...@...#...j....kN~>@a.K^.N;.N~.....t.....?u..:.].....^..@.C....f.u.HH...Dt@l..S.3.......rj3.m..&K...)V.]..x ..u..-..2c..'..>......;.:.U?T@..[>.a..F.r..2._.._.}..,..v.v...u..E..Ry:@.S:'%.....i...9..uu[5.OO.{mV.\m..f\......R.8...].5.#0i.^.4.0...E.....=.. .x....qs....{"c..8.....+.N....xn.s.F..............4.7.h.S..Y.g$..Ud......6b...4;.....!.Y.X...8.$K..J M..,9.l.&........g`<...;....V.U..F..6...f.\Q6C...Tp#.b..@..!..\&.ep....f.M0.(...!.......w. .g.9o>......F...$...u0`;.%\|Ii.....X.f....5 ..r2(..v..h%F.F..l<......hv..'.....#I.JI!>./...s....r.......:.....AQ...8./......:x...#&7...u.@...,.............7.3qv..u../.u............n..Z;..T.O.......(.q..v....S(......a.=..}x.C.%.$b..O..7G.H....VZc+.k..H.&..Ky.d.....1N..v.f.M.[`..';:. .!...R.-/.t$.U...@.c......A..R2.S..:..

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	13031
Entropy (8bit):	4.029383106648655
Encrypted:	false
SSDEEP:	192:LgNs1dLHufKMbevaqEFOCXsTUqGseIa56ETdRRVUoiL98WdsZ:Lg8VHWgPXGsLaYE5R4bL9m
MD5:	4E4073589578C3728DC5C606033CE657
SHA1:	7C8D18A1490D6432D67B522256F8FF9E37073C64
SHA-256:	73BF546089D59A8E9E88F4555081D38EB555B009B67B37AB758AA6D08EAE030C
SHA-512:	7C8B84ACDA631C3315CF75E5F447B3D42393909324561226B51852C171DBFC5523DC053A0FE9A2B421F17F579BBD6FA2DDD8D7E74EECD62051161BAB2A03BB9D
Malicious:	false
Reputation:	low
URL:	https://cdn.gohealth.com/lead-generation-sites/medicare/trustpilot-logo.1716278912.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="106.999893px" height="26.2684465px" viewBox="0 0 106.999893 26.2684465" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>trustpilot-logo</title>. <g id="Final" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="V1---MOBILE---Agent" transform="translate(-1119.000036, -676.000036)">. <g id="trustpilot-logo" transform="translate(1119.000000, 676.000000)">. <path d="M101.311095,13.0004822 L102.934107,13.0004822 L102.934107,10.0758155 L105.074107,10.0758155 L105.074107,12.9826488 L106.999929,12.9826488 L106.999929,14.5698155 L105.074107,14.5698155 L105.074107,19.7414822 C105.074107,19.9733155 105.091762,20.1516488 105.109774,20.3299822 C105.127429,20.4904822 105.180929,20.6331488 105.234429,20.7401488 C105.305762,20.8471488 105.412762,20.9363155 105.537595,20.9898155 C105.680262,21.0433155 105.858595,21.0789822 106.108262,21.07898

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 53756, version 1.0
Category:	downloaded
Size (bytes):	53756
Entropy (8bit):	7.994463739067149
Encrypted:	true
SSDEEP:	768:QCtSk99sWHe9byi59DURpUieZdvVZAb3qGI5VmCQ2fIE84mzRZzzR:j3X+Ai59UjUiyZsWGIKCm
MD5:	43741C5490AF0C4C36C08B70B86E4EEE
SHA1:	DDF0E1762D4D76D9FEE6A4F6EC70AA134837E8C4
SHA-256:	722167345499344AFBD2E2826C267FF842BCB49AB59FF3E13014A2752E058D9B
SHA-512:	7C3846ACFD9A76C5748EE2642C9BA66572CAC2F49CE120A10493BCB6808D6E17B856672C32E808C13F771796D5710AB3805995C5E63D6AC4B2D601879A87BFFF
Malicious:	false
Reputation:	low
URL:	https://use.typekit.net/af/457df2/0000000000000000774d56f5/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n4&v=3
Preview:	wOF2OTTO........................................F...s?DYNA.....?GDYN.y...P...D.`..&.6.$..Z....Y. [.....<.8..t..d...uDM..PUUUUU.K.8.m{U.....'?..~.?..?.......................\.0-.q=..AI.{..0....S...N.".e.m..-TWe7..7&.N....2.-...z....&0g..j"......9l;...@...f.W..F.g......}...-]..y^7.4...cSK..y..9pM. .R..PY...AP...j..R..c..9....f...X...../...<?.?.7....6...#.......~...w..~x@......".:.b........h..v.T.f..Nr.:..Y..n.'...w5....ci`.X.c.. .......e-.v...c.Tq.C(5$.\Y...9..x.....'...O.6..H...P. ...D.A..J.Ke...p.....c.`...SPY.Z....\z......7M...;.v....!..:bU!xZ..Z...@...!.P..j4...s.w.g..W..:.............4g......KwG.6.djJ.P.C4Xp..l..cA.R..:Pq..oz.....q...,.P..X fDT.1.PQ.......7`9v..R....'E...59!.9{.y...`a.S.....h..*2......=...l.e...0@....q..:i.............._.p..{T..sL.Dm.d... ....N{...Mb..3..Z....f.g..H.)"...Y...+A........b.]v..-.$...-)b.]vyK.xK{..k..v.v...$...X.PT....X.."^...y....~...}......p...kV]?.......yZK.m&.._.........U....l..Q.{S.........(..IG

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (18613)
Category:	downloaded
Size (bytes):	42406
Entropy (8bit):	5.427064277806759
Encrypted:	false
SSDEEP:	768:2iCpaAmkfDkDyDqnNDI3DREfU+Zw+AM7FkCya8wcr:FWjvoxr8Lr
MD5:	CECEA89427B1B11AD8EA933469D0DCA5
SHA1:	DCF1F6D750B2283845EC0720A42B243FD7DC090B
SHA-256:	AB0739C687CE90AC06A0BADFCEDF3D9E81EBC58059E0670D64C884020E626C28
SHA-512:	7779C6ADD1E835E6D97C5BCA5AE23AD0BF1E32606BCAAF17CF2CE80E5BC1E0D79C2974C1CF6C5C2CAFFA9B11692CB7294B9B8B69B63B19B38E8D5EE998664A33
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&sct=ID%3Dc2d96085edb8c52a%3AT%3D1736464913%3ART%3D1736464913%3AS%3DALNI_MYPZC8TKmtU-_fM69ccp9F25OCunQ&sc_status=6&hl=en&rpbu=http%3A%2F%2Fapi.myuhchvision.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTI2LjI2MDl8NjIzYzkxMDZmNjA5NGYyZWI5YWIxZjc0ZTk1MzgwZjM4MjNiZTI4Ynx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%253D%253D&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2541811284092968&q=United%20Healthcare%20Medicare&afdt=ChMIpK7J8uPpigMVqoX9Bx1cfACQEmoBlLqpjxgmjCzROndp4cIsoUpMclKqzmCF8A4idqYAc6BRFXzqpQZr5mHskq-o8oROHsWon_E3VNBfAnPv0EnTUZ4xhapxEHMsWhLX36L28YhUgQYpSE5TWYluVMNln-ErnASvWEH_lO70IAE&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717107&format=n3&ad=n3&nocache=9231736464925879&num=0&output=afd_ads&domain_name=api.myuhchvision.com&v=3&bsl=8&pac=0&u_his=2&u_tz=-300&dt=1736464925879&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=754&frm=0&uio=-&cont=ads&drt=0&jsid=caf&nfp=1&jsv=712519386&rurl=http%3A%2F%2Fapi.myuhchvision.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTA5Ljc3OTR8NmE2MDdhMzFkNzdlNzA2ZmVjOTAwNjczMmM0NDE0NDJjODU1MzliZXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%253D%253D%26query%3DUnited%2BHealthcare%2BMedicare%26afdToken%3DChMIpK7J8uPpigMVqoX9Bx1cfACQEmoBlLqpjxgmjCzROndp4cIsoUpMclKqzmCF8A4idqYAc6BRFXzqpQZr5mHskq-o8oROHsWon_E3VNBfAnPv0EnTUZ4xhapxEHMsWhLX36L28YhUgQYpSE5TWYluVMNln-ErnASvWEH_lO70IAE%26pcsa%3Dfalse%26nb%3D0%26nm%3D7%26nx%3D264%26ny%3D69%26is%3D530x496%26clkt%3D3%26suid%3D32397724909&referer=https%3A%2F%2Fsyndicatedsearch.goog%2F
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5268)
Category:	downloaded
Size (bytes):	300209
Entropy (8bit):	5.563078360938059
Encrypted:	false
SSDEEP:	3072:qzK2+EG+3Iw/OH42lrl094Q1A5yCOA7LcGJ84x94cqxSTnhsGZpDYbI:yy+3IsOHPcSVUaTv4fSTnhsGZhh
MD5:	2CEDCCD36916DA386BDFDC2972D583E3
SHA1:	E318E236621F42E6F5D5311CE8E58A8AA1A9BC0E
SHA-256:	6FD390BB93F8125E34BE21B7F975D3462FB14792075A6F06A52F4E56364695B8
SHA-512:	7008BC7D5BFB04207F06F598817FE1A68E49E5F42A0AD22D37288B174A0A744A9B65E90CBCB3484FF95E18E40139D55671DAEE625AEA80B4C6564A8DBF255057
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=AW-408830293&l=dataLayer&cx=c&gtm=45He5190h2v841278742za200
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_ads_datatos","priority":16,"vtp_instanceDestinationId":"AW-408830293","tag_id":10},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regi

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1895)
Category:	downloaded
Size (bytes):	147115
Entropy (8bit):	5.528363051284763
Encrypted:	false
SSDEEP:	1536:Xj4EEHxzJkfKnTi/cteUEOKl16X5II615nUnU/WD3g78JSzg2SmAtGFUI/+r9334:SKl1KII6fXsS2mpB+N3QgHMOYXQzG
MD5:	1C4F86539BF9DADEDED2576F3E4275FD
SHA1:	6B1842F056147E15FD8A6EE004BF99872D94DFD6
SHA-256:	B2F74E63D591F1B85E69C9A9700B887AC77EC70606D7D7770FC66676E768C7AA
SHA-512:	A4B94B200C313B1F2D2AECE9015D674A1911061DE38131F41D1302651BC7E80BD8679237023CD3C81A4A010BAD629F76AF484D83AE6022047AE3520D6B441EA2
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/adsense/domains/caf.js?pac=0
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"5942599812270562725",packages:"domains",module:"ads",version:"1",m:{cei:"17301431,17301433,17301436,17301548,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_chatbot_aa":500,"afs_gpp_api":0,"disable_usp_api":10,"heterodyne_test":851,

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	15654
Entropy (8bit):	4.310398179778066
Encrypted:	false
SSDEEP:	384:dy/cKYnHy5gYxTiMom6MomxMomkMomPMomG:GcDHyGYxTiG6GxGkGPGG
MD5:	991D81BD709D8CBE593EFACCDCED2EFF
SHA1:	7E4650EA3EFD117D501393512915A744F2F312A9
SHA-256:	3F934C76F543F1D7B2C5ED14DA0AC1496E82837CA81B6B4616C73B0769D62A5C
SHA-512:	BEA615AD22456FED73FC4B227EAE9678D7B42977C3CEC54C61E3781DDF496C284459C8CB53EA7CA6C3AEFF7856F8DB05DBBE7F05FD881937179E04CEF3161BF8
Malicious:	false
Reputation:	low
URL:	https://cdn.gohealth.com/lead-generation-sites/medicare/verified.1716283293.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="166.148px" height="18px" viewBox="0 0 166.148 18" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>verified</title>. <g id="Final" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="verified">. <g id="Verified" transform="translate(125.000000, 5.000000)" fill="#6C6C85" fill-rule="nonzero">. <polygon id="Path" points="4.308 8.664 7.356 0.096 6.168 0.096 3.696 7.524 3.672 7.524 1.224 0.096 0 0.096 3.012 8.664"></polygon>. <path d="M12.148,4.968 L8.584,4.968 C8.6,4.728 8.652,4.502 8.74,4.29 C8.828,4.078 8.948,3.892 9.1,3.732 C9.252,3.572 9.434,3.446 9.646,3.354 C9.858,3.262 10.096,3.216 10.36,3.216 C10.616,3.216 10.85,3.262 11.062,3.354 C11.274,3.446 11.458,3.57 11.614,3.726 C11.77,3.882 11.894,4.068 11.986,4.284 C12.078,4.5 12.132,4.728 12.148,4.968 Z M13.132,6.696 L12.124,6.696 C12.036,7.104 11.854,7.408 11.578,

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	202
Entropy (8bit):	4.959516153576625
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5zMcG8N+nHFIKcvXUyqlfQrFuHkX1BcU/Lpzd0waxVA9+UCsRaOy:tI9mc4slzMnlG+qRIGLp+t49rB4Z7
MD5:	CA543D8A57515596482A871320D39416
SHA1:	831CF1C9B368788C1B0E95101B374E45A049D807
SHA-256:	9973AA5DFEF3AC419284FA92E6F088D448B6BECF28114492195EC74E481C9AD6
SHA-512:	C3A07E9376FA080EA28B18C4203FD3E30BB7BEAC937D9F76E42B75AC032AFD75C584CD1824F22D205EA45AA6712362BCB34163E4C5CE8BCAB110725B84370F69
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="23" height="22" viewBox="0 0 23 22" fill="none">. <path d="M6.20239 8.32434L11.7024 13.8243L17.2024 8.32434" stroke="#1B1D1F" stroke-width="2" />.</svg>

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45744), with no line terminators
Category:	dropped
Size (bytes):	45744
Entropy (8bit):	5.614963847051967
Encrypted:	false
SSDEEP:	768:XqOAyeWJyKqV/LgW8TmJVZhUoyy312yeFCQGUj/:XTL2F4SJvhUHylUPGUj
MD5:	08BBB776CE5EB539CFDED48DEA72AF08
SHA1:	0E72DC1AE8059D04D11C238934559E98690CE56E
SHA-256:	6BB89CD22225FF2C10290DAC9A4F442B02505F94B72BC18E2A03496D838A39DE
SHA-512:	B6CD32442A7C481410FF94F8F1F5FC52D4631FF35D0870716451AD0A44E1CCAFC4BF9B89BF75E13FD380A2B5F039AF8DB47F53DE57A36C1EA28A0207CFA93F28
Malicious:	false
Reputation:	low
Preview:	/! @build 151b1d71 @date 2024-10-17T15:41:41.713Z @generated 2024-12-11T21:27:30.583030648Z /!function(){"use strict";var r={8714:function(n,t,r){var a=r(9814),f=r(9402),d=r(8956),l=r(426),s=r(5423),m=r(450).t,v=r(1537).i;n.exports=function(i,c){var n=new Date,t=f(i.o.z9),r=l(i.v),e=s(r,i.X.zg,n),u=d(r,e,i.h,i.v,i.X,n),o=a(t,u,r,e,i.X.ze,n);return u.g(e.$),function(n,t,r){if(!c[n])return r(v("unknown action"));r=m(r);try{c[n](r,i,o,t)}catch(e){r(v(e.message,{z10:e.name}))}}}},6145:function(n,t,r){var b=r(9340).C,h=r(9790),x=r(8714),y=r(1374),w=r(2132),g=r(7725),$=r(4664),C=r(7950).F,F=r(1537).v,k=r(7788),Z=r(8783),z=r(7062),R=r(450).k,Y=r(8546);n.exports=function(n,t,r,e){var i,t=R($.Z(C(Y)),t),c=g(w(n,t,b),{debug:!0}),u={R:!1},o={Y:u,X:t,o:n,v:c,N:Z(),h:y(c,u)},a=k(c),f=r,d=[];for(i in e)e.hasOwnProperty(i)&&(f[i]=e[i],d.push(i));for(var l=x(o,f),s=[],m=(c("app",h.G,{acid:n.acid,zn:"151b1d71",zo:+new Date,zp:1729179701713,ver:o.X.ver,zq:u}),!1),v=function(r,n){switch(r){case"enforce

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (55897), with NEL line terminators
Category:	dropped
Size (bytes):	138980
Entropy (8bit):	5.40509343289392
Encrypted:	false
SSDEEP:	1536:Y3XHpZ0JwDkoZDgRA5RC/Zk5ox40ELRLRqIP60wZ3680/IKwI1WJMEfXhYfaU:gHz0JwDkfR8RC/Oox40HIP6ybE+1
MD5:	2E2A6748D45FEC47E5783039F1DA1E31
SHA1:	19DD72476412941E228EEBE440600D18E331D451
SHA-256:	49ACF2B9718F0A50582CDA0AEC815D3A861777EBEE8C942E33E1E4CEA1BD2652
SHA-512:	5F3B0CCE9A05F7D272B0506E902B0121D0FDA38FAA041EE3326EEE7230B0BC534D7258508D1ACCDF57A7085E5F3B514650F2C7ADF322E4DAF66CAAB8D91D8A9C
Malicious:	false
Reputation:	low
Preview:	!function(){window.LI={"appId":"a-06nm","advertiserId":67848,"sync":false,"euns":false,"identifiersToResolve":"_aalyticsuid,trc_cookie_storage,dtm_token,_pubcid,hid,muuid,globalTI_SID,ajs_user_id,_li_uuid,s_ecid,_shopify_y,gup_anonid,s_vi,IXWRAPPERLiveIntentIp,_parrable_id,tmguid,_sharedid,dsq__u,dsq__s","contextSelectors":"title,meta[name='description'],h1,link[rel='canonical']","contextElementsLength":5000}}();!function(){"use strict";var e="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function t(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}var n=function(e){try{return!!e()}catch(e){return!0}},r=!n((function(){var e=function(){}.bind();return"function"!=typeof e\|\|e.hasOwnProperty("prototype")})),o=r,i=Function.prototype,s=i.call,a=o&&i.bind.bind(s,s),l=o?a:function(e){return function(){return s.apply(e,arguments)}},c=function(e){return null==e},

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5552)
Category:	dropped
Size (bytes):	85289
Entropy (8bit):	5.46527363157299
Encrypted:	false
SSDEEP:	1536:R7hpwPCHM9ZVK01QYaKTZ02LKVsdmpyKcicIFs6jL7eb:R7Vs9ZVKBYaKj8wKcHIiR
MD5:	9B1BEB4865AF2A15ADEFEA849E56CCB5
SHA1:	B0D6B90FC0D4C799366588D259DCD527702ACE2F
SHA-256:	6085ED92CD5AA3E03E768CCF34184DA73CA8C792E3976E78C0E3BE888BF05D4C
SHA-512:	0CD72825D85C967DDAF1E899DA16B8073EE9CC64B37890D4A8E6E06C1BF2DF20C8D6525B9FDF13E1B7A5BDFEB6C6FA708085CB211DA8CF67B144A61DF33C1711
Malicious:	false
Reputation:	low
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 54632, version 1.0
Category:	downloaded
Size (bytes):	54632
Entropy (8bit):	7.994438171640586
Encrypted:	true
SSDEEP:	1536:1JJK7C1iYbptogNvKltg/dORiuTfqlDBoP9XUJ1pG1eylZp:ciFbptos/dImBUXqvG1eKv
MD5:	7E1CA43499322A058B6605F93EC33CD5
SHA1:	DCABC4BD0226527ADB4D5CD2D47149CD21284D60
SHA-256:	EEFC576D701F585ACFFA86E876CAC9C20B3E33BC64FE610194D3A83EB911A98B
SHA-512:	BB65717A66D28D653064B1A591BB5B30497E5F50FA673D309D6CF49EE1277CE39E67BA7D6CD959A7E04EC872A37C548E3149F7004904283E03117A2B4922C130
Malicious:	false
Reputation:	low
URL:	https://use.typekit.net/af/346587/0000000000000000774d56fa/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n7&v=3
Preview:	wOF2OTTO...h.....................................F...7?DYNA.....?GDYN.y...l...D.`..&.6.$..Z....S. [...<.N..d.....J....1..UUUUU.....WU....~._..7...?..?......................1...e;...[.8.$...h..?.Y..7.....yb.U..m}.i.:...R.F._......gf'.O.......~(m...I'.d5.-!0...qy....QdS&..E..v ....D................r.AM...b"XZ.c.(.HW..bHB.K.D...AQ...K.).d]....y.......<\|.../K.....S"N./..T..YE..}.x.<.._A...n&......._.\|..$..lp...+...b...(.....]2.L.o.....d.[.D...2.....C.......(.@.Q0...v..N...VQ1.. ..2......P.SA......m..z..1{...o..H$.<M......A.TiU].b..a)KQ..b.,+.X.).,..Q.h4........7.I..}.f...I....&...+..+A.U4...xj.A......4g..f......^..f...5Aj.j.I.5j..S.\.......;...}.I.U".5G..ULb^%X... ..$.Z..{.~......YeV.......n.8qbF.pbN.H.p....q.>.?4g...d,.D.......Tl.XE...].:U.m.v..lHCI...s...5H.../$a..7..?3fd.}Zl.Y.1....J..c...1.5...u...4T.c.3f.q..3.8c...3#.......ofXf..,..L.v..6."F....F...mS".....7.'N7N...F..1.Rj.?.k.9.=.H.Z.G...+.Q..s.eI..D7v....U.].+....O.T..._.

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	104
Entropy (8bit):	4.938031969793128
Encrypted:	false
SSDEEP:	3:HT8X8yuWthw0EY1sARTjthf15yp8V2oiCazKYo01n:QX89qdaOt1nypE22am8
MD5:	FFBC9EDA89EC283C091AB224753A93DE
SHA1:	53987230C1EC2CAA12036D01903D9D5CDDB01DDB
SHA-256:	64857D389720C3BA555D436692A38CAA29775BB626EB5B05E8BF246496D90324
SHA-512:	28FE1531D426DA3129AEF8EE369041C4B9FE142087CBBDD2FDA68952C8AD6CE3C4ECB104D98671E4204A55B63159EAF100E7708309394B6380001A2D69D840B1
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSEAnAh3qTsYv6YBIFDffBjZgSEAk3nxsedMB6OBIFDbuFQesSJQlhjNAGN7l9GxIFDXr2AKoSBQ2Pj560EgUNEg_8ahIFDXhvEhk=?alt=proto
Preview:	CgkKBw33wY2YGgAKCQoHDbuFQesaAAo0CgsNevYAqhoECAMYAQoLDY+PnrQaBAgFGAEKCw0SD/xqGgQIDRgBCgsNeG8SGRoECAkYAQ==

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45744), with no line terminators
Category:	downloaded
Size (bytes):	45744
Entropy (8bit):	5.614963847051967
Encrypted:	false
SSDEEP:	768:XqOAyeWJyKqV/LgW8TmJVZhUoyy312yeFCQGUj/:XTL2F4SJvhUHylUPGUj
MD5:	08BBB776CE5EB539CFDED48DEA72AF08
SHA1:	0E72DC1AE8059D04D11C238934559E98690CE56E
SHA-256:	6BB89CD22225FF2C10290DAC9A4F442B02505F94B72BC18E2A03496D838A39DE
SHA-512:	B6CD32442A7C481410FF94F8F1F5FC52D4631FF35D0870716451AD0A44E1CCAFC4BF9B89BF75E13FD380A2B5F039AF8DB47F53DE57A36C1EA28A0207CFA93F28
Malicious:	false
Reputation:	low
URL:	https://utt.impactcdn.com/A4782568-7cfe-4f0c-8bd3-4f4c594e53291.js
Preview:	/! @build 151b1d71 @date 2024-10-17T15:41:41.713Z @generated 2024-12-11T21:27:30.583030648Z /!function(){"use strict";var r={8714:function(n,t,r){var a=r(9814),f=r(9402),d=r(8956),l=r(426),s=r(5423),m=r(450).t,v=r(1537).i;n.exports=function(i,c){var n=new Date,t=f(i.o.z9),r=l(i.v),e=s(r,i.X.zg,n),u=d(r,e,i.h,i.v,i.X,n),o=a(t,u,r,e,i.X.ze,n);return u.g(e.$),function(n,t,r){if(!c[n])return r(v("unknown action"));r=m(r);try{c[n](r,i,o,t)}catch(e){r(v(e.message,{z10:e.name}))}}}},6145:function(n,t,r){var b=r(9340).C,h=r(9790),x=r(8714),y=r(1374),w=r(2132),g=r(7725),$=r(4664),C=r(7950).F,F=r(1537).v,k=r(7788),Z=r(8783),z=r(7062),R=r(450).k,Y=r(8546);n.exports=function(n,t,r,e){var i,t=R($.Z(C(Y)),t),c=g(w(n,t,b),{debug:!0}),u={R:!1},o={Y:u,X:t,o:n,v:c,N:Z(),h:y(c,u)},a=k(c),f=r,d=[];for(i in e)e.hasOwnProperty(i)&&(f[i]=e[i],d.push(i));for(var l=x(o,f),s=[],m=(c("app",h.G,{acid:n.acid,zn:"151b1d71",zo:+new Date,zp:1729179701713,ver:o.X.ver,zq:u}),!1),v=function(r,n){switch(r){case"enforce

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5178), with no line terminators
Category:	dropped
Size (bytes):	5178
Entropy (8bit):	5.8755515435417855
Encrypted:	false
SSDEEP:	96:1g2VilZtckx+9DgTlPJdiLW+iSah8vf1dtzlTa2VqRvKq:12cV9sT3AW7NIz7VIvKq
MD5:	9AC971DC5AB347E3AD79594CAB510FD6
SHA1:	7859267C9669D7FFFDB5153D41EA70817032D6CB
SHA-256:	2CBD29C8A72A642F30FB080B9BAA7A2D971244D2C18E3C7609BFA20E898BAC30
SHA-512:	08B9099E084B9FCDF9D7DFDF76B09D3D503E96AD6D92A2895BCE07A2D7DB400DF10464A5E582326B0EDABB0D0F66E580BCD7652FD6584ECB2CB91B8410735610
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var h=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function k(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} var m=k(this),n=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",q={},t={};function u(a,b,c){if(!c\|\|a!=null){c=t[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} function v(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],g;!a&&e in q?g=q:g=m;for(e=0;e<d.length-1;e++){var f=d[e];if(!(f in g))break a;g=g[f]}d=d[d.length-1];c=n&&c==="es6"?g[d]:null;b=b(c);b!=null&&(a?h(q,d,{configurable:!0,writable:!0,value:b}):b!==c&&(t[d]===void 0&&(a=Math.random()*1E9>>>0,t[d]=n?m.Symbol(d):"$jscp$"+a+"$"+d),h(g,t[d],{co

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10664), with no line terminators
Category:	downloaded
Size (bytes):	10664
Entropy (8bit):	5.44836607334764
Encrypted:	false
SSDEEP:	192:Y5iMtOJ8r/beYyWKEGmOiEzBDda0GguglM0KsdE6:Y3Y8r7ZKNmOiEz7+guglMWj
MD5:	5F3F3D824ECEBFDFAD8770D91ACF5E41
SHA1:	1409D4E5438CC21A340889F596C22E5B4A3552EF
SHA-256:	1AF3FDFF3B4C701DA9BD8076E93EA5254247B6AC1F9134DC9B0980B3C1E8293E
SHA-512:	453F62C4006683CBBCEC4A0F30C3BA5981E9450421C699281A159E26445CD37BCADB7EF9A55557E9EFDAD93E032EC91D1534CABE095D106DB32FA66177E7131F
Malicious:	false
Reputation:	low
URL:	https://medicare.gohealth.com/_next/static/chunks/pages/medicare-marketplace-6d439b8e5c426b00.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[7187],{65404:function(e,t,n){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/medicare-marketplace",function(){return n(1878)}])},54636:function(e,t,n){"use strict";n.d(t,{v:function(){return returningCustomerFlow}});var i=n(46425),a=n(52045),returningCustomerFlow=function(){return{animation:"toggle",sections:[{animation:"slide",sections:[a.V,i.$D,a.j]}]}}},99828:function(e,t,n){"use strict";n.d(t,{P:function(){return AgeRangeSection}});var i=n(52322),a=n(2784),o=n(75841),s=n(97438),r=n(2684),AgeRangeSection=function(e){var t=(0,s.$G)("common").t,n=(0,a.useMemo)(function(){return[{label:t("ageRange.under60","Under 60"),value:o.gzN.UNDER_60},{label:"60 - 69",value:o.gzN.OVER_60},{label:"70 - 79",value:o.gzN.OVER_70},{label:"80 +",value:o.gzN.OVER_80_PLUS}]},[t]);return(0,i.jsx)(r.bo,{onSubmit:function(t,n){e.goToSection(e.nextSectionName,{partialContactInfoEventData:{custom_question_ageRange_value:t,custom_question_ageRange_label:n}}

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-10T00:22:20.107615+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.10	50017	35.71.185.236	443	TCP
2025-01-10T00:22:27.468392+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.10	50141	216.239.34.181	443	TCP
2025-01-10T00:22:27.670355+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.10	50140	142.250.186.130	443	TCP
2025-01-10T00:22:27.764412+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.10	50143	142.250.186.130	443	TCP
2025-01-10T00:22:29.240439+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.10	50171	64.202.112.31	443	TCP
2025-01-10T00:22:29.243918+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.10	50169	34.231.219.101	443	TCP
2025-01-10T00:22:30.409691+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.10	50188	64.202.112.127	443	TCP
2025-01-10T00:22:30.514042+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.10	50197	151.101.65.44	443	TCP
2025-01-10T00:22:31.262144+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.10	50206	3.130.114.26	443	TCP
2025-01-10T00:22:31.407437+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.10	50204	142.250.74.196	443	TCP
2025-01-10T00:22:31.475793+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.10	50208	142.250.74.196	443	TCP
2025-01-10T00:22:31.476405+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.10	50201	141.226.228.48	443	TCP
2025-01-10T00:22:32.008528+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.10	50212	3.131.211.191	443	TCP
2025-01-10T00:22:32.322570+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.10	50216	172.217.16.196	443	TCP
2025-01-10T00:22:32.385636+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.10	50222	172.217.16.196	443	TCP
2025-01-10T00:22:32.516673+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.10	50224	216.239.34.181	443	TCP
2025-01-10T00:22:33.994923+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.10	50232	141.226.228.48	443	TCP
2025-01-10T00:22:36.630061+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.10	50258	142.250.74.196	443	TCP
2025-01-10T00:22:36.845332+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.10	50260	142.250.74.196	443	TCP
2025-01-10T00:22:37.490806+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.10	50264	172.217.16.196	443	TCP
2025-01-10T00:22:37.688877+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.10	50265	172.217.16.196	443	TCP
2025-01-10T00:22:39.941223+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.10	50266	141.226.228.48	443	TCP
2025-01-10T00:22:48.017496+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.10	50282	142.250.74.196	443	TCP
2025-01-10T00:22:48.878651+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.10	50284	172.217.16.196	443	TCP
2025-01-10T00:22:51.898479+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.10	50286	141.226.228.48	443	TCP
2025-01-10T00:22:56.884288+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.10	50294	142.250.74.196	443	TCP
2025-01-10T00:22:57.871706+0100	2022112	ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015	1	192.168.2.10	50296	172.217.16.196	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 10, 2025 00:21:34.355587959 CET	49671	443	192.168.2.10	204.79.197.203
Jan 10, 2025 00:21:35.261889935 CET	49675	443	192.168.2.10	173.222.162.55
Jan 10, 2025 00:21:35.261924028 CET	49674	443	192.168.2.10	173.222.162.55
Jan 10, 2025 00:21:39.168106079 CET	49671	443	192.168.2.10	204.79.197.203
Jan 10, 2025 00:21:39.491475105 CET	49677	443	192.168.2.10	20.42.65.85
Jan 10, 2025 00:21:39.792943954 CET	49677	443	192.168.2.10	20.42.65.85
Jan 10, 2025 00:21:40.402364016 CET	49677	443	192.168.2.10	20.42.65.85
Jan 10, 2025 00:21:41.605499029 CET	49677	443	192.168.2.10	20.42.65.85
Jan 10, 2025 00:21:44.017167091 CET	49677	443	192.168.2.10	20.42.65.85
Jan 10, 2025 00:21:44.861073017 CET	49674	443	192.168.2.10	173.222.162.55
Jan 10, 2025 00:21:44.861088037 CET	49675	443	192.168.2.10	173.222.162.55
Jan 10, 2025 00:21:46.324033976 CET	49738	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:21:46.324068069 CET	443	49738	142.250.74.196	192.168.2.10
Jan 10, 2025 00:21:46.324122906 CET	49738	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:21:46.324383974 CET	49738	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:21:46.324398994 CET	443	49738	142.250.74.196	192.168.2.10
Jan 10, 2025 00:21:46.985549927 CET	443	49738	142.250.74.196	192.168.2.10
Jan 10, 2025 00:21:46.988878965 CET	49738	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:21:46.988903046 CET	443	49738	142.250.74.196	192.168.2.10
Jan 10, 2025 00:21:46.990045071 CET	443	49738	142.250.74.196	192.168.2.10
Jan 10, 2025 00:21:46.990108967 CET	49738	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:21:46.997243881 CET	49738	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:21:46.997375011 CET	443	49738	142.250.74.196	192.168.2.10
Jan 10, 2025 00:21:47.048404932 CET	49738	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:21:47.048435926 CET	443	49738	142.250.74.196	192.168.2.10
Jan 10, 2025 00:21:47.090298891 CET	49738	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:21:48.776650906 CET	49671	443	192.168.2.10	204.79.197.203
Jan 10, 2025 00:21:48.823519945 CET	49677	443	192.168.2.10	20.42.65.85
Jan 10, 2025 00:21:49.171341896 CET	49758	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:21:49.171600103 CET	49759	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:21:49.176193953 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:21:49.176317930 CET	49758	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:21:49.176460981 CET	80	49759	185.53.177.50	192.168.2.10
Jan 10, 2025 00:21:49.176461935 CET	49758	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:21:49.176665068 CET	49759	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:21:49.181216002 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:21:49.875560999 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:21:49.875600100 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:21:49.875612020 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:21:49.875674963 CET	49758	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:21:49.875822067 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:21:49.875833988 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:21:49.875847101 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:21:49.875857115 CET	49758	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:21:49.875859976 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:21:49.876431942 CET	49758	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:21:49.924096107 CET	49758	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:21:49.971296072 CET	49764	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:21:49.971326113 CET	443	49764	52.222.236.17	192.168.2.10
Jan 10, 2025 00:21:49.971596003 CET	49765	80	192.168.2.10	185.53.178.30
Jan 10, 2025 00:21:49.971604109 CET	49764	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:21:49.972449064 CET	49764	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:21:49.972462893 CET	443	49764	52.222.236.17	192.168.2.10
Jan 10, 2025 00:21:49.978784084 CET	80	49765	185.53.178.30	192.168.2.10
Jan 10, 2025 00:21:49.978874922 CET	49765	80	192.168.2.10	185.53.178.30
Jan 10, 2025 00:21:49.979034901 CET	49765	80	192.168.2.10	185.53.178.30
Jan 10, 2025 00:21:49.985450983 CET	80	49765	185.53.178.30	192.168.2.10
Jan 10, 2025 00:21:50.637271881 CET	80	49765	185.53.178.30	192.168.2.10
Jan 10, 2025 00:21:50.647840023 CET	49758	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:21:50.655778885 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:21:50.658062935 CET	49770	80	192.168.2.10	185.53.178.30
Jan 10, 2025 00:21:50.664665937 CET	80	49770	185.53.178.30	192.168.2.10
Jan 10, 2025 00:21:50.664772987 CET	49770	80	192.168.2.10	185.53.178.30
Jan 10, 2025 00:21:50.664920092 CET	49770	80	192.168.2.10	185.53.178.30
Jan 10, 2025 00:21:50.671356916 CET	80	49770	185.53.178.30	192.168.2.10
Jan 10, 2025 00:21:50.684118032 CET	49765	80	192.168.2.10	185.53.178.30
Jan 10, 2025 00:21:50.693774939 CET	443	49764	52.222.236.17	192.168.2.10
Jan 10, 2025 00:21:50.694015026 CET	49764	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:21:50.694024086 CET	443	49764	52.222.236.17	192.168.2.10
Jan 10, 2025 00:21:50.695043087 CET	443	49764	52.222.236.17	192.168.2.10
Jan 10, 2025 00:21:50.695092916 CET	49764	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:21:50.696399927 CET	49764	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:21:50.696520090 CET	443	49764	52.222.236.17	192.168.2.10
Jan 10, 2025 00:21:50.696569920 CET	49764	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:21:50.739327908 CET	443	49764	52.222.236.17	192.168.2.10
Jan 10, 2025 00:21:50.751873016 CET	49764	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:21:50.751897097 CET	443	49764	52.222.236.17	192.168.2.10
Jan 10, 2025 00:21:50.793524027 CET	49764	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:21:50.847183943 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:21:50.865000963 CET	49776	80	192.168.2.10	18.66.121.190
Jan 10, 2025 00:21:50.871537924 CET	80	49776	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:50.871623993 CET	49776	80	192.168.2.10	18.66.121.190
Jan 10, 2025 00:21:50.871753931 CET	49777	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:21:50.871886015 CET	49776	80	192.168.2.10	18.66.121.190
Jan 10, 2025 00:21:50.878489971 CET	80	49777	185.53.177.50	192.168.2.10
Jan 10, 2025 00:21:50.878541946 CET	49777	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:21:50.878801107 CET	49777	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:21:50.879101038 CET	80	49776	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:50.883016109 CET	49758	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:21:50.885344982 CET	80	49777	185.53.177.50	192.168.2.10
Jan 10, 2025 00:21:50.889966011 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:21:50.904577971 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:50.904608011 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:50.904797077 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:50.905123949 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:50.905141115 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:50.969500065 CET	443	49764	52.222.236.17	192.168.2.10
Jan 10, 2025 00:21:50.969532013 CET	443	49764	52.222.236.17	192.168.2.10
Jan 10, 2025 00:21:50.969546080 CET	443	49764	52.222.236.17	192.168.2.10
Jan 10, 2025 00:21:50.969567060 CET	443	49764	52.222.236.17	192.168.2.10
Jan 10, 2025 00:21:50.969573021 CET	443	49764	52.222.236.17	192.168.2.10
Jan 10, 2025 00:21:50.969577074 CET	443	49764	52.222.236.17	192.168.2.10
Jan 10, 2025 00:21:50.969592094 CET	49764	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:21:50.969618082 CET	443	49764	52.222.236.17	192.168.2.10
Jan 10, 2025 00:21:50.969630003 CET	49764	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:21:50.969676018 CET	49764	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:21:50.969702005 CET	49764	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:21:51.051204920 CET	443	49764	52.222.236.17	192.168.2.10
Jan 10, 2025 00:21:51.051234961 CET	443	49764	52.222.236.17	192.168.2.10
Jan 10, 2025 00:21:51.051322937 CET	49764	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:21:51.051350117 CET	443	49764	52.222.236.17	192.168.2.10
Jan 10, 2025 00:21:51.051373959 CET	49764	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:21:51.051407099 CET	49764	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:21:51.056157112 CET	443	49764	52.222.236.17	192.168.2.10
Jan 10, 2025 00:21:51.056183100 CET	443	49764	52.222.236.17	192.168.2.10
Jan 10, 2025 00:21:51.056226015 CET	49764	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:21:51.056236029 CET	443	49764	52.222.236.17	192.168.2.10
Jan 10, 2025 00:21:51.056279898 CET	49764	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:21:51.056298971 CET	49764	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:21:51.084283113 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:21:51.090363026 CET	49779	80	192.168.2.10	18.66.121.190
Jan 10, 2025 00:21:51.095169067 CET	80	49779	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:51.095232964 CET	49779	80	192.168.2.10	18.66.121.190
Jan 10, 2025 00:21:51.095424891 CET	49779	80	192.168.2.10	18.66.121.190
Jan 10, 2025 00:21:51.100198984 CET	80	49779	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:51.136075974 CET	443	49764	52.222.236.17	192.168.2.10
Jan 10, 2025 00:21:51.136097908 CET	443	49764	52.222.236.17	192.168.2.10
Jan 10, 2025 00:21:51.136149883 CET	49764	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:21:51.136179924 CET	443	49764	52.222.236.17	192.168.2.10
Jan 10, 2025 00:21:51.136208057 CET	49764	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:21:51.136221886 CET	49764	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:21:51.137145996 CET	49758	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:21:51.137373924 CET	443	49764	52.222.236.17	192.168.2.10
Jan 10, 2025 00:21:51.137391090 CET	443	49764	52.222.236.17	192.168.2.10
Jan 10, 2025 00:21:51.137464046 CET	49764	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:21:51.137471914 CET	443	49764	52.222.236.17	192.168.2.10
Jan 10, 2025 00:21:51.137604952 CET	49764	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:21:51.139242887 CET	443	49764	52.222.236.17	192.168.2.10
Jan 10, 2025 00:21:51.139259100 CET	443	49764	52.222.236.17	192.168.2.10
Jan 10, 2025 00:21:51.139317989 CET	49764	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:21:51.139328003 CET	443	49764	52.222.236.17	192.168.2.10
Jan 10, 2025 00:21:51.139642000 CET	49764	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:21:51.140232086 CET	443	49764	52.222.236.17	192.168.2.10
Jan 10, 2025 00:21:51.140300989 CET	49764	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:21:51.140301943 CET	443	49764	52.222.236.17	192.168.2.10
Jan 10, 2025 00:21:51.142584085 CET	49764	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:21:51.142796040 CET	49764	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:21:51.142807961 CET	443	49764	52.222.236.17	192.168.2.10
Jan 10, 2025 00:21:51.155158997 CET	49780	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:21:51.155185938 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:51.155320883 CET	49780	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:21:51.155575037 CET	49780	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:21:51.155586958 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:51.344118118 CET	80	49770	185.53.178.30	192.168.2.10
Jan 10, 2025 00:21:51.386737108 CET	49770	80	192.168.2.10	185.53.178.30
Jan 10, 2025 00:21:51.549369097 CET	80	49776	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:51.549381971 CET	80	49776	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:51.549393892 CET	80	49776	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:51.549402952 CET	80	49776	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:51.549413919 CET	80	49776	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:51.549424887 CET	80	49776	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:51.549433947 CET	80	49776	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:51.549455881 CET	49776	80	192.168.2.10	18.66.121.190
Jan 10, 2025 00:21:51.549462080 CET	80	49776	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:51.549474001 CET	80	49776	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:51.549485922 CET	80	49776	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:51.549494028 CET	49776	80	192.168.2.10	18.66.121.190
Jan 10, 2025 00:21:51.549509048 CET	49776	80	192.168.2.10	18.66.121.190
Jan 10, 2025 00:21:51.549546003 CET	49776	80	192.168.2.10	18.66.121.190
Jan 10, 2025 00:21:51.550244093 CET	49781	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:51.550266981 CET	443	49781	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:51.550338030 CET	49781	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:51.550612926 CET	49781	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:51.550642014 CET	443	49781	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:51.566880941 CET	80	49777	185.53.177.50	192.168.2.10
Jan 10, 2025 00:21:51.583616018 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:51.583858967 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:51.583884954 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:51.584903002 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:51.584966898 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:51.585477114 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:51.585477114 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:51.585549116 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:51.617286921 CET	49777	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:21:51.626492977 CET	80	49776	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:51.626523018 CET	80	49776	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:51.626580000 CET	49776	80	192.168.2.10	18.66.121.190
Jan 10, 2025 00:21:51.630146980 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:51.630168915 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:51.644996881 CET	49783	80	192.168.2.10	18.66.121.190
Jan 10, 2025 00:21:51.649815083 CET	80	49783	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:51.649930000 CET	49783	80	192.168.2.10	18.66.121.190
Jan 10, 2025 00:21:51.650151968 CET	49783	80	192.168.2.10	18.66.121.190
Jan 10, 2025 00:21:51.655183077 CET	80	49783	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:51.682849884 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:51.757164001 CET	80	49779	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:51.757499933 CET	80	49779	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:51.757613897 CET	80	49779	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:51.757626057 CET	80	49779	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:51.757637978 CET	80	49779	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:51.757656097 CET	80	49779	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:51.757666111 CET	49779	80	192.168.2.10	18.66.121.190
Jan 10, 2025 00:21:51.757685900 CET	80	49779	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:51.757695913 CET	80	49779	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:51.757707119 CET	80	49779	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:51.757718086 CET	80	49779	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:51.757730961 CET	49779	80	192.168.2.10	18.66.121.190
Jan 10, 2025 00:21:51.757730961 CET	49779	80	192.168.2.10	18.66.121.190
Jan 10, 2025 00:21:51.757796049 CET	49779	80	192.168.2.10	18.66.121.190
Jan 10, 2025 00:21:51.846050978 CET	80	49779	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:51.846065998 CET	80	49779	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:51.846138954 CET	49779	80	192.168.2.10	18.66.121.190
Jan 10, 2025 00:21:51.871524096 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:51.871560097 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:51.871604919 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:51.871655941 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:51.871661901 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:51.871699095 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:51.871714115 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:51.871740103 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:51.871932030 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:51.871941090 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:51.872210979 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:51.872366905 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:51.872375011 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:51.876935005 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:51.877063990 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:51.877077103 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:51.882263899 CET	49788	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:51.882307053 CET	443	49788	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:51.882356882 CET	49788	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:51.882852077 CET	49788	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:51.882877111 CET	443	49788	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:51.883900881 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:51.883949995 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:51.883964062 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:51.916980982 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:51.917252064 CET	49780	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:21:51.917263031 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:51.918273926 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:51.918348074 CET	49780	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:21:51.919101000 CET	49780	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:21:51.919162989 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:51.919269085 CET	49780	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:21:51.937520981 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:51.960129976 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:51.960194111 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:51.960232019 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:51.960253000 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:51.960275888 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:51.960465908 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:51.960474968 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:51.963332891 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:51.965792894 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:51.965831995 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:51.965847969 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:51.965863943 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:51.965992928 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:51.967868090 CET	49780	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:21:51.967892885 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:51.972923040 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:51.980062962 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:51.980106115 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:51.980326891 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:51.980348110 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:51.980719090 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:51.986732960 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:51.992635012 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:51.992742062 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:51.992770910 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:51.992782116 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:51.992832899 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:51.998724937 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.004755020 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.004790068 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.004811049 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.004831076 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.004872084 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.010768890 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.011939049 CET	49780	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:21:52.016743898 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.016777039 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.016797066 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.016813993 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.016923904 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.016932011 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.048974037 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.049011946 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.049066067 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.049091101 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.049149036 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.049159050 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.049226046 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.049319029 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.049329042 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.049946070 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.049985886 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.050019026 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.050043106 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.050056934 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.050112009 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.055143118 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.057256937 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.057284117 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.060926914 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.061155081 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.061175108 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.067102909 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.067269087 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.067279100 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.072194099 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.072256088 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.072263002 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.077584028 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.077692986 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.077702045 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.083017111 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.083333969 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.083339930 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.088483095 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.088534117 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.088543892 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.093775988 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.093914032 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.093921900 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.098855972 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.099001884 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.099010944 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.103374004 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.103461027 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.103471041 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.107770920 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.107966900 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.107980013 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.112013102 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.112070084 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.112078905 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.116054058 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.116348982 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.116355896 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.120116949 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.120523930 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.120532990 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.124001026 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.124087095 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.124095917 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.127830029 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.127870083 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.127876997 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.132417917 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.132599115 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.132607937 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.135298967 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.135350943 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.135354042 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.135364056 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.135483027 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.139580965 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.141980886 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.142035961 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.142179966 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.142187119 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.142231941 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.147608995 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.152532101 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.152622938 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.152802944 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.152817011 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.153055906 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.154932022 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.156411886 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.156445980 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.156503916 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.156512976 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.158849955 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.160567045 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.160912037 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.160948038 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.160953999 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.160959959 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.161401033 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.161794901 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.162226915 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.162265062 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.162272930 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.162436962 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.162463903 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.162852049 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.162859917 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.162910938 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.163068056 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.164169073 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.164258003 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.164298058 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.164299011 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.183907032 CET	49778	443	192.168.2.10	216.58.212.132
Jan 10, 2025 00:21:52.183922052 CET	443	49778	216.58.212.132	192.168.2.10
Jan 10, 2025 00:21:52.198144913 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:52.198168993 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:52.198177099 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:52.198196888 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:52.198208094 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:52.198215008 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:52.198234081 CET	49780	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:21:52.198245049 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:52.198301077 CET	49780	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:21:52.266071081 CET	80	49783	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:52.266356945 CET	80	49783	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:52.266385078 CET	80	49783	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:52.266401052 CET	80	49783	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:52.266416073 CET	80	49783	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:52.266431093 CET	80	49783	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:52.266438007 CET	49783	80	192.168.2.10	18.66.121.190
Jan 10, 2025 00:21:52.266438007 CET	49783	80	192.168.2.10	18.66.121.190
Jan 10, 2025 00:21:52.266446114 CET	80	49783	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:52.266460896 CET	80	49783	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:52.266475916 CET	80	49783	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:52.266496897 CET	80	49783	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:52.266510010 CET	49783	80	192.168.2.10	18.66.121.190
Jan 10, 2025 00:21:52.266510010 CET	49783	80	192.168.2.10	18.66.121.190
Jan 10, 2025 00:21:52.266611099 CET	49783	80	192.168.2.10	18.66.121.190
Jan 10, 2025 00:21:52.272569895 CET	80	49783	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:52.282421112 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:52.282434940 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:52.282474995 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:52.282552958 CET	49780	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:21:52.282587051 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:52.282603025 CET	49780	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:21:52.282629013 CET	49780	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:21:52.288929939 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:52.288952112 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:52.289043903 CET	49780	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:21:52.289051056 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:52.289093971 CET	49780	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:21:52.323090076 CET	49783	80	192.168.2.10	18.66.121.190
Jan 10, 2025 00:21:52.352893114 CET	80	49783	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:52.352932930 CET	80	49783	18.66.121.190	192.168.2.10
Jan 10, 2025 00:21:52.353144884 CET	49783	80	192.168.2.10	18.66.121.190
Jan 10, 2025 00:21:52.367746115 CET	443	49781	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:52.371882915 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:52.371964931 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:52.371990919 CET	49780	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:21:52.372009039 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:52.372045040 CET	49780	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:21:52.372071028 CET	49780	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:21:52.373316050 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:52.373361111 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:52.373387098 CET	49780	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:21:52.373392105 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:52.373425961 CET	49780	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:21:52.373442888 CET	49780	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:21:52.374528885 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:52.374550104 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:52.374583960 CET	49780	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:21:52.374589920 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:52.374629974 CET	49780	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:21:52.376509905 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:52.376543045 CET	49780	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:21:52.376549006 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:52.376569033 CET	49780	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:21:52.376585960 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:52.376605034 CET	49780	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:21:52.376626015 CET	49780	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:21:52.418150902 CET	49781	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:52.473079920 CET	49781	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:52.473093987 CET	443	49781	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:52.474394083 CET	443	49781	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:52.474463940 CET	49781	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:52.477827072 CET	49781	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:52.477962971 CET	443	49781	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:52.488707066 CET	49781	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:52.488730907 CET	443	49781	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:52.526401043 CET	49780	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:21:52.528284073 CET	49780	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:21:52.528311968 CET	443	49780	52.222.236.26	192.168.2.10
Jan 10, 2025 00:21:52.530200005 CET	49781	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:52.534785032 CET	49790	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:52.534818888 CET	443	49790	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:52.535098076 CET	49790	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:52.535190105 CET	49790	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:52.535204887 CET	443	49790	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:52.554076910 CET	443	49788	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:52.554455042 CET	49788	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:52.554472923 CET	443	49788	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:52.556257010 CET	443	49788	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:52.556349039 CET	49788	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:52.557542086 CET	49788	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:52.557676077 CET	443	49788	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:52.569658041 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:52.569686890 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:52.569741964 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:52.569947004 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:52.569956064 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:52.610089064 CET	49788	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:52.610116959 CET	443	49788	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:52.658308983 CET	49788	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:52.680025101 CET	443	49781	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:52.680073977 CET	443	49781	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:52.680157900 CET	443	49781	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:52.680188894 CET	49781	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:52.680340052 CET	49781	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:52.681665897 CET	49781	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:52.681677103 CET	443	49781	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:52.698609114 CET	49797	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:52.698640108 CET	443	49797	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:52.698703051 CET	49797	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:52.700035095 CET	49797	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:52.700047970 CET	443	49797	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:52.706075907 CET	49798	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:52.706114054 CET	443	49798	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:52.706208944 CET	49798	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:52.706381083 CET	49798	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:52.706398964 CET	443	49798	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:53.186346054 CET	443	49790	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:53.186604023 CET	49790	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:53.186615944 CET	443	49790	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:53.187665939 CET	443	49790	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:53.187756062 CET	49790	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:53.188070059 CET	49790	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:53.188141108 CET	443	49790	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:53.188165903 CET	49790	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:53.188189030 CET	443	49790	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:53.234087944 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.234452963 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.234469891 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.235487938 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.235544920 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.236145973 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.236217976 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.236305952 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.236314058 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.242947102 CET	49790	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:53.242957115 CET	443	49790	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:53.291029930 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.291057110 CET	49790	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:53.456106901 CET	443	49790	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:53.456146002 CET	443	49790	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:53.456177950 CET	443	49790	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:53.456201077 CET	443	49790	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:53.456207037 CET	49790	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:53.456226110 CET	443	49790	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:53.456376076 CET	49790	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:53.462088108 CET	443	49790	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:53.462115049 CET	443	49790	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:53.462131977 CET	443	49790	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:53.462161064 CET	49790	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:53.462168932 CET	443	49790	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:53.462434053 CET	49790	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:53.468334913 CET	443	49790	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:53.468426943 CET	49790	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:53.468434095 CET	443	49790	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:53.475426912 CET	443	49790	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:53.475516081 CET	49790	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:53.475523949 CET	443	49790	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:53.475567102 CET	443	49790	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:53.475687981 CET	49790	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:53.494288921 CET	49790	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:53.494296074 CET	443	49790	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:53.500313997 CET	443	49797	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:53.501456022 CET	49797	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:53.501456022 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:53.501476049 CET	443	49797	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:53.501497030 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:53.501558065 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:53.501923084 CET	443	49797	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:53.502120018 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:53.502130032 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:53.502451897 CET	49797	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:53.502451897 CET	49797	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:53.502505064 CET	443	49797	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:53.502563953 CET	443	49797	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:53.519239902 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.519296885 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.519340038 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.519356966 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.519423008 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.519445896 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.519459963 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.519468069 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.519506931 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.525342941 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.525392056 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.525429010 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.525439024 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.525866985 CET	443	49798	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:53.526181936 CET	49798	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:53.526190042 CET	443	49798	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:53.527157068 CET	443	49798	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:53.527216911 CET	49798	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:53.527507067 CET	49798	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:53.527561903 CET	443	49798	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:53.527703047 CET	49798	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:53.527718067 CET	443	49798	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:53.531599045 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.531658888 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.531667948 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.537909031 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.537955999 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.537964106 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.554826975 CET	49797	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:53.570744991 CET	49798	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:53.586730957 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.609797001 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.609872103 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.609905005 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.609915972 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.609932899 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.609978914 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.614801884 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.621176004 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.621213913 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.621227026 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.621241093 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.621283054 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.627393007 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.633606911 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.633657932 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.633668900 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.640101910 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.640135050 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.640156984 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.640166044 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.640218019 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.645803928 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.651962042 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.651997089 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.652029991 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.652040005 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.652077913 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.657509089 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.664031982 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.664056063 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.664099932 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.664110899 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.664155960 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.669382095 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.669600010 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.669646025 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.669652939 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.697738886 CET	49806	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:53.697778940 CET	443	49806	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:53.697891951 CET	49806	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:53.699103117 CET	49806	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:53.699135065 CET	443	49806	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:53.700347900 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.700381994 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.700402975 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.700418949 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.700475931 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.700639009 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.700695992 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.700737000 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.700745106 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.701370001 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.701412916 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.701421022 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.706438065 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.706487894 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.706497908 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.712322950 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.712372065 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.712380886 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.718094110 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.718139887 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.718147039 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.718899012 CET	443	49798	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:53.718940020 CET	443	49798	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:53.718997002 CET	443	49798	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:53.718997002 CET	49798	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:53.719053030 CET	49798	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:53.719564915 CET	49798	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:53.719575882 CET	443	49798	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:53.723948002 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.723989964 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.723999023 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.729253054 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.729299068 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.729306936 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.734683990 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.734741926 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.734750032 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.739895105 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.739945889 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.739953995 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.745296955 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.745354891 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.745362043 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.750107050 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.750157118 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.750164986 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.754714966 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.754765987 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.754776001 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.759429932 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.759488106 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.759495974 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.763478994 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.763525009 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.763534069 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.767373085 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.767431974 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.767441034 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.771444082 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.771497965 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.771506071 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.775880098 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.775928020 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.775935888 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.779045105 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.779102087 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.779109955 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.782968998 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.783018112 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.783025026 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.786730051 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.786777973 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.786784887 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.789122105 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.789154053 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.789171934 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.789180994 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.789216042 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.791537046 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.793838024 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.793890953 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.793899059 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.796118975 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.796150923 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.796191931 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.796200037 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.796241045 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.798533916 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.800848007 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.800879002 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.800900936 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.800910950 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.800951004 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.803098917 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.804104090 CET	443	49797	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:53.804198980 CET	443	49797	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:53.804323912 CET	49797	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:53.804949999 CET	49797	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:53.804960012 CET	443	49797	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:53.805432081 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.805465937 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.805485964 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.805495977 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.805530071 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.807708025 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.810030937 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.810059071 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.810097933 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.810111046 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.810148001 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.812382936 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.814663887 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.814701080 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.814724922 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.814734936 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.814774990 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.816973925 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.817903996 CET	49807	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:53.817939043 CET	443	49807	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:53.817997932 CET	49807	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:53.818322897 CET	49807	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:53.818336010 CET	443	49807	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:53.819350958 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.819402933 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.819408894 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.819459915 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.819505930 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.819607019 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.819614887 CET	443	49791	172.217.16.196	192.168.2.10
Jan 10, 2025 00:21:53.819657087 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:53.819658041 CET	49791	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:21:54.133722067 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.133986950 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.134011984 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.134337902 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.134751081 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.134813070 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.134995937 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.175374031 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.411783934 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.411818027 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.411844969 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.411873102 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.411895037 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.411899090 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.411907911 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.411935091 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.412183046 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.417741060 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.417849064 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.418543100 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.418548107 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.424103975 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.424235106 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.424241066 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.430449009 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.430555105 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.430563927 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.474026918 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.498425007 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.500781059 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.500838041 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.501758099 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.501768112 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.502847910 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.506968975 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.513283968 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.513323069 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.513344049 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.513351917 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.513463974 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.519572020 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.525854111 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.525898933 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.525996923 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.526002884 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.526297092 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.526988983 CET	443	49806	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:54.527332067 CET	49806	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:54.527359009 CET	443	49806	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:54.528100014 CET	443	49806	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:54.528633118 CET	49806	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:54.528762102 CET	443	49806	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:54.528954029 CET	49806	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:54.528954029 CET	49806	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:54.528995991 CET	443	49806	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:54.533202887 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.538023949 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.538065910 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.538079977 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.538086891 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.538259983 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.543957949 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.549798012 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.549845934 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.549861908 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.549869061 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.549988031 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.555597067 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.561623096 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.561747074 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.561768055 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.561775923 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.561834097 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.561840057 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.585124016 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.585242987 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.585263014 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.585278988 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.585386038 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.585391998 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.587409019 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.587795019 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.587800980 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.592473984 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.592528105 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.592534065 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.598695040 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.598746061 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.598752022 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.604238987 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.604415894 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.604422092 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.616344929 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.616698027 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.616704941 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.617074013 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.617223978 CET	443	49807	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:54.617434025 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.617440939 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.617659092 CET	49807	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:54.617671013 CET	443	49807	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:54.618030071 CET	443	49807	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:54.618526936 CET	49807	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:54.618585110 CET	443	49807	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:54.618874073 CET	49807	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:54.618891954 CET	443	49807	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:54.621196032 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.621381044 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.621388912 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.626435041 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.626481056 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.626490116 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.632065058 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.632112026 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.632121086 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.637068033 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.637748957 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.637754917 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.641974926 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.642107010 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.642116070 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.646507978 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.646698952 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.646706104 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.650784016 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.650926113 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.650933027 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.655163050 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.655219078 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.655227900 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.659157038 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.659336090 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.659342051 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.663125038 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.663255930 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.663263083 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.667059898 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.667130947 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.667138100 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.670840025 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.670921087 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.670928955 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.674876928 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.675059080 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.675065994 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.678534985 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.678653955 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.678661108 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.680977106 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.681035042 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.681200981 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.681207895 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.681252003 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.683182955 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.685693026 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.685750008 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.685756922 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.687975883 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.688039064 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.688047886 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.688061953 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.688402891 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.690144062 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.692428112 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.692473888 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.692491055 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.692501068 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.692589045 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.694668055 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.697009087 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.697104931 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.697113037 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.699457884 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.699501038 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.699512959 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.699521065 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.699703932 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.702975035 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.704001904 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.704044104 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.704058886 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.704065084 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.704108000 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.706353903 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.708587885 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.708643913 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.708650112 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.710942030 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.711086035 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.711110115 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.711153030 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.711684942 CET	49804	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:21:54.711697102 CET	443	49804	142.250.184.206	192.168.2.10
Jan 10, 2025 00:21:54.712461948 CET	443	49806	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:54.712645054 CET	443	49806	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:54.712759018 CET	49806	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:54.712881088 CET	49806	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:54.712908983 CET	443	49806	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:54.712924004 CET	49806	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:54.712994099 CET	49806	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:54.720391989 CET	49813	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:54.720422029 CET	443	49813	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:54.720477104 CET	49813	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:54.720943928 CET	49813	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:54.720958948 CET	443	49813	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:54.729520082 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:54.729538918 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:54.729614973 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:54.729875088 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:54.729888916 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:54.732595921 CET	80	49759	185.53.177.50	192.168.2.10
Jan 10, 2025 00:21:54.732672930 CET	49759	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:21:54.733594894 CET	49759	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:21:54.733767986 CET	49758	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:21:54.740067005 CET	80	49759	185.53.177.50	192.168.2.10
Jan 10, 2025 00:21:54.740077972 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:21:54.796575069 CET	443	49807	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:54.796669960 CET	443	49807	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:54.796746016 CET	49807	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:54.797260046 CET	49807	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:54.797272921 CET	443	49807	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:54.930984020 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:21:54.942986965 CET	49758	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:21:54.947743893 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:21:54.957870007 CET	49815	443	192.168.2.10	216.58.206.65
Jan 10, 2025 00:21:54.957904100 CET	443	49815	216.58.206.65	192.168.2.10
Jan 10, 2025 00:21:54.958022118 CET	49815	443	192.168.2.10	216.58.206.65
Jan 10, 2025 00:21:54.958132029 CET	49816	443	192.168.2.10	216.58.206.65
Jan 10, 2025 00:21:54.958158016 CET	443	49816	216.58.206.65	192.168.2.10
Jan 10, 2025 00:21:54.958213091 CET	49816	443	192.168.2.10	216.58.206.65
Jan 10, 2025 00:21:54.958909035 CET	49815	443	192.168.2.10	216.58.206.65
Jan 10, 2025 00:21:54.958921909 CET	443	49815	216.58.206.65	192.168.2.10
Jan 10, 2025 00:21:54.959157944 CET	49816	443	192.168.2.10	216.58.206.65
Jan 10, 2025 00:21:54.959167957 CET	443	49816	216.58.206.65	192.168.2.10
Jan 10, 2025 00:21:54.959537029 CET	49777	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:21:54.964329004 CET	80	49777	185.53.177.50	192.168.2.10
Jan 10, 2025 00:21:55.134520054 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:21:55.139441967 CET	49821	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:21:55.145909071 CET	80	49821	185.53.177.50	192.168.2.10
Jan 10, 2025 00:21:55.146029949 CET	49821	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:21:55.146281958 CET	49821	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:21:55.153083086 CET	80	49777	185.53.177.50	192.168.2.10
Jan 10, 2025 00:21:55.153094053 CET	80	49821	185.53.177.50	192.168.2.10
Jan 10, 2025 00:21:55.185628891 CET	49758	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:21:55.205714941 CET	49777	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:21:55.365883112 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.366482019 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.366503000 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.367652893 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.367712975 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.368098974 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.368159056 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.368308067 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.368314028 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.418637037 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.533859015 CET	443	49813	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:55.534235954 CET	49813	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:55.534249067 CET	443	49813	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:55.534629107 CET	443	49813	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:55.535001040 CET	49813	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:55.535075903 CET	443	49813	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:55.535140991 CET	49813	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:55.576729059 CET	49813	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:55.576736927 CET	443	49813	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:55.646646023 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.646708965 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.646750927 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.646787882 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.646835089 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.646841049 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.646862984 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.646874905 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.646922112 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.652609110 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.652704954 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.652762890 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.652772903 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.659008026 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.659087896 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.659096003 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.665419102 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.665478945 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.665487051 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.689861059 CET	443	49815	216.58.206.65	192.168.2.10
Jan 10, 2025 00:21:55.690186024 CET	49815	443	192.168.2.10	216.58.206.65
Jan 10, 2025 00:21:55.690203905 CET	443	49815	216.58.206.65	192.168.2.10
Jan 10, 2025 00:21:55.690609932 CET	443	49815	216.58.206.65	192.168.2.10
Jan 10, 2025 00:21:55.690627098 CET	443	49815	216.58.206.65	192.168.2.10
Jan 10, 2025 00:21:55.690730095 CET	49815	443	192.168.2.10	216.58.206.65
Jan 10, 2025 00:21:55.690737963 CET	443	49815	216.58.206.65	192.168.2.10
Jan 10, 2025 00:21:55.690778971 CET	49815	443	192.168.2.10	216.58.206.65
Jan 10, 2025 00:21:55.691356897 CET	443	49815	216.58.206.65	192.168.2.10
Jan 10, 2025 00:21:55.692598104 CET	49815	443	192.168.2.10	216.58.206.65
Jan 10, 2025 00:21:55.692755938 CET	443	49815	216.58.206.65	192.168.2.10
Jan 10, 2025 00:21:55.692836046 CET	49815	443	192.168.2.10	216.58.206.65
Jan 10, 2025 00:21:55.697027922 CET	443	49816	216.58.206.65	192.168.2.10
Jan 10, 2025 00:21:55.697273016 CET	49816	443	192.168.2.10	216.58.206.65
Jan 10, 2025 00:21:55.697283030 CET	443	49816	216.58.206.65	192.168.2.10
Jan 10, 2025 00:21:55.697784901 CET	443	49816	216.58.206.65	192.168.2.10
Jan 10, 2025 00:21:55.697797060 CET	443	49816	216.58.206.65	192.168.2.10
Jan 10, 2025 00:21:55.697978973 CET	49816	443	192.168.2.10	216.58.206.65
Jan 10, 2025 00:21:55.697987080 CET	443	49816	216.58.206.65	192.168.2.10
Jan 10, 2025 00:21:55.698065996 CET	49816	443	192.168.2.10	216.58.206.65
Jan 10, 2025 00:21:55.699301004 CET	443	49816	216.58.206.65	192.168.2.10
Jan 10, 2025 00:21:55.699526072 CET	49816	443	192.168.2.10	216.58.206.65
Jan 10, 2025 00:21:55.699614048 CET	443	49816	216.58.206.65	192.168.2.10
Jan 10, 2025 00:21:55.699696064 CET	49816	443	192.168.2.10	216.58.206.65
Jan 10, 2025 00:21:55.699702024 CET	443	49816	216.58.206.65	192.168.2.10
Jan 10, 2025 00:21:55.711266041 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.714004993 CET	443	49813	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:55.714087963 CET	443	49813	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:55.714159012 CET	49813	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:55.714720011 CET	49813	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:55.714736938 CET	443	49813	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:55.726505041 CET	49824	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:55.726546049 CET	443	49824	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:55.726689100 CET	49824	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:55.726914883 CET	49824	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:55.726929903 CET	443	49824	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:55.733437061 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.733963013 CET	49815	443	192.168.2.10	216.58.206.65
Jan 10, 2025 00:21:55.733978033 CET	443	49815	216.58.206.65	192.168.2.10
Jan 10, 2025 00:21:55.736583948 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.736628056 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.736644030 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.736659050 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.736932993 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.742497921 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.747905970 CET	49816	443	192.168.2.10	216.58.206.65
Jan 10, 2025 00:21:55.748792887 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.748837948 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.748887062 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.748897076 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.749557018 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.756566048 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.762552977 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.762607098 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.762646914 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.762654066 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.762775898 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.767673016 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.773514032 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.773569107 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.773570061 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.773588896 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.774771929 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.778378010 CET	49815	443	192.168.2.10	216.58.206.65
Jan 10, 2025 00:21:55.784842014 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.786664009 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.786720037 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.786727905 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.791181087 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.791224957 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.791228056 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.791240931 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.791449070 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.797090054 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.797164917 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.798917055 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.798923969 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.809556961 CET	80	49821	185.53.177.50	192.168.2.10
Jan 10, 2025 00:21:55.820280075 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.820327997 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.820338964 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.820380926 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.820661068 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.820667028 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.823265076 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.823327065 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.823335886 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.828161955 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.828293085 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.828305006 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.834079027 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.834141970 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.834152937 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.840030909 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.840106010 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.840112925 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.846761942 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.846841097 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.846847057 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.851618052 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.851696014 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.851703882 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.857700109 CET	49821	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:21:55.871856928 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.871907949 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.871912003 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.871920109 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.871988058 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.872024059 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.872093916 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.872102976 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.872184992 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.873347998 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.873404980 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.873411894 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.878185034 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.878242970 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.878251076 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.882827044 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.882908106 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.882915974 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.887810946 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.887900114 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.887907982 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.891985893 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.892064095 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.892071962 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.896042109 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.896157980 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.896163940 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.900203943 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.900367975 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.900374889 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.904967070 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.905050993 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.905056953 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.909107924 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.909320116 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.909327030 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.911653996 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.911822081 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.911828995 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.915657043 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.915858030 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.915865898 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.918302059 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.918389082 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.918396950 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.920187950 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.920366049 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.920377970 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.922625065 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.922681093 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.922689915 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.924935102 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.925012112 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.925034046 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.925045013 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.925085068 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.927151918 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.929536104 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.929630041 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.929692984 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.929704905 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.929768085 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.931809902 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.934164047 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.934241056 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.934247017 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.934274912 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.934555054 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.936414957 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.938812017 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.938880920 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.938906908 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.938919067 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.939337015 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.941145897 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.943497896 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.943531036 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.943618059 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.943628073 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.943695068 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.945879936 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.948268890 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.948365927 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.948409081 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.948409081 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.948542118 CET	49814	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:55.948551893 CET	443	49814	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:55.960081100 CET	443	49815	216.58.206.65	192.168.2.10
Jan 10, 2025 00:21:55.960306883 CET	443	49815	216.58.206.65	192.168.2.10
Jan 10, 2025 00:21:55.960366964 CET	49815	443	192.168.2.10	216.58.206.65
Jan 10, 2025 00:21:55.961016893 CET	49815	443	192.168.2.10	216.58.206.65
Jan 10, 2025 00:21:55.961031914 CET	443	49815	216.58.206.65	192.168.2.10
Jan 10, 2025 00:21:55.971687078 CET	443	49816	216.58.206.65	192.168.2.10
Jan 10, 2025 00:21:55.971757889 CET	443	49816	216.58.206.65	192.168.2.10
Jan 10, 2025 00:21:55.971888065 CET	49816	443	192.168.2.10	216.58.206.65
Jan 10, 2025 00:21:55.973810911 CET	49816	443	192.168.2.10	216.58.206.65
Jan 10, 2025 00:21:55.973828077 CET	443	49816	216.58.206.65	192.168.2.10
Jan 10, 2025 00:21:56.450666904 CET	49788	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:56.458908081 CET	49833	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:56.458951950 CET	443	49833	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:56.459131002 CET	49833	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:56.459496975 CET	49833	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:56.459513903 CET	443	49833	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:56.495337009 CET	443	49788	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:56.526401043 CET	443	49824	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:56.531394958 CET	49824	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:56.531404972 CET	443	49824	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:56.532026052 CET	443	49824	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:56.532545090 CET	49824	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:56.532628059 CET	443	49824	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:56.532814980 CET	49824	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:56.532932997 CET	49824	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:56.532968998 CET	443	49824	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:56.668320894 CET	443	49788	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:56.668379068 CET	443	49788	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:56.668497086 CET	49788	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:56.670186043 CET	49788	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:56.670206070 CET	443	49788	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:56.798984051 CET	443	49824	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:56.799073935 CET	443	49824	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:56.799125910 CET	49824	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:56.800232887 CET	49824	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:56.800251961 CET	443	49824	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:56.809398890 CET	49839	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:56.809448957 CET	443	49839	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:56.809515953 CET	49839	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:56.809745073 CET	49839	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:56.809766054 CET	443	49839	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:56.914694071 CET	443	49738	142.250.74.196	192.168.2.10
Jan 10, 2025 00:21:56.914787054 CET	443	49738	142.250.74.196	192.168.2.10
Jan 10, 2025 00:21:56.914851904 CET	49738	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:21:57.100595951 CET	443	49833	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:57.108306885 CET	49833	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:57.108324051 CET	443	49833	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:57.108685970 CET	443	49833	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:57.109611034 CET	49833	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:57.109677076 CET	443	49833	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:57.110080004 CET	49833	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:57.155342102 CET	443	49833	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:57.254714012 CET	49738	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:21:57.254726887 CET	443	49738	142.250.74.196	192.168.2.10
Jan 10, 2025 00:21:57.389192104 CET	443	49833	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:57.389272928 CET	443	49833	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:57.389322996 CET	49833	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:57.394606113 CET	49833	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:21:57.394623995 CET	443	49833	142.250.186.110	192.168.2.10
Jan 10, 2025 00:21:57.632101059 CET	443	49839	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:57.641415119 CET	49839	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:57.641431093 CET	443	49839	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:57.641886950 CET	443	49839	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:57.642849922 CET	49839	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:57.642940998 CET	443	49839	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:57.643260956 CET	49839	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:57.683351994 CET	443	49839	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:57.757919073 CET	49846	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:57.757956028 CET	443	49846	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:57.758027077 CET	49846	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:57.758917093 CET	49846	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:57.758934021 CET	443	49846	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:57.824099064 CET	443	49839	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:57.824189901 CET	443	49839	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:57.824244022 CET	49839	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:57.826687098 CET	49839	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:57.826699972 CET	443	49839	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:58.426127911 CET	49677	443	192.168.2.10	20.42.65.85
Jan 10, 2025 00:21:58.439393997 CET	49672	443	192.168.2.10	173.222.162.55
Jan 10, 2025 00:21:58.441173077 CET	49853	443	192.168.2.10	173.222.162.55
Jan 10, 2025 00:21:58.441200972 CET	443	49853	173.222.162.55	192.168.2.10
Jan 10, 2025 00:21:58.441742897 CET	49853	443	192.168.2.10	173.222.162.55
Jan 10, 2025 00:21:58.462862968 CET	49853	443	192.168.2.10	173.222.162.55
Jan 10, 2025 00:21:58.462892056 CET	443	49853	173.222.162.55	192.168.2.10
Jan 10, 2025 00:21:58.582622051 CET	443	49846	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:58.592232943 CET	49846	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:58.592257977 CET	443	49846	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:58.592648029 CET	443	49846	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:58.593626976 CET	49846	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:58.593703032 CET	443	49846	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:58.593806028 CET	49846	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:58.593862057 CET	49846	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:58.593879938 CET	443	49846	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:58.753349066 CET	49672	443	192.168.2.10	173.222.162.55
Jan 10, 2025 00:21:58.870878935 CET	443	49846	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:58.870969057 CET	443	49846	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:58.871176004 CET	49846	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:58.884151936 CET	49846	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:21:58.884170055 CET	443	49846	54.75.69.192	192.168.2.10
Jan 10, 2025 00:21:58.888370991 CET	49854	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:58.888402939 CET	443	49854	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:58.888470888 CET	49854	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:58.888705015 CET	49854	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:58.888721943 CET	443	49854	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:59.046895027 CET	443	49853	173.222.162.55	192.168.2.10
Jan 10, 2025 00:21:59.047015905 CET	49853	443	192.168.2.10	173.222.162.55
Jan 10, 2025 00:21:59.365447044 CET	49672	443	192.168.2.10	173.222.162.55
Jan 10, 2025 00:21:59.707696915 CET	443	49854	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:59.716264009 CET	49854	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:59.716274977 CET	443	49854	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:59.716655016 CET	443	49854	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:59.717576981 CET	49854	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:59.717653036 CET	443	49854	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:59.721435070 CET	49854	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:59.763370991 CET	443	49854	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:59.898308039 CET	443	49854	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:59.898391008 CET	443	49854	3.248.162.96	192.168.2.10
Jan 10, 2025 00:21:59.898433924 CET	49854	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:59.899645090 CET	49854	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:21:59.899653912 CET	443	49854	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:00.577121973 CET	49672	443	192.168.2.10	173.222.162.55
Jan 10, 2025 00:22:02.838494062 CET	49880	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:02.838526964 CET	443	49880	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:02.838829994 CET	49880	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:02.839119911 CET	49880	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:02.839133024 CET	443	49880	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:02.983515978 CET	49672	443	192.168.2.10	173.222.162.55
Jan 10, 2025 00:22:03.676914930 CET	443	49880	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:03.677386999 CET	49880	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:03.677396059 CET	443	49880	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:03.677752972 CET	443	49880	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:03.678203106 CET	49880	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:03.678263903 CET	443	49880	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:03.678397894 CET	49880	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:03.678397894 CET	49880	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:03.678431034 CET	443	49880	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:03.938177109 CET	443	49880	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:03.938268900 CET	443	49880	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:03.938376904 CET	49880	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:03.938740969 CET	49880	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:03.938752890 CET	443	49880	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:03.942764044 CET	49890	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:03.942787886 CET	443	49890	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:03.942850113 CET	49890	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:03.943137884 CET	49890	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:03.943150997 CET	443	49890	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:04.788486004 CET	443	49890	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:04.788755894 CET	49890	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:04.788773060 CET	443	49890	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:04.789200068 CET	443	49890	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:04.789658070 CET	49890	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:04.789793968 CET	49890	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:04.789942980 CET	443	49890	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:04.831458092 CET	49890	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:04.980710983 CET	443	49890	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:04.980969906 CET	443	49890	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:04.981030941 CET	49890	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:04.981385946 CET	49890	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:04.981400013 CET	443	49890	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:04.981412888 CET	49890	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:04.981447935 CET	49890	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:05.641133070 CET	80	49765	185.53.178.30	192.168.2.10
Jan 10, 2025 00:22:05.641213894 CET	49765	80	192.168.2.10	185.53.178.30
Jan 10, 2025 00:22:06.009064913 CET	49765	80	192.168.2.10	185.53.178.30
Jan 10, 2025 00:22:06.014282942 CET	80	49765	185.53.178.30	192.168.2.10
Jan 10, 2025 00:22:06.023559093 CET	49902	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:22:06.028053999 CET	49903	443	192.168.2.10	185.53.179.31
Jan 10, 2025 00:22:06.028085947 CET	443	49903	185.53.179.31	192.168.2.10
Jan 10, 2025 00:22:06.028238058 CET	49903	443	192.168.2.10	185.53.179.31
Jan 10, 2025 00:22:06.028347969 CET	80	49902	185.53.177.50	192.168.2.10
Jan 10, 2025 00:22:06.028388977 CET	49902	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:22:06.029145002 CET	49903	443	192.168.2.10	185.53.179.31
Jan 10, 2025 00:22:06.029156923 CET	443	49903	185.53.179.31	192.168.2.10
Jan 10, 2025 00:22:06.029483080 CET	49758	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:22:06.034255981 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:22:06.034415960 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:22:06.326119900 CET	80	49770	185.53.178.30	192.168.2.10
Jan 10, 2025 00:22:06.326195002 CET	49770	80	192.168.2.10	185.53.178.30
Jan 10, 2025 00:22:06.357871056 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:22:06.357897997 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:22:06.357908964 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:22:06.357948065 CET	49758	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:22:06.358232975 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:22:06.358252048 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:22:06.358277082 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:22:06.358289957 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:22:06.358295918 CET	49758	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:22:06.358314037 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:22:06.358325958 CET	49758	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:22:06.358366966 CET	49758	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:22:06.363410950 CET	49770	80	192.168.2.10	185.53.178.30
Jan 10, 2025 00:22:06.364295959 CET	49909	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:06.364329100 CET	443	49909	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:06.364413023 CET	49909	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:06.365483046 CET	49909	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:06.365499973 CET	443	49909	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:06.370258093 CET	80	49770	185.53.178.30	192.168.2.10
Jan 10, 2025 00:22:06.422355890 CET	49910	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:22:06.422395945 CET	443	49910	52.222.236.17	192.168.2.10
Jan 10, 2025 00:22:06.422472954 CET	49910	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:22:06.422789097 CET	49910	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:22:06.422802925 CET	443	49910	52.222.236.17	192.168.2.10
Jan 10, 2025 00:22:06.422910929 CET	49758	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:22:06.428793907 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:22:06.429909945 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:22:06.758991003 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:22:06.784240007 CET	443	49903	185.53.179.31	192.168.2.10
Jan 10, 2025 00:22:06.816260099 CET	49758	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:22:06.834125996 CET	49903	443	192.168.2.10	185.53.179.31
Jan 10, 2025 00:22:06.955694914 CET	49903	443	192.168.2.10	185.53.179.31
Jan 10, 2025 00:22:06.955710888 CET	443	49903	185.53.179.31	192.168.2.10
Jan 10, 2025 00:22:06.957009077 CET	443	49903	185.53.179.31	192.168.2.10
Jan 10, 2025 00:22:06.957091093 CET	49903	443	192.168.2.10	185.53.179.31
Jan 10, 2025 00:22:06.960302114 CET	49903	443	192.168.2.10	185.53.179.31
Jan 10, 2025 00:22:06.960397005 CET	443	49903	185.53.179.31	192.168.2.10
Jan 10, 2025 00:22:06.960484028 CET	49903	443	192.168.2.10	185.53.179.31
Jan 10, 2025 00:22:06.973845005 CET	49758	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:22:06.977775097 CET	49911	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:22:06.977823973 CET	443	49911	142.250.186.110	192.168.2.10
Jan 10, 2025 00:22:06.977900028 CET	49911	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:22:06.978216887 CET	49911	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:22:06.978233099 CET	443	49911	142.250.186.110	192.168.2.10
Jan 10, 2025 00:22:06.980540037 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:22:07.003333092 CET	443	49903	185.53.179.31	192.168.2.10
Jan 10, 2025 00:22:07.011823893 CET	49903	443	192.168.2.10	185.53.179.31
Jan 10, 2025 00:22:07.011842012 CET	443	49903	185.53.179.31	192.168.2.10
Jan 10, 2025 00:22:07.020323038 CET	49912	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:07.020363092 CET	443	49912	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:07.020481110 CET	49912	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:07.020908117 CET	49912	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:07.020936012 CET	443	49912	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:07.025576115 CET	49913	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:07.025609016 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:07.025860071 CET	49913	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:07.026077032 CET	49913	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:07.026091099 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:07.031419992 CET	49821	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:22:07.038765907 CET	80	49821	185.53.177.50	192.168.2.10
Jan 10, 2025 00:22:07.058345079 CET	49903	443	192.168.2.10	185.53.179.31
Jan 10, 2025 00:22:07.161057949 CET	443	49909	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:07.161350012 CET	49909	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:07.161366940 CET	443	49909	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:07.161844969 CET	443	49909	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:07.162167072 CET	49909	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:07.162250996 CET	443	49909	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:07.162645102 CET	49909	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:07.162754059 CET	49909	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:07.162780046 CET	443	49909	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:07.172435045 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:22:07.180520058 CET	443	49910	52.222.236.17	192.168.2.10
Jan 10, 2025 00:22:07.180733919 CET	49910	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:22:07.180742979 CET	443	49910	52.222.236.17	192.168.2.10
Jan 10, 2025 00:22:07.181082010 CET	443	49910	52.222.236.17	192.168.2.10
Jan 10, 2025 00:22:07.181472063 CET	49910	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:22:07.181529999 CET	443	49910	52.222.236.17	192.168.2.10
Jan 10, 2025 00:22:07.181618929 CET	49910	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:22:07.214988947 CET	49758	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:22:07.223328114 CET	443	49910	52.222.236.17	192.168.2.10
Jan 10, 2025 00:22:07.232064009 CET	80	49821	185.53.177.50	192.168.2.10
Jan 10, 2025 00:22:07.254007101 CET	443	49903	185.53.179.31	192.168.2.10
Jan 10, 2025 00:22:07.254110098 CET	443	49903	185.53.179.31	192.168.2.10
Jan 10, 2025 00:22:07.254156113 CET	49903	443	192.168.2.10	185.53.179.31
Jan 10, 2025 00:22:07.254436970 CET	49903	443	192.168.2.10	185.53.179.31
Jan 10, 2025 00:22:07.254455090 CET	443	49903	185.53.179.31	192.168.2.10
Jan 10, 2025 00:22:07.254472971 CET	49903	443	192.168.2.10	185.53.179.31
Jan 10, 2025 00:22:07.254493952 CET	49903	443	192.168.2.10	185.53.179.31
Jan 10, 2025 00:22:07.276626110 CET	49821	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:22:07.421289921 CET	443	49909	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:07.421384096 CET	443	49909	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:07.421423912 CET	49909	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:07.421719074 CET	49909	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:07.421732903 CET	443	49909	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:07.467475891 CET	443	49910	52.222.236.17	192.168.2.10
Jan 10, 2025 00:22:07.467540979 CET	443	49910	52.222.236.17	192.168.2.10
Jan 10, 2025 00:22:07.467583895 CET	443	49910	52.222.236.17	192.168.2.10
Jan 10, 2025 00:22:07.467595100 CET	49910	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:22:07.467617989 CET	443	49910	52.222.236.17	192.168.2.10
Jan 10, 2025 00:22:07.467648983 CET	49910	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:22:07.467672110 CET	49910	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:22:07.552527905 CET	443	49910	52.222.236.17	192.168.2.10
Jan 10, 2025 00:22:07.552606106 CET	443	49910	52.222.236.17	192.168.2.10
Jan 10, 2025 00:22:07.552624941 CET	49910	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:22:07.552644014 CET	443	49910	52.222.236.17	192.168.2.10
Jan 10, 2025 00:22:07.552680016 CET	49910	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:22:07.552702904 CET	49910	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:22:07.559499979 CET	443	49910	52.222.236.17	192.168.2.10
Jan 10, 2025 00:22:07.559547901 CET	443	49910	52.222.236.17	192.168.2.10
Jan 10, 2025 00:22:07.559576035 CET	49910	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:22:07.559592009 CET	443	49910	52.222.236.17	192.168.2.10
Jan 10, 2025 00:22:07.559623957 CET	49910	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:22:07.559642076 CET	49910	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:22:07.619016886 CET	443	49911	142.250.186.110	192.168.2.10
Jan 10, 2025 00:22:07.619487047 CET	49911	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:22:07.619499922 CET	443	49911	142.250.186.110	192.168.2.10
Jan 10, 2025 00:22:07.620184898 CET	443	49911	142.250.186.110	192.168.2.10
Jan 10, 2025 00:22:07.628161907 CET	49911	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:22:07.628257036 CET	443	49911	142.250.186.110	192.168.2.10
Jan 10, 2025 00:22:07.643827915 CET	443	49910	52.222.236.17	192.168.2.10
Jan 10, 2025 00:22:07.643867016 CET	443	49910	52.222.236.17	192.168.2.10
Jan 10, 2025 00:22:07.643919945 CET	49910	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:22:07.643935919 CET	443	49910	52.222.236.17	192.168.2.10
Jan 10, 2025 00:22:07.643971920 CET	49910	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:22:07.643995047 CET	49910	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:22:07.644558907 CET	443	49910	52.222.236.17	192.168.2.10
Jan 10, 2025 00:22:07.644586086 CET	443	49910	52.222.236.17	192.168.2.10
Jan 10, 2025 00:22:07.644622087 CET	49910	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:22:07.644630909 CET	443	49910	52.222.236.17	192.168.2.10
Jan 10, 2025 00:22:07.644655943 CET	49910	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:22:07.644687891 CET	49910	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:22:07.646122932 CET	443	49910	52.222.236.17	192.168.2.10
Jan 10, 2025 00:22:07.646141052 CET	443	49910	52.222.236.17	192.168.2.10
Jan 10, 2025 00:22:07.646177053 CET	49910	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:22:07.646190882 CET	443	49910	52.222.236.17	192.168.2.10
Jan 10, 2025 00:22:07.646219969 CET	49910	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:22:07.646239042 CET	49910	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:22:07.647979975 CET	443	49910	52.222.236.17	192.168.2.10
Jan 10, 2025 00:22:07.648046970 CET	49910	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:22:07.648061037 CET	443	49910	52.222.236.17	192.168.2.10
Jan 10, 2025 00:22:07.648086071 CET	443	49910	52.222.236.17	192.168.2.10
Jan 10, 2025 00:22:07.648130894 CET	49910	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:22:07.648583889 CET	49910	443	192.168.2.10	52.222.236.17
Jan 10, 2025 00:22:07.648596048 CET	443	49910	52.222.236.17	192.168.2.10
Jan 10, 2025 00:22:07.656239986 CET	443	49912	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:07.656582117 CET	49912	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:07.656603098 CET	443	49912	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:07.657180071 CET	443	49912	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:07.657511950 CET	49912	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:07.657593966 CET	443	49912	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:07.657629967 CET	49912	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:07.658919096 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:07.659439087 CET	49913	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:07.659466028 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:07.659809113 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:07.660908937 CET	49913	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:07.660979986 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:07.661298990 CET	49913	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:07.661325932 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:07.669470072 CET	49911	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:22:07.699935913 CET	49912	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:07.699951887 CET	443	49912	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:07.764450073 CET	49919	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:07.764497995 CET	443	49919	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:07.764559984 CET	49919	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:07.764781952 CET	49919	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:07.764796019 CET	443	49919	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:07.770682096 CET	49920	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:22:07.770742893 CET	443	49920	52.222.236.26	192.168.2.10
Jan 10, 2025 00:22:07.770803928 CET	49920	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:22:07.771126032 CET	49920	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:22:07.771141052 CET	443	49920	52.222.236.26	192.168.2.10
Jan 10, 2025 00:22:07.792797089 CET	49672	443	192.168.2.10	173.222.162.55
Jan 10, 2025 00:22:07.942306995 CET	443	49912	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:07.942333937 CET	443	49912	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:07.942380905 CET	49912	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:07.942399025 CET	443	49912	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:07.942610979 CET	443	49912	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:07.942667007 CET	49912	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:07.965578079 CET	49912	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:07.965595961 CET	443	49912	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:07.965621948 CET	49912	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:07.965666056 CET	49912	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:07.969012976 CET	49926	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:07.969043970 CET	443	49926	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:07.969120026 CET	49926	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:07.969433069 CET	49926	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:07.969449043 CET	443	49926	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.129671097 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.129812956 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.129904032 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.130001068 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.130052090 CET	49913	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:08.130052090 CET	49913	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:08.130075932 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.135513067 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.135602951 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.137145042 CET	49913	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:08.137156010 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.137231112 CET	49913	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:08.137286901 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.142004967 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.142060995 CET	49913	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:08.142072916 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.151041985 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.151096106 CET	49913	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:08.151108027 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.198654890 CET	49913	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:08.216043949 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.218225002 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.218272924 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.218372107 CET	49913	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:08.218396902 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.218847990 CET	49913	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:08.224431038 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.230696917 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.230741024 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.230770111 CET	49913	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:08.230783939 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.231087923 CET	49913	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:08.236960888 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.243124008 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.243169069 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.243175983 CET	49913	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:08.243191957 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.243287086 CET	49913	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:08.249423981 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.255728006 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.255780935 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.255783081 CET	49913	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:08.255793095 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.255861998 CET	49913	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:08.255867958 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.262073994 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.262586117 CET	49913	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:08.262592077 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.268424988 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.268580914 CET	49913	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:08.268583059 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.268668890 CET	49913	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:08.269305944 CET	49913	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:08.269323111 CET	443	49913	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.316855907 CET	49758	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:22:08.322421074 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:22:08.322439909 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:22:08.506361008 CET	443	49920	52.222.236.26	192.168.2.10
Jan 10, 2025 00:22:08.506907940 CET	49920	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:22:08.506934881 CET	443	49920	52.222.236.26	192.168.2.10
Jan 10, 2025 00:22:08.507330894 CET	443	49920	52.222.236.26	192.168.2.10
Jan 10, 2025 00:22:08.507880926 CET	49920	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:22:08.507952929 CET	443	49920	52.222.236.26	192.168.2.10
Jan 10, 2025 00:22:08.508307934 CET	49920	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:22:08.555289030 CET	443	49919	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:08.555332899 CET	443	49920	52.222.236.26	192.168.2.10
Jan 10, 2025 00:22:08.555546999 CET	49919	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:08.555557966 CET	443	49919	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:08.556006908 CET	443	49919	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:08.556685925 CET	49919	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:08.556757927 CET	443	49919	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:08.556988955 CET	49919	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:08.557018995 CET	443	49919	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:08.616801023 CET	443	49926	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.617054939 CET	49926	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:08.617073059 CET	443	49926	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.617405891 CET	443	49926	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.618016005 CET	49926	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:08.618076086 CET	443	49926	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.618191957 CET	49926	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:08.652013063 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:22:08.660010099 CET	49926	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:08.660028934 CET	443	49926	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.698101044 CET	49758	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:22:08.708388090 CET	49930	443	192.168.2.10	216.58.206.65
Jan 10, 2025 00:22:08.708441019 CET	443	49930	216.58.206.65	192.168.2.10
Jan 10, 2025 00:22:08.708504915 CET	49930	443	192.168.2.10	216.58.206.65
Jan 10, 2025 00:22:08.708893061 CET	49930	443	192.168.2.10	216.58.206.65
Jan 10, 2025 00:22:08.708906889 CET	443	49930	216.58.206.65	192.168.2.10
Jan 10, 2025 00:22:08.717454910 CET	49935	443	192.168.2.10	142.250.184.228
Jan 10, 2025 00:22:08.717492104 CET	443	49935	142.250.184.228	192.168.2.10
Jan 10, 2025 00:22:08.717653990 CET	49935	443	192.168.2.10	142.250.184.228
Jan 10, 2025 00:22:08.717986107 CET	49935	443	192.168.2.10	142.250.184.228
Jan 10, 2025 00:22:08.717998981 CET	443	49935	142.250.184.228	192.168.2.10
Jan 10, 2025 00:22:08.731183052 CET	49821	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:22:08.736119032 CET	80	49821	185.53.177.50	192.168.2.10
Jan 10, 2025 00:22:08.752923965 CET	443	49919	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:08.752965927 CET	443	49919	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:08.753017902 CET	49919	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:08.753031969 CET	443	49919	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:08.753109932 CET	443	49919	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:08.753139973 CET	49919	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:08.753144979 CET	443	49919	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:08.753185987 CET	443	49919	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:08.753200054 CET	49919	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:08.753221989 CET	49919	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:08.753779888 CET	49919	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:08.753794909 CET	443	49919	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:08.775511026 CET	49937	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:08.775562048 CET	443	49937	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:08.775629997 CET	49937	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:08.776312113 CET	49937	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:08.776330948 CET	443	49937	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:08.780594110 CET	49938	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:08.780626059 CET	443	49938	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:08.780683041 CET	49938	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:08.780893087 CET	49938	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:08.780905962 CET	443	49938	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:08.787348986 CET	443	49920	52.222.236.26	192.168.2.10
Jan 10, 2025 00:22:08.787373066 CET	443	49920	52.222.236.26	192.168.2.10
Jan 10, 2025 00:22:08.787389040 CET	443	49920	52.222.236.26	192.168.2.10
Jan 10, 2025 00:22:08.787537098 CET	49920	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:22:08.787564039 CET	443	49920	52.222.236.26	192.168.2.10
Jan 10, 2025 00:22:08.787611961 CET	49920	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:22:08.873198032 CET	443	49920	52.222.236.26	192.168.2.10
Jan 10, 2025 00:22:08.873220921 CET	443	49920	52.222.236.26	192.168.2.10
Jan 10, 2025 00:22:08.873286963 CET	49920	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:22:08.873310089 CET	443	49920	52.222.236.26	192.168.2.10
Jan 10, 2025 00:22:08.873327017 CET	49920	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:22:08.873352051 CET	49920	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:22:08.876688957 CET	443	49920	52.222.236.26	192.168.2.10
Jan 10, 2025 00:22:08.876707077 CET	443	49920	52.222.236.26	192.168.2.10
Jan 10, 2025 00:22:08.876760960 CET	49920	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:22:08.876768112 CET	443	49920	52.222.236.26	192.168.2.10
Jan 10, 2025 00:22:08.876801968 CET	49920	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:22:08.900732040 CET	443	49926	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.900926113 CET	443	49926	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.900968075 CET	49926	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:08.901133060 CET	49926	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:08.901148081 CET	443	49926	142.250.184.206	192.168.2.10
Jan 10, 2025 00:22:08.901163101 CET	49926	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:08.901187897 CET	49926	443	192.168.2.10	142.250.184.206
Jan 10, 2025 00:22:08.928122044 CET	80	49821	185.53.177.50	192.168.2.10
Jan 10, 2025 00:22:08.960282087 CET	443	49920	52.222.236.26	192.168.2.10
Jan 10, 2025 00:22:08.960303068 CET	443	49920	52.222.236.26	192.168.2.10
Jan 10, 2025 00:22:08.960411072 CET	49920	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:22:08.960436106 CET	443	49920	52.222.236.26	192.168.2.10
Jan 10, 2025 00:22:08.961129904 CET	443	49920	52.222.236.26	192.168.2.10
Jan 10, 2025 00:22:08.961152077 CET	443	49920	52.222.236.26	192.168.2.10
Jan 10, 2025 00:22:08.961194992 CET	49920	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:22:08.961203098 CET	443	49920	52.222.236.26	192.168.2.10
Jan 10, 2025 00:22:08.961222887 CET	49920	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:22:08.961253881 CET	49920	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:22:08.962052107 CET	443	49920	52.222.236.26	192.168.2.10
Jan 10, 2025 00:22:08.962069035 CET	443	49920	52.222.236.26	192.168.2.10
Jan 10, 2025 00:22:08.962116003 CET	443	49920	52.222.236.26	192.168.2.10
Jan 10, 2025 00:22:08.962120056 CET	49920	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:22:08.962127924 CET	443	49920	52.222.236.26	192.168.2.10
Jan 10, 2025 00:22:08.962165117 CET	49920	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:22:08.962169886 CET	443	49920	52.222.236.26	192.168.2.10
Jan 10, 2025 00:22:08.962208033 CET	443	49920	52.222.236.26	192.168.2.10
Jan 10, 2025 00:22:08.962923050 CET	49920	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:22:08.979859114 CET	49821	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:22:09.016572952 CET	49920	443	192.168.2.10	52.222.236.26
Jan 10, 2025 00:22:09.016607046 CET	443	49920	52.222.236.26	192.168.2.10
Jan 10, 2025 00:22:09.388044119 CET	443	49935	142.250.184.228	192.168.2.10
Jan 10, 2025 00:22:09.442174911 CET	49935	443	192.168.2.10	142.250.184.228
Jan 10, 2025 00:22:09.461951017 CET	443	49930	216.58.206.65	192.168.2.10
Jan 10, 2025 00:22:09.498972893 CET	49935	443	192.168.2.10	142.250.184.228
Jan 10, 2025 00:22:09.498992920 CET	443	49935	142.250.184.228	192.168.2.10
Jan 10, 2025 00:22:09.499172926 CET	49930	443	192.168.2.10	216.58.206.65
Jan 10, 2025 00:22:09.499203920 CET	443	49930	216.58.206.65	192.168.2.10
Jan 10, 2025 00:22:09.499738932 CET	443	49930	216.58.206.65	192.168.2.10
Jan 10, 2025 00:22:09.500628948 CET	443	49935	142.250.184.228	192.168.2.10
Jan 10, 2025 00:22:09.500647068 CET	443	49935	142.250.184.228	192.168.2.10
Jan 10, 2025 00:22:09.500685930 CET	49935	443	192.168.2.10	142.250.184.228
Jan 10, 2025 00:22:09.544749975 CET	49930	443	192.168.2.10	216.58.206.65
Jan 10, 2025 00:22:09.545238972 CET	49935	443	192.168.2.10	142.250.184.228
Jan 10, 2025 00:22:09.580440998 CET	49930	443	192.168.2.10	216.58.206.65
Jan 10, 2025 00:22:09.580621958 CET	443	49930	216.58.206.65	192.168.2.10
Jan 10, 2025 00:22:09.582045078 CET	49935	443	192.168.2.10	142.250.184.228
Jan 10, 2025 00:22:09.582241058 CET	443	49935	142.250.184.228	192.168.2.10
Jan 10, 2025 00:22:09.588088036 CET	49930	443	192.168.2.10	216.58.206.65
Jan 10, 2025 00:22:09.588176966 CET	49935	443	192.168.2.10	142.250.184.228
Jan 10, 2025 00:22:09.588187933 CET	443	49935	142.250.184.228	192.168.2.10
Jan 10, 2025 00:22:09.601417065 CET	443	49937	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:09.602689028 CET	49937	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:09.602699041 CET	443	49937	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:09.603064060 CET	443	49937	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:09.606031895 CET	49937	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:09.606161118 CET	443	49937	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:09.606204033 CET	49937	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:09.606225014 CET	443	49937	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:09.612158060 CET	443	49938	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:09.612376928 CET	49938	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:09.612390041 CET	443	49938	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:09.612766981 CET	443	49938	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:09.613157034 CET	49938	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:09.613214970 CET	443	49938	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:09.613401890 CET	49938	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:09.613447905 CET	443	49938	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:09.631331921 CET	443	49930	216.58.206.65	192.168.2.10
Jan 10, 2025 00:22:09.636990070 CET	49935	443	192.168.2.10	142.250.184.228
Jan 10, 2025 00:22:09.653794050 CET	49937	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:09.767879963 CET	443	49930	216.58.206.65	192.168.2.10
Jan 10, 2025 00:22:09.767970085 CET	443	49930	216.58.206.65	192.168.2.10
Jan 10, 2025 00:22:09.768012047 CET	49930	443	192.168.2.10	216.58.206.65
Jan 10, 2025 00:22:09.769207954 CET	49930	443	192.168.2.10	216.58.206.65
Jan 10, 2025 00:22:09.769236088 CET	443	49930	216.58.206.65	192.168.2.10
Jan 10, 2025 00:22:09.776859045 CET	443	49935	142.250.184.228	192.168.2.10
Jan 10, 2025 00:22:09.776951075 CET	443	49935	142.250.184.228	192.168.2.10
Jan 10, 2025 00:22:09.776998043 CET	49935	443	192.168.2.10	142.250.184.228
Jan 10, 2025 00:22:09.779588938 CET	49935	443	192.168.2.10	142.250.184.228
Jan 10, 2025 00:22:09.779596090 CET	443	49935	142.250.184.228	192.168.2.10
Jan 10, 2025 00:22:09.787657022 CET	49945	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:09.787694931 CET	443	49945	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:09.787753105 CET	49945	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:09.787966967 CET	49945	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:09.787992001 CET	443	49945	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:09.873152971 CET	443	49937	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:09.873254061 CET	443	49937	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:09.873302937 CET	49937	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:09.873953104 CET	49937	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:09.873965979 CET	443	49937	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:09.884111881 CET	49949	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:09.884134054 CET	443	49949	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:09.884186029 CET	49949	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:09.884464025 CET	49949	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:09.884476900 CET	443	49949	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:09.904866934 CET	49950	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:09.904901028 CET	443	49950	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:09.904951096 CET	49950	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:09.905256987 CET	49950	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:09.905275106 CET	443	49950	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:09.915997982 CET	443	49938	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:09.916059971 CET	443	49938	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:09.916110992 CET	49938	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:09.916135073 CET	443	49938	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:09.916148901 CET	443	49938	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:09.916184902 CET	49938	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:09.916191101 CET	443	49938	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:09.916213989 CET	443	49938	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:09.916223049 CET	49938	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:09.916256905 CET	49938	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:09.917357922 CET	49938	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:09.917373896 CET	443	49938	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:10.152265072 CET	80	49777	185.53.177.50	192.168.2.10
Jan 10, 2025 00:22:10.152333975 CET	49777	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:22:10.169908047 CET	49777	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:22:10.170454025 CET	49911	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:22:10.170998096 CET	49951	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:22:10.171025991 CET	443	49951	142.250.186.110	192.168.2.10
Jan 10, 2025 00:22:10.171113968 CET	49951	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:22:10.171365976 CET	49951	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:22:10.171381950 CET	443	49951	142.250.186.110	192.168.2.10
Jan 10, 2025 00:22:10.174841881 CET	80	49777	185.53.177.50	192.168.2.10
Jan 10, 2025 00:22:10.211334944 CET	443	49911	142.250.186.110	192.168.2.10
Jan 10, 2025 00:22:10.372198105 CET	443	49911	142.250.186.110	192.168.2.10
Jan 10, 2025 00:22:10.373229980 CET	443	49911	142.250.186.110	192.168.2.10
Jan 10, 2025 00:22:10.373306036 CET	49911	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:22:10.392398119 CET	49911	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:22:10.392425060 CET	443	49911	142.250.186.110	192.168.2.10
Jan 10, 2025 00:22:10.421005964 CET	443	49945	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:10.421302080 CET	49945	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:10.421329975 CET	443	49945	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:10.422425032 CET	443	49945	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:10.422749043 CET	49945	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:10.422888994 CET	49945	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:10.422921896 CET	443	49945	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:10.464343071 CET	49945	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:10.671919107 CET	443	49949	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:10.672198057 CET	49949	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:10.672215939 CET	443	49949	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:10.672627926 CET	443	49949	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:10.673265934 CET	49949	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:10.673352003 CET	443	49949	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:10.673593998 CET	49949	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:10.673619032 CET	443	49949	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:10.696482897 CET	443	49945	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:10.696727037 CET	443	49945	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:10.696805954 CET	49945	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:10.697864056 CET	49945	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:10.697890997 CET	443	49945	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:10.711447954 CET	443	49950	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:10.711790085 CET	49950	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:10.711801052 CET	443	49950	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:10.712925911 CET	443	49950	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:10.713361979 CET	49950	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:10.713515997 CET	49950	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:10.713521004 CET	443	49950	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:10.713536024 CET	443	49950	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:10.713582039 CET	49950	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:10.713664055 CET	443	49950	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:10.761228085 CET	49950	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:10.818161964 CET	443	49951	142.250.186.110	192.168.2.10
Jan 10, 2025 00:22:10.818424940 CET	49951	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:22:10.818434954 CET	443	49951	142.250.186.110	192.168.2.10
Jan 10, 2025 00:22:10.818797112 CET	443	49951	142.250.186.110	192.168.2.10
Jan 10, 2025 00:22:10.819129944 CET	49951	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:22:10.819195986 CET	443	49951	142.250.186.110	192.168.2.10
Jan 10, 2025 00:22:10.819272041 CET	49951	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:22:10.850544930 CET	443	49949	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:10.850636005 CET	443	49949	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:10.850785017 CET	49949	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:10.851288080 CET	49949	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:10.851300955 CET	443	49949	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:10.863331079 CET	443	49951	142.250.186.110	192.168.2.10
Jan 10, 2025 00:22:10.976366997 CET	443	49950	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:10.976448059 CET	443	49950	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:10.976521969 CET	49950	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:10.976954937 CET	49950	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:10.976974010 CET	443	49950	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:10.981067896 CET	49957	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:10.981112003 CET	443	49957	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:10.981415033 CET	49957	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:10.981630087 CET	49957	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:10.981651068 CET	443	49957	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:11.112530947 CET	443	49951	142.250.186.110	192.168.2.10
Jan 10, 2025 00:22:11.113394976 CET	443	49951	142.250.186.110	192.168.2.10
Jan 10, 2025 00:22:11.113581896 CET	49951	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:22:11.114119053 CET	49951	443	192.168.2.10	142.250.186.110
Jan 10, 2025 00:22:11.114140034 CET	443	49951	142.250.186.110	192.168.2.10
Jan 10, 2025 00:22:11.575063944 CET	80	49902	185.53.177.50	192.168.2.10
Jan 10, 2025 00:22:11.575160980 CET	49902	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:22:11.826895952 CET	443	49957	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:11.827409029 CET	49957	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:11.827440977 CET	443	49957	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:11.827857018 CET	443	49957	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:11.828288078 CET	49957	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:11.828366041 CET	443	49957	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:11.828528881 CET	49957	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:11.871334076 CET	443	49957	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:12.008179903 CET	443	49957	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:12.008277893 CET	443	49957	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:12.008400917 CET	49957	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:12.176146984 CET	49902	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:22:12.179234982 CET	49963	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:12.179277897 CET	443	49963	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:12.179348946 CET	49963	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:12.180018902 CET	49963	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:12.180038929 CET	443	49963	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:12.183377028 CET	80	49902	185.53.177.50	192.168.2.10
Jan 10, 2025 00:22:12.214262009 CET	49957	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:12.214294910 CET	443	49957	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:13.005471945 CET	443	49963	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:13.005764961 CET	49963	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:13.005774975 CET	443	49963	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:13.006205082 CET	443	49963	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:13.006642103 CET	49963	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:13.006741047 CET	443	49963	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:13.006807089 CET	49963	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:13.006835938 CET	49963	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:13.006885052 CET	443	49963	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:13.191329956 CET	443	49963	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:13.191445112 CET	443	49963	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:13.191498995 CET	49963	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:13.191924095 CET	49963	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:13.191941977 CET	443	49963	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:13.196131945 CET	49974	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:13.196172953 CET	443	49974	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:13.196237087 CET	49974	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:13.196536064 CET	49974	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:13.196549892 CET	443	49974	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:14.012984991 CET	49980	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:14.013031960 CET	443	49980	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:14.013118982 CET	49980	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:14.013436079 CET	49980	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:14.013449907 CET	443	49980	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:14.028301001 CET	443	49974	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:14.028569937 CET	49974	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:14.028584957 CET	443	49974	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:14.028997898 CET	443	49974	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:14.029325008 CET	49974	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:14.029387951 CET	443	49974	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:14.029608965 CET	49974	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:14.071362019 CET	443	49974	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:14.206834078 CET	443	49974	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:14.206950903 CET	443	49974	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:14.207000971 CET	49974	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:14.208548069 CET	49974	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:14.208564997 CET	443	49974	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:14.816036940 CET	443	49980	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:14.816360950 CET	49980	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:14.816373110 CET	443	49980	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:14.816726923 CET	443	49980	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:14.817064047 CET	49980	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:14.817118883 CET	443	49980	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:14.817213058 CET	49980	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:14.817244053 CET	49980	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:14.817271948 CET	443	49980	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:14.870244026 CET	49980	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:15.088659048 CET	443	49980	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:15.088767052 CET	443	49980	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:15.088957071 CET	49980	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:15.089330912 CET	49980	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:15.089351892 CET	443	49980	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:15.089385986 CET	49980	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:15.089402914 CET	49980	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:15.092832088 CET	49986	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:15.092864037 CET	443	49986	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:15.093125105 CET	49986	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:15.093169928 CET	49986	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:15.093177080 CET	443	49986	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:15.903511047 CET	443	49986	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:15.903881073 CET	49986	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:15.903898954 CET	443	49986	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:15.904262066 CET	443	49986	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:15.904964924 CET	49986	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:15.905035019 CET	443	49986	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:15.905035973 CET	49986	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:15.947331905 CET	443	49986	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:15.948357105 CET	49986	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:16.083913088 CET	443	49986	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:16.084007025 CET	443	49986	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:16.084264994 CET	49986	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:16.084748030 CET	49986	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:16.084748030 CET	49986	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:16.084770918 CET	443	49986	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:16.084963083 CET	49986	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:17.402937889 CET	49672	443	192.168.2.10	173.222.162.55
Jan 10, 2025 00:22:18.018991947 CET	50006	443	192.168.2.10	185.53.179.31
Jan 10, 2025 00:22:18.019045115 CET	443	50006	185.53.179.31	192.168.2.10
Jan 10, 2025 00:22:18.019108057 CET	50006	443	192.168.2.10	185.53.179.31
Jan 10, 2025 00:22:18.019748926 CET	50006	443	192.168.2.10	185.53.179.31
Jan 10, 2025 00:22:18.019762993 CET	443	50006	185.53.179.31	192.168.2.10
Jan 10, 2025 00:22:18.206442118 CET	443	49853	173.222.162.55	192.168.2.10
Jan 10, 2025 00:22:18.206562996 CET	49853	443	192.168.2.10	173.222.162.55
Jan 10, 2025 00:22:18.786393881 CET	443	50006	185.53.179.31	192.168.2.10
Jan 10, 2025 00:22:18.832580090 CET	50006	443	192.168.2.10	185.53.179.31
Jan 10, 2025 00:22:18.832604885 CET	443	50006	185.53.179.31	192.168.2.10
Jan 10, 2025 00:22:18.833266973 CET	443	50006	185.53.179.31	192.168.2.10
Jan 10, 2025 00:22:18.868231058 CET	50006	443	192.168.2.10	185.53.179.31
Jan 10, 2025 00:22:18.868417025 CET	443	50006	185.53.179.31	192.168.2.10
Jan 10, 2025 00:22:18.870080948 CET	50006	443	192.168.2.10	185.53.179.31
Jan 10, 2025 00:22:18.880451918 CET	50015	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:18.880486965 CET	443	50015	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:18.880559921 CET	50015	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:18.880963087 CET	50015	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:18.880978107 CET	443	50015	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:18.911334991 CET	443	50006	185.53.179.31	192.168.2.10
Jan 10, 2025 00:22:19.078169107 CET	443	50006	185.53.179.31	192.168.2.10
Jan 10, 2025 00:22:19.078263998 CET	443	50006	185.53.179.31	192.168.2.10
Jan 10, 2025 00:22:19.078511000 CET	50006	443	192.168.2.10	185.53.179.31
Jan 10, 2025 00:22:19.078690052 CET	50006	443	192.168.2.10	185.53.179.31
Jan 10, 2025 00:22:19.078702927 CET	443	50006	185.53.179.31	192.168.2.10
Jan 10, 2025 00:22:19.261878967 CET	50017	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:19.261912107 CET	443	50017	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:19.261969090 CET	50017	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:19.264369965 CET	50017	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:19.264385939 CET	443	50017	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:19.673527002 CET	443	50015	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:19.673921108 CET	50015	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:19.673933029 CET	443	50015	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:19.674309015 CET	443	50015	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:19.674637079 CET	50015	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:19.674705029 CET	443	50015	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:19.674803972 CET	50015	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:19.674900055 CET	50015	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:19.674923897 CET	443	50015	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:19.896197081 CET	443	50017	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:19.896487951 CET	50017	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:19.896498919 CET	443	50017	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:19.898099899 CET	443	50017	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:19.898169041 CET	50017	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:19.899255991 CET	50017	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:19.899447918 CET	50017	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:19.899454117 CET	443	50017	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:19.899481058 CET	443	50017	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:19.932446003 CET	443	50015	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:19.932534933 CET	443	50015	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:19.932596922 CET	50015	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:19.933006048 CET	50015	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:19.933021069 CET	443	50015	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:19.936542034 CET	50022	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:19.936563015 CET	443	50022	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:19.936651945 CET	50022	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:19.936896086 CET	50022	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:19.936908007 CET	443	50022	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:19.955262899 CET	50017	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:19.955296993 CET	443	50017	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:19.996746063 CET	50017	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.107666969 CET	443	50017	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.108011007 CET	443	50017	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.108019114 CET	443	50017	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.108047009 CET	443	50017	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.108059883 CET	443	50017	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.108078003 CET	443	50017	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.108086109 CET	50017	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.108114958 CET	443	50017	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.108149052 CET	50017	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.108182907 CET	50017	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.200470924 CET	443	50017	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.200541973 CET	50017	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.202511072 CET	443	50017	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.202538013 CET	443	50017	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.202588081 CET	50017	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.202601910 CET	443	50017	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.202641010 CET	50017	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.202661037 CET	50017	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.204135895 CET	443	50017	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.204160929 CET	443	50017	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.204199076 CET	50017	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.204207897 CET	443	50017	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.204243898 CET	50017	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.204262972 CET	50017	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.222999096 CET	50027	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.223035097 CET	443	50027	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.223103046 CET	50027	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.223589897 CET	50027	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.223603010 CET	443	50027	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.224214077 CET	50028	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.224261045 CET	443	50028	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.224312067 CET	50028	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.224883080 CET	50028	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.224901915 CET	443	50028	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.226991892 CET	50029	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.227030039 CET	443	50029	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.227083921 CET	50029	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.228251934 CET	50029	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.228269100 CET	443	50029	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.292128086 CET	443	50017	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.292155981 CET	443	50017	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.292198896 CET	443	50017	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.292198896 CET	50017	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.292220116 CET	443	50017	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.292246103 CET	50017	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.292294025 CET	443	50017	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.292334080 CET	50017	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.293606997 CET	50017	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.293628931 CET	443	50017	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.699388027 CET	443	50028	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.699671030 CET	50028	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.699682951 CET	443	50028	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.700083971 CET	443	50028	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.700579882 CET	50028	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.700664997 CET	443	50028	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.700772047 CET	50028	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.712248087 CET	443	50027	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.712605000 CET	50027	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.712618113 CET	443	50027	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.712974072 CET	443	50027	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.713402987 CET	50027	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.713469982 CET	443	50027	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.714004040 CET	50027	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.722373962 CET	443	50029	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.722637892 CET	50029	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.722661972 CET	443	50029	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.723756075 CET	443	50029	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.723812103 CET	50029	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.724175930 CET	50029	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.724239111 CET	443	50029	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.724312067 CET	50029	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.724323034 CET	443	50029	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.747330904 CET	443	50028	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.752932072 CET	443	50022	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:20.753340960 CET	50022	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:20.753351927 CET	443	50022	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:20.753707886 CET	443	50022	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:20.754115105 CET	50022	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:20.754189014 CET	443	50022	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:20.754316092 CET	50022	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:20.755337954 CET	443	50027	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.779114008 CET	50029	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.795325994 CET	443	50022	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:20.844702959 CET	443	50028	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.844809055 CET	443	50028	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.844860077 CET	50028	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.845994949 CET	50028	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.846019030 CET	443	50028	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.936366081 CET	443	50022	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:20.936463118 CET	443	50022	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:20.936515093 CET	50022	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:20.937630892 CET	50022	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:20.937645912 CET	443	50022	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:20.959101915 CET	443	50027	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.959126949 CET	443	50027	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.959144115 CET	443	50027	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.959212065 CET	50027	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.959227085 CET	443	50027	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.959287882 CET	50027	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.960572958 CET	443	50027	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.960588932 CET	443	50027	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.960655928 CET	50027	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.960664988 CET	443	50027	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.973546982 CET	443	50029	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.973570108 CET	443	50029	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.973602057 CET	443	50029	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.973608971 CET	443	50029	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.973613024 CET	50029	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.973619938 CET	443	50029	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.973628044 CET	443	50029	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.973638058 CET	443	50029	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.973664999 CET	50029	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.973674059 CET	443	50029	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.973696947 CET	50029	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.973709106 CET	443	50029	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.973817110 CET	50029	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.973928928 CET	443	50029	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.973978043 CET	50029	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.973989010 CET	443	50029	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.973999023 CET	443	50029	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.974046946 CET	50029	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.974046946 CET	50029	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.981076002 CET	50029	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.981095076 CET	443	50029	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.988265991 CET	50036	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.988296986 CET	443	50036	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.988353968 CET	50036	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.988954067 CET	50037	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.988992929 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.989049911 CET	50037	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.989190102 CET	50036	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.989202976 CET	443	50036	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:20.989403009 CET	50037	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:20.989419937 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.012334108 CET	50027	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.045475006 CET	443	50027	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.045497894 CET	443	50027	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.045557976 CET	50027	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.045587063 CET	443	50027	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.045604944 CET	50027	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.045630932 CET	50027	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.047347069 CET	443	50027	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.047363043 CET	443	50027	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.047398090 CET	443	50027	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.047400951 CET	50027	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.047409058 CET	443	50027	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.047440052 CET	50027	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.047478914 CET	443	50027	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.047523975 CET	50027	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.047851086 CET	50027	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.047868967 CET	443	50027	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.053736925 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.053775072 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.053832054 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.054447889 CET	50039	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.054501057 CET	443	50039	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.054749012 CET	50039	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.055022001 CET	50040	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.055057049 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.055114985 CET	50040	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.055387020 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.055402994 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.055584908 CET	50039	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.055600882 CET	443	50039	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.055766106 CET	50040	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.055780888 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.286575079 CET	50041	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.286623955 CET	443	50041	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.286691904 CET	50041	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.288300991 CET	50041	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.288325071 CET	443	50041	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.430834055 CET	50042	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:21.430867910 CET	443	50042	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:21.432425022 CET	50042	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:21.432703972 CET	50043	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:21.432744026 CET	443	50043	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:21.432813883 CET	50043	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:21.433096886 CET	50043	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:21.433110952 CET	443	50043	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:21.436933994 CET	50042	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:21.436947107 CET	443	50042	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:21.461328983 CET	443	50036	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.461714029 CET	50036	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.461735964 CET	443	50036	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.462105989 CET	443	50036	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.462630033 CET	50036	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.462692022 CET	443	50036	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.462805033 CET	50036	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.480509043 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.480890989 CET	50037	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.480915070 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.481328011 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.481689930 CET	50037	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.481758118 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.481827021 CET	50037	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.503340006 CET	443	50036	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.523332119 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.523905039 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.524210930 CET	50040	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.524229050 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.525320053 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.525331974 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.525379896 CET	50040	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.525568962 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.525593996 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.525877953 CET	50040	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.525943041 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.526015043 CET	50040	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.526021957 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.527642965 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.527700901 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.528080940 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.528271914 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.528280973 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.528556108 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.542880058 CET	443	50039	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.543283939 CET	50039	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.543307066 CET	443	50039	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.544749022 CET	443	50039	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.544817924 CET	50039	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.545242071 CET	50039	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.545325994 CET	443	50039	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.545420885 CET	50039	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.545430899 CET	443	50039	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.580035925 CET	50040	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.580041885 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.580074072 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.594733953 CET	50039	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.626022100 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.644675970 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.644701004 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.644779921 CET	50037	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.644798994 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.699094057 CET	50037	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.736375093 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.736387014 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.736429930 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.736449003 CET	50037	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.736464024 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.736471891 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.736498117 CET	50037	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.736516953 CET	50037	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.761428118 CET	443	50041	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.761848927 CET	50041	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.761878967 CET	443	50041	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.762876034 CET	443	50041	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.762936115 CET	50041	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.763346910 CET	50041	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.763412952 CET	443	50041	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.763489008 CET	50041	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.768160105 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.768187046 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.768193960 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.768223047 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.768245935 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.768253088 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.768254042 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.768287897 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.768304110 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.768312931 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.768326044 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.769843102 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.769869089 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.769906044 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.769932032 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.769953012 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.769970894 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.777477026 CET	443	50039	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.777498960 CET	443	50039	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.777506113 CET	443	50039	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.777518988 CET	443	50039	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.777553082 CET	443	50039	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.777554035 CET	50039	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.777586937 CET	443	50039	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.777604103 CET	50039	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.777604103 CET	50039	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.777632952 CET	50039	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.778635025 CET	443	50039	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.778682947 CET	443	50039	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.778707027 CET	50039	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.778717041 CET	443	50039	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.778732061 CET	50039	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.811326981 CET	443	50041	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.812046051 CET	50041	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.812047005 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.812061071 CET	443	50041	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.827519894 CET	50039	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.835120916 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.835156918 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.835199118 CET	50037	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.835212946 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.835256100 CET	50037	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.835397959 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.835416079 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.835448980 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.835474968 CET	50037	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.835484028 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.835513115 CET	50037	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.835551977 CET	50037	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.836169004 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.836188078 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.836225033 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.836231947 CET	50037	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.836239100 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.836291075 CET	50037	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.858620882 CET	50041	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.877091885 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.877105951 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.877137899 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.877180099 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.877207994 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.877239943 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.877254009 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.877525091 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.877542019 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.877593040 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.877600908 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.877636909 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.879147053 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.879162073 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.879196882 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.879225969 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.879240036 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.879261017 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.880342007 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.880362034 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.880393028 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.880408049 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.880433083 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.880769968 CET	443	50039	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.880789042 CET	443	50039	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.880809069 CET	443	50039	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.880840063 CET	50039	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.880851984 CET	443	50039	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.880886078 CET	50039	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.880898952 CET	50039	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.882692099 CET	443	50039	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.882719994 CET	443	50039	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.882769108 CET	50039	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.882776976 CET	443	50039	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.882797956 CET	443	50039	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.882826090 CET	50039	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.882834911 CET	443	50039	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.882859945 CET	50039	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.882963896 CET	443	50039	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.882988930 CET	443	50039	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.883017063 CET	50039	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.883025885 CET	443	50039	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.883059025 CET	50039	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.883084059 CET	443	50039	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.883085012 CET	50039	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.883147001 CET	50039	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.883801937 CET	50039	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.883812904 CET	443	50039	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.919106007 CET	50049	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.919138908 CET	443	50049	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.919219971 CET	50049	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.919411898 CET	443	50041	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.919433117 CET	443	50041	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.919441938 CET	443	50041	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.919459105 CET	443	50041	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.919461966 CET	50049	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.919466972 CET	443	50041	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.919476986 CET	443	50049	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.919486046 CET	50041	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.919496059 CET	443	50041	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.919526100 CET	443	50041	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.919537067 CET	50041	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.919576883 CET	50041	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.921185017 CET	50041	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.921194077 CET	443	50041	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.924752951 CET	50050	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.924778938 CET	443	50050	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.924859047 CET	50050	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.924937010 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.924959898 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.925023079 CET	50037	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.925031900 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.925069094 CET	50050	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.925077915 CET	443	50050	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.925124884 CET	50037	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.925339937 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.925355911 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.925421953 CET	50037	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.925431967 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.925479889 CET	50037	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.925760031 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.925791979 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.925837994 CET	50037	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.925843954 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.925889015 CET	50037	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.926619053 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.926656008 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.926700115 CET	50037	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.926703930 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.926740885 CET	50037	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.926762104 CET	50037	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.927032948 CET	50037	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.927045107 CET	443	50037	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.931286097 CET	50051	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.931302071 CET	443	50051	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.931368113 CET	50051	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.931905985 CET	50051	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.931915998 CET	443	50051	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.932602882 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.932609081 CET	50052	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.932665110 CET	443	50052	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.932801962 CET	50052	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.933444023 CET	50052	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.933470011 CET	443	50052	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.951107979 CET	443	50036	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.951136112 CET	443	50036	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.951195955 CET	50036	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.951210022 CET	443	50036	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.951400995 CET	50036	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.952202082 CET	50036	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.952217102 CET	443	50036	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.954624891 CET	50053	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.954664946 CET	443	50053	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.955092907 CET	50053	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.955670118 CET	50053	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.955684900 CET	443	50053	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.958441019 CET	50054	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.958484888 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.958581924 CET	50054	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.958758116 CET	50054	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.958770037 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.963938951 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.963951111 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.963984966 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.964011908 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.964032888 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.964052916 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.964073896 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.964492083 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.964529991 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.964544058 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.964550972 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.964579105 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.964981079 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.965040922 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.965048075 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.965080976 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.965940952 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.965970039 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.965998888 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:21.966006041 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:21.966056108 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.028703928 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.028732061 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.028780937 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.028803110 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.028817892 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.028840065 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.029385090 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.029403925 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.029439926 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.029448986 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.029474020 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.029490948 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.051057100 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.051081896 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.051140070 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.051151991 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.051211119 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.051968098 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.051995993 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.052048922 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.052057981 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.052084923 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.052098989 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.052736998 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.052752972 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.052788973 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.052797079 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.052825928 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.052844048 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.053618908 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.053668976 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.053721905 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.053730011 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.053740978 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.053772926 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.053781986 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.053798914 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.053807020 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.053833961 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.054708958 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.054732084 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.054752111 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.054820061 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.054825068 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.054860115 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.055562019 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.055578947 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.055650949 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.055659056 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.055700064 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.079870939 CET	443	50042	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:22.080161095 CET	50042	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:22.080188990 CET	443	50042	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:22.080267906 CET	443	50043	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:22.080449104 CET	50043	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:22.080466986 CET	443	50043	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:22.081296921 CET	443	50042	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:22.081367016 CET	50042	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:22.081526041 CET	443	50043	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:22.081592083 CET	50043	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:22.082523108 CET	50042	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:22.082590103 CET	443	50042	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:22.082609892 CET	50043	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:22.082674980 CET	443	50043	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:22.082905054 CET	50042	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:22.082911968 CET	443	50042	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:22.082932949 CET	50043	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:22.082942009 CET	443	50043	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:22.119214058 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.119277954 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.119324923 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.119349003 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.119383097 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.137592077 CET	50042	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:22.137654066 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.137687922 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.137707949 CET	50043	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:22.137717962 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.137732983 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.137748003 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.137782097 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.137789965 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.137804985 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.138684988 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.138705969 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.138770103 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.138803959 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.138830900 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.139197111 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.139211893 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.139252901 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.139261007 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.139287949 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.139425039 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.139440060 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.139475107 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.139483929 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.139509916 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.140371084 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.140393972 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.140448093 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.140455961 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.140486956 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.144062042 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.144084930 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.144156933 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.144166946 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.144747019 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.144769907 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.144805908 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.144812107 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.144840956 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.187241077 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.203809023 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.203843117 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.203893900 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.203902006 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.203955889 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.225184917 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.225212097 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.225285053 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.225294113 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.225307941 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.225435972 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.226129055 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.226156950 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.226207018 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.226212978 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.226248980 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.226594925 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.226619959 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.226655006 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.226660967 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.226682901 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.226701021 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.227041006 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.227056026 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.227103949 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.227112055 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.227350950 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.227696896 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.227725029 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.227776051 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.227782011 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.227807999 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.227822065 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.228116989 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.228132010 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.228176117 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.228183031 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.228212118 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.228230953 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.228486061 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.228502035 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.228558064 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.228565931 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.228604078 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.243010044 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.243038893 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.243051052 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.243068933 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.243081093 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.243088007 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.243093967 CET	50040	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.243128061 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.243144989 CET	50040	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.243191004 CET	50040	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.245577097 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.245593071 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.245668888 CET	50040	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.245691061 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.293450117 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.293483019 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.293535948 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.293559074 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.293606997 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.293627977 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.294738054 CET	50040	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.311966896 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.311992884 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.312046051 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.312064886 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.312100887 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.312122107 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.312396049 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.312416077 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.312452078 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.312458038 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.312532902 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.312613010 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.312630892 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.312670946 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.312680006 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.312716961 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.313390970 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.313410997 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.313482046 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.313488960 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.313524961 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.313926935 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.313961029 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.314002991 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.314007998 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.314030886 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.314043045 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.314162016 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.314188004 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.314219952 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.314224958 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.314251900 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.314279079 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.314399958 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.314416885 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.314454079 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.314460039 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.314485073 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.314507961 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.330668926 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.330682993 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.330717087 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.330739975 CET	50040	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.330750942 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.330766916 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.330780029 CET	50040	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.330816984 CET	50040	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.331707001 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.331724882 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.331769943 CET	50040	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.331777096 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.331815958 CET	50040	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.356254101 CET	443	50042	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:22.356448889 CET	443	50042	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:22.356456041 CET	443	50042	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:22.356498003 CET	50042	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:22.356514931 CET	443	50042	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:22.356539011 CET	50042	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:22.357657909 CET	50042	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:22.357696056 CET	443	50042	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:22.357748032 CET	50042	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:22.358112097 CET	443	50043	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:22.360949039 CET	50057	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.360981941 CET	443	50057	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.361259937 CET	50057	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.361526012 CET	50057	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.361536980 CET	443	50057	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.362063885 CET	50058	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.362102985 CET	443	50058	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.362166882 CET	50058	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.362461090 CET	50058	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.362476110 CET	443	50058	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.362917900 CET	50059	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:22.362957954 CET	443	50059	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:22.363028049 CET	50059	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:22.363526106 CET	50059	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:22.363543987 CET	443	50059	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:22.363552094 CET	443	50043	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:22.363559008 CET	443	50043	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:22.363573074 CET	443	50043	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:22.363580942 CET	443	50043	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:22.363603115 CET	50043	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:22.363624096 CET	443	50043	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:22.363636017 CET	50043	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:22.363637924 CET	443	50043	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:22.363662004 CET	50043	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:22.363696098 CET	50043	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:22.363967896 CET	50043	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:22.363980055 CET	443	50043	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:22.367625952 CET	50060	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:22.367650032 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:22.367734909 CET	50060	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:22.368825912 CET	50060	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:22.368844986 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:22.379666090 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.379694939 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.379764080 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.379782915 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.379825115 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.392633915 CET	50061	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:22.392678976 CET	443	50061	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:22.392839909 CET	50062	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:22.392870903 CET	443	50062	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:22.392870903 CET	50061	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:22.393198967 CET	50062	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:22.393198967 CET	50062	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:22.393234968 CET	443	50062	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:22.393322945 CET	50061	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:22.393337011 CET	443	50061	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:22.398288965 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.398312092 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.398365021 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.398385048 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.398418903 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.398672104 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.398686886 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.398736954 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.398746967 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.398783922 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.399044991 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.399059057 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.399099112 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.399106979 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.399137974 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.399334908 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.399375916 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.399382114 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.399389982 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.399410963 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.399436951 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.399461985 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.399772882 CET	50038	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.399785042 CET	443	50038	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.403959990 CET	50064	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:22.403995991 CET	443	50064	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:22.404272079 CET	50064	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:22.404480934 CET	50064	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:22.404495955 CET	443	50064	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:22.405514002 CET	443	50049	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.405761957 CET	50049	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.405776978 CET	443	50049	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.407334089 CET	443	50049	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.407406092 CET	50049	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.407676935 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.407718897 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.407783031 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.408260107 CET	50049	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.408365965 CET	443	50049	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.408533096 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.408545017 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.408679962 CET	50049	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.408687115 CET	443	50049	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.423796892 CET	443	50051	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.423966885 CET	443	50052	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.424082994 CET	50051	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.424093962 CET	443	50051	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.424279928 CET	50052	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.424302101 CET	443	50052	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.424459934 CET	443	50051	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.424802065 CET	50051	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.424865007 CET	443	50051	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.424957037 CET	50051	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.425578117 CET	443	50052	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.425674915 CET	50052	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.426031113 CET	50052	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.426031113 CET	50052	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.426150084 CET	443	50052	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.429876089 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.429991007 CET	443	50050	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.430077076 CET	50054	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.430090904 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.430192947 CET	50050	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.430213928 CET	443	50050	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.431071997 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.431127071 CET	50054	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.431325912 CET	443	50050	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.431377888 CET	50050	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.431658030 CET	50054	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.431737900 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.431780100 CET	50050	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.431869030 CET	443	50050	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.432008028 CET	50054	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.432015896 CET	50050	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.432017088 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.432025909 CET	443	50050	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.450489044 CET	50049	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.452563047 CET	443	50053	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.452853918 CET	50053	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.452882051 CET	443	50053	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.453460932 CET	443	50053	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.453816891 CET	50053	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.453910112 CET	443	50053	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.454020023 CET	50053	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.471333981 CET	443	50051	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.481091022 CET	50050	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.481091976 CET	50052	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.481091976 CET	50054	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.481142998 CET	443	50052	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.495336056 CET	443	50053	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.530829906 CET	50052	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.599486113 CET	443	50052	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.599545002 CET	443	50052	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.599554062 CET	443	50052	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.599584103 CET	443	50052	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.599598885 CET	443	50052	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.599621058 CET	50052	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.599638939 CET	443	50052	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.599652052 CET	443	50052	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.599663973 CET	50052	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.599850893 CET	50052	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.601075888 CET	50052	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.601116896 CET	443	50052	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.609549999 CET	443	50053	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.609581947 CET	443	50053	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.609632015 CET	443	50053	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.609649897 CET	50053	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.609672070 CET	443	50053	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.609687090 CET	50053	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.609707117 CET	443	50053	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.609765053 CET	50053	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.612230062 CET	50053	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.612257004 CET	443	50053	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.615961075 CET	50068	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:22.616003036 CET	443	50068	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:22.616107941 CET	50068	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:22.616378069 CET	50069	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.616404057 CET	443	50069	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.616528034 CET	50069	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.616760969 CET	50068	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:22.616776943 CET	443	50068	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:22.617038965 CET	50069	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.617049932 CET	443	50069	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.658680916 CET	443	50051	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.658713102 CET	443	50051	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.658760071 CET	443	50051	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.658791065 CET	50051	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.658799887 CET	443	50051	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.658813000 CET	443	50051	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.658835888 CET	50051	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.658854961 CET	50051	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.660403967 CET	50051	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.660417080 CET	443	50051	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.663878918 CET	50070	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.663907051 CET	443	50070	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.664015055 CET	50070	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.664489985 CET	50070	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.664504051 CET	443	50070	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.666003942 CET	443	50049	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.666026115 CET	443	50049	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.666033983 CET	443	50049	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.666043043 CET	443	50049	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.666066885 CET	443	50049	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.666091919 CET	50049	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.666105986 CET	443	50049	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.666119099 CET	50049	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.666152954 CET	50049	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.666889906 CET	443	50049	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.666930914 CET	443	50049	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.666949034 CET	50049	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.666973114 CET	443	50049	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.666990995 CET	50049	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.714018106 CET	50049	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.722403049 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.722413063 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.722444057 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.722480059 CET	50040	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.722503901 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.722529888 CET	50040	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.722564936 CET	50040	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.724843025 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.724858999 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.724906921 CET	50040	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.724922895 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.724957943 CET	50040	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.727262974 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.727289915 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.727324009 CET	50040	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.727336884 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.727359056 CET	50040	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.729650974 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.729665995 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.729743004 CET	50040	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.729754925 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.754686117 CET	443	50049	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.754693985 CET	443	50049	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.754724979 CET	443	50049	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.754765987 CET	50049	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.754787922 CET	443	50049	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.754837990 CET	50049	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.754853964 CET	50049	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.756715059 CET	443	50049	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.756733894 CET	443	50049	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.756997108 CET	50049	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.757014990 CET	443	50049	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.757148981 CET	50049	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.758322954 CET	443	50049	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.758341074 CET	443	50049	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.758394003 CET	50049	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.758409977 CET	443	50049	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.758450031 CET	50049	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.759253025 CET	443	50049	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.759305954 CET	50049	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.759326935 CET	443	50049	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.759358883 CET	443	50049	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.759486914 CET	50049	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.759617090 CET	50049	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.759635925 CET	443	50049	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.775201082 CET	50040	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.807615042 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.807693958 CET	50040	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.839378119 CET	443	50057	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.839934111 CET	50057	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.839961052 CET	443	50057	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.843590975 CET	443	50057	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.843662977 CET	50057	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.844113111 CET	50057	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.844290018 CET	50057	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.844296932 CET	443	50057	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.874989986 CET	443	50058	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.875344038 CET	50058	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.875380039 CET	443	50058	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.876430035 CET	443	50058	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.876523018 CET	50058	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.877049923 CET	50058	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.877115965 CET	443	50058	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.877234936 CET	50058	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.877244949 CET	443	50058	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.887330055 CET	443	50057	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.887445927 CET	50057	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.887469053 CET	443	50057	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.918920994 CET	50058	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.934286118 CET	50057	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.949814081 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.950443029 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.950453997 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.951642990 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.951746941 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.952306032 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.952378988 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.952821016 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.952827930 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.953824997 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.953874111 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.953917027 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.953938961 CET	50040	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.953982115 CET	50040	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.954771996 CET	50040	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.954787016 CET	443	50040	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.967231989 CET	50074	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.967252016 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.968388081 CET	50074	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.969063997 CET	50074	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:22.969077110 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:22.995450020 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.015043974 CET	443	50057	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.015068054 CET	443	50057	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.015074968 CET	443	50057	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.015094042 CET	443	50057	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.015126944 CET	443	50057	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.015146017 CET	50057	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.015166998 CET	443	50057	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.015181065 CET	50057	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.015202999 CET	443	50057	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.015212059 CET	50057	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.015239954 CET	50057	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.016632080 CET	50057	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.016649961 CET	443	50057	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.028101921 CET	443	50059	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.029330015 CET	50059	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.029360056 CET	443	50059	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.029752970 CET	443	50059	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.030245066 CET	50059	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.030329943 CET	443	50059	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.030504942 CET	50059	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.031920910 CET	443	50058	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.031999111 CET	443	50058	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.032054901 CET	50058	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.034224033 CET	50058	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.034259081 CET	443	50058	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.034403086 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.034938097 CET	50060	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.034949064 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.036184072 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.036241055 CET	50060	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.036602974 CET	50060	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.036668062 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.036863089 CET	50060	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.043694973 CET	443	50061	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:23.044467926 CET	50061	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:23.044478893 CET	443	50061	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:23.045571089 CET	443	50061	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:23.045625925 CET	50061	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:23.046293020 CET	50061	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:23.046360970 CET	443	50061	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:23.046576977 CET	50061	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:23.046583891 CET	443	50061	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:23.052500010 CET	443	50064	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.053926945 CET	50064	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.053949118 CET	443	50064	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.055012941 CET	443	50064	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.055078983 CET	50064	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.056624889 CET	50064	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.056724072 CET	443	50064	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.056814909 CET	50064	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.061579943 CET	443	50062	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:23.061961889 CET	50062	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:23.061990023 CET	443	50062	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:23.063667059 CET	443	50062	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:23.063746929 CET	50062	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:23.064344883 CET	50062	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:23.064493895 CET	443	50062	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:23.064495087 CET	50062	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:23.075330973 CET	443	50059	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.083333969 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.089910984 CET	50060	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.089937925 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.089992046 CET	50061	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:23.097264051 CET	50064	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.097270966 CET	443	50064	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.111330986 CET	443	50062	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:23.116420031 CET	50062	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:23.116444111 CET	443	50062	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:23.140197039 CET	443	50069	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.140479088 CET	50069	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.140507936 CET	443	50069	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.140921116 CET	443	50069	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.141213894 CET	50060	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.141222000 CET	50064	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.143768072 CET	50069	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.143913031 CET	443	50069	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.144094944 CET	50069	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.157196999 CET	50062	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:23.159390926 CET	443	50070	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.162575960 CET	443	50050	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.162604094 CET	443	50050	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.162641048 CET	443	50050	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.162684917 CET	443	50050	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.162688971 CET	50050	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.162729979 CET	50050	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.185868025 CET	50070	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.185887098 CET	443	50070	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.186523914 CET	443	50070	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.188713074 CET	50075	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.188757896 CET	443	50075	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.189028978 CET	50075	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.189486980 CET	50076	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.189517975 CET	443	50076	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.189632893 CET	50076	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.190351009 CET	50070	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.190465927 CET	443	50070	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.191325903 CET	443	50069	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.191348076 CET	50075	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.191378117 CET	443	50075	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.192054987 CET	50076	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.192070007 CET	443	50076	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.193070889 CET	50070	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.193306923 CET	50050	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.193336964 CET	443	50050	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.194554090 CET	50077	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.194581985 CET	443	50077	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.195225954 CET	50077	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.195605993 CET	50077	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.195631027 CET	443	50077	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.230335951 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.230360031 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.230386972 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.230406046 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.230431080 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.230434895 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.230460882 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.230520964 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.230520964 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.231559038 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.231590986 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.231667042 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.231667042 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.231676102 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.239322901 CET	443	50070	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.249223948 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.249258041 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.249269009 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.249281883 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.249314070 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.249335051 CET	50054	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.249352932 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.249371052 CET	50054	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.249401093 CET	50054	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.251291037 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.251329899 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.251362085 CET	50054	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.251368999 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.251383066 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.251514912 CET	50054	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.251514912 CET	50054	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.251533031 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.251770020 CET	50054	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.272942066 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.298383951 CET	443	50069	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.298408031 CET	443	50069	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.298449993 CET	443	50069	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.298465014 CET	50069	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.298494101 CET	443	50069	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.298515081 CET	50069	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.298515081 CET	443	50069	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.298553944 CET	50069	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.299942970 CET	50069	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.299966097 CET	443	50069	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.300474882 CET	50083	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.300515890 CET	443	50083	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.300617933 CET	50083	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.302083015 CET	50083	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.302109003 CET	443	50083	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.311372042 CET	443	50068	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.312056065 CET	50068	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.312063932 CET	443	50068	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.313132048 CET	443	50068	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.313180923 CET	50068	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.313667059 CET	50068	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.313734055 CET	443	50068	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.313931942 CET	50068	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.313936949 CET	443	50068	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.315824986 CET	443	50070	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.315845013 CET	443	50070	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.315876007 CET	443	50070	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.315918922 CET	443	50070	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.315951109 CET	50070	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.315982103 CET	50070	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.317449093 CET	50070	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.317462921 CET	443	50070	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.319494009 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.319888115 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.319932938 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.319950104 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.319983959 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.319983959 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.319993973 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.320014954 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.320029020 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.320082903 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.321577072 CET	443	50059	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.321605921 CET	443	50059	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.321635008 CET	443	50059	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.321696997 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.321700096 CET	50059	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.321700096 CET	50059	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.321711063 CET	443	50059	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.321717024 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.321755886 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.321770906 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.321830988 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.321834087 CET	50059	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.322479010 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.322565079 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.322578907 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.323261023 CET	443	50059	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.323343992 CET	443	50059	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.323874950 CET	50059	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.324223042 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.324269056 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.324346066 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.324358940 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.324414968 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.324851990 CET	50059	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.324857950 CET	443	50059	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.324871063 CET	50059	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.324950933 CET	50059	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.327105999 CET	443	50061	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:23.327219009 CET	443	50061	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:23.327279091 CET	50061	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:23.327286959 CET	443	50061	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:23.329092979 CET	50061	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:23.329133034 CET	443	50061	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:23.329277992 CET	443	50061	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:23.329317093 CET	50061	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:23.329329967 CET	50061	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:23.329642057 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.329654932 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.329683065 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.329688072 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.329690933 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.329711914 CET	50060	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.329731941 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.329749107 CET	50060	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.329755068 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.329806089 CET	50060	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.336142063 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.336170912 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.336260080 CET	50054	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.336277962 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.336401939 CET	50054	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.337977886 CET	50085	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:23.338011980 CET	443	50085	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:23.338078976 CET	50085	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:23.338275909 CET	50085	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:23.338293076 CET	443	50085	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:23.338654995 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.338689089 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.338781118 CET	50054	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.338781118 CET	50054	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.338790894 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.338852882 CET	50054	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.341273069 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.341291904 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.341365099 CET	50054	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.341365099 CET	50054	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.341376066 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.341526985 CET	50054	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.347708941 CET	443	50064	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.347743034 CET	443	50064	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.347752094 CET	443	50064	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.347776890 CET	443	50064	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.347781897 CET	443	50064	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.347784996 CET	443	50064	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.347814083 CET	50064	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.347820997 CET	443	50064	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.347846985 CET	50064	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.347871065 CET	50064	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.350976944 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.350999117 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.351090908 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.351115942 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.351140976 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.351222038 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.359599113 CET	50068	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.362657070 CET	443	50062	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:23.369301081 CET	443	50062	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:23.369313002 CET	443	50062	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:23.369352102 CET	443	50062	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:23.369366884 CET	443	50062	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:23.369388103 CET	443	50062	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:23.369431019 CET	50062	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:23.369431973 CET	50060	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.369471073 CET	50062	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:23.370057106 CET	50062	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:23.370069027 CET	443	50062	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:23.409416914 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.409427881 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.409454107 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.409466982 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.409483910 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.409491062 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.409495115 CET	50060	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.409535885 CET	50060	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.411071062 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.411097050 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.411173105 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.411173105 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.411199093 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.411237955 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.411896944 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.411927938 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.411956072 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.412014961 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.412040949 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.412218094 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.412825108 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.412861109 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.412902117 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.412929058 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.413208961 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.414690971 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.414715052 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.414776087 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.414798021 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.414864063 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.416445971 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.416471958 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.416606903 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.416630030 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.416877031 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.417175055 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.417184114 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.417212009 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.417244911 CET	50060	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.417251110 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.417282104 CET	50060	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.417284966 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.417355061 CET	50060	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.422472000 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.422498941 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.422585964 CET	50054	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.422585964 CET	50054	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.422599077 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.422631025 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.422722101 CET	50054	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.422730923 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.423935890 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.423957109 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.424052000 CET	50054	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.424062014 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.424875975 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.424909115 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.424976110 CET	50054	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.424976110 CET	50054	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.424983978 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.425720930 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.425750017 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.425791025 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.425811052 CET	50054	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.425837994 CET	50054	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.427131891 CET	443	50064	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.427216053 CET	443	50064	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.427225113 CET	50064	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.427263975 CET	50064	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.428884983 CET	50054	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.428899050 CET	443	50054	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.430339098 CET	50064	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.430361032 CET	443	50064	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.459028959 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.461112976 CET	50074	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.461126089 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.461647987 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.462893009 CET	50074	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.462979078 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.463049889 CET	50074	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.479681969 CET	50087	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:23.479722977 CET	443	50087	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:23.481081963 CET	50087	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:23.481275082 CET	50087	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:23.481292009 CET	443	50087	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:23.495007992 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.495055914 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.495208979 CET	50060	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.495208979 CET	50060	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.495240927 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.496834993 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.496861935 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.496932030 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.496953011 CET	50060	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.496953011 CET	50060	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.496962070 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.496984959 CET	50060	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.496999025 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.497087002 CET	50060	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.499227047 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.499255896 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.499304056 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.499336004 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.499362946 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.499381065 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.499952078 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.499974966 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.500041962 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.500041962 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.500053883 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.501017094 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.501060009 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.501132011 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.501132011 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.501152992 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.501864910 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.501889944 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.501956940 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.501957893 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.501979113 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.502793074 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.502810001 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.502857924 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.502866983 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.502887964 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.502921104 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.503335953 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.503844976 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.503885031 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.504005909 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.504035950 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.504264116 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.504674911 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.504693985 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.504793882 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.504811049 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.504894018 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.508934975 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.530595064 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.530621052 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.530802965 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.530826092 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.531076908 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.574964046 CET	50060	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.574985027 CET	443	50060	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.589037895 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.589067936 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.589178085 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.589178085 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.589206934 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.589234114 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.589279890 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.589287043 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.589330912 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.589330912 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.589487076 CET	443	50068	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.589679003 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.589695930 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.589828968 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.589845896 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.590075016 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.590485096 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.590502977 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.590574026 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.590574026 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.590584040 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.590818882 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.591094971 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.591111898 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.591269970 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.591279984 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.591687918 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.596349955 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.596369028 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.596410990 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.596435070 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.596450090 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.596486092 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.596506119 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.596549988 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.596559048 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.596596956 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.596781015 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.597197056 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.597217083 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.597273111 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.597273111 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.597287893 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.597338915 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.598962069 CET	443	50068	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.598973036 CET	443	50068	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.599003077 CET	443	50068	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.599025011 CET	50068	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.599044085 CET	443	50068	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.599056959 CET	50068	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.599059105 CET	443	50068	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.599085093 CET	50068	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.599108934 CET	50068	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.599510908 CET	50068	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:23.599525928 CET	443	50068	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:23.614110947 CET	50088	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:23.614130974 CET	443	50088	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:23.614343882 CET	50088	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:23.614470959 CET	50088	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:23.614481926 CET	443	50088	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:23.616457939 CET	50089	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:23.616497993 CET	443	50089	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:23.616646051 CET	50089	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:23.616942883 CET	50089	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:23.616955042 CET	443	50089	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:23.620331049 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.620357037 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.620457888 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.620457888 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.620476961 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.620933056 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.639765978 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.639806032 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.639858961 CET	50074	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.639868021 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.652529001 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:22:23.652782917 CET	49758	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:22:23.679106951 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.679131031 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.679251909 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.679251909 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.679280043 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.679419994 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.679805994 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.679822922 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.679879904 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.679891109 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.679903030 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.679950953 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.679954052 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.679964066 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.679984093 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.680036068 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.680036068 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.680043936 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.680110931 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.680207968 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.680222988 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.680253983 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.680259943 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.680290937 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.680290937 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.680864096 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.680880070 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.680957079 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.680957079 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.680963993 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.681102991 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.681343079 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.681359053 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.681406975 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.681415081 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.681490898 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.681845903 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.681863070 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.681926966 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.681926966 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.681936026 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.682249069 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.685817957 CET	50074	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.686558008 CET	443	50076	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.687025070 CET	50076	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.687040091 CET	443	50076	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.687407017 CET	443	50076	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.687956095 CET	50076	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.688013077 CET	443	50076	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.688091993 CET	50076	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.691093922 CET	443	50075	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.691376925 CET	50075	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.691387892 CET	443	50075	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.691768885 CET	443	50075	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.692171097 CET	50075	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.692274094 CET	443	50075	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.692421913 CET	50075	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.692606926 CET	443	50077	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.692970037 CET	50077	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.692980051 CET	443	50077	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.693341017 CET	443	50077	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.693850040 CET	50077	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.693916082 CET	443	50077	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.693938971 CET	50077	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.710297108 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.710323095 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.710367918 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.710395098 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.710414886 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.710536957 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.727577925 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.727590084 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.727624893 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.727644920 CET	50074	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.727655888 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.727663040 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.727689981 CET	50074	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.727705956 CET	50074	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.728327036 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.728379011 CET	50074	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.731062889 CET	50076	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.731081009 CET	443	50076	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.735326052 CET	443	50075	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.735337019 CET	443	50077	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.747030020 CET	50077	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.768809080 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.768834114 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.768937111 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.768955946 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.769001007 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.769239902 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.769258022 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.769294977 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.769304991 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.769342899 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.769351006 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.769738913 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.769761086 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.769798994 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.769808054 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.769835949 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.769851923 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.770031929 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.770049095 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.770163059 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.770172119 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.770207882 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.770625114 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.770643950 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.770690918 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.770699978 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.770771980 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.771027088 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.771045923 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.771079063 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.771085978 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.771126986 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.771339893 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.771356106 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.771398067 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.771405935 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.771446943 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.776058912 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.801851034 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.801878929 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.801944971 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.801970005 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.802001953 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.802018881 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.805025101 CET	443	50083	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.812813997 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.812841892 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.812948942 CET	50074	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.812980890 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.813055038 CET	50074	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.814173937 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.814229012 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.814259052 CET	50074	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.814264059 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.814306974 CET	50074	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.816396952 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.816416025 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.816509962 CET	50074	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.816517115 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.818753958 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.818774939 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.818850994 CET	50074	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.818860054 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.818890095 CET	50074	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.818927050 CET	50074	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.855186939 CET	50083	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.871064901 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.871097088 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.871203899 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.871217966 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.871254921 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.871274948 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.871289968 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.871306896 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.871349096 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.871355057 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.871382952 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.871407032 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.872067928 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.872086048 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.872128010 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.872155905 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.872163057 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.872174978 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.872211933 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.872224092 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.872232914 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.872262955 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.875955105 CET	50083	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.875961065 CET	443	50083	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.876504898 CET	443	50083	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.879350901 CET	50083	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.879489899 CET	443	50083	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.880866051 CET	50083	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.887587070 CET	443	50075	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.887742996 CET	443	50075	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.887816906 CET	50075	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.889770985 CET	443	50076	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.889842987 CET	443	50076	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.889919996 CET	50076	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.898772955 CET	443	50077	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.898797035 CET	443	50077	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.898803949 CET	443	50077	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.898842096 CET	443	50077	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.898854971 CET	443	50077	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.898885012 CET	50077	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.898905993 CET	443	50077	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.898919106 CET	50077	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.899652004 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.899672985 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.899739981 CET	50074	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.899739981 CET	50074	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.899761915 CET	50077	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.899768114 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.899799109 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.899820089 CET	50074	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.899826050 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.899838924 CET	50074	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.899882078 CET	50074	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.900815964 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.900830030 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.900893927 CET	50074	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.900902987 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.900932074 CET	50074	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.902517080 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.902565956 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.902574062 CET	50074	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.902597904 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.903261900 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.903291941 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.903326988 CET	50074	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.903336048 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.903345108 CET	50074	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.903345108 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.903418064 CET	50074	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:23.923330069 CET	443	50083	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:23.928539038 CET	80	49821	185.53.177.50	192.168.2.10
Jan 10, 2025 00:22:23.930984020 CET	49821	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:22:23.993499994 CET	443	50085	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.026886940 CET	50085	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.026921988 CET	443	50085	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.027620077 CET	443	50085	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.036078930 CET	50085	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.036223888 CET	443	50085	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.039216042 CET	50075	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:24.039237022 CET	443	50075	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.056663990 CET	50085	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.069947958 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:24.070549011 CET	49821	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:22:24.070615053 CET	49758	80	192.168.2.10	185.53.177.50
Jan 10, 2025 00:22:24.072017908 CET	50091	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.072035074 CET	443	50091	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.072149992 CET	50091	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.072442055 CET	50092	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.072477102 CET	443	50092	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.072664022 CET	50091	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.072676897 CET	443	50091	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.072695017 CET	50092	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.072915077 CET	50092	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.072933912 CET	443	50092	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.073956013 CET	50074	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:24.073967934 CET	443	50083	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.073980093 CET	443	50074	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.074049950 CET	443	50083	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.074140072 CET	50083	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:24.076957941 CET	50065	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:24.076977968 CET	443	50065	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.079401016 CET	80	49821	185.53.177.50	192.168.2.10
Jan 10, 2025 00:22:24.079416037 CET	80	49758	185.53.177.50	192.168.2.10
Jan 10, 2025 00:22:24.080573082 CET	50076	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:24.080596924 CET	443	50076	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.082230091 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.082253933 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.082340956 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.082511902 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.082523108 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.099328041 CET	443	50085	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.101793051 CET	50077	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:24.101808071 CET	443	50077	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.114953041 CET	50094	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.114988089 CET	443	50094	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.115077972 CET	50094	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.115468025 CET	50095	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.115506887 CET	443	50095	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.115593910 CET	50095	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.115808964 CET	50096	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.115829945 CET	443	50096	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.116024971 CET	50096	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.116025925 CET	50083	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:24.116038084 CET	443	50083	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.116821051 CET	50094	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.116842031 CET	443	50094	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.117165089 CET	50095	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.117189884 CET	443	50095	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.117320061 CET	50096	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.117332935 CET	443	50096	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.119997978 CET	50097	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:24.120033979 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.120098114 CET	50097	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:24.121206999 CET	50097	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:24.121226072 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.122507095 CET	443	50087	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.122833014 CET	50087	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.122839928 CET	443	50087	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.127772093 CET	443	50087	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.128520012 CET	50087	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.128591061 CET	443	50087	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.128792048 CET	50087	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.136600971 CET	50098	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:24.136650085 CET	443	50098	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:24.136817932 CET	50098	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:24.137350082 CET	50098	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:24.137360096 CET	443	50098	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:24.144577980 CET	50099	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:24.144625902 CET	443	50099	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.145164013 CET	50099	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:24.145457029 CET	50099	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:24.145467997 CET	443	50099	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.169430017 CET	50087	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.169450045 CET	443	50087	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.256000042 CET	443	50089	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.256329060 CET	50089	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.256350994 CET	443	50089	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.257364988 CET	443	50089	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.257436037 CET	50089	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.257869959 CET	50089	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.257942915 CET	443	50089	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.258138895 CET	50089	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.258148909 CET	443	50089	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.261019945 CET	443	50088	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.261276007 CET	50088	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.261296034 CET	443	50088	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.262448072 CET	443	50088	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.262497902 CET	50088	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.263134956 CET	50088	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.263200998 CET	443	50088	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.263282061 CET	50088	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.263292074 CET	443	50088	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.289556026 CET	50103	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:24.289597988 CET	443	50103	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.289652109 CET	50103	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:24.290198088 CET	50103	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:24.290210962 CET	443	50103	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.300657034 CET	50089	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.302691936 CET	443	50085	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.310385942 CET	443	50085	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.310398102 CET	443	50085	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.310440063 CET	443	50085	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.310455084 CET	50085	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.310467958 CET	443	50085	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.310486078 CET	443	50085	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.310493946 CET	50085	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.310497046 CET	443	50085	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.310504913 CET	443	50085	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.310513020 CET	50085	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.310555935 CET	50085	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.311698914 CET	50085	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.311713934 CET	443	50085	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.316647053 CET	50088	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.397636890 CET	443	50087	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.407488108 CET	443	50087	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.407497883 CET	443	50087	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.407512903 CET	443	50087	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.407562017 CET	50087	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.407572031 CET	443	50087	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.407650948 CET	50087	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.487801075 CET	443	50087	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.487848043 CET	443	50087	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.487879038 CET	50087	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.487891912 CET	443	50087	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.487910032 CET	50087	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.487935066 CET	50087	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.488734961 CET	50087	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.488761902 CET	443	50087	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.528348923 CET	443	50089	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.538829088 CET	443	50089	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.538841963 CET	443	50089	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.538856030 CET	443	50089	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.538899899 CET	50089	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.538929939 CET	443	50089	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.538980961 CET	50089	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.542474031 CET	443	50088	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.552865028 CET	443	50088	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.552877903 CET	443	50088	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.552896023 CET	443	50088	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.552905083 CET	443	50088	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.552906990 CET	443	50088	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.552934885 CET	50088	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.552978039 CET	443	50088	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.552989960 CET	443	50088	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.553000927 CET	50088	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.553148031 CET	50088	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.553608894 CET	50088	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.553617001 CET	443	50088	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.565680027 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.565927982 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.565964937 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.567028999 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.567111969 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.568317890 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.568393946 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.568792105 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.568805933 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.603391886 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.604119062 CET	50097	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:24.604129076 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.604494095 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.607817888 CET	50097	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:24.607913971 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.608073950 CET	50097	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:24.617741108 CET	443	50089	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.617768049 CET	443	50089	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.617808104 CET	50089	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.617822886 CET	443	50089	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.617837906 CET	50089	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.617858887 CET	50089	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.621172905 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.626032114 CET	443	50099	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.626317978 CET	50099	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:24.626326084 CET	443	50099	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.626898050 CET	443	50099	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.627285004 CET	50099	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:24.627363920 CET	443	50099	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.627834082 CET	443	50089	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.627860069 CET	443	50089	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.627901077 CET	50089	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.627912045 CET	443	50089	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.627943039 CET	50089	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.627963066 CET	50089	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.628107071 CET	50099	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:24.651331902 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.675332069 CET	443	50099	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.691418886 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.691466093 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.691493988 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.691523075 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.691560030 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.691560030 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.691572905 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.691622972 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.691628933 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.691873074 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.691915035 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.691940069 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.698656082 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.698688030 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.698714018 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.698767900 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.698767900 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.698780060 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.702259064 CET	443	50089	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.702285051 CET	443	50089	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.702334881 CET	50089	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.702352047 CET	443	50089	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.702378988 CET	50089	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.702408075 CET	50089	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.704302073 CET	443	50089	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.704319954 CET	443	50089	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.704353094 CET	443	50089	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.704376936 CET	50089	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.704387903 CET	443	50089	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.704433918 CET	443	50089	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.704444885 CET	50089	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.704468966 CET	50089	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.709881067 CET	50089	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:24.709899902 CET	443	50089	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:24.728389025 CET	443	50092	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.728677034 CET	50092	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.728684902 CET	443	50092	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.728708982 CET	443	50091	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.728877068 CET	50091	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.728892088 CET	443	50091	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.729063034 CET	443	50092	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.729222059 CET	443	50091	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.729506016 CET	50092	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.729578018 CET	443	50092	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.729665041 CET	50092	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.731992960 CET	50091	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.732028008 CET	50091	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.732038975 CET	443	50091	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.732095957 CET	443	50091	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.743211985 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.770277023 CET	443	50095	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.775322914 CET	443	50092	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.777679920 CET	50091	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.778104067 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.778165102 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.778230906 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.778287888 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.778316975 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.778333902 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.778341055 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.778500080 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.778500080 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.779078960 CET	443	50094	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.779454947 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.779506922 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.779628992 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.779642105 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.779752970 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.780213118 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.780221939 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.780463934 CET	443	50096	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.780486107 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.780963898 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.780972004 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.781147003 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.781352997 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.781394005 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.781408072 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.781428099 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.781480074 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.782471895 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.783611059 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.783652067 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.783715963 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.783725977 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.783833027 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.783843040 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.783978939 CET	443	50103	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.786082983 CET	50095	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.786108017 CET	443	50095	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.786674976 CET	50094	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.786688089 CET	443	50094	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.787074089 CET	50096	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.787091970 CET	443	50096	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.787214994 CET	50103	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:24.787230968 CET	443	50103	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.787704945 CET	443	50095	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.787765980 CET	50095	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.787805080 CET	443	50094	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.787862062 CET	50094	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.787945032 CET	443	50103	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.788197994 CET	443	50096	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.788242102 CET	50096	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.808671951 CET	443	50099	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.808773041 CET	443	50099	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.808815956 CET	50099	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:24.813664913 CET	50095	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.813800097 CET	443	50095	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.814517021 CET	50094	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.814631939 CET	443	50094	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.815090895 CET	50103	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:24.815232992 CET	443	50103	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.815541029 CET	50096	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.815660954 CET	443	50096	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.822452068 CET	50099	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:24.822468042 CET	443	50099	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.825763941 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.828942060 CET	50095	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.828955889 CET	443	50095	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.829052925 CET	50094	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.829071045 CET	443	50094	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.829451084 CET	50103	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:24.829612970 CET	50096	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.829632998 CET	443	50096	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:24.872415066 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.872467041 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.872493982 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.872524023 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.872567892 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.872567892 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.872580051 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.872587919 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.872809887 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.872833967 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.872852087 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.872890949 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.872890949 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.872896910 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.872987032 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.873011112 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.873061895 CET	50097	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:24.873076916 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.873644114 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.873677015 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.873922110 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.873922110 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.873933077 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.874514103 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.874572039 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.874596119 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.874619961 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.874675989 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.874675989 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.874774933 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.875320911 CET	443	50103	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.875339985 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.875509024 CET	50096	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.875545979 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.876051903 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.876071930 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.876228094 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.876312971 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.876360893 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.876430035 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.876430035 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.876437902 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.877491951 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.877584934 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.877593040 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.877778053 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.878747940 CET	50095	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.878990889 CET	50094	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:24.909706116 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.909782887 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.928352118 CET	50097	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:24.958781958 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.958875895 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.958977938 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.959017038 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.959075928 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.959075928 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.959086895 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.959192991 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.959305048 CET	443	50098	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:24.959497929 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.959608078 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.959685087 CET	50098	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:24.959700108 CET	443	50098	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:24.960015059 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.960072994 CET	443	50098	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:24.960079908 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.960095882 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.960108042 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.960123062 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.960150957 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.960796118 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.960839987 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.960858107 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.960861921 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.960870981 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.960882902 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.960906029 CET	50098	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:24.960906982 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.960926056 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.960946083 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.960949898 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.960978985 CET	50097	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:24.960983992 CET	443	50098	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:24.961061954 CET	50098	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:24.961148977 CET	50098	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:24.961196899 CET	443	50098	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:24.961524963 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.961580038 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.961585045 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.961663008 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.961664915 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.961677074 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.961846113 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.961853981 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.962296963 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.962301970 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.962348938 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.962356091 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.962372065 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.962404013 CET	50097	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:24.962416887 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.962472916 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.962523937 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.962529898 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.962693930 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:24.976404905 CET	443	50103	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.976495028 CET	443	50103	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.976531982 CET	50103	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:24.977292061 CET	50103	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:24.977302074 CET	443	50103	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:24.995879889 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:24.995945930 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.001338005 CET	443	50092	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:25.001449108 CET	443	50092	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:25.001487017 CET	50092	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:25.001663923 CET	443	50091	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:25.001760960 CET	443	50091	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:25.001795053 CET	50091	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:25.004015923 CET	50092	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:25.004026890 CET	443	50092	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:25.004317999 CET	50091	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:25.004323006 CET	443	50091	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:25.007137060 CET	50097	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:25.027376890 CET	50111	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.027396917 CET	443	50111	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.027455091 CET	50111	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.027900934 CET	50112	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.027909040 CET	443	50112	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.027955055 CET	50112	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.028120041 CET	50111	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.028131008 CET	443	50111	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.028373003 CET	50112	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.028382063 CET	443	50112	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.045460939 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.045543909 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.045572996 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.045598030 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.045619011 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.045732021 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.045761108 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.045779943 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.045803070 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.045811892 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.045856953 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.045896053 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.045896053 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.045896053 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.045903921 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.046677113 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.046705008 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.046720982 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.046744108 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.046827078 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.047259092 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.047276974 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.047300100 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.047326088 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.047338009 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.047461987 CET	443	50095	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:25.047564030 CET	443	50095	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:25.047606945 CET	50095	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:25.048098087 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.048173904 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.048180103 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.048254967 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.049101114 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.049119949 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.049180984 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.049185038 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.049216032 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:25.049226046 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:25.049246073 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:25.049252033 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.049252033 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.049263954 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:25.049268961 CET	50097	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:25.049273014 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:25.049280882 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:25.049289942 CET	50097	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:25.049297094 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:25.049310923 CET	50097	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:25.049314976 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:25.049341917 CET	50097	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:25.049345970 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:25.049388885 CET	50097	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:25.049436092 CET	50095	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:25.049452066 CET	443	50095	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:25.049946070 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.049971104 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.050177097 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.050177097 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.050184011 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.050369024 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.050854921 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.050872087 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.050919056 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.050923109 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.051029921 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.051029921 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.051399946 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:25.051415920 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:25.051467896 CET	50097	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:25.051472902 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:25.051506996 CET	50097	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:25.051960945 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:25.052001953 CET	50097	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:25.054685116 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:25.054702997 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:25.054734945 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:25.054744005 CET	50097	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:25.054749012 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:25.054791927 CET	50097	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:25.054797888 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:25.054822922 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:25.054826021 CET	50097	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:25.054853916 CET	50097	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:25.055200100 CET	50097	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:25.055211067 CET	443	50097	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:25.059165001 CET	443	50096	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:25.059838057 CET	50113	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:25.059854031 CET	443	50113	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:25.059900999 CET	50113	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:25.060332060 CET	50113	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:25.060339928 CET	443	50113	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:25.062607050 CET	443	50096	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:25.062618017 CET	443	50096	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:25.062657118 CET	50096	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:25.062664986 CET	443	50096	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:25.062705994 CET	443	50096	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:25.062707901 CET	50096	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:25.062751055 CET	50096	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:25.064296961 CET	443	50094	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:25.064336061 CET	443	50094	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:25.064367056 CET	50094	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:25.064373970 CET	443	50094	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:25.064640999 CET	443	50094	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:25.064677954 CET	50094	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:25.069232941 CET	50096	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:25.069242001 CET	443	50096	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:25.070414066 CET	50094	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:25.070420980 CET	443	50094	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:25.070441008 CET	50094	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:25.070460081 CET	50094	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:25.086898088 CET	50116	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:25.086916924 CET	443	50116	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:25.087002993 CET	50116	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:25.087058067 CET	50117	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:25.087073088 CET	443	50117	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:25.087115049 CET	50117	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:25.087388039 CET	50117	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:25.087397099 CET	443	50117	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:25.087574005 CET	50116	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:25.087585926 CET	443	50116	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:25.090531111 CET	50118	443	192.168.2.10	18.66.102.11
Jan 10, 2025 00:22:25.090543985 CET	443	50118	18.66.102.11	192.168.2.10
Jan 10, 2025 00:22:25.090590954 CET	50118	443	192.168.2.10	18.66.102.11
Jan 10, 2025 00:22:25.090820074 CET	50118	443	192.168.2.10	18.66.102.11
Jan 10, 2025 00:22:25.090827942 CET	443	50118	18.66.102.11	192.168.2.10
Jan 10, 2025 00:22:25.095227957 CET	50120	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.095244884 CET	443	50120	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.095293045 CET	50120	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.095488071 CET	50120	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.095499039 CET	443	50120	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.097239971 CET	50121	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:25.097265005 CET	443	50121	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:25.097937107 CET	50121	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:25.097937107 CET	50121	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:25.097980976 CET	443	50121	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:25.099591017 CET	50122	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.099597931 CET	443	50122	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.099652052 CET	50122	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.099937916 CET	50122	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.099946976 CET	443	50122	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.101121902 CET	50123	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.101155043 CET	443	50123	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.101202011 CET	50123	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.101408958 CET	50123	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.101422071 CET	443	50123	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.131427050 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.131463051 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.131539106 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.131539106 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.131552935 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.131680965 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.131938934 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.131963015 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.131994963 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.132018089 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.132107973 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.132143021 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.132143021 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.132172108 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.133220911 CET	50093	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.133256912 CET	443	50093	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.147453070 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:25.147486925 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:25.147536039 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:25.147826910 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:25.147845030 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:25.162741899 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.162781954 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.162870884 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.163140059 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.163155079 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.223752022 CET	443	50098	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:25.223843098 CET	443	50098	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:25.223896027 CET	50098	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:25.235526085 CET	50098	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:25.235538006 CET	443	50098	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:25.252614975 CET	50127	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:25.252639055 CET	443	50127	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:25.252752066 CET	50127	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:25.252954960 CET	50127	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:25.252969027 CET	443	50127	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:25.255794048 CET	50128	443	192.168.2.10	104.18.66.57
Jan 10, 2025 00:22:25.255825043 CET	443	50128	104.18.66.57	192.168.2.10
Jan 10, 2025 00:22:25.255951881 CET	50128	443	192.168.2.10	104.18.66.57
Jan 10, 2025 00:22:25.256156921 CET	50128	443	192.168.2.10	104.18.66.57
Jan 10, 2025 00:22:25.256172895 CET	443	50128	104.18.66.57	192.168.2.10
Jan 10, 2025 00:22:25.580495119 CET	443	50121	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:25.588565111 CET	50121	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:25.588593960 CET	443	50121	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:25.589046955 CET	443	50121	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:25.590251923 CET	50121	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:25.590332031 CET	443	50121	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:25.590486050 CET	50121	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:25.635339975 CET	443	50121	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:25.639514923 CET	50121	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:25.717989922 CET	443	50112	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.718672037 CET	50112	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.718689919 CET	443	50112	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.719007969 CET	443	50112	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.719592094 CET	50112	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.719669104 CET	443	50112	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.719753027 CET	50112	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.721154928 CET	443	50111	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.721465111 CET	50111	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.721472025 CET	443	50111	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.721848011 CET	443	50111	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.722564936 CET	50111	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.722656965 CET	443	50111	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.722711086 CET	50111	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.736336946 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.736680031 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.736692905 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.737900972 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.737977982 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.738420963 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.738497972 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.738971949 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.738979101 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.763331890 CET	443	50111	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.763346910 CET	443	50112	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.765984058 CET	50112	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.766504049 CET	50111	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.781961918 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.782237053 CET	443	50113	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:25.782710075 CET	50113	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:25.782726049 CET	443	50113	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:25.783701897 CET	443	50113	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:25.784038067 CET	50113	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:25.784118891 CET	443	50113	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:25.784307003 CET	50113	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:25.801348925 CET	443	50123	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.801687002 CET	50123	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.801706076 CET	443	50123	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.802961111 CET	443	50123	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.803025961 CET	50123	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.803390980 CET	50123	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.803462982 CET	443	50123	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.803522110 CET	50123	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.803528070 CET	443	50123	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.811959982 CET	443	50122	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.812161922 CET	50122	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.812186003 CET	443	50122	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.812715054 CET	443	50116	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:25.813201904 CET	443	50122	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.813282967 CET	50122	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.815495968 CET	443	50128	104.18.66.57	192.168.2.10
Jan 10, 2025 00:22:25.817043066 CET	50130	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:25.817102909 CET	443	50130	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:25.817302942 CET	50130	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:25.817476034 CET	50128	443	192.168.2.10	104.18.66.57
Jan 10, 2025 00:22:25.817502022 CET	443	50128	104.18.66.57	192.168.2.10
Jan 10, 2025 00:22:25.817965984 CET	50122	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.817986965 CET	443	50120	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.818061113 CET	443	50122	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.818101883 CET	50116	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:25.818111897 CET	443	50116	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:25.818547010 CET	443	50128	104.18.66.57	192.168.2.10
Jan 10, 2025 00:22:25.818588972 CET	50122	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.818605900 CET	443	50122	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.818628073 CET	50128	443	192.168.2.10	104.18.66.57
Jan 10, 2025 00:22:25.818979979 CET	443	50117	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:25.819180012 CET	443	50116	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:25.819231987 CET	50116	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:25.820930958 CET	50128	443	192.168.2.10	104.18.66.57
Jan 10, 2025 00:22:25.821014881 CET	443	50128	104.18.66.57	192.168.2.10
Jan 10, 2025 00:22:25.821265936 CET	50120	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.821288109 CET	443	50120	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.821939945 CET	50130	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:25.821954966 CET	443	50130	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:25.822273970 CET	443	50120	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.822341919 CET	50120	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.822444916 CET	50128	443	192.168.2.10	104.18.66.57
Jan 10, 2025 00:22:25.822460890 CET	443	50128	104.18.66.57	192.168.2.10
Jan 10, 2025 00:22:25.824378967 CET	50120	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.824467897 CET	443	50120	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.825886011 CET	50116	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:25.825959921 CET	443	50116	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:25.826251984 CET	50117	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:25.826260090 CET	443	50117	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:25.826457024 CET	50120	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.826482058 CET	443	50120	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.826508999 CET	50116	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:25.826514006 CET	443	50116	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:25.827330112 CET	443	50113	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:25.827394009 CET	443	50117	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:25.827446938 CET	50117	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:25.827713013 CET	50117	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:25.827770948 CET	443	50117	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:25.827862024 CET	50117	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:25.827869892 CET	443	50117	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:25.841396093 CET	50132	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:25.841430902 CET	443	50132	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:25.841511965 CET	50132	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:25.842044115 CET	50132	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:25.842057943 CET	443	50132	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:25.843894958 CET	50123	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.858823061 CET	50122	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.861556053 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:25.861943007 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:25.861969948 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:25.863049984 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:25.863111019 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:25.864280939 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:25.864351988 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:25.864509106 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:25.864522934 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:25.874826908 CET	50116	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:25.874828100 CET	50128	443	192.168.2.10	104.18.66.57
Jan 10, 2025 00:22:25.874828100 CET	50120	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.874846935 CET	50117	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:25.892039061 CET	443	50118	18.66.102.11	192.168.2.10
Jan 10, 2025 00:22:25.892267942 CET	50118	443	192.168.2.10	18.66.102.11
Jan 10, 2025 00:22:25.892275095 CET	443	50118	18.66.102.11	192.168.2.10
Jan 10, 2025 00:22:25.893311024 CET	443	50118	18.66.102.11	192.168.2.10
Jan 10, 2025 00:22:25.893378973 CET	50118	443	192.168.2.10	18.66.102.11
Jan 10, 2025 00:22:25.893887043 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.893932104 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.893961906 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.893979073 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.893992901 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.894004107 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.894041061 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.894057989 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.894094944 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.894098043 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.894109011 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.894171000 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.894619942 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.894673109 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.894782066 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.894793034 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.895701885 CET	50118	443	192.168.2.10	18.66.102.11
Jan 10, 2025 00:22:25.895767927 CET	443	50118	18.66.102.11	192.168.2.10
Jan 10, 2025 00:22:25.896076918 CET	50118	443	192.168.2.10	18.66.102.11
Jan 10, 2025 00:22:25.896084070 CET	443	50118	18.66.102.11	192.168.2.10
Jan 10, 2025 00:22:25.901525974 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.901607990 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.901614904 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.906830072 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:25.942482948 CET	50118	443	192.168.2.10	18.66.102.11
Jan 10, 2025 00:22:25.942533016 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.976669073 CET	443	50128	104.18.66.57	192.168.2.10
Jan 10, 2025 00:22:25.976713896 CET	443	50128	104.18.66.57	192.168.2.10
Jan 10, 2025 00:22:25.976771116 CET	50128	443	192.168.2.10	104.18.66.57
Jan 10, 2025 00:22:25.976804018 CET	443	50128	104.18.66.57	192.168.2.10
Jan 10, 2025 00:22:25.976820946 CET	443	50128	104.18.66.57	192.168.2.10
Jan 10, 2025 00:22:25.976870060 CET	50128	443	192.168.2.10	104.18.66.57
Jan 10, 2025 00:22:25.978176117 CET	50128	443	192.168.2.10	104.18.66.57
Jan 10, 2025 00:22:25.978209019 CET	443	50128	104.18.66.57	192.168.2.10
Jan 10, 2025 00:22:25.984612942 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.984709978 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.984798908 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.984807014 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.989731073 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.989778996 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.989794970 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.989803076 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.989830971 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.989850998 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.989857912 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.989886999 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.989897013 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.989903927 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.989933968 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.989950895 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.989957094 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.989984035 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.990001917 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.990008116 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.990035057 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.990048885 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.990056992 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.990083933 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.990109921 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.990137100 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.990145922 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.990153074 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.990163088 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.990187883 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.990192890 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.990205050 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.990380049 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:25.990387917 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:25.992768049 CET	443	50112	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.992867947 CET	443	50112	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.992995977 CET	50112	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.993693113 CET	50112	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.993697882 CET	443	50112	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.996670008 CET	443	50111	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.996793032 CET	443	50111	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:25.996838093 CET	50111	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.997524023 CET	50111	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:25.997528076 CET	443	50111	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:26.029994011 CET	50135	443	192.168.2.10	104.16.80.73
Jan 10, 2025 00:22:26.030020952 CET	443	50135	104.16.80.73	192.168.2.10
Jan 10, 2025 00:22:26.030157089 CET	50135	443	192.168.2.10	104.16.80.73
Jan 10, 2025 00:22:26.030810118 CET	50135	443	192.168.2.10	104.16.80.73
Jan 10, 2025 00:22:26.030822992 CET	443	50135	104.16.80.73	192.168.2.10
Jan 10, 2025 00:22:26.043873072 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.043891907 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.054698944 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.054771900 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.054799080 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.058443069 CET	443	50113	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:26.068140984 CET	443	50113	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:26.068166018 CET	443	50113	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:26.068218946 CET	50113	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:26.068233013 CET	443	50113	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:26.068265915 CET	50113	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:26.068289042 CET	50113	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:26.077992916 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.078031063 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.078049898 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.078056097 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.078071117 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.078097105 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.079221010 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.079229116 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.079277992 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.079288960 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.079436064 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.079464912 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.079480886 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.079489946 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.079510927 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.079730034 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.079752922 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.079757929 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.079776049 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.079783916 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.079807043 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.080334902 CET	443	50123	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:26.080466986 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.080475092 CET	443	50123	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:26.080503941 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.080528975 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.080535889 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.080547094 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.080557108 CET	50123	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:26.080574036 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.080580950 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.080605030 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.080626011 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.081397057 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.081429958 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.081448078 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.081455946 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.081465960 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.081480026 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.081496954 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.081511021 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.081528902 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.081746101 CET	50123	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:26.081756115 CET	443	50123	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:26.082298040 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.082350969 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.082351923 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.082364082 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.082386971 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.082386971 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.082431078 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.082438946 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.082493067 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.094168901 CET	443	50122	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:26.099317074 CET	443	50122	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:26.099375010 CET	443	50122	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:26.099396944 CET	50122	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:26.099397898 CET	443	50122	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:26.099433899 CET	50122	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:26.100126028 CET	443	50121	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.100156069 CET	443	50121	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.100167036 CET	443	50121	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.100184917 CET	443	50121	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.100193977 CET	443	50121	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.100203037 CET	443	50121	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.100233078 CET	50121	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:26.100254059 CET	443	50121	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.100270033 CET	50121	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:26.100339890 CET	50121	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:26.102179050 CET	50122	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:26.102215052 CET	443	50122	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:26.102960110 CET	443	50121	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.102984905 CET	443	50121	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.103060007 CET	50121	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:26.103066921 CET	443	50121	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.103092909 CET	50121	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:26.104412079 CET	443	50120	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:26.104434013 CET	443	50120	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:26.104495049 CET	443	50120	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:26.104506016 CET	50120	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:26.104667902 CET	50120	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:26.105873108 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.105899096 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.113151073 CET	443	50127	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:26.114017010 CET	50127	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:26.114033937 CET	443	50127	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:26.114440918 CET	443	50127	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:26.115027905 CET	50127	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:26.115108013 CET	443	50127	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:26.115268946 CET	50127	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:26.119452000 CET	50120	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:26.119499922 CET	443	50120	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:26.153647900 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.153664112 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.153692961 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.153701067 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.153709888 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.153757095 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.153788090 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.153808117 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.153866053 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.153884888 CET	50121	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:26.155333042 CET	443	50127	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:26.157948971 CET	443	50113	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:26.158023119 CET	50113	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:26.158031940 CET	443	50113	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:26.158057928 CET	443	50113	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:26.158142090 CET	50113	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:26.160151958 CET	50113	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:26.160165071 CET	443	50113	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:26.175204992 CET	443	50118	18.66.102.11	192.168.2.10
Jan 10, 2025 00:22:26.179507971 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.179582119 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.181407928 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.181468010 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.181472063 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.181487083 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.181509018 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.181524992 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.181570053 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.181592941 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.181631088 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.181813955 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.181853056 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.181865931 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.181873083 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.181891918 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.181910038 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.181993961 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.182043076 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.182245970 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.182296991 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.182303905 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.182315111 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.182344913 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.182352066 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.182358027 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.182384014 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.182398081 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.182746887 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.182795048 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.182816982 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.182868004 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.183105946 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.183161020 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.183162928 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.183172941 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.183203936 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.183213949 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.183228970 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.183234930 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.183247089 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.183257103 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.183289051 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.183298111 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.183305025 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.183358908 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.183737993 CET	443	50118	18.66.102.11	192.168.2.10
Jan 10, 2025 00:22:26.183751106 CET	443	50118	18.66.102.11	192.168.2.10
Jan 10, 2025 00:22:26.183792114 CET	443	50118	18.66.102.11	192.168.2.10
Jan 10, 2025 00:22:26.183813095 CET	50118	443	192.168.2.10	18.66.102.11
Jan 10, 2025 00:22:26.183813095 CET	50118	443	192.168.2.10	18.66.102.11
Jan 10, 2025 00:22:26.183829069 CET	443	50118	18.66.102.11	192.168.2.10
Jan 10, 2025 00:22:26.183841944 CET	50118	443	192.168.2.10	18.66.102.11
Jan 10, 2025 00:22:26.183861971 CET	50118	443	192.168.2.10	18.66.102.11
Jan 10, 2025 00:22:26.183866978 CET	443	50118	18.66.102.11	192.168.2.10
Jan 10, 2025 00:22:26.183901072 CET	50118	443	192.168.2.10	18.66.102.11
Jan 10, 2025 00:22:26.188785076 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.188834906 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.188842058 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.188848972 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.188882113 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.188885927 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.188894987 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.188925028 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.188937902 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.188941002 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.188951015 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.188982964 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.189249992 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.189295053 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.189301968 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.189327955 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.189341068 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.189346075 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.189376116 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.189574003 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.189613104 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.189620972 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.189639091 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.189659119 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.189665079 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.189675093 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.189702988 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.189730883 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.189737082 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.189775944 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.190041065 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.190072060 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.190098047 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.190104961 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.190114975 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.193582058 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.193595886 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.193614960 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.193622112 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.193662882 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.193681955 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.193697929 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.193783998 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.195138931 CET	443	50121	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.195152998 CET	443	50121	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.195179939 CET	443	50121	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.195280075 CET	50121	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:26.195280075 CET	50121	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:26.195293903 CET	443	50121	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.197417974 CET	443	50121	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.197443008 CET	443	50121	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.197452068 CET	443	50121	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.197482109 CET	443	50121	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.197489023 CET	50121	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:26.197499990 CET	443	50121	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.197541952 CET	50121	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:26.197541952 CET	50121	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:26.200400114 CET	443	50121	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.200426102 CET	443	50121	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.200468063 CET	443	50121	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.200505018 CET	50121	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:26.200531006 CET	443	50121	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.200551033 CET	50121	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:26.200551987 CET	443	50121	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.200694084 CET	50121	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:26.201894999 CET	443	50116	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:26.201916933 CET	443	50116	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:26.201924086 CET	443	50116	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:26.201975107 CET	50116	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:26.201983929 CET	443	50116	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:26.202260017 CET	443	50116	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:26.202317953 CET	50116	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:26.221316099 CET	443	50117	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:26.221554041 CET	443	50117	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:26.221601963 CET	50117	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:26.230572939 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.237447977 CET	50118	443	192.168.2.10	18.66.102.11
Jan 10, 2025 00:22:26.237479925 CET	443	50118	18.66.102.11	192.168.2.10
Jan 10, 2025 00:22:26.240200996 CET	50121	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:26.240220070 CET	443	50121	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.245157957 CET	50136	443	192.168.2.10	34.49.241.189
Jan 10, 2025 00:22:26.245187998 CET	443	50136	34.49.241.189	192.168.2.10
Jan 10, 2025 00:22:26.245382071 CET	50136	443	192.168.2.10	34.49.241.189
Jan 10, 2025 00:22:26.245874882 CET	50136	443	192.168.2.10	34.49.241.189
Jan 10, 2025 00:22:26.245898962 CET	443	50136	34.49.241.189	192.168.2.10
Jan 10, 2025 00:22:26.247034073 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.247047901 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.247111082 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.247243881 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.247337103 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.266827106 CET	50117	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:26.266860962 CET	443	50117	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:26.271367073 CET	50116	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:26.271399975 CET	443	50116	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:26.282460928 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.282485008 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.282519102 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.282531023 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.282537937 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.282561064 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.284063101 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.284089088 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.284136057 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.284173012 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.284204006 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.284224987 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.284256935 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.284276009 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.284286022 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.284296036 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.284305096 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.284326077 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.284332991 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.284344912 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.284735918 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.284759998 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.284786940 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.284795046 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.284821033 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.285614967 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.285629988 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.285661936 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.285669088 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.285701036 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.285816908 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.285835028 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.285862923 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.285871983 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.285883904 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.285953999 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.285991907 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.287729025 CET	50126	443	192.168.2.10	104.18.65.57
Jan 10, 2025 00:22:26.287741899 CET	443	50126	104.18.65.57	192.168.2.10
Jan 10, 2025 00:22:26.303029060 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.303057909 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.303106070 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.303133965 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.303153038 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.303177118 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.307889938 CET	443	50127	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:26.307950020 CET	443	50127	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:26.308005095 CET	50127	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:26.310523033 CET	50127	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:26.310544968 CET	443	50127	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:26.315499067 CET	443	50130	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.316143036 CET	50130	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:26.316158056 CET	443	50130	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.316557884 CET	443	50130	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.317560911 CET	50130	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:26.317636013 CET	443	50130	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.317666054 CET	50130	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:26.317672014 CET	443	50130	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.317722082 CET	50130	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:26.322695971 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.322719097 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.322783947 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.322814941 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.322828054 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.322947979 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.344764948 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.344789982 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.344835043 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.344854116 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.344870090 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.345412970 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.357168913 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.357203960 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.357243061 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.357251883 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.357275963 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.360202074 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.360316038 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.360323906 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.360394955 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.363326073 CET	443	50130	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.370300055 CET	443	50132	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.371339083 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.371375084 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.371416092 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.371423960 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.371455908 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.372621059 CET	50132	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:26.372634888 CET	443	50132	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.373109102 CET	443	50132	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.373473883 CET	50132	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:26.373538017 CET	443	50132	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.373745918 CET	50132	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:26.373745918 CET	50132	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:26.373758078 CET	443	50132	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.373862028 CET	50132	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:26.385885000 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.385910034 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.385965109 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.385972977 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.385987997 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.386006117 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.398021936 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.398045063 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.398082972 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.398093939 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.398112059 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.398127079 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.410024881 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.410051107 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.410103083 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.410113096 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.410125971 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.410140038 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.411978006 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.412034988 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.415343046 CET	443	50132	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.422229052 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.422266006 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.422302961 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.422323942 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.422336102 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.454253912 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.454276085 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.454334974 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.454372883 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.454387903 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.462457895 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.462480068 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.462549925 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.462549925 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.462575912 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.462753057 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.462793112 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.462796926 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.462897062 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.462934971 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.483670950 CET	443	50130	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.483760118 CET	443	50130	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.483819008 CET	50130	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:26.514863014 CET	443	50135	104.16.80.73	192.168.2.10
Jan 10, 2025 00:22:26.547713041 CET	443	50132	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.547771931 CET	443	50132	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.547826052 CET	50132	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:26.559356928 CET	50135	443	192.168.2.10	104.16.80.73
Jan 10, 2025 00:22:26.632280111 CET	50135	443	192.168.2.10	104.16.80.73
Jan 10, 2025 00:22:26.632304907 CET	443	50135	104.16.80.73	192.168.2.10
Jan 10, 2025 00:22:26.633572102 CET	443	50135	104.16.80.73	192.168.2.10
Jan 10, 2025 00:22:26.633630991 CET	50135	443	192.168.2.10	104.16.80.73
Jan 10, 2025 00:22:26.658907890 CET	50130	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:26.658936024 CET	443	50130	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.673259020 CET	50132	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:26.673278093 CET	443	50132	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.680099964 CET	50137	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:26.680139065 CET	443	50137	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.680285931 CET	50137	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:26.680756092 CET	50137	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:26.680768967 CET	443	50137	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:26.682931900 CET	50135	443	192.168.2.10	104.16.80.73
Jan 10, 2025 00:22:26.683060884 CET	443	50135	104.16.80.73	192.168.2.10
Jan 10, 2025 00:22:26.683520079 CET	50135	443	192.168.2.10	104.16.80.73
Jan 10, 2025 00:22:26.683535099 CET	443	50135	104.16.80.73	192.168.2.10
Jan 10, 2025 00:22:26.691201925 CET	50125	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:26.691230059 CET	443	50125	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:26.702297926 CET	50138	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:26.702327967 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:26.702440977 CET	50138	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:26.702714920 CET	50138	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:26.702727079 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:26.705744028 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:26.705790043 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:26.705862045 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:26.706142902 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:26.706157923 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:26.737569094 CET	50135	443	192.168.2.10	104.16.80.73
Jan 10, 2025 00:22:26.754441023 CET	443	50136	34.49.241.189	192.168.2.10
Jan 10, 2025 00:22:26.754872084 CET	50136	443	192.168.2.10	34.49.241.189
Jan 10, 2025 00:22:26.754908085 CET	443	50136	34.49.241.189	192.168.2.10
Jan 10, 2025 00:22:26.756378889 CET	443	50136	34.49.241.189	192.168.2.10
Jan 10, 2025 00:22:26.756798029 CET	50136	443	192.168.2.10	34.49.241.189
Jan 10, 2025 00:22:26.764818907 CET	50136	443	192.168.2.10	34.49.241.189
Jan 10, 2025 00:22:26.765034914 CET	443	50136	34.49.241.189	192.168.2.10
Jan 10, 2025 00:22:26.765140057 CET	50136	443	192.168.2.10	34.49.241.189
Jan 10, 2025 00:22:26.765155077 CET	443	50136	34.49.241.189	192.168.2.10
Jan 10, 2025 00:22:26.765275002 CET	50136	443	192.168.2.10	34.49.241.189
Jan 10, 2025 00:22:26.786751032 CET	50140	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:26.786777020 CET	443	50140	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:26.786832094 CET	50140	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:26.787141085 CET	50140	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:26.787149906 CET	443	50140	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:26.793484926 CET	443	50135	104.16.80.73	192.168.2.10
Jan 10, 2025 00:22:26.793560982 CET	443	50135	104.16.80.73	192.168.2.10
Jan 10, 2025 00:22:26.793596983 CET	443	50135	104.16.80.73	192.168.2.10
Jan 10, 2025 00:22:26.793617964 CET	50135	443	192.168.2.10	104.16.80.73
Jan 10, 2025 00:22:26.793632030 CET	443	50135	104.16.80.73	192.168.2.10
Jan 10, 2025 00:22:26.793658018 CET	443	50135	104.16.80.73	192.168.2.10
Jan 10, 2025 00:22:26.793690920 CET	50135	443	192.168.2.10	104.16.80.73
Jan 10, 2025 00:22:26.793706894 CET	443	50135	104.16.80.73	192.168.2.10
Jan 10, 2025 00:22:26.793931007 CET	50135	443	192.168.2.10	104.16.80.73
Jan 10, 2025 00:22:26.794011116 CET	443	50135	104.16.80.73	192.168.2.10
Jan 10, 2025 00:22:26.794073105 CET	443	50135	104.16.80.73	192.168.2.10
Jan 10, 2025 00:22:26.794518948 CET	50135	443	192.168.2.10	104.16.80.73
Jan 10, 2025 00:22:26.794526100 CET	443	50135	104.16.80.73	192.168.2.10
Jan 10, 2025 00:22:26.794976950 CET	443	50135	104.16.80.73	192.168.2.10
Jan 10, 2025 00:22:26.795255899 CET	50135	443	192.168.2.10	104.16.80.73
Jan 10, 2025 00:22:26.795262098 CET	443	50135	104.16.80.73	192.168.2.10
Jan 10, 2025 00:22:26.807790041 CET	50136	443	192.168.2.10	34.49.241.189
Jan 10, 2025 00:22:26.807812929 CET	443	50136	34.49.241.189	192.168.2.10
Jan 10, 2025 00:22:26.840894938 CET	50135	443	192.168.2.10	104.16.80.73
Jan 10, 2025 00:22:26.840903044 CET	443	50135	104.16.80.73	192.168.2.10
Jan 10, 2025 00:22:26.850509882 CET	50141	443	192.168.2.10	216.239.34.181
Jan 10, 2025 00:22:26.850552082 CET	443	50141	216.239.34.181	192.168.2.10
Jan 10, 2025 00:22:26.850613117 CET	50141	443	192.168.2.10	216.239.34.181
Jan 10, 2025 00:22:26.851674080 CET	50142	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:26.851692915 CET	443	50142	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:26.851911068 CET	50142	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:26.853085995 CET	50141	443	192.168.2.10	216.239.34.181
Jan 10, 2025 00:22:26.853106976 CET	443	50141	216.239.34.181	192.168.2.10
Jan 10, 2025 00:22:26.853679895 CET	50142	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:26.853689909 CET	443	50142	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:26.887187958 CET	50135	443	192.168.2.10	104.16.80.73
Jan 10, 2025 00:22:26.896253109 CET	443	50135	104.16.80.73	192.168.2.10
Jan 10, 2025 00:22:26.896325111 CET	443	50135	104.16.80.73	192.168.2.10
Jan 10, 2025 00:22:26.896359921 CET	443	50135	104.16.80.73	192.168.2.10
Jan 10, 2025 00:22:26.896409988 CET	50135	443	192.168.2.10	104.16.80.73
Jan 10, 2025 00:22:26.896437883 CET	443	50135	104.16.80.73	192.168.2.10
Jan 10, 2025 00:22:26.896457911 CET	443	50135	104.16.80.73	192.168.2.10
Jan 10, 2025 00:22:26.896492004 CET	50135	443	192.168.2.10	104.16.80.73
Jan 10, 2025 00:22:26.901762009 CET	50143	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:26.901808023 CET	443	50143	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:26.901906013 CET	50135	443	192.168.2.10	104.16.80.73
Jan 10, 2025 00:22:26.901918888 CET	443	50135	104.16.80.73	192.168.2.10
Jan 10, 2025 00:22:26.901938915 CET	50143	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:26.903645039 CET	50143	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:26.903662920 CET	443	50143	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:26.908014059 CET	443	50136	34.49.241.189	192.168.2.10
Jan 10, 2025 00:22:26.908771992 CET	443	50136	34.49.241.189	192.168.2.10
Jan 10, 2025 00:22:26.908850908 CET	50136	443	192.168.2.10	34.49.241.189
Jan 10, 2025 00:22:26.910928965 CET	50136	443	192.168.2.10	34.49.241.189
Jan 10, 2025 00:22:26.910943031 CET	443	50136	34.49.241.189	192.168.2.10
Jan 10, 2025 00:22:27.017060041 CET	50144	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:27.017093897 CET	443	50144	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:27.017297983 CET	50144	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:27.018913031 CET	50144	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:27.018924952 CET	443	50144	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:27.042287111 CET	50145	443	192.168.2.10	18.66.102.51
Jan 10, 2025 00:22:27.042325974 CET	443	50145	18.66.102.51	192.168.2.10
Jan 10, 2025 00:22:27.042375088 CET	50145	443	192.168.2.10	18.66.102.51
Jan 10, 2025 00:22:27.043190002 CET	50145	443	192.168.2.10	18.66.102.51
Jan 10, 2025 00:22:27.043206930 CET	443	50145	18.66.102.51	192.168.2.10
Jan 10, 2025 00:22:27.114367008 CET	50146	443	192.168.2.10	104.18.66.57
Jan 10, 2025 00:22:27.114422083 CET	443	50146	104.18.66.57	192.168.2.10
Jan 10, 2025 00:22:27.114547968 CET	50146	443	192.168.2.10	104.18.66.57
Jan 10, 2025 00:22:27.114985943 CET	50146	443	192.168.2.10	104.18.66.57
Jan 10, 2025 00:22:27.115003109 CET	443	50146	104.18.66.57	192.168.2.10
Jan 10, 2025 00:22:27.192909956 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.193339109 CET	50138	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.193356991 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.193896055 CET	50147	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:27.193938971 CET	443	50147	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:27.194004059 CET	50147	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:27.194422007 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.194489956 CET	50138	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.194700956 CET	50148	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:27.194726944 CET	443	50148	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:27.194782972 CET	50148	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:27.195049047 CET	50147	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:27.195064068 CET	443	50147	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:27.196417093 CET	50148	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:27.196425915 CET	443	50148	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:27.196705103 CET	50138	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.196798086 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.197137117 CET	50138	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.197144985 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.246251106 CET	50138	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.249037981 CET	50149	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:27.249102116 CET	443	50149	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.249171019 CET	50149	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:27.249878883 CET	50150	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:27.249933958 CET	443	50150	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.250004053 CET	50150	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:27.251876116 CET	50149	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:27.251899958 CET	443	50149	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.252293110 CET	50150	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:27.252307892 CET	443	50150	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.258521080 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:27.258548021 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:27.258599043 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:27.259074926 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:27.259088993 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:27.276618958 CET	50154	443	192.168.2.10	104.16.79.73
Jan 10, 2025 00:22:27.276654005 CET	443	50154	104.16.79.73	192.168.2.10
Jan 10, 2025 00:22:27.276738882 CET	50154	443	192.168.2.10	104.16.79.73
Jan 10, 2025 00:22:27.277630091 CET	50154	443	192.168.2.10	104.16.79.73
Jan 10, 2025 00:22:27.277647972 CET	443	50154	104.16.79.73	192.168.2.10
Jan 10, 2025 00:22:27.297714949 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.297770977 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.297800064 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.297807932 CET	50138	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.297840118 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.297879934 CET	50138	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.297880888 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.297894001 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.297929049 CET	50138	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.297938108 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.298523903 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.298553944 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.298572063 CET	50138	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.298584938 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.298625946 CET	50138	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.299082041 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.305938005 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.305968046 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.305988073 CET	50138	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.305996895 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.306031942 CET	50138	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.318180084 CET	443	50137	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.318672895 CET	50137	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:27.318681955 CET	443	50137	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.319020987 CET	443	50137	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.319572926 CET	50137	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:27.319647074 CET	443	50137	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.319725990 CET	50137	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:27.319740057 CET	443	50137	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.319747925 CET	50137	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:27.349148035 CET	443	50141	216.239.34.181	192.168.2.10
Jan 10, 2025 00:22:27.349602938 CET	50141	443	192.168.2.10	216.239.34.181
Jan 10, 2025 00:22:27.349626064 CET	443	50141	216.239.34.181	192.168.2.10
Jan 10, 2025 00:22:27.350049019 CET	443	50141	216.239.34.181	192.168.2.10
Jan 10, 2025 00:22:27.350110054 CET	50141	443	192.168.2.10	216.239.34.181
Jan 10, 2025 00:22:27.350790977 CET	443	50141	216.239.34.181	192.168.2.10
Jan 10, 2025 00:22:27.350847006 CET	50141	443	192.168.2.10	216.239.34.181
Jan 10, 2025 00:22:27.352077961 CET	50141	443	192.168.2.10	216.239.34.181
Jan 10, 2025 00:22:27.352165937 CET	443	50141	216.239.34.181	192.168.2.10
Jan 10, 2025 00:22:27.352394104 CET	50141	443	192.168.2.10	216.239.34.181
Jan 10, 2025 00:22:27.352401972 CET	443	50141	216.239.34.181	192.168.2.10
Jan 10, 2025 00:22:27.363333941 CET	443	50137	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.386220932 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.386578083 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.386609077 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.386622906 CET	50138	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.386662006 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.386701107 CET	50138	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.387120008 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.387181997 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.387221098 CET	50138	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.387228966 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.388266087 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.388302088 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.388309956 CET	50138	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.388317108 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.388351917 CET	50138	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.388359070 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.388925076 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.388972998 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.388987064 CET	50138	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.388994932 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.389030933 CET	50138	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.389036894 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.389803886 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.389836073 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.389844894 CET	50138	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.389852047 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.389889002 CET	50138	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.390883923 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.390979052 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.391019106 CET	50138	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.391026020 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.391124964 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.391165972 CET	50138	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.391474962 CET	50138	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.391484976 CET	443	50138	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.392203093 CET	50141	443	192.168.2.10	216.239.34.181
Jan 10, 2025 00:22:27.424654961 CET	50155	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:27.424695015 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:27.424757957 CET	50155	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:27.424995899 CET	50155	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:27.425008059 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:27.436503887 CET	50156	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.436541080 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.436600924 CET	50156	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.436974049 CET	50156	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.436988115 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.443181038 CET	50157	443	192.168.2.10	35.227.211.136
Jan 10, 2025 00:22:27.443226099 CET	443	50157	35.227.211.136	192.168.2.10
Jan 10, 2025 00:22:27.443332911 CET	50157	443	192.168.2.10	35.227.211.136
Jan 10, 2025 00:22:27.443607092 CET	50157	443	192.168.2.10	35.227.211.136
Jan 10, 2025 00:22:27.443624973 CET	443	50157	35.227.211.136	192.168.2.10
Jan 10, 2025 00:22:27.464502096 CET	443	50140	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:27.464770079 CET	50140	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:27.464781046 CET	443	50140	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:27.465858936 CET	443	50140	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:27.465915918 CET	50140	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:27.467179060 CET	50140	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:27.467293978 CET	443	50140	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:27.467379093 CET	50140	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:27.467386961 CET	443	50140	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:27.468404055 CET	443	50141	216.239.34.181	192.168.2.10
Jan 10, 2025 00:22:27.468539953 CET	443	50141	216.239.34.181	192.168.2.10
Jan 10, 2025 00:22:27.468600988 CET	50141	443	192.168.2.10	216.239.34.181
Jan 10, 2025 00:22:27.468822002 CET	50141	443	192.168.2.10	216.239.34.181
Jan 10, 2025 00:22:27.468844891 CET	443	50141	216.239.34.181	192.168.2.10
Jan 10, 2025 00:22:27.468854904 CET	50141	443	192.168.2.10	216.239.34.181
Jan 10, 2025 00:22:27.468955994 CET	50141	443	192.168.2.10	216.239.34.181
Jan 10, 2025 00:22:27.474864960 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.475104094 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:27.475125074 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.476320028 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.476377010 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:27.477554083 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:27.477554083 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:27.477593899 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.477644920 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.511861086 CET	50140	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:27.512590885 CET	443	50142	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:27.512835979 CET	50142	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:27.512844086 CET	443	50142	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:27.513766050 CET	443	50142	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:27.513817072 CET	50142	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:27.514195919 CET	50142	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:27.514245987 CET	443	50142	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:27.514486074 CET	50142	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:27.514493942 CET	443	50142	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:27.527833939 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:27.527851105 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.535227060 CET	443	50137	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.535322905 CET	443	50137	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.535367966 CET	50137	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:27.536453009 CET	50137	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:27.536469936 CET	443	50137	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.541389942 CET	50158	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:27.541433096 CET	443	50158	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.541495085 CET	50158	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:27.541702032 CET	50158	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:27.541712999 CET	443	50158	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.546802044 CET	50159	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:27.546823978 CET	443	50159	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:27.546874046 CET	50159	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:27.547112942 CET	50159	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:27.547122955 CET	443	50159	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:27.556968927 CET	443	50143	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:27.557245970 CET	50143	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:27.557259083 CET	443	50143	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:27.558325052 CET	443	50143	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:27.558423996 CET	50142	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:27.558434010 CET	50143	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:27.559020042 CET	50143	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:27.559098005 CET	443	50143	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:27.559473991 CET	50161	443	192.168.2.10	172.67.154.89
Jan 10, 2025 00:22:27.559501886 CET	443	50161	172.67.154.89	192.168.2.10
Jan 10, 2025 00:22:27.559546947 CET	50161	443	192.168.2.10	172.67.154.89
Jan 10, 2025 00:22:27.559720039 CET	50143	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:27.559727907 CET	443	50143	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:27.559999943 CET	50161	443	192.168.2.10	172.67.154.89
Jan 10, 2025 00:22:27.560018063 CET	443	50161	172.67.154.89	192.168.2.10
Jan 10, 2025 00:22:27.573803902 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:27.580127954 CET	443	50146	104.18.66.57	192.168.2.10
Jan 10, 2025 00:22:27.580463886 CET	50146	443	192.168.2.10	104.18.66.57
Jan 10, 2025 00:22:27.580482960 CET	443	50146	104.18.66.57	192.168.2.10
Jan 10, 2025 00:22:27.580832958 CET	443	50146	104.18.66.57	192.168.2.10
Jan 10, 2025 00:22:27.581168890 CET	50146	443	192.168.2.10	104.18.66.57
Jan 10, 2025 00:22:27.581245899 CET	443	50146	104.18.66.57	192.168.2.10
Jan 10, 2025 00:22:27.581316948 CET	50146	443	192.168.2.10	104.18.66.57
Jan 10, 2025 00:22:27.581348896 CET	50146	443	192.168.2.10	104.18.66.57
Jan 10, 2025 00:22:27.581387997 CET	443	50146	104.18.66.57	192.168.2.10
Jan 10, 2025 00:22:27.605676889 CET	50143	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:27.667802095 CET	443	50144	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:27.668750048 CET	50144	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:27.668764114 CET	443	50144	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:27.669101954 CET	443	50144	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:27.669555902 CET	50144	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:27.669611931 CET	443	50144	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:27.669645071 CET	50144	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:27.670383930 CET	443	50140	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:27.670527935 CET	443	50140	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:27.670598030 CET	50140	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:27.671960115 CET	50140	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:27.671972990 CET	443	50140	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:27.687834024 CET	443	50146	104.18.66.57	192.168.2.10
Jan 10, 2025 00:22:27.687913895 CET	443	50146	104.18.66.57	192.168.2.10
Jan 10, 2025 00:22:27.687963009 CET	50146	443	192.168.2.10	104.18.66.57
Jan 10, 2025 00:22:27.688954115 CET	50146	443	192.168.2.10	104.18.66.57
Jan 10, 2025 00:22:27.688965082 CET	443	50146	104.18.66.57	192.168.2.10
Jan 10, 2025 00:22:27.711323977 CET	443	50144	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:27.714929104 CET	50144	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:27.749701023 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.759062052 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.759076118 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.759146929 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:27.759171009 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.759182930 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.759190083 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.759208918 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.759269953 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:27.759269953 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:27.759277105 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.763185978 CET	443	50154	104.16.79.73	192.168.2.10
Jan 10, 2025 00:22:27.763597012 CET	50154	443	192.168.2.10	104.16.79.73
Jan 10, 2025 00:22:27.763622999 CET	443	50154	104.16.79.73	192.168.2.10
Jan 10, 2025 00:22:27.764457941 CET	443	50143	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:27.764611959 CET	443	50143	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:27.764658928 CET	50143	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:27.765135050 CET	443	50154	104.16.79.73	192.168.2.10
Jan 10, 2025 00:22:27.765192986 CET	50154	443	192.168.2.10	104.16.79.73
Jan 10, 2025 00:22:27.765948057 CET	50154	443	192.168.2.10	104.16.79.73
Jan 10, 2025 00:22:27.766056061 CET	443	50154	104.16.79.73	192.168.2.10
Jan 10, 2025 00:22:27.766216993 CET	50154	443	192.168.2.10	104.16.79.73
Jan 10, 2025 00:22:27.766227961 CET	443	50154	104.16.79.73	192.168.2.10
Jan 10, 2025 00:22:27.780270100 CET	50143	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:27.780292988 CET	443	50143	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:27.790435076 CET	443	50145	18.66.102.51	192.168.2.10
Jan 10, 2025 00:22:27.790858030 CET	50145	443	192.168.2.10	18.66.102.51
Jan 10, 2025 00:22:27.790878057 CET	443	50145	18.66.102.51	192.168.2.10
Jan 10, 2025 00:22:27.791966915 CET	443	50145	18.66.102.51	192.168.2.10
Jan 10, 2025 00:22:27.792020082 CET	50145	443	192.168.2.10	18.66.102.51
Jan 10, 2025 00:22:27.794060946 CET	50145	443	192.168.2.10	18.66.102.51
Jan 10, 2025 00:22:27.794140100 CET	443	50145	18.66.102.51	192.168.2.10
Jan 10, 2025 00:22:27.794308901 CET	50145	443	192.168.2.10	18.66.102.51
Jan 10, 2025 00:22:27.794318914 CET	443	50145	18.66.102.51	192.168.2.10
Jan 10, 2025 00:22:27.799376011 CET	443	50142	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:27.799496889 CET	443	50142	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:27.799549103 CET	50142	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:27.800764084 CET	50142	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:27.800786018 CET	443	50142	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:27.808465004 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:27.808485985 CET	50154	443	192.168.2.10	104.16.79.73
Jan 10, 2025 00:22:27.829396009 CET	443	50149	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.829688072 CET	50149	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:27.829718113 CET	443	50149	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.830059052 CET	443	50149	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.830559015 CET	443	50150	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.830591917 CET	50149	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:27.830591917 CET	50149	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:27.830610991 CET	443	50149	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.830660105 CET	443	50149	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.830811977 CET	50150	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:27.830842018 CET	443	50150	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.831238985 CET	443	50150	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.831597090 CET	50150	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:27.831685066 CET	443	50150	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.831763029 CET	50150	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:27.833180904 CET	443	50148	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:27.833385944 CET	50148	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:27.833398104 CET	443	50148	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:27.834408998 CET	443	50148	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:27.834479094 CET	50148	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:27.834922075 CET	50148	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:27.834986925 CET	443	50148	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:27.835062027 CET	50148	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:27.835072041 CET	443	50148	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:27.838932037 CET	50145	443	192.168.2.10	18.66.102.51
Jan 10, 2025 00:22:27.843178988 CET	443	50147	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:27.843364954 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.843383074 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.843436003 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.843444109 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.843453884 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:27.843491077 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:27.843621969 CET	50147	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:27.843638897 CET	443	50147	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:27.844635010 CET	443	50147	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:27.844698906 CET	50147	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:27.845159054 CET	50147	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:27.845215082 CET	443	50147	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:27.845323086 CET	50147	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:27.845330000 CET	443	50147	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:27.849071980 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.849087954 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.849132061 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.849139929 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.849149942 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:27.849194050 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:27.849204063 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.849245071 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:27.849245071 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:27.875330925 CET	443	50150	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.882839918 CET	50148	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:27.882842064 CET	50149	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:27.891585112 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.891808987 CET	50156	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.891825914 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.892877102 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.892932892 CET	50156	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.893488884 CET	50156	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.893553972 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.893625975 CET	50156	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.893632889 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.895405054 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:27.895629883 CET	50155	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:27.895657063 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:27.896708012 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:27.896764994 CET	50155	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:27.898895025 CET	50147	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:27.899490118 CET	50155	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:27.899554014 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:27.899696112 CET	50155	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:27.899708033 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:27.905143976 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:27.905406952 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:27.905442953 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:27.906497002 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:27.906552076 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:27.906950951 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:27.907016993 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:27.907093048 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:27.907104969 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:27.916398048 CET	443	50154	104.16.79.73	192.168.2.10
Jan 10, 2025 00:22:27.916438103 CET	443	50154	104.16.79.73	192.168.2.10
Jan 10, 2025 00:22:27.916461945 CET	443	50154	104.16.79.73	192.168.2.10
Jan 10, 2025 00:22:27.916476965 CET	50154	443	192.168.2.10	104.16.79.73
Jan 10, 2025 00:22:27.916484118 CET	443	50154	104.16.79.73	192.168.2.10
Jan 10, 2025 00:22:27.916492939 CET	443	50154	104.16.79.73	192.168.2.10
Jan 10, 2025 00:22:27.916521072 CET	50154	443	192.168.2.10	104.16.79.73
Jan 10, 2025 00:22:27.916523933 CET	443	50154	104.16.79.73	192.168.2.10
Jan 10, 2025 00:22:27.916531086 CET	443	50154	104.16.79.73	192.168.2.10
Jan 10, 2025 00:22:27.916558027 CET	50154	443	192.168.2.10	104.16.79.73
Jan 10, 2025 00:22:27.916939020 CET	443	50154	104.16.79.73	192.168.2.10
Jan 10, 2025 00:22:27.916963100 CET	443	50154	104.16.79.73	192.168.2.10
Jan 10, 2025 00:22:27.916982889 CET	50154	443	192.168.2.10	104.16.79.73
Jan 10, 2025 00:22:27.916984081 CET	443	50154	104.16.79.73	192.168.2.10
Jan 10, 2025 00:22:27.916992903 CET	443	50154	104.16.79.73	192.168.2.10
Jan 10, 2025 00:22:27.917032957 CET	50154	443	192.168.2.10	104.16.79.73
Jan 10, 2025 00:22:27.918072939 CET	443	50154	104.16.79.73	192.168.2.10
Jan 10, 2025 00:22:27.918113947 CET	50154	443	192.168.2.10	104.16.79.73
Jan 10, 2025 00:22:27.921830893 CET	443	50154	104.16.79.73	192.168.2.10
Jan 10, 2025 00:22:27.923110962 CET	443	50157	35.227.211.136	192.168.2.10
Jan 10, 2025 00:22:27.923331022 CET	50157	443	192.168.2.10	35.227.211.136
Jan 10, 2025 00:22:27.923357964 CET	443	50157	35.227.211.136	192.168.2.10
Jan 10, 2025 00:22:27.924647093 CET	443	50157	35.227.211.136	192.168.2.10
Jan 10, 2025 00:22:27.924784899 CET	50157	443	192.168.2.10	35.227.211.136
Jan 10, 2025 00:22:27.925858974 CET	50157	443	192.168.2.10	35.227.211.136
Jan 10, 2025 00:22:27.925951958 CET	443	50157	35.227.211.136	192.168.2.10
Jan 10, 2025 00:22:27.926121950 CET	50157	443	192.168.2.10	35.227.211.136
Jan 10, 2025 00:22:27.926131010 CET	443	50157	35.227.211.136	192.168.2.10
Jan 10, 2025 00:22:27.934956074 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.934981108 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.935029030 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.935040951 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:27.935046911 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.935081005 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:27.936023951 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.936064959 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.936136007 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:27.936136007 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:27.936142921 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.936189890 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:27.937040091 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.937113047 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:27.937119961 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.937171936 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:27.939892054 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.939979076 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.940007925 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:27.940016031 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.940071106 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:27.940071106 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:27.940165043 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.940242052 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:27.942156076 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.942224979 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:27.944230080 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:27.944315910 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:27.944580078 CET	50156	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.944664001 CET	50155	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:27.950511932 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:27.956834078 CET	443	50144	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:27.956866980 CET	443	50144	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:27.956875086 CET	443	50144	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:27.956918001 CET	443	50144	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:27.956934929 CET	50144	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:27.956944942 CET	443	50144	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:27.956957102 CET	443	50144	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:27.956974983 CET	50144	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:27.957001925 CET	50144	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:27.958245993 CET	443	50150	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.958281994 CET	443	50150	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.958333015 CET	443	50150	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.958339930 CET	50150	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:27.958349943 CET	443	50150	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.958390951 CET	50150	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:27.958921909 CET	443	50149	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.958955050 CET	443	50149	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.958966970 CET	443	50149	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.958991051 CET	443	50149	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.959000111 CET	443	50149	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.959021091 CET	443	50149	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.959145069 CET	50149	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:27.959165096 CET	443	50149	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:27.959244013 CET	50149	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:27.967386007 CET	50154	443	192.168.2.10	104.16.79.73
Jan 10, 2025 00:22:27.967478991 CET	50157	443	192.168.2.10	35.227.211.136
Jan 10, 2025 00:22:27.993752003 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.993788958 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.993840933 CET	50156	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.993856907 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.993879080 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.993920088 CET	50156	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.994119883 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.994580984 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.994620085 CET	50156	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.994642019 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.994765997 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.994811058 CET	50156	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.994822979 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.995096922 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.995136023 CET	50156	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.995151997 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.996119022 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:27.996292114 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:27.996340990 CET	50155	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:27.996364117 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:27.996423960 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:27.996459007 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:27.996464014 CET	50155	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:27.996474028 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:27.996519089 CET	50155	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:27.996867895 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:27.997189045 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:27.997216940 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:27.997227907 CET	50155	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:27.997236013 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:27.997273922 CET	50155	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:27.999727011 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.999759912 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.999773026 CET	50156	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:27.999794960 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:27.999830961 CET	50156	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:28.002414942 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:28.002460957 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:28.002516985 CET	50155	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:28.002530098 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:28.007499933 CET	443	50154	104.16.79.73	192.168.2.10
Jan 10, 2025 00:22:28.007556915 CET	443	50154	104.16.79.73	192.168.2.10
Jan 10, 2025 00:22:28.007602930 CET	50154	443	192.168.2.10	104.16.79.73
Jan 10, 2025 00:22:28.007616043 CET	443	50154	104.16.79.73	192.168.2.10
Jan 10, 2025 00:22:28.007628918 CET	443	50154	104.16.79.73	192.168.2.10
Jan 10, 2025 00:22:28.007682085 CET	50154	443	192.168.2.10	104.16.79.73
Jan 10, 2025 00:22:28.010587931 CET	50150	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.022752047 CET	443	50161	172.67.154.89	192.168.2.10
Jan 10, 2025 00:22:28.027391911 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:28.027451992 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:28.027496099 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:28.027504921 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:28.027539968 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:28.027539968 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:28.028011084 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:28.028068066 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:28.028111935 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:28.028111935 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:28.028120041 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:28.028196096 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:28.030973911 CET	50161	443	192.168.2.10	172.67.154.89
Jan 10, 2025 00:22:28.030986071 CET	443	50161	172.67.154.89	192.168.2.10
Jan 10, 2025 00:22:28.032583952 CET	443	50161	172.67.154.89	192.168.2.10
Jan 10, 2025 00:22:28.032674074 CET	50161	443	192.168.2.10	172.67.154.89
Jan 10, 2025 00:22:28.034344912 CET	443	50144	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:28.034406900 CET	50144	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:28.034423113 CET	443	50144	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:28.034441948 CET	443	50144	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:28.034459114 CET	50144	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:28.034488916 CET	50144	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:28.037614107 CET	50161	443	192.168.2.10	172.67.154.89
Jan 10, 2025 00:22:28.037723064 CET	443	50161	172.67.154.89	192.168.2.10
Jan 10, 2025 00:22:28.039154053 CET	50161	443	192.168.2.10	172.67.154.89
Jan 10, 2025 00:22:28.039163113 CET	443	50161	172.67.154.89	192.168.2.10
Jan 10, 2025 00:22:28.040358067 CET	443	50157	35.227.211.136	192.168.2.10
Jan 10, 2025 00:22:28.040487051 CET	443	50157	35.227.211.136	192.168.2.10
Jan 10, 2025 00:22:28.040524960 CET	50157	443	192.168.2.10	35.227.211.136
Jan 10, 2025 00:22:28.042603016 CET	50155	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:28.044806957 CET	443	50149	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.044843912 CET	443	50150	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.044862986 CET	443	50149	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.044867992 CET	50149	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.044872046 CET	443	50150	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.044882059 CET	443	50149	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.044894934 CET	443	50150	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.044900894 CET	50150	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.044913054 CET	443	50150	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.044944048 CET	50150	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.044945002 CET	50149	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.044950962 CET	443	50150	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.044960976 CET	443	50150	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.044972897 CET	50150	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.044992924 CET	50150	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.047333002 CET	443	50149	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.047363997 CET	443	50149	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.047395945 CET	50149	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.047411919 CET	443	50149	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.047422886 CET	50149	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.047445059 CET	50149	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.047485113 CET	443	50150	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.047517061 CET	443	50150	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.047548056 CET	50150	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.047549009 CET	443	50150	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.047559977 CET	443	50150	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.047584057 CET	50150	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.047595978 CET	50150	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.052416086 CET	50157	443	192.168.2.10	35.227.211.136
Jan 10, 2025 00:22:28.052457094 CET	443	50157	35.227.211.136	192.168.2.10
Jan 10, 2025 00:22:28.066914082 CET	443	50145	18.66.102.51	192.168.2.10
Jan 10, 2025 00:22:28.074218035 CET	443	50145	18.66.102.51	192.168.2.10
Jan 10, 2025 00:22:28.074233055 CET	443	50145	18.66.102.51	192.168.2.10
Jan 10, 2025 00:22:28.074261904 CET	443	50145	18.66.102.51	192.168.2.10
Jan 10, 2025 00:22:28.074292898 CET	50145	443	192.168.2.10	18.66.102.51
Jan 10, 2025 00:22:28.074317932 CET	443	50145	18.66.102.51	192.168.2.10
Jan 10, 2025 00:22:28.074341059 CET	50145	443	192.168.2.10	18.66.102.51
Jan 10, 2025 00:22:28.074373960 CET	443	50145	18.66.102.51	192.168.2.10
Jan 10, 2025 00:22:28.074378014 CET	50145	443	192.168.2.10	18.66.102.51
Jan 10, 2025 00:22:28.074419022 CET	50145	443	192.168.2.10	18.66.102.51
Jan 10, 2025 00:22:28.075479031 CET	50154	443	192.168.2.10	104.16.79.73
Jan 10, 2025 00:22:28.075510979 CET	443	50154	104.16.79.73	192.168.2.10
Jan 10, 2025 00:22:28.077107906 CET	50139	443	192.168.2.10	3.167.227.110
Jan 10, 2025 00:22:28.077127934 CET	443	50139	3.167.227.110	192.168.2.10
Jan 10, 2025 00:22:28.080653906 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:28.080724955 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:28.080773115 CET	50156	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:28.080786943 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:28.080940008 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:28.080976963 CET	50156	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:28.080985069 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:28.081094027 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:28.081145048 CET	50156	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:28.081151009 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:28.082000017 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:28.082036972 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:28.082037926 CET	50156	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:28.082051039 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:28.082078934 CET	50156	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:28.082086086 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:28.082881927 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:28.082917929 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:28.082928896 CET	50156	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:28.082937956 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:28.082973003 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:28.082990885 CET	50156	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:28.082998037 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:28.083029032 CET	50156	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:28.083959103 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:28.084012985 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:28.084045887 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:28.084059954 CET	50156	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:28.084073067 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:28.084111929 CET	50156	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:28.084450960 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:28.084465027 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:28.084485054 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:28.084495068 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:28.084516048 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:28.084517956 CET	50155	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:28.084542990 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:28.084556103 CET	50155	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:28.084568024 CET	50155	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:28.084593058 CET	50155	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:28.084923983 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:28.084968090 CET	50156	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:28.084979057 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:28.085010052 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:28.085046053 CET	50156	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:28.085546017 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:28.085562944 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:28.085608959 CET	50155	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:28.085616112 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:28.085640907 CET	50155	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:28.085671902 CET	50155	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:28.089706898 CET	50161	443	192.168.2.10	172.67.154.89
Jan 10, 2025 00:22:28.125715971 CET	443	50158	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.131737947 CET	443	50149	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.131787062 CET	443	50149	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.131813049 CET	50149	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.131824970 CET	443	50149	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.131839037 CET	443	50149	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.131891012 CET	50149	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.132080078 CET	443	50150	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.132117033 CET	443	50150	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.132139921 CET	50150	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.132147074 CET	443	50150	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.132169008 CET	50150	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.132193089 CET	443	50150	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.132232904 CET	50150	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.148181915 CET	443	50161	172.67.154.89	192.168.2.10
Jan 10, 2025 00:22:28.148262024 CET	443	50161	172.67.154.89	192.168.2.10
Jan 10, 2025 00:22:28.148313046 CET	50161	443	192.168.2.10	172.67.154.89
Jan 10, 2025 00:22:28.148607969 CET	50150	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.148624897 CET	443	50150	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.149458885 CET	50149	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.149494886 CET	443	50149	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.150568962 CET	50158	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.150587082 CET	443	50158	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.151830912 CET	443	50158	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.151933908 CET	50158	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.157635927 CET	50158	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.157788038 CET	443	50158	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.158930063 CET	50158	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.158938885 CET	443	50158	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.170289040 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:28.170319080 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:28.170370102 CET	50155	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:28.170388937 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:28.170418024 CET	50155	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:28.170435905 CET	50155	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:28.170593023 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:28.170643091 CET	50155	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:28.170650959 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:28.170681953 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:28.170716047 CET	50155	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:28.184114933 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.184179068 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.184587955 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.215070009 CET	50158	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.227241039 CET	50144	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:28.227272987 CET	443	50144	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:28.232239008 CET	443	50147	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:28.235610008 CET	443	50147	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:28.235619068 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.235620022 CET	443	50147	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:28.235631943 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.235665083 CET	50147	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:28.235692024 CET	443	50147	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:28.235713005 CET	443	50147	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:28.235723019 CET	50147	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:28.235745907 CET	50147	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:28.242054939 CET	50163	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:28.242098093 CET	443	50163	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:28.242530107 CET	50163	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:28.243170977 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:28.243212938 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:28.243282080 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:28.243895054 CET	50163	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:28.243910074 CET	443	50163	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:28.244301081 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:28.244324923 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:28.245100975 CET	50165	443	192.168.2.10	3.130.114.26
Jan 10, 2025 00:22:28.245126009 CET	443	50165	3.130.114.26	192.168.2.10
Jan 10, 2025 00:22:28.245430946 CET	50165	443	192.168.2.10	3.130.114.26
Jan 10, 2025 00:22:28.246273041 CET	50165	443	192.168.2.10	3.130.114.26
Jan 10, 2025 00:22:28.246287107 CET	443	50165	3.130.114.26	192.168.2.10
Jan 10, 2025 00:22:28.253387928 CET	50156	443	192.168.2.10	35.186.249.72
Jan 10, 2025 00:22:28.253396034 CET	443	50156	35.186.249.72	192.168.2.10
Jan 10, 2025 00:22:28.253886938 CET	50161	443	192.168.2.10	172.67.154.89
Jan 10, 2025 00:22:28.253902912 CET	443	50161	172.67.154.89	192.168.2.10
Jan 10, 2025 00:22:28.255139112 CET	50155	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:28.255160093 CET	443	50155	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:28.255604982 CET	50145	443	192.168.2.10	18.66.102.51
Jan 10, 2025 00:22:28.255616903 CET	443	50145	18.66.102.51	192.168.2.10
Jan 10, 2025 00:22:28.269917965 CET	443	50159	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:28.272835970 CET	50159	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:28.272866964 CET	443	50159	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:28.274830103 CET	443	50159	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:28.274883032 CET	50159	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:28.277633905 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.277645111 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.277689934 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.277704954 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.277708054 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.277715921 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.277734995 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.277748108 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.277748108 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.277767897 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.279468060 CET	50147	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:28.279500008 CET	443	50147	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:28.286088943 CET	50159	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:28.286295891 CET	50159	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:28.287885904 CET	443	50159	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:28.305737972 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.305748940 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.305778980 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.305803061 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.305836916 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.305875063 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.305882931 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.305918932 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.332535982 CET	50159	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:28.332571983 CET	443	50159	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:28.341016054 CET	443	50158	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.341052055 CET	443	50158	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.341058969 CET	443	50158	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.341095924 CET	443	50158	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.341111898 CET	443	50158	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.341120005 CET	50158	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.341125011 CET	443	50158	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.341140032 CET	443	50158	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.341162920 CET	50158	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.341186047 CET	50158	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.341938972 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.341960907 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.341995001 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.342015028 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.342039108 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.342055082 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.349234104 CET	50168	443	192.168.2.10	151.101.1.44
Jan 10, 2025 00:22:28.349267006 CET	443	50168	151.101.1.44	192.168.2.10
Jan 10, 2025 00:22:28.349378109 CET	50168	443	192.168.2.10	151.101.1.44
Jan 10, 2025 00:22:28.349915981 CET	50168	443	192.168.2.10	151.101.1.44
Jan 10, 2025 00:22:28.349936962 CET	443	50168	151.101.1.44	192.168.2.10
Jan 10, 2025 00:22:28.354628086 CET	50169	443	192.168.2.10	34.231.219.101
Jan 10, 2025 00:22:28.354667902 CET	443	50169	34.231.219.101	192.168.2.10
Jan 10, 2025 00:22:28.355168104 CET	50169	443	192.168.2.10	34.231.219.101
Jan 10, 2025 00:22:28.355637074 CET	50169	443	192.168.2.10	34.231.219.101
Jan 10, 2025 00:22:28.355648994 CET	443	50169	34.231.219.101	192.168.2.10
Jan 10, 2025 00:22:28.374856949 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.374888897 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.374928951 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.374949932 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.374978065 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.374994040 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.379055977 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.379133940 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.383991003 CET	50159	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:28.399558067 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.399593115 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.399631977 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.399648905 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.399666071 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.423907995 CET	443	50158	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.423938036 CET	443	50158	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.423985004 CET	50158	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.423994064 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.423996925 CET	443	50158	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.424020052 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.424037933 CET	50158	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.424073935 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.424102068 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.424107075 CET	50158	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.424113989 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.425398111 CET	443	50158	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.425420046 CET	443	50158	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.425477982 CET	50158	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.425489902 CET	443	50158	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.425530910 CET	50158	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.432065964 CET	443	50148	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:28.432471991 CET	443	50148	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:28.432574034 CET	50148	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:28.434222937 CET	50148	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:28.434242964 CET	443	50148	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:28.458132029 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.458158970 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.458190918 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.458220005 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.458246946 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.458261967 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.458298922 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.458338976 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.458344936 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.458669901 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.458709955 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.458715916 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.458770037 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.463308096 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.463399887 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.465568066 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.465622902 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.467622995 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.467705011 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.476355076 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.476406097 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.476418972 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.476434946 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.476449966 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.476593018 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.488893032 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.488922119 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.489022017 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.489039898 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.489131927 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.500475883 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.500499964 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.500557899 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.500575066 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.500591993 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.500607967 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.509623051 CET	443	50158	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.509716034 CET	443	50158	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.509716034 CET	50158	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.509757996 CET	50158	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.510013103 CET	50158	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:28.510030985 CET	443	50158	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:28.511569023 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.511593103 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.511632919 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.511641979 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.511673927 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.514714003 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.514786959 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.522806883 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.522854090 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.522893906 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.522917986 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.522928953 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.534141064 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.534161091 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.534274101 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.534292936 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.549650908 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.549673080 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.549731016 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.549748898 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.549766064 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.550287008 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.550367117 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.550406933 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.566917896 CET	50153	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:28.566943884 CET	443	50153	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:28.578382969 CET	50171	443	192.168.2.10	64.202.112.31
Jan 10, 2025 00:22:28.578421116 CET	443	50171	64.202.112.31	192.168.2.10
Jan 10, 2025 00:22:28.578475952 CET	50171	443	192.168.2.10	64.202.112.31
Jan 10, 2025 00:22:28.578692913 CET	50171	443	192.168.2.10	64.202.112.31
Jan 10, 2025 00:22:28.578708887 CET	443	50171	64.202.112.31	192.168.2.10
Jan 10, 2025 00:22:28.595396996 CET	50172	443	192.168.2.10	35.227.211.136
Jan 10, 2025 00:22:28.595412016 CET	443	50172	35.227.211.136	192.168.2.10
Jan 10, 2025 00:22:28.595469952 CET	50172	443	192.168.2.10	35.227.211.136
Jan 10, 2025 00:22:28.595705986 CET	50172	443	192.168.2.10	35.227.211.136
Jan 10, 2025 00:22:28.595719099 CET	443	50172	35.227.211.136	192.168.2.10
Jan 10, 2025 00:22:28.604125977 CET	50173	443	192.168.2.10	3.167.227.50
Jan 10, 2025 00:22:28.604176044 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:28.604311943 CET	50173	443	192.168.2.10	3.167.227.50
Jan 10, 2025 00:22:28.604834080 CET	50173	443	192.168.2.10	3.167.227.50
Jan 10, 2025 00:22:28.604847908 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:28.612747908 CET	50174	443	192.168.2.10	151.101.129.44
Jan 10, 2025 00:22:28.612792015 CET	443	50174	151.101.129.44	192.168.2.10
Jan 10, 2025 00:22:28.612850904 CET	50174	443	192.168.2.10	151.101.129.44
Jan 10, 2025 00:22:28.613235950 CET	50174	443	192.168.2.10	151.101.129.44
Jan 10, 2025 00:22:28.613250971 CET	443	50174	151.101.129.44	192.168.2.10
Jan 10, 2025 00:22:28.626296997 CET	443	50159	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:28.626321077 CET	443	50159	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:28.626390934 CET	50159	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:28.626416922 CET	443	50159	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:28.630768061 CET	443	50159	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:28.630811930 CET	50159	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:28.630820990 CET	443	50159	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:28.630953074 CET	443	50159	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:28.630995035 CET	50159	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:28.631001949 CET	443	50159	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:28.631036997 CET	50159	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:28.714509964 CET	443	50159	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:28.714523077 CET	443	50159	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:28.714560032 CET	443	50159	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:28.714570045 CET	50159	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:28.714596987 CET	443	50159	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:28.714612007 CET	50159	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:28.714735985 CET	443	50159	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:28.714901924 CET	50159	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:28.714910984 CET	443	50159	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:28.715364933 CET	443	50159	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:28.715394974 CET	443	50159	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:28.715405941 CET	50159	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:28.715423107 CET	443	50159	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:28.715436935 CET	50159	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:28.715518951 CET	50159	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:28.715526104 CET	443	50159	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:28.715583086 CET	443	50159	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:28.715614080 CET	50159	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:28.716137886 CET	50159	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:28.716152906 CET	443	50159	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:28.731925011 CET	50178	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:28.731981039 CET	443	50178	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:28.732074976 CET	50178	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:28.732353926 CET	50178	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:28.732369900 CET	443	50178	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:28.733335972 CET	50179	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:28.733385086 CET	443	50179	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:28.733458042 CET	50179	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:28.733753920 CET	50179	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:28.733772039 CET	443	50179	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:28.811850071 CET	443	50168	151.101.1.44	192.168.2.10
Jan 10, 2025 00:22:28.825195074 CET	50168	443	192.168.2.10	151.101.1.44
Jan 10, 2025 00:22:28.825217962 CET	443	50168	151.101.1.44	192.168.2.10
Jan 10, 2025 00:22:28.826483965 CET	443	50168	151.101.1.44	192.168.2.10
Jan 10, 2025 00:22:28.826565981 CET	50168	443	192.168.2.10	151.101.1.44
Jan 10, 2025 00:22:28.828479052 CET	50168	443	192.168.2.10	151.101.1.44
Jan 10, 2025 00:22:28.828568935 CET	443	50168	151.101.1.44	192.168.2.10
Jan 10, 2025 00:22:28.829091072 CET	50168	443	192.168.2.10	151.101.1.44
Jan 10, 2025 00:22:28.829106092 CET	443	50168	151.101.1.44	192.168.2.10
Jan 10, 2025 00:22:28.871437073 CET	50168	443	192.168.2.10	151.101.1.44
Jan 10, 2025 00:22:28.911221027 CET	443	50163	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:28.924473047 CET	443	50168	151.101.1.44	192.168.2.10
Jan 10, 2025 00:22:28.924592018 CET	443	50168	151.101.1.44	192.168.2.10
Jan 10, 2025 00:22:28.924798012 CET	50168	443	192.168.2.10	151.101.1.44
Jan 10, 2025 00:22:28.927054882 CET	50163	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:28.927082062 CET	443	50163	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:28.927743912 CET	443	50163	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:28.961093903 CET	443	50165	3.130.114.26	192.168.2.10
Jan 10, 2025 00:22:28.980936050 CET	50163	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:28.997169018 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.015845060 CET	50165	443	192.168.2.10	3.130.114.26
Jan 10, 2025 00:22:29.027822018 CET	443	50169	34.231.219.101	192.168.2.10
Jan 10, 2025 00:22:29.049443960 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.052099943 CET	443	50171	64.202.112.31	192.168.2.10
Jan 10, 2025 00:22:29.070445061 CET	443	50172	35.227.211.136	192.168.2.10
Jan 10, 2025 00:22:29.073285103 CET	443	50174	151.101.129.44	192.168.2.10
Jan 10, 2025 00:22:29.074403048 CET	50163	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:29.074577093 CET	50165	443	192.168.2.10	3.130.114.26
Jan 10, 2025 00:22:29.074584961 CET	443	50163	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:29.074588060 CET	443	50165	3.130.114.26	192.168.2.10
Jan 10, 2025 00:22:29.075021982 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.075041056 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.075354099 CET	50171	443	192.168.2.10	64.202.112.31
Jan 10, 2025 00:22:29.075377941 CET	443	50171	64.202.112.31	192.168.2.10
Jan 10, 2025 00:22:29.075455904 CET	50169	443	192.168.2.10	34.231.219.101
Jan 10, 2025 00:22:29.075480938 CET	443	50169	34.231.219.101	192.168.2.10
Jan 10, 2025 00:22:29.075555086 CET	50172	443	192.168.2.10	35.227.211.136
Jan 10, 2025 00:22:29.075563908 CET	443	50172	35.227.211.136	192.168.2.10
Jan 10, 2025 00:22:29.075651884 CET	50174	443	192.168.2.10	151.101.129.44
Jan 10, 2025 00:22:29.075659990 CET	443	50174	151.101.129.44	192.168.2.10
Jan 10, 2025 00:22:29.075854063 CET	443	50165	3.130.114.26	192.168.2.10
Jan 10, 2025 00:22:29.075870991 CET	443	50165	3.130.114.26	192.168.2.10
Jan 10, 2025 00:22:29.075907946 CET	50165	443	192.168.2.10	3.130.114.26
Jan 10, 2025 00:22:29.076548100 CET	443	50171	64.202.112.31	192.168.2.10
Jan 10, 2025 00:22:29.076608896 CET	50171	443	192.168.2.10	64.202.112.31
Jan 10, 2025 00:22:29.076625109 CET	443	50169	34.231.219.101	192.168.2.10
Jan 10, 2025 00:22:29.076670885 CET	50169	443	192.168.2.10	34.231.219.101
Jan 10, 2025 00:22:29.076750040 CET	443	50174	151.101.129.44	192.168.2.10
Jan 10, 2025 00:22:29.076795101 CET	50174	443	192.168.2.10	151.101.129.44
Jan 10, 2025 00:22:29.076803923 CET	443	50172	35.227.211.136	192.168.2.10
Jan 10, 2025 00:22:29.076844931 CET	50172	443	192.168.2.10	35.227.211.136
Jan 10, 2025 00:22:29.077162981 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.077172041 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.077215910 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.079435110 CET	50165	443	192.168.2.10	3.130.114.26
Jan 10, 2025 00:22:29.079550028 CET	443	50165	3.130.114.26	192.168.2.10
Jan 10, 2025 00:22:29.080147982 CET	50163	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:29.082001925 CET	50172	443	192.168.2.10	35.227.211.136
Jan 10, 2025 00:22:29.082125902 CET	443	50172	35.227.211.136	192.168.2.10
Jan 10, 2025 00:22:29.083203077 CET	50174	443	192.168.2.10	151.101.129.44
Jan 10, 2025 00:22:29.083292007 CET	443	50174	151.101.129.44	192.168.2.10
Jan 10, 2025 00:22:29.084666967 CET	50169	443	192.168.2.10	34.231.219.101
Jan 10, 2025 00:22:29.084763050 CET	443	50169	34.231.219.101	192.168.2.10
Jan 10, 2025 00:22:29.085635900 CET	50171	443	192.168.2.10	64.202.112.31
Jan 10, 2025 00:22:29.085755110 CET	443	50171	64.202.112.31	192.168.2.10
Jan 10, 2025 00:22:29.086770058 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.086894035 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.087083101 CET	50165	443	192.168.2.10	3.130.114.26
Jan 10, 2025 00:22:29.087095976 CET	443	50165	3.130.114.26	192.168.2.10
Jan 10, 2025 00:22:29.087300062 CET	50172	443	192.168.2.10	35.227.211.136
Jan 10, 2025 00:22:29.087325096 CET	443	50172	35.227.211.136	192.168.2.10
Jan 10, 2025 00:22:29.087380886 CET	50174	443	192.168.2.10	151.101.129.44
Jan 10, 2025 00:22:29.087389946 CET	443	50174	151.101.129.44	192.168.2.10
Jan 10, 2025 00:22:29.087459087 CET	50169	443	192.168.2.10	34.231.219.101
Jan 10, 2025 00:22:29.087469101 CET	443	50169	34.231.219.101	192.168.2.10
Jan 10, 2025 00:22:29.087516069 CET	50171	443	192.168.2.10	64.202.112.31
Jan 10, 2025 00:22:29.087522030 CET	443	50171	64.202.112.31	192.168.2.10
Jan 10, 2025 00:22:29.087667942 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.087680101 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.123328924 CET	443	50163	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:29.128761053 CET	50171	443	192.168.2.10	64.202.112.31
Jan 10, 2025 00:22:29.128782034 CET	50165	443	192.168.2.10	3.130.114.26
Jan 10, 2025 00:22:29.128782988 CET	50172	443	192.168.2.10	35.227.211.136
Jan 10, 2025 00:22:29.128906012 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.128906965 CET	50174	443	192.168.2.10	151.101.129.44
Jan 10, 2025 00:22:29.128907919 CET	50169	443	192.168.2.10	34.231.219.101
Jan 10, 2025 00:22:29.184174061 CET	443	50174	151.101.129.44	192.168.2.10
Jan 10, 2025 00:22:29.194411993 CET	443	50172	35.227.211.136	192.168.2.10
Jan 10, 2025 00:22:29.194483042 CET	443	50172	35.227.211.136	192.168.2.10
Jan 10, 2025 00:22:29.195000887 CET	50172	443	192.168.2.10	35.227.211.136
Jan 10, 2025 00:22:29.195102930 CET	443	50174	151.101.129.44	192.168.2.10
Jan 10, 2025 00:22:29.195116043 CET	443	50174	151.101.129.44	192.168.2.10
Jan 10, 2025 00:22:29.195131063 CET	443	50174	151.101.129.44	192.168.2.10
Jan 10, 2025 00:22:29.195163965 CET	50174	443	192.168.2.10	151.101.129.44
Jan 10, 2025 00:22:29.195183039 CET	443	50174	151.101.129.44	192.168.2.10
Jan 10, 2025 00:22:29.195203066 CET	50174	443	192.168.2.10	151.101.129.44
Jan 10, 2025 00:22:29.195224047 CET	50174	443	192.168.2.10	151.101.129.44
Jan 10, 2025 00:22:29.225882053 CET	443	50165	3.130.114.26	192.168.2.10
Jan 10, 2025 00:22:29.225912094 CET	443	50165	3.130.114.26	192.168.2.10
Jan 10, 2025 00:22:29.225919962 CET	443	50165	3.130.114.26	192.168.2.10
Jan 10, 2025 00:22:29.225933075 CET	443	50165	3.130.114.26	192.168.2.10
Jan 10, 2025 00:22:29.225941896 CET	443	50165	3.130.114.26	192.168.2.10
Jan 10, 2025 00:22:29.225950956 CET	443	50165	3.130.114.26	192.168.2.10
Jan 10, 2025 00:22:29.225970984 CET	50165	443	192.168.2.10	3.130.114.26
Jan 10, 2025 00:22:29.226002932 CET	443	50165	3.130.114.26	192.168.2.10
Jan 10, 2025 00:22:29.226020098 CET	50165	443	192.168.2.10	3.130.114.26
Jan 10, 2025 00:22:29.226027966 CET	443	50165	3.130.114.26	192.168.2.10
Jan 10, 2025 00:22:29.226047039 CET	50165	443	192.168.2.10	3.130.114.26
Jan 10, 2025 00:22:29.240478039 CET	443	50171	64.202.112.31	192.168.2.10
Jan 10, 2025 00:22:29.240571976 CET	443	50171	64.202.112.31	192.168.2.10
Jan 10, 2025 00:22:29.242110968 CET	50171	443	192.168.2.10	64.202.112.31
Jan 10, 2025 00:22:29.243957996 CET	443	50169	34.231.219.101	192.168.2.10
Jan 10, 2025 00:22:29.244035959 CET	50169	443	192.168.2.10	34.231.219.101
Jan 10, 2025 00:22:29.244041920 CET	443	50169	34.231.219.101	192.168.2.10
Jan 10, 2025 00:22:29.244714022 CET	50169	443	192.168.2.10	34.231.219.101
Jan 10, 2025 00:22:29.266884089 CET	50165	443	192.168.2.10	3.130.114.26
Jan 10, 2025 00:22:29.273705959 CET	443	50174	151.101.129.44	192.168.2.10
Jan 10, 2025 00:22:29.273740053 CET	443	50174	151.101.129.44	192.168.2.10
Jan 10, 2025 00:22:29.273792028 CET	50174	443	192.168.2.10	151.101.129.44
Jan 10, 2025 00:22:29.273816109 CET	443	50174	151.101.129.44	192.168.2.10
Jan 10, 2025 00:22:29.273859024 CET	50174	443	192.168.2.10	151.101.129.44
Jan 10, 2025 00:22:29.273875952 CET	50174	443	192.168.2.10	151.101.129.44
Jan 10, 2025 00:22:29.276288033 CET	443	50174	151.101.129.44	192.168.2.10
Jan 10, 2025 00:22:29.276315928 CET	443	50174	151.101.129.44	192.168.2.10
Jan 10, 2025 00:22:29.276379108 CET	50174	443	192.168.2.10	151.101.129.44
Jan 10, 2025 00:22:29.276396036 CET	443	50174	151.101.129.44	192.168.2.10
Jan 10, 2025 00:22:29.276443005 CET	50174	443	192.168.2.10	151.101.129.44
Jan 10, 2025 00:22:29.285386086 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.285412073 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.285422087 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.285435915 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.285443068 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.285449028 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.285453081 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.285468102 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.285491943 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.285512924 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.292793036 CET	443	50165	3.130.114.26	192.168.2.10
Jan 10, 2025 00:22:29.292809010 CET	443	50165	3.130.114.26	192.168.2.10
Jan 10, 2025 00:22:29.292850018 CET	50165	443	192.168.2.10	3.130.114.26
Jan 10, 2025 00:22:29.292860985 CET	443	50165	3.130.114.26	192.168.2.10
Jan 10, 2025 00:22:29.292875051 CET	443	50165	3.130.114.26	192.168.2.10
Jan 10, 2025 00:22:29.292912006 CET	50165	443	192.168.2.10	3.130.114.26
Jan 10, 2025 00:22:29.299917936 CET	50168	443	192.168.2.10	151.101.1.44
Jan 10, 2025 00:22:29.299937963 CET	443	50168	151.101.1.44	192.168.2.10
Jan 10, 2025 00:22:29.302733898 CET	50180	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:29.302767038 CET	443	50180	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:29.303659916 CET	50180	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:29.303659916 CET	50180	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:29.303687096 CET	443	50180	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:29.307153940 CET	50169	443	192.168.2.10	34.231.219.101
Jan 10, 2025 00:22:29.307183981 CET	443	50169	34.231.219.101	192.168.2.10
Jan 10, 2025 00:22:29.311182022 CET	50171	443	192.168.2.10	64.202.112.31
Jan 10, 2025 00:22:29.311198950 CET	443	50171	64.202.112.31	192.168.2.10
Jan 10, 2025 00:22:29.316508055 CET	50181	443	192.168.2.10	34.231.219.101
Jan 10, 2025 00:22:29.316518068 CET	443	50181	34.231.219.101	192.168.2.10
Jan 10, 2025 00:22:29.316648006 CET	50181	443	192.168.2.10	34.231.219.101
Jan 10, 2025 00:22:29.317179918 CET	50181	443	192.168.2.10	34.231.219.101
Jan 10, 2025 00:22:29.317188025 CET	443	50181	34.231.219.101	192.168.2.10
Jan 10, 2025 00:22:29.319962025 CET	50165	443	192.168.2.10	3.130.114.26
Jan 10, 2025 00:22:29.319979906 CET	443	50165	3.130.114.26	192.168.2.10
Jan 10, 2025 00:22:29.343897104 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.344252110 CET	50173	443	192.168.2.10	3.167.227.50
Jan 10, 2025 00:22:29.344275951 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.345278025 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.345452070 CET	50173	443	192.168.2.10	3.167.227.50
Jan 10, 2025 00:22:29.345817089 CET	50173	443	192.168.2.10	3.167.227.50
Jan 10, 2025 00:22:29.345873117 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.346504927 CET	50173	443	192.168.2.10	3.167.227.50
Jan 10, 2025 00:22:29.346518040 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.361766100 CET	443	50174	151.101.129.44	192.168.2.10
Jan 10, 2025 00:22:29.361792088 CET	443	50174	151.101.129.44	192.168.2.10
Jan 10, 2025 00:22:29.361838102 CET	50174	443	192.168.2.10	151.101.129.44
Jan 10, 2025 00:22:29.361871004 CET	443	50174	151.101.129.44	192.168.2.10
Jan 10, 2025 00:22:29.361890078 CET	50174	443	192.168.2.10	151.101.129.44
Jan 10, 2025 00:22:29.361958027 CET	50174	443	192.168.2.10	151.101.129.44
Jan 10, 2025 00:22:29.362407923 CET	443	50174	151.101.129.44	192.168.2.10
Jan 10, 2025 00:22:29.362468958 CET	443	50174	151.101.129.44	192.168.2.10
Jan 10, 2025 00:22:29.362515926 CET	50174	443	192.168.2.10	151.101.129.44
Jan 10, 2025 00:22:29.362515926 CET	50174	443	192.168.2.10	151.101.129.44
Jan 10, 2025 00:22:29.362886906 CET	50174	443	192.168.2.10	151.101.129.44
Jan 10, 2025 00:22:29.362901926 CET	443	50174	151.101.129.44	192.168.2.10
Jan 10, 2025 00:22:29.370512962 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.370538950 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.370579958 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.370601892 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.370620012 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.370637894 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.377387047 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.377418995 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.377492905 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.377501011 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.377537966 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.399540901 CET	50173	443	192.168.2.10	3.167.227.50
Jan 10, 2025 00:22:29.408437967 CET	443	50163	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:29.408528090 CET	443	50163	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:29.408538103 CET	50163	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:29.408554077 CET	443	50163	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:29.408590078 CET	50163	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:29.408597946 CET	443	50163	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:29.434355974 CET	443	50163	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:29.434370041 CET	443	50163	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:29.434385061 CET	443	50163	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:29.434412003 CET	50163	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:29.434432030 CET	443	50163	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:29.434483051 CET	50163	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:29.461353064 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.461380959 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.461436033 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.461451054 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.461504936 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.462151051 CET	443	50179	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:29.462512970 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.462532997 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.462558985 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.462564945 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.462805033 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.462833881 CET	50179	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:29.462850094 CET	443	50179	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:29.463850021 CET	443	50179	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:29.464024067 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.464046001 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.464075089 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.464081049 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.464101076 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.464124918 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.464899063 CET	50179	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:29.464899063 CET	50179	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:29.464971066 CET	443	50179	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:29.466061115 CET	50179	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:29.466077089 CET	443	50179	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:29.469667912 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.469698906 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.469746113 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.469752073 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.469777107 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.469793081 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.479418039 CET	443	50178	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:29.479823112 CET	50178	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:29.479831934 CET	443	50178	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:29.480159998 CET	443	50178	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:29.480493069 CET	50178	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:29.480564117 CET	443	50178	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:29.480622053 CET	50178	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:29.508493900 CET	50179	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:29.523334980 CET	443	50178	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:29.524475098 CET	50178	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:29.531521082 CET	443	50163	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:29.531534910 CET	443	50163	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:29.531555891 CET	443	50163	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:29.531585932 CET	50163	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:29.531930923 CET	50163	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:29.531938076 CET	443	50163	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:29.531979084 CET	50163	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:29.553806067 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.553832054 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.553873062 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.553884029 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.553899050 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.553915024 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.554274082 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.554302931 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.554318905 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.554325104 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.554529905 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.554546118 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.555039883 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.555059910 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.555073023 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.555110931 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.555115938 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.555136919 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.555159092 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.555162907 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.555179119 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.555181980 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.555218935 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.559227943 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.559302092 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.559478045 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.563441992 CET	50164	443	192.168.2.10	13.33.187.74
Jan 10, 2025 00:22:29.563472033 CET	443	50164	13.33.187.74	192.168.2.10
Jan 10, 2025 00:22:29.568427086 CET	443	50163	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:29.568464041 CET	443	50163	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:29.568523884 CET	50163	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:29.568533897 CET	443	50163	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:29.568578005 CET	50163	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:29.608549118 CET	443	50163	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:29.608580112 CET	443	50163	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:29.608625889 CET	50163	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:29.608633995 CET	443	50163	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:29.608678102 CET	50163	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:29.613251925 CET	443	50163	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:29.613306999 CET	50163	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:29.627955914 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.637339115 CET	443	50163	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:29.637398958 CET	443	50163	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:29.637456894 CET	50163	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:29.637466908 CET	443	50163	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:29.637495995 CET	50163	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:29.637511969 CET	50163	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:29.638376951 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.638385057 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.638427019 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.638442993 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.638454914 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.638459921 CET	50173	443	192.168.2.10	3.167.227.50
Jan 10, 2025 00:22:29.638487101 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.638505936 CET	50173	443	192.168.2.10	3.167.227.50
Jan 10, 2025 00:22:29.638505936 CET	50173	443	192.168.2.10	3.167.227.50
Jan 10, 2025 00:22:29.638535976 CET	50173	443	192.168.2.10	3.167.227.50
Jan 10, 2025 00:22:29.647166014 CET	443	50163	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:29.647258043 CET	50163	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:29.647281885 CET	443	50163	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:29.647346020 CET	443	50163	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:29.647394896 CET	50163	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:29.669962883 CET	50163	443	192.168.2.10	157.240.0.6
Jan 10, 2025 00:22:29.669992924 CET	443	50163	157.240.0.6	192.168.2.10
Jan 10, 2025 00:22:29.715243101 CET	50172	443	192.168.2.10	35.227.211.136
Jan 10, 2025 00:22:29.715281010 CET	443	50172	35.227.211.136	192.168.2.10
Jan 10, 2025 00:22:29.716862917 CET	50183	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:29.716895103 CET	443	50183	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:29.716979980 CET	50183	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:29.718436956 CET	50183	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:29.718446970 CET	443	50183	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:29.724603891 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.724634886 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.724761963 CET	50173	443	192.168.2.10	3.167.227.50
Jan 10, 2025 00:22:29.724788904 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.724838018 CET	50173	443	192.168.2.10	3.167.227.50
Jan 10, 2025 00:22:29.728188038 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.728212118 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.728264093 CET	50173	443	192.168.2.10	3.167.227.50
Jan 10, 2025 00:22:29.728302956 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.728313923 CET	50173	443	192.168.2.10	3.167.227.50
Jan 10, 2025 00:22:29.728727102 CET	50173	443	192.168.2.10	3.167.227.50
Jan 10, 2025 00:22:29.782290936 CET	50184	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:29.782322884 CET	443	50184	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:29.782401085 CET	50184	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:29.782586098 CET	50184	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:29.782603025 CET	443	50184	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:29.794692039 CET	50186	443	192.168.2.10	151.101.1.44
Jan 10, 2025 00:22:29.794713974 CET	443	50186	151.101.1.44	192.168.2.10
Jan 10, 2025 00:22:29.794833899 CET	50186	443	192.168.2.10	151.101.1.44
Jan 10, 2025 00:22:29.795247078 CET	50186	443	192.168.2.10	151.101.1.44
Jan 10, 2025 00:22:29.795259953 CET	443	50186	151.101.1.44	192.168.2.10
Jan 10, 2025 00:22:29.807185888 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.807248116 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.807336092 CET	50173	443	192.168.2.10	3.167.227.50
Jan 10, 2025 00:22:29.807336092 CET	50173	443	192.168.2.10	3.167.227.50
Jan 10, 2025 00:22:29.807353020 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.807390928 CET	443	50181	34.231.219.101	192.168.2.10
Jan 10, 2025 00:22:29.807418108 CET	50188	443	192.168.2.10	64.202.112.127
Jan 10, 2025 00:22:29.807456017 CET	443	50188	64.202.112.127	192.168.2.10
Jan 10, 2025 00:22:29.807508945 CET	50188	443	192.168.2.10	64.202.112.127
Jan 10, 2025 00:22:29.808687925 CET	50188	443	192.168.2.10	64.202.112.127
Jan 10, 2025 00:22:29.808711052 CET	443	50188	64.202.112.127	192.168.2.10
Jan 10, 2025 00:22:29.808902979 CET	50181	443	192.168.2.10	34.231.219.101
Jan 10, 2025 00:22:29.808929920 CET	443	50181	34.231.219.101	192.168.2.10
Jan 10, 2025 00:22:29.809315920 CET	443	50181	34.231.219.101	192.168.2.10
Jan 10, 2025 00:22:29.810390949 CET	50181	443	192.168.2.10	34.231.219.101
Jan 10, 2025 00:22:29.810471058 CET	443	50181	34.231.219.101	192.168.2.10
Jan 10, 2025 00:22:29.810595036 CET	50181	443	192.168.2.10	34.231.219.101
Jan 10, 2025 00:22:29.810625076 CET	443	50181	34.231.219.101	192.168.2.10
Jan 10, 2025 00:22:29.813186884 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.813218117 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.813262939 CET	50173	443	192.168.2.10	3.167.227.50
Jan 10, 2025 00:22:29.813290119 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.813328028 CET	50173	443	192.168.2.10	3.167.227.50
Jan 10, 2025 00:22:29.815541029 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.815562963 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.815630913 CET	50173	443	192.168.2.10	3.167.227.50
Jan 10, 2025 00:22:29.815653086 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.815670013 CET	50173	443	192.168.2.10	3.167.227.50
Jan 10, 2025 00:22:29.822839975 CET	443	50179	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:29.822909117 CET	443	50179	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:29.822989941 CET	50179	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:29.823069096 CET	50191	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:29.823117971 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:29.823204994 CET	50191	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:29.823698044 CET	50191	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:29.823723078 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:29.828526974 CET	50179	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:29.828547955 CET	443	50179	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:29.829056978 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.829077005 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.829128027 CET	50173	443	192.168.2.10	3.167.227.50
Jan 10, 2025 00:22:29.829164982 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.829202890 CET	50173	443	192.168.2.10	3.167.227.50
Jan 10, 2025 00:22:29.833122969 CET	50192	443	192.168.2.10	3.131.211.191
Jan 10, 2025 00:22:29.833173037 CET	443	50192	3.131.211.191	192.168.2.10
Jan 10, 2025 00:22:29.833256960 CET	50192	443	192.168.2.10	3.131.211.191
Jan 10, 2025 00:22:29.833453894 CET	50192	443	192.168.2.10	3.131.211.191
Jan 10, 2025 00:22:29.833472967 CET	443	50192	3.131.211.191	192.168.2.10
Jan 10, 2025 00:22:29.844079971 CET	443	50178	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:29.844331026 CET	443	50178	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:29.844393969 CET	50178	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:29.847774029 CET	50178	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:29.847805023 CET	443	50178	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:29.868874073 CET	50194	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:29.868917942 CET	443	50194	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:29.868985891 CET	50194	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:29.869389057 CET	50194	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:29.869404078 CET	443	50194	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:29.871560097 CET	50195	443	192.168.2.10	34.95.127.121
Jan 10, 2025 00:22:29.871601105 CET	443	50195	34.95.127.121	192.168.2.10
Jan 10, 2025 00:22:29.871655941 CET	50195	443	192.168.2.10	34.95.127.121
Jan 10, 2025 00:22:29.872966051 CET	50195	443	192.168.2.10	34.95.127.121
Jan 10, 2025 00:22:29.872987032 CET	443	50195	34.95.127.121	192.168.2.10
Jan 10, 2025 00:22:29.875848055 CET	50173	443	192.168.2.10	3.167.227.50
Jan 10, 2025 00:22:29.895508051 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.895534992 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.895591974 CET	50173	443	192.168.2.10	3.167.227.50
Jan 10, 2025 00:22:29.895628929 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.895642042 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.895648956 CET	50173	443	192.168.2.10	3.167.227.50
Jan 10, 2025 00:22:29.895669937 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.895735025 CET	50173	443	192.168.2.10	3.167.227.50
Jan 10, 2025 00:22:29.895735025 CET	50173	443	192.168.2.10	3.167.227.50
Jan 10, 2025 00:22:29.895735025 CET	50173	443	192.168.2.10	3.167.227.50
Jan 10, 2025 00:22:29.895740032 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.895817041 CET	50173	443	192.168.2.10	3.167.227.50
Jan 10, 2025 00:22:29.896822929 CET	50173	443	192.168.2.10	3.167.227.50
Jan 10, 2025 00:22:29.896857023 CET	443	50173	3.167.227.50	192.168.2.10
Jan 10, 2025 00:22:29.920191050 CET	443	50181	34.231.219.101	192.168.2.10
Jan 10, 2025 00:22:29.920284986 CET	443	50181	34.231.219.101	192.168.2.10
Jan 10, 2025 00:22:29.920362949 CET	50181	443	192.168.2.10	34.231.219.101
Jan 10, 2025 00:22:29.922281027 CET	50181	443	192.168.2.10	34.231.219.101
Jan 10, 2025 00:22:29.922300100 CET	443	50181	34.231.219.101	192.168.2.10
Jan 10, 2025 00:22:29.927553892 CET	50196	443	192.168.2.10	64.202.112.31
Jan 10, 2025 00:22:29.927591085 CET	443	50196	64.202.112.31	192.168.2.10
Jan 10, 2025 00:22:29.927640915 CET	50196	443	192.168.2.10	64.202.112.31
Jan 10, 2025 00:22:29.927946091 CET	50196	443	192.168.2.10	64.202.112.31
Jan 10, 2025 00:22:29.927958012 CET	443	50196	64.202.112.31	192.168.2.10
Jan 10, 2025 00:22:29.933666945 CET	50197	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:29.933706045 CET	443	50197	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:29.933783054 CET	50197	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:29.934367895 CET	50197	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:29.934384108 CET	443	50197	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:29.938030958 CET	50199	443	192.168.2.10	23.21.229.6
Jan 10, 2025 00:22:29.938062906 CET	443	50199	23.21.229.6	192.168.2.10
Jan 10, 2025 00:22:29.938133955 CET	50199	443	192.168.2.10	23.21.229.6
Jan 10, 2025 00:22:29.938383102 CET	50199	443	192.168.2.10	23.21.229.6
Jan 10, 2025 00:22:29.938395977 CET	443	50199	23.21.229.6	192.168.2.10
Jan 10, 2025 00:22:30.029263973 CET	443	50180	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:30.029582024 CET	50180	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:30.029616117 CET	443	50180	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:30.029984951 CET	443	50180	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:30.030420065 CET	50180	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:30.030494928 CET	443	50180	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:30.030664921 CET	50180	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:30.030689001 CET	443	50180	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:30.082151890 CET	50180	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:30.207225084 CET	443	50183	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:30.207513094 CET	50183	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:30.207529068 CET	443	50183	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:30.208085060 CET	443	50183	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:30.208482027 CET	50183	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:30.208553076 CET	443	50183	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:30.208715916 CET	50183	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:30.208735943 CET	443	50183	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:30.257364988 CET	50183	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:30.262290001 CET	443	50186	151.101.1.44	192.168.2.10
Jan 10, 2025 00:22:30.262752056 CET	50186	443	192.168.2.10	151.101.1.44
Jan 10, 2025 00:22:30.262765884 CET	443	50186	151.101.1.44	192.168.2.10
Jan 10, 2025 00:22:30.263880014 CET	443	50186	151.101.1.44	192.168.2.10
Jan 10, 2025 00:22:30.263942957 CET	50186	443	192.168.2.10	151.101.1.44
Jan 10, 2025 00:22:30.264307976 CET	50186	443	192.168.2.10	151.101.1.44
Jan 10, 2025 00:22:30.264384985 CET	443	50186	151.101.1.44	192.168.2.10
Jan 10, 2025 00:22:30.264448881 CET	50186	443	192.168.2.10	151.101.1.44
Jan 10, 2025 00:22:30.264453888 CET	443	50186	151.101.1.44	192.168.2.10
Jan 10, 2025 00:22:30.299623966 CET	443	50188	64.202.112.127	192.168.2.10
Jan 10, 2025 00:22:30.299983025 CET	50188	443	192.168.2.10	64.202.112.127
Jan 10, 2025 00:22:30.299993992 CET	443	50188	64.202.112.127	192.168.2.10
Jan 10, 2025 00:22:30.301045895 CET	443	50188	64.202.112.127	192.168.2.10
Jan 10, 2025 00:22:30.301111937 CET	50188	443	192.168.2.10	64.202.112.127
Jan 10, 2025 00:22:30.301778078 CET	50188	443	192.168.2.10	64.202.112.127
Jan 10, 2025 00:22:30.301848888 CET	443	50188	64.202.112.127	192.168.2.10
Jan 10, 2025 00:22:30.301877022 CET	50188	443	192.168.2.10	64.202.112.127
Jan 10, 2025 00:22:30.308321953 CET	443	50180	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:30.308407068 CET	443	50180	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:30.308465958 CET	50180	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:30.309498072 CET	50180	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:30.309514999 CET	443	50180	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:30.313637018 CET	50200	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:30.313668013 CET	443	50200	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:30.313955069 CET	50200	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:30.313955069 CET	50200	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:30.313982964 CET	443	50200	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:30.315798044 CET	50201	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:30.315839052 CET	443	50201	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:30.315941095 CET	50201	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:30.316306114 CET	50201	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:30.316323042 CET	443	50201	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:30.343322992 CET	443	50188	64.202.112.127	192.168.2.10
Jan 10, 2025 00:22:30.351418018 CET	443	50195	34.95.127.121	192.168.2.10
Jan 10, 2025 00:22:30.352266073 CET	50195	443	192.168.2.10	34.95.127.121
Jan 10, 2025 00:22:30.352288008 CET	443	50195	34.95.127.121	192.168.2.10
Jan 10, 2025 00:22:30.353276014 CET	443	50195	34.95.127.121	192.168.2.10
Jan 10, 2025 00:22:30.353355885 CET	50195	443	192.168.2.10	34.95.127.121
Jan 10, 2025 00:22:30.361573935 CET	50195	443	192.168.2.10	34.95.127.121
Jan 10, 2025 00:22:30.361640930 CET	443	50195	34.95.127.121	192.168.2.10
Jan 10, 2025 00:22:30.361958981 CET	50195	443	192.168.2.10	34.95.127.121
Jan 10, 2025 00:22:30.361967087 CET	443	50195	34.95.127.121	192.168.2.10
Jan 10, 2025 00:22:30.362771034 CET	443	50186	151.101.1.44	192.168.2.10
Jan 10, 2025 00:22:30.362832069 CET	50186	443	192.168.2.10	151.101.1.44
Jan 10, 2025 00:22:30.363671064 CET	50186	443	192.168.2.10	151.101.1.44
Jan 10, 2025 00:22:30.363684893 CET	443	50186	151.101.1.44	192.168.2.10
Jan 10, 2025 00:22:30.388565063 CET	443	50197	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:30.388922930 CET	50197	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:30.388948917 CET	443	50197	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:30.389929056 CET	443	50197	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:30.390038013 CET	50197	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:30.391200066 CET	50197	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:30.391331911 CET	443	50197	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:30.391431093 CET	50197	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:30.391439915 CET	443	50197	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:30.409796953 CET	443	50188	64.202.112.127	192.168.2.10
Jan 10, 2025 00:22:30.409950018 CET	50188	443	192.168.2.10	64.202.112.127
Jan 10, 2025 00:22:30.410840034 CET	50188	443	192.168.2.10	64.202.112.127
Jan 10, 2025 00:22:30.410851955 CET	443	50188	64.202.112.127	192.168.2.10
Jan 10, 2025 00:22:30.411796093 CET	443	50196	64.202.112.31	192.168.2.10
Jan 10, 2025 00:22:30.412029982 CET	50196	443	192.168.2.10	64.202.112.31
Jan 10, 2025 00:22:30.412039995 CET	443	50196	64.202.112.31	192.168.2.10
Jan 10, 2025 00:22:30.412410021 CET	443	50196	64.202.112.31	192.168.2.10
Jan 10, 2025 00:22:30.412749052 CET	50196	443	192.168.2.10	64.202.112.31
Jan 10, 2025 00:22:30.412810087 CET	443	50196	64.202.112.31	192.168.2.10
Jan 10, 2025 00:22:30.412883997 CET	50196	443	192.168.2.10	64.202.112.31
Jan 10, 2025 00:22:30.446346998 CET	50197	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:30.446913958 CET	50195	443	192.168.2.10	34.95.127.121
Jan 10, 2025 00:22:30.459321022 CET	443	50196	64.202.112.31	192.168.2.10
Jan 10, 2025 00:22:30.464415073 CET	443	50195	34.95.127.121	192.168.2.10
Jan 10, 2025 00:22:30.464478970 CET	443	50195	34.95.127.121	192.168.2.10
Jan 10, 2025 00:22:30.464529991 CET	50195	443	192.168.2.10	34.95.127.121
Jan 10, 2025 00:22:30.465852976 CET	50195	443	192.168.2.10	34.95.127.121
Jan 10, 2025 00:22:30.465858936 CET	443	50195	34.95.127.121	192.168.2.10
Jan 10, 2025 00:22:30.468000889 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:30.468699932 CET	50191	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:30.468707085 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:30.469027042 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:30.469683886 CET	50191	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:30.469736099 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:30.470808983 CET	50191	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:30.482013941 CET	50203	443	192.168.2.10	34.95.127.121
Jan 10, 2025 00:22:30.482054949 CET	443	50203	34.95.127.121	192.168.2.10
Jan 10, 2025 00:22:30.482151031 CET	50203	443	192.168.2.10	34.95.127.121
Jan 10, 2025 00:22:30.482616901 CET	50203	443	192.168.2.10	34.95.127.121
Jan 10, 2025 00:22:30.482630014 CET	443	50203	34.95.127.121	192.168.2.10
Jan 10, 2025 00:22:30.511324883 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:30.514054060 CET	443	50197	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:30.514148951 CET	443	50197	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:30.514173985 CET	443	50197	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:30.514223099 CET	50197	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:30.514244080 CET	443	50197	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:30.514372110 CET	50197	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:30.514929056 CET	443	50197	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:30.515021086 CET	443	50197	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:30.515166044 CET	50197	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:30.515584946 CET	50197	443	192.168.2.10	151.101.65.44
Jan 10, 2025 00:22:30.515602112 CET	443	50197	151.101.65.44	192.168.2.10
Jan 10, 2025 00:22:30.528172016 CET	50204	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:30.528197050 CET	443	50204	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:30.528279066 CET	50204	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:30.528534889 CET	50204	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:30.528542995 CET	443	50204	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:30.529761076 CET	50205	443	192.168.2.10	151.101.1.44
Jan 10, 2025 00:22:30.529778957 CET	443	50205	151.101.1.44	192.168.2.10
Jan 10, 2025 00:22:30.529818058 CET	50205	443	192.168.2.10	151.101.1.44
Jan 10, 2025 00:22:30.530034065 CET	50205	443	192.168.2.10	151.101.1.44
Jan 10, 2025 00:22:30.530044079 CET	443	50205	151.101.1.44	192.168.2.10
Jan 10, 2025 00:22:30.537933111 CET	443	50183	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:30.537961960 CET	443	50183	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:30.537985086 CET	443	50183	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:30.537995100 CET	443	50183	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:30.538007021 CET	443	50183	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:30.538054943 CET	50183	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:30.538063049 CET	443	50183	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:30.538100004 CET	50183	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:30.538100958 CET	50183	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:30.540596962 CET	443	50183	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:30.540613890 CET	443	50183	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:30.540683985 CET	50183	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:30.540689945 CET	443	50183	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:30.540728092 CET	50183	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:30.546874046 CET	443	50184	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:30.547133923 CET	50184	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:30.547158003 CET	443	50184	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:30.548293114 CET	443	50184	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:30.548358917 CET	50184	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:30.548727989 CET	50184	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:30.548804998 CET	443	50184	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:30.548871994 CET	50184	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:30.549168110 CET	443	50194	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:30.549351931 CET	50194	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:30.549366951 CET	443	50194	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:30.550421953 CET	443	50194	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:30.550492048 CET	50194	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:30.550784111 CET	50194	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:30.550841093 CET	443	50194	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:30.550904989 CET	50194	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:30.550911903 CET	443	50194	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:30.574074984 CET	443	50196	64.202.112.31	192.168.2.10
Jan 10, 2025 00:22:30.574162006 CET	443	50196	64.202.112.31	192.168.2.10
Jan 10, 2025 00:22:30.574214935 CET	50196	443	192.168.2.10	64.202.112.31
Jan 10, 2025 00:22:30.577258110 CET	50196	443	192.168.2.10	64.202.112.31
Jan 10, 2025 00:22:30.577265978 CET	443	50196	64.202.112.31	192.168.2.10
Jan 10, 2025 00:22:30.580943108 CET	50206	443	192.168.2.10	3.130.114.26
Jan 10, 2025 00:22:30.580976963 CET	443	50206	3.130.114.26	192.168.2.10
Jan 10, 2025 00:22:30.581059933 CET	50206	443	192.168.2.10	3.130.114.26
Jan 10, 2025 00:22:30.581437111 CET	50206	443	192.168.2.10	3.130.114.26
Jan 10, 2025 00:22:30.581453085 CET	443	50206	3.130.114.26	192.168.2.10
Jan 10, 2025 00:22:30.583908081 CET	50207	443	192.168.2.10	64.202.112.127
Jan 10, 2025 00:22:30.583935022 CET	443	50207	64.202.112.127	192.168.2.10
Jan 10, 2025 00:22:30.584095955 CET	50207	443	192.168.2.10	64.202.112.127
Jan 10, 2025 00:22:30.584594011 CET	50207	443	192.168.2.10	64.202.112.127
Jan 10, 2025 00:22:30.584608078 CET	443	50207	64.202.112.127	192.168.2.10
Jan 10, 2025 00:22:30.587388992 CET	50208	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:30.587433100 CET	443	50208	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:30.587605953 CET	50208	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:30.587671041 CET	50208	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:30.587682009 CET	443	50208	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:30.595324039 CET	443	50184	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:30.601221085 CET	443	50192	3.131.211.191	192.168.2.10
Jan 10, 2025 00:22:30.601509094 CET	50192	443	192.168.2.10	3.131.211.191
Jan 10, 2025 00:22:30.601517916 CET	443	50192	3.131.211.191	192.168.2.10
Jan 10, 2025 00:22:30.602499962 CET	443	50192	3.131.211.191	192.168.2.10
Jan 10, 2025 00:22:30.602569103 CET	50192	443	192.168.2.10	3.131.211.191
Jan 10, 2025 00:22:30.602915049 CET	50192	443	192.168.2.10	3.131.211.191
Jan 10, 2025 00:22:30.602968931 CET	443	50192	3.131.211.191	192.168.2.10
Jan 10, 2025 00:22:30.603429079 CET	50192	443	192.168.2.10	3.131.211.191
Jan 10, 2025 00:22:30.603435040 CET	443	50192	3.131.211.191	192.168.2.10
Jan 10, 2025 00:22:30.606360912 CET	50194	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:30.629437923 CET	443	50183	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:30.629467964 CET	443	50183	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:30.629502058 CET	50183	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:30.629511118 CET	443	50183	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:30.629553080 CET	50183	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:30.630366087 CET	443	50183	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:30.630389929 CET	443	50183	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:30.630418062 CET	50183	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:30.630424023 CET	443	50183	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:30.630456924 CET	50183	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:30.630470991 CET	443	50183	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:30.630505085 CET	50183	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:30.630616903 CET	50183	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:30.630629063 CET	443	50183	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:30.638540983 CET	50184	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:30.638552904 CET	443	50184	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:30.643111944 CET	443	50199	23.21.229.6	192.168.2.10
Jan 10, 2025 00:22:30.643346071 CET	50199	443	192.168.2.10	23.21.229.6
Jan 10, 2025 00:22:30.643363953 CET	443	50199	23.21.229.6	192.168.2.10
Jan 10, 2025 00:22:30.644575119 CET	443	50199	23.21.229.6	192.168.2.10
Jan 10, 2025 00:22:30.644650936 CET	50199	443	192.168.2.10	23.21.229.6
Jan 10, 2025 00:22:30.645122051 CET	50199	443	192.168.2.10	23.21.229.6
Jan 10, 2025 00:22:30.645246983 CET	443	50199	23.21.229.6	192.168.2.10
Jan 10, 2025 00:22:30.645282984 CET	50199	443	192.168.2.10	23.21.229.6
Jan 10, 2025 00:22:30.645299911 CET	443	50199	23.21.229.6	192.168.2.10
Jan 10, 2025 00:22:30.654361010 CET	50192	443	192.168.2.10	3.131.211.191
Jan 10, 2025 00:22:30.747845888 CET	50184	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:30.747900009 CET	50199	443	192.168.2.10	23.21.229.6
Jan 10, 2025 00:22:30.747927904 CET	443	50199	23.21.229.6	192.168.2.10
Jan 10, 2025 00:22:30.754126072 CET	443	50192	3.131.211.191	192.168.2.10
Jan 10, 2025 00:22:30.754154921 CET	443	50192	3.131.211.191	192.168.2.10
Jan 10, 2025 00:22:30.754162073 CET	443	50192	3.131.211.191	192.168.2.10
Jan 10, 2025 00:22:30.754173994 CET	443	50192	3.131.211.191	192.168.2.10
Jan 10, 2025 00:22:30.754205942 CET	443	50192	3.131.211.191	192.168.2.10
Jan 10, 2025 00:22:30.754228115 CET	50192	443	192.168.2.10	3.131.211.191
Jan 10, 2025 00:22:30.754256010 CET	443	50192	3.131.211.191	192.168.2.10
Jan 10, 2025 00:22:30.754271030 CET	50192	443	192.168.2.10	3.131.211.191
Jan 10, 2025 00:22:30.754302979 CET	50192	443	192.168.2.10	3.131.211.191
Jan 10, 2025 00:22:30.803030968 CET	443	50199	23.21.229.6	192.168.2.10
Jan 10, 2025 00:22:30.803098917 CET	50199	443	192.168.2.10	23.21.229.6
Jan 10, 2025 00:22:30.804322958 CET	50199	443	192.168.2.10	23.21.229.6
Jan 10, 2025 00:22:30.804347038 CET	443	50199	23.21.229.6	192.168.2.10
Jan 10, 2025 00:22:30.820596933 CET	443	50192	3.131.211.191	192.168.2.10
Jan 10, 2025 00:22:30.820699930 CET	50192	443	192.168.2.10	3.131.211.191
Jan 10, 2025 00:22:30.820709944 CET	443	50192	3.131.211.191	192.168.2.10
Jan 10, 2025 00:22:30.820766926 CET	50192	443	192.168.2.10	3.131.211.191
Jan 10, 2025 00:22:30.821202993 CET	50192	443	192.168.2.10	3.131.211.191
Jan 10, 2025 00:22:30.821224928 CET	443	50192	3.131.211.191	192.168.2.10
Jan 10, 2025 00:22:30.871840954 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:30.871931076 CET	50191	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:30.871942997 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:30.871968985 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:30.872040033 CET	50191	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:30.872050047 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:30.886790991 CET	50209	443	192.168.2.10	157.240.0.35
Jan 10, 2025 00:22:30.886847973 CET	443	50209	157.240.0.35	192.168.2.10
Jan 10, 2025 00:22:30.887150049 CET	50209	443	192.168.2.10	157.240.0.35
Jan 10, 2025 00:22:30.887406111 CET	50209	443	192.168.2.10	157.240.0.35
Jan 10, 2025 00:22:30.887417078 CET	443	50209	157.240.0.35	192.168.2.10
Jan 10, 2025 00:22:30.922795057 CET	50191	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:30.924352884 CET	443	50184	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:30.924395084 CET	443	50184	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:30.924463987 CET	50184	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:30.924494028 CET	443	50184	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:30.936649084 CET	443	50184	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:30.936719894 CET	50184	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:30.936753988 CET	443	50184	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:30.936897039 CET	50184	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:30.939971924 CET	443	50194	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:30.940066099 CET	443	50194	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:30.940279007 CET	50194	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:30.940947056 CET	50194	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:30.940967083 CET	443	50194	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:30.958223104 CET	443	50184	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:30.958242893 CET	443	50184	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:30.958297968 CET	50184	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:30.986377954 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:30.986392975 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:30.986412048 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:30.986437082 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:30.986445904 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:30.986452103 CET	50191	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:30.986490011 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:30.986504078 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:30.986516953 CET	50191	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:30.986526966 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:30.986538887 CET	50191	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:31.002554893 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:31.002571106 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:31.002620935 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:31.002631903 CET	50191	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:31.002664089 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:31.002680063 CET	50191	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:31.012303114 CET	443	50203	34.95.127.121	192.168.2.10
Jan 10, 2025 00:22:31.012583017 CET	50203	443	192.168.2.10	34.95.127.121
Jan 10, 2025 00:22:31.012593985 CET	443	50203	34.95.127.121	192.168.2.10
Jan 10, 2025 00:22:31.013746023 CET	443	50203	34.95.127.121	192.168.2.10
Jan 10, 2025 00:22:31.013824940 CET	50203	443	192.168.2.10	34.95.127.121
Jan 10, 2025 00:22:31.013937950 CET	443	50205	151.101.1.44	192.168.2.10
Jan 10, 2025 00:22:31.014189959 CET	50203	443	192.168.2.10	34.95.127.121
Jan 10, 2025 00:22:31.014277935 CET	443	50203	34.95.127.121	192.168.2.10
Jan 10, 2025 00:22:31.014353991 CET	50205	443	192.168.2.10	151.101.1.44
Jan 10, 2025 00:22:31.014364004 CET	443	50205	151.101.1.44	192.168.2.10
Jan 10, 2025 00:22:31.014525890 CET	50203	443	192.168.2.10	34.95.127.121
Jan 10, 2025 00:22:31.014530897 CET	443	50203	34.95.127.121	192.168.2.10
Jan 10, 2025 00:22:31.016053915 CET	443	50205	151.101.1.44	192.168.2.10
Jan 10, 2025 00:22:31.016112089 CET	50205	443	192.168.2.10	151.101.1.44
Jan 10, 2025 00:22:31.016479969 CET	50205	443	192.168.2.10	151.101.1.44
Jan 10, 2025 00:22:31.016572952 CET	443	50205	151.101.1.44	192.168.2.10
Jan 10, 2025 00:22:31.017082930 CET	50205	443	192.168.2.10	151.101.1.44
Jan 10, 2025 00:22:31.017090082 CET	443	50205	151.101.1.44	192.168.2.10
Jan 10, 2025 00:22:31.018102884 CET	443	50184	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:31.018167973 CET	50184	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:31.018583059 CET	443	50184	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:31.018639088 CET	50184	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:31.018846035 CET	443	50184	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:31.018896103 CET	50184	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:31.019440889 CET	443	50184	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:31.019449949 CET	443	50184	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:31.019490957 CET	50184	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:31.030299902 CET	443	50184	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:31.030370951 CET	50184	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:31.030399084 CET	443	50184	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:31.030438900 CET	443	50184	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:31.030446053 CET	50184	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:31.030483007 CET	50184	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:31.030927896 CET	50184	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:31.030942917 CET	443	50184	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:31.048490047 CET	50191	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:31.063515902 CET	50205	443	192.168.2.10	151.101.1.44
Jan 10, 2025 00:22:31.063774109 CET	50203	443	192.168.2.10	34.95.127.121
Jan 10, 2025 00:22:31.065838099 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:31.065850019 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:31.065896034 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:31.065934896 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:31.065933943 CET	50191	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:31.065959930 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:31.065972090 CET	50191	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:31.065999985 CET	50191	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:31.096621990 CET	443	50200	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:31.097043037 CET	50200	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:31.097071886 CET	443	50200	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:31.098222971 CET	443	50200	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:31.098287106 CET	50200	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:31.098625898 CET	50200	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:31.098707914 CET	443	50200	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:31.098805904 CET	50200	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:31.098830938 CET	443	50200	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:31.100707054 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:31.100745916 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:31.100780010 CET	50191	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:31.100792885 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:31.100815058 CET	50191	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:31.100863934 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:31.101049900 CET	50191	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:31.101058006 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:31.104908943 CET	443	50207	64.202.112.127	192.168.2.10
Jan 10, 2025 00:22:31.105333090 CET	50207	443	192.168.2.10	64.202.112.127
Jan 10, 2025 00:22:31.105353117 CET	443	50207	64.202.112.127	192.168.2.10
Jan 10, 2025 00:22:31.105705976 CET	443	50207	64.202.112.127	192.168.2.10
Jan 10, 2025 00:22:31.106163979 CET	50207	443	192.168.2.10	64.202.112.127
Jan 10, 2025 00:22:31.106235027 CET	443	50207	64.202.112.127	192.168.2.10
Jan 10, 2025 00:22:31.106398106 CET	50207	443	192.168.2.10	64.202.112.127
Jan 10, 2025 00:22:31.125758886 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:31.125782013 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:31.125833988 CET	50191	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:31.125863075 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:31.125890970 CET	50191	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:31.125911951 CET	50191	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:31.127068996 CET	443	50203	34.95.127.121	192.168.2.10
Jan 10, 2025 00:22:31.127187014 CET	443	50203	34.95.127.121	192.168.2.10
Jan 10, 2025 00:22:31.127332926 CET	50203	443	192.168.2.10	34.95.127.121
Jan 10, 2025 00:22:31.128238916 CET	50203	443	192.168.2.10	34.95.127.121
Jan 10, 2025 00:22:31.128267050 CET	443	50203	34.95.127.121	192.168.2.10
Jan 10, 2025 00:22:31.129530907 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:31.129616022 CET	50191	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:31.133409023 CET	443	50205	151.101.1.44	192.168.2.10
Jan 10, 2025 00:22:31.133497953 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:31.133553982 CET	443	50205	151.101.1.44	192.168.2.10
Jan 10, 2025 00:22:31.133567095 CET	50191	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:31.133586884 CET	443	50205	151.101.1.44	192.168.2.10
Jan 10, 2025 00:22:31.133594036 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:31.133605957 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:31.133604050 CET	50205	443	192.168.2.10	151.101.1.44
Jan 10, 2025 00:22:31.133630991 CET	443	50205	151.101.1.44	192.168.2.10
Jan 10, 2025 00:22:31.133658886 CET	50191	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:31.133670092 CET	50205	443	192.168.2.10	151.101.1.44
Jan 10, 2025 00:22:31.133676052 CET	443	50205	151.101.1.44	192.168.2.10
Jan 10, 2025 00:22:31.133742094 CET	443	50205	151.101.1.44	192.168.2.10
Jan 10, 2025 00:22:31.133784056 CET	50205	443	192.168.2.10	151.101.1.44
Jan 10, 2025 00:22:31.134044886 CET	50191	443	192.168.2.10	157.240.253.1
Jan 10, 2025 00:22:31.134063005 CET	443	50191	157.240.253.1	192.168.2.10
Jan 10, 2025 00:22:31.134140015 CET	443	50206	3.130.114.26	192.168.2.10
Jan 10, 2025 00:22:31.135344028 CET	50206	443	192.168.2.10	3.130.114.26
Jan 10, 2025 00:22:31.135370016 CET	443	50206	3.130.114.26	192.168.2.10
Jan 10, 2025 00:22:31.135808945 CET	443	50206	3.130.114.26	192.168.2.10
Jan 10, 2025 00:22:31.136792898 CET	50206	443	192.168.2.10	3.130.114.26
Jan 10, 2025 00:22:31.136933088 CET	443	50206	3.130.114.26	192.168.2.10
Jan 10, 2025 00:22:31.137188911 CET	50206	443	192.168.2.10	3.130.114.26
Jan 10, 2025 00:22:31.137212992 CET	443	50206	3.130.114.26	192.168.2.10
Jan 10, 2025 00:22:31.138962030 CET	50205	443	192.168.2.10	151.101.1.44
Jan 10, 2025 00:22:31.138993025 CET	443	50205	151.101.1.44	192.168.2.10
Jan 10, 2025 00:22:31.142025948 CET	50200	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:31.142046928 CET	443	50200	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:31.147336006 CET	443	50207	64.202.112.127	192.168.2.10
Jan 10, 2025 00:22:31.176675081 CET	443	50201	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:31.177038908 CET	50201	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:31.177061081 CET	443	50201	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:31.178334951 CET	443	50201	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:31.178438902 CET	50201	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:31.179702044 CET	50201	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:31.179828882 CET	443	50201	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:31.180067062 CET	50201	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:31.180073023 CET	443	50201	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:31.188333988 CET	50200	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:31.202728033 CET	443	50204	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:31.202977896 CET	50204	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:31.202995062 CET	443	50204	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:31.204363108 CET	443	50204	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:31.204435110 CET	50204	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:31.204930067 CET	50204	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:31.205027103 CET	443	50204	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:31.205090046 CET	50204	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:31.205100060 CET	443	50204	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:31.214937925 CET	443	50207	64.202.112.127	192.168.2.10
Jan 10, 2025 00:22:31.215037107 CET	443	50207	64.202.112.127	192.168.2.10
Jan 10, 2025 00:22:31.215127945 CET	50207	443	192.168.2.10	64.202.112.127
Jan 10, 2025 00:22:31.216233969 CET	50207	443	192.168.2.10	64.202.112.127
Jan 10, 2025 00:22:31.216252089 CET	443	50207	64.202.112.127	192.168.2.10
Jan 10, 2025 00:22:31.235325098 CET	50201	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:31.251338005 CET	50204	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:31.251365900 CET	443	50204	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:31.262176037 CET	443	50206	3.130.114.26	192.168.2.10
Jan 10, 2025 00:22:31.262270927 CET	443	50206	3.130.114.26	192.168.2.10
Jan 10, 2025 00:22:31.262830973 CET	50206	443	192.168.2.10	3.130.114.26
Jan 10, 2025 00:22:31.263102055 CET	50206	443	192.168.2.10	3.130.114.26
Jan 10, 2025 00:22:31.263147116 CET	443	50206	3.130.114.26	192.168.2.10
Jan 10, 2025 00:22:31.266165018 CET	50211	443	192.168.2.10	157.240.0.35
Jan 10, 2025 00:22:31.266225100 CET	443	50211	157.240.0.35	192.168.2.10
Jan 10, 2025 00:22:31.266691923 CET	50211	443	192.168.2.10	157.240.0.35
Jan 10, 2025 00:22:31.266987085 CET	50211	443	192.168.2.10	157.240.0.35
Jan 10, 2025 00:22:31.267002106 CET	443	50211	157.240.0.35	192.168.2.10
Jan 10, 2025 00:22:31.267700911 CET	50212	443	192.168.2.10	3.131.211.191
Jan 10, 2025 00:22:31.267738104 CET	443	50212	3.131.211.191	192.168.2.10
Jan 10, 2025 00:22:31.267800093 CET	50212	443	192.168.2.10	3.131.211.191
Jan 10, 2025 00:22:31.268028975 CET	50212	443	192.168.2.10	3.131.211.191
Jan 10, 2025 00:22:31.268042088 CET	443	50212	3.131.211.191	192.168.2.10
Jan 10, 2025 00:22:31.270347118 CET	443	50208	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:31.270737886 CET	50208	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:31.270747900 CET	443	50208	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:31.271821022 CET	443	50208	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:31.272242069 CET	50208	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:31.272243023 CET	50208	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:31.272327900 CET	443	50208	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:31.272475958 CET	50208	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:31.272511959 CET	443	50208	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:31.298331976 CET	50204	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:31.314357042 CET	50208	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:31.314393997 CET	443	50208	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:31.335676908 CET	50214	443	192.168.2.10	13.107.246.44
Jan 10, 2025 00:22:31.335726023 CET	443	50214	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:31.335860014 CET	50214	443	192.168.2.10	13.107.246.44
Jan 10, 2025 00:22:31.336169004 CET	50214	443	192.168.2.10	13.107.246.44
Jan 10, 2025 00:22:31.336183071 CET	443	50214	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:31.367851019 CET	50208	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:31.380117893 CET	443	50200	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:31.380214930 CET	443	50200	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:31.380306959 CET	50200	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:31.381294012 CET	50200	443	192.168.2.10	18.194.6.240
Jan 10, 2025 00:22:31.381318092 CET	443	50200	18.194.6.240	192.168.2.10
Jan 10, 2025 00:22:31.407435894 CET	443	50204	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:31.407557011 CET	443	50204	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:31.407711029 CET	50204	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:31.408212900 CET	50204	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:31.408226967 CET	443	50204	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:31.411148071 CET	50215	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:31.411195993 CET	443	50215	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:31.411257982 CET	50215	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:31.411724091 CET	50215	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:31.411737919 CET	443	50215	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:31.414016008 CET	50216	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:31.414053917 CET	443	50216	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:31.414165974 CET	50216	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:31.414407969 CET	50216	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:31.414422035 CET	443	50216	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:31.475801945 CET	443	50208	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:31.476226091 CET	443	50208	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:31.476448059 CET	443	50201	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:31.476520061 CET	443	50201	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:31.476548910 CET	50208	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:31.476618052 CET	50201	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:31.476830959 CET	50208	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:31.476870060 CET	443	50208	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:31.477947950 CET	50201	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:31.477979898 CET	443	50201	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:31.480961084 CET	50217	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:31.481014967 CET	443	50217	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:31.481206894 CET	50217	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:31.482605934 CET	50217	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:31.482621908 CET	443	50217	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:31.489609003 CET	50221	443	192.168.2.10	173.194.76.154
Jan 10, 2025 00:22:31.489651918 CET	443	50221	173.194.76.154	192.168.2.10
Jan 10, 2025 00:22:31.489705086 CET	50221	443	192.168.2.10	173.194.76.154
Jan 10, 2025 00:22:31.490000010 CET	50221	443	192.168.2.10	173.194.76.154
Jan 10, 2025 00:22:31.490014076 CET	443	50221	173.194.76.154	192.168.2.10
Jan 10, 2025 00:22:31.490680933 CET	50222	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:31.490709066 CET	443	50222	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:31.490772009 CET	50222	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:31.490982056 CET	50222	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:31.491003990 CET	443	50222	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:31.540393114 CET	443	50209	157.240.0.35	192.168.2.10
Jan 10, 2025 00:22:31.540750027 CET	50209	443	192.168.2.10	157.240.0.35
Jan 10, 2025 00:22:31.540769100 CET	443	50209	157.240.0.35	192.168.2.10
Jan 10, 2025 00:22:31.541856050 CET	443	50209	157.240.0.35	192.168.2.10
Jan 10, 2025 00:22:31.541913986 CET	50209	443	192.168.2.10	157.240.0.35
Jan 10, 2025 00:22:31.543618917 CET	50209	443	192.168.2.10	157.240.0.35
Jan 10, 2025 00:22:31.543723106 CET	443	50209	157.240.0.35	192.168.2.10
Jan 10, 2025 00:22:31.544087887 CET	50209	443	192.168.2.10	157.240.0.35
Jan 10, 2025 00:22:31.544101954 CET	443	50209	157.240.0.35	192.168.2.10
Jan 10, 2025 00:22:31.592003107 CET	50209	443	192.168.2.10	157.240.0.35
Jan 10, 2025 00:22:31.819189072 CET	443	50212	3.131.211.191	192.168.2.10
Jan 10, 2025 00:22:31.819493055 CET	50212	443	192.168.2.10	3.131.211.191
Jan 10, 2025 00:22:31.819519997 CET	443	50212	3.131.211.191	192.168.2.10
Jan 10, 2025 00:22:31.819904089 CET	443	50212	3.131.211.191	192.168.2.10
Jan 10, 2025 00:22:31.820265055 CET	50212	443	192.168.2.10	3.131.211.191
Jan 10, 2025 00:22:31.820338964 CET	443	50212	3.131.211.191	192.168.2.10
Jan 10, 2025 00:22:31.820401907 CET	50212	443	192.168.2.10	3.131.211.191
Jan 10, 2025 00:22:31.867335081 CET	443	50212	3.131.211.191	192.168.2.10
Jan 10, 2025 00:22:31.873507023 CET	443	50209	157.240.0.35	192.168.2.10
Jan 10, 2025 00:22:31.873584986 CET	443	50209	157.240.0.35	192.168.2.10
Jan 10, 2025 00:22:31.873641014 CET	50209	443	192.168.2.10	157.240.0.35
Jan 10, 2025 00:22:31.874950886 CET	50209	443	192.168.2.10	157.240.0.35
Jan 10, 2025 00:22:31.874975920 CET	443	50209	157.240.0.35	192.168.2.10
Jan 10, 2025 00:22:31.890815020 CET	50223	443	192.168.2.10	157.240.252.35
Jan 10, 2025 00:22:31.890847921 CET	443	50223	157.240.252.35	192.168.2.10
Jan 10, 2025 00:22:31.891021967 CET	50223	443	192.168.2.10	157.240.252.35
Jan 10, 2025 00:22:31.891242981 CET	50223	443	192.168.2.10	157.240.252.35
Jan 10, 2025 00:22:31.891253948 CET	443	50223	157.240.252.35	192.168.2.10
Jan 10, 2025 00:22:31.897166967 CET	50224	443	192.168.2.10	216.239.34.181
Jan 10, 2025 00:22:31.897180080 CET	443	50224	216.239.34.181	192.168.2.10
Jan 10, 2025 00:22:31.897370100 CET	50224	443	192.168.2.10	216.239.34.181
Jan 10, 2025 00:22:31.897747040 CET	50224	443	192.168.2.10	216.239.34.181
Jan 10, 2025 00:22:31.897758961 CET	443	50224	216.239.34.181	192.168.2.10
Jan 10, 2025 00:22:31.939357042 CET	443	50211	157.240.0.35	192.168.2.10
Jan 10, 2025 00:22:31.939687014 CET	50211	443	192.168.2.10	157.240.0.35
Jan 10, 2025 00:22:31.939713001 CET	443	50211	157.240.0.35	192.168.2.10
Jan 10, 2025 00:22:31.940817118 CET	443	50211	157.240.0.35	192.168.2.10
Jan 10, 2025 00:22:31.940903902 CET	50211	443	192.168.2.10	157.240.0.35
Jan 10, 2025 00:22:31.941376925 CET	50211	443	192.168.2.10	157.240.0.35
Jan 10, 2025 00:22:31.941450119 CET	443	50211	157.240.0.35	192.168.2.10
Jan 10, 2025 00:22:31.941562891 CET	50211	443	192.168.2.10	157.240.0.35
Jan 10, 2025 00:22:31.983340025 CET	443	50211	157.240.0.35	192.168.2.10
Jan 10, 2025 00:22:31.990941048 CET	50211	443	192.168.2.10	157.240.0.35
Jan 10, 2025 00:22:31.990957975 CET	443	50211	157.240.0.35	192.168.2.10
Jan 10, 2025 00:22:32.008553982 CET	443	50212	3.131.211.191	192.168.2.10
Jan 10, 2025 00:22:32.008666039 CET	443	50212	3.131.211.191	192.168.2.10
Jan 10, 2025 00:22:32.008738041 CET	50212	443	192.168.2.10	3.131.211.191
Jan 10, 2025 00:22:32.009735107 CET	50212	443	192.168.2.10	3.131.211.191
Jan 10, 2025 00:22:32.009757042 CET	443	50212	3.131.211.191	192.168.2.10
Jan 10, 2025 00:22:32.038922071 CET	50211	443	192.168.2.10	157.240.0.35
Jan 10, 2025 00:22:32.061153889 CET	443	50214	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:32.061352015 CET	50214	443	192.168.2.10	13.107.246.44
Jan 10, 2025 00:22:32.061363935 CET	443	50214	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:32.062591076 CET	443	50214	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:32.062654018 CET	50214	443	192.168.2.10	13.107.246.44
Jan 10, 2025 00:22:32.063100100 CET	50214	443	192.168.2.10	13.107.246.44
Jan 10, 2025 00:22:32.063178062 CET	443	50214	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:32.063210964 CET	50214	443	192.168.2.10	13.107.246.44
Jan 10, 2025 00:22:32.103338003 CET	443	50214	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:32.111066103 CET	443	50215	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:32.111397028 CET	50215	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:32.111423969 CET	443	50215	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:32.111812115 CET	443	50215	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:32.112298965 CET	50215	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:32.112375021 CET	443	50215	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:32.112479925 CET	50215	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:32.112849951 CET	50214	443	192.168.2.10	13.107.246.44
Jan 10, 2025 00:22:32.112873077 CET	443	50214	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:32.117865086 CET	443	50216	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:32.118215084 CET	50216	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:32.118242025 CET	443	50216	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:32.118627071 CET	443	50216	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:32.119138002 CET	50216	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:32.119219065 CET	443	50216	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:32.119307995 CET	50216	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:32.119338989 CET	443	50216	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:32.143085003 CET	443	50217	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:32.143512011 CET	50217	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:32.143527031 CET	443	50217	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:32.144536972 CET	443	50217	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:32.144701958 CET	50217	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:32.144948006 CET	50217	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:32.145000935 CET	443	50217	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:32.145083904 CET	50217	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:32.145102978 CET	443	50217	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:32.155332088 CET	443	50215	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:32.164563894 CET	443	50221	173.194.76.154	192.168.2.10
Jan 10, 2025 00:22:32.164890051 CET	50221	443	192.168.2.10	173.194.76.154
Jan 10, 2025 00:22:32.164932966 CET	443	50221	173.194.76.154	192.168.2.10
Jan 10, 2025 00:22:32.166023016 CET	443	50221	173.194.76.154	192.168.2.10
Jan 10, 2025 00:22:32.166102886 CET	50214	443	192.168.2.10	13.107.246.44
Jan 10, 2025 00:22:32.166130066 CET	50221	443	192.168.2.10	173.194.76.154
Jan 10, 2025 00:22:32.166182041 CET	50216	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:32.168019056 CET	50221	443	192.168.2.10	173.194.76.154
Jan 10, 2025 00:22:32.168131113 CET	443	50221	173.194.76.154	192.168.2.10
Jan 10, 2025 00:22:32.168744087 CET	50221	443	192.168.2.10	173.194.76.154
Jan 10, 2025 00:22:32.168760061 CET	443	50221	173.194.76.154	192.168.2.10
Jan 10, 2025 00:22:32.182673931 CET	443	50222	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:32.183182001 CET	50222	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:32.183197975 CET	443	50222	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:32.183609962 CET	443	50222	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:32.184237003 CET	50222	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:32.184345007 CET	443	50222	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:32.184581041 CET	50222	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:32.184603930 CET	443	50222	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:32.186911106 CET	443	50214	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:32.187205076 CET	443	50214	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:32.187331915 CET	50214	443	192.168.2.10	13.107.246.44
Jan 10, 2025 00:22:32.187556028 CET	50214	443	192.168.2.10	13.107.246.44
Jan 10, 2025 00:22:32.187575102 CET	443	50214	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:32.198122025 CET	50217	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:32.198149920 CET	443	50217	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:32.214099884 CET	50221	443	192.168.2.10	173.194.76.154
Jan 10, 2025 00:22:32.245944977 CET	50217	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:32.322633982 CET	443	50216	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:32.322740078 CET	443	50216	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:32.322982073 CET	50216	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:32.323632002 CET	443	50217	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:32.323720932 CET	443	50217	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:32.323770046 CET	50217	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:32.324152946 CET	50216	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:32.324177027 CET	443	50216	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:32.328377962 CET	50217	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:32.328416109 CET	443	50217	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:32.344583988 CET	50225	443	192.168.2.10	13.107.246.44
Jan 10, 2025 00:22:32.344640017 CET	443	50225	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:32.344819069 CET	50225	443	192.168.2.10	13.107.246.44
Jan 10, 2025 00:22:32.345103979 CET	50225	443	192.168.2.10	13.107.246.44
Jan 10, 2025 00:22:32.345124006 CET	443	50225	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:32.380786896 CET	443	50215	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:32.380882978 CET	443	50215	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:32.380999088 CET	50215	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:32.383035898 CET	50215	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:32.383053064 CET	443	50215	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:32.385716915 CET	443	50222	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:32.385835886 CET	443	50222	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:32.385989904 CET	50222	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:32.390652895 CET	443	50224	216.239.34.181	192.168.2.10
Jan 10, 2025 00:22:32.392108917 CET	50224	443	192.168.2.10	216.239.34.181
Jan 10, 2025 00:22:32.392144918 CET	443	50224	216.239.34.181	192.168.2.10
Jan 10, 2025 00:22:32.392596006 CET	443	50224	216.239.34.181	192.168.2.10
Jan 10, 2025 00:22:32.397449017 CET	50224	443	192.168.2.10	216.239.34.181
Jan 10, 2025 00:22:32.397576094 CET	443	50224	216.239.34.181	192.168.2.10
Jan 10, 2025 00:22:32.397793055 CET	50222	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:32.397830963 CET	443	50222	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:32.399631023 CET	50224	443	192.168.2.10	216.239.34.181
Jan 10, 2025 00:22:32.399681091 CET	443	50224	216.239.34.181	192.168.2.10
Jan 10, 2025 00:22:32.431122065 CET	443	50221	173.194.76.154	192.168.2.10
Jan 10, 2025 00:22:32.431205034 CET	443	50221	173.194.76.154	192.168.2.10
Jan 10, 2025 00:22:32.431272984 CET	50221	443	192.168.2.10	173.194.76.154
Jan 10, 2025 00:22:32.431727886 CET	50221	443	192.168.2.10	173.194.76.154
Jan 10, 2025 00:22:32.431754112 CET	443	50221	173.194.76.154	192.168.2.10
Jan 10, 2025 00:22:32.494883060 CET	443	50211	157.240.0.35	192.168.2.10
Jan 10, 2025 00:22:32.494967937 CET	443	50211	157.240.0.35	192.168.2.10
Jan 10, 2025 00:22:32.495045900 CET	443	50211	157.240.0.35	192.168.2.10
Jan 10, 2025 00:22:32.495095015 CET	50211	443	192.168.2.10	157.240.0.35
Jan 10, 2025 00:22:32.495115995 CET	443	50211	157.240.0.35	192.168.2.10
Jan 10, 2025 00:22:32.495172024 CET	50211	443	192.168.2.10	157.240.0.35
Jan 10, 2025 00:22:32.495177984 CET	443	50211	157.240.0.35	192.168.2.10
Jan 10, 2025 00:22:32.495193005 CET	443	50211	157.240.0.35	192.168.2.10
Jan 10, 2025 00:22:32.495234966 CET	50211	443	192.168.2.10	157.240.0.35
Jan 10, 2025 00:22:32.496171951 CET	50211	443	192.168.2.10	157.240.0.35
Jan 10, 2025 00:22:32.496187925 CET	443	50211	157.240.0.35	192.168.2.10
Jan 10, 2025 00:22:32.504136086 CET	50228	443	192.168.2.10	157.240.252.35
Jan 10, 2025 00:22:32.504211903 CET	443	50228	157.240.252.35	192.168.2.10
Jan 10, 2025 00:22:32.504287004 CET	50228	443	192.168.2.10	157.240.252.35
Jan 10, 2025 00:22:32.504558086 CET	50228	443	192.168.2.10	157.240.252.35
Jan 10, 2025 00:22:32.504574060 CET	443	50228	157.240.252.35	192.168.2.10
Jan 10, 2025 00:22:32.516665936 CET	443	50224	216.239.34.181	192.168.2.10
Jan 10, 2025 00:22:32.517035961 CET	443	50224	216.239.34.181	192.168.2.10
Jan 10, 2025 00:22:32.517088890 CET	50224	443	192.168.2.10	216.239.34.181
Jan 10, 2025 00:22:32.517132998 CET	50224	443	192.168.2.10	216.239.34.181
Jan 10, 2025 00:22:32.517151117 CET	443	50224	216.239.34.181	192.168.2.10
Jan 10, 2025 00:22:32.517164946 CET	50224	443	192.168.2.10	216.239.34.181
Jan 10, 2025 00:22:32.517205000 CET	50224	443	192.168.2.10	216.239.34.181
Jan 10, 2025 00:22:32.531565905 CET	443	50223	157.240.252.35	192.168.2.10
Jan 10, 2025 00:22:32.531809092 CET	50223	443	192.168.2.10	157.240.252.35
Jan 10, 2025 00:22:32.531825066 CET	443	50223	157.240.252.35	192.168.2.10
Jan 10, 2025 00:22:32.532921076 CET	443	50223	157.240.252.35	192.168.2.10
Jan 10, 2025 00:22:32.532989025 CET	50223	443	192.168.2.10	157.240.252.35
Jan 10, 2025 00:22:32.533421993 CET	50223	443	192.168.2.10	157.240.252.35
Jan 10, 2025 00:22:32.533504963 CET	443	50223	157.240.252.35	192.168.2.10
Jan 10, 2025 00:22:32.533632040 CET	50223	443	192.168.2.10	157.240.252.35
Jan 10, 2025 00:22:32.575344086 CET	443	50223	157.240.252.35	192.168.2.10
Jan 10, 2025 00:22:32.576394081 CET	50223	443	192.168.2.10	157.240.252.35
Jan 10, 2025 00:22:32.576425076 CET	443	50223	157.240.252.35	192.168.2.10
Jan 10, 2025 00:22:32.627469063 CET	50223	443	192.168.2.10	157.240.252.35
Jan 10, 2025 00:22:32.712894917 CET	50229	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:32.712939978 CET	443	50229	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:32.713011980 CET	50229	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:32.713855028 CET	50229	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:32.713871956 CET	443	50229	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:32.730731964 CET	50230	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:32.730781078 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:32.730861902 CET	50230	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:32.731090069 CET	50230	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:32.731102943 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:32.742786884 CET	50231	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:32.742851019 CET	443	50231	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:32.742928028 CET	50231	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:32.743937969 CET	50231	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:32.743958950 CET	443	50231	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:32.805305004 CET	443	50223	157.240.252.35	192.168.2.10
Jan 10, 2025 00:22:32.805392981 CET	443	50223	157.240.252.35	192.168.2.10
Jan 10, 2025 00:22:32.805744886 CET	50223	443	192.168.2.10	157.240.252.35
Jan 10, 2025 00:22:32.806052923 CET	50223	443	192.168.2.10	157.240.252.35
Jan 10, 2025 00:22:32.806073904 CET	443	50223	157.240.252.35	192.168.2.10
Jan 10, 2025 00:22:32.806086063 CET	50223	443	192.168.2.10	157.240.252.35
Jan 10, 2025 00:22:32.806116104 CET	50223	443	192.168.2.10	157.240.252.35
Jan 10, 2025 00:22:32.842525959 CET	50232	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:32.842569113 CET	443	50232	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:32.842652082 CET	50232	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:32.843168020 CET	50232	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:32.843180895 CET	443	50232	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:32.987770081 CET	443	50225	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:32.988058090 CET	50225	443	192.168.2.10	13.107.246.44
Jan 10, 2025 00:22:32.988094091 CET	443	50225	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:32.988471031 CET	443	50225	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:32.988797903 CET	50225	443	192.168.2.10	13.107.246.44
Jan 10, 2025 00:22:32.988883018 CET	443	50225	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:32.988929987 CET	50225	443	192.168.2.10	13.107.246.44
Jan 10, 2025 00:22:33.035334110 CET	443	50225	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:33.042506933 CET	50225	443	192.168.2.10	13.107.246.44
Jan 10, 2025 00:22:33.095693111 CET	443	50225	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:33.095725060 CET	443	50225	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:33.095732927 CET	443	50225	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:33.095746994 CET	443	50225	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:33.095753908 CET	443	50225	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:33.095760107 CET	443	50225	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:33.095801115 CET	50225	443	192.168.2.10	13.107.246.44
Jan 10, 2025 00:22:33.095813990 CET	443	50225	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:33.095858097 CET	50225	443	192.168.2.10	13.107.246.44
Jan 10, 2025 00:22:33.095875025 CET	50225	443	192.168.2.10	13.107.246.44
Jan 10, 2025 00:22:33.180268049 CET	443	50225	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:33.180294991 CET	443	50225	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:33.180380106 CET	50225	443	192.168.2.10	13.107.246.44
Jan 10, 2025 00:22:33.180398941 CET	443	50225	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:33.180898905 CET	50225	443	192.168.2.10	13.107.246.44
Jan 10, 2025 00:22:33.182821035 CET	443	50225	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:33.182845116 CET	443	50225	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:33.182907104 CET	50225	443	192.168.2.10	13.107.246.44
Jan 10, 2025 00:22:33.182920933 CET	443	50225	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:33.182935953 CET	50225	443	192.168.2.10	13.107.246.44
Jan 10, 2025 00:22:33.183276892 CET	50225	443	192.168.2.10	13.107.246.44
Jan 10, 2025 00:22:33.183933973 CET	443	50229	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:33.184195042 CET	50229	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:33.184220076 CET	443	50229	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:33.184557915 CET	443	50229	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:33.184920073 CET	50229	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:33.184974909 CET	443	50229	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:33.185197115 CET	50229	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:33.185216904 CET	443	50229	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:33.185323000 CET	50229	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:33.206763983 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.207041025 CET	50230	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:33.207062006 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.208149910 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.208219051 CET	50230	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:33.209657907 CET	50230	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:33.209747076 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.209832907 CET	50230	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:33.220441103 CET	443	50228	157.240.252.35	192.168.2.10
Jan 10, 2025 00:22:33.220685005 CET	50228	443	192.168.2.10	157.240.252.35
Jan 10, 2025 00:22:33.220699072 CET	443	50228	157.240.252.35	192.168.2.10
Jan 10, 2025 00:22:33.221770048 CET	443	50228	157.240.252.35	192.168.2.10
Jan 10, 2025 00:22:33.221838951 CET	50228	443	192.168.2.10	157.240.252.35
Jan 10, 2025 00:22:33.222132921 CET	50228	443	192.168.2.10	157.240.252.35
Jan 10, 2025 00:22:33.222206116 CET	443	50228	157.240.252.35	192.168.2.10
Jan 10, 2025 00:22:33.222280979 CET	50228	443	192.168.2.10	157.240.252.35
Jan 10, 2025 00:22:33.222289085 CET	443	50228	157.240.252.35	192.168.2.10
Jan 10, 2025 00:22:33.227339029 CET	443	50229	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:33.251352072 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.263189077 CET	50230	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:33.263212919 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.263237953 CET	50228	443	192.168.2.10	157.240.252.35
Jan 10, 2025 00:22:33.266009092 CET	443	50225	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:33.266036034 CET	443	50225	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:33.266083002 CET	443	50225	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:33.266083002 CET	50225	443	192.168.2.10	13.107.246.44
Jan 10, 2025 00:22:33.266093969 CET	443	50225	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:33.266144991 CET	50225	443	192.168.2.10	13.107.246.44
Jan 10, 2025 00:22:33.266151905 CET	443	50225	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:33.266164064 CET	443	50225	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:33.266201019 CET	50225	443	192.168.2.10	13.107.246.44
Jan 10, 2025 00:22:33.266453028 CET	50225	443	192.168.2.10	13.107.246.44
Jan 10, 2025 00:22:33.266465902 CET	443	50225	13.107.246.44	192.168.2.10
Jan 10, 2025 00:22:33.308367014 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.308403969 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.308429956 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.308456898 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.308470011 CET	50230	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:33.308499098 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.308514118 CET	50230	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:33.308660030 CET	50230	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:33.308799028 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.309350014 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.309396982 CET	50230	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:33.309412003 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.315850973 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.315901995 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.315929890 CET	50230	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:33.315932035 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.315952063 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.315979958 CET	50230	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:33.363518000 CET	50230	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:33.363542080 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.382555008 CET	443	50231	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:33.382814884 CET	50231	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:33.382841110 CET	443	50231	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:33.383198977 CET	443	50231	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:33.383728027 CET	50231	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:33.383821011 CET	443	50231	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:33.384080887 CET	50231	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:33.396804094 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.396905899 CET	50230	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:33.396927118 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.397355080 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.397387981 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.397402048 CET	50230	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:33.397411108 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.397459030 CET	50230	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:33.397464037 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.398133039 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.398188114 CET	50230	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:33.398195028 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.398896933 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.398924112 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.398972034 CET	50230	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:33.398981094 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.399022102 CET	50230	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:33.399692059 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.399753094 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.400427103 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.400454998 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.400485039 CET	50230	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:33.400495052 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.400526047 CET	50230	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:33.401221037 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.401247025 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.401294947 CET	50230	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:33.401313066 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.401350021 CET	50230	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:33.401989937 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.402055979 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.402746916 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.402780056 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.402805090 CET	50230	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:33.402822018 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.402848005 CET	50230	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:33.411225080 CET	443	50229	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:33.411341906 CET	443	50229	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:33.411465883 CET	50229	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:33.413567066 CET	50229	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:33.413594007 CET	443	50229	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:33.427328110 CET	443	50231	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:33.455995083 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.456084967 CET	50230	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:33.456104040 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.456159115 CET	50230	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:33.507678986 CET	50230	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:33.507715940 CET	443	50230	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.511667013 CET	443	50228	157.240.252.35	192.168.2.10
Jan 10, 2025 00:22:33.511724949 CET	443	50228	157.240.252.35	192.168.2.10
Jan 10, 2025 00:22:33.511781931 CET	50228	443	192.168.2.10	157.240.252.35
Jan 10, 2025 00:22:33.511816978 CET	443	50228	157.240.252.35	192.168.2.10
Jan 10, 2025 00:22:33.511837959 CET	443	50228	157.240.252.35	192.168.2.10
Jan 10, 2025 00:22:33.511888981 CET	50228	443	192.168.2.10	157.240.252.35
Jan 10, 2025 00:22:33.511897087 CET	443	50228	157.240.252.35	192.168.2.10
Jan 10, 2025 00:22:33.511934042 CET	443	50228	157.240.252.35	192.168.2.10
Jan 10, 2025 00:22:33.512008905 CET	50228	443	192.168.2.10	157.240.252.35
Jan 10, 2025 00:22:33.537883043 CET	50228	443	192.168.2.10	157.240.252.35
Jan 10, 2025 00:22:33.537918091 CET	443	50228	157.240.252.35	192.168.2.10
Jan 10, 2025 00:22:33.546782017 CET	50234	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:33.546835899 CET	443	50234	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:33.546978951 CET	50234	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:33.547300100 CET	50234	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:33.547322035 CET	443	50234	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:33.636409044 CET	443	50232	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:33.654719114 CET	443	50231	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:33.654942989 CET	443	50231	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:33.655365944 CET	50231	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:33.688262939 CET	50232	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:33.702440977 CET	50232	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:33.702454090 CET	443	50232	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:33.703031063 CET	443	50232	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:33.703605890 CET	50232	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:33.703697920 CET	443	50232	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:33.704242945 CET	50232	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:33.747335911 CET	443	50232	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:33.867782116 CET	50231	443	192.168.2.10	18.173.205.126
Jan 10, 2025 00:22:33.867814064 CET	443	50231	18.173.205.126	192.168.2.10
Jan 10, 2025 00:22:33.968807936 CET	50236	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:33.968859911 CET	443	50236	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:33.969149113 CET	50236	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:33.969391108 CET	50236	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:33.969407082 CET	443	50236	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:33.973165989 CET	50237	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:33.973193884 CET	443	50237	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:33.973261118 CET	50237	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:33.973496914 CET	50237	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:33.973515034 CET	443	50237	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:33.981344938 CET	50238	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:33.981406927 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.981479883 CET	50238	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:33.981810093 CET	50238	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:33.981837988 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:33.994951010 CET	443	50232	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:33.995040894 CET	443	50232	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:33.995255947 CET	50232	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:33.995513916 CET	50232	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:33.995533943 CET	443	50232	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:33.995546103 CET	50232	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:33.995579004 CET	50232	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:33.999782085 CET	50239	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:33.999830961 CET	443	50239	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:34.000154018 CET	50239	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:34.000403881 CET	50239	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:34.000416994 CET	443	50239	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:34.038033009 CET	443	50234	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:34.038345098 CET	50234	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:34.038376093 CET	443	50234	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:34.039521933 CET	443	50234	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:34.039608955 CET	50234	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:34.040860891 CET	50234	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:34.040952921 CET	443	50234	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:34.041047096 CET	50234	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:34.083568096 CET	50240	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.083621025 CET	443	50240	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.083697081 CET	50240	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.084172010 CET	50240	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.084186077 CET	443	50240	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.087337017 CET	443	50234	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:34.090612888 CET	50234	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:34.090629101 CET	443	50234	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:34.098175049 CET	50241	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.098222971 CET	443	50241	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.098279953 CET	50241	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.098784924 CET	50241	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.098797083 CET	443	50241	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.106502056 CET	50242	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:34.106542110 CET	443	50242	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:34.106700897 CET	50242	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:34.108138084 CET	50242	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:34.108165979 CET	443	50242	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:34.130580902 CET	50234	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:34.144372940 CET	50243	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:34.144426107 CET	443	50243	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:34.144578934 CET	50243	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:34.144927979 CET	50243	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:34.144944906 CET	443	50243	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:34.182820082 CET	50244	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:34.182864904 CET	443	50244	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:34.182955027 CET	50244	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:34.186407089 CET	50244	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:34.186434984 CET	443	50244	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:34.201879978 CET	50245	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:34.201921940 CET	443	50245	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:34.201973915 CET	50246	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:34.202018976 CET	443	50246	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:34.202039003 CET	50245	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:34.202191114 CET	50246	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:34.202250957 CET	50247	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:34.202271938 CET	443	50247	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:34.202311039 CET	50247	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:34.202615023 CET	50245	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:34.202636957 CET	443	50245	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:34.202677011 CET	50246	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:34.202687979 CET	443	50246	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:34.202840090 CET	50247	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:34.202853918 CET	443	50247	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:34.288237095 CET	443	50234	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:34.288371086 CET	443	50234	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:34.288419008 CET	50234	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:34.288779974 CET	50234	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:34.288800001 CET	443	50234	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:34.304528952 CET	50249	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:34.304573059 CET	443	50249	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:34.304634094 CET	50249	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:34.304920912 CET	50249	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:34.304932117 CET	443	50249	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:34.467426062 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.467719078 CET	50238	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:34.467739105 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.468770981 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.468839884 CET	50238	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:34.469218969 CET	50238	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:34.469305992 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.469362020 CET	50238	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:34.469389915 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.510374069 CET	50238	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:34.577066898 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.577248096 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.577282906 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.577296972 CET	50238	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:34.577322006 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.577367067 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.577404022 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.577419043 CET	50238	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:34.577429056 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.577474117 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.577512980 CET	50238	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:34.577513933 CET	50238	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:34.577534914 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.583569050 CET	443	50236	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.583865881 CET	50236	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.583904028 CET	443	50236	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.584058046 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.584096909 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.584101915 CET	50238	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:34.584110975 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.584197044 CET	50238	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:34.584223986 CET	443	50236	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.584603071 CET	50236	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.584671021 CET	443	50236	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.585154057 CET	50236	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.585187912 CET	443	50236	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.592505932 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.634470940 CET	443	50237	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:34.634800911 CET	50237	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:34.634835958 CET	443	50237	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:34.635198116 CET	443	50237	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:34.635592937 CET	50238	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:34.635761976 CET	50237	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:34.635834932 CET	443	50237	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:34.635947943 CET	50237	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:34.671046019 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.671128035 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.671183109 CET	50238	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:34.671195030 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.671668053 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.671706915 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.671746016 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.671777010 CET	50238	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:34.671777010 CET	50238	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:34.671786070 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.672369957 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.672420025 CET	50238	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:34.672429085 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.672951937 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.672991037 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.673000097 CET	50238	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:34.673027039 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.673069954 CET	50238	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:34.673727989 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.673799038 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.673832893 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.673883915 CET	50238	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:34.673892975 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.673949003 CET	50238	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:34.674628019 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.674685001 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.674731970 CET	50238	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:34.674751043 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.675523043 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.675555944 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.675616980 CET	50238	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:34.675625086 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.675750971 CET	50238	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:34.679337978 CET	443	50237	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:34.708911896 CET	443	50240	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.709070921 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.709151030 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.709218025 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.709234953 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.709255934 CET	50238	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:34.709269047 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.709296942 CET	50238	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:34.709322929 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.709393978 CET	50238	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:34.709439039 CET	50240	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.709461927 CET	443	50240	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.710067987 CET	50238	443	192.168.2.10	162.247.243.39
Jan 10, 2025 00:22:34.710088015 CET	443	50238	162.247.243.39	192.168.2.10
Jan 10, 2025 00:22:34.710602045 CET	443	50240	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.711033106 CET	50240	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.711211920 CET	443	50240	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.711406946 CET	50240	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.711431980 CET	50240	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.711464882 CET	443	50240	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.725723982 CET	443	50241	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.726068974 CET	50241	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.726098061 CET	443	50241	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.726437092 CET	443	50241	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.726784945 CET	50241	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.726851940 CET	443	50241	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.727039099 CET	50241	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.727061987 CET	443	50241	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.727098942 CET	50241	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.767333984 CET	443	50241	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.801000118 CET	443	50242	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:34.801351070 CET	50242	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:34.801374912 CET	443	50242	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:34.801737070 CET	443	50242	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:34.802351952 CET	50242	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:34.802429914 CET	443	50242	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:34.802484989 CET	50242	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:34.809274912 CET	443	50239	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:34.809583902 CET	50239	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:34.809617996 CET	443	50239	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:34.810009956 CET	443	50239	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:34.810345888 CET	50239	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:34.810412884 CET	443	50239	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:34.810497999 CET	50239	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:34.810524940 CET	443	50239	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:34.814941883 CET	443	50243	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:34.815227032 CET	50243	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:34.815243959 CET	443	50243	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:34.815588951 CET	443	50243	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:34.815943003 CET	50243	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:34.816066980 CET	443	50243	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:34.816085100 CET	50243	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:34.816108942 CET	443	50243	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:34.822372913 CET	443	50236	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.822396040 CET	443	50236	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.822422028 CET	443	50236	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.822479963 CET	50236	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.822505951 CET	443	50236	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.822521925 CET	50236	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.822554111 CET	50236	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.834717989 CET	443	50249	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:34.835041046 CET	50249	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:34.835068941 CET	443	50249	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:34.836159945 CET	443	50249	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:34.836216927 CET	50249	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:34.836584091 CET	50249	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:34.836651087 CET	443	50249	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:34.836718082 CET	50249	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:34.836724997 CET	443	50249	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:34.843333006 CET	443	50242	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:34.854273081 CET	50242	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:34.869749069 CET	50243	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:34.877912045 CET	443	50244	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:34.878061056 CET	443	50245	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:34.878169060 CET	443	50247	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:34.878204107 CET	50244	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:34.878216982 CET	443	50244	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:34.878534079 CET	50245	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:34.878534079 CET	50247	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:34.878546953 CET	443	50245	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:34.878568888 CET	443	50247	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:34.878602982 CET	443	50244	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:34.878922939 CET	50244	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:34.879000902 CET	443	50244	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:34.879049063 CET	443	50247	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:34.879050970 CET	443	50245	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:34.879085064 CET	50244	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:34.879102945 CET	443	50244	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:34.879132032 CET	50245	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:34.879132032 CET	50247	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:34.879787922 CET	443	50245	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:34.879837990 CET	443	50247	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:34.879842043 CET	50245	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:34.879919052 CET	50247	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:34.880853891 CET	50245	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:34.880970001 CET	443	50245	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:34.880992889 CET	50247	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:34.881073952 CET	443	50247	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:34.881383896 CET	50245	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:34.881397009 CET	443	50245	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:34.881489038 CET	50247	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:34.881494045 CET	443	50247	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:34.885328054 CET	443	50246	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:34.885442019 CET	50249	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:34.885642052 CET	50246	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:34.885653019 CET	443	50246	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:34.886095047 CET	443	50246	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:34.886394024 CET	50246	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:34.886888981 CET	443	50246	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:34.887150049 CET	50246	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:34.887150049 CET	50246	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:34.887218952 CET	443	50246	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:34.887336969 CET	50246	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:34.887343884 CET	443	50246	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:34.892781019 CET	443	50240	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.892996073 CET	443	50240	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.893050909 CET	50240	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.893779993 CET	50240	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.893800974 CET	443	50240	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.897152901 CET	50251	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.897195101 CET	443	50251	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.897254944 CET	50251	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.897496939 CET	50251	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.897515059 CET	443	50251	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.911988974 CET	443	50236	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.912034988 CET	443	50236	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.912072897 CET	50236	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.912101984 CET	443	50236	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.912143946 CET	50236	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.914935112 CET	443	50236	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.914962053 CET	443	50236	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.915008068 CET	50236	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.915035009 CET	443	50236	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.915049076 CET	50236	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.915055037 CET	443	50241	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.915076017 CET	50236	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.915141106 CET	443	50241	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.915184021 CET	50241	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.916332960 CET	50241	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.916347980 CET	443	50241	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.925574064 CET	50245	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:34.925574064 CET	50247	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:34.931456089 CET	50253	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.931495905 CET	443	50253	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.931560993 CET	50253	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.931843996 CET	50253	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:34.931858063 CET	443	50253	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:34.941148996 CET	50246	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:34.951805115 CET	443	50237	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:34.952519894 CET	443	50237	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:34.952580929 CET	50237	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:34.953097105 CET	50237	443	192.168.2.10	18.173.205.63
Jan 10, 2025 00:22:34.953114986 CET	443	50237	18.173.205.63	192.168.2.10
Jan 10, 2025 00:22:35.000962019 CET	443	50236	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.001009941 CET	443	50236	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.001036882 CET	50236	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.001054049 CET	443	50236	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.001080990 CET	50236	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.001101017 CET	443	50236	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.001104116 CET	50236	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.001190901 CET	50236	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.001251936 CET	50236	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.001261950 CET	443	50236	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.022130013 CET	443	50243	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:35.022305012 CET	443	50243	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:35.022351980 CET	50243	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:35.023550987 CET	50243	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:35.023569107 CET	443	50243	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:35.062818050 CET	443	50249	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:35.062936068 CET	443	50249	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:35.062983990 CET	50249	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:35.063802958 CET	50249	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:35.063827991 CET	443	50249	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:35.089133024 CET	443	50244	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:35.089287043 CET	443	50244	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:35.089339972 CET	50244	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:35.100684881 CET	443	50239	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:35.100780964 CET	443	50239	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:35.100832939 CET	50239	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:35.106654882 CET	50244	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:35.106683969 CET	443	50244	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:35.107908010 CET	50239	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:35.107945919 CET	443	50239	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:35.157737017 CET	443	50245	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:35.157813072 CET	443	50245	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:35.157943010 CET	50245	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:35.158438921 CET	50245	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:35.158461094 CET	443	50245	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:35.159811974 CET	443	50247	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:35.159899950 CET	443	50247	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:35.159984112 CET	50247	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:35.160967112 CET	50247	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:35.160999060 CET	443	50247	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:35.161035061 CET	50247	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:35.161035061 CET	50247	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:35.169230938 CET	443	50246	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:35.169317007 CET	443	50246	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:35.169399977 CET	50246	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:35.169642925 CET	50246	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:35.169657946 CET	443	50246	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:35.206831932 CET	443	50242	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:35.207026005 CET	443	50242	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:35.207108021 CET	50242	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:35.209471941 CET	50242	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:35.209491968 CET	443	50242	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:35.218132019 CET	50257	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:35.218158960 CET	443	50257	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:35.218231916 CET	50257	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:35.218430042 CET	50257	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:35.218441963 CET	443	50257	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:35.526890039 CET	443	50251	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.527246952 CET	50251	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.527287960 CET	443	50251	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.527651072 CET	443	50251	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.528763056 CET	50251	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.528840065 CET	443	50251	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.528928041 CET	50251	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.528949976 CET	443	50251	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.535000086 CET	443	50253	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.535250902 CET	50253	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.535281897 CET	443	50253	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.536434889 CET	443	50253	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.536798000 CET	50253	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.536961079 CET	50253	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.536978960 CET	443	50253	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.574578047 CET	50251	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.589730024 CET	50253	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.720520020 CET	443	50251	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.720561028 CET	443	50251	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.720594883 CET	443	50251	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.720623016 CET	443	50251	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.720623970 CET	50251	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.720643997 CET	443	50251	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.720659971 CET	443	50251	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.720689058 CET	50251	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.720710039 CET	50251	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.776557922 CET	50258	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:35.776598930 CET	443	50258	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:35.776686907 CET	50258	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:35.777100086 CET	50258	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:35.777115107 CET	443	50258	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:35.809040070 CET	443	50253	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.809108019 CET	443	50253	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.809128046 CET	443	50253	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.809164047 CET	50253	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.809169054 CET	443	50253	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.809189081 CET	443	50253	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.809210062 CET	443	50253	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.809212923 CET	50253	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.809231043 CET	50253	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.809238911 CET	443	50253	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.809252977 CET	50253	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.809293985 CET	50253	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.809582949 CET	443	50251	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.809621096 CET	443	50251	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.809668064 CET	50251	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.809701920 CET	443	50251	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.809741974 CET	50251	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.812203884 CET	443	50251	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.812223911 CET	443	50251	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.812263012 CET	50251	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.812271118 CET	443	50251	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.812300920 CET	50251	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.812326908 CET	50251	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.886766911 CET	443	50257	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:35.887034893 CET	50257	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:35.887058020 CET	443	50257	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:35.887458086 CET	443	50257	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:35.887831926 CET	50257	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:35.887892008 CET	443	50257	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:35.887963057 CET	50257	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:35.896390915 CET	443	50253	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.896414042 CET	443	50253	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.896445036 CET	443	50253	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.896466970 CET	50253	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.896488905 CET	443	50253	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.896513939 CET	50253	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.896543980 CET	50253	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.898629904 CET	443	50253	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.898674011 CET	443	50253	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.898703098 CET	50253	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.898721933 CET	443	50253	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.898888111 CET	50253	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.899015903 CET	443	50251	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.899068117 CET	443	50251	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.899077892 CET	50251	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.899092913 CET	443	50251	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.899101019 CET	50251	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.899132013 CET	50251	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.899321079 CET	50251	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.899338961 CET	443	50251	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.931327105 CET	443	50257	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:35.980412006 CET	443	50253	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.980462074 CET	443	50253	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.980484009 CET	50253	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.980494976 CET	443	50253	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.980535030 CET	50253	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.985467911 CET	50253	443	192.168.2.10	35.71.185.236
Jan 10, 2025 00:22:35.985486984 CET	443	50253	35.71.185.236	192.168.2.10
Jan 10, 2025 00:22:35.990262985 CET	50260	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:35.990292072 CET	443	50260	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:35.990503073 CET	50260	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:35.990802050 CET	50260	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:35.990816116 CET	443	50260	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:36.409925938 CET	443	50258	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:36.411273003 CET	50258	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:36.411294937 CET	443	50258	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:36.411717892 CET	443	50258	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:36.421308041 CET	50258	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:36.421468019 CET	443	50258	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:36.434237957 CET	50258	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:36.434284925 CET	443	50258	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:36.481683969 CET	443	50257	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:36.481940985 CET	443	50257	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:36.482016087 CET	50257	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:36.530138969 CET	50257	443	192.168.2.10	18.66.147.56
Jan 10, 2025 00:22:36.530165911 CET	443	50257	18.66.147.56	192.168.2.10
Jan 10, 2025 00:22:36.630099058 CET	443	50258	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:36.630193949 CET	443	50258	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:36.630244970 CET	50258	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:36.630827904 CET	50258	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:36.630846977 CET	443	50258	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:36.635169029 CET	50264	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:36.635210991 CET	443	50264	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:36.635304928 CET	50264	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:36.635566950 CET	50264	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:36.635577917 CET	443	50264	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:36.635915041 CET	49776	80	192.168.2.10	18.66.121.190
Jan 10, 2025 00:22:36.641889095 CET	80	49776	18.66.121.190	192.168.2.10
Jan 10, 2025 00:22:36.642416000 CET	443	50260	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:36.642710924 CET	50260	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:36.642739058 CET	443	50260	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:36.643095970 CET	443	50260	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:36.643440008 CET	50260	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:36.643515110 CET	443	50260	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:36.643642902 CET	50260	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:36.643675089 CET	443	50260	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:36.845407009 CET	443	50260	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:36.845499992 CET	443	50260	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:36.845591068 CET	50260	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:36.847872972 CET	50260	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:36.847896099 CET	443	50260	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:36.851603031 CET	50265	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:36.851660013 CET	443	50265	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:36.851797104 CET	50265	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:36.852086067 CET	50265	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:36.852099895 CET	443	50265	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:36.855032921 CET	49779	80	192.168.2.10	18.66.121.190
Jan 10, 2025 00:22:36.861622095 CET	80	49779	18.66.121.190	192.168.2.10
Jan 10, 2025 00:22:37.285028934 CET	443	50264	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:37.285393953 CET	50264	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:37.285419941 CET	443	50264	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:37.285769939 CET	443	50264	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:37.286096096 CET	50264	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:37.286168098 CET	443	50264	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:37.286274910 CET	50264	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:37.286294937 CET	443	50264	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:37.354358912 CET	49783	80	192.168.2.10	18.66.121.190
Jan 10, 2025 00:22:37.360904932 CET	80	49783	18.66.121.190	192.168.2.10
Jan 10, 2025 00:22:37.488938093 CET	443	50265	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:37.489253998 CET	50265	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:37.489267111 CET	443	50265	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:37.489665985 CET	443	50265	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:37.490159988 CET	50265	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:37.490226030 CET	443	50265	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:37.490278006 CET	50265	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:37.490300894 CET	443	50265	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:37.490828991 CET	443	50264	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:37.491020918 CET	443	50264	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:37.491076946 CET	50264	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:37.491980076 CET	50264	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:37.491997004 CET	443	50264	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:37.541938066 CET	50265	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:37.688930988 CET	443	50265	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:37.689038992 CET	443	50265	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:37.689124107 CET	50265	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:37.690303087 CET	50265	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:37.690349102 CET	443	50265	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:38.857837915 CET	50266	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:38.857872009 CET	443	50266	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:38.858210087 CET	50266	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:38.858831882 CET	50266	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:38.858855009 CET	443	50266	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:38.861226082 CET	50267	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:38.861269951 CET	443	50267	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:38.861557007 CET	50267	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:38.861882925 CET	50267	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:38.861901045 CET	443	50267	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:38.973920107 CET	50268	443	192.168.2.10	104.18.66.57
Jan 10, 2025 00:22:38.973959923 CET	443	50268	104.18.66.57	192.168.2.10
Jan 10, 2025 00:22:38.974021912 CET	50268	443	192.168.2.10	104.18.66.57
Jan 10, 2025 00:22:38.974329948 CET	50268	443	192.168.2.10	104.18.66.57
Jan 10, 2025 00:22:38.974339008 CET	443	50268	104.18.66.57	192.168.2.10
Jan 10, 2025 00:22:38.975261927 CET	50269	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:38.975303888 CET	443	50269	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:38.975385904 CET	50269	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:38.975688934 CET	50270	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:38.975738049 CET	443	50270	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:38.975780964 CET	50270	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:38.976094007 CET	50269	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:38.976109982 CET	443	50269	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:38.976547956 CET	50270	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:38.976567984 CET	443	50270	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:39.294598103 CET	50271	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:39.294648886 CET	443	50271	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:39.294862032 CET	50271	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:39.295452118 CET	50271	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:39.295464993 CET	443	50271	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:39.445811033 CET	443	50269	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:39.445904016 CET	443	50270	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:39.446248055 CET	50269	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:39.446275949 CET	443	50269	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:39.446279049 CET	50270	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:39.446300030 CET	443	50270	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:39.446611881 CET	443	50269	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:39.446696043 CET	443	50270	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:39.446959972 CET	50269	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:39.447010040 CET	443	50269	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:39.447236061 CET	50270	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:39.447345972 CET	443	50270	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:39.447382927 CET	50269	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:39.447396994 CET	50269	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:39.447407007 CET	443	50269	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:39.447457075 CET	50270	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:39.448666096 CET	443	50268	104.18.66.57	192.168.2.10
Jan 10, 2025 00:22:39.448857069 CET	50268	443	192.168.2.10	104.18.66.57
Jan 10, 2025 00:22:39.448868036 CET	443	50268	104.18.66.57	192.168.2.10
Jan 10, 2025 00:22:39.449181080 CET	443	50268	104.18.66.57	192.168.2.10
Jan 10, 2025 00:22:39.449743986 CET	50268	443	192.168.2.10	104.18.66.57
Jan 10, 2025 00:22:39.449806929 CET	443	50268	104.18.66.57	192.168.2.10
Jan 10, 2025 00:22:39.450516939 CET	50268	443	192.168.2.10	104.18.66.57
Jan 10, 2025 00:22:39.450666904 CET	50268	443	192.168.2.10	104.18.66.57
Jan 10, 2025 00:22:39.450670958 CET	443	50268	104.18.66.57	192.168.2.10
Jan 10, 2025 00:22:39.495337009 CET	443	50270	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:39.554853916 CET	443	50268	104.18.66.57	192.168.2.10
Jan 10, 2025 00:22:39.554927111 CET	443	50268	104.18.66.57	192.168.2.10
Jan 10, 2025 00:22:39.554994106 CET	50268	443	192.168.2.10	104.18.66.57
Jan 10, 2025 00:22:39.555423021 CET	50268	443	192.168.2.10	104.18.66.57
Jan 10, 2025 00:22:39.555440903 CET	443	50268	104.18.66.57	192.168.2.10
Jan 10, 2025 00:22:39.577372074 CET	443	50269	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:39.577466965 CET	443	50269	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:39.577545881 CET	50269	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:39.577958107 CET	50269	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:39.577974081 CET	443	50269	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:39.583735943 CET	443	50270	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:39.583879948 CET	443	50270	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:39.583939075 CET	50270	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:39.584299088 CET	50270	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:22:39.584319115 CET	443	50270	162.247.243.29	192.168.2.10
Jan 10, 2025 00:22:39.647166967 CET	443	50266	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:39.647439003 CET	50266	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:39.647455931 CET	443	50266	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:39.648026943 CET	443	50266	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:39.648354053 CET	50266	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:39.648432970 CET	443	50266	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:39.648642063 CET	50266	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:39.656687021 CET	443	50267	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:39.656954050 CET	50267	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:39.656982899 CET	443	50267	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:39.657373905 CET	443	50267	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:39.657711983 CET	50267	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:39.657784939 CET	443	50267	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:39.657850981 CET	50267	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:39.657891989 CET	50267	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:39.657910109 CET	443	50267	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:39.695327044 CET	443	50266	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:39.838867903 CET	443	50267	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:39.838943958 CET	443	50267	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:39.839127064 CET	50267	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:39.839548111 CET	50267	443	192.168.2.10	54.75.69.192
Jan 10, 2025 00:22:39.839565992 CET	443	50267	54.75.69.192	192.168.2.10
Jan 10, 2025 00:22:39.844094038 CET	50273	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:39.844136953 CET	443	50273	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:39.844528913 CET	50273	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:39.845057011 CET	50273	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:39.845072985 CET	443	50273	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:39.941241980 CET	443	50266	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:39.941329956 CET	443	50266	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:39.941371918 CET	50266	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:39.942373037 CET	50266	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:39.942380905 CET	443	50266	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:39.944241047 CET	50274	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:39.944253922 CET	443	50274	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:39.944319963 CET	50274	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:39.944569111 CET	50274	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:39.944576025 CET	443	50274	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:40.015827894 CET	443	50271	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:40.016134977 CET	50271	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:40.016155958 CET	443	50271	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:40.016547918 CET	443	50271	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:40.016886950 CET	50271	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:40.016952038 CET	443	50271	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:40.017054081 CET	50271	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:40.017064095 CET	443	50271	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:40.291915894 CET	443	50271	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:40.292010069 CET	443	50271	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:40.292078018 CET	50271	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:40.292733908 CET	50271	443	192.168.2.10	3.74.15.141
Jan 10, 2025 00:22:40.292768955 CET	443	50271	3.74.15.141	192.168.2.10
Jan 10, 2025 00:22:40.677093029 CET	443	50273	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:40.677437067 CET	50273	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:40.677453995 CET	443	50273	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:40.677822113 CET	443	50273	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:40.678678036 CET	50273	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:40.678711891 CET	50273	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:40.678770065 CET	443	50273	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:40.729593992 CET	50273	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:40.784862995 CET	443	50274	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:40.785242081 CET	50274	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:40.785269022 CET	443	50274	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:40.785656929 CET	443	50274	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:40.786156893 CET	50274	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:40.786226034 CET	443	50274	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:40.786519051 CET	50274	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:40.786550045 CET	443	50274	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:40.854558945 CET	443	50273	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:40.854640007 CET	443	50273	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:40.854792118 CET	50273	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:40.855601072 CET	50273	443	192.168.2.10	3.248.162.96
Jan 10, 2025 00:22:40.855616093 CET	443	50273	3.248.162.96	192.168.2.10
Jan 10, 2025 00:22:41.078207016 CET	443	50274	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:41.078305006 CET	443	50274	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:41.078388929 CET	50274	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:41.090728045 CET	50274	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:41.090739965 CET	443	50274	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:46.213270903 CET	50278	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:46.213309050 CET	443	50278	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:46.213531971 CET	50278	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:46.214165926 CET	50278	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:46.214179039 CET	443	50278	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:46.224592924 CET	50279	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:46.224622965 CET	443	50279	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:46.224683046 CET	50279	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:46.225188971 CET	50279	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:46.225202084 CET	443	50279	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:46.225615978 CET	50280	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:46.225646973 CET	443	50280	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:46.225713015 CET	50280	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:46.225985050 CET	50280	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:46.225999117 CET	443	50280	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:46.371568918 CET	50281	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:46.371608973 CET	443	50281	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:46.371752024 CET	50281	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:46.372040033 CET	50281	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:46.372051954 CET	443	50281	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:46.923018932 CET	443	50278	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:46.923451900 CET	50278	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:46.923465967 CET	443	50278	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:46.923790932 CET	443	50278	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:46.924299002 CET	50278	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:46.924299002 CET	50278	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:46.924316883 CET	443	50278	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:46.924366951 CET	443	50278	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:46.929559946 CET	443	50280	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:46.929763079 CET	50280	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:46.929779053 CET	443	50280	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:46.930140018 CET	443	50280	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:46.930425882 CET	50280	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:46.930480003 CET	443	50280	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:46.930615902 CET	50280	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:46.935467958 CET	443	50279	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:46.935714960 CET	50279	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:46.935725927 CET	443	50279	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:46.936079025 CET	443	50279	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:46.936398029 CET	50279	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:46.936445951 CET	443	50279	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:46.936536074 CET	50279	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:46.964168072 CET	50278	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:46.971364021 CET	443	50280	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:46.983325958 CET	443	50279	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:47.057039022 CET	443	50281	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:47.057375908 CET	50281	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:47.057409048 CET	443	50281	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:47.058718920 CET	443	50281	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:47.059094906 CET	50281	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:47.059221029 CET	443	50281	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:47.104796886 CET	50281	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:47.123230934 CET	443	50278	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:47.123374939 CET	443	50278	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:47.123455048 CET	50278	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:47.124166965 CET	50278	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:47.124186039 CET	443	50278	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:47.159610987 CET	50282	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:47.159667015 CET	443	50282	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:47.159992933 CET	50282	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:47.160212040 CET	50282	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:47.160228968 CET	443	50282	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:47.210125923 CET	443	50280	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:47.210273981 CET	443	50280	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:47.210500956 CET	50280	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:47.211183071 CET	50280	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:47.211206913 CET	443	50280	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:47.211220026 CET	50280	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:47.211280107 CET	50280	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:47.217253923 CET	443	50279	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:47.217331886 CET	443	50279	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:47.217493057 CET	50279	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:47.217727900 CET	50279	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:47.217747927 CET	443	50279	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:47.217757940 CET	50279	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:47.218040943 CET	50279	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:47.815793037 CET	443	50282	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:47.816199064 CET	50282	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:47.816222906 CET	443	50282	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:47.816596985 CET	443	50282	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:47.817161083 CET	50282	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:47.817250013 CET	443	50282	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:47.817325115 CET	50282	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:47.817349911 CET	443	50282	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:47.869983912 CET	50282	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:48.017504930 CET	443	50282	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:48.017666101 CET	443	50282	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:48.017905951 CET	50282	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:48.018320084 CET	50282	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:48.018330097 CET	443	50282	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:48.021226883 CET	50284	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:48.021256924 CET	443	50284	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:48.021333933 CET	50284	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:48.021553040 CET	50284	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:48.021567106 CET	443	50284	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:48.677088976 CET	443	50284	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:48.677380085 CET	50284	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:48.677392006 CET	443	50284	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:48.677825928 CET	443	50284	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:48.678138971 CET	50284	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:48.678195000 CET	443	50284	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:48.678293943 CET	50284	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:48.678318024 CET	443	50284	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:48.878668070 CET	443	50284	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:48.878753901 CET	443	50284	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:48.878799915 CET	50284	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:48.879477978 CET	50284	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:48.879497051 CET	443	50284	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:50.660721064 CET	50285	443	192.168.2.10	35.190.80.1
Jan 10, 2025 00:22:50.660782099 CET	443	50285	35.190.80.1	192.168.2.10
Jan 10, 2025 00:22:50.660846949 CET	50285	443	192.168.2.10	35.190.80.1
Jan 10, 2025 00:22:50.661070108 CET	50285	443	192.168.2.10	35.190.80.1
Jan 10, 2025 00:22:50.661084890 CET	443	50285	35.190.80.1	192.168.2.10
Jan 10, 2025 00:22:50.982420921 CET	50286	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:50.982461929 CET	443	50286	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:50.982522964 CET	50286	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:50.982830048 CET	50286	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:50.982845068 CET	443	50286	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:51.121982098 CET	443	50285	35.190.80.1	192.168.2.10
Jan 10, 2025 00:22:51.122325897 CET	50285	443	192.168.2.10	35.190.80.1
Jan 10, 2025 00:22:51.122348070 CET	443	50285	35.190.80.1	192.168.2.10
Jan 10, 2025 00:22:51.123608112 CET	443	50285	35.190.80.1	192.168.2.10
Jan 10, 2025 00:22:51.123676062 CET	50285	443	192.168.2.10	35.190.80.1
Jan 10, 2025 00:22:51.124994040 CET	50285	443	192.168.2.10	35.190.80.1
Jan 10, 2025 00:22:51.125077963 CET	443	50285	35.190.80.1	192.168.2.10
Jan 10, 2025 00:22:51.125176907 CET	50285	443	192.168.2.10	35.190.80.1
Jan 10, 2025 00:22:51.125185966 CET	443	50285	35.190.80.1	192.168.2.10
Jan 10, 2025 00:22:51.166801929 CET	50285	443	192.168.2.10	35.190.80.1
Jan 10, 2025 00:22:51.246071100 CET	443	50285	35.190.80.1	192.168.2.10
Jan 10, 2025 00:22:51.246202946 CET	443	50285	35.190.80.1	192.168.2.10
Jan 10, 2025 00:22:51.246309996 CET	50285	443	192.168.2.10	35.190.80.1
Jan 10, 2025 00:22:51.246454954 CET	50285	443	192.168.2.10	35.190.80.1
Jan 10, 2025 00:22:51.246470928 CET	443	50285	35.190.80.1	192.168.2.10
Jan 10, 2025 00:22:51.246519089 CET	50285	443	192.168.2.10	35.190.80.1
Jan 10, 2025 00:22:51.246526957 CET	50285	443	192.168.2.10	35.190.80.1
Jan 10, 2025 00:22:51.247200012 CET	50288	443	192.168.2.10	35.190.80.1
Jan 10, 2025 00:22:51.247245073 CET	443	50288	35.190.80.1	192.168.2.10
Jan 10, 2025 00:22:51.247301102 CET	50288	443	192.168.2.10	35.190.80.1
Jan 10, 2025 00:22:51.247505903 CET	50288	443	192.168.2.10	35.190.80.1
Jan 10, 2025 00:22:51.247522116 CET	443	50288	35.190.80.1	192.168.2.10
Jan 10, 2025 00:22:51.605180979 CET	443	50286	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:51.605473995 CET	50286	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:51.605495930 CET	443	50286	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:51.605865002 CET	443	50286	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:51.606535912 CET	50286	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:51.606605053 CET	443	50286	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:51.606873989 CET	50286	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:51.647326946 CET	443	50286	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:51.721237898 CET	443	50288	35.190.80.1	192.168.2.10
Jan 10, 2025 00:22:51.721553087 CET	50288	443	192.168.2.10	35.190.80.1
Jan 10, 2025 00:22:51.721575975 CET	443	50288	35.190.80.1	192.168.2.10
Jan 10, 2025 00:22:51.721916914 CET	443	50288	35.190.80.1	192.168.2.10
Jan 10, 2025 00:22:51.722244978 CET	50288	443	192.168.2.10	35.190.80.1
Jan 10, 2025 00:22:51.722300053 CET	443	50288	35.190.80.1	192.168.2.10
Jan 10, 2025 00:22:51.722379923 CET	50288	443	192.168.2.10	35.190.80.1
Jan 10, 2025 00:22:51.767333031 CET	443	50288	35.190.80.1	192.168.2.10
Jan 10, 2025 00:22:51.853996038 CET	443	50288	35.190.80.1	192.168.2.10
Jan 10, 2025 00:22:51.854162931 CET	443	50288	35.190.80.1	192.168.2.10
Jan 10, 2025 00:22:51.854402065 CET	50288	443	192.168.2.10	35.190.80.1
Jan 10, 2025 00:22:51.854427099 CET	443	50288	35.190.80.1	192.168.2.10
Jan 10, 2025 00:22:51.854441881 CET	50288	443	192.168.2.10	35.190.80.1
Jan 10, 2025 00:22:51.854500055 CET	50288	443	192.168.2.10	35.190.80.1
Jan 10, 2025 00:22:51.898502111 CET	443	50286	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:51.898879051 CET	443	50286	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:51.898940086 CET	50286	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:51.899117947 CET	50286	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:51.899136066 CET	443	50286	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:51.899148941 CET	50286	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:51.900017977 CET	50286	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:51.902978897 CET	50289	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:51.903037071 CET	443	50289	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:51.903367996 CET	50289	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:51.903367996 CET	50289	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:51.903405905 CET	443	50289	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:52.728030920 CET	443	50289	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:52.728358030 CET	50289	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:52.728373051 CET	443	50289	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:52.728710890 CET	443	50289	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:52.729146957 CET	50289	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:52.729202032 CET	443	50289	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:52.729520082 CET	50289	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:52.729542017 CET	443	50289	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:53.020813942 CET	443	50289	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:53.020908117 CET	443	50289	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:53.020952940 CET	50289	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:53.022017956 CET	50289	443	192.168.2.10	141.226.228.48
Jan 10, 2025 00:22:53.022034883 CET	443	50289	141.226.228.48	192.168.2.10
Jan 10, 2025 00:22:55.175242901 CET	50291	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:55.175277948 CET	443	50291	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:55.175736904 CET	50291	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:55.176019907 CET	50291	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:55.176033020 CET	443	50291	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:55.189270020 CET	50292	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:55.189313889 CET	443	50292	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:55.189373016 CET	50292	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:55.189583063 CET	50292	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:55.189593077 CET	443	50292	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:55.190759897 CET	50293	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:55.190795898 CET	443	50293	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:55.190927029 CET	50293	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:55.191091061 CET	50293	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:55.191111088 CET	443	50293	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:55.815828085 CET	443	50291	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:55.816128969 CET	50291	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:55.816140890 CET	443	50291	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:55.816469908 CET	443	50291	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:55.816823959 CET	50291	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:55.816874981 CET	443	50291	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:55.817018986 CET	50291	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:55.817038059 CET	443	50291	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:55.820847988 CET	443	50292	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:55.825022936 CET	50292	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:55.825045109 CET	443	50292	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:55.825474977 CET	443	50292	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:55.825874090 CET	50292	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:55.825942039 CET	443	50292	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:55.826129913 CET	50292	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:55.867331028 CET	443	50292	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:55.873811007 CET	443	50293	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:55.874135971 CET	50293	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:55.874175072 CET	443	50293	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:55.874560118 CET	443	50293	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:55.874993086 CET	50293	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:55.875057936 CET	443	50293	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:55.875088930 CET	50293	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:55.917083025 CET	50293	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:55.917114019 CET	443	50293	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:56.019082069 CET	443	50291	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:56.019406080 CET	443	50291	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:56.019462109 CET	50291	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:56.020045996 CET	50291	443	192.168.2.10	142.250.186.130
Jan 10, 2025 00:22:56.020061970 CET	443	50291	142.250.186.130	192.168.2.10
Jan 10, 2025 00:22:56.038500071 CET	50294	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:56.038536072 CET	443	50294	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:56.038686037 CET	50294	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:56.038964987 CET	50294	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:56.038984060 CET	443	50294	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:56.098009109 CET	443	50292	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:56.098076105 CET	443	50292	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:56.098200083 CET	50292	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:56.098814011 CET	50292	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:56.098826885 CET	443	50292	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:56.155131102 CET	443	50293	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:56.155201912 CET	443	50293	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:56.155448914 CET	50293	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:56.155714035 CET	50293	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:56.155734062 CET	443	50293	142.250.186.174	192.168.2.10
Jan 10, 2025 00:22:56.155752897 CET	50293	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:56.155778885 CET	50293	443	192.168.2.10	142.250.186.174
Jan 10, 2025 00:22:56.681751013 CET	443	50294	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:56.681988001 CET	50294	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:56.682003975 CET	443	50294	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:56.682370901 CET	443	50294	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:56.683420897 CET	50294	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:56.683516026 CET	443	50294	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:56.683568001 CET	50294	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:56.683588028 CET	443	50294	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:56.729330063 CET	50294	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:56.884318113 CET	443	50294	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:56.884788990 CET	443	50294	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:56.887933016 CET	50294	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:56.944504023 CET	50294	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:56.944541931 CET	443	50294	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:56.965742111 CET	443	50281	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:56.965817928 CET	443	50281	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:56.965884924 CET	50281	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:57.026227951 CET	50281	443	192.168.2.10	142.250.74.196
Jan 10, 2025 00:22:57.026262999 CET	443	50281	142.250.74.196	192.168.2.10
Jan 10, 2025 00:22:57.026676893 CET	50296	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:57.026727915 CET	443	50296	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:57.026789904 CET	50296	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:57.027035952 CET	50296	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:57.027051926 CET	443	50296	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:57.668551922 CET	443	50296	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:57.668865919 CET	50296	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:57.668894053 CET	443	50296	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:57.669250965 CET	443	50296	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:57.669589043 CET	50296	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:57.669655085 CET	443	50296	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:57.669789076 CET	50296	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:57.669816971 CET	443	50296	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:57.871714115 CET	443	50296	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:57.872345924 CET	443	50296	172.217.16.196	192.168.2.10
Jan 10, 2025 00:22:57.872394085 CET	50296	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:57.872885942 CET	50296	443	192.168.2.10	172.217.16.196
Jan 10, 2025 00:22:57.872905016 CET	443	50296	172.217.16.196	192.168.2.10
Jan 10, 2025 00:23:04.294332981 CET	50298	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:23:04.294388056 CET	443	50298	162.247.243.29	192.168.2.10
Jan 10, 2025 00:23:04.294461966 CET	50298	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:23:04.295325041 CET	50298	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:23:04.295341015 CET	443	50298	162.247.243.29	192.168.2.10
Jan 10, 2025 00:23:04.765867949 CET	443	50298	162.247.243.29	192.168.2.10
Jan 10, 2025 00:23:04.766161919 CET	50298	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:23:04.766185999 CET	443	50298	162.247.243.29	192.168.2.10
Jan 10, 2025 00:23:04.766536951 CET	443	50298	162.247.243.29	192.168.2.10
Jan 10, 2025 00:23:04.766844034 CET	50298	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:23:04.766904116 CET	443	50298	162.247.243.29	192.168.2.10
Jan 10, 2025 00:23:04.766995907 CET	50298	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:23:04.807331085 CET	443	50298	162.247.243.29	192.168.2.10
Jan 10, 2025 00:23:04.903367043 CET	443	50298	162.247.243.29	192.168.2.10
Jan 10, 2025 00:23:04.903476000 CET	443	50298	162.247.243.29	192.168.2.10
Jan 10, 2025 00:23:04.903529882 CET	50298	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:23:04.904174089 CET	50298	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:23:04.904180050 CET	443	50298	162.247.243.29	192.168.2.10
Jan 10, 2025 00:23:04.907373905 CET	50299	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:23:04.907421112 CET	443	50299	162.247.243.29	192.168.2.10
Jan 10, 2025 00:23:04.907481909 CET	50299	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:23:04.907757998 CET	50299	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:23:04.907773972 CET	443	50299	162.247.243.29	192.168.2.10
Jan 10, 2025 00:23:05.382363081 CET	443	50299	162.247.243.29	192.168.2.10
Jan 10, 2025 00:23:05.382847071 CET	50299	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:23:05.382865906 CET	443	50299	162.247.243.29	192.168.2.10
Jan 10, 2025 00:23:05.383223057 CET	443	50299	162.247.243.29	192.168.2.10
Jan 10, 2025 00:23:05.384052992 CET	50299	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:23:05.384124041 CET	443	50299	162.247.243.29	192.168.2.10
Jan 10, 2025 00:23:05.384216070 CET	50299	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:23:05.427330971 CET	443	50299	162.247.243.29	192.168.2.10
Jan 10, 2025 00:23:05.512696028 CET	443	50299	162.247.243.29	192.168.2.10
Jan 10, 2025 00:23:05.512825966 CET	443	50299	162.247.243.29	192.168.2.10
Jan 10, 2025 00:23:05.512979984 CET	50299	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:23:05.514328957 CET	50299	443	192.168.2.10	162.247.243.29
Jan 10, 2025 00:23:05.514339924 CET	443	50299	162.247.243.29	192.168.2.10

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 10, 2025 00:21:41.723079920 CET	53	54472	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:41.781565905 CET	53	63147	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:42.926929951 CET	53	58193	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:46.315264940 CET	54260	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:46.316010952 CET	61054	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:46.321819067 CET	53	54260	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:46.323056936 CET	53	61054	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:49.157761097 CET	54874	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:49.158425093 CET	62194	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:49.170315981 CET	53	54874	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:49.170435905 CET	53	62194	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:49.957226992 CET	60291	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:49.957380056 CET	56554	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:49.957990885 CET	50042	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:49.958153009 CET	53661	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:49.965805054 CET	53	60291	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:49.966809034 CET	53	53661	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:49.966824055 CET	53	56554	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:49.967678070 CET	53	50042	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:50.646264076 CET	64944	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:50.646512032 CET	57611	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:50.656939983 CET	53	57611	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:50.657147884 CET	53	64944	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:50.852556944 CET	59666	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:50.852725983 CET	58088	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:50.856631994 CET	54569	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:50.856802940 CET	60583	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:50.861618996 CET	53	58088	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:50.864362001 CET	53	59666	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:50.868140936 CET	53	60583	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:50.870131969 CET	53	54569	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:50.882703066 CET	52886	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:50.882870913 CET	49860	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:50.891544104 CET	53	52886	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:50.891706944 CET	53	49860	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:50.894885063 CET	53835	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:50.895168066 CET	50368	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:50.903582096 CET	53	53835	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:50.904128075 CET	53	50368	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:51.147233963 CET	65274	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:51.147454023 CET	62162	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:51.154053926 CET	53	65274	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:51.154244900 CET	53	62162	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:51.470796108 CET	52460	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:51.470957041 CET	63815	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:51.549597025 CET	53	52460	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:51.549621105 CET	53	63815	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:51.634675980 CET	54412	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:51.634807110 CET	65048	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:51.643503904 CET	53	65048	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:51.644527912 CET	53	54412	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:51.874358892 CET	61967	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:51.874639988 CET	49397	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:51.881246090 CET	53	61967	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:51.881479979 CET	53	49397	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:52.523521900 CET	62784	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:52.523703098 CET	51916	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:52.532047987 CET	53	62784	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:52.534385920 CET	53	51916	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:52.560709953 CET	52472	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:52.560710907 CET	59193	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:52.568510056 CET	53	52472	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:52.569274902 CET	53	59193	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:52.686849117 CET	58412	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:52.687283993 CET	58309	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:52.697185993 CET	53	58309	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:52.705574989 CET	53	58412	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:54.719597101 CET	58711	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:54.719819069 CET	56987	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:54.728467941 CET	53	58711	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:54.728830099 CET	53	56987	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:54.947223902 CET	52217	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:54.947446108 CET	57225	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:54.954293966 CET	53	52217	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:54.957098007 CET	53	57225	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:55.972579956 CET	53203	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:55.972891092 CET	50510	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:21:55.981151104 CET	53	50510	1.1.1.1	192.168.2.10
Jan 10, 2025 00:21:55.981201887 CET	53	53203	1.1.1.1	192.168.2.10
Jan 10, 2025 00:22:00.032778978 CET	53	61937	1.1.1.1	192.168.2.10
Jan 10, 2025 00:22:06.011574984 CET	51823	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:22:06.011730909 CET	64242	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:22:06.022901058 CET	53	51823	1.1.1.1	192.168.2.10
Jan 10, 2025 00:22:06.026422977 CET	53	64242	1.1.1.1	192.168.2.10
Jan 10, 2025 00:22:08.707617998 CET	55502	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:22:08.707819939 CET	60757	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:22:08.713694096 CET	53	61192	1.1.1.1	192.168.2.10
Jan 10, 2025 00:22:08.714435101 CET	53	55502	1.1.1.1	192.168.2.10
Jan 10, 2025 00:22:08.714449883 CET	53	60757	1.1.1.1	192.168.2.10
Jan 10, 2025 00:22:09.793333054 CET	53	50581	1.1.1.1	192.168.2.10
Jan 10, 2025 00:22:19.061584949 CET	53	55523	1.1.1.1	192.168.2.10
Jan 10, 2025 00:22:19.196332932 CET	63834	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:22:19.197026014 CET	64944	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:22:19.239860058 CET	53	63834	1.1.1.1	192.168.2.10
Jan 10, 2025 00:22:19.513891935 CET	53	64944	1.1.1.1	192.168.2.10
Jan 10, 2025 00:22:20.133769035 CET	64574	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:22:20.133917093 CET	57480	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:22:20.227649927 CET	54823	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:22:20.227915049 CET	53666	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:22:21.287307978 CET	63462	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:22:21.287671089 CET	50089	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:22:21.302500963 CET	53	50089	1.1.1.1	192.168.2.10
Jan 10, 2025 00:22:21.313191891 CET	53	63462	1.1.1.1	192.168.2.10
Jan 10, 2025 00:22:21.889028072 CET	50775	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:22:21.889473915 CET	52469	53	192.168.2.10	1.1.1.1
Jan 10, 2025 00:22:21.909856081 CET	53	52469	1.1.1.1	192.168.2.10
Jan 10, 2025 00:22:21.918561935 CET	53	50775	1.1.1.1	192.168.2.10

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 10, 2025 00:21:46.315264940 CET	192.168.2.10	1.1.1.1	0x4e19	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:46.316010952 CET	192.168.2.10	1.1.1.1	0x2a2c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 10, 2025 00:21:49.157761097 CET	192.168.2.10	1.1.1.1	0x1b89	Standard query (0)	api.myuhchvision.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:49.158425093 CET	192.168.2.10	1.1.1.1	0x5896	Standard query (0)	api.myuhchvision.com	65	IN (0x0001)	false
Jan 10, 2025 00:21:49.957226992 CET	192.168.2.10	1.1.1.1	0x3f9a	Standard query (0)	c.parkingcrew.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:49.957380056 CET	192.168.2.10	1.1.1.1	0xfb49	Standard query (0)	c.parkingcrew.net	65	IN (0x0001)	false
Jan 10, 2025 00:21:49.957990885 CET	192.168.2.10	1.1.1.1	0x6cb9	Standard query (0)	euob.netgreencolumn.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:49.958153009 CET	192.168.2.10	1.1.1.1	0xfc1f	Standard query (0)	euob.netgreencolumn.com	65	IN (0x0001)	false
Jan 10, 2025 00:21:50.646264076 CET	192.168.2.10	1.1.1.1	0x8867	Standard query (0)	c.parkingcrew.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:50.646512032 CET	192.168.2.10	1.1.1.1	0x5104	Standard query (0)	c.parkingcrew.net	65	IN (0x0001)	false
Jan 10, 2025 00:21:50.852556944 CET	192.168.2.10	1.1.1.1	0x2488	Standard query (0)	d38psrni17bvxu.cloudfront.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:50.852725983 CET	192.168.2.10	1.1.1.1	0xd4fc	Standard query (0)	d38psrni17bvxu.cloudfront.net	65	IN (0x0001)	false
Jan 10, 2025 00:21:50.856631994 CET	192.168.2.10	1.1.1.1	0x9244	Standard query (0)	api.myuhchvision.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:50.856802940 CET	192.168.2.10	1.1.1.1	0xbea3	Standard query (0)	api.myuhchvision.com	65	IN (0x0001)	false
Jan 10, 2025 00:21:50.882703066 CET	192.168.2.10	1.1.1.1	0xdf2e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:50.882870913 CET	192.168.2.10	1.1.1.1	0xfbeb	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 10, 2025 00:21:50.894885063 CET	192.168.2.10	1.1.1.1	0xe78a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:50.895168066 CET	192.168.2.10	1.1.1.1	0xb89c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 10, 2025 00:21:51.147233963 CET	192.168.2.10	1.1.1.1	0xf6d5	Standard query (0)	euob.netgreencolumn.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:51.147454023 CET	192.168.2.10	1.1.1.1	0x4e50	Standard query (0)	euob.netgreencolumn.com	65	IN (0x0001)	false
Jan 10, 2025 00:21:51.470796108 CET	192.168.2.10	1.1.1.1	0xe606	Standard query (0)	obseu.netgreencolumn.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:51.470957041 CET	192.168.2.10	1.1.1.1	0x5ec6	Standard query (0)	obseu.netgreencolumn.com	65	IN (0x0001)	false
Jan 10, 2025 00:21:51.634675980 CET	192.168.2.10	1.1.1.1	0xfd21	Standard query (0)	d38psrni17bvxu.cloudfront.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:51.634807110 CET	192.168.2.10	1.1.1.1	0x7e7d	Standard query (0)	d38psrni17bvxu.cloudfront.net	65	IN (0x0001)	false
Jan 10, 2025 00:21:51.874358892 CET	192.168.2.10	1.1.1.1	0xc676	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:51.874639988 CET	192.168.2.10	1.1.1.1	0x7337	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Jan 10, 2025 00:21:52.523521900 CET	192.168.2.10	1.1.1.1	0x4a5f	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:52.523703098 CET	192.168.2.10	1.1.1.1	0xf2d9	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Jan 10, 2025 00:21:52.560709953 CET	192.168.2.10	1.1.1.1	0x1b75	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:52.560710907 CET	192.168.2.10	1.1.1.1	0x6607	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 10, 2025 00:21:52.686849117 CET	192.168.2.10	1.1.1.1	0x980	Standard query (0)	obseu.netgreencolumn.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:52.687283993 CET	192.168.2.10	1.1.1.1	0xf030	Standard query (0)	obseu.netgreencolumn.com	65	IN (0x0001)	false
Jan 10, 2025 00:21:54.719597101 CET	192.168.2.10	1.1.1.1	0x4e83	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:54.719819069 CET	192.168.2.10	1.1.1.1	0x7fbb	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Jan 10, 2025 00:21:54.947223902 CET	192.168.2.10	1.1.1.1	0xbd12	Standard query (0)	afs.googleusercontent.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:54.947446108 CET	192.168.2.10	1.1.1.1	0xf35c	Standard query (0)	afs.googleusercontent.com	65	IN (0x0001)	false
Jan 10, 2025 00:21:55.972579956 CET	192.168.2.10	1.1.1.1	0x2975	Standard query (0)	afs.googleusercontent.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:55.972891092 CET	192.168.2.10	1.1.1.1	0xf250	Standard query (0)	afs.googleusercontent.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:06.011574984 CET	192.168.2.10	1.1.1.1	0xf5a9	Standard query (0)	trkpc.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:06.011730909 CET	192.168.2.10	1.1.1.1	0x579e	Standard query (0)	trkpc.net	65	IN (0x0001)	false
Jan 10, 2025 00:22:08.707617998 CET	192.168.2.10	1.1.1.1	0x9d5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:08.707819939 CET	192.168.2.10	1.1.1.1	0x3e30	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:19.196332932 CET	192.168.2.10	1.1.1.1	0xcae9	Standard query (0)	medicare.gohealth.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:19.197026014 CET	192.168.2.10	1.1.1.1	0xdff7	Standard query (0)	medicare.gohealth.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:20.133769035 CET	192.168.2.10	1.1.1.1	0xbbb9	Standard query (0)	p.typekit.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:20.133917093 CET	192.168.2.10	1.1.1.1	0x4c03	Standard query (0)	p.typekit.net	65	IN (0x0001)	false
Jan 10, 2025 00:22:20.227649927 CET	192.168.2.10	1.1.1.1	0xe1d1	Standard query (0)	use.typekit.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:20.227915049 CET	192.168.2.10	1.1.1.1	0x5fa2	Standard query (0)	use.typekit.net	65	IN (0x0001)	false
Jan 10, 2025 00:22:21.287307978 CET	192.168.2.10	1.1.1.1	0x1032	Standard query (0)	cdn.gohealth.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:21.287671089 CET	192.168.2.10	1.1.1.1	0x1723	Standard query (0)	cdn.gohealth.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:21.889028072 CET	192.168.2.10	1.1.1.1	0x9600	Standard query (0)	medicare.gohealth.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:21.889473915 CET	192.168.2.10	1.1.1.1	0x7da0	Standard query (0)	medicare.gohealth.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:22.368216991 CET	192.168.2.10	1.1.1.1	0xd16b	Standard query (0)	cdn.gohealth.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:22.368514061 CET	192.168.2.10	1.1.1.1	0x6927	Standard query (0)	cdn.gohealth.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:24.070990086 CET	192.168.2.10	1.1.1.1	0x4c06	Standard query (0)	cdn.optimizely.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:24.071553946 CET	192.168.2.10	1.1.1.1	0xb823	Standard query (0)	cdn.optimizely.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:25.060878038 CET	192.168.2.10	1.1.1.1	0xfaca	Standard query (0)	cdn.qa.gohealth.xyz	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:25.061064005 CET	192.168.2.10	1.1.1.1	0x3e67	Standard query (0)	cdn.qa.gohealth.xyz	65	IN (0x0001)	false
Jan 10, 2025 00:22:25.079473019 CET	192.168.2.10	1.1.1.1	0xa467	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:25.079685926 CET	192.168.2.10	1.1.1.1	0x87e9	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:25.137563944 CET	192.168.2.10	1.1.1.1	0x4211	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:25.137739897 CET	192.168.2.10	1.1.1.1	0x4ab2	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Jan 10, 2025 00:22:25.150846958 CET	192.168.2.10	1.1.1.1	0xd139	Standard query (0)	cdn.optimizely.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:25.151218891 CET	192.168.2.10	1.1.1.1	0x5ef5	Standard query (0)	cdn.optimizely.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:25.246464014 CET	192.168.2.10	1.1.1.1	0xfe8a	Standard query (0)	a24403740715.cdn.optimizely.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:25.246606112 CET	192.168.2.10	1.1.1.1	0xad4a	Standard query (0)	a24403740715.cdn.optimizely.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:26.018065929 CET	192.168.2.10	1.1.1.1	0xc97	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:26.018425941 CET	192.168.2.10	1.1.1.1	0x5b5f	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:26.234014988 CET	192.168.2.10	1.1.1.1	0xe41b	Standard query (0)	logx.optimizely.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:26.234215975 CET	192.168.2.10	1.1.1.1	0x5ab5	Standard query (0)	logx.optimizely.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:26.692205906 CET	192.168.2.10	1.1.1.1	0xad97	Standard query (0)	utt.impactcdn.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:26.692434072 CET	192.168.2.10	1.1.1.1	0xf1c0	Standard query (0)	utt.impactcdn.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:26.695574045 CET	192.168.2.10	1.1.1.1	0x2334	Standard query (0)	b-code.liadm.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:26.695930004 CET	192.168.2.10	1.1.1.1	0xbf07	Standard query (0)	b-code.liadm.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:26.774446011 CET	192.168.2.10	1.1.1.1	0x85cb	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:26.775024891 CET	192.168.2.10	1.1.1.1	0xc0a3	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Jan 10, 2025 00:22:26.831635952 CET	192.168.2.10	1.1.1.1	0x55e9	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:26.831855059 CET	192.168.2.10	1.1.1.1	0x6c0b	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:27.034451962 CET	192.168.2.10	1.1.1.1	0xfb7d	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:27.034617901 CET	192.168.2.10	1.1.1.1	0x1fa0	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:27.180608034 CET	192.168.2.10	1.1.1.1	0xb95c	Standard query (0)	cdn.qa.gohealth.xyz	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:27.180763006 CET	192.168.2.10	1.1.1.1	0xc22	Standard query (0)	cdn.qa.gohealth.xyz	65	IN (0x0001)	false
Jan 10, 2025 00:22:27.250629902 CET	192.168.2.10	1.1.1.1	0x7afa	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:27.250798941 CET	192.168.2.10	1.1.1.1	0x1504	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Jan 10, 2025 00:22:27.256814957 CET	192.168.2.10	1.1.1.1	0xfcf2	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:27.257126093 CET	192.168.2.10	1.1.1.1	0xc04a	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:27.415302038 CET	192.168.2.10	1.1.1.1	0x2769	Standard query (0)	cdn.taboola.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:27.415673018 CET	192.168.2.10	1.1.1.1	0xa4ae	Standard query (0)	cdn.taboola.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:27.423430920 CET	192.168.2.10	1.1.1.1	0x5d61	Standard query (0)	utt.impactcdn.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:27.424026966 CET	192.168.2.10	1.1.1.1	0x6807	Standard query (0)	utt.impactcdn.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:27.432550907 CET	192.168.2.10	1.1.1.1	0x1d00	Standard query (0)	gohealth.sjv.io	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:27.433799982 CET	192.168.2.10	1.1.1.1	0x2db3	Standard query (0)	gohealth.sjv.io	65	IN (0x0001)	false
Jan 10, 2025 00:22:27.537741899 CET	192.168.2.10	1.1.1.1	0x3c2	Standard query (0)	tags.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:27.537955999 CET	192.168.2.10	1.1.1.1	0x5e07	Standard query (0)	tags.srv.stackadapt.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:27.538824081 CET	192.168.2.10	1.1.1.1	0x3002	Standard query (0)	static.synccake.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:27.539068937 CET	192.168.2.10	1.1.1.1	0x9a51	Standard query (0)	static.synccake.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:27.539592981 CET	192.168.2.10	1.1.1.1	0xff78	Standard query (0)	amplify.outbrain.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:27.539760113 CET	192.168.2.10	1.1.1.1	0xab6d	Standard query (0)	amplify.outbrain.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:28.231049061 CET	192.168.2.10	1.1.1.1	0x276f	Standard query (0)	collector-47776.us.tvsquared.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.231448889 CET	192.168.2.10	1.1.1.1	0x801d	Standard query (0)	collector-47776.us.tvsquared.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:28.233541965 CET	192.168.2.10	1.1.1.1	0x8dba	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.234528065 CET	192.168.2.10	1.1.1.1	0xc48f	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:28.306390047 CET	192.168.2.10	1.1.1.1	0x10c8	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.306926966 CET	192.168.2.10	1.1.1.1	0x89ae	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jan 10, 2025 00:22:28.338814020 CET	192.168.2.10	1.1.1.1	0xd81a	Standard query (0)	psb.taboola.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.338952065 CET	192.168.2.10	1.1.1.1	0x3e52	Standard query (0)	psb.taboola.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:28.346049070 CET	192.168.2.10	1.1.1.1	0xb1b9	Standard query (0)	rp.liadm.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.346585035 CET	192.168.2.10	1.1.1.1	0x41f4	Standard query (0)	rp.liadm.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:28.570099115 CET	192.168.2.10	1.1.1.1	0x7390	Standard query (0)	tr.outbrain.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.570313931 CET	192.168.2.10	1.1.1.1	0x11c2	Standard query (0)	tr.outbrain.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:28.585794926 CET	192.168.2.10	1.1.1.1	0x6466	Standard query (0)	gohealth.sjv.io	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.585947990 CET	192.168.2.10	1.1.1.1	0xfaca	Standard query (0)	gohealth.sjv.io	65	IN (0x0001)	false
Jan 10, 2025 00:22:28.592801094 CET	192.168.2.10	1.1.1.1	0x1cef	Standard query (0)	b-code.liadm.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.592986107 CET	192.168.2.10	1.1.1.1	0x2e05	Standard query (0)	b-code.liadm.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:28.602910995 CET	192.168.2.10	1.1.1.1	0x1c9d	Standard query (0)	cdn.taboola.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.603116989 CET	192.168.2.10	1.1.1.1	0x87f0	Standard query (0)	cdn.taboola.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:29.544540882 CET	192.168.2.10	1.1.1.1	0x6538	Standard query (0)	amplify.outbrain.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:29.544765949 CET	192.168.2.10	1.1.1.1	0xba98	Standard query (0)	amplify.outbrain.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:29.773382902 CET	192.168.2.10	1.1.1.1	0xbaf9	Standard query (0)	tags.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:29.774005890 CET	192.168.2.10	1.1.1.1	0x7306	Standard query (0)	tags.srv.stackadapt.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:29.783737898 CET	192.168.2.10	1.1.1.1	0x3335	Standard query (0)	psb.taboola.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:29.783922911 CET	192.168.2.10	1.1.1.1	0xe266	Standard query (0)	psb.taboola.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:29.798532009 CET	192.168.2.10	1.1.1.1	0x3009	Standard query (0)	tr.outbrain.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:29.798734903 CET	192.168.2.10	1.1.1.1	0x68e3	Standard query (0)	tr.outbrain.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:29.800328016 CET	192.168.2.10	1.1.1.1	0xb939	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:29.800484896 CET	192.168.2.10	1.1.1.1	0x56c2	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jan 10, 2025 00:22:29.802963972 CET	192.168.2.10	1.1.1.1	0xa9ba	Standard query (0)	collector-47776.us.tvsquared.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:29.803088903 CET	192.168.2.10	1.1.1.1	0x6cf0	Standard query (0)	collector-47776.us.tvsquared.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:29.856574059 CET	192.168.2.10	1.1.1.1	0xf221	Standard query (0)	www.ojrq.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:29.856992960 CET	192.168.2.10	1.1.1.1	0xc5b8	Standard query (0)	www.ojrq.net	65	IN (0x0001)	false
Jan 10, 2025 00:22:29.925947905 CET	192.168.2.10	1.1.1.1	0x1c37	Standard query (0)	trc.taboola.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:29.926104069 CET	192.168.2.10	1.1.1.1	0xa57	Standard query (0)	trc.taboola.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:29.926842928 CET	192.168.2.10	1.1.1.1	0x1d4e	Standard query (0)	wave.outbrain.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:29.927048922 CET	192.168.2.10	1.1.1.1	0x58d5	Standard query (0)	wave.outbrain.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:29.929570913 CET	192.168.2.10	1.1.1.1	0x7e67	Standard query (0)	rp.liadm.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:29.929886103 CET	192.168.2.10	1.1.1.1	0x4191	Standard query (0)	rp.liadm.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:30.307940960 CET	192.168.2.10	1.1.1.1	0xa412	Standard query (0)	trc-events.taboola.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:30.308222055 CET	192.168.2.10	1.1.1.1	0xfb95	Standard query (0)	trc-events.taboola.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:30.468190908 CET	192.168.2.10	1.1.1.1	0x9fa5	Standard query (0)	www.clarity.ms	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:30.468529940 CET	192.168.2.10	1.1.1.1	0xdae8	Standard query (0)	www.clarity.ms	65	IN (0x0001)	false
Jan 10, 2025 00:22:30.470180988 CET	192.168.2.10	1.1.1.1	0x45a4	Standard query (0)	www.ojrq.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:30.470482111 CET	192.168.2.10	1.1.1.1	0x1b1e	Standard query (0)	www.ojrq.net	65	IN (0x0001)	false
Jan 10, 2025 00:22:30.518973112 CET	192.168.2.10	1.1.1.1	0x4dc0	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:30.519344091 CET	192.168.2.10	1.1.1.1	0x87ff	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:30.520629883 CET	192.168.2.10	1.1.1.1	0x7410	Standard query (0)	trc.taboola.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:30.520775080 CET	192.168.2.10	1.1.1.1	0x7427	Standard query (0)	trc.taboola.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:30.877407074 CET	192.168.2.10	1.1.1.1	0x6dfd	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:30.877603054 CET	192.168.2.10	1.1.1.1	0x3fce	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:30.878648043 CET	192.168.2.10	1.1.1.1	0x6cc3	Standard query (0)	wave.outbrain.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:30.878840923 CET	192.168.2.10	1.1.1.1	0x75d6	Standard query (0)	wave.outbrain.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:31.325602055 CET	192.168.2.10	1.1.1.1	0xaa26	Standard query (0)	www.clarity.ms	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:31.325764894 CET	192.168.2.10	1.1.1.1	0xc368	Standard query (0)	www.clarity.ms	65	IN (0x0001)	false
Jan 10, 2025 00:22:31.478615999 CET	192.168.2.10	1.1.1.1	0xa10f	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:31.478972912 CET	192.168.2.10	1.1.1.1	0xc1db	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Jan 10, 2025 00:22:31.880776882 CET	192.168.2.10	1.1.1.1	0x4913	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:31.880940914 CET	192.168.2.10	1.1.1.1	0x72e0	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:32.457222939 CET	192.168.2.10	1.1.1.1	0xc4c4	Standard query (0)	z.clarity.ms	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:32.457376957 CET	192.168.2.10	1.1.1.1	0x8397	Standard query (0)	z.clarity.ms	65	IN (0x0001)	false
Jan 10, 2025 00:22:32.720705986 CET	192.168.2.10	1.1.1.1	0xcb46	Standard query (0)	js-agent.newrelic.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:32.721038103 CET	192.168.2.10	1.1.1.1	0x1c8a	Standard query (0)	js-agent.newrelic.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:33.423836946 CET	192.168.2.10	1.1.1.1	0x3369	Standard query (0)	c.clarity.ms	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:33.424006939 CET	192.168.2.10	1.1.1.1	0x62a	Standard query (0)	c.clarity.ms	65	IN (0x0001)	false
Jan 10, 2025 00:22:33.536732912 CET	192.168.2.10	1.1.1.1	0x3d4a	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:33.536916971 CET	192.168.2.10	1.1.1.1	0x505f	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Jan 10, 2025 00:22:33.971299887 CET	192.168.2.10	1.1.1.1	0xba87	Standard query (0)	js-agent.newrelic.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:33.971499920 CET	192.168.2.10	1.1.1.1	0xf171	Standard query (0)	js-agent.newrelic.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:34.192039967 CET	192.168.2.10	1.1.1.1	0x2986	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:34.192168951 CET	192.168.2.10	1.1.1.1	0xb4fc	Standard query (0)	google.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:34.295005083 CET	192.168.2.10	1.1.1.1	0xb44	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:34.295141935 CET	192.168.2.10	1.1.1.1	0x2d11	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Jan 10, 2025 00:22:35.109365940 CET	192.168.2.10	1.1.1.1	0x22c5	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:35.109549999 CET	192.168.2.10	1.1.1.1	0xd293	Standard query (0)	google.com	65	IN (0x0001)	false
Jan 10, 2025 00:22:36.109380960 CET	192.168.2.10	1.1.1.1	0x2e56	Standard query (0)	c.clarity.ms	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:36.109586954 CET	192.168.2.10	1.1.1.1	0xae	Standard query (0)	c.clarity.ms	65	IN (0x0001)	false
Jan 10, 2025 00:22:50.652932882 CET	192.168.2.10	1.1.1.1	0x42e7	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:50.653203011 CET	192.168.2.10	1.1.1.1	0x8ba7	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 10, 2025 00:21:46.321819067 CET	1.1.1.1	192.168.2.10	0x4e19	No error (0)	www.google.com		142.250.74.196	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:46.323056936 CET	1.1.1.1	192.168.2.10	0x2a2c	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 10, 2025 00:21:49.170315981 CET	1.1.1.1	192.168.2.10	0x1b89	No error (0)	api.myuhchvision.com		185.53.177.50	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:49.965805054 CET	1.1.1.1	192.168.2.10	0x3f9a	No error (0)	c.parkingcrew.net		185.53.178.30	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:49.967678070 CET	1.1.1.1	192.168.2.10	0x6cb9	No error (0)	euob.netgreencolumn.com		52.222.236.17	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:49.967678070 CET	1.1.1.1	192.168.2.10	0x6cb9	No error (0)	euob.netgreencolumn.com		52.222.236.26	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:49.967678070 CET	1.1.1.1	192.168.2.10	0x6cb9	No error (0)	euob.netgreencolumn.com		52.222.236.13	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:49.967678070 CET	1.1.1.1	192.168.2.10	0x6cb9	No error (0)	euob.netgreencolumn.com		52.222.236.58	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:50.657147884 CET	1.1.1.1	192.168.2.10	0x8867	No error (0)	c.parkingcrew.net		185.53.178.30	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:50.864362001 CET	1.1.1.1	192.168.2.10	0x2488	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.190	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:50.864362001 CET	1.1.1.1	192.168.2.10	0x2488	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.135	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:50.864362001 CET	1.1.1.1	192.168.2.10	0x2488	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.138	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:50.864362001 CET	1.1.1.1	192.168.2.10	0x2488	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.69	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:50.870131969 CET	1.1.1.1	192.168.2.10	0x9244	No error (0)	api.myuhchvision.com		185.53.177.50	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:50.891544104 CET	1.1.1.1	192.168.2.10	0xdf2e	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:50.891706944 CET	1.1.1.1	192.168.2.10	0xfbeb	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 10, 2025 00:21:50.903582096 CET	1.1.1.1	192.168.2.10	0xe78a	No error (0)	www.google.com		216.58.212.132	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:50.904128075 CET	1.1.1.1	192.168.2.10	0xb89c	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 10, 2025 00:21:51.154053926 CET	1.1.1.1	192.168.2.10	0xf6d5	No error (0)	euob.netgreencolumn.com		52.222.236.26	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:51.154053926 CET	1.1.1.1	192.168.2.10	0xf6d5	No error (0)	euob.netgreencolumn.com		52.222.236.58	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:51.154053926 CET	1.1.1.1	192.168.2.10	0xf6d5	No error (0)	euob.netgreencolumn.com		52.222.236.13	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:51.154053926 CET	1.1.1.1	192.168.2.10	0xf6d5	No error (0)	euob.netgreencolumn.com		52.222.236.17	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:51.549597025 CET	1.1.1.1	192.168.2.10	0xe606	No error (0)	obseu.netgreencolumn.com		54.75.69.192	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:51.549597025 CET	1.1.1.1	192.168.2.10	0xe606	No error (0)	obseu.netgreencolumn.com		34.251.101.162	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:51.549597025 CET	1.1.1.1	192.168.2.10	0xe606	No error (0)	obseu.netgreencolumn.com		3.248.162.96	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:51.644527912 CET	1.1.1.1	192.168.2.10	0xfd21	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.190	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:51.644527912 CET	1.1.1.1	192.168.2.10	0xfd21	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.138	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:51.644527912 CET	1.1.1.1	192.168.2.10	0xfd21	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.69	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:51.644527912 CET	1.1.1.1	192.168.2.10	0xfd21	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.135	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:51.881246090 CET	1.1.1.1	192.168.2.10	0xc676	No error (0)	syndicatedsearch.goog		142.250.186.110	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:52.532047987 CET	1.1.1.1	192.168.2.10	0x4a5f	No error (0)	syndicatedsearch.goog		142.250.184.206	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:52.568510056 CET	1.1.1.1	192.168.2.10	0x1b75	No error (0)	www.google.com		172.217.16.196	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:52.569274902 CET	1.1.1.1	192.168.2.10	0x6607	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 10, 2025 00:21:52.705574989 CET	1.1.1.1	192.168.2.10	0x980	No error (0)	obseu.netgreencolumn.com		3.248.162.96	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:52.705574989 CET	1.1.1.1	192.168.2.10	0x980	No error (0)	obseu.netgreencolumn.com		54.75.69.192	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:52.705574989 CET	1.1.1.1	192.168.2.10	0x980	No error (0)	obseu.netgreencolumn.com		34.251.101.162	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:54.728467941 CET	1.1.1.1	192.168.2.10	0x4e83	No error (0)	syndicatedsearch.goog		142.250.186.110	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:54.954293966 CET	1.1.1.1	192.168.2.10	0xbd12	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:21:54.954293966 CET	1.1.1.1	192.168.2.10	0xbd12	No error (0)	googlehosted.l.googleusercontent.com		216.58.206.65	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:21:54.957098007 CET	1.1.1.1	192.168.2.10	0xf35c	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:21:55.981151104 CET	1.1.1.1	192.168.2.10	0xf250	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:21:55.981201887 CET	1.1.1.1	192.168.2.10	0x2975	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:21:55.981201887 CET	1.1.1.1	192.168.2.10	0x2975	No error (0)	googlehosted.l.googleusercontent.com		142.250.185.161	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:06.022901058 CET	1.1.1.1	192.168.2.10	0xf5a9	No error (0)	trkpc.net		185.53.179.31	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:08.714435101 CET	1.1.1.1	192.168.2.10	0x9d5	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:08.714449883 CET	1.1.1.1	192.168.2.10	0x3e30	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 10, 2025 00:22:19.239860058 CET	1.1.1.1	192.168.2.10	0xcae9	No error (0)	medicare.gohealth.com		35.71.185.236	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:19.239860058 CET	1.1.1.1	192.168.2.10	0xcae9	No error (0)	medicare.gohealth.com		52.223.56.207	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:20.142611980 CET	1.1.1.1	192.168.2.10	0x4c03	No error (0)	p.typekit.net	p.typekit.net-stls-v3.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:20.142632961 CET	1.1.1.1	192.168.2.10	0xbbb9	No error (0)	p.typekit.net	p.typekit.net-stls-v3.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:20.235356092 CET	1.1.1.1	192.168.2.10	0xe1d1	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:20.236362934 CET	1.1.1.1	192.168.2.10	0x5fa2	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:21.313191891 CET	1.1.1.1	192.168.2.10	0x1032	No error (0)	cdn.gohealth.com		18.173.205.126	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:21.313191891 CET	1.1.1.1	192.168.2.10	0x1032	No error (0)	cdn.gohealth.com		18.173.205.63	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:21.313191891 CET	1.1.1.1	192.168.2.10	0x1032	No error (0)	cdn.gohealth.com		18.173.205.36	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:21.313191891 CET	1.1.1.1	192.168.2.10	0x1032	No error (0)	cdn.gohealth.com		18.173.205.114	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:21.918561935 CET	1.1.1.1	192.168.2.10	0x9600	No error (0)	medicare.gohealth.com		35.71.185.236	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:21.918561935 CET	1.1.1.1	192.168.2.10	0x9600	No error (0)	medicare.gohealth.com		52.223.56.207	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:22.391134024 CET	1.1.1.1	192.168.2.10	0xd16b	No error (0)	cdn.gohealth.com		18.173.205.63	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:22.391134024 CET	1.1.1.1	192.168.2.10	0xd16b	No error (0)	cdn.gohealth.com		18.173.205.36	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:22.391134024 CET	1.1.1.1	192.168.2.10	0xd16b	No error (0)	cdn.gohealth.com		18.173.205.126	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:22.391134024 CET	1.1.1.1	192.168.2.10	0xd16b	No error (0)	cdn.gohealth.com		18.173.205.114	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:24.081204891 CET	1.1.1.1	192.168.2.10	0x4c06	No error (0)	cdn.optimizely.com		104.18.65.57	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:24.081204891 CET	1.1.1.1	192.168.2.10	0x4c06	No error (0)	cdn.optimizely.com		104.18.66.57	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:24.081775904 CET	1.1.1.1	192.168.2.10	0xb823	No error (0)	cdn.optimizely.com			65	IN (0x0001)	false
Jan 10, 2025 00:22:25.070777893 CET	1.1.1.1	192.168.2.10	0x3e67	No error (0)	cdn.qa.gohealth.xyz	d36xrmg228nws5.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:25.086425066 CET	1.1.1.1	192.168.2.10	0xfaca	No error (0)	cdn.qa.gohealth.xyz	d36xrmg228nws5.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:25.086425066 CET	1.1.1.1	192.168.2.10	0xfaca	No error (0)	d36xrmg228nws5.cloudfront.net		18.66.147.56	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:25.086425066 CET	1.1.1.1	192.168.2.10	0xfaca	No error (0)	d36xrmg228nws5.cloudfront.net		18.66.147.10	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:25.086425066 CET	1.1.1.1	192.168.2.10	0xfaca	No error (0)	d36xrmg228nws5.cloudfront.net		18.66.147.119	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:25.086425066 CET	1.1.1.1	192.168.2.10	0xfaca	No error (0)	d36xrmg228nws5.cloudfront.net		18.66.147.102	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:25.088558912 CET	1.1.1.1	192.168.2.10	0x87e9	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:25.090128899 CET	1.1.1.1	192.168.2.10	0xa467	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:25.090128899 CET	1.1.1.1	192.168.2.10	0xa467	No error (0)	static-cdn.hotjar.com		18.66.102.11	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:25.090128899 CET	1.1.1.1	192.168.2.10	0xa467	No error (0)	static-cdn.hotjar.com		18.66.102.106	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:25.090128899 CET	1.1.1.1	192.168.2.10	0xa467	No error (0)	static-cdn.hotjar.com		18.66.102.51	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:25.090128899 CET	1.1.1.1	192.168.2.10	0xa467	No error (0)	static-cdn.hotjar.com		18.66.102.53	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:25.092461109 CET	1.1.1.1	192.168.2.10	0x203	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:25.092461109 CET	1.1.1.1	192.168.2.10	0x203	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:25.092461109 CET	1.1.1.1	192.168.2.10	0x203	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:25.146531105 CET	1.1.1.1	192.168.2.10	0x4211	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:25.146531105 CET	1.1.1.1	192.168.2.10	0x4211	No error (0)	scontent.xx.fbcdn.net		157.240.0.6	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:25.146543026 CET	1.1.1.1	192.168.2.10	0x4ab2	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:25.146543026 CET	1.1.1.1	192.168.2.10	0x4ab2	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Jan 10, 2025 00:22:25.146543026 CET	1.1.1.1	192.168.2.10	0x4ab2	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Jan 10, 2025 00:22:25.162050009 CET	1.1.1.1	192.168.2.10	0xd139	No error (0)	cdn.optimizely.com		104.18.65.57	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:25.162050009 CET	1.1.1.1	192.168.2.10	0xd139	No error (0)	cdn.optimizely.com		104.18.66.57	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:25.162064075 CET	1.1.1.1	192.168.2.10	0x5ef5	No error (0)	cdn.optimizely.com			65	IN (0x0001)	false
Jan 10, 2025 00:22:25.254882097 CET	1.1.1.1	192.168.2.10	0xad4a	No error (0)	a24403740715.cdn.optimizely.com			65	IN (0x0001)	false
Jan 10, 2025 00:22:25.255364895 CET	1.1.1.1	192.168.2.10	0xfe8a	No error (0)	a24403740715.cdn.optimizely.com		104.18.66.57	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:25.255364895 CET	1.1.1.1	192.168.2.10	0xfe8a	No error (0)	a24403740715.cdn.optimizely.com		104.18.65.57	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:25.983176947 CET	1.1.1.1	192.168.2.10	0xa05a	No error (0)	bat-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:25.983176947 CET	1.1.1.1	192.168.2.10	0xa05a	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:25.983176947 CET	1.1.1.1	192.168.2.10	0xa05a	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:26.027163029 CET	1.1.1.1	192.168.2.10	0xc97	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:26.027163029 CET	1.1.1.1	192.168.2.10	0xc97	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:26.028932095 CET	1.1.1.1	192.168.2.10	0x5b5f	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Jan 10, 2025 00:22:26.243829966 CET	1.1.1.1	192.168.2.10	0xe41b	No error (0)	logx.optimizely.com		34.49.241.189	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:26.701399088 CET	1.1.1.1	192.168.2.10	0xad97	No error (0)	utt.impactcdn.com		35.186.249.72	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:26.704559088 CET	1.1.1.1	192.168.2.10	0x2334	No error (0)	b-code.liadm.com	detgh1asa1dg4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:26.704559088 CET	1.1.1.1	192.168.2.10	0x2334	No error (0)	detgh1asa1dg4.cloudfront.net		3.167.227.110	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:26.704559088 CET	1.1.1.1	192.168.2.10	0x2334	No error (0)	detgh1asa1dg4.cloudfront.net		3.167.227.85	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:26.704559088 CET	1.1.1.1	192.168.2.10	0x2334	No error (0)	detgh1asa1dg4.cloudfront.net		3.167.227.50	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:26.704559088 CET	1.1.1.1	192.168.2.10	0x2334	No error (0)	detgh1asa1dg4.cloudfront.net		3.167.227.120	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:26.705185890 CET	1.1.1.1	192.168.2.10	0xbf07	No error (0)	b-code.liadm.com	detgh1asa1dg4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:26.786123991 CET	1.1.1.1	192.168.2.10	0x85cb	No error (0)	td.doubleclick.net		142.250.186.130	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:26.838937998 CET	1.1.1.1	192.168.2.10	0x55e9	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:26.838937998 CET	1.1.1.1	192.168.2.10	0x55e9	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:26.838937998 CET	1.1.1.1	192.168.2.10	0x55e9	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:26.838937998 CET	1.1.1.1	192.168.2.10	0x55e9	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:26.838937998 CET	1.1.1.1	192.168.2.10	0x55e9	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:27.041538000 CET	1.1.1.1	192.168.2.10	0xfb7d	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:27.041538000 CET	1.1.1.1	192.168.2.10	0xfb7d	No error (0)	static-cdn.hotjar.com		18.66.102.51	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:27.041538000 CET	1.1.1.1	192.168.2.10	0xfb7d	No error (0)	static-cdn.hotjar.com		18.66.102.53	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:27.041538000 CET	1.1.1.1	192.168.2.10	0xfb7d	No error (0)	static-cdn.hotjar.com		18.66.102.106	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:27.041538000 CET	1.1.1.1	192.168.2.10	0xfb7d	No error (0)	static-cdn.hotjar.com		18.66.102.11	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:27.041553974 CET	1.1.1.1	192.168.2.10	0x1fa0	No error (0)	static.hotjar.com	static-cdn.hotjar.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:27.187726021 CET	1.1.1.1	192.168.2.10	0xb95c	No error (0)	cdn.qa.gohealth.xyz	d36xrmg228nws5.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:27.187726021 CET	1.1.1.1	192.168.2.10	0xb95c	No error (0)	d36xrmg228nws5.cloudfront.net		18.66.147.56	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:27.187726021 CET	1.1.1.1	192.168.2.10	0xb95c	No error (0)	d36xrmg228nws5.cloudfront.net		18.66.147.10	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:27.187726021 CET	1.1.1.1	192.168.2.10	0xb95c	No error (0)	d36xrmg228nws5.cloudfront.net		18.66.147.119	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:27.187726021 CET	1.1.1.1	192.168.2.10	0xb95c	No error (0)	d36xrmg228nws5.cloudfront.net		18.66.147.102	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:27.218555927 CET	1.1.1.1	192.168.2.10	0xc22	No error (0)	cdn.qa.gohealth.xyz	d36xrmg228nws5.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:27.257251978 CET	1.1.1.1	192.168.2.10	0x7afa	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:27.257251978 CET	1.1.1.1	192.168.2.10	0x7afa	No error (0)	scontent.xx.fbcdn.net		157.240.253.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:27.257716894 CET	1.1.1.1	192.168.2.10	0x1504	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:27.257716894 CET	1.1.1.1	192.168.2.10	0x1504	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Jan 10, 2025 00:22:27.257716894 CET	1.1.1.1	192.168.2.10	0x1504	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Jan 10, 2025 00:22:27.263350964 CET	1.1.1.1	192.168.2.10	0xfcf2	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:27.263350964 CET	1.1.1.1	192.168.2.10	0xfcf2	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:27.263864994 CET	1.1.1.1	192.168.2.10	0xc04a	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Jan 10, 2025 00:22:27.422858000 CET	1.1.1.1	192.168.2.10	0x2769	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:27.422858000 CET	1.1.1.1	192.168.2.10	0x2769	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:27.422858000 CET	1.1.1.1	192.168.2.10	0x2769	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:27.422858000 CET	1.1.1.1	192.168.2.10	0x2769	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:27.422858000 CET	1.1.1.1	192.168.2.10	0x2769	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:27.423356056 CET	1.1.1.1	192.168.2.10	0xa4ae	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:27.431292057 CET	1.1.1.1	192.168.2.10	0x5d61	No error (0)	utt.impactcdn.com		35.186.249.72	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:27.441564083 CET	1.1.1.1	192.168.2.10	0x1d00	No error (0)	gohealth.sjv.io		35.227.211.136	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:27.545397043 CET	1.1.1.1	192.168.2.10	0x3c2	No error (0)	tags.srv.stackadapt.com		3.74.15.141	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:27.545397043 CET	1.1.1.1	192.168.2.10	0x3c2	No error (0)	tags.srv.stackadapt.com		18.194.6.240	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:27.547600031 CET	1.1.1.1	192.168.2.10	0xab6d	No error (0)	amplify.outbrain.com	wildcard.outbrain.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:27.548132896 CET	1.1.1.1	192.168.2.10	0xff78	No error (0)	amplify.outbrain.com	wildcard.outbrain.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:27.553611994 CET	1.1.1.1	192.168.2.10	0x3002	No error (0)	static.synccake.com		172.67.154.89	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:27.553611994 CET	1.1.1.1	192.168.2.10	0x3002	No error (0)	static.synccake.com		104.21.42.2	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:27.698950052 CET	1.1.1.1	192.168.2.10	0x9a51	No error (0)	static.synccake.com			65	IN (0x0001)	false
Jan 10, 2025 00:22:28.241534948 CET	1.1.1.1	192.168.2.10	0x8dba	No error (0)	script.hotjar.com		13.33.187.74	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.241534948 CET	1.1.1.1	192.168.2.10	0x8dba	No error (0)	script.hotjar.com		13.33.187.19	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.241534948 CET	1.1.1.1	192.168.2.10	0x8dba	No error (0)	script.hotjar.com		13.33.187.92	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.241534948 CET	1.1.1.1	192.168.2.10	0x8dba	No error (0)	script.hotjar.com		13.33.187.109	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.242502928 CET	1.1.1.1	192.168.2.10	0x276f	No error (0)	collector-47776.us.tvsquared.com	collectoru.us.tvsquared.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:28.242502928 CET	1.1.1.1	192.168.2.10	0x276f	No error (0)	collectoru.us.tvsquared.com		3.130.114.26	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.242502928 CET	1.1.1.1	192.168.2.10	0x276f	No error (0)	collectoru.us.tvsquared.com		3.131.211.191	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.243838072 CET	1.1.1.1	192.168.2.10	0x801d	No error (0)	collector-47776.us.tvsquared.com	collectoru.us.tvsquared.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:28.313126087 CET	1.1.1.1	192.168.2.10	0x10c8	No error (0)	googleads.g.doubleclick.net		216.58.206.66	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.314265013 CET	1.1.1.1	192.168.2.10	0x89ae	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jan 10, 2025 00:22:28.345992088 CET	1.1.1.1	192.168.2.10	0xd81a	No error (0)	psb.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:28.345992088 CET	1.1.1.1	192.168.2.10	0xd81a	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.345992088 CET	1.1.1.1	192.168.2.10	0xd81a	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.345992088 CET	1.1.1.1	192.168.2.10	0xd81a	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.345992088 CET	1.1.1.1	192.168.2.10	0xd81a	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.348579884 CET	1.1.1.1	192.168.2.10	0x3e52	No error (0)	psb.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:28.353008986 CET	1.1.1.1	192.168.2.10	0xb1b9	No error (0)	rp.liadm.com	livepixel-production.bln.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:28.353008986 CET	1.1.1.1	192.168.2.10	0xb1b9	No error (0)	livepixel-production.bln.liveintent.com		34.231.219.101	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.353008986 CET	1.1.1.1	192.168.2.10	0xb1b9	No error (0)	livepixel-production.bln.liveintent.com		44.221.168.224	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.353008986 CET	1.1.1.1	192.168.2.10	0xb1b9	No error (0)	livepixel-production.bln.liveintent.com		23.21.229.6	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.353008986 CET	1.1.1.1	192.168.2.10	0xb1b9	No error (0)	livepixel-production.bln.liveintent.com		3.82.168.197	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.353008986 CET	1.1.1.1	192.168.2.10	0xb1b9	No error (0)	livepixel-production.bln.liveintent.com		3.94.72.4	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.353008986 CET	1.1.1.1	192.168.2.10	0xb1b9	No error (0)	livepixel-production.bln.liveintent.com		54.160.73.8	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.353008986 CET	1.1.1.1	192.168.2.10	0xb1b9	No error (0)	livepixel-production.bln.liveintent.com		44.195.149.119	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.353008986 CET	1.1.1.1	192.168.2.10	0xb1b9	No error (0)	livepixel-production.bln.liveintent.com		50.16.43.8	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.353527069 CET	1.1.1.1	192.168.2.10	0x41f4	No error (0)	rp.liadm.com	livepixel-production.bln.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:28.576730967 CET	1.1.1.1	192.168.2.10	0x7390	No error (0)	tr.outbrain.com	alldcs.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:28.576730967 CET	1.1.1.1	192.168.2.10	0x7390	No error (0)	alldcs.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:28.576730967 CET	1.1.1.1	192.168.2.10	0x7390	No error (0)	nydc1.outbrain.org		64.202.112.31	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.577497005 CET	1.1.1.1	192.168.2.10	0x11c2	No error (0)	tr.outbrain.com	alldcs.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:28.577497005 CET	1.1.1.1	192.168.2.10	0x11c2	No error (0)	alldcs.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:28.594727993 CET	1.1.1.1	192.168.2.10	0x6466	No error (0)	gohealth.sjv.io		35.227.211.136	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.600095987 CET	1.1.1.1	192.168.2.10	0x2e05	No error (0)	b-code.liadm.com	detgh1asa1dg4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:28.603473902 CET	1.1.1.1	192.168.2.10	0x1cef	No error (0)	b-code.liadm.com	detgh1asa1dg4.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:28.603473902 CET	1.1.1.1	192.168.2.10	0x1cef	No error (0)	detgh1asa1dg4.cloudfront.net		3.167.227.50	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.603473902 CET	1.1.1.1	192.168.2.10	0x1cef	No error (0)	detgh1asa1dg4.cloudfront.net		3.167.227.120	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.603473902 CET	1.1.1.1	192.168.2.10	0x1cef	No error (0)	detgh1asa1dg4.cloudfront.net		3.167.227.85	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.603473902 CET	1.1.1.1	192.168.2.10	0x1cef	No error (0)	detgh1asa1dg4.cloudfront.net		3.167.227.110	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.609715939 CET	1.1.1.1	192.168.2.10	0x1c9d	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:28.609715939 CET	1.1.1.1	192.168.2.10	0x1c9d	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.609715939 CET	1.1.1.1	192.168.2.10	0x1c9d	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.609715939 CET	1.1.1.1	192.168.2.10	0x1c9d	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.609715939 CET	1.1.1.1	192.168.2.10	0x1c9d	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:28.611351967 CET	1.1.1.1	192.168.2.10	0x87f0	No error (0)	cdn.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:29.554286003 CET	1.1.1.1	192.168.2.10	0x6538	No error (0)	amplify.outbrain.com	wildcard.outbrain.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:29.554291010 CET	1.1.1.1	192.168.2.10	0xba98	No error (0)	amplify.outbrain.com	wildcard.outbrain.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:29.781044960 CET	1.1.1.1	192.168.2.10	0xbaf9	No error (0)	tags.srv.stackadapt.com		18.194.6.240	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:29.781044960 CET	1.1.1.1	192.168.2.10	0xbaf9	No error (0)	tags.srv.stackadapt.com		3.74.15.141	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:29.792145967 CET	1.1.1.1	192.168.2.10	0x3335	No error (0)	psb.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:29.792145967 CET	1.1.1.1	192.168.2.10	0x3335	No error (0)	tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:29.792145967 CET	1.1.1.1	192.168.2.10	0x3335	No error (0)	tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:29.792145967 CET	1.1.1.1	192.168.2.10	0x3335	No error (0)	tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:29.792145967 CET	1.1.1.1	192.168.2.10	0x3335	No error (0)	tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:29.792455912 CET	1.1.1.1	192.168.2.10	0xe266	No error (0)	psb.taboola.com	tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:29.806142092 CET	1.1.1.1	192.168.2.10	0x68e3	No error (0)	tr.outbrain.com	alldcs.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:29.806142092 CET	1.1.1.1	192.168.2.10	0x68e3	No error (0)	alldcs.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:29.806446075 CET	1.1.1.1	192.168.2.10	0x3009	No error (0)	tr.outbrain.com	alldcs.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:29.806446075 CET	1.1.1.1	192.168.2.10	0x3009	No error (0)	alldcs.outbrain.org	nydc1.outbrain.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:29.806446075 CET	1.1.1.1	192.168.2.10	0x3009	No error (0)	nydc1.outbrain.org		64.202.112.127	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:29.808074951 CET	1.1.1.1	192.168.2.10	0x56c2	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jan 10, 2025 00:22:29.808465958 CET	1.1.1.1	192.168.2.10	0xb939	No error (0)	googleads.g.doubleclick.net		172.217.16.194	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:29.814958096 CET	1.1.1.1	192.168.2.10	0x6cf0	No error (0)	collector-47776.us.tvsquared.com	collectoru.us.tvsquared.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:29.830972910 CET	1.1.1.1	192.168.2.10	0xa9ba	No error (0)	collector-47776.us.tvsquared.com	collectoru.us.tvsquared.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:29.830972910 CET	1.1.1.1	192.168.2.10	0xa9ba	No error (0)	collectoru.us.tvsquared.com		3.131.211.191	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:29.830972910 CET	1.1.1.1	192.168.2.10	0xa9ba	No error (0)	collectoru.us.tvsquared.com		3.130.114.26	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:29.870913029 CET	1.1.1.1	192.168.2.10	0xf221	No error (0)	www.ojrq.net		34.95.127.121	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:29.932642937 CET	1.1.1.1	192.168.2.10	0x1c37	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:29.932642937 CET	1.1.1.1	192.168.2.10	0x1c37	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:29.932642937 CET	1.1.1.1	192.168.2.10	0x1c37	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:29.932642937 CET	1.1.1.1	192.168.2.10	0x1c37	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:29.932642937 CET	1.1.1.1	192.168.2.10	0x1c37	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:29.932883024 CET	1.1.1.1	192.168.2.10	0xa57	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:29.933815002 CET	1.1.1.1	192.168.2.10	0x1d4e	No error (0)	wave.outbrain.com	wildcard.outbrain.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:29.934405088 CET	1.1.1.1	192.168.2.10	0x58d5	No error (0)	wave.outbrain.com	wildcard.outbrain.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:29.936717987 CET	1.1.1.1	192.168.2.10	0x7e67	No error (0)	rp.liadm.com	livepixel-production.bln.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:29.936717987 CET	1.1.1.1	192.168.2.10	0x7e67	No error (0)	livepixel-production.bln.liveintent.com		23.21.229.6	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:29.936717987 CET	1.1.1.1	192.168.2.10	0x7e67	No error (0)	livepixel-production.bln.liveintent.com		3.82.168.197	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:29.936717987 CET	1.1.1.1	192.168.2.10	0x7e67	No error (0)	livepixel-production.bln.liveintent.com		44.195.149.119	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:29.936717987 CET	1.1.1.1	192.168.2.10	0x7e67	No error (0)	livepixel-production.bln.liveintent.com		50.16.43.8	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:29.936717987 CET	1.1.1.1	192.168.2.10	0x7e67	No error (0)	livepixel-production.bln.liveintent.com		52.54.248.128	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:29.936717987 CET	1.1.1.1	192.168.2.10	0x7e67	No error (0)	livepixel-production.bln.liveintent.com		34.231.219.101	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:29.936717987 CET	1.1.1.1	192.168.2.10	0x7e67	No error (0)	livepixel-production.bln.liveintent.com		44.221.168.224	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:29.936717987 CET	1.1.1.1	192.168.2.10	0x7e67	No error (0)	livepixel-production.bln.liveintent.com		54.160.73.8	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:29.937609911 CET	1.1.1.1	192.168.2.10	0x4191	No error (0)	rp.liadm.com	livepixel-production.bln.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:30.314644098 CET	1.1.1.1	192.168.2.10	0xa412	No error (0)	trc-events.taboola.com	am-vip001.taboola.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:30.314644098 CET	1.1.1.1	192.168.2.10	0xa412	No error (0)	am-vip001.taboola.com		141.226.228.48	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:30.315371037 CET	1.1.1.1	192.168.2.10	0xfb95	No error (0)	trc-events.taboola.com	am-vip001.taboola.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:30.477837086 CET	1.1.1.1	192.168.2.10	0x9fa5	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:30.477837086 CET	1.1.1.1	192.168.2.10	0x9fa5	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:30.477837086 CET	1.1.1.1	192.168.2.10	0x9fa5	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:30.477837086 CET	1.1.1.1	192.168.2.10	0x9fa5	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:30.478240013 CET	1.1.1.1	192.168.2.10	0xdae8	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:30.478240013 CET	1.1.1.1	192.168.2.10	0xdae8	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:30.481056929 CET	1.1.1.1	192.168.2.10	0x45a4	No error (0)	www.ojrq.net		34.95.127.121	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:30.527357101 CET	1.1.1.1	192.168.2.10	0x4dc0	No error (0)	www.google.com		142.250.74.196	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:30.527369022 CET	1.1.1.1	192.168.2.10	0x87ff	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 10, 2025 00:22:30.529297113 CET	1.1.1.1	192.168.2.10	0x7410	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:30.529297113 CET	1.1.1.1	192.168.2.10	0x7410	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.1.44	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:30.529297113 CET	1.1.1.1	192.168.2.10	0x7410	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.129.44	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:30.529297113 CET	1.1.1.1	192.168.2.10	0x7410	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.65.44	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:30.529297113 CET	1.1.1.1	192.168.2.10	0x7410	No error (0)	dualstack.tls13.taboola.map.fastly.net		151.101.193.44	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:30.529309034 CET	1.1.1.1	192.168.2.10	0x7427	No error (0)	trc.taboola.com	dualstack.tls13.taboola.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:30.885986090 CET	1.1.1.1	192.168.2.10	0x6dfd	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:30.885986090 CET	1.1.1.1	192.168.2.10	0x6dfd	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:30.886004925 CET	1.1.1.1	192.168.2.10	0x3fce	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:30.886004925 CET	1.1.1.1	192.168.2.10	0x3fce	No error (0)	star-mini.c10r.facebook.com			65	IN (0x0001)	false
Jan 10, 2025 00:22:30.886004925 CET	1.1.1.1	192.168.2.10	0x3fce	No error (0)	star-mini.c10r.facebook.com			65	IN (0x0001)	false
Jan 10, 2025 00:22:30.887073994 CET	1.1.1.1	192.168.2.10	0x6cc3	No error (0)	wave.outbrain.com	wildcard.outbrain.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:30.887089968 CET	1.1.1.1	192.168.2.10	0x75d6	No error (0)	wave.outbrain.com	wildcard.outbrain.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:31.334314108 CET	1.1.1.1	192.168.2.10	0xaa26	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:31.334314108 CET	1.1.1.1	192.168.2.10	0xaa26	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:31.334314108 CET	1.1.1.1	192.168.2.10	0xaa26	No error (0)	shed.dual-low.s-part-0016.t-0009.t-msedge.net	s-part-0016.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:31.334314108 CET	1.1.1.1	192.168.2.10	0xaa26	No error (0)	s-part-0016.t-0009.t-msedge.net		13.107.246.44	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:31.335223913 CET	1.1.1.1	192.168.2.10	0xc368	No error (0)	www.clarity.ms	clarity.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:31.335223913 CET	1.1.1.1	192.168.2.10	0xc368	No error (0)	clarity.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:31.488595963 CET	1.1.1.1	192.168.2.10	0xa10f	No error (0)	stats.g.doubleclick.net		173.194.76.154	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:31.488595963 CET	1.1.1.1	192.168.2.10	0xa10f	No error (0)	stats.g.doubleclick.net		173.194.76.156	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:31.488595963 CET	1.1.1.1	192.168.2.10	0xa10f	No error (0)	stats.g.doubleclick.net		173.194.76.155	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:31.488595963 CET	1.1.1.1	192.168.2.10	0xa10f	No error (0)	stats.g.doubleclick.net		173.194.76.157	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:31.889885902 CET	1.1.1.1	192.168.2.10	0x72e0	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:31.889885902 CET	1.1.1.1	192.168.2.10	0x72e0	No error (0)	star-mini.c10r.facebook.com			65	IN (0x0001)	false
Jan 10, 2025 00:22:31.889885902 CET	1.1.1.1	192.168.2.10	0x72e0	No error (0)	star-mini.c10r.facebook.com			65	IN (0x0001)	false
Jan 10, 2025 00:22:31.889970064 CET	1.1.1.1	192.168.2.10	0x4913	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:31.889970064 CET	1.1.1.1	192.168.2.10	0x4913	No error (0)	star-mini.c10r.facebook.com		157.240.252.35	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:32.467348099 CET	1.1.1.1	192.168.2.10	0x8397	No error (0)	z.clarity.ms	clarity-ingest-eus2-f-sc.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:32.467509031 CET	1.1.1.1	192.168.2.10	0xc4c4	No error (0)	z.clarity.ms	clarity-ingest-eus2-f-sc.eastus2.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:32.729485989 CET	1.1.1.1	192.168.2.10	0xcb46	No error (0)	js-agent.newrelic.com		162.247.243.39	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:33.433514118 CET	1.1.1.1	192.168.2.10	0x3369	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:33.433514118 CET	1.1.1.1	192.168.2.10	0x3369	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:33.434940100 CET	1.1.1.1	192.168.2.10	0x62a	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:33.434940100 CET	1.1.1.1	192.168.2.10	0x62a	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:33.546062946 CET	1.1.1.1	192.168.2.10	0x3d4a	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:33.546062946 CET	1.1.1.1	192.168.2.10	0x3d4a	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:33.546062946 CET	1.1.1.1	192.168.2.10	0x3d4a	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:33.546077967 CET	1.1.1.1	192.168.2.10	0x505f	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:33.546077967 CET	1.1.1.1	192.168.2.10	0x505f	No error (0)	bam.cell.nr-data.net	bam.nr-data.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:33.980139017 CET	1.1.1.1	192.168.2.10	0xba87	No error (0)	js-agent.newrelic.com		162.247.243.39	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:34.200890064 CET	1.1.1.1	192.168.2.10	0xb4fc	No error (0)	google.com			65	IN (0x0001)	false
Jan 10, 2025 00:22:34.201049089 CET	1.1.1.1	192.168.2.10	0x2986	No error (0)	google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:34.303813934 CET	1.1.1.1	192.168.2.10	0x2d11	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:34.303813934 CET	1.1.1.1	192.168.2.10	0x2d11	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:34.303917885 CET	1.1.1.1	192.168.2.10	0xb44	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:34.303917885 CET	1.1.1.1	192.168.2.10	0xb44	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:34.303917885 CET	1.1.1.1	192.168.2.10	0xb44	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:35.118205070 CET	1.1.1.1	192.168.2.10	0x22c5	No error (0)	google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Jan 10, 2025 00:22:35.118468046 CET	1.1.1.1	192.168.2.10	0xd293	No error (0)	google.com			65	IN (0x0001)	false
Jan 10, 2025 00:22:36.116399050 CET	1.1.1.1	192.168.2.10	0x2e56	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:36.116399050 CET	1.1.1.1	192.168.2.10	0x2e56	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:36.125546932 CET	1.1.1.1	192.168.2.10	0xae	No error (0)	c.clarity.ms	c.msn.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:36.125546932 CET	1.1.1.1	192.168.2.10	0xae	No error (0)	c.msn.com	c-msn-com-nsatc.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 00:22:50.659636021 CET	1.1.1.1	192.168.2.10	0x42e7	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.10	49758	185.53.177.50	80	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 10, 2025 00:21:49.176461935 CET	435	OUT	GET / HTTP/1.1 Host: api.myuhchvision.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 10, 2025 00:21:49.875560999 CET	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 09 Jan 2025 23:21:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Buckets: bucket011,bucket088,bucket089 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_uARufg7YvRR6sjR+KQaOPOxzdYX19ZH6TvOCR8ttdc7QtlTjjd9+kBIfru5bOlXpOUNeL7abDViaropbRyD7hQ== X-Template: tpl_CleanPeppermintBlack_twoclick X-Language: english Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Pcrew-Ip-Organization: CenturyLink X-Pcrew-Blocked-Reason: X-Domain: myuhchvision.com X-Subdomain: api Content-Encoding: gzip Data Raw: 37 37 65 0d 0a 1f 8b 08 00 00 00 00 00 04 03 e5 5c 79 77 da c8 b2 ff db f9 14 0a 39 37 e0 1b 16 49 ac 5e 48 2e 36 5e 63 c0 0b 4e 6c 72 f2 7c 84 d4 80 40 48 8c 24 0c 78 ae bf fb fd 55 b7 24 04 c6 99 e4 9e 99 37 e7 9d e7 8c 8d d4 4b 55 75 75 75 ad cd ec bf ad b7 0e db f7 97 47 d2 c0 1f 5b 1f df ec d3 87 64 68 be 96 d1 8c ae e5 e8 a3 11 5b 54 13 8d e3 d9 ac 7e 75 7f fe d9 e9 9c 0d 1e f5 66 ed ea e8 e0 e0 aa 56 bf 99 d5 66 37 b5 f3 83 da c5 6f d3 fa f1 51 fb ee da 96 4f 5d b9 d8 bb bd 2c 1f 9d b7 cb e5 f9 bd 7d 39 be ee 4e 1a 8b c2 e3 a8 f2 f9 de 3c b5 47 cd 09 33 ec 61 ab d6 3c d7 b5 bb fa 9d fe f9 ea bc 29 db 77 9f 3b e7 17 e5 b6 6e 9e d7 2b 35 e7 f4 ee b3 52 ac 1c d6 66 47 b5 da 55 b5 fa 30 ad 5d 4f 7b fd f2 fd e3 f5 75 c9 1b 5e 7f f8 7c a5 b5 2e 5b f3 27 e3 fe 4e d9 e9 9c 96 da 8f Data Ascii: 77e\yw97I^H.6^cNlr\|@H$xU$7KUuuuG[dh[T~ufVf7oQO],}9N<G3a<)w;n+5RfGU0]O{u^\|.['N
Jan 10, 2025 00:21:49.875600100 CET	1236	IN	Data Raw: ad c3 eb 8a ef 1b 7a f9 ca b7 da c3 a1 b1 f3 61 74 70 d6 73 a7 c5 6e cb ba 9b b4 6e 9b ec a2 ac 75 eb 5f 4c cd 75 26 dd eb 45 bd 3c 00 e0 84 34 1f 5b b6 57 4d 0c 7c 7f b2 9b cb cd 66 b3 ec 2c 9f 75 dc 7e 4e d9 d9 d9 c9 cd 89 1f 09 c9 d2 ec 7e 35 Data Ascii: zatpsnnu_Lu&E<4[WM\|f,u~N~5qi7~8aMj}fb.AzN^U&MM?Y%6}S2Y%o(;Wm'>>x4=3v_XL3Ow_jV@
Jan 10, 2025 00:21:49.875612020 CET	425	IN	Data Raw: 2b 3d b8 c7 34 33 f4 90 65 39 90 df 90 0d 5c 79 14 23 ed b9 8a 3c f0 e8 08 00 47 20 e0 02 ac 94 93 bc 89 66 4b ca 9e c4 8d 33 4c b6 d5 5b b5 d0 e1 09 c3 f1 a0 d3 45 2e 55 f4 b4 07 5d be e2 9c a8 dc 79 22 3c a2 63 57 22 cf ca 73 2c d3 90 48 6d 93 Data Ascii: +=43e9\y#<G fK3L[E.U]y"<cW"s,HmJbqD<M)ry[oX ]E (2 ,whh8GH-Kc{7{]cBvcu)_Ou
Jan 10, 2025 00:21:49.875822067 CET	1236	IN	Data Raw: 31 32 38 30 0d 0a 8d e1 b9 d7 68 d7 fc 46 fb a0 81 f6 05 33 cf 1e 2f 87 b3 47 3d df b1 2f fb d5 6a 12 f2 11 79 ba 7c 2b 45 74 2e 82 6a 83 41 9d 9b 13 8a 26 62 71 75 7b 60 7a 92 e1 8c 35 d3 86 5c 2e a4 2e 83 f8 b8 70 5f 2d f6 36 21 85 b1 79 4e 04 Data Ascii: 1280hF3/G=/jy\|+Et.jA&bqu{`z5\..p_-6!yNol3xon!&Bmvnv$ p{e)9p}\|f7MM<;X{(P=WG:rA\| 9Nlvz6f$%vS!@Io?q^<2YT3/
Jan 10, 2025 00:21:49.875833988 CET	1236	IN	Data Raw: 2e 98 87 5e 07 61 25 b5 26 b7 91 0e d2 a7 5e 6a 1b 0e ad f0 41 57 51 05 ab bf 14 f4 48 97 1c 3f 8e 09 9d 95 d8 1a 97 8f 31 8e 07 ec 85 3b c4 75 cf 2b ba 89 57 c5 a6 90 d8 6a e2 1c 1a eb 86 8f 0d d0 3e 6a ae e4 eb 5c 53 4a 55 68 d7 70 97 72 39 f0 Data Ascii: .^a%&^jAWQH?1;u+Wj>j\SJUhpr92rRj]DI*gnrWJzRThv$c8H#/\%:{:r\%SZjT:@9M<aIhL];%7d4M8tN;T/bK4-D0V#;Y-
Jan 10, 2025 00:21:49.875847101 CET	1236	IN	Data Raw: 75 b5 67 c9 88 55 70 11 4f 34 63 75 c7 09 e8 d4 c6 0d 0c c7 4e ad 28 ec b4 84 2a a6 18 8b 4b 47 de d1 1c 09 2f 93 f6 f6 0b b1 d7 f6 d3 12 79 0e 94 3c 09 b6 16 87 85 84 85 34 23 ed f2 0a 30 14 17 c8 a7 20 ff 8e 8c 41 3a 02 bd 1b c3 b2 01 09 ae fd Data Ascii: ugUpO4cuN(*KG/y<4#0 A:lW)IC.qKFmfTo;!WS.R/&sE'q'K3P Ss0E^nn Uni\|^"z@@;i5Ed{{{9\|yc \5]gC$
Jan 10, 2025 00:21:49.875859976 CET	1041	IN	Data Raw: dc 90 91 a9 c6 ef f9 b0 55 bf 55 1a c8 58 77 82 04 f0 ff 9d c4 ec 3f f2 75 fc 97 4c 0f 2c 6c 09 b3 93 e9 d1 0c 0f c9 30 fd 82 a7 a9 49 c9 21 ca c1 05 d9 37 fa 1a 9c 6d 33 9a 40 17 c6 64 25 dd 9d ea 23 4a fd 45 4f 95 4a d8 56 41 01 43 e2 c9 42 0c Data Ascii: UUXw?uL,l0I!7m3@d%#JEOJVACB_<'~JBKTOEH^a,}w4yp$9MR6O"-aRf]dE{EK-"wP? aVuB{pt&5/C1mF-n*#BIHaNu
Jan 10, 2025 00:21:50.647840023 CET	499	OUT	GET /track.php?domain=myuhchvision.com&toggle=browserjs&uid=MTczNjQ2NDkwOS43NDM2OjQ3ZGQ4MDVlNDY3ODk5YzdhZmE5ODJiZWIxZTNjZGFmZDhjNDExNzliNWIxNWJjNzM0ZjRhZDI1NGI5MTFjMTE6Njc4MDVhMGRiNTg3Zg%3D%3D HTTP/1.1 Host: api.myuhchvision.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://api.myuhchvision.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 10, 2025 00:21:50.847183943 CET	540	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 09 Jan 2025 23:21:50 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: keep-alive Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * X-Custom-Track: browserjs X-Http-Caddy: yes
Jan 10, 2025 00:21:50.883016109 CET	376	OUT	GET /ls.php?t=67805a0d&token=97d63dc638987051951f6cde063e6a972a611362 HTTP/1.1 Host: api.myuhchvision.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://api.myuhchvision.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 10, 2025 00:21:51.084283113 CET	906	IN	HTTP/1.1 201 Created Server: nginx Date: Thu, 09 Jan 2025 23:21:50 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Log-Success: 67805a0e3157211b18073e6d Charset: utf-8 Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Max-Age: 86400 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_eZE2NX6Rjm6VTTkVSZXZEv9UnTrDrp3N+1F12oRVOs45QLOWPq5M0mrlHINI/ULJaaPEJzIFXGYE6vN05qtLhQ== Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"success":true}0
Jan 10, 2025 00:21:54.733767986 CET	698	OUT	GET /track.php?domain=myuhchvision.com&caf=1&toggle=answercheck&answer=yes&uid=MTczNjQ2NDkwOS43NDM2OjQ3ZGQ4MDVlNDY3ODk5YzdhZmE5ODJiZWIxZTNjZGFmZDhjNDExNzliNWIxNWJjNzM0ZjRhZDI1NGI5MTFjMTE6Njc4MDVhMGRiNTg3Zg%3D%3D HTTP/1.1 Host: api.myuhchvision.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://api.myuhchvision.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _cq_duid=1.1736464910.0Pdysz9c9e6s7CS9; _cq_suid=1.1736464910.8hbiYeRpDfn2XE6U; __gsas=ID=c2d96085edb8c52a:T=1736464913:RT=1736464913:S=ALNI_MYPZC8TKmtU-_fM69ccp9F25OCunQ
Jan 10, 2025 00:21:54.930984020 CET	610	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 09 Jan 2025 23:21:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Jan 10, 2025 00:21:54.942986965 CET	564	OUT	GET /favicon.ico HTTP/1.1 Host: api.myuhchvision.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://api.myuhchvision.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _cq_duid=1.1736464910.0Pdysz9c9e6s7CS9; _cq_suid=1.1736464910.8hbiYeRpDfn2XE6U; __gsas=ID=c2d96085edb8c52a:T=1736464913:RT=1736464913:S=ALNI_MYPZC8TKmtU-_fM69ccp9F25OCunQ
Jan 10, 2025 00:21:55.134520054 CET	230	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 09 Jan 2025 23:21:55 GMT Content-Type: image/x-icon Content-Length: 0 Last-Modified: Wed, 16 Oct 2024 07:59:04 GMT Connection: keep-alive ETag: "670f7248-0" Accept-Ranges: bytes
Jan 10, 2025 00:22:06.029483080 CET	1311	OUT	GET /?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTA5Ljc3OTR8NmE2MDdhMzFkNzdlNzA2ZmVjOTAwNjczMmM0NDE0NDJjODU1MzliZXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%3D%3D&query=United+Healthcare+Medicare&afdToken=ChMIpK7J8uPpigMVqoX9Bx1cfACQEmoBlLqpjxgmjCzROndp4cIsoUpMclKqzmCF8A4idqYAc6BRFXzqpQZr5mHskq-o8oROHsWon_E3VNBfAnPv0EnTUZ4xhapxEHMsWhLX36L28YhUgQYpSE5TWYluVMNln-ErnASvWEH_lO70IAE&pcsa=false&nb=0&nm=7&nx=264&ny=69&is=530x496&clkt=3&suid=32397724909 HTTP/1.1 Host: api.myuhchvision.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _cq_duid=1.1736464910.0Pdysz9c9e6s7CS9; _cq_suid=1.1736464910.8hbiYeRpDfn2XE6U; __gsas=ID=c2d96085edb8c52a:T=1736464913:RT=1736464913:S=ALNI_MYPZC8TKmtU-_fM69ccp9F25OCunQ
Jan 10, 2025 00:22:06.357871056 CET	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 09 Jan 2025 23:22:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Buckets: bucket011,bucket088,bucket089 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_GpOHeiVTHaI2cUaFcjgezF7vWqA1oex3to7THXZi9li45jJt/HaqH6GsY4AuPdMtsE5jS08OJI0nANLiHFFcoA== X-Template: tpl_CleanPeppermintBlack_oneclick X-Language: english Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Pcrew-Ip-Organization: CenturyLink X-Pcrew-Blocked-Reason: X-Domain: myuhchvision.com X-Subdomain: api Content-Encoding: gzip Data Raw: 37 37 65 0d 0a 1f 8b 08 00 00 00 00 00 04 03 e5 5c 79 77 da c8 b2 ff db f9 14 0a 39 13 f0 0d 8b c4 e2 05 87 e4 62 63 c7 f6 04 9c 05 c7 b1 73 f2 7c 84 d4 80 8c 90 18 49 18 f0 5c 7f f7 fb ab ee 96 90 40 64 99 33 79 73 de 79 49 6c 50 af d5 d5 b5 57 29 2f 9f b6 2e 8e ba d7 ef 8e 95 61 30 b6 5f 3d 79 49 1f 8a a9 07 7a 41 37 7b b6 6b 8c 46 6c d1 c8 b4 4f 66 b3 d6 fb eb f3 df dd 9b b3 e1 bd d1 69 be 3f 3e 3c 7c df 6c 7d 9c 35 67 1f 9b e7 87 cd b7 7f 4c 5b 27 c7 dd cf 1f 1c f5 d4 53 6b fd cb 77 bb c7 e7 dd dd dd f9 b5 f3 6e fc a1 37 69 2f aa f7 a3 bd df af ad 53 67 d4 99 30 d3 b9 bb 68 76 ce 0d fd 73 eb b3 f1 fb fb f3 8e ea 7c fe fd e6 fc ed 6e d7 b0 ce 5b 7b 4d f7 f4 f3 ef 5a 6d ef a8 39 3b 6e 36 df 37 1a b7 6f 26 17 a7 cc fa d4 3d d5 cf ca c6 a5 7e 62 dc 0d d8 c3 c9 ee fd d5 1f 4d cd 65 Data Ascii: 77e\yw9bcs\|I\@d3ysyIlPW)/.a0_=yIzA7{kFlOfi?><\|l}5gL['Skwn7i/Sg0hvs\|n[{MZm9;n67o&=~bMe
Jan 10, 2025 00:22:06.357897997 CET	1236	IN	Data Raw: f3 4a e0 ee 76 4f 3f df 58 fb b6 55 ad dd 9d 07 a5 53 fd 8f d3 9d 37 fe 75 b5 39 7d 67 b6 03 ff b8 76 f7 51 dd bb 38 3f 53 9d 66 e7 ad 75 7a 72 62 b8 cd 46 23 a3 cc c7 b6 e3 37 32 c3 20 98 d4 4b a5 d9 6c 56 9c 55 8a ae 37 28 69 fb fb fb a5 39 e1 Data Ascii: JvO?XUS7u9}gvQ8?SfuzrbF#72 KlVU7(i9#3hd!1\|Dc@\0)?}#s:sBw1aOLAV:P,hL~a/S/c[l6q 6}fa{`W,,.nWg9BVphlj[S4h~2f7
Jan 10, 2025 00:22:06.357908964 CET	425	IN	Data Raw: 14 3f d0 bd e0 88 9c 1a 3f f0 1a 59 89 ba 6c 5e 61 8e 99 d2 fc 46 12 17 39 82 0d 4d c1 7d c5 34 69 92 73 97 26 f5 1a 5d c7 5c 8b 8d d3 fd 89 ee 90 39 12 b2 8f e5 70 ce 0f b9 48 0a 38 55 a9 48 a9 d6 f3 98 3e 8a 4f 10 cc 83 f5 ff cd fd 3e c5 75 ec Data Ascii: ??Yl^aF9M}4is&]\9pH8UH>O>u"\|?EwL%#NT ipW9[A2.[[&^b+)kreoKKO@XZ3iop[}BApli\|.C[%'urqG#2B
Jan 10, 2025 00:22:06.358232975 CET	1236	IN	Data Raw: 31 34 37 37 0d 0a 07 e3 9f e9 77 fa 1c b6 22 c6 2e 67 44 44 18 ca 56 29 e8 ca 08 5b 81 e9 42 5b 5c 3e c6 b9 45 32 76 e4 40 70 b7 0f c6 26 b7 da 43 48 78 18 4b 44 a7 22 81 25 6d 61 52 26 53 1f d2 97 6f c4 25 55 6a 4f 5a e3 e3 0f 70 fa bf 80 10 12 Data Ascii: 1477w".gDDV)[B[\>E2v@p&CHxKD"%maR&So%UjOZp!BHUR[=L!ifTvDxiBvqyl,n~h@u+Q>L9\|falJcqY+Vp%8}:w%CuRDFdu`H\?mH:o92]#1t
Jan 10, 2025 00:22:06.358252048 CET	1236	IN	Data Raw: 55 4c e6 b6 87 52 9b 51 06 41 c8 b1 3b f5 99 e9 ce 1c 80 45 66 64 2e 8b 53 20 de 9a 5d 9d 0c 65 20 b6 07 00 74 a1 af 5a 17 ed e6 59 47 f9 d8 7c 7b 0c f8 a9 e5 65 cf 53 48 a9 f2 fb a2 c2 98 70 e8 d1 db b3 a3 df 95 d3 e3 0f c7 4a f7 42 39 bc bc 56 Data Ascii: ULRQA;Efd.S ]e tZYG\|{eSHpJB9V:WObC_h^V*%EA%hc ku\yCw%0Wr#-=Pd6?VwZ{SgE1lduslUa[(vwoWC\|4
Jan 10, 2025 00:22:06.422910929 CET	1334	OUT	GET /track.php?domain=myuhchvision.com&toggle=browserjs&uid=MTczNjQ2NDkyNi4yMzk1OmQ2MzliYTM3ZDFjNWQ4ZTdlMjkzYWMzYzA4MDc3YmM5M2ZmZjc1MTRjZmI1NWZkMDVmNDhiZjMwNTgyNWUxMjg6Njc4MDVhMWUzYTdhYw%3D%3D HTTP/1.1 Host: api.myuhchvision.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://api.myuhchvision.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTA5Ljc3OTR8NmE2MDdhMzFkNzdlNzA2ZmVjOTAwNjczMmM0NDE0NDJjODU1MzliZXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%3D%3D&query=United+Healthcare+Medicare&afdToken=ChMIpK7J8uPpigMVqoX9Bx1cfACQEmoBlLqpjxgmjCzROndp4cIsoUpMclKqzmCF8A4idqYAc6BRFXzqpQZr5mHskq-o8oROHsWon_E3VNBfAnPv0EnTUZ4xhapxEHMsWhLX36L28YhUgQYpSE5TWYluVMNln-ErnASvWEH_lO70IAE&pcsa=false&nb=0&nm=7&nx=264&ny=69&is=530x496&clkt=3&suid=32397724909 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _cq_duid=1.1736464910.0Pdysz9c9e6s7CS9; _cq_suid=1.1736464910.8hbiYeRpDfn2XE6U; __gsas=ID=c2d96085edb8c52a:T=1736464913:RT=1736464913:S=ALNI_MYPZC8TKmtU-_fM69ccp9F25OCunQ
Jan 10, 2025 00:22:06.758991003 CET	608	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 09 Jan 2025 23:22:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Jan 10, 2025 00:22:06.973845005 CET	1211	OUT	GET /ls.php?t=67805a1e&token=39959dc862d6c4777e5f274659ded6a1236f127b HTTP/1.1 Host: api.myuhchvision.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://api.myuhchvision.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTA5Ljc3OTR8NmE2MDdhMzFkNzdlNzA2ZmVjOTAwNjczMmM0NDE0NDJjODU1MzliZXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%3D%3D&query=United+Healthcare+Medicare&afdToken=ChMIpK7J8uPpigMVqoX9Bx1cfACQEmoBlLqpjxgmjCzROndp4cIsoUpMclKqzmCF8A4idqYAc6BRFXzqpQZr5mHskq-o8oROHsWon_E3VNBfAnPv0EnTUZ4xhapxEHMsWhLX36L28YhUgQYpSE5TWYluVMNln-ErnASvWEH_lO70IAE&pcsa=false&nb=0&nm=7&nx=264&ny=69&is=530x496&clkt=3&suid=32397724909 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _cq_duid=1.1736464910.0Pdysz9c9e6s7CS9; _cq_suid=1.1736464910.8hbiYeRpDfn2XE6U; __gsas=ID=c2d96085edb8c52a:T=1736464913:RT=1736464913:S=ALNI_MYPZC8TKmtU-_fM69ccp9F25OCunQ
Jan 10, 2025 00:22:07.172435045 CET	906	IN	HTTP/1.1 201 Created Server: nginx Date: Thu, 09 Jan 2025 23:22:07 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Log-Success: 67805a1fd3d6ff53b108f22e Charset: utf-8 Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Max-Age: 86400 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_hXgUmS6LkVi5Xew5AdAeL/5cEUF+s7yAhv8gdAxfhYiprvBUGroTQOJjojBXDaleNPXcep6AOCmog8pL505vBg== Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"success":true}0
Jan 10, 2025 00:22:08.316855907 CET	1353	OUT	GET /track.php?domain=myuhchvision.com&caf=1&toggle=answercheck&answer=yes&uid=MTczNjQ2NDkyNi4yMzk1OmQ2MzliYTM3ZDFjNWQ4ZTdlMjkzYWMzYzA4MDc3YmM5M2ZmZjc1MTRjZmI1NWZkMDVmNDhiZjMwNTgyNWUxMjg6Njc4MDVhMWUzYTdhYw%3D%3D HTTP/1.1 Host: api.myuhchvision.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://api.myuhchvision.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTA5Ljc3OTR8NmE2MDdhMzFkNzdlNzA2ZmVjOTAwNjczMmM0NDE0NDJjODU1MzliZXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%3D%3D&query=United+Healthcare+Medicare&afdToken=ChMIpK7J8uPpigMVqoX9Bx1cfACQEmoBlLqpjxgmjCzROndp4cIsoUpMclKqzmCF8A4idqYAc6BRFXzqpQZr5mHskq-o8oROHsWon_E3VNBfAnPv0EnTUZ4xhapxEHMsWhLX36L28YhUgQYpSE5TWYluVMNln-ErnASvWEH_lO70IAE&pcsa=false&nb=0&nm=7&nx=264&ny=69&is=530x496&clkt=3&suid=32397724909 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _cq_duid=1.1736464910.0Pdysz9c9e6s7CS9; _cq_suid=1.1736464910.8hbiYeRpDfn2XE6U; __gsas=ID=c2d96085edb8c52a:T=1736464913:RT=1736464913:S=ALNI_MYPZC8TKmtU-_fM69ccp9F25OCunQ
Jan 10, 2025 00:22:08.652013063 CET	610	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 09 Jan 2025 23:22:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.10	49765	185.53.178.30	80	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 10, 2025 00:21:49.979034901 CET	329	OUT	GET /scripts/sale_form.js HTTP/1.1 Host: c.parkingcrew.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://api.myuhchvision.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 10, 2025 00:21:50.637271881 CET	1005	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 09 Jan 2025 23:21:50 GMT Content-Type: application/javascript Content-Length: 761 Connection: keep-alive Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT ETag: "65fc1e7b-2f9" Accept-Ranges: bytes Data Raw: 2f 2a 0a 20 2a 20 53 61 6c 65 73 20 66 6f 72 6d 20 63 6c 69 63 6b 20 74 72 61 63 6b 65 72 0a 20 2a 0a 20 2a 20 74 6c 69 6e 6b 28 29 20 77 69 6c 6c 20 6c 6f 61 64 20 61 20 31 78 31 20 47 49 46 20 74 6f 20 74 72 61 63 6b 20 63 6c 69 63 6b 6f 75 74 73 20 74 6f 20 74 68 65 20 63 6f 6e 74 61 63 74 20 66 6f 72 6d 0a 20 2a 20 53 6f 6d 65 20 62 61 73 69 63 20 73 63 72 61 6d 62 6c 69 6e 67 20 70 72 65 76 65 6e 74 73 20 28 61 20 6c 6f 74 20 6f 66 29 20 77 65 62 20 73 63 72 61 70 65 72 73 20 74 6f 20 66 6f 6c 6c 6f 77 20 74 68 65 20 6c 69 6e 6b 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 36 2d 30 33 2d 32 32 0a 2a 2f 0a 0a 2f 2f 20 66 75 6e 63 74 69 6f 6e 20 74 6c 69 6e 6b 28 76 2c 20 77 6f 77 29 0a 2f 2f 20 76 20 69 73 20 61 20 66 69 78 65 64 20 73 74 72 69 6e 67 0a 2f 2f 20 77 6f 77 20 77 69 6c 6c 20 63 6f 6e 74 61 69 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 0a 66 75 6e 63 74 69 6f 6e 20 74 6c 69 6e 6b 28 76 2c 20 77 6f 77 29 20 7b 0a 20 20 20 20 69 66 20 28 64 6f 63 75 [TRUNCATED] Data Ascii: /* * Sales form click tracker * * tlink() will load a 1x1 GIF to track clickouts to the contact form * Some basic scrambling prevents (a lot of) web scrapers to follow the link * * Date: 2016-03-22*/// function tlink(v, wow)// v is a fixed string// wow will contain the current domain namefunction tlink(v, wow) { if (document.location.search.indexOf('_xas') === -1) { // define some compenents that will later form the link to the 1x1 GIF var proto_suf = "tp", string = "omainb", parameter = "php?salelink=1"; // generate and load the 1x1 GIF new Image().src= "ht" + proto_suf + ":" + "//" + "ww" + "w.myd" + string + "uy.com/sale_form." + parameter + "&dom" + "ain_name=" + wow; }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.10	49770	185.53.178.30	80	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 10, 2025 00:21:50.664920092 CET	290	OUT	GET /scripts/sale_form.js HTTP/1.1 Host: c.parkingcrew.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 10, 2025 00:21:51.344118118 CET	1005	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 09 Jan 2025 23:21:51 GMT Content-Type: application/javascript Content-Length: 761 Connection: keep-alive Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT ETag: "65fc1e7b-2f9" Accept-Ranges: bytes Data Raw: 2f 2a 0a 20 2a 20 53 61 6c 65 73 20 66 6f 72 6d 20 63 6c 69 63 6b 20 74 72 61 63 6b 65 72 0a 20 2a 0a 20 2a 20 74 6c 69 6e 6b 28 29 20 77 69 6c 6c 20 6c 6f 61 64 20 61 20 31 78 31 20 47 49 46 20 74 6f 20 74 72 61 63 6b 20 63 6c 69 63 6b 6f 75 74 73 20 74 6f 20 74 68 65 20 63 6f 6e 74 61 63 74 20 66 6f 72 6d 0a 20 2a 20 53 6f 6d 65 20 62 61 73 69 63 20 73 63 72 61 6d 62 6c 69 6e 67 20 70 72 65 76 65 6e 74 73 20 28 61 20 6c 6f 74 20 6f 66 29 20 77 65 62 20 73 63 72 61 70 65 72 73 20 74 6f 20 66 6f 6c 6c 6f 77 20 74 68 65 20 6c 69 6e 6b 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 36 2d 30 33 2d 32 32 0a 2a 2f 0a 0a 2f 2f 20 66 75 6e 63 74 69 6f 6e 20 74 6c 69 6e 6b 28 76 2c 20 77 6f 77 29 0a 2f 2f 20 76 20 69 73 20 61 20 66 69 78 65 64 20 73 74 72 69 6e 67 0a 2f 2f 20 77 6f 77 20 77 69 6c 6c 20 63 6f 6e 74 61 69 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 64 6f 6d 61 69 6e 20 6e 61 6d 65 0a 66 75 6e 63 74 69 6f 6e 20 74 6c 69 6e 6b 28 76 2c 20 77 6f 77 29 20 7b 0a 20 20 20 20 69 66 20 28 64 6f 63 75 [TRUNCATED] Data Ascii: /* * Sales form click tracker * * tlink() will load a 1x1 GIF to track clickouts to the contact form * Some basic scrambling prevents (a lot of) web scrapers to follow the link * * Date: 2016-03-22*/// function tlink(v, wow)// v is a fixed string// wow will contain the current domain namefunction tlink(v, wow) { if (document.location.search.indexOf('_xas') === -1) { // define some compenents that will later form the link to the 1x1 GIF var proto_suf = "tp", string = "omainb", parameter = "php?salelink=1"; // generate and load the 1x1 GIF new Image().src= "ht" + proto_suf + ":" + "//" + "ww" + "w.myd" + string + "uy.com/sale_form." + parameter + "&dom" + "ain_name=" + wow; }}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.10	49776	18.66.121.190	80	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 10, 2025 00:21:50.871886015 CET	433	OUT	GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1 Host: d38psrni17bvxu.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://api.myuhchvision.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 10, 2025 00:21:51.549369097 CET	442	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11375 Connection: keep-alive Server: nginx Date: Thu, 09 Jan 2025 11:04:57 GMT Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT Accept-Ranges: bytes ETag: "65fc1e7b-2c6f" X-Cache: Hit from cloudfront Via: 1.1 3fd7afcdda21f0b562dfcbf7920c44a0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: bA6pxR0qVT38yLuZzt5VkGtxmbfElAw5BhtyXAtelrkAGEBUfRiDoQ== Age: 44214
Jan 10, 2025 00:21:51.549381971 CET	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 58 08 03 00 00 00 4f 6d d4 16 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 00 50 4c 54 45 00 00 00 ff Data Ascii: PNGIHDRXOmtEXtSoftwareAdobe ImageReadyqe<PLTEcdtIK^IK]IK\03IHK_acsceubdtcet0=@SHK]IL]HK\MPbNQbORc.0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes-0 5!6"7#8
Jan 10, 2025 00:21:51.549393892 CET	224	IN	Data Raw: a4 aa 57 2a 20 af c2 1d de 89 88 54 d3 3e 08 77 78 27 22 52 4c fb 60 dc e1 9d 88 48 2d ed c3 70 87 77 22 22 a5 b4 0f c7 1d de 89 88 54 d2 3e 0a 77 78 27 22 12 d9 08 bb 47 e2 0e ef 44 44 ea 68 af 83 3b bc 13 11 29 a3 bd 1e ee f0 4e 44 a4 8a f6 ba Data Ascii: W* T>wx'"RL`H-pw""T>wx'"GDDh;)ND;"DDjho{'~X""74wx'"OND$v/H6;dqw""}+DD2io;ND$;@DDh;=ND$P;Q
Jan 10, 2025 00:21:51.549402952 CET	1236	IN	Data Raw: 7e b2 47 16 ee f0 4e 44 24 86 f6 90 b8 c3 3b 11 91 10 da c3 e2 0e ef 44 44 22 68 0f 8d 3b bc 13 11 09 a0 3d 3c ee f0 4e 44 94 9d f6 18 b8 c3 3b 11 51 a3 22 38 1c 05 77 78 27 22 ca 4a 7b 2c dc e1 9d 88 28 23 ed f1 70 87 77 22 a2 6c b4 c7 c4 1d de Data Ascii: ~GND$;DD"h;=<ND;Q"8wx'"J{,(#pw"l2wx'"B{l(qw"wx'"JJ{*(!pw"d NDnwx'"h7;MD&qw"2+;MD&qw"v;A
Jan 10, 2025 00:21:51.549413919 CET	1236	IN	Data Raw: d9 70 8f c4 3b b8 57 c4 db 7b c4 31 99 7c b8 e7 a2 3d 23 ee 51 78 07 f7 aa b8 ac 4a 7d 71 2d 35 09 ee bb bf b8 2d 9f b0 19 71 8f c0 3b b8 57 c6 81 77 e2 bb 3d 03 ee bb 77 9e c8 e9 6b 56 dc 83 f3 0e ee 95 bd 0b 66 b4 be 77 59 15 d1 71 cf 4c 7b 76 Data Ascii: p;W{1\|=#QxJ}q-5-q;Ww=wkVfwYqL{vU)~{v}7Gw=-h{{1F,E.`{_s1W&Bh{ s.vA=hn5wQS;}mwbNI(.v;S
Jan 10, 2025 00:21:51.549424887 CET	1236	IN	Data Raw: ab d7 99 71 8f c0 7b 2d da cd e2 ce fb 1d 24 ab 4f 4f 16 8b 7b 97 f7 4b 1a 68 8f 85 7b 60 de 6b d2 6e 17 77 0e bc 93 a4 6e 9f 2c 19 f7 d0 bc 47 a2 3d 1e ee 1d de 7f 95 9a 76 c3 b8 73 24 92 e4 f4 ce 64 e1 b8 ef 08 f8 1a 5f 34 da 63 e2 7e f0 e0 37 Data Ascii: q{-$OO{Kh{`knwn,G=vs$d_4c~7v;aCH{\v;$=*qoGLpo{d#?+l19G=oipq=ipv~;$!;wP>?xApo7
Jan 10, 2025 00:21:51.549433947 CET	1236	IN	Data Raw: 20 53 1f f7 0e ef df 7f 4b 26 ed 3d de ff c4 32 ee 5c 4b 25 15 5d b0 8c 7b 26 da 6b bd c6 37 82 f6 91 b8 8f 3c f8 9e 8f f6 aa 91 91 13 d8 4e 84 ee 81 70 cf 48 fb c8 cd f7 91 b4 d7 c0 7d d8 c9 c8 c3 79 69 ef e7 dd 0e ee 5c 4b 25 35 5d 67 13 f7 dc Data Ascii: SK&=2\K%]{&k7<NpH}yi\K%5]gF]>&O`;2\|;l'BK: W-q:X{k5'#7aikg#6pg)v}dZcR;
Jan 10, 2025 00:21:51.549462080 CET	1236	IN	Data Raw: 05 f7 35 7d 84 11 a4 b3 6d e0 be ae 7f fd c6 d7 f2 ea 9a 15 f7 f1 b3 fb f7 7f ed fe 87 c0 9d 0f 77 e2 d3 dd 16 ee cf df 3f be 7f ff d9 f1 42 71 ef d2 de 2d 20 ef da 71 7f 11 1f 48 73 2f 82 fb 1a da 7b 8d 17 88 fb 15 da 7b dd fb 10 b8 63 3b a1 bb Data Ascii: 5}mw?Bq- qHs/{{c;Wi@{8uv;#p_O{F=sNq=Naxv"t{5xwbhb}w=q?DxW;&n,aGw^b"}4ywhoVo'Sm+z'sNq
Jan 10, 2025 00:21:51.549474001 CET	1236	IN	Data Raw: de 6b d2 de e9 a9 16 b8 2f 35 69 ec ee dc b4 67 c5 9d 8d 77 a2 10 bd b9 28 0a f7 d4 bc d7 a7 7d 24 ef ae ce 75 54 79 bc 57 d2 9e 19 77 74 27 52 6d 7b 35 ee 29 79 6f 46 fb 08 de 5d 30 da 13 f2 3e 80 f6 dc b8 a3 3b 91 66 db 07 e1 9e 8a f7 e6 b4 0f Data Ascii: k/5igw(}$uTyWwt'Rm{5)yoF]0>;f{FD2.!'}qGw"=6=2Ci;}81yoG]p#>v;VGW">(R!=5h;w>RA=0h
Jan 10, 2025 00:21:51.549485922 CET	1204	IN	Data Raw: c0 bc 3b 85 b4 0f e6 7d 01 db 89 d0 3d 24 ee 49 69 ef d9 76 51 14 ee a9 69 1f c4 fb 02 b6 13 69 ef 4d 41 b8 27 a7 3d 20 ef 4e 29 ed d5 bc 2f 60 3b 11 ba 87 c2 3d 0b ed c1 78 77 6a 69 af e2 7d 01 db 89 d0 3d 0c ee d9 68 0f c4 bb 53 4c 7b 3f ef 99 Data Ascii: ;}=$IivQiiMA'= N)/`;=xwji}=hSL{?pgw/`;d=;xwi_{'C]ywi_7pC{KWy;#IEwg+/`;.^O&]"v"tBmk,+"Mf?1T<xwh
Jan 10, 2025 00:21:51.626492977 CET	1236	IN	Data Raw: ee ef a5 a7 3d 32 ee d8 4e 64 5b f7 23 e9 cd 8a c8 7b 24 dc e3 0d 7e cc 86 3b b6 13 19 d7 fd 48 0e b5 a2 f1 ee 0c d1 1e 17 77 56 15 91 71 dd 8f e4 71 2b 12 ef ce 10 ed 51 71 67 4d 11 c9 c8 1c ee 91 9e 6b 72 86 68 8f 88 3b 23 07 88 c4 74 ad 39 dc Data Ascii: =2Nd[#{$~;HwVqq+QqgMkrh;#t9wl'e{G=&vf+HghJ=7ay{Q3J"*B}JBG5 c8"]6{(>#;BwF1=8NT8{b&#h;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.10	49777	185.53.177.50	80	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 10, 2025 00:21:50.878801107 CET	460	OUT	GET /track.php?domain=myuhchvision.com&toggle=browserjs&uid=MTczNjQ2NDkwOS43NDM2OjQ3ZGQ4MDVlNDY3ODk5YzdhZmE5ODJiZWIxZTNjZGFmZDhjNDExNzliNWIxNWJjNzM0ZjRhZDI1NGI5MTFjMTE6Njc4MDVhMGRiNTg3Zg%3D%3D HTTP/1.1 Host: api.myuhchvision.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 10, 2025 00:21:51.566880941 CET	608	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 09 Jan 2025 23:21:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Jan 10, 2025 00:21:54.959537029 CET	659	OUT	GET /track.php?domain=myuhchvision.com&caf=1&toggle=answercheck&answer=yes&uid=MTczNjQ2NDkwOS43NDM2OjQ3ZGQ4MDVlNDY3ODk5YzdhZmE5ODJiZWIxZTNjZGFmZDhjNDExNzliNWIxNWJjNzM0ZjRhZDI1NGI5MTFjMTE6Njc4MDVhMGRiNTg3Zg%3D%3D HTTP/1.1 Host: api.myuhchvision.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _cq_duid=1.1736464910.0Pdysz9c9e6s7CS9; _cq_suid=1.1736464910.8hbiYeRpDfn2XE6U; __gsas=ID=c2d96085edb8c52a:T=1736464913:RT=1736464913:S=ALNI_MYPZC8TKmtU-_fM69ccp9F25OCunQ
Jan 10, 2025 00:21:55.153083086 CET	610	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 09 Jan 2025 23:21:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.10	49779	18.66.121.190	80	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 10, 2025 00:21:51.095424891 CET	392	OUT	GET /fonts/Port_Lligat_Slab/latin.woff2 HTTP/1.1 Host: d38psrni17bvxu.cloudfront.net Connection: keep-alive Origin: http://api.myuhchvision.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://api.myuhchvision.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 10, 2025 00:21:51.757164001 CET	532	IN	HTTP/1.1 200 OK Content-Type: font/woff2 Content-Length: 11460 Connection: keep-alive Server: nginx Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT Accept-Ranges: bytes Date: Thu, 09 Jan 2025 08:44:47 GMT ETag: "65fc1e7b-2cc4" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 375431e28d82888f474ac3665a4ceb66.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: TbgORDYIHJlhR9yJ9nGJQwjphFKUhb6HGCKy69EnxqQaUo6BQYYszA== Age: 52640 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: *
Jan 10, 2025 00:21:51.757499933 CET	1236	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 2c c4 00 0e 00 00 00 00 76 08 00 00 2c 6c 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 16 1b 84 5c 1c 28 06 60 00 81 44 11 08 0a 81 d0 04 81 9c 18 0b 83 2c 00 01 36 02 24 03 86 54 04 20 Data Ascii: wOF2,v,l\(`D,6$T Q\|Y"8*/!y"CDL RyB[rlyaJ`f3mOrf#DJRa` b4bNqm.tQ}zHUC#_U@#jkN~>@aK^
Jan 10, 2025 00:21:51.757613897 CET	1236	IN	Data Raw: 97 95 59 2d ab 67 8d 59 81 ac 90 7d e5 76 9b 6c d3 da f4 36 81 44 4b c9 13 30 0d c7 91 81 0c c6 e0 0c 91 01 70 91 11 b0 cf 7d db f7 7d 60 db 56 b6 0d a4 ab 6a 16 58 87 44 f7 06 01 39 b1 31 da e5 e9 d4 ad 03 df 02 6f 40 1a 11 0b a9 eb 0c 31 76 89 Data Ascii: Y-gY}vl6DK0p}}`VjXD91o@1vpLy@IIuyI#)\|R2#Ys^.xS2.8C-@~E n<Mbrgyx:U5ORU;+p#1 >MXkze0
Jan 10, 2025 00:21:51.757626057 CET	1236	IN	Data Raw: 20 13 83 24 70 11 de dd 58 c1 e3 68 1b df 01 e7 9a 40 e6 b6 b6 8a 4a 1b 62 cf 86 9b 84 67 9e 57 02 7c 0e b7 b2 38 1c 22 8d c5 6d 6d bc e2 e9 f1 ba c6 54 87 73 ce d4 dd da 41 2a 2f 58 6d 41 eb 59 15 36 83 fa e5 eb 7a 71 78 d4 dd 08 d2 7e d5 ca ef Data Ascii: $pXh@JbgW\|8"mmTsA/XmAY6zqx~fdLj)vM"^XT2B&/s-h%^82n9i9yQ"29M!b!mhYjW%\{"FMs1Mx4\N3c7C
Jan 10, 2025 00:21:51.757637978 CET	1236	IN	Data Raw: fb 31 9f e2 7e 97 99 58 0e 9c c6 43 7b cd ed de ae a2 17 63 e1 48 7b f1 e0 47 b6 e7 6e 30 2d 9e 07 bf 78 a4 9f 10 9e 8b 9d f0 29 3c 36 84 1b 25 ec c0 cc 52 aa d3 50 cb 53 a5 cb 94 23 b6 a1 8e ae 7a 60 e3 08 4a b6 c7 d6 9c 84 0c 00 d7 fd d0 e5 bc Data Ascii: 1~XC{cH{Gn0-x)<6%RPS#z`Jaa#vS,g%IxzFUsA[Xx7874R,>\es/d7W8{5Duz db0%<\^?T?=q~<T7hGJCR27}
Jan 10, 2025 00:21:51.757656097 CET	1236	IN	Data Raw: 44 22 4d 42 c1 69 dc 32 b5 7b 31 54 8b 12 4f a3 36 c1 fa fa 60 07 cf 53 2e 46 d5 42 c5 40 b5 50 17 48 97 66 84 cc 31 d1 a3 e0 94 d4 15 e9 d5 40 7c a2 90 94 73 d8 1b 39 ea 0f 1e 24 26 fc 3f e0 4a 5a ec f0 7c da 9c 25 fe b4 d1 b9 51 f3 d7 f8 03 f4 Data Ascii: D"MBi2{1TO6`S.FB@PHf1@\|s9$&?JZ\|%Q7[DrgS3i#88Y-D^i$Kg/bIY0%,l;iPxHSqTiIMNSM=;g$bGfJ.F,A\[fW"CZU!fz+?
Jan 10, 2025 00:21:51.757685900 CET	1236	IN	Data Raw: 32 d6 f6 0c 26 e5 49 81 1a a1 90 3d 23 ea b7 a0 0b 2d 24 9a c9 2b e9 3b 76 44 32 64 0e 83 14 07 50 ab e7 c5 1a 72 b7 13 cd 49 34 17 c9 dc f9 61 0f 72 fa a9 90 ad b6 4f 96 a7 a7 98 84 d9 f3 17 33 5e 42 23 21 8d d0 1c bf fc fd 96 45 09 21 7d 92 32 Data Ascii: 2&I=#-$+;vD2dPrI4arO3^B#!E!}2P&@!;+DYFA_=1/:_8-QPz=T]4&u:Te!lZa0}<tTU9z$KzO(Z2ffb(e
Jan 10, 2025 00:21:51.757695913 CET	776	IN	Data Raw: 32 6b 49 bc ae 28 5e d5 24 2c 0e fc aa 03 c6 2a 2f ab 77 5b ba 5c 75 21 9b d7 45 28 a2 d8 c9 62 60 0b c0 b0 38 2e 39 a4 83 e1 24 89 3c 8e a1 94 92 76 75 ca 50 25 eb 90 46 09 31 12 41 cc 44 ca c8 d1 97 d4 e4 48 13 46 33 6a 48 20 27 73 65 e1 85 e2 Data Ascii: 2kI(^$,/w[\u!E(b`8.9$<vuP%F1ADHF3jH 'se l~".Qt[K`$[Qz(V=&nG?D4>-Zpi"j2Lx3=2\@wzH1v&#,K"{+@[+BV{*)>/~v
Jan 10, 2025 00:21:51.757707119 CET	1236	IN	Data Raw: a1 88 23 72 a0 5c 8d 90 04 51 4b 4b 75 c1 65 fe 7a 6f 6d 51 ec 54 8f af 6c 6a bb 1a b5 6d 89 c7 ef 4b c2 0f eb 81 b2 f1 3e 5d 30 c2 3e 1c d4 55 17 9f f6 59 0e d1 fe 99 32 39 9c 52 ee 82 69 34 7d 33 57 08 7d 4d c6 28 dd c4 40 1b a9 29 ae fb 8b 66 Data Ascii: #r\QKKuezomQTljmK>]0>UY29Ri4}3W}M(@)f5Q7<Xl?7w\|ivQE,@il_tkRHk\>U.*,t)/^M1PhM[FO'KmLt8>k[AThnbVc&
Jan 10, 2025 00:21:51.757718086 CET	652	IN	Data Raw: 56 43 9c 2e ff 8a ab bc ea 19 25 ae c3 03 e5 cd cb ab 79 d7 73 b3 4b 1d d8 33 17 bc 97 97 37 0d 5c 72 38 67 d4 70 af 57 94 69 34 e0 b8 99 68 09 d5 4a a2 69 bf b4 64 7e 8f 5e 1b a8 fc ec 11 32 37 c2 d0 24 ff 6d e0 37 2c 25 b7 02 14 c3 19 8b 37 bc Data Ascii: VC.%ysK37\r8gpWi4hJid~^27$m7,%7D,Z&du/E4D2sl~4Q&Zn6EEC`h{gJ/z)(dMrkcWi=>svGB^8XbL=o0OdO&/+0N;^{\|[GZ
Jan 10, 2025 00:21:51.846050978 CET	1236	IN	Data Raw: 6a 3c 3d 8b 35 41 b5 a6 e6 b6 54 62 e2 b1 7e 7b b2 2a b6 55 49 d2 c6 fc 68 db 6b 3b 23 71 f8 39 4b 7f 1f d9 ca 18 34 4f 2e c5 3c b7 b1 d1 34 d1 64 26 e6 9c 5e 46 aa 81 6f 95 60 59 53 69 78 27 05 99 df e3 f3 0c f0 b3 06 14 5b 14 96 93 72 e7 8b 9c Data Ascii: j<=5ATb~{*UIhk;#q9K4O.<4d&^Fo`YSix'[rnr&36tlm[}Yjv~QQ56L2.nl~RTDxeJ.)q}6?3=V/e wI&4\|}uwj3H'6c-ZUo-z'TwMg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.10	49783	18.66.121.190	80	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 10, 2025 00:21:51.650151968 CET	333	OUT	GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1 Host: d38psrni17bvxu.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 10, 2025 00:21:52.266071081 CET	442	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11375 Connection: keep-alive Server: nginx Date: Thu, 09 Jan 2025 11:04:57 GMT Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT Accept-Ranges: bytes ETag: "65fc1e7b-2c6f" X-Cache: Hit from cloudfront Via: 1.1 d20f19c14113bb86116d01e6cb4e2844.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: fwAXg1SxfBIpwiMRwjKnVCx2uthYcbGBEfczTh9jBgM3RYzzNkF9Kw== Age: 44215
Jan 10, 2025 00:21:52.266356945 CET	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 58 08 03 00 00 00 4f 6d d4 16 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 00 50 4c 54 45 00 00 00 ff Data Ascii: PNGIHDRXOmtEXtSoftwareAdobe ImageReadyqe<PLTEcdtIK^IK]IK\03IHK_acsceubdtcet0=@SHK]IL]HK\MPbNQbORc.0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes-0 5!6"7#8
Jan 10, 2025 00:21:52.266385078 CET	1236	IN	Data Raw: a4 aa 57 2a 20 af c2 1d de 89 88 54 d3 3e 08 77 78 27 22 52 4c fb 60 dc e1 9d 88 48 2d ed c3 70 87 77 22 22 a5 b4 0f c7 1d de 89 88 54 d2 3e 0a 77 78 27 22 12 d9 08 bb 47 e2 0e ef 44 44 ea 68 af 83 3b bc 13 11 29 a3 bd 1e ee f0 4e 44 a4 8a f6 ba Data Ascii: W* T>wx'"RL`H-pw""T>wx'"GDDh;)ND;"DDjho{'~X""74wx'"OND$v/H6;dqw""}+DD2io;ND$;@DDh;=ND$P;Q~GND$;
Jan 10, 2025 00:21:52.266401052 CET	448	IN	Data Raw: 3d 32 ee c9 79 07 77 74 27 af 58 35 e9 71 8f 4b 7b 74 dc 3b bc 7f 09 dc d1 9d b0 1d dc d3 d2 9e 00 f7 f9 f9 53 bb c0 1d dd 49 70 3f 67 c5 a4 c6 3d 3e ed 49 70 4f c8 3b b8 5f e9 4e c4 22 8e c9 48 c5 3d 05 ed 89 70 4f c6 3b b8 5f 8d eb 4c 54 b3 cf Data Ascii: =2ywt'X5qK{t;SIp?g=>IpO;_N"H=pO;_LTZd'W;.T'}~K=IqO;;aXS;fI\]J{ZwpGwj+$i{Tf="py[gwp2=p;W{1\|=#
Jan 10, 2025 00:21:52.266416073 CET	1236	IN	Data Raw: 4e d6 49 28 dc 85 d1 2e 0f f7 76 bc 83 3b b6 53 b3 b8 ce 14 06 77 71 b4 4b c4 bd 0d ef e0 be 1a d7 52 09 dd 53 e1 2e 90 76 99 b8 fb f3 0e ee d8 4e e8 9e 1a f7 db 7e 7c 42 22 a3 32 71 f7 e5 1d dc af c4 c8 01 aa 1d 97 55 5b e1 7e db 4b 42 11 95 8a Data Ascii: NI(.v;SwqKRS.vN~\|B"2qU[~KB#.v1r(O9C{/^q]i{<Rht;=i?k>ht7Fl6D~jc;]pWOw
Jan 10, 2025 00:21:52.266431093 CET	1236	IN	Data Raw: 50 be 3e 3f 09 ee 03 78 7f 41 1e ed e9 70 6f c0 bb 37 ed 25 e0 ce 75 26 ca d5 ed 93 e0 3e b0 da cf 35 25 a3 3d 25 ee 35 79 6f 41 7b 11 b8 73 24 92 f2 f4 ce 24 b8 b7 e6 7d f6 50 42 70 53 e2 5e 83 f7 56 b4 97 81 3b ba 13 b6 0b c4 bd c3 fb 76 49 b4 Data Ascii: P>?xApo7%u&>5%=%5yoA{s$$}PBpS^V;vI}-i/wS.L{iO9I+daM&hs:qGwvWk~)2q=p_{(K;(U=]^x4>='J{Ys$R$
Jan 10, 2025 00:21:52.266446114 CET	448	IN	Data Raw: 8b a4 7d 85 f7 1a 07 64 5a e0 de e5 fd d9 63 52 3b fe 85 dd 5c 4b 25 ca 93 85 cb aa 7f 29 95 f6 4e cf 1e 58 6a 88 75 43 dc 5f ff e0 dc f9 37 a4 f2 be f5 b9 b9 93 52 63 ed 13 ad f4 b0 d8 65 3a f7 dc 56 a9 b4 bf 71 fe dc 07 af 47 c4 bd 43 7b 37 99 Data Ascii: }dZcR;\K%)NXjuC_7Rce:VqGC{7o}Y;r"yHkYaV5.yJ{Cx_]6\|n_(wG(.wt'l ho{-_?WWi;].}w*zp@k>
Jan 10, 2025 00:21:52.266460896 CET	1236	IN	Data Raw: c2 3d 01 ef de b4 77 fb e0 cc 48 dc 5b d1 1e 9d f7 e1 b4 6b c2 1d dd a9 98 b6 db c0 3d 32 ef ad 68 af e4 7d 3d ee 67 da d2 de e3 fd ed 4c b4 ab c2 9d 7d 77 c2 76 65 b8 77 78 3f 2e 95 f6 0a de d7 e2 7e e6 83 73 61 5a 78 3b 0b ed aa 70 e7 db 9d d8 Data Ascii: =wH[k=2h}=gL}wvewx?.~saZx;pQO{wt'lW{w7dwt'l{`w]N}.=vq{{KiW;d->;qbfv=*=
Jan 10, 2025 00:21:52.266475916 CET	1116	IN	Data Raw: bf e7 31 94 f6 11 b8 77 79 3f 2b 8f f6 c1 bc cf 61 3b 11 ba 07 c5 3d 31 ed b5 79 1f 41 fb 48 dc 6b f1 9e 9e f6 41 bc 2b c0 9d 91 03 c4 be bb 22 dc 33 d0 5e 8b f7 91 b4 d7 c0 7d 24 ef e3 fb 73 d5 cf bb 7c dc b7 b1 c6 a9 d4 6e d4 87 7b 26 da 47 f2 Data Ascii: 1wy?+a;=1yAHkA+"3^}$s\|n{&G^Z*rSi{->.w)6W~v>DwW~v6q>Dw)f]ky;H8_]?$wFzQ6h:S
Jan 10, 2025 00:21:52.266496897 CET	1236	IN	Data Raw: b3 e0 3e 98 f7 96 b4 cb c4 1d dd 89 2a 7a 73 d1 1c ee 03 79 cf 41 7b 26 dc ab 79 6f 4d bb 50 dc d1 9d 48 85 ed ed 71 af e4 3d 0f ed d9 70 ef e7 3d 00 ed 52 71 47 77 a2 0d c9 5c a9 0b 21 14 1a 8f f1 cc 92 2a dc d7 f3 1e 84 76 b1 b8 a3 3b 91 02 db Data Ascii: >zsyA{&yoMPHq=p=RqGw\!v;\|g}@=3KKcw]0N$pxK{v:w?aE-I?tn[G;2D\|=zGDwB{fw'`sHGV/1w
Jan 10, 2025 00:21:52.272569895 CET	652	IN	Data Raw: 15 ef ce 10 ed 31 71 47 77 22 19 fd e7 74 4e dc 15 f1 ee 0c d1 1e 15 77 0e cd 10 49 e8 ab d3 99 71 ef f0 2e f7 35 be 27 ab 70 37 40 7b 5c dc f9 78 27 32 bc 25 d3 00 77 25 bc 3b 43 b4 c7 c6 9d 6f 77 22 cb b6 d7 c7 7d 4a f2 63 ab 4f ae c5 dd 08 ed Data Ascii: 1qGw"tNwIq.5'p7@{\x'2%w%;Cow"}JcOqGw&wxw3Gw;?1Np3D{K](3>'`qbG"qD6mG&pGw"O#wgTQ:-w59C'R\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.10	49821	185.53.177.50	80	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jan 10, 2025 00:21:55.146281958 CET	464	OUT	GET /favicon.ico HTTP/1.1 Host: api.myuhchvision.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _cq_duid=1.1736464910.0Pdysz9c9e6s7CS9; _cq_suid=1.1736464910.8hbiYeRpDfn2XE6U; __gsas=ID=c2d96085edb8c52a:T=1736464913:RT=1736464913:S=ALNI_MYPZC8TKmtU-_fM69ccp9F25OCunQ
Jan 10, 2025 00:21:55.809556961 CET	230	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 09 Jan 2025 23:21:55 GMT Content-Type: image/x-icon Content-Length: 0 Last-Modified: Wed, 16 Oct 2024 07:59:04 GMT Connection: keep-alive ETag: "670f7248-0" Accept-Ranges: bytes
Jan 10, 2025 00:22:07.031419992 CET	640	OUT	GET /track.php?domain=myuhchvision.com&toggle=browserjs&uid=MTczNjQ2NDkyNi4yMzk1OmQ2MzliYTM3ZDFjNWQ4ZTdlMjkzYWMzYzA4MDc3YmM5M2ZmZjc1MTRjZmI1NWZkMDVmNDhiZjMwNTgyNWUxMjg6Njc4MDVhMWUzYTdhYw%3D%3D HTTP/1.1 Host: api.myuhchvision.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _cq_duid=1.1736464910.0Pdysz9c9e6s7CS9; _cq_suid=1.1736464910.8hbiYeRpDfn2XE6U; __gsas=ID=c2d96085edb8c52a:T=1736464913:RT=1736464913:S=ALNI_MYPZC8TKmtU-_fM69ccp9F25OCunQ
Jan 10, 2025 00:22:07.232064009 CET	540	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 09 Jan 2025 23:22:07 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: keep-alive Accept-Ch: viewport-width Accept-Ch: dpr Accept-Ch: device-memory Accept-Ch: rtt Accept-Ch: downlink Accept-Ch: ect Accept-Ch: ua Accept-Ch: ua-full-version Accept-Ch: ua-platform Accept-Ch: ua-platform-version Accept-Ch: ua-arch Accept-Ch: ua-model Accept-Ch: ua-mobile Accept-Ch-Lifetime: 30 Access-Control-Allow-Origin: * X-Custom-Track: browserjs X-Http-Caddy: yes
Jan 10, 2025 00:22:08.731183052 CET	659	OUT	GET /track.php?domain=myuhchvision.com&caf=1&toggle=answercheck&answer=yes&uid=MTczNjQ2NDkyNi4yMzk1OmQ2MzliYTM3ZDFjNWQ4ZTdlMjkzYWMzYzA4MDc3YmM5M2ZmZjc1MTRjZmI1NWZkMDVmNDhiZjMwNTgyNWUxMjg6Njc4MDVhMWUzYTdhYw%3D%3D HTTP/1.1 Host: api.myuhchvision.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: _cq_duid=1.1736464910.0Pdysz9c9e6s7CS9; _cq_suid=1.1736464910.8hbiYeRpDfn2XE6U; __gsas=ID=c2d96085edb8c52a:T=1736464913:RT=1736464913:S=ALNI_MYPZC8TKmtU-_fM69ccp9F25OCunQ
Jan 10, 2025 00:22:08.928122044 CET	610	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 09 Jan 2025 23:22:08 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.10	49764	52.222.236.17	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:50 UTC	567	OUT	GET /sxp/i/c4601e5f6cdd73216cafdd5af209201c.js HTTP/1.1 Host: euob.netgreencolumn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://api.myuhchvision.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:50 UTC	504	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 106599 Connection: close Server: Caddy Date: Thu, 09 Jan 2025 13:17:25 GMT Cache-Control: max-age=43200 Expires: Fri, 10 Jan 2025 01:16:41 GMT ETag: "1a067-h47LxtAMTVpkm/jIU9A3aGADhWY" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 a823be133adad65df6d3bf471a742792.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: aaf2urC9Bz47PI0_Adr6xHWWTHIUeSw0iwhqnD8OtoxQDtBl2c9veg== Age: 36309
2025-01-09 23:21:50 UTC	15880	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 69 66 28 6e 5b 65 5d 29 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 6e 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 65 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 72 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 2c 72 2e 63 3d 6e 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 72 2e 6f 28 74 2c 6e 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 6e 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 65 7d 29 7d 2c 72 2e 72 3d 66 75 6e Data Ascii: !function(t){var n={};function r(e){if(n[e])return n[e].exports;var i=n[e]={i:e,l:!1,exports:{}};return t[e].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=n,r.d=function(t,n,e){r.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:e})},r.r=fun
2025-01-09 23:21:51 UTC	16384	IN	Data Raw: 28 74 29 7b 76 61 72 20 6e 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 6e 2e 6c 65 6e 67 74 68 3e 3d 33 29 72 65 74 75 72 6e 20 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 33 5d 2b 22 2e 22 2b 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 32 5d 2b 22 2e 22 2b 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 31 5d 7d 72 65 74 75 72 6e 22 2d 22 7d 2c 48 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 41 2e 51 74 28 22 5f 66 62 63 22 29 3b 69 66 28 74 29 7b 76 61 72 20 6e 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 6e 2e 6c 65 6e 67 74 68 3e 3d 33 29 72 65 74 75 72 6e 20 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 33 5d 2b 22 2e 22 2b 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 32 5d 2b 22 2e 22 2b 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 31 5d 7d 72 65 74 75 72 6e 22 2d 22 7d 2c 51 6e 3a 66 75 6e 63 74 Data Ascii: (t){var n=t.split(".");if(n.length>=3)return n[n.length-3]+"."+n[n.length-2]+"."+n[n.length-1]}return"-"},Hn:function(){var t=A.Qt("_fbc");if(t){var n=t.split(".");if(n.length>=3)return n[n.length-3]+"."+n[n.length-2]+"."+n[n.length-1]}return"-"},Qn:funct
2025-01-09 23:21:51 UTC	16384	IN	Data Raw: 79 2e 43 72 28 29 29 2c 68 3d 5f 2e 79 6e 28 29 2c 67 3d 75 28 29 2c 62 3d 6f 2e 70 65 28 29 3b 74 3d 2b 6e 65 77 20 44 61 74 65 3b 76 61 72 20 45 3d 76 2e 67 65 74 53 70 61 50 61 67 65 28 29 2c 78 3d 79 2e 6e 72 28 7b 69 64 3a 6b 2e 69 64 2c 75 72 6c 3a 79 2e 4a 6e 28 72 2c 6b 2e 69 64 2c 4e 2c 6b 2e 47 72 29 2c 73 66 3a 2b 79 2e 62 72 28 29 2c 74 70 69 3a 4e 2e 74 70 69 2c 63 68 3a 4e 2e 63 68 2c 75 76 69 64 3a 4e 2e 75 76 69 64 2c 74 73 66 3a 65 2c 74 73 66 6d 69 3a 69 2c 74 73 66 75 3a 61 2c 63 62 3a 74 2c 68 6c 3a 79 2e 61 72 28 29 2c 6f 70 3a 2b 79 2e 69 72 28 29 2c 61 67 3a 70 2e 5a 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 2c 72 61 6e 64 3a 6e 2c 66 73 3a 6c 2e 77 2b 22 78 22 2b 6c 2e 68 2c 66 73 74 3a 64 2e 77 2b 22 78 22 2b Data Ascii: y.Cr()),h=_.yn(),g=u(),b=o.pe();t=+new Date;var E=v.getSpaPage(),x=y.nr({id:k.id,url:y.Jn(r,k.id,N,k.Gr),sf:+y.br(),tpi:N.tpi,ch:N.ch,uvid:N.uvid,tsf:e,tsfmi:i,tsfu:a,cb:t,hl:y.ar(),op:+y.ir(),ag:p.Z(navigator.userAgent),rand:n,fs:l.w+"x"+l.h,fst:d.w+"x"+
2025-01-09 23:21:51 UTC	16384	IN	Data Raw: 7b 72 65 74 75 72 6e 20 74 21 3d 3d 6e 26 26 75 5b 74 5d 3d 3d 3d 75 5b 6e 5d 7d 29 7d 76 61 72 20 72 3d 6e 28 22 41 72 72 61 79 22 29 3b 69 66 28 2d 31 21 3d 3d 72 29 7b 76 61 72 20 65 3d 5b 72 2c 6e 28 22 53 79 6d 62 6f 6c 22 29 2c 6e 28 22 50 72 6f 6d 69 73 65 22 29 5d 3b 69 66 28 63 2e 46 74 28 65 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 2d 31 21 3d 3d 74 7d 29 26 26 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 7c 7c 30 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 6e 3d 74 5b 30 5d 2c 72 3d 74 5b 30 5d 2c 65 3d 31 3b 65 3c 74 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3c 6e 26 26 28 6e 3d 74 5b 65 5d 29 2c 74 5b 65 5d 3e 72 26 26 28 72 3d 74 5b 65 5d 29 3b 72 65 74 75 72 6e 20 72 2d Data Ascii: {return t!==n&&u[t]===u[n]})}var r=n("Array");if(-1!==r){var e=[r,n("Symbol"),n("Promise")];if(c.Ft(e,function(t){return-1!==t})&&function(t){if(!t\|\|0===t.length)return!1;for(var n=t[0],r=t[0],e=1;e<t.length;e++)t[e]<n&&(n=t[e]),t[e]>r&&(r=t[e]);return r-
2025-01-09 23:21:51 UTC	16384	IN	Data Raw: 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 66 69 72 73 74 2d 69 6e 70 75 74 22 29 3b 69 66 28 74 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 6e 3d 5b 22 31 22 2c 28 74 3d 74 5b 30 5d 29 2e 6e 61 6d 65 2c 70 61 72 73 65 49 6e 74 28 74 2e 73 74 61 72 74 54 69 6d 65 29 5d 2c 72 3d 74 2e 74 61 72 67 65 74 26 26 61 2e 42 74 28 74 2e 74 61 72 67 65 74 29 3b 69 66 28 72 29 7b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6e 2e 70 75 73 68 28 65 2e 74 61 67 4e 61 6d 65 29 2c 6e 2e 70 75 73 68 28 72 2e 78 29 2c 6e 2e 70 75 73 68 28 72 2e 79 29 2c 6e 2e 70 75 73 68 28 65 2e 69 64 29 2c 6e 2e 70 75 73 68 28 65 2e 63 6c 61 73 73 4e 61 6d 65 29 7d 72 65 74 75 72 6e 20 6e 2e 6a 6f 69 6e 28 22 2c 22 29 7d 72 65 74 75 72 6e 22 30 22 7d Data Ascii: rformance.getEntriesByType("first-input");if(t.length){var n=["1",(t=t[0]).name,parseInt(t.startTime)],r=t.target&&a.Bt(t.target);if(r){var e=t.target;n.push(e.tagName),n.push(r.x),n.push(r.y),n.push(e.id),n.push(e.className)}return n.join(",")}return"0"}
2025-01-09 23:21:51 UTC	16384	IN	Data Raw: 74 63 68 28 74 29 7b 7d 69 66 28 72 29 6d 2e 5a 65 2e 70 75 73 68 28 7b 73 3a 31 7d 29 3b 65 6c 73 65 7b 76 61 72 20 69 3d 30 3b 73 77 69 74 63 68 28 6f 2e 7a 74 28 29 29 7b 63 61 73 65 22 76 69 73 69 62 6c 65 22 3a 69 3d 31 3b 62 72 65 61 6b 3b 63 61 73 65 22 68 69 64 64 65 6e 22 3a 69 3d 32 3b 62 72 65 61 6b 3b 63 61 73 65 22 70 72 65 72 65 6e 64 65 72 22 3a 69 3d 33 7d 6d 2e 5a 65 2e 70 75 73 68 28 7b 73 3a 69 7d 29 7d 6f 2e 62 6e 28 76 2c 22 66 6f 63 75 73 22 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 6f 2e 6d 6e 28 74 29 3b 67 28 72 29 2c 6d 2e 5a 65 2e 70 75 73 68 28 7b 73 3a 34 2c 74 3a 72 7d 29 7d 29 2c 6f 2e 62 6e 28 76 2c 22 62 6c 75 72 22 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 6f 2e 6d 6e 28 74 29 3b 67 28 72 29 Data Ascii: tch(t){}if(r)m.Ze.push({s:1});else{var i=0;switch(o.zt()){case"visible":i=1;break;case"hidden":i=2;break;case"prerender":i=3}m.Ze.push({s:i})}o.bn(v,"focus",function(n){var r=o.mn(t);g(r),m.Ze.push({s:4,t:r})}),o.bn(v,"blur",function(n){var r=o.mn(t);g(r)
2025-01-09 23:21:51 UTC	8799	IN	Data Raw: 70 61 67 65 4c 6f 61 64 22 29 7d 2c 28 6f 3d 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 65 29 29 2e 73 72 63 3d 22 2f 2f 62 61 74 2e 62 69 6e 67 2e 63 6f 6d 2f 62 61 74 2e 6a 73 22 2c 6f 2e 61 73 79 6e 63 3d 31 2c 6f 2e 6f 6e 6c 6f 61 64 3d 6f 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 72 65 61 64 79 53 74 61 74 65 3b 74 26 26 22 6c 6f 61 64 65 64 22 21 3d 3d 74 26 26 22 63 6f 6d 70 6c 65 74 65 22 21 3d 3d 74 7c 7c 28 63 28 29 2c 6f 2e 6f 6e 6c 6f 61 64 3d 6f 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 6e 75 6c 6c 29 7d 2c 28 75 3d 72 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 5b 30 5d 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e Data Ascii: pageLoad")},(o=r.createElement(e)).src="//bat.bing.com/bat.js",o.async=1,o.onload=o.onreadystatechange=function(){var t=this.readyState;t&&"loaded"!==t&&"complete"!==t\|\|(c(),o.onload=o.onreadystatechange=null)},(u=r.getElementsByTagName(e)[0]).parentNode.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.10	49778	216.58.212.132	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:51 UTC	428	OUT	GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://api.myuhchvision.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:51 UTC	718	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 147117 Date: Thu, 09 Jan 2025 23:21:51 GMT Expires: Thu, 09 Jan 2025 23:21:51 GMT Cache-Control: private, max-age=3600 ETag: "12117273655588756359" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-09 23:21:51 UTC	672	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 35 39 34 32 35 39 39 38 31 32 32 37 30 35 36 32 37 32 35 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 33 2c 31 37 33 30 31 34 33 31 2c 31 37 33 30 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"5942599812270562725",packages:"domains",module:"ads",version:"1",m:{cei:"17300003,17301431,1730
2025-01-09 23:21:51 UTC	1390	IN	Data Raw: 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 64 48 4a 68 62 6e 4e 73 59 58 52 6c 4c 6d 64 76 62 32 63 73 64 57 73 75 59 32 39 74 4c 48 56 7a 4c 6d 4e 76 62 53 78 33 5a 57 49 75 59 58 42 77 22 2c 63 64 6c 3a 66 61 6c 73 65 2c 63 64 68 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 63 64 65 6d 3a 7b 22 61 66 73 5f 61 61 5f 62 61 73 65 6c 69 6e 65 22 3a 35 30 30 2c 22 61 66 73 5f 63 68 61 74 62 6f 74 22 3a 30 2c 22 61 66 73 5f Data Ascii: 1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_
2025-01-09 23:21:51 UTC	1390	IN	Data Raw: 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 72 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 Data Ascii: };var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});r("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Arr
2025-01-09 23:21:51 UTC	1390	IN	Data Raw: 65 72 61 62 6c 65 20 6f 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 75 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 71 61 28 61 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 72 61 77 3d 62 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 26 26 28 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 61 29 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 62 29 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 Data Ascii: erable or ArrayLike");}function oa(a){if(!(a instanceof Array)){a=u(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}function pa(a){return qa(a,a)}function qa(a,b){a.raw=b;Object.freeze&&(Object.freeze(a),Object.freeze(b));return a}func
2025-01-09 23:21:51 UTC	1390	IN	Data Raw: 73 2e 44 64 28 68 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 79 66 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 67 3d 76 6f 69 64 20 30 3b 74 72 79 7b 67 3d 68 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 55 63 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 67 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 45 66 28 67 2c 68 29 3a 74 68 69 73 2e 44 64 28 68 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 63 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 55 64 28 32 2c 68 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 44 64 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 55 64 28 31 2c 68 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 64 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 67 29 7b 69 66 28 74 68 69 73 2e Data Ascii: s.Dd(h)}};b.prototype.yf=function(h){var g=void 0;try{g=h.then}catch(k){this.Uc(k);return}typeof g=="function"?this.Ef(g,h):this.Dd(h)};b.prototype.Uc=function(h){this.Ud(2,h)};b.prototype.Dd=function(h){this.Ud(1,h)};b.prototype.Ud=function(h,g){if(this.
2025-01-09 23:21:51 UTC	1390	IN	Data Raw: 2c 6d 29 29 3b 72 65 74 75 72 6e 20 6e 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 68 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 65 62 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 0a 67 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 41 29 7b 63 61 73 65 20 31 3a 68 28 6c 2e 53 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 67 28 6c 2e 53 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 65 3a 20 22 2b 6c 2e 41 29 3b 7d 7d 76 61 72 20 6c 3d 74 68 69 73 3b 74 68 69 73 2e 74 61 3d 3d 6e 75 6c 6c 3f 66 2e 70 64 28 6b 29 3a 74 68 69 73 Data Ascii: ,m));return n};b.prototype.catch=function(h){return this.then(void 0,h)};b.prototype.eb=function(h,g){function k(){switch(l.A){case 1:h(l.Sa);break;case 2:g(l.Sa);break;default:throw Error("Unexpected state: "+l.A);}}var l=this;this.ta==null?f.pd(k):this
2025-01-09 23:21:51 UTC	1390	IN	Data Raw: 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 0a 6d 3d 6e 65 77 20 61 28 5b 5b 6b 2c 32 5d 2c 5b 6c 2c 33 5d 5d 29 3b 69 66 28 6d 2e 67 65 74 28 Data Ascii: lue:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Object.seal({}),l=Object.seal({}),m=new a([[k,2],[l,3]]);if(m.get(
2025-01-09 23:21:51 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 65 28 67 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 67 29 7b 67 3d 75 28 67 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 67 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 67 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 Data Ascii: unction e(g){this[0]={};this[1]=b();this.size=0;if(g){g=u(g);for(var k;!(k=g.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="function")return!1;try{var g=Object.seal({x:4})
2025-01-09 23:21:51 UTC	1390	IN	Data Raw: 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 67 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 67 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 68 3d 30 3b 72 65 74 75 72 6e 20 65 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 76 61 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 Data Ascii: ,function(g){return g.value})};e.prototype.forEach=function(g,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,g.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.entries;var h=0;return e});function va(a,b){a instanceof String&&
2025-01-09 23:21:51 UTC	1390	IN	Data Raw: 6f 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 30 3b 66 3c 65 3b 66 2b 2b 29 7b 76 61 72 20 68 3d 64 5b 66 5d 3b 69 66 28 62 2e 63 61 6c 6c 28 63 2c 68 2c 66 2c 64 29 29 7b 62 3d 68 3b 62 72 65 61 6b 20 61 7d 7d 62 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 6e 20 62 7d 7d 29 3b 72 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d Data Ascii: otype.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof String&&(d=String(d));for(var e=d.length,f=0;f<e;f++){var h=d[f];if(b.call(c,h,f,d)){b=h;break a}}b=void 0}return b}});r("Object.entries",function(a){return a?a:function(b){var c=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.10	49780	52.222.236.26	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:51 UTC	388	OUT	GET /sxp/i/c4601e5f6cdd73216cafdd5af209201c.js HTTP/1.1 Host: euob.netgreencolumn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:52 UTC	504	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 106599 Connection: close Server: Caddy Date: Thu, 09 Jan 2025 13:17:25 GMT Cache-Control: max-age=43200 Expires: Fri, 10 Jan 2025 01:16:41 GMT ETag: "1a067-h47LxtAMTVpkm/jIU9A3aGADhWY" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 88f858f045c3909fad9cebbada511aee.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: pI3ek0Oz8Rkiy2C3wNXATorb5FVh0mTdEhmH8hUWOc_Eb33PcaOgsQ== Age: 36311
2025-01-09 23:21:52 UTC	15880	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 69 66 28 6e 5b 65 5d 29 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 6e 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 65 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 72 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 2c 72 2e 63 3d 6e 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 72 2e 6f 28 74 2c 6e 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 6e 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 65 7d 29 7d 2c 72 2e 72 3d 66 75 6e Data Ascii: !function(t){var n={};function r(e){if(n[e])return n[e].exports;var i=n[e]={i:e,l:!1,exports:{}};return t[e].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=n,r.d=function(t,n,e){r.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:e})},r.r=fun
2025-01-09 23:21:52 UTC	16384	IN	Data Raw: 28 74 29 7b 76 61 72 20 6e 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 6e 2e 6c 65 6e 67 74 68 3e 3d 33 29 72 65 74 75 72 6e 20 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 33 5d 2b 22 2e 22 2b 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 32 5d 2b 22 2e 22 2b 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 31 5d 7d 72 65 74 75 72 6e 22 2d 22 7d 2c 48 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 41 2e 51 74 28 22 5f 66 62 63 22 29 3b 69 66 28 74 29 7b 76 61 72 20 6e 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 6e 2e 6c 65 6e 67 74 68 3e 3d 33 29 72 65 74 75 72 6e 20 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 33 5d 2b 22 2e 22 2b 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 32 5d 2b 22 2e 22 2b 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 31 5d 7d 72 65 74 75 72 6e 22 2d 22 7d 2c 51 6e 3a 66 75 6e 63 74 Data Ascii: (t){var n=t.split(".");if(n.length>=3)return n[n.length-3]+"."+n[n.length-2]+"."+n[n.length-1]}return"-"},Hn:function(){var t=A.Qt("_fbc");if(t){var n=t.split(".");if(n.length>=3)return n[n.length-3]+"."+n[n.length-2]+"."+n[n.length-1]}return"-"},Qn:funct
2025-01-09 23:21:52 UTC	16384	IN	Data Raw: 79 2e 43 72 28 29 29 2c 68 3d 5f 2e 79 6e 28 29 2c 67 3d 75 28 29 2c 62 3d 6f 2e 70 65 28 29 3b 74 3d 2b 6e 65 77 20 44 61 74 65 3b 76 61 72 20 45 3d 76 2e 67 65 74 53 70 61 50 61 67 65 28 29 2c 78 3d 79 2e 6e 72 28 7b 69 64 3a 6b 2e 69 64 2c 75 72 6c 3a 79 2e 4a 6e 28 72 2c 6b 2e 69 64 2c 4e 2c 6b 2e 47 72 29 2c 73 66 3a 2b 79 2e 62 72 28 29 2c 74 70 69 3a 4e 2e 74 70 69 2c 63 68 3a 4e 2e 63 68 2c 75 76 69 64 3a 4e 2e 75 76 69 64 2c 74 73 66 3a 65 2c 74 73 66 6d 69 3a 69 2c 74 73 66 75 3a 61 2c 63 62 3a 74 2c 68 6c 3a 79 2e 61 72 28 29 2c 6f 70 3a 2b 79 2e 69 72 28 29 2c 61 67 3a 70 2e 5a 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 2c 72 61 6e 64 3a 6e 2c 66 73 3a 6c 2e 77 2b 22 78 22 2b 6c 2e 68 2c 66 73 74 3a 64 2e 77 2b 22 78 22 2b Data Ascii: y.Cr()),h=_.yn(),g=u(),b=o.pe();t=+new Date;var E=v.getSpaPage(),x=y.nr({id:k.id,url:y.Jn(r,k.id,N,k.Gr),sf:+y.br(),tpi:N.tpi,ch:N.ch,uvid:N.uvid,tsf:e,tsfmi:i,tsfu:a,cb:t,hl:y.ar(),op:+y.ir(),ag:p.Z(navigator.userAgent),rand:n,fs:l.w+"x"+l.h,fst:d.w+"x"+
2025-01-09 23:21:52 UTC	16384	IN	Data Raw: 7b 72 65 74 75 72 6e 20 74 21 3d 3d 6e 26 26 75 5b 74 5d 3d 3d 3d 75 5b 6e 5d 7d 29 7d 76 61 72 20 72 3d 6e 28 22 41 72 72 61 79 22 29 3b 69 66 28 2d 31 21 3d 3d 72 29 7b 76 61 72 20 65 3d 5b 72 2c 6e 28 22 53 79 6d 62 6f 6c 22 29 2c 6e 28 22 50 72 6f 6d 69 73 65 22 29 5d 3b 69 66 28 63 2e 46 74 28 65 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 2d 31 21 3d 3d 74 7d 29 26 26 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 7c 7c 30 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 6e 3d 74 5b 30 5d 2c 72 3d 74 5b 30 5d 2c 65 3d 31 3b 65 3c 74 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3c 6e 26 26 28 6e 3d 74 5b 65 5d 29 2c 74 5b 65 5d 3e 72 26 26 28 72 3d 74 5b 65 5d 29 3b 72 65 74 75 72 6e 20 72 2d Data Ascii: {return t!==n&&u[t]===u[n]})}var r=n("Array");if(-1!==r){var e=[r,n("Symbol"),n("Promise")];if(c.Ft(e,function(t){return-1!==t})&&function(t){if(!t\|\|0===t.length)return!1;for(var n=t[0],r=t[0],e=1;e<t.length;e++)t[e]<n&&(n=t[e]),t[e]>r&&(r=t[e]);return r-
2025-01-09 23:21:52 UTC	16384	IN	Data Raw: 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 66 69 72 73 74 2d 69 6e 70 75 74 22 29 3b 69 66 28 74 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 6e 3d 5b 22 31 22 2c 28 74 3d 74 5b 30 5d 29 2e 6e 61 6d 65 2c 70 61 72 73 65 49 6e 74 28 74 2e 73 74 61 72 74 54 69 6d 65 29 5d 2c 72 3d 74 2e 74 61 72 67 65 74 26 26 61 2e 42 74 28 74 2e 74 61 72 67 65 74 29 3b 69 66 28 72 29 7b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6e 2e 70 75 73 68 28 65 2e 74 61 67 4e 61 6d 65 29 2c 6e 2e 70 75 73 68 28 72 2e 78 29 2c 6e 2e 70 75 73 68 28 72 2e 79 29 2c 6e 2e 70 75 73 68 28 65 2e 69 64 29 2c 6e 2e 70 75 73 68 28 65 2e 63 6c 61 73 73 4e 61 6d 65 29 7d 72 65 74 75 72 6e 20 6e 2e 6a 6f 69 6e 28 22 2c 22 29 7d 72 65 74 75 72 6e 22 30 22 7d Data Ascii: rformance.getEntriesByType("first-input");if(t.length){var n=["1",(t=t[0]).name,parseInt(t.startTime)],r=t.target&&a.Bt(t.target);if(r){var e=t.target;n.push(e.tagName),n.push(r.x),n.push(r.y),n.push(e.id),n.push(e.className)}return n.join(",")}return"0"}
2025-01-09 23:21:52 UTC	16384	IN	Data Raw: 74 63 68 28 74 29 7b 7d 69 66 28 72 29 6d 2e 5a 65 2e 70 75 73 68 28 7b 73 3a 31 7d 29 3b 65 6c 73 65 7b 76 61 72 20 69 3d 30 3b 73 77 69 74 63 68 28 6f 2e 7a 74 28 29 29 7b 63 61 73 65 22 76 69 73 69 62 6c 65 22 3a 69 3d 31 3b 62 72 65 61 6b 3b 63 61 73 65 22 68 69 64 64 65 6e 22 3a 69 3d 32 3b 62 72 65 61 6b 3b 63 61 73 65 22 70 72 65 72 65 6e 64 65 72 22 3a 69 3d 33 7d 6d 2e 5a 65 2e 70 75 73 68 28 7b 73 3a 69 7d 29 7d 6f 2e 62 6e 28 76 2c 22 66 6f 63 75 73 22 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 6f 2e 6d 6e 28 74 29 3b 67 28 72 29 2c 6d 2e 5a 65 2e 70 75 73 68 28 7b 73 3a 34 2c 74 3a 72 7d 29 7d 29 2c 6f 2e 62 6e 28 76 2c 22 62 6c 75 72 22 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 6f 2e 6d 6e 28 74 29 3b 67 28 72 29 Data Ascii: tch(t){}if(r)m.Ze.push({s:1});else{var i=0;switch(o.zt()){case"visible":i=1;break;case"hidden":i=2;break;case"prerender":i=3}m.Ze.push({s:i})}o.bn(v,"focus",function(n){var r=o.mn(t);g(r),m.Ze.push({s:4,t:r})}),o.bn(v,"blur",function(n){var r=o.mn(t);g(r)
2025-01-09 23:21:52 UTC	8799	IN	Data Raw: 70 61 67 65 4c 6f 61 64 22 29 7d 2c 28 6f 3d 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 65 29 29 2e 73 72 63 3d 22 2f 2f 62 61 74 2e 62 69 6e 67 2e 63 6f 6d 2f 62 61 74 2e 6a 73 22 2c 6f 2e 61 73 79 6e 63 3d 31 2c 6f 2e 6f 6e 6c 6f 61 64 3d 6f 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 72 65 61 64 79 53 74 61 74 65 3b 74 26 26 22 6c 6f 61 64 65 64 22 21 3d 3d 74 26 26 22 63 6f 6d 70 6c 65 74 65 22 21 3d 3d 74 7c 7c 28 63 28 29 2c 6f 2e 6f 6e 6c 6f 61 64 3d 6f 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 6e 75 6c 6c 29 7d 2c 28 75 3d 72 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 5b 30 5d 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e Data Ascii: pageLoad")},(o=r.createElement(e)).src="//bat.bing.com/bat.js",o.async=1,o.onload=o.onreadystatechange=function(){var t=this.readyState;t&&"loaded"!==t&&"complete"!==t\|\|(c(),o.onload=o.onreadystatechange=null)},(u=r.getElementsByTagName(e)[0]).parentNode.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.10	49781	54.75.69.192	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:52 UTC	6205	OUT	GET /ct?id=77721&url=http%3A%2F%2Fapi.myuhchvision.com%2F&sf=0&tpi=&ch=landingpage&uvid=11052&tsf=0&tsfmi=&tsfu=&cb=1736464910344&hl=1&op=0&ag=300509663&rand=14051295291260029285102956577261120510298117822828918216292562052265181912101826277150&fs=1280x907&fst=1280x907&np=win32&nv=google%20inc.&ref=&ss=1280x1024&nc=0&at=&di=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 [TRUNCATED] Host: obseu.netgreencolumn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://api.myuhchvision.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:52 UTC	446	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/javascript Date: Thu, 09 Jan 2025 23:21:52 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Pragma: no-cache Set-Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc; Max-Age=29030400; Path=/; Expires=Thu, 11 Dec 2025 23:21:52 GMT; HttpOnly; Secure; SameSite=None Timing-Allow-Origin: http://api.myuhchvision.com Connection: close Transfer-Encoding: chunked
2025-01-09 23:21:52 UTC	733	IN	Data Raw: 63 33 64 0d 0a 74 79 70 65 6f 66 20 5f 5f 63 74 63 67 5f 63 74 5f 37 37 37 32 31 5f 65 78 65 63 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 5f 5f 63 74 63 67 5f 63 74 5f 37 37 37 32 31 5f 65 78 65 63 28 7b 22 74 63 22 3a 22 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 39 65 38 63 33 33 33 65 65 34 65 38 62 39 66 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 35 30 65 66 38 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 39 31 36 38 61 36 66 32 36 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 31 66 38 33 64 37 38 39 30 35 32 39 33 36 31 66 66 36 32 65 37 37 30 35 38 35 33 64 38 62 33 37 39 35 35 31 33 37 35 31 37 31 63 31 Data Ascii: c3dtypeof __ctcg_ct_77721_exec === 'function' && __ctcg_ct_77721_exec({"tc":"37dfbd8ee84e001269e8c333ee4e8b9f9225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d59168a6f2617071a10acf9f29f671f83d7890529361ff62e7705853d8b379551375171c1
2025-01-09 23:21:52 UTC	2358	IN	Data Raw: 37 37 34 66 36 37 65 33 38 65 37 63 38 32 61 38 35 30 65 37 31 30 35 34 30 62 64 36 34 31 34 38 63 37 38 35 38 30 64 39 63 63 66 30 63 35 36 38 38 37 37 65 38 32 63 63 66 62 63 38 37 39 61 65 32 34 33 62 30 33 62 35 33 38 36 35 64 34 39 34 64 31 31 36 37 34 39 65 61 38 36 34 61 38 34 31 62 66 63 35 30 33 64 36 36 37 61 38 37 39 34 35 35 62 34 34 63 62 32 36 66 66 35 35 39 63 38 37 65 30 33 66 62 39 38 64 37 38 39 66 35 63 65 39 38 63 64 30 64 64 36 63 38 32 35 63 35 36 36 65 66 38 35 39 35 34 31 64 33 65 34 35 37 64 64 33 61 37 36 36 62 37 35 33 64 66 63 31 38 62 36 34 66 64 64 65 36 39 62 64 64 65 36 63 64 66 38 31 63 38 66 30 37 36 38 38 62 63 66 31 37 34 36 30 33 65 64 30 61 39 31 31 30 34 39 35 66 37 30 64 35 61 32 33 66 61 65 37 65 35 33 38 65 30 34 Data Ascii: 774f67e38e7c82a850e710540bd64148c78580d9ccf0c568877e82ccfbc879ae243b03b53865d494d116749ea864a841bfc503d667a879455b44cb26ff559c87e03fb98d789f5ce98cd0dd6c825c566ef859541d3e457dd3a766b753dfc18b64fdde69bdde6cdf81c8f07688bcf174603ed0a9110495f70d5a23fae7e538e04
2025-01-09 23:21:52 UTC	54	IN	Data Raw: 2c 22 72 65 71 22 3a 22 34 37 38 64 64 64 31 30 65 38 30 36 34 35 32 66 33 64 38 33 35 37 38 64 34 65 31 30 33 35 31 35 22 7d 2c 22 22 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: ,"req":"478ddd10e806452f3d83578d4e103515"},"");0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.10	49790	142.250.184.206	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:53 UTC	1705	OUT	GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fapi.myuhchvision.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTA5Ljc3OTR8NmE2MDdhMzFkNzdlNzA2ZmVjOTAwNjczMmM0NDE0NDJjODU1MzliZXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%253D%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2541811284092968&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=131736464911089&num=0&output=afd_ads&domain_name=api.myuhchvision.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-300&dt=1736464911090&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=754&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=712519386&rurl=http%3A%2F%2Fapi.myuhchvision.com%2F [TRUNCATED] Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://api.myuhchvision.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:53 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Thu, 09 Jan 2025 23:21:53 GMT Expires: Thu, 09 Jan 2025 23:21:53 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-2Fs0vcBKmvjhNV8tGR-yJw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-09 23:21:53 UTC	583	IN	Data Raw: 33 61 35 62 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 3a5b<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2025-01-09 23:21:53 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2025-01-09 23:21:53 UTC	1390	IN	Data Raw: 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 Data Ascii: _{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-f
2025-01-09 23:21:53 UTC	1390	IN	Data Raw: 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center
2025-01-09 23:21:53 UTC	1390	IN	Data Raw: 65 72 2d 72 61 64 69 75 73 3a 31 35 70 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 31 70 78 3b 7d 2e 73 69 31 32 38 7b 68 65 69 67 68 74 3a 31 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 64 69 76 3e 64 69 76 2e 73 69 31 32 38 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 2e 73 69 31 33 33 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 30 31 63 33 36 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6c 69 6e Data Ascii: er-radius:15px;height:30px;width:1px;}.si128{height:1px;width:100%; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}div>div.si128:last-child{display:none;}.si133{background-color:#101c36;border-radius:2px;font-size:12px;lin
2025-01-09 23:21:53 UTC	1390	IN	Data Raw: 77 72 61 70 3b 22 20 64 61 74 61 2d 61 64 2d 63 6f 6e 74 61 69 6e 65 72 3d 22 31 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 72 73 73 41 74 74 72 43 6f 6e 74 61 69 6e 65 72 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 70 5f 20 73 69 31 33 33 20 73 70 61 6e 22 3e 52 65 6c 61 74 65 64 20 73 65 61 72 63 68 65 73 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 65 31 22 20 63 6c 61 73 73 3d 22 69 Data Ascii: wrap;" data-ad-container="1"><div class="i_ div rssAttrContainer" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><span class="p_ si133 span">Related searches</span></div><div id="e1" class="i
2025-01-09 23:21:53 UTC	1390	IN	Data Raw: 6d 73 3a 63 65 6e 74 65 72 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 36 39 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 Data Ascii: ms:center;"><div class="i_ div si69" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;-ms-flex-pack:center; -webkit-box-pack:center; -webkit-justify-content:center; justify-content:center;-ms-fle
2025-01-09 23:21:53 UTC	1390	IN	Data Raw: 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 61 70 69 2e 6d 79 75 68 63 68 76 69 73 69 6f 6e 2e 63 6f 6d 2f 3f 74 73 3d 66 45 4e 73 5a 57 46 75 55 47 56 77 63 47 56 79 62 57 6c 75 64 45 4a 73 59 57 4e 72 66 48 77 31 59 32 55 34 4e 48 78 69 64 57 4e 72 5a 58 51 77 4d 54 45 73 59 6e 56 6a 61 32 56 30 4d 44 67 34 4c 47 4a 31 59 32 74 6c 64 44 41 34 4f 58 78 38 66 48 78 38 66 44 59 33 4f 44 41 31 59 54 42 6b 59 6a 55 34 4e 44 5a 38 66 48 77 78 4e 7a 4d 32 4e 44 59 30 4f 54 41 35 4c 6a 63 Data Ascii: ction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><a href="http://api.myuhchvision.com/?ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTA5Ljc
2025-01-09 23:21:53 UTC	1390	IN	Data Raw: 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 64 69 76 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 63 6c 61 73 73 3d 22 64 69 76 20 71 5f 20 73 69 31 30 32 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 66 73 2e Data Ascii: t-align-items:center; align-items:center;"><div class="i_ div" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><div aria-hidden="true" tabindex="-1" class="div q_ si102"><img src="https://afs.
2025-01-09 23:21:53 UTC	1390	IN	Data Raw: 4e 44 4a 6a 4f 44 55 31 4d 7a 6c 69 5a 58 78 38 66 48 78 38 4d 58 78 38 4d 48 77 77 66 48 78 38 66 44 46 38 66 48 78 38 66 44 42 38 4d 48 78 38 66 48 78 38 66 48 78 38 66 48 77 77 66 44 42 38 66 44 42 38 66 48 77 77 66 44 42 38 56 7a 45 77 50 58 78 38 4d 58 78 58 4d 54 41 39 66 44 6b 33 5a 44 59 7a 5a 47 4d 32 4d 7a 67 35 4f 44 63 77 4e 54 45 35 4e 54 46 6d 4e 6d 4e 6b 5a 54 41 32 4d 32 55 32 59 54 6b 33 4d 6d 45 32 4d 54 45 7a 4e 6a 4a 38 4d 48 78 6b 63 43 31 30 5a 57 46 74 61 57 35 30 5a 58 4a 75 5a 58 51 77 4f 56 38 7a 63 47 68 38 4d 48 77 77 66 48 78 38 66 41 25 33 44 25 33 44 26 61 6d 70 3b 71 75 65 72 79 3d 55 6e 69 74 65 64 68 65 61 6c 74 68 63 61 72 65 2b 49 6e 73 75 72 61 6e 63 65 26 61 6d 70 3b 61 66 64 54 6f 6b 65 6e 3d 43 68 4d 49 70 4b 37 4a Data Ascii: NDJjODU1MzliZXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%3D%3D&query=Unitedhealthcare+Insurance&afdToken=ChMIpK7J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.10	49791	172.217.16.196	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:53 UTC	464	OUT	GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:53 UTC	717	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 147117 Date: Thu, 09 Jan 2025 23:21:53 GMT Expires: Thu, 09 Jan 2025 23:21:53 GMT Cache-Control: private, max-age=3600 ETag: "1776985576143421539" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-09 23:21:53 UTC	673	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 35 39 34 32 35 39 39 38 31 32 32 37 30 35 36 32 37 32 35 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 31 34 33 37 2c 31 37 33 30 31 34 33 39 2c 31 37 33 30 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"5942599812270562725",packages:"domains",module:"ads",version:"1",m:{cei:"17301437,17301439,1730
2025-01-09 23:21:53 UTC	1390	IN	Data Raw: 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 64 48 4a 68 62 6e 4e 73 59 58 52 6c 4c 6d 64 76 62 32 63 73 64 57 73 75 59 32 39 74 4c 48 56 7a 4c 6d 4e 76 62 53 78 33 5a 57 49 75 59 58 42 77 22 2c 63 64 6c 3a 66 61 6c 73 65 2c 63 64 68 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 63 64 65 6d 3a 7b 22 61 66 73 5f 61 61 5f 62 61 73 65 6c 69 6e 65 22 3a 35 30 30 2c 22 61 66 73 5f 63 68 61 74 62 6f 74 22 3a 30 2c 22 61 66 73 5f 63 Data Ascii: 800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_c
2025-01-09 23:21:53 UTC	1390	IN	Data Raw: 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 72 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 Data Ascii: ;var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});r("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Arra
2025-01-09 23:21:53 UTC	1390	IN	Data Raw: 72 61 62 6c 65 20 6f 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 75 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 71 61 28 61 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 72 61 77 3d 62 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 26 26 28 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 61 29 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 62 29 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 Data Ascii: rable or ArrayLike");}function oa(a){if(!(a instanceof Array)){a=u(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}function pa(a){return qa(a,a)}function qa(a,b){a.raw=b;Object.freeze&&(Object.freeze(a),Object.freeze(b));return a}funct
2025-01-09 23:21:53 UTC	1390	IN	Data Raw: 2e 44 64 28 68 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 79 66 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 67 3d 76 6f 69 64 20 30 3b 74 72 79 7b 67 3d 68 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 55 63 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 67 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 45 66 28 67 2c 68 29 3a 74 68 69 73 2e 44 64 28 68 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 63 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 55 64 28 32 2c 68 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 44 64 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 55 64 28 31 2c 68 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 64 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 67 29 7b 69 66 28 74 68 69 73 2e 41 Data Ascii: .Dd(h)}};b.prototype.yf=function(h){var g=void 0;try{g=h.then}catch(k){this.Uc(k);return}typeof g=="function"?this.Ef(g,h):this.Dd(h)};b.prototype.Uc=function(h){this.Ud(2,h)};b.prototype.Dd=function(h){this.Ud(1,h)};b.prototype.Ud=function(h,g){if(this.A
2025-01-09 23:21:53 UTC	1390	IN	Data Raw: 6d 29 29 3b 72 65 74 75 72 6e 20 6e 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 68 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 65 62 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 0a 67 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 41 29 7b 63 61 73 65 20 31 3a 68 28 6c 2e 53 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 67 28 6c 2e 53 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 65 3a 20 22 2b 6c 2e 41 29 3b 7d 7d 76 61 72 20 6c 3d 74 68 69 73 3b 74 68 69 73 2e 74 61 3d 3d 6e 75 6c 6c 3f 66 2e 70 64 28 6b 29 3a 74 68 69 73 2e Data Ascii: m));return n};b.prototype.catch=function(h){return this.then(void 0,h)};b.prototype.eb=function(h,g){function k(){switch(l.A){case 1:h(l.Sa);break;case 2:g(l.Sa);break;default:throw Error("Unexpected state: "+l.A);}}var l=this;this.ta==null?f.pd(k):this.
2025-01-09 23:21:53 UTC	1390	IN	Data Raw: 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 0a 6d 3d 6e 65 77 20 61 28 5b 5b 6b 2c 32 5d 2c 5b 6c 2c 33 5d 5d 29 3b 69 66 28 6d 2e 67 65 74 28 6b Data Ascii: ue:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Object.seal({}),l=Object.seal({}),m=new a([[k,2],[l,3]]);if(m.get(k
2025-01-09 23:21:53 UTC	1390	IN	Data Raw: 6e 63 74 69 6f 6e 20 65 28 67 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 67 29 7b 67 3d 75 28 67 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 67 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 67 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c Data Ascii: nction e(g){this[0]={};this[1]=b();this.size=0;if(g){g=u(g);for(var k;!(k=g.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="function")return!1;try{var g=Object.seal({x:4}),
2025-01-09 23:21:53 UTC	1390	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 67 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 67 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 68 3d 30 3b 72 65 74 75 72 6e 20 65 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 76 61 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 Data Ascii: function(g){return g.value})};e.prototype.forEach=function(g,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,g.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.entries;var h=0;return e});function va(a,b){a instanceof String&&(
2025-01-09 23:21:53 UTC	1390	IN	Data Raw: 74 79 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 30 3b 66 3c 65 3b 66 2b 2b 29 7b 76 61 72 20 68 3d 64 5b 66 5d 3b 69 66 28 62 2e 63 61 6c 6c 28 63 2c 68 2c 66 2c 64 29 29 7b 62 3d 68 3b 62 72 65 61 6b 20 61 7d 7d 62 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 6e 20 62 7d 7d 29 3b 72 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b Data Ascii: type.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof String&&(d=String(d));for(var e=d.length,f=0;f<e;f++){var h=d[f];if(b.call(c,h,f,d)){b=h;break a}}b=void 0}return b}});r("Object.entries",function(a){return a?a:function(b){var c=[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.10	49797	54.75.69.192	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:53 UTC	2178	OUT	GET /tracker/tc_imp.gif?e=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 [TRUNCATED] Host: obseu.netgreencolumn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://api.myuhchvision.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
2025-01-09 23:21:53 UTC	230	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Date: Thu, 09 Jan 2025 23:21:53 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Pragma: no-cache Connection: close
2025-01-09 23:21:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.10	49798	3.248.162.96	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:53 UTC	6076	OUT	GET /ct?id=77721&url=http%3A%2F%2Fapi.myuhchvision.com%2F&sf=0&tpi=&ch=landingpage&uvid=11052&tsf=0&tsfmi=&tsfu=&cb=1736464910344&hl=1&op=0&ag=300509663&rand=14051295291260029285102956577261120510298117822828918216292562052265181912101826277150&fs=1280x907&fst=1280x907&np=win32&nv=google%20inc.&ref=&ss=1280x1024&nc=0&at=&di=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 [TRUNCATED] Host: obseu.netgreencolumn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
2025-01-09 23:21:53 UTC	276	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/javascript Date: Thu, 09 Jan 2025 23:21:53 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Pragma: no-cache Timing-Allow-Origin: undefined Connection: close Transfer-Encoding: chunked
2025-01-09 23:21:53 UTC	903	IN	Data Raw: 63 33 64 0d 0a 74 79 70 65 6f 66 20 5f 5f 63 74 63 67 5f 63 74 5f 37 37 37 32 31 5f 65 78 65 63 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 5f 5f 63 74 63 67 5f 63 74 5f 37 37 37 32 31 5f 65 78 65 63 28 7b 22 74 63 22 3a 22 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 39 65 38 63 33 33 33 65 65 34 65 38 62 39 65 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 35 30 65 66 38 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 39 31 36 38 61 36 66 32 36 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 31 66 38 33 64 37 38 39 30 35 32 39 33 36 31 66 66 36 32 65 37 37 30 35 38 35 33 64 38 62 33 37 39 35 35 31 33 37 35 31 37 31 63 31 Data Ascii: c3dtypeof __ctcg_ct_77721_exec === 'function' && __ctcg_ct_77721_exec({"tc":"37dfbd8ee84e001269e8c333ee4e8b9e9225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d59168a6f2617071a10acf9f29f671f83d7890529361ff62e7705853d8b379551375171c1
2025-01-09 23:21:53 UTC	2242	IN	Data Raw: 34 35 37 64 64 33 61 37 36 36 62 37 35 33 64 66 63 31 38 62 36 34 66 64 64 65 36 39 62 64 64 65 36 63 64 66 38 31 63 38 66 30 37 36 38 38 62 63 66 31 37 34 36 30 33 65 64 30 61 39 31 31 30 34 39 35 66 37 30 64 35 61 32 33 66 61 65 37 65 35 33 38 65 30 34 33 63 65 66 38 35 36 66 64 66 64 33 63 61 65 36 65 65 32 36 64 38 37 35 39 62 66 30 39 64 31 61 38 33 63 61 61 30 36 33 35 62 30 65 62 63 62 33 32 32 64 33 35 37 32 30 32 33 34 30 61 35 62 31 34 61 63 65 35 38 61 36 38 64 62 30 33 62 37 35 62 34 65 32 33 37 64 62 31 66 37 30 35 64 36 63 62 31 31 35 39 66 38 66 62 64 38 63 39 64 66 36 35 64 30 66 31 66 36 62 66 63 33 61 31 66 62 65 33 34 31 35 64 33 64 65 35 34 36 38 31 62 35 35 66 36 61 38 35 34 37 36 63 31 61 64 37 37 64 35 35 32 39 33 65 61 66 31 32 66 Data Ascii: 457dd3a766b753dfc18b64fdde69bdde6cdf81c8f07688bcf174603ed0a9110495f70d5a23fae7e538e043cef856fdfd3cae6ee26d8759bf09d1a83caa0635b0ebcb322d357202340a5b14ace58a68db03b75b4e237db1f705d6cb1159f8fbd8c9df65d0f1f6bfc3a1fbe3415d3de54681b55f6a85476c1ad77d55293eaf12f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.10	49804	142.250.184.206	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:54 UTC	555	OUT	GET /adsense/domains/caf.js?pac=0 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:54 UTC	717	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 147115 Date: Thu, 09 Jan 2025 23:21:54 GMT Expires: Thu, 09 Jan 2025 23:21:54 GMT Cache-Control: private, max-age=3600 ETag: "5669543844222436960" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-09 23:21:54 UTC	673	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 68 61 73 68 3a 22 35 39 34 32 35 39 39 38 31 32 32 37 30 35 36 32 37 32 35 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 31 34 33 31 2c 31 37 33 30 31 34 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"5942599812270562725",packages:"domains",module:"ads",version:"1",m:{cei:"17301431,173014
2025-01-09 23:21:54 UTC	1390	IN	Data Raw: 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 64 48 4a 68 62 6e 4e 73 59 58 52 6c 4c 6d 64 76 62 32 63 73 64 57 73 75 59 32 39 74 4c 48 56 7a 4c 6d 4e 76 62 53 78 33 5a 57 49 75 59 58 42 77 22 2c 63 64 6c 3a 66 61 6c 73 65 2c 63 64 68 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 63 64 65 6d 3a 7b 22 61 66 73 5f 61 61 5f 62 61 73 65 6c 69 6e 65 22 3a 35 30 30 2c 22 61 66 73 5f 63 68 61 74 62 6f 74 22 3a 30 2c 22 61 66 73 5f 63 68 61 Data Ascii: 0000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_cha
2025-01-09 23:21:54 UTC	1390	IN	Data Raw: 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 72 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 Data Ascii: ar d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});r("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array
2025-01-09 23:21:54 UTC	1390	IN	Data Raw: 62 6c 65 20 6f 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 75 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 71 61 28 61 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 72 61 77 3d 62 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 26 26 28 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 61 29 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 62 29 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f Data Ascii: ble or ArrayLike");}function oa(a){if(!(a instanceof Array)){a=u(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}function pa(a){return qa(a,a)}function qa(a,b){a.raw=b;Object.freeze&&(Object.freeze(a),Object.freeze(b));return a}functio
2025-01-09 23:21:54 UTC	1390	IN	Data Raw: 64 28 68 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 79 66 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 67 3d 76 6f 69 64 20 30 3b 74 72 79 7b 67 3d 68 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 55 63 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 67 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 45 66 28 67 2c 68 29 3a 74 68 69 73 2e 44 64 28 68 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 63 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 55 64 28 32 2c 68 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 44 64 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 55 64 28 31 2c 68 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 64 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 67 29 7b 69 66 28 74 68 69 73 2e 41 21 3d Data Ascii: d(h)}};b.prototype.yf=function(h){var g=void 0;try{g=h.then}catch(k){this.Uc(k);return}typeof g=="function"?this.Ef(g,h):this.Dd(h)};b.prototype.Uc=function(h){this.Ud(2,h)};b.prototype.Dd=function(h){this.Ud(1,h)};b.prototype.Ud=function(h,g){if(this.A!=
2025-01-09 23:21:54 UTC	1390	IN	Data Raw: 29 3b 72 65 74 75 72 6e 20 6e 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 68 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 65 62 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 0a 67 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 41 29 7b 63 61 73 65 20 31 3a 68 28 6c 2e 53 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 67 28 6c 2e 53 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 65 3a 20 22 2b 6c 2e 41 29 3b 7d 7d 76 61 72 20 6c 3d 74 68 69 73 3b 74 68 69 73 2e 74 61 3d 3d 6e 75 6c 6c 3f 66 2e 70 64 28 6b 29 3a 74 68 69 73 2e 74 61 Data Ascii: );return n};b.prototype.catch=function(h){return this.then(void 0,h)};b.prototype.eb=function(h,g){function k(){switch(l.A){case 1:h(l.Sa);break;case 2:g(l.Sa);break;default:throw Error("Unexpected state: "+l.A);}}var l=this;this.ta==null?f.pd(k):this.ta
2025-01-09 23:21:54 UTC	1390	IN	Data Raw: 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 0a 6d 3d 6e 65 77 20 61 28 5b 5b 6b 2c 32 5d 2c 5b 6c 2c 33 5d 5d 29 3b 69 66 28 6d 2e 67 65 74 28 6b 29 21 Data Ascii: :l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Object.seal({}),l=Object.seal({}),m=new a([[k,2],[l,3]]);if(m.get(k)!
2025-01-09 23:21:54 UTC	1390	IN	Data Raw: 74 69 6f 6e 20 65 28 67 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 67 29 7b 67 3d 75 28 67 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 67 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 67 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6b 3d Data Ascii: tion e(g){this[0]={};this[1]=b();this.size=0;if(g){g=u(g);for(var k;!(k=g.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="function")return!1;try{var g=Object.seal({x:4}),k=
2025-01-09 23:21:54 UTC	1390	IN	Data Raw: 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 67 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 67 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 68 3d 30 3b 72 65 74 75 72 6e 20 65 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 76 61 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 2b Data Ascii: nction(g){return g.value})};e.prototype.forEach=function(g,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,g.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.entries;var h=0;return e});function va(a,b){a instanceof String&&(a+
2025-01-09 23:21:54 UTC	1390	IN	Data Raw: 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 30 3b 66 3c 65 3b 66 2b 2b 29 7b 76 61 72 20 68 3d 64 5b 66 5d 3b 69 66 28 62 2e 63 61 6c 6c 28 63 2c 68 2c 66 2c 64 29 29 7b 62 3d 68 3b 62 72 65 61 6b 20 61 7d 7d 62 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 6e 20 62 7d 7d 29 3b 72 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c Data Ascii: pe.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof String&&(d=String(d));for(var e=d.length,f=0;f<e;f++){var h=d[f];if(b.call(c,h,f,d)){b=h;break a}}b=void 0}return b}});r("Object.entries",function(a){return a?a:function(b){var c=[],

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.10	49806	54.75.69.192	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:54 UTC	685	OUT	POST /mon HTTP/1.1 Host: obseu.netgreencolumn.com Connection: keep-alive Content-Length: 2800 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: http://api.myuhchvision.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://api.myuhchvision.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
2025-01-09 23:21:54 UTC	2800	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 39 65 38 63 33 33 33 65 65 34 65 38 62 39 66 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 39 31 36 38 61 36 66 32 36 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 31 66 38 33 64 37 38 39 30 35 32 39 33 36 31 66 66 36 32 65 37 37 30 35 38 35 33 64 38 62 33 37 39 35 35 31 33 37 35 31 37 31 63 31 35 30 35 34 30 61 33 64 30 33 30 39 39 30 65 62 33 64 31 63 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 62 32 35 66 34 35 34 37 31 61 64 30 66 32 65 36 34 31 30 64 32 35 61 66 65 35 61 65 63 64 32 39 34 38 61 37 66 65 30 37 Data Ascii: e=37dfbd8ee84e001269e8c333ee4e8b9f9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d59168a6f2617071a10acf9f29f671f83d7890529361ff62e7705853d8b379551375171c150540a3d030990eb3d1c77be26bb25cb43e29b25f45471ad0f2e6410d25afe5aecd2948a7fe07
2025-01-09 23:21:54 UTC	286	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: http://api.myuhchvision.com Content-Length: 0 Content-Type: application/json Date: Thu, 09 Jan 2025 23:21:54 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.10	49807	3.248.162.96	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:54 UTC	1939	OUT	GET /tracker/tc_imp.gif?e=37dfbd8ee84e001269e8c333ee4e8b9f9225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d59168a6f2617071a10acf9f29f671f83d7890529361ff62e7705853d8b379551375171c150540a3d030990eb3d1c77be26bb25cb43e29b25f45471ad0f2e6410d25afe5aecd2948a7fe07f52a13ad2a24710d14e681f2d1586d31c64e56ac8bf88b71208fe59f1d329e921c46bcf40e25c7ea8290ee95c400035db386ee683e99332bd06b442c316f0496f70bfc72f02431e24f97999c140ab51258fc6e279126332a5de6c7fd6d5431f2b436f0715a7902c701e56f2ab0b2093aef6298ee35d60013ee9f3e4869265badad60ebf029d586b6acdee9eb0f4629388ea6892340685fd9c2d1815f2606aba8c063abbcaf1778807fc4eae965d8013d9c56d9c7c71d69338c734d08bf6aec6aabb4a72b076f5e2a5774f67e38e7c82a850e710540bd64148c78580d9ccf0c568877e82ccfbc879ae243b03b53865d494d116749ea864a841bfc503d667a879455b44cb26ff559c87e03fb98d789f5ce98cd0dd6c825c566ef859541d3e457dd3a766b753dfc18b64fdde69bdde6cdf81c8f07688bcf174603ed0a9110495f70d5a23fae7e538e043cef856fdfd3cae6ee26d8759bf09d1a83caa0635b0ebcb322d357202340a5b14ace58a68db03b75b4e237db1 [TRUNCATED] Host: obseu.netgreencolumn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
2025-01-09 23:21:54 UTC	230	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Date: Thu, 09 Jan 2025 23:21:54 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Pragma: no-cache Connection: close
2025-01-09 23:21:54 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.10	49814	142.250.186.110	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:55 UTC	373	OUT	GET /adsense/domains/caf.js?pac=0 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:55 UTC	717	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 147115 Date: Thu, 09 Jan 2025 23:21:55 GMT Expires: Thu, 09 Jan 2025 23:21:55 GMT Cache-Control: private, max-age=3600 ETag: "5203081428332967614" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-09 23:21:55 UTC	673	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 68 61 73 68 3a 22 35 39 34 32 35 39 39 38 31 32 32 37 30 35 36 32 37 32 35 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 31 34 33 37 2c 31 37 33 30 31 34 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"5942599812270562725",packages:"domains",module:"ads",version:"1",m:{cei:"17301437,173014
2025-01-09 23:21:55 UTC	1390	IN	Data Raw: 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 64 48 4a 68 62 6e 4e 73 59 58 52 6c 4c 6d 64 76 62 32 63 73 64 57 73 75 59 32 39 74 4c 48 56 7a 4c 6d 4e 76 62 53 78 33 5a 57 49 75 59 58 42 77 22 2c 63 64 6c 3a 66 61 6c 73 65 2c 63 64 68 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 63 64 65 6d 3a 7b 22 61 66 73 5f 61 61 5f 62 61 73 65 6c 69 6e 65 22 3a 35 30 30 2c 22 61 66 73 5f 63 68 61 74 62 6f 74 22 3a 30 2c 22 61 66 73 5f 63 68 61 Data Ascii: 0000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":0,"afs_cha
2025-01-09 23:21:55 UTC	1390	IN	Data Raw: 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 72 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 Data Ascii: ar d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});r("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array
2025-01-09 23:21:55 UTC	1390	IN	Data Raw: 62 6c 65 20 6f 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 75 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 71 61 28 61 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 72 61 77 3d 62 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 26 26 28 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 61 29 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 62 29 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f Data Ascii: ble or ArrayLike");}function oa(a){if(!(a instanceof Array)){a=u(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}function pa(a){return qa(a,a)}function qa(a,b){a.raw=b;Object.freeze&&(Object.freeze(a),Object.freeze(b));return a}functio
2025-01-09 23:21:55 UTC	1390	IN	Data Raw: 64 28 68 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 79 66 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 67 3d 76 6f 69 64 20 30 3b 74 72 79 7b 67 3d 68 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 55 63 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 67 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 45 66 28 67 2c 68 29 3a 74 68 69 73 2e 44 64 28 68 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 63 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 55 64 28 32 2c 68 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 44 64 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 55 64 28 31 2c 68 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 55 64 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 67 29 7b 69 66 28 74 68 69 73 2e 41 21 3d Data Ascii: d(h)}};b.prototype.yf=function(h){var g=void 0;try{g=h.then}catch(k){this.Uc(k);return}typeof g=="function"?this.Ef(g,h):this.Dd(h)};b.prototype.Uc=function(h){this.Ud(2,h)};b.prototype.Dd=function(h){this.Ud(1,h)};b.prototype.Ud=function(h,g){if(this.A!=
2025-01-09 23:21:55 UTC	1390	IN	Data Raw: 29 3b 72 65 74 75 72 6e 20 6e 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 68 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 65 62 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 0a 67 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 41 29 7b 63 61 73 65 20 31 3a 68 28 6c 2e 53 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 67 28 6c 2e 53 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 65 3a 20 22 2b 6c 2e 41 29 3b 7d 7d 76 61 72 20 6c 3d 74 68 69 73 3b 74 68 69 73 2e 74 61 3d 3d 6e 75 6c 6c 3f 66 2e 70 64 28 6b 29 3a 74 68 69 73 2e 74 61 Data Ascii: );return n};b.prototype.catch=function(h){return this.then(void 0,h)};b.prototype.eb=function(h,g){function k(){switch(l.A){case 1:h(l.Sa);break;case 2:g(l.Sa);break;default:throw Error("Unexpected state: "+l.A);}}var l=this;this.ta==null?f.pd(k):this.ta
2025-01-09 23:21:55 UTC	1390	IN	Data Raw: 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 0a 6d 3d 6e 65 77 20 61 28 5b 5b 6b 2c 32 5d 2c 5b 6c 2c 33 5d 5d 29 3b 69 66 28 6d 2e 67 65 74 28 6b 29 21 Data Ascii: :l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Object.seal({}),l=Object.seal({}),m=new a([[k,2],[l,3]]);if(m.get(k)!
2025-01-09 23:21:55 UTC	1390	IN	Data Raw: 74 69 6f 6e 20 65 28 67 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 67 29 7b 67 3d 75 28 67 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 67 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 67 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6b 3d Data Ascii: tion e(g){this[0]={};this[1]=b();this.size=0;if(g){g=u(g);for(var k;!(k=g.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="function")return!1;try{var g=Object.seal({x:4}),k=
2025-01-09 23:21:55 UTC	1390	IN	Data Raw: 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 67 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 67 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 68 3d 30 3b 72 65 74 75 72 6e 20 65 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 76 61 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 2b Data Ascii: nction(g){return g.value})};e.prototype.forEach=function(g,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,g.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.entries;var h=0;return e});function va(a,b){a instanceof String&&(a+
2025-01-09 23:21:55 UTC	1390	IN	Data Raw: 70 65 2e 66 69 6e 64 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 30 3b 66 3c 65 3b 66 2b 2b 29 7b 76 61 72 20 68 3d 64 5b 66 5d 3b 69 66 28 62 2e 63 61 6c 6c 28 63 2c 68 2c 66 2c 64 29 29 7b 62 3d 68 3b 62 72 65 61 6b 20 61 7d 7d 62 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 6e 20 62 7d 7d 29 3b 72 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c Data Ascii: pe.find",function(a){return a?a:function(b,c){a:{var d=this;d instanceof String&&(d=String(d));for(var e=d.length,f=0;f<e;f++){var h=d[f];if(b.call(c,h,f,d)){b=h;break a}}b=void 0}return b}});r("Object.entries",function(a){return a?a:function(b){var c=[],

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.10	49813	3.248.162.96	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:55 UTC	401	OUT	GET /mon HTTP/1.1 Host: obseu.netgreencolumn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
2025-01-09 23:21:55 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 09 Jan 2025 23:21:55 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.10	49815	216.58.206.65	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:55 UTC	736	OUT	GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:55 UTC	799	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 391 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 09 Jan 2025 20:36:59 GMT Expires: Fri, 10 Jan 2025 19:36:59 GMT Cache-Control: public, max-age=82800 Age: 9896 Last-Modified: Thu, 20 Jul 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-09 23:21:55 UTC	391	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 30 30 22 20 68 65 69 67 68 74 3d 22 32 30 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 35 2e 35 20 31 34 68 2d 2e 37 39 6c 2d 2e 32 38 2d 2e 32 37 43 31 35 2e 34 31 20 31 32 2e 35 39 20 31 36 20 31 31 2e 31 31 20 31 36 20 39 2e 35 20 31 36 20 35 2e 39 31 20 31 33 2e 30 39 20 33 20 39 2e 35 20 33 53 33 20 35 2e 39 31 20 33 20 39 2e 35 20 35 2e 39 31 20 31 36 20 39 2e 35 20 31 36 63 31 2e 36 31 20 30 20 33 2e 30 39 2d 2e 35 39 20 34 2e 32 33 2d 31 2e 35 37 6c 2e 32 37 2e 32 38 76 2e 37 39 6c 35 20 34 2e 39 39 4c Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.10	49816	216.58.206.65	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:55 UTC	737	OUT	GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:55 UTC	800	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 200 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 09 Jan 2025 14:08:09 GMT Expires: Fri, 10 Jan 2025 13:08:09 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 02 Nov 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Age: 33226 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-09 23:21:55 UTC	200	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 77 69 64 74 68 3d 22 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 35 2e 38 38 20 34 2e 31 32 4c 31 33 2e 37 36 20 31 32 6c 2d 37 2e 38 38 20 37 2e 38 38 4c 38 20 32 32 6c 31 30 2d 31 30 4c 38 20 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.10	49788	142.250.186.110	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:56 UTC	884	OUT	GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=8wea56wuq97p&aqid=EVqAZ9i1E_e7juwPqPrk8Q4&psid=7840396037&pbt=bs&adbx=375&adby=129&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=712519386&csala=5%7C0%7C1335%7C1195%7C199&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://api.myuhchvision.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:56 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-LxFCcKu_B0Anjr8ojdPbbA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Thu, 09 Jan 2025 23:21:56 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.10	49824	54.75.69.192	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:56 UTC	685	OUT	POST /mon HTTP/1.1 Host: obseu.netgreencolumn.com Connection: keep-alive Content-Length: 1566 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: http://api.myuhchvision.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://api.myuhchvision.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
2025-01-09 23:21:56 UTC	1566	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 39 65 38 63 33 33 33 65 65 34 65 38 62 39 66 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 39 31 36 38 61 36 66 32 36 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 31 66 38 33 64 37 38 39 30 35 32 39 33 36 31 66 66 36 32 65 37 37 30 35 38 35 33 64 38 62 33 37 39 35 35 31 33 37 35 31 37 31 63 31 35 30 35 34 30 61 33 64 30 33 30 39 39 30 65 62 33 64 31 63 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 62 32 35 66 34 35 34 37 31 61 64 30 66 32 65 36 34 31 30 64 32 35 61 66 65 35 61 65 63 64 32 39 34 38 61 37 66 65 30 37 Data Ascii: e=37dfbd8ee84e001269e8c333ee4e8b9f9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d59168a6f2617071a10acf9f29f671f83d7890529361ff62e7705853d8b379551375171c150540a3d030990eb3d1c77be26bb25cb43e29b25f45471ad0f2e6410d25afe5aecd2948a7fe07
2025-01-09 23:21:56 UTC	286	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: http://api.myuhchvision.com Content-Length: 0 Content-Type: application/json Date: Thu, 09 Jan 2025 23:21:56 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.10	49833	142.250.186.110	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:57 UTC	884	OUT	GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=hnp8w9dqetfj&aqid=EVqAZ9i1E_e7juwPqPrk8Q4&psid=7840396037&pbt=bv&adbx=375&adby=129&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=712519386&csala=5%7C0%7C1335%7C1195%7C199&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://api.myuhchvision.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:21:57 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-lrUkUEBbgtgAuQvTL0DAfQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Thu, 09 Jan 2025 23:21:57 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.10	49839	3.248.162.96	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:57 UTC	401	OUT	GET /mon HTTP/1.1 Host: obseu.netgreencolumn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
2025-01-09 23:21:57 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 09 Jan 2025 23:21:57 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.10	49846	54.75.69.192	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:58 UTC	685	OUT	POST /mon HTTP/1.1 Host: obseu.netgreencolumn.com Connection: keep-alive Content-Length: 1713 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: http://api.myuhchvision.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://api.myuhchvision.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
2025-01-09 23:21:58 UTC	1713	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 39 65 38 63 33 33 33 65 65 34 65 38 62 39 66 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 39 31 36 38 61 36 66 32 36 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 31 66 38 33 64 37 38 39 30 35 32 39 33 36 31 66 66 36 32 65 37 37 30 35 38 35 33 64 38 62 33 37 39 35 35 31 33 37 35 31 37 31 63 31 35 30 35 34 30 61 33 64 30 33 30 39 39 30 65 62 33 64 31 63 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 62 32 35 66 34 35 34 37 31 61 64 30 66 32 65 36 34 31 30 64 32 35 61 66 65 35 61 65 63 64 32 39 34 38 61 37 66 65 30 37 Data Ascii: e=37dfbd8ee84e001269e8c333ee4e8b9f9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d59168a6f2617071a10acf9f29f671f83d7890529361ff62e7705853d8b379551375171c150540a3d030990eb3d1c77be26bb25cb43e29b25f45471ad0f2e6410d25afe5aecd2948a7fe07
2025-01-09 23:21:58 UTC	286	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: http://api.myuhchvision.com Content-Length: 0 Content-Type: application/json Date: Thu, 09 Jan 2025 23:21:58 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.10	49854	3.248.162.96	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:21:59 UTC	401	OUT	GET /mon HTTP/1.1 Host: obseu.netgreencolumn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
2025-01-09 23:21:59 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 09 Jan 2025 23:21:59 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.10	49880	54.75.69.192	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:03 UTC	685	OUT	POST /mon HTTP/1.1 Host: obseu.netgreencolumn.com Connection: keep-alive Content-Length: 1716 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: http://api.myuhchvision.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://api.myuhchvision.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
2025-01-09 23:22:03 UTC	1716	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 39 65 38 63 33 33 33 65 65 34 65 38 62 39 66 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 39 31 36 38 61 36 66 32 36 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 31 66 38 33 64 37 38 39 30 35 32 39 33 36 31 66 66 36 32 65 37 37 30 35 38 35 33 64 38 62 33 37 39 35 35 31 33 37 35 31 37 31 63 31 35 30 35 34 30 61 33 64 30 33 30 39 39 30 65 62 33 64 31 63 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 62 32 35 66 34 35 34 37 31 61 64 30 66 32 65 36 34 31 30 64 32 35 61 66 65 35 61 65 63 64 32 39 34 38 61 37 66 65 30 37 Data Ascii: e=37dfbd8ee84e001269e8c333ee4e8b9f9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d59168a6f2617071a10acf9f29f671f83d7890529361ff62e7705853d8b379551375171c150540a3d030990eb3d1c77be26bb25cb43e29b25f45471ad0f2e6410d25afe5aecd2948a7fe07
2025-01-09 23:22:03 UTC	286	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: http://api.myuhchvision.com Content-Length: 0 Content-Type: application/json Date: Thu, 09 Jan 2025 23:22:03 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.10	49890	3.248.162.96	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:04 UTC	401	OUT	GET /mon HTTP/1.1 Host: obseu.netgreencolumn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
2025-01-09 23:22:04 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 09 Jan 2025 23:22:04 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.10	49903	185.53.179.31	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:06 UTC	1155	OUT	POST /track.php?click=caf&domain=myuhchvision.com&uid=MTczNjQ2NDkwOS43NDM2OjQ3ZGQ4MDVlNDY3ODk5YzdhZmE5ODJiZWIxZTNjZGFmZDhjNDExNzliNWIxNWJjNzM0ZjRhZDI1NGI5MTFjMTE6Njc4MDVhMGRiNTg3Zg%3D%3D&ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTA5Ljc3OTN8ZGVlN2I5ZGVkM2MzYmI1Yzc3NWI1MWI1NzQ5OWRlZTc3MmY5YWI1ZHx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%3D%3D&adtest=off&nc=17616151736464924908 HTTP/1.1 Host: trkpc.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://syndicatedsearch.goog Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:07 UTC	253	IN	HTTP/1.1 403 Forbidden Server: nginx Date: Thu, 09 Jan 2025 23:22:07 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Access-Control-Allow-Origin: * Status: 403 Forbidden X-Http-Caddy: yes X-Invalid-Click: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.10	49909	54.75.69.192	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:07 UTC	688	OUT	POST /mon HTTP/1.1 Host: obseu.netgreencolumn.com Connection: keep-alive Content-Length: 1758 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: http://api.myuhchvision.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: http://api.myuhchvision.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
2025-01-09 23:22:07 UTC	1758	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 39 65 38 63 33 33 33 65 65 34 65 38 62 39 66 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 39 31 36 38 61 36 66 32 36 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 31 66 38 33 64 37 38 39 30 35 32 39 33 36 31 66 66 36 32 65 37 37 30 35 38 35 33 64 38 62 33 37 39 35 35 31 33 37 35 31 37 31 63 31 35 30 35 34 30 61 33 64 30 33 30 39 39 30 65 62 33 64 31 63 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 62 32 35 66 34 35 34 37 31 61 64 30 66 32 65 36 34 31 30 64 32 35 61 66 65 35 61 65 63 64 32 39 34 38 61 37 66 65 30 37 Data Ascii: e=37dfbd8ee84e001269e8c333ee4e8b9f9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d59168a6f2617071a10acf9f29f671f83d7890529361ff62e7705853d8b379551375171c150540a3d030990eb3d1c77be26bb25cb43e29b25f45471ad0f2e6410d25afe5aecd2948a7fe07
2025-01-09 23:22:07 UTC	286	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: http://api.myuhchvision.com Content-Length: 0 Content-Type: application/json Date: Thu, 09 Jan 2025 23:22:07 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.10	49910	52.222.236.17	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:07 UTC	567	OUT	GET /sxp/i/eface9ae07046ed0ab532b93a8338a63.js HTTP/1.1 Host: euob.netgreencolumn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://api.myuhchvision.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:07 UTC	504	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 106599 Connection: close Server: Caddy Cache-Control: max-age=43200 Date: Thu, 09 Jan 2025 12:24:05 GMT Expires: Fri, 10 Jan 2025 00:24:05 GMT ETag: "1a067-kTD3BlNcFwFSvBiUGO0LYO9N/fY" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 bb3ac1595bb014e3b09608a0358d33da.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: HN6W9XbTxQRzcUFy7r1XEeTXE3SWJHgd96B04WiftSn4Ch4c3uRMVw== Age: 39482
2025-01-09 23:22:07 UTC	15880	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 69 66 28 6e 5b 65 5d 29 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 6e 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 65 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 72 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 2c 72 2e 63 3d 6e 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 72 2e 6f 28 74 2c 6e 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 6e 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 65 7d 29 7d 2c 72 2e 72 3d 66 75 6e Data Ascii: !function(t){var n={};function r(e){if(n[e])return n[e].exports;var i=n[e]={i:e,l:!1,exports:{}};return t[e].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=n,r.d=function(t,n,e){r.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:e})},r.r=fun
2025-01-09 23:22:07 UTC	16384	IN	Data Raw: 28 74 29 7b 76 61 72 20 6e 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 6e 2e 6c 65 6e 67 74 68 3e 3d 33 29 72 65 74 75 72 6e 20 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 33 5d 2b 22 2e 22 2b 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 32 5d 2b 22 2e 22 2b 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 31 5d 7d 72 65 74 75 72 6e 22 2d 22 7d 2c 48 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 41 2e 51 74 28 22 5f 66 62 63 22 29 3b 69 66 28 74 29 7b 76 61 72 20 6e 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 6e 2e 6c 65 6e 67 74 68 3e 3d 33 29 72 65 74 75 72 6e 20 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 33 5d 2b 22 2e 22 2b 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 32 5d 2b 22 2e 22 2b 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 31 5d 7d 72 65 74 75 72 6e 22 2d 22 7d 2c 51 6e 3a 66 75 6e 63 74 Data Ascii: (t){var n=t.split(".");if(n.length>=3)return n[n.length-3]+"."+n[n.length-2]+"."+n[n.length-1]}return"-"},Hn:function(){var t=A.Qt("_fbc");if(t){var n=t.split(".");if(n.length>=3)return n[n.length-3]+"."+n[n.length-2]+"."+n[n.length-1]}return"-"},Qn:funct
2025-01-09 23:22:07 UTC	16384	IN	Data Raw: 79 2e 43 72 28 29 29 2c 68 3d 5f 2e 79 6e 28 29 2c 67 3d 75 28 29 2c 62 3d 6f 2e 70 65 28 29 3b 74 3d 2b 6e 65 77 20 44 61 74 65 3b 76 61 72 20 45 3d 76 2e 67 65 74 53 70 61 50 61 67 65 28 29 2c 78 3d 79 2e 6e 72 28 7b 69 64 3a 6b 2e 69 64 2c 75 72 6c 3a 79 2e 4a 6e 28 72 2c 6b 2e 69 64 2c 4e 2c 6b 2e 47 72 29 2c 73 66 3a 2b 79 2e 62 72 28 29 2c 74 70 69 3a 4e 2e 74 70 69 2c 63 68 3a 4e 2e 63 68 2c 75 76 69 64 3a 4e 2e 75 76 69 64 2c 74 73 66 3a 65 2c 74 73 66 6d 69 3a 69 2c 74 73 66 75 3a 61 2c 63 62 3a 74 2c 68 6c 3a 79 2e 61 72 28 29 2c 6f 70 3a 2b 79 2e 69 72 28 29 2c 61 67 3a 70 2e 5a 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 2c 72 61 6e 64 3a 6e 2c 66 73 3a 6c 2e 77 2b 22 78 22 2b 6c 2e 68 2c 66 73 74 3a 64 2e 77 2b 22 78 22 2b Data Ascii: y.Cr()),h=_.yn(),g=u(),b=o.pe();t=+new Date;var E=v.getSpaPage(),x=y.nr({id:k.id,url:y.Jn(r,k.id,N,k.Gr),sf:+y.br(),tpi:N.tpi,ch:N.ch,uvid:N.uvid,tsf:e,tsfmi:i,tsfu:a,cb:t,hl:y.ar(),op:+y.ir(),ag:p.Z(navigator.userAgent),rand:n,fs:l.w+"x"+l.h,fst:d.w+"x"+
2025-01-09 23:22:07 UTC	16384	IN	Data Raw: 7b 72 65 74 75 72 6e 20 74 21 3d 3d 6e 26 26 75 5b 74 5d 3d 3d 3d 75 5b 6e 5d 7d 29 7d 76 61 72 20 72 3d 6e 28 22 41 72 72 61 79 22 29 3b 69 66 28 2d 31 21 3d 3d 72 29 7b 76 61 72 20 65 3d 5b 72 2c 6e 28 22 53 79 6d 62 6f 6c 22 29 2c 6e 28 22 50 72 6f 6d 69 73 65 22 29 5d 3b 69 66 28 63 2e 46 74 28 65 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 2d 31 21 3d 3d 74 7d 29 26 26 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 7c 7c 30 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 6e 3d 74 5b 30 5d 2c 72 3d 74 5b 30 5d 2c 65 3d 31 3b 65 3c 74 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3c 6e 26 26 28 6e 3d 74 5b 65 5d 29 2c 74 5b 65 5d 3e 72 26 26 28 72 3d 74 5b 65 5d 29 3b 72 65 74 75 72 6e 20 72 2d Data Ascii: {return t!==n&&u[t]===u[n]})}var r=n("Array");if(-1!==r){var e=[r,n("Symbol"),n("Promise")];if(c.Ft(e,function(t){return-1!==t})&&function(t){if(!t\|\|0===t.length)return!1;for(var n=t[0],r=t[0],e=1;e<t.length;e++)t[e]<n&&(n=t[e]),t[e]>r&&(r=t[e]);return r-
2025-01-09 23:22:07 UTC	16384	IN	Data Raw: 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 66 69 72 73 74 2d 69 6e 70 75 74 22 29 3b 69 66 28 74 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 6e 3d 5b 22 31 22 2c 28 74 3d 74 5b 30 5d 29 2e 6e 61 6d 65 2c 70 61 72 73 65 49 6e 74 28 74 2e 73 74 61 72 74 54 69 6d 65 29 5d 2c 72 3d 74 2e 74 61 72 67 65 74 26 26 61 2e 42 74 28 74 2e 74 61 72 67 65 74 29 3b 69 66 28 72 29 7b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6e 2e 70 75 73 68 28 65 2e 74 61 67 4e 61 6d 65 29 2c 6e 2e 70 75 73 68 28 72 2e 78 29 2c 6e 2e 70 75 73 68 28 72 2e 79 29 2c 6e 2e 70 75 73 68 28 65 2e 69 64 29 2c 6e 2e 70 75 73 68 28 65 2e 63 6c 61 73 73 4e 61 6d 65 29 7d 72 65 74 75 72 6e 20 6e 2e 6a 6f 69 6e 28 22 2c 22 29 7d 72 65 74 75 72 6e 22 30 22 7d Data Ascii: rformance.getEntriesByType("first-input");if(t.length){var n=["1",(t=t[0]).name,parseInt(t.startTime)],r=t.target&&a.Bt(t.target);if(r){var e=t.target;n.push(e.tagName),n.push(r.x),n.push(r.y),n.push(e.id),n.push(e.className)}return n.join(",")}return"0"}
2025-01-09 23:22:07 UTC	16384	IN	Data Raw: 74 63 68 28 74 29 7b 7d 69 66 28 72 29 6d 2e 5a 65 2e 70 75 73 68 28 7b 73 3a 31 7d 29 3b 65 6c 73 65 7b 76 61 72 20 69 3d 30 3b 73 77 69 74 63 68 28 6f 2e 7a 74 28 29 29 7b 63 61 73 65 22 76 69 73 69 62 6c 65 22 3a 69 3d 31 3b 62 72 65 61 6b 3b 63 61 73 65 22 68 69 64 64 65 6e 22 3a 69 3d 32 3b 62 72 65 61 6b 3b 63 61 73 65 22 70 72 65 72 65 6e 64 65 72 22 3a 69 3d 33 7d 6d 2e 5a 65 2e 70 75 73 68 28 7b 73 3a 69 7d 29 7d 6f 2e 62 6e 28 76 2c 22 66 6f 63 75 73 22 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 6f 2e 6d 6e 28 74 29 3b 67 28 72 29 2c 6d 2e 5a 65 2e 70 75 73 68 28 7b 73 3a 34 2c 74 3a 72 7d 29 7d 29 2c 6f 2e 62 6e 28 76 2c 22 62 6c 75 72 22 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 6f 2e 6d 6e 28 74 29 3b 67 28 72 29 Data Ascii: tch(t){}if(r)m.Ze.push({s:1});else{var i=0;switch(o.zt()){case"visible":i=1;break;case"hidden":i=2;break;case"prerender":i=3}m.Ze.push({s:i})}o.bn(v,"focus",function(n){var r=o.mn(t);g(r),m.Ze.push({s:4,t:r})}),o.bn(v,"blur",function(n){var r=o.mn(t);g(r)
2025-01-09 23:22:07 UTC	8799	IN	Data Raw: 70 61 67 65 4c 6f 61 64 22 29 7d 2c 28 6f 3d 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 65 29 29 2e 73 72 63 3d 22 2f 2f 62 61 74 2e 62 69 6e 67 2e 63 6f 6d 2f 62 61 74 2e 6a 73 22 2c 6f 2e 61 73 79 6e 63 3d 31 2c 6f 2e 6f 6e 6c 6f 61 64 3d 6f 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 72 65 61 64 79 53 74 61 74 65 3b 74 26 26 22 6c 6f 61 64 65 64 22 21 3d 3d 74 26 26 22 63 6f 6d 70 6c 65 74 65 22 21 3d 3d 74 7c 7c 28 63 28 29 2c 6f 2e 6f 6e 6c 6f 61 64 3d 6f 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 6e 75 6c 6c 29 7d 2c 28 75 3d 72 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 5b 30 5d 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e Data Ascii: pageLoad")},(o=r.createElement(e)).src="//bat.bing.com/bat.js",o.async=1,o.onload=o.onreadystatechange=function(){var t=this.readyState;t&&"loaded"!==t&&"complete"!==t\|\|(c(),o.onload=o.onreadystatechange=null)},(u=r.getElementsByTagName(e)[0]).parentNode.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.10	49912	142.250.184.206	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:07 UTC	708	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://api.myuhchvision.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:07 UTC	910	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Content-Security-Policy: script-src 'nonce-weuQNaibm1uBb8FjMwRNFw' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui; base-uri 'none' Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 1560 Date: Thu, 09 Jan 2025 23:22:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-09 23:22:07 UTC	480	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 52 4f 42 4f 54 53 22 20 63 6f 6e 74 65 6e 74 3d 22 4e 4f 49 4e 44 45 58 2c 20 4e 4f 46 4f 4c 4c 4f 57 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 6c 65 70 68 6f 6e 65 3d 6e 6f 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 61 64 42 6c 6f 63 6b 22 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 77 65 75 51 4e 61 69 62 6d 31 75 42 62 38 46 6a 4d 77 52 4e 46 77 22 3e 69 66 20 28 77 69 6e 64 6f 77 2e 6e Data Ascii: <!doctype html><html><head><meta name="ROBOTS" content="NOINDEX, NOFOLLOW"><meta name="format-detection" content="telephone=no"><meta content="origin" name="referrer"></head><body><div id="adBlock"></div><script nonce="weuQNaibm1uBb8FjMwRNFw">if (window.n
2025-01-09 23:22:07 UTC	1080	IN	Data Raw: 7b 69 66 20 28 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 3f 70 61 63 3d 31 27 29 20 3e 20 30 20 7c 7c 20 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 26 70 61 63 3d 31 27 29 20 3e 20 30 29 20 7b 73 63 72 69 70 74 2e 73 72 63 20 2b 3d 20 27 3f 70 61 63 3d 31 27 3b 7d 20 65 6c 73 65 20 69 66 20 28 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 3f 70 61 63 3d 32 27 29 20 3e 20 30 20 7c 7c 20 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 26 70 61 63 3d 32 27 29 20 3e 20 30 29 20 7b 73 63 72 69 70 74 2e 73 72 63 20 2b 3d 20 27 3f 70 61 63 3d 32 27 3b 7d 20 65 6c 73 65 20 7b 73 63 72 69 70 74 2e 73 72 63 20 2b 3d 20 27 3f 70 61 63 3d 30 27 3b 7d 7d 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 63 72 69 70 74 29 3b 77 69 6e 64 6f 77 2e 49 Data Ascii: {if (href.indexOf('?pac=1') > 0 \|\| href.indexOf('&pac=1') > 0) {script.src += '?pac=1';} else if (href.indexOf('?pac=2') > 0 \|\| href.indexOf('&pac=2') > 0) {script.src += '?pac=2';} else {script.src += '?pac=0';}}document.head.appendChild(script);window.I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.10	49913	142.250.184.206	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:07 UTC	2790	OUT	GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket011%2Cbucket088%2Cbucket089&client=dp-teaminternet09_3ph&r=m&sct=ID%3Dc2d96085edb8c52a%3AT%3D1736464913%3ART%3D1736464913%3AS%3DALNI_MYPZC8TKmtU-_fM69ccp9F25OCunQ&sc_status=6&hl=en&rpbu=http%3A%2F%2Fapi.myuhchvision.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTI2LjI2MDl8NjIzYzkxMDZmNjA5NGYyZWI5YWIxZjc0ZTk1MzgwZjM4MjNiZTI4Ynx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%253D%253D&max_radlink_len=40&type=0&uiopt=true&swp=as-drid-2541811284092968&q=United%20Healthcare%20Medicare&afdt=ChMIpK7J8uPpigMVqoX9Bx1cfACQEmoBlLqpjxgmjCzROndp4cIsoUpMclKqzmCF8A4idqYAc6BRFXzqpQZr5mHskq-o8oROHsWon_E3VNBfAnPv0EnTUZ4xhapxEHMsWhLX36L28YhUgQYpSE5TWYluVMNln-ErnASvWEH_lO70IAE&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C1730143 [TRUNCATED] Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://api.myuhchvision.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:08 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Thu, 09 Jan 2025 23:22:07 GMT Expires: Thu, 09 Jan 2025 23:22:07 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-XKShKoWzmTDAgNZ63kFoXA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-09 23:22:08 UTC	583	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 8000<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2025-01-09 23:22:08 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2025-01-09 23:22:08 UTC	1390	IN	Data Raw: 5f 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 Data Ascii: _{overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-f
2025-01-09 23:22:08 UTC	1390	IN	Data Raw: 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 Data Ascii: start; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center
2025-01-09 23:22:08 UTC	1390	IN	Data Raw: 65 66 74 3a 31 36 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 36 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 34 70 78 3b 63 6f 6c 6f 72 3a 23 44 41 44 43 45 30 3b 7d 2e 73 69 31 35 33 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 34 34 37 34 36 3b 68 65 69 67 68 74 3a 31 70 78 3b 7d 2e 73 69 37 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 36 70 78 3b 63 6f 6c 6f 72 3a 23 46 46 46 46 46 46 3b 7d 2e 73 69 37 31 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 73 69 37 30 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 34 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 30 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 Data Ascii: eft:16px;padding-right:16px;padding-top:24px;color:#DADCE0;}.si153{background-color:#444746;height:1px;}.si71{font-size:20px;line-height:26px;color:#FFFFFF;}.si71:hover{text-decoration:underline;}.si70{padding-bottom:4px;padding-left:20px;padding-right:20
2025-01-09 23:22:08 UTC	1390	IN	Data Raw: 74 74 6f 6d 3a 31 30 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 32 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 30 70 78 3b 7d 2e 73 69 33 39 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 34 70 78 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 45 43 45 44 45 46 3b 68 65 69 67 68 74 3a 32 38 70 78 3b 77 69 64 74 68 3a 32 38 70 78 3b 7d 2e 73 69 34 30 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 70 78 3b 7d 2e 73 69 34 31 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 7d 2e 73 69 34 37 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 7d 2e 73 69 35 31 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 Data Ascii: ttom:10px;padding-right:12px;padding-top:10px;}.si39{border-radius:14px;border:1px solid #ECEDEF;height:28px;width:28px;}.si40{margin-bottom:0px;margin-left:0px;margin-right:0px;margin-top:0px;}.si41{height:100%;}.si47{height:100%;}.si51{height:100%;width
2025-01-09 23:22:08 UTC	1390	IN	Data Raw: 65 66 74 3a 36 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 70 78 3b 7d 2e 63 74 64 52 61 74 69 6e 67 53 70 61 63 65 72 7b 77 69 64 74 68 3a 33 70 78 3b 7d 2e 73 69 31 36 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 70 78 3b 7d 2e 73 69 74 65 6c 69 6e 6b 73 4c 65 66 74 43 6f 6c 75 6d 6e 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 70 78 3b 7d 2e 73 69 74 65 6c 69 6e 6b 73 52 69 67 68 74 43 6f 6c 75 6d 6e 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 30 70 78 3b 7d 2e 65 78 70 2d 73 69 74 65 6c 69 6e 6b 73 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 34 70 78 3b 7d 2e 63 74 61 43 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 31 30 30 25 3b 20 2d 6d 73 2d 66 6c 65 78 Data Ascii: eft:6px;padding-right:4px;}.ctdRatingSpacer{width:3px;}.si16{padding-left:3px;padding-right:3px;}.sitelinksLeftColumn{padding-right:20px;}.sitelinksRightColumn{padding-left:20px;}.exp-sitelinks-container{padding-top:4px;}.ctaContainer{width:100%; -ms-flex
2025-01-09 23:22:08 UTC	1390	IN	Data Raw: 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 32 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 Data Ascii: kit-flex-direction:column; flex-direction:column;"><div class="i_ div si32" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;-ms-flex-pack:start; -webkit-box-pack:start; -webkit-justify-content:f
2025-01-09 23:22:08 UTC	1390	IN	Data Raw: 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 37 20 76 5f 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d Data Ascii: enter; -webkit-justify-content:center; justify-content:center;-ms-flex-align:stretch; -webkit-box-align:stretch; -webkit-align-items:stretch; align-items:stretch;"><div class="i_ div si37 v_" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -
2025-01-09 23:22:08 UTC	1390	IN	Data Raw: 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 73 69 33 39 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 69 76 20 71 5f 20 73 69 34 30 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 74 70 63 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 73 69 6d 67 61 64 2f 38 36 39 37 Data Ascii: ign-items:center; align-items:center;"><div class="i_ div si39" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><div class="div q_ si40"><img src="https://tpc.googlesyndication.com/simgad/8697

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.10	49920	52.222.236.26	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:08 UTC	388	OUT	GET /sxp/i/eface9ae07046ed0ab532b93a8338a63.js HTTP/1.1 Host: euob.netgreencolumn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:08 UTC	504	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 106599 Connection: close Server: Caddy Cache-Control: max-age=43200 Date: Thu, 09 Jan 2025 12:24:05 GMT Expires: Fri, 10 Jan 2025 00:24:05 GMT ETag: "1a067-kTD3BlNcFwFSvBiUGO0LYO9N/fY" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 89e34e3fd814f1393ef77867b93dd12e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P4 X-Amz-Cf-Id: tGYpFo9VJZ7w_BSJsWlhl6XWEWjM23zTyT4U44yB7jNM7cXDIgsLdQ== Age: 39483
2025-01-09 23:22:08 UTC	15880	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 69 66 28 6e 5b 65 5d 29 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 6e 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 65 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 72 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 2c 72 2e 63 3d 6e 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 72 2e 6f 28 74 2c 6e 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 6e 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 65 7d 29 7d 2c 72 2e 72 3d 66 75 6e Data Ascii: !function(t){var n={};function r(e){if(n[e])return n[e].exports;var i=n[e]={i:e,l:!1,exports:{}};return t[e].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=n,r.d=function(t,n,e){r.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:e})},r.r=fun
2025-01-09 23:22:08 UTC	16384	IN	Data Raw: 28 74 29 7b 76 61 72 20 6e 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 6e 2e 6c 65 6e 67 74 68 3e 3d 33 29 72 65 74 75 72 6e 20 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 33 5d 2b 22 2e 22 2b 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 32 5d 2b 22 2e 22 2b 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 31 5d 7d 72 65 74 75 72 6e 22 2d 22 7d 2c 48 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 41 2e 51 74 28 22 5f 66 62 63 22 29 3b 69 66 28 74 29 7b 76 61 72 20 6e 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 6e 2e 6c 65 6e 67 74 68 3e 3d 33 29 72 65 74 75 72 6e 20 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 33 5d 2b 22 2e 22 2b 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 32 5d 2b 22 2e 22 2b 6e 5b 6e 2e 6c 65 6e 67 74 68 2d 31 5d 7d 72 65 74 75 72 6e 22 2d 22 7d 2c 51 6e 3a 66 75 6e 63 74 Data Ascii: (t){var n=t.split(".");if(n.length>=3)return n[n.length-3]+"."+n[n.length-2]+"."+n[n.length-1]}return"-"},Hn:function(){var t=A.Qt("_fbc");if(t){var n=t.split(".");if(n.length>=3)return n[n.length-3]+"."+n[n.length-2]+"."+n[n.length-1]}return"-"},Qn:funct
2025-01-09 23:22:08 UTC	16384	IN	Data Raw: 79 2e 43 72 28 29 29 2c 68 3d 5f 2e 79 6e 28 29 2c 67 3d 75 28 29 2c 62 3d 6f 2e 70 65 28 29 3b 74 3d 2b 6e 65 77 20 44 61 74 65 3b 76 61 72 20 45 3d 76 2e 67 65 74 53 70 61 50 61 67 65 28 29 2c 78 3d 79 2e 6e 72 28 7b 69 64 3a 6b 2e 69 64 2c 75 72 6c 3a 79 2e 4a 6e 28 72 2c 6b 2e 69 64 2c 4e 2c 6b 2e 47 72 29 2c 73 66 3a 2b 79 2e 62 72 28 29 2c 74 70 69 3a 4e 2e 74 70 69 2c 63 68 3a 4e 2e 63 68 2c 75 76 69 64 3a 4e 2e 75 76 69 64 2c 74 73 66 3a 65 2c 74 73 66 6d 69 3a 69 2c 74 73 66 75 3a 61 2c 63 62 3a 74 2c 68 6c 3a 79 2e 61 72 28 29 2c 6f 70 3a 2b 79 2e 69 72 28 29 2c 61 67 3a 70 2e 5a 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 2c 72 61 6e 64 3a 6e 2c 66 73 3a 6c 2e 77 2b 22 78 22 2b 6c 2e 68 2c 66 73 74 3a 64 2e 77 2b 22 78 22 2b Data Ascii: y.Cr()),h=_.yn(),g=u(),b=o.pe();t=+new Date;var E=v.getSpaPage(),x=y.nr({id:k.id,url:y.Jn(r,k.id,N,k.Gr),sf:+y.br(),tpi:N.tpi,ch:N.ch,uvid:N.uvid,tsf:e,tsfmi:i,tsfu:a,cb:t,hl:y.ar(),op:+y.ir(),ag:p.Z(navigator.userAgent),rand:n,fs:l.w+"x"+l.h,fst:d.w+"x"+
2025-01-09 23:22:08 UTC	16384	IN	Data Raw: 7b 72 65 74 75 72 6e 20 74 21 3d 3d 6e 26 26 75 5b 74 5d 3d 3d 3d 75 5b 6e 5d 7d 29 7d 76 61 72 20 72 3d 6e 28 22 41 72 72 61 79 22 29 3b 69 66 28 2d 31 21 3d 3d 72 29 7b 76 61 72 20 65 3d 5b 72 2c 6e 28 22 53 79 6d 62 6f 6c 22 29 2c 6e 28 22 50 72 6f 6d 69 73 65 22 29 5d 3b 69 66 28 63 2e 46 74 28 65 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 2d 31 21 3d 3d 74 7d 29 26 26 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 7c 7c 30 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 6e 3d 74 5b 30 5d 2c 72 3d 74 5b 30 5d 2c 65 3d 31 3b 65 3c 74 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3c 6e 26 26 28 6e 3d 74 5b 65 5d 29 2c 74 5b 65 5d 3e 72 26 26 28 72 3d 74 5b 65 5d 29 3b 72 65 74 75 72 6e 20 72 2d Data Ascii: {return t!==n&&u[t]===u[n]})}var r=n("Array");if(-1!==r){var e=[r,n("Symbol"),n("Promise")];if(c.Ft(e,function(t){return-1!==t})&&function(t){if(!t\|\|0===t.length)return!1;for(var n=t[0],r=t[0],e=1;e<t.length;e++)t[e]<n&&(n=t[e]),t[e]>r&&(r=t[e]);return r-
2025-01-09 23:22:08 UTC	16384	IN	Data Raw: 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 66 69 72 73 74 2d 69 6e 70 75 74 22 29 3b 69 66 28 74 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 6e 3d 5b 22 31 22 2c 28 74 3d 74 5b 30 5d 29 2e 6e 61 6d 65 2c 70 61 72 73 65 49 6e 74 28 74 2e 73 74 61 72 74 54 69 6d 65 29 5d 2c 72 3d 74 2e 74 61 72 67 65 74 26 26 61 2e 42 74 28 74 2e 74 61 72 67 65 74 29 3b 69 66 28 72 29 7b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6e 2e 70 75 73 68 28 65 2e 74 61 67 4e 61 6d 65 29 2c 6e 2e 70 75 73 68 28 72 2e 78 29 2c 6e 2e 70 75 73 68 28 72 2e 79 29 2c 6e 2e 70 75 73 68 28 65 2e 69 64 29 2c 6e 2e 70 75 73 68 28 65 2e 63 6c 61 73 73 4e 61 6d 65 29 7d 72 65 74 75 72 6e 20 6e 2e 6a 6f 69 6e 28 22 2c 22 29 7d 72 65 74 75 72 6e 22 30 22 7d Data Ascii: rformance.getEntriesByType("first-input");if(t.length){var n=["1",(t=t[0]).name,parseInt(t.startTime)],r=t.target&&a.Bt(t.target);if(r){var e=t.target;n.push(e.tagName),n.push(r.x),n.push(r.y),n.push(e.id),n.push(e.className)}return n.join(",")}return"0"}
2025-01-09 23:22:08 UTC	16384	IN	Data Raw: 74 63 68 28 74 29 7b 7d 69 66 28 72 29 6d 2e 5a 65 2e 70 75 73 68 28 7b 73 3a 31 7d 29 3b 65 6c 73 65 7b 76 61 72 20 69 3d 30 3b 73 77 69 74 63 68 28 6f 2e 7a 74 28 29 29 7b 63 61 73 65 22 76 69 73 69 62 6c 65 22 3a 69 3d 31 3b 62 72 65 61 6b 3b 63 61 73 65 22 68 69 64 64 65 6e 22 3a 69 3d 32 3b 62 72 65 61 6b 3b 63 61 73 65 22 70 72 65 72 65 6e 64 65 72 22 3a 69 3d 33 7d 6d 2e 5a 65 2e 70 75 73 68 28 7b 73 3a 69 7d 29 7d 6f 2e 62 6e 28 76 2c 22 66 6f 63 75 73 22 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 6f 2e 6d 6e 28 74 29 3b 67 28 72 29 2c 6d 2e 5a 65 2e 70 75 73 68 28 7b 73 3a 34 2c 74 3a 72 7d 29 7d 29 2c 6f 2e 62 6e 28 76 2c 22 62 6c 75 72 22 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3d 6f 2e 6d 6e 28 74 29 3b 67 28 72 29 Data Ascii: tch(t){}if(r)m.Ze.push({s:1});else{var i=0;switch(o.zt()){case"visible":i=1;break;case"hidden":i=2;break;case"prerender":i=3}m.Ze.push({s:i})}o.bn(v,"focus",function(n){var r=o.mn(t);g(r),m.Ze.push({s:4,t:r})}),o.bn(v,"blur",function(n){var r=o.mn(t);g(r)
2025-01-09 23:22:08 UTC	8799	IN	Data Raw: 70 61 67 65 4c 6f 61 64 22 29 7d 2c 28 6f 3d 72 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 65 29 29 2e 73 72 63 3d 22 2f 2f 62 61 74 2e 62 69 6e 67 2e 63 6f 6d 2f 62 61 74 2e 6a 73 22 2c 6f 2e 61 73 79 6e 63 3d 31 2c 6f 2e 6f 6e 6c 6f 61 64 3d 6f 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 72 65 61 64 79 53 74 61 74 65 3b 74 26 26 22 6c 6f 61 64 65 64 22 21 3d 3d 74 26 26 22 63 6f 6d 70 6c 65 74 65 22 21 3d 3d 74 7c 7c 28 63 28 29 2c 6f 2e 6f 6e 6c 6f 61 64 3d 6f 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 6e 75 6c 6c 29 7d 2c 28 75 3d 72 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 5b 30 5d 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e Data Ascii: pageLoad")},(o=r.createElement(e)).src="//bat.bing.com/bat.js",o.async=1,o.onload=o.onreadystatechange=function(){var t=this.readyState;t&&"loaded"!==t&&"complete"!==t\|\|(c(),o.onload=o.onreadystatechange=null)},(u=r.getElementsByTagName(e)[0]).parentNode.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.10	49919	54.75.69.192	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:08 UTC	7056	OUT	GET /ct?id=78709&url=http%3A%2F%2Fapi.myuhchvision.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTA5Ljc3OTR8NmE2MDdhMzFkNzdlNzA2ZmVjOTAwNjczMmM0NDE0NDJjODU1MzliZXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%253D%253D%26query%3DUnited%2BHealthcare%2BMedicare%26afdToken%3DChMIpK7J8uPpigMVqoX9Bx1cfACQEmoBlLqpjxgmjCzROndp4cIsoUpMclKqzmCF8A4idqYAc6BRFXzqpQZr5mHskq-o8oROHsWon_E3VNBfAnPv0EnTUZ4xhapxEHMsWhLX36L28YhUgQYpSE5TWYluVMNln-ErnASvWEH_lO70IAE%26pcsa%3Dfalse%26nb%3D0%26nm%3D7%26nx%3D264%26ny%3D69%26is%3D530x496%26clkt%3D3%26suid%3D32397724909&sf=0&tpi=&ch=adpage&uvid=11052&tsf=0&tsfmi=&tsfu=&cb=1736464926642&hl=2&op=0&ag=300509663&rand=54226698551811820785069686057829982621069821800111001112907065107209766710201798711117&fs=1280x907&fst=1280x907&np=win32&nv=google%20inc.&ref=https%3A%2F%2Fsyndicat [TRUNCATED] Host: obseu.netgreencolumn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://api.myuhchvision.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
2025-01-09 23:22:08 UTC	294	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/javascript Date: Thu, 09 Jan 2025 23:22:08 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Pragma: no-cache Timing-Allow-Origin: http://api.myuhchvision.com Connection: close Transfer-Encoding: chunked
2025-01-09 23:22:08 UTC	885	IN	Data Raw: 31 36 64 64 0d 0a 74 79 70 65 6f 66 20 5f 5f 63 74 63 67 5f 63 74 5f 37 38 37 30 39 5f 65 78 65 63 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 5f 5f 63 74 63 67 5f 63 74 5f 37 38 37 30 39 5f 65 78 65 63 28 7b 22 74 63 22 3a 22 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 39 65 38 63 33 33 33 65 65 34 65 38 38 39 35 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 35 30 65 66 38 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 39 31 39 38 61 36 64 32 65 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 31 66 38 33 64 37 38 39 30 35 32 39 33 36 31 66 66 36 32 65 37 37 30 35 38 35 33 64 38 62 33 37 39 35 35 31 33 37 35 31 37 31 63 Data Ascii: 16ddtypeof __ctcg_ct_78709_exec === 'function' && __ctcg_ct_78709_exec({"tc":"37dfbd8ee84e001269e8c333ee4e88959225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d59198a6d2e17071a10acf9f29f671f83d7890529361ff62e7705853d8b379551375171c
2025-01-09 23:22:08 UTC	2358	IN	Data Raw: 32 61 36 30 61 37 66 33 64 65 62 35 30 31 32 37 35 35 64 31 66 35 33 66 64 62 36 33 39 62 30 36 66 63 65 39 36 38 33 30 32 39 65 63 66 34 38 64 62 62 33 37 66 65 31 62 34 63 39 66 37 34 36 38 37 38 37 62 31 37 33 34 30 34 36 64 32 65 64 37 34 35 31 63 31 39 62 31 31 37 35 35 32 64 38 63 61 64 39 36 36 64 62 35 65 65 62 65 66 32 30 62 35 62 33 32 64 63 64 31 38 63 32 33 39 65 62 30 65 61 31 31 36 61 61 64 63 36 38 39 66 36 37 36 64 39 32 66 35 65 63 32 63 36 62 36 33 31 65 34 39 35 62 30 39 33 36 34 61 63 63 62 62 66 33 30 38 61 33 34 35 63 39 31 66 31 64 30 39 35 34 61 35 63 39 34 66 61 31 65 63 36 64 30 63 38 30 63 63 61 35 65 30 63 33 31 38 61 37 65 63 39 39 62 36 64 61 61 31 63 35 39 39 30 33 34 37 36 61 38 33 30 66 38 65 63 62 33 31 32 36 38 62 33 65 Data Ascii: 2a60a7f3deb5012755d1f53fdb639b06fce9683029ecf48dbb37fe1b4c9f7468787b1734046d2ed7451c19b117552d8cad966db5eebef20b5b32dcd18c239eb0ea116aadc689f676d92f5ec2c6b631e495b09364accbbf308a345c91f1d0954a5c94fa1ec6d0c80cca5e0c318a7ec99b6daa1c59903476a830f8ecb31268b3e
2025-01-09 23:22:08 UTC	559	IN	Data Raw: 65 39 32 31 63 34 36 62 63 66 34 30 65 32 35 63 37 65 61 38 32 39 30 65 65 39 35 63 34 30 30 30 33 35 64 62 33 38 36 65 65 36 38 33 65 39 39 33 33 32 62 64 30 36 62 34 34 32 63 33 31 36 66 30 34 39 36 66 37 30 62 66 63 37 32 66 30 32 34 33 31 65 32 34 66 39 37 39 39 39 63 31 34 30 61 62 35 31 32 35 38 66 63 36 65 32 37 39 31 32 36 33 33 32 61 35 64 65 36 63 37 66 64 36 64 35 34 33 31 66 32 62 34 33 36 66 30 37 31 35 61 37 39 30 32 63 37 30 31 65 35 36 66 32 61 62 30 62 32 30 39 33 61 65 66 36 32 39 38 65 65 33 35 64 36 30 30 31 33 65 65 39 66 33 65 34 38 36 39 32 36 35 65 38 38 65 38 62 35 33 65 63 30 35 39 35 35 30 36 63 36 35 39 66 65 39 39 32 62 33 66 65 33 64 63 36 64 35 62 37 33 38 63 36 36 30 30 64 64 33 61 38 63 62 37 39 31 66 31 66 66 30 36 38 36 Data Ascii: e921c46bcf40e25c7ea8290ee95c400035db386ee683e99332bd06b442c316f0496f70bfc72f02431e24f97999c140ab51258fc6e279126332a5de6c7fd6d5431f2b436f0715a7902c701e56f2ab0b2093aef6298ee35d60013ee9f3e4869265e88e8b53ec0595506c659fe992b3fe3dc6d5b738c6600dd3a8cb791f1ff0686
2025-01-09 23:22:08 UTC	2064	IN	Data Raw: 31 37 33 34 30 34 36 64 32 65 64 37 34 35 31 63 31 39 62 31 31 37 35 35 32 64 38 63 61 64 39 36 36 64 62 35 65 65 62 65 66 32 30 62 35 62 33 32 64 63 64 31 38 63 32 33 39 65 62 30 65 61 31 31 36 61 61 64 63 36 38 39 66 36 37 36 64 39 32 66 35 65 63 32 63 36 62 36 33 31 65 34 39 35 62 30 39 33 36 34 61 63 63 62 62 66 33 30 38 61 33 34 35 63 39 31 66 31 64 30 39 35 34 61 35 63 39 34 66 61 31 65 63 36 64 30 63 38 30 63 63 61 35 65 30 63 33 31 38 61 37 65 63 39 39 62 36 64 61 61 31 63 35 39 39 30 33 34 37 36 61 38 33 30 66 38 65 63 62 33 31 32 36 38 62 33 65 31 64 35 63 39 30 33 35 32 35 33 39 36 34 61 30 30 66 64 39 37 65 34 66 62 61 61 33 63 39 33 35 66 65 31 32 64 66 35 38 66 33 65 33 32 34 39 62 63 30 34 35 39 31 32 64 37 37 36 39 32 38 35 34 30 34 35 34 Data Ascii: 1734046d2ed7451c19b117552d8cad966db5eebef20b5b32dcd18c239eb0ea116aadc689f676d92f5ec2c6b631e495b09364accbbf308a345c91f1d0954a5c94fa1ec6d0c80cca5e0c318a7ec99b6daa1c59903476a830f8ecb31268b3e1d5c9035253964a00fd97e4fbaa3c935fe12df58f3e3249bc045912d776928540454

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.10	49926	142.250.184.206	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:08 UTC	758	OUT	GET /afs/ads/i/iframe.html HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://api.myuhchvision.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Tue, 17 Sep 2024 06:00:00 GMT
2025-01-09 23:22:08 UTC	378	IN	HTTP/1.1 304 Not Modified Cross-Origin-Resource-Policy: cross-origin Date: Thu, 09 Jan 2025 23:22:08 GMT Expires: Thu, 09 Jan 2025 23:22:08 GMT Cache-Control: private, max-age=3600 Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.10	49930	216.58.206.65	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:09 UTC	713	OUT	GET /svg/right_chevron_icon.svg?c=%23000000 HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:09 UTC	621	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 163 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 09 Jan 2025 23:22:05 GMT Expires: Fri, 10 Jan 2025 22:22:05 GMT Cache-Control: public, max-age=82800 Age: 4 Last-Modified: Fri, 26 May 2023 17:37:10 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-09 23:22:09 UTC	163	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 30 30 30 30 30 30 27 20 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 37 2e 35 39 30 30 33 20 31 38 2e 35 39 4c 39 2e 30 30 30 30 33 20 32 30 4c 31 37 20 31 32 4c 39 2e 30 30 30 30 33 20 34 4c 37 2e 35 39 30 30 33 20 35 2e 34 31 4c 31 34 2e 31 37 20 31 32 22 2f 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: <svg fill='#000000' width="24" height="24" xmlns="http://www.w3.org/2000/svg"><path d="M7.59003 18.59L9.00003 20L17 12L9.00003 4L7.59003 5.41L14.17 12"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.10	49935	142.250.184.228	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:09 UTC	686	OUT	GET /images/afs/snowman.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:09 UTC	670	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 166 Date: Thu, 09 Jan 2025 23:22:09 GMT Expires: Thu, 09 Jan 2025 23:22:09 GMT Cache-Control: private, max-age=31536000 Last-Modified: Wed, 15 Nov 2023 17:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-09 23:22:09 UTC	166	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 04 03 00 00 00 a5 2c e4 b4 00 00 00 12 50 4c 54 45 00 00 00 97 9f 9f 9a a0 a5 9a a0 a6 9a a0 a6 97 9f a7 fa 03 72 95 00 00 00 06 74 52 4e 53 00 20 bf ef ff 20 e0 82 3c 7e 00 00 00 3d 49 44 41 54 78 01 63 18 7e 80 51 d9 49 00 ab 84 b0 8b 8b 21 56 09 15 17 17 27 ac 12 2e 2e 2e ce 58 25 4c 80 32 a4 19 15 ec e2 62 8a 55 82 55 c5 28 80 26 e1 30 1a 56 a3 61 35 ec 00 00 2d a2 14 b9 af 08 13 f6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR00,PLTErtRNS <~=IDATxc~QI!V'...X%L2bUU(&0Va5-IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.10	49937	54.75.69.192	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:09 UTC	3538	OUT	GET /tracker/tc_imp.gif?e=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 [TRUNCATED] Host: obseu.netgreencolumn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://api.myuhchvision.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
2025-01-09 23:22:09 UTC	230	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Date: Thu, 09 Jan 2025 23:22:09 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Pragma: no-cache Connection: close
2025-01-09 23:22:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.10	49938	3.248.162.96	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:09 UTC	6877	OUT	GET /ct?id=78709&url=http%3A%2F%2Fapi.myuhchvision.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTA5Ljc3OTR8NmE2MDdhMzFkNzdlNzA2ZmVjOTAwNjczMmM0NDE0NDJjODU1MzliZXx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%253D%253D%26query%3DUnited%2BHealthcare%2BMedicare%26afdToken%3DChMIpK7J8uPpigMVqoX9Bx1cfACQEmoBlLqpjxgmjCzROndp4cIsoUpMclKqzmCF8A4idqYAc6BRFXzqpQZr5mHskq-o8oROHsWon_E3VNBfAnPv0EnTUZ4xhapxEHMsWhLX36L28YhUgQYpSE5TWYluVMNln-ErnASvWEH_lO70IAE%26pcsa%3Dfalse%26nb%3D0%26nm%3D7%26nx%3D264%26ny%3D69%26is%3D530x496%26clkt%3D3%26suid%3D32397724909&sf=0&tpi=&ch=adpage&uvid=11052&tsf=0&tsfmi=&tsfu=&cb=1736464926642&hl=2&op=0&ag=300509663&rand=54226698551811820785069686057829982621069821800111001112907065107209766710201798711117&fs=1280x907&fst=1280x907&np=win32&nv=google%20inc.&ref=https%3A%2F%2Fsyndicat [TRUNCATED] Host: obseu.netgreencolumn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
2025-01-09 23:22:09 UTC	276	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/javascript Date: Thu, 09 Jan 2025 23:22:09 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Pragma: no-cache Timing-Allow-Origin: undefined Connection: close Transfer-Encoding: chunked
2025-01-09 23:22:09 UTC	903	IN	Data Raw: 31 36 64 64 0d 0a 74 79 70 65 6f 66 20 5f 5f 63 74 63 67 5f 63 74 5f 37 38 37 30 39 5f 65 78 65 63 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 20 26 26 20 5f 5f 63 74 63 67 5f 63 74 5f 37 38 37 30 39 5f 65 78 65 63 28 7b 22 74 63 22 3a 22 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 39 65 38 63 33 33 33 65 65 34 65 38 38 39 34 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 35 30 65 66 38 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 39 31 39 38 61 36 64 32 65 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 31 66 38 33 64 37 38 39 30 35 32 39 33 36 31 66 66 36 32 65 37 37 30 35 38 35 33 64 38 62 33 37 39 35 35 31 33 37 35 31 37 31 63 Data Ascii: 16ddtypeof __ctcg_ct_78709_exec === 'function' && __ctcg_ct_78709_exec({"tc":"37dfbd8ee84e001269e8c333ee4e88949225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d59198a6d2e17071a10acf9f29f671f83d7890529361ff62e7705853d8b379551375171c
2025-01-09 23:22:09 UTC	2358	IN	Data Raw: 64 31 66 35 33 66 64 62 36 33 39 62 30 36 66 63 65 39 36 38 33 30 32 39 65 63 66 34 38 64 62 62 33 37 66 65 31 62 34 63 39 66 37 34 36 38 37 38 37 62 31 37 33 34 30 34 36 64 32 65 64 37 34 35 31 63 31 39 62 31 31 37 35 35 32 64 38 63 61 64 39 36 36 64 62 35 65 65 62 65 66 32 30 62 35 62 33 32 64 63 64 31 38 63 32 33 39 65 62 30 65 61 31 31 36 61 61 64 63 36 38 39 66 36 37 36 64 39 32 66 35 65 63 32 63 36 62 36 33 31 65 34 39 35 62 30 39 33 36 34 61 63 63 62 62 66 33 30 38 61 33 34 35 63 39 31 66 31 64 30 39 35 34 61 35 63 39 34 66 61 31 65 63 36 64 30 63 38 30 63 63 61 35 65 30 63 33 31 38 61 37 65 63 39 39 62 36 64 61 61 31 63 35 39 39 30 33 34 37 36 61 38 33 30 66 38 65 63 62 33 31 32 36 38 62 33 65 31 64 35 63 39 30 33 35 32 35 33 39 36 34 61 30 30 66 Data Ascii: d1f53fdb639b06fce9683029ecf48dbb37fe1b4c9f7468787b1734046d2ed7451c19b117552d8cad966db5eebef20b5b32dcd18c239eb0ea116aadc689f676d92f5ec2c6b631e495b09364accbbf308a345c91f1d0954a5c94fa1ec6d0c80cca5e0c318a7ec99b6daa1c59903476a830f8ecb31268b3e1d5c9035253964a00f
2025-01-09 23:22:09 UTC	559	IN	Data Raw: 61 38 32 39 30 65 65 39 35 63 34 30 30 30 33 35 64 62 33 38 36 65 65 36 38 33 65 39 39 33 33 32 62 64 30 36 62 34 34 32 63 33 31 36 66 30 34 39 36 66 37 30 62 66 63 37 32 66 30 32 34 33 31 65 32 34 66 39 37 39 39 39 63 31 34 30 61 62 35 31 32 35 38 66 63 36 65 32 37 39 31 32 36 33 33 32 61 35 64 65 36 63 37 66 64 36 64 35 34 33 31 66 32 62 34 33 36 66 30 37 31 35 61 37 39 30 32 63 37 30 31 65 35 36 66 32 61 62 30 62 32 30 39 33 61 65 66 36 32 39 38 65 65 33 35 64 36 30 30 31 33 65 65 39 66 33 65 34 38 36 39 32 36 35 62 65 38 38 38 62 35 61 65 38 35 30 39 38 35 63 33 66 36 31 63 61 62 61 39 66 62 36 61 30 36 37 39 32 38 38 65 37 33 38 39 33 33 36 30 63 64 34 66 65 63 65 32 34 31 38 34 32 61 32 36 30 33 64 62 61 38 63 30 36 33 61 62 62 63 61 66 31 37 37 38 Data Ascii: a8290ee95c400035db386ee683e99332bd06b442c316f0496f70bfc72f02431e24f97999c140ab51258fc6e279126332a5de6c7fd6d5431f2b436f0715a7902c701e56f2ab0b2093aef6298ee35d60013ee9f3e4869265be888b5ae850985c3f61caba9fb6a0679288e73893360cd4fece241842a2603dba8c063abbcaf1778
2025-01-09 23:22:09 UTC	2046	IN	Data Raw: 62 31 31 37 35 35 32 64 38 63 61 64 39 36 36 64 62 35 65 65 62 65 66 32 30 62 35 62 33 32 64 63 64 31 38 63 32 33 39 65 62 30 65 61 31 31 36 61 61 64 63 36 38 39 66 36 37 36 64 39 32 66 35 65 63 32 63 36 62 36 33 31 65 34 39 35 62 30 39 33 36 34 61 63 63 62 62 66 33 30 38 61 33 34 35 63 39 31 66 31 64 30 39 35 34 61 35 63 39 34 66 61 31 65 63 36 64 30 63 38 30 63 63 61 35 65 30 63 33 31 38 61 37 65 63 39 39 62 36 64 61 61 31 63 35 39 39 30 33 34 37 36 61 38 33 30 66 38 65 63 62 33 31 32 36 38 62 33 65 31 64 35 63 39 30 33 35 32 35 33 39 36 34 61 30 30 66 64 39 37 65 34 66 62 61 61 33 63 39 33 35 66 65 31 32 64 66 35 38 66 33 65 33 32 34 39 62 63 30 34 35 39 31 32 64 37 37 36 39 32 38 35 34 30 34 35 34 64 62 39 36 39 30 61 39 33 34 32 64 32 31 65 38 31 30 Data Ascii: b117552d8cad966db5eebef20b5b32dcd18c239eb0ea116aadc689f676d92f5ec2c6b631e495b09364accbbf308a345c91f1d0954a5c94fa1ec6d0c80cca5e0c318a7ec99b6daa1c59903476a830f8ecb31268b3e1d5c9035253964a00fd97e4fbaa3c935fe12df58f3e3249bc045912d776928540454db9690a9342d21e810

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.10	49911	142.250.186.110	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:10 UTC	885	OUT	GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=53hcct3kfj7x&aqid=H1qAZ-LAN4awiM0Pv6GiyQU&psid=7840396037&pbt=bs&adbx=366.5&adby=145&adbh=976&adbw=530&adbah=358%2C284%2C334&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=712519386&csala=16%7C0%7C1275%7C11%7C366&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://api.myuhchvision.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:10 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-pu6Kwh336WVUo62nlmClvA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Thu, 09 Jan 2025 23:22:10 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.10	49945	172.217.16.196	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:10 UTC	445	OUT	GET /images/afs/snowman.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:10 UTC	670	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 166 Date: Thu, 09 Jan 2025 23:22:10 GMT Expires: Thu, 09 Jan 2025 23:22:10 GMT Cache-Control: private, max-age=31536000 Last-Modified: Wed, 15 Nov 2023 17:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-09 23:22:10 UTC	166	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 04 03 00 00 00 a5 2c e4 b4 00 00 00 12 50 4c 54 45 00 00 00 97 9f 9f 9a a0 a5 9a a0 a6 9a a0 a6 97 9f a7 fa 03 72 95 00 00 00 06 74 52 4e 53 00 20 bf ef ff 20 e0 82 3c 7e 00 00 00 3d 49 44 41 54 78 01 63 18 7e 80 51 d9 49 00 ab 84 b0 8b 8b 21 56 09 15 17 17 27 ac 12 2e 2e 2e ce 58 25 4c 80 32 a4 19 15 ec e2 62 8a 55 82 55 c5 28 80 26 e1 30 1a 56 a3 61 35 ec 00 00 2d a2 14 b9 af 08 13 f6 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR00,PLTErtRNS <~=IDATxc~QI!V'...X%L2bUU(&0Va5-IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.10	49949	3.248.162.96	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:10 UTC	3299	OUT	GET /tracker/tc_imp.gif?e=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 [TRUNCATED] Host: obseu.netgreencolumn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
2025-01-09 23:22:10 UTC	230	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store, must-revalidate Content-Length: 43 Content-Type: image/gif Date: Thu, 09 Jan 2025 23:22:10 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Pragma: no-cache Connection: close
2025-01-09 23:22:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 db df ef 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.10	49950	54.75.69.192	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:10 UTC	685	OUT	POST /mon HTTP/1.1 Host: obseu.netgreencolumn.com Connection: keep-alive Content-Length: 3991 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: http://api.myuhchvision.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://api.myuhchvision.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
2025-01-09 23:22:10 UTC	3991	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 39 65 38 63 33 33 33 65 65 34 65 38 38 39 35 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 39 31 39 38 61 36 64 32 65 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 31 66 38 33 64 37 38 39 30 35 32 39 33 36 31 66 66 36 32 65 37 37 30 35 38 35 33 64 38 62 33 37 39 35 35 31 33 37 35 31 37 31 63 31 35 30 35 34 30 61 33 64 30 33 30 39 39 30 65 62 33 64 31 63 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 62 32 35 66 34 35 34 37 31 61 64 30 66 32 65 36 34 31 30 64 32 35 61 66 65 35 61 65 63 64 32 39 34 38 61 37 66 65 30 37 Data Ascii: e=37dfbd8ee84e001269e8c333ee4e88959225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d59198a6d2e17071a10acf9f29f671f83d7890529361ff62e7705853d8b379551375171c150540a3d030990eb3d1c77be26bb25cb43e29b25f45471ad0f2e6410d25afe5aecd2948a7fe07
2025-01-09 23:22:10 UTC	286	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: http://api.myuhchvision.com Content-Length: 0 Content-Type: application/json Date: Thu, 09 Jan 2025 23:22:10 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.10	49951	142.250.186.110	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:10 UTC	885	OUT	GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=82f7a52yc2eh&aqid=H1qAZ-LAN4awiM0Pv6GiyQU&psid=7840396037&pbt=bv&adbx=366.5&adby=145&adbh=976&adbw=530&adbah=358%2C284%2C334&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=712519386&csala=16%7C0%7C1275%7C11%7C366&lle=0&ifv=1&hpt=1 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://api.myuhchvision.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:11 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-uKjlWlx79TAEAHcXfdasSg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Thu, 09 Jan 2025 23:22:11 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.10	49957	3.248.162.96	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:11 UTC	401	OUT	GET /mon HTTP/1.1 Host: obseu.netgreencolumn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
2025-01-09 23:22:12 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 09 Jan 2025 23:22:11 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.10	49963	54.75.69.192	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:13 UTC	685	OUT	POST /mon HTTP/1.1 Host: obseu.netgreencolumn.com Connection: keep-alive Content-Length: 3072 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: http://api.myuhchvision.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://api.myuhchvision.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
2025-01-09 23:22:13 UTC	3072	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 39 65 38 63 33 33 33 65 65 34 65 38 38 39 35 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 39 31 39 38 61 36 64 32 65 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 31 66 38 33 64 37 38 39 30 35 32 39 33 36 31 66 66 36 32 65 37 37 30 35 38 35 33 64 38 62 33 37 39 35 35 31 33 37 35 31 37 31 63 31 35 30 35 34 30 61 33 64 30 33 30 39 39 30 65 62 33 64 31 63 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 62 32 35 66 34 35 34 37 31 61 64 30 66 32 65 36 34 31 30 64 32 35 61 66 65 35 61 65 63 64 32 39 34 38 61 37 66 65 30 37 Data Ascii: e=37dfbd8ee84e001269e8c333ee4e88959225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d59198a6d2e17071a10acf9f29f671f83d7890529361ff62e7705853d8b379551375171c150540a3d030990eb3d1c77be26bb25cb43e29b25f45471ad0f2e6410d25afe5aecd2948a7fe07
2025-01-09 23:22:13 UTC	286	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: http://api.myuhchvision.com Content-Length: 0 Content-Type: application/json Date: Thu, 09 Jan 2025 23:22:13 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.10	49974	3.248.162.96	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:14 UTC	401	OUT	GET /mon HTTP/1.1 Host: obseu.netgreencolumn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
2025-01-09 23:22:14 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 09 Jan 2025 23:22:14 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.10	49980	54.75.69.192	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:14 UTC	685	OUT	POST /mon HTTP/1.1 Host: obseu.netgreencolumn.com Connection: keep-alive Content-Length: 3072 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: http://api.myuhchvision.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://api.myuhchvision.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
2025-01-09 23:22:14 UTC	3072	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 39 65 38 63 33 33 33 65 65 34 65 38 38 39 35 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 39 31 39 38 61 36 64 32 65 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 31 66 38 33 64 37 38 39 30 35 32 39 33 36 31 66 66 36 32 65 37 37 30 35 38 35 33 64 38 62 33 37 39 35 35 31 33 37 35 31 37 31 63 31 35 30 35 34 30 61 33 64 30 33 30 39 39 30 65 62 33 64 31 63 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 62 32 35 66 34 35 34 37 31 61 64 30 66 32 65 36 34 31 30 64 32 35 61 66 65 35 61 65 63 64 32 39 34 38 61 37 66 65 30 37 Data Ascii: e=37dfbd8ee84e001269e8c333ee4e88959225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d59198a6d2e17071a10acf9f29f671f83d7890529361ff62e7705853d8b379551375171c150540a3d030990eb3d1c77be26bb25cb43e29b25f45471ad0f2e6410d25afe5aecd2948a7fe07
2025-01-09 23:22:15 UTC	286	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: http://api.myuhchvision.com Content-Length: 0 Content-Type: application/json Date: Thu, 09 Jan 2025 23:22:14 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.10	49986	3.248.162.96	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:15 UTC	401	OUT	GET /mon HTTP/1.1 Host: obseu.netgreencolumn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
2025-01-09 23:22:16 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 09 Jan 2025 23:22:15 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.10	50006	185.53.179.31	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:18 UTC	1184	OUT	POST /track.php?click=caf&domain=myuhchvision.com&uid=MTczNjQ2NDkyNi4yMzk1OmQ2MzliYTM3ZDFjNWQ4ZTdlMjkzYWMzYzA4MDc3YmM5M2ZmZjc1MTRjZmI1NWZkMDVmNDhiZjMwNTgyNWUxMjg6Njc4MDVhMWUzYTdhYw%3D%3D&ts=fENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMTEsYnVja2V0MDg4LGJ1Y2tldDA4OXx8fHx8fDY3ODA1YTBkYjU4NDZ8fHwxNzM2NDY0OTI2LjI2MDh8OWNjZTgxZmEzMjM2NTY3MWMzZmUyMTAwNWZhOGEyMjMwNzhmOTI2Znx8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDk3ZDYzZGM2Mzg5ODcwNTE5NTFmNmNkZTA2M2U2YTk3MmE2MTEzNjJ8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfHx8fA%3D%3D&adtest=off&kw=United+Healthcare+Medicare&nc=1040211736464936914 HTTP/1.1 Host: trkpc.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://syndicatedsearch.goog Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:19 UTC	584	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 09 Jan 2025 23:22:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-View-Match: true X-Custom-Track: none Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Front_End_Https: on
2025-01-09 23:22:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.10	50015	54.75.69.192	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:19 UTC	685	OUT	POST /mon HTTP/1.1 Host: obseu.netgreencolumn.com Connection: keep-alive Content-Length: 3110 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: http://api.myuhchvision.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://api.myuhchvision.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
2025-01-09 23:22:19 UTC	3110	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 39 65 38 63 33 33 33 65 65 34 65 38 38 39 35 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 39 31 39 38 61 36 64 32 65 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 31 66 38 33 64 37 38 39 30 35 32 39 33 36 31 66 66 36 32 65 37 37 30 35 38 35 33 64 38 62 33 37 39 35 35 31 33 37 35 31 37 31 63 31 35 30 35 34 30 61 33 64 30 33 30 39 39 30 65 62 33 64 31 63 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 62 32 35 66 34 35 34 37 31 61 64 30 66 32 65 36 34 31 30 64 32 35 61 66 65 35 61 65 63 64 32 39 34 38 61 37 66 65 30 37 Data Ascii: e=37dfbd8ee84e001269e8c333ee4e88959225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d59198a6d2e17071a10acf9f29f671f83d7890529361ff62e7705853d8b379551375171c150540a3d030990eb3d1c77be26bb25cb43e29b25f45471ad0f2e6410d25afe5aecd2948a7fe07
2025-01-09 23:22:19 UTC	286	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: http://api.myuhchvision.com Content-Length: 0 Content-Type: application/json Date: Thu, 09 Jan 2025 23:22:19 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.10	50017	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:19 UTC	1085	OUT	GET /medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:20 UTC	1224	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:20 GMT Content-Type: text/html; charset=utf-8 Content-Length: 67179 Connection: close Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://.optimizely.com https://optimizely.s3.amazonaws.com https://cdn-assets-prod.s3.amazonaws.com https: ; style-src 'self' 'unsafe-inline' https: ; object-src 'none'; worker-src data:; connect-src 'self' https: wss://.hotjar.com https://.optimizely.com ; img-src 'self' https: http: data: https://.optimizely.com; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://.typekit.net; frame-src 'self' https://.googletagmanager.com https://.hotjar.com https://.snapchat.com https://.google.com https://.mediaalpha.com https://.optimizely.com https://.taboola.com https://.doubleclick.net; frame-ancestors 'self' https://.optimizely.com Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Frame-Options: sameorigin X-Download-Options: noopen X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate ETag: "rn1p8qaocv1fto" Vary: Accept-Encoding
2025-01-09 23:22:20 UTC	15160	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 61 74 61 2d 61 70 70 2d 6e 61 6d 65 3d 22 63 6d 2d 6d 65 64 69 63 61 72 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6e 65 78 74 2d 68 65 61 64 2d 63 6f 75 6e 74 22 20 63 6f 6e 74 65 6e 74 3d 22 32 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 64 61 74 61 2d 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 2e 74 79 70 65 6b 69 74 2e 6e 65 74 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 Data Ascii: <!DOCTYPE html><html lang="en" data-app-name="cm-medicare"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><meta name="next-head-count" content="2"/><link rel="preconnect" data-href="https://use.typekit.net"/><link rel="pr
2025-01-09 23:22:20 UTC	1486	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 4a 74 3a 28 29 3d 3e 6f 2c 59 4d 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 6e 3d 72 28 38 33 36 29 2c 69 3d 72 28 36 30 37 29 3b 63 6f 6e 73 74 20 6f 3d 22 6e 72 40 6f 72 69 67 69 6e 61 6c 3a 22 2e 63 6f 6e 63 61 74 28 69 2e 57 29 3b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 73 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 7c 7c 28 65 3d 6e 2e 65 65 29 2c 72 2e 69 6e 50 6c 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 2c 6f 29 7b 6e 7c 7c 28 6e 3d 22 22 29 3b 63 6f 6e 73 74 20 61 3d 22 2d 22 3d 3d 3d 6e 2e 63 68 61 72 41 74 28 30 29 3b 66 6f 72 28 6c 65 74 20 73 3d 30 3b 73 3c Data Ascii: "use strict";r.d(t,{Jt:()=>o,YM:()=>c});var n=r(836),i=r(607);const o="nr@original:".concat(i.W);var a=Object.prototype.hasOwnProperty,s=!1;function c(e,t){return e\|\|(e=n.ee),r.inPlace=function(e,t,n,i,o){n\|\|(n="");const a="-"===n.charAt(0);for(let s=0;s<
2025-01-09 23:22:20 UTC	16384	IN	Data Raw: 65 6e 74 4d 65 74 72 69 63 73 22 7d 2c 36 33 30 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 54 3a 28 29 3d 3e 6e 7d 29 3b 63 6f 6e 73 74 20 6e 3d 72 28 38 36 30 29 2e 4b 37 2e 70 61 67 65 56 69 65 77 45 76 65 6e 74 7d 2c 37 38 32 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 54 3a 28 29 3d 3e 6e 7d 29 3b 63 6f 6e 73 74 20 6e 3d 72 28 38 36 30 29 2e 4b 37 2e 70 61 67 65 56 69 65 77 54 69 6d 69 6e 67 7d 2c 33 34 34 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 47 34 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 6e 3d 72 28 36 31 34 29 3b 72 28 38 36 30 29 2e 4b 37 2e 73 65 73 73 69 6f 6e 52 65 70 6c 61 79 3b 63 6f 6e 73 74 Data Ascii: entMetrics"},630:(e,t,r)=>{"use strict";r.d(t,{T:()=>n});const n=r(860).K7.pageViewEvent},782:(e,t,r)=>{"use strict";r.d(t,{T:()=>n});const n=r(860).K7.pageViewTiming},344:(e,t,r)=>{"use strict";r.d(t,{G4:()=>i});var n=r(614);r(860).K7.sessionReplay;const
2025-01-09 23:22:20 UTC	16384	IN	Data Raw: 70 74 3e 3c 64 69 76 20 69 64 3d 22 5f 5f 6e 65 78 74 22 3e 3c 68 65 61 64 65 72 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 5f 63 6f 6e 74 65 6e 74 5f 5f 41 43 46 52 6a 22 20 72 6f 6c 65 3d 22 62 61 6e 6e 65 72 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 5f 63 6f 6e 74 61 69 6e 65 72 5f 5f 50 47 78 65 49 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 5f 6c 6f 67 6f 2d 77 72 61 70 70 65 72 5f 5f 7a 76 7a 71 6e 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 67 6f 68 65 61 6c 74 68 2e 63 6f 6d 2f 6c 65 61 64 2d 67 65 6e 65 72 61 74 69 6f 6e 2d 73 69 74 65 73 2f 6d 65 64 69 63 61 72 65 2f 67 6f 68 65 61 6c 74 68 5f 6c 6f 67 6f 5f 6d 6f 6e 6f 63 68 72 6f 6d 65 2e 31 37 31 36 35 33 38 32 39 35 2e 73 76 67 22 Data Ascii: pt><div id="__next"><header class="header_content__ACFRj" role="banner"><div class="header_container__PGxeI"><div class="header_logo-wrapper__zvzqn"><img src="https://cdn.gohealth.com/lead-generation-sites/medicare/gohealth_logo_monochrome.1716538295.svg"
2025-01-09 23:22:20 UTC	16384	IN	Data Raw: 6f 76 65 64 20 50 61 72 74 20 44 20 73 70 6f 6e 73 6f 72 2e 20 45 6e 72 6f 6c 6c 6d 65 6e 74 20 69 6e 20 61 20 70 6c 61 6e 20 6d 61 79 20 62 65 20 6c 69 6d 69 74 65 64 20 74 6f 20 63 65 72 74 61 69 6e 20 74 69 6d 65 73 20 6f 66 20 74 68 65 20 79 65 61 72 20 75 6e 6c 65 73 73 20 79 6f 75 20 71 75 61 6c 69 66 79 20 66 6f 72 20 61 20 53 70 65 63 69 61 6c 20 45 6e 72 6f 6c 6c 6d 65 6e 74 20 50 65 72 69 6f 64 20 6f 72 20 79 6f 75 20 61 72 65 20 69 6e 20 79 6f 75 72 20 4d 65 64 69 63 61 72 65 20 49 6e 69 74 69 61 6c 20 45 6e 72 6f 6c 6c 6d 65 6e 74 20 50 65 72 69 6f 64 2e 20 45 6e 72 6f 6c 6c 6d 65 6e 74 20 64 65 70 65 6e 64 73 20 6f 6e 20 70 6c 61 6e e2 80 99 73 20 63 6f 6e 74 72 61 63 74 20 72 65 6e 65 77 61 6c 20 77 69 74 68 20 4d 65 64 69 63 61 72 65 2e 22 Data Ascii: oved Part D sponsor. Enrollment in a plan may be limited to certain times of the year unless you qualify for a Special Enrollment Period or you are in your Medicare Initial Enrollment Period. Enrollment depends on plans contract renewal with Medicare."
2025-01-09 23:22:20 UTC	1381	IN	Data Raw: 74 72 79 41 67 61 69 6e 22 3a 22 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 22 2c 22 6e 65 65 64 48 65 6c 70 22 3a 22 4e 65 65 64 20 68 65 6c 70 22 2c 22 73 70 65 61 6b 54 6f 41 67 65 6e 74 22 3a 22 53 70 65 61 6b 20 74 6f 20 61 20 6c 69 63 65 6e 73 65 64 20 69 6e 73 75 72 61 6e 63 65 20 61 67 65 6e 74 20 6e 6f 77 22 2c 22 72 65 74 72 79 22 3a 22 52 65 74 72 79 22 2c 22 63 61 6c 6c 54 6f 53 70 65 61 6b 54 6f 41 67 65 6e 74 22 3a 22 43 61 6c 6c 20 74 6f 20 53 70 65 61 6b 20 74 6f 20 61 20 4c 69 63 65 6e 73 65 64 20 41 67 65 6e 74 22 7d 2c 22 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 73 22 3a 7b 22 69 6e 76 61 6c 69 64 2e 63 6f 75 6e 74 79 22 3a 22 50 6c 65 61 73 65 20 73 65 6c 65 63 74 20 79 6f 75 72 20 63 6f 75 6e 74 79 2e 22 2c 22 69 6e 76 61 6c 69 64 Data Ascii: tryAgain":"Please try again","needHelp":"Need help","speakToAgent":"Speak to a licensed insurance agent now","retry":"Retry","callToSpeakToAgent":"Call to Speak to a Licensed Agent"},"error-messages":{"invalid.county":"Please select your county.","invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.10	50028	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:20 UTC	952	OUT	GET /_next/static/css/8506ea82eb1ef2da.css HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:20 UTC	306	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:20 GMT Content-Type: text/css; charset=UTF-8 Content-Length: 1033 Connection: close Cache-Control: public, max-age=31536000, immutable Accept-Ranges: bytes Last-Modified: Mon, 16 Dec 2024 13:03:00 GMT ETag: W/"409-193cf9097a0" Vary: Accept-Encoding
2025-01-09 23:22:20 UTC	1033	IN	Data Raw: 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 38 30 70 78 29 7b 2e 68 69 64 65 2d 6f 6e 2d 6d 6f 62 69 6c 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 38 31 70 78 29 7b 2e 73 68 6f 77 2d 6f 6e 2d 6d 6f 62 69 6c 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 38 38 30 70 78 29 7b 2e 68 69 64 65 2d 6f 6e 2d 74 61 62 6c 65 74 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 Data Ascii: @media only screen and (max-width:680px){.hide-on-mobile{display:none!important}}@media only screen and (min-width:681px){.show-on-mobile{display:none!important}}@media only screen and (max-width:880px){.hide-on-tablet{display:none!important}}@media only

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.10	50027	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:20 UTC	952	OUT	GET /_next/static/css/7739801640ced06a.css HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:20 UTC	309	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:20 GMT Content-Type: text/css; charset=UTF-8 Content-Length: 65851 Connection: close Cache-Control: public, max-age=31536000, immutable Accept-Ranges: bytes Last-Modified: Mon, 16 Dec 2024 13:03:00 GMT ETag: W/"1013b-193cf9097a0" Vary: Accept-Encoding
2025-01-09 23:22:20 UTC	16075	IN	Data Raw: 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 38 30 70 78 29 7b 2e 62 75 74 74 6f 6e 5f 68 69 64 65 2d 6f 6e 2d 6d 6f 62 69 6c 65 5f 5f 36 33 4e 61 77 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 38 31 70 78 29 7b 2e 62 75 74 74 6f 6e 5f 73 68 6f 77 2d 6f 6e 2d 6d 6f 62 69 6c 65 5f 5f 71 48 76 46 62 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 38 38 30 70 78 29 7b 2e 62 75 74 74 6f 6e 5f 68 69 64 65 2d 6f 6e 2d 74 61 62 6c 65 74 5f 5f Data Ascii: @media only screen and (max-width:680px){.button_hide-on-mobile__63Naw{display:none!important}}@media only screen and (min-width:681px){.button_show-on-mobile__qHvFb{display:none!important}}@media only screen and (max-width:880px){.button_hide-on-tablet__
2025-01-09 23:22:20 UTC	16356	IN	Data Raw: 31 31 38 31 70 78 29 7b 2e 66 6c 6f 77 5f 73 68 6f 77 2d 6f 6e 2d 64 65 73 6b 74 6f 70 5f 5f 31 79 46 69 33 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 2e 66 6c 6f 77 5f 73 65 63 74 69 6f 6e 73 5f 5f 65 37 65 55 57 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 31 31 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 76 68 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 31 37 30 70 78 29 7b 2e 66 6c 6f 77 5f 73 65 63 74 69 6f 6e 73 5f 5f 65 37 65 55 57 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 31 31 70 78 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 38 30 70 78 29 7b 2e 66 6c 6f 77 5f 73 65 63 74 69 6f 6e Data Ascii: 1181px){.flow_show-on-desktop__1yFi3{display:none!important}}.flow_sections__e7eUW{padding-top:111px;min-height:100vh}@media only screen and (max-width:1170px){.flow_sections__e7eUW{padding-top:111px}}@media only screen and (max-width:680px){.flow_section
2025-01-09 23:22:21 UTC	16384	IN	Data Raw: 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 31 32 30 70 78 20 31 35 70 78 20 31 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 38 30 70 78 29 7b 2e 6c 61 6e 64 69 6e 67 5f 66 6f 72 6d 5f 5f 47 30 44 61 56 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 38 35 70 78 7d 7d 2e 6c 61 6e 64 69 6e 67 5f 66 6f 72 6d 2d 2d 76 31 5f 5f 78 46 48 79 30 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 37 36 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 34 33 30 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 38 30 70 78 29 7b 2e 6c 61 6e 64 69 6e 67 5f 66 6f 72 6d 2d 2d 76 31 5f 5f 78 46 48 Data Ascii: n-left:auto;margin-right:auto;padding:120px 15px 15px}@media only screen and (max-width:680px){.landing_form__G0DaV{padding-top:85px}}.landing_form--v1__xFHy0{padding-top:76px;max-width:430px}@media only screen and (max-width:680px){.landing_form--v1__xFH
2025-01-09 23:22:21 UTC	16384	IN	Data Raw: 5f 63 43 36 70 53 20 6d 61 72 6b 7b 63 6f 6c 6f 72 3a 23 30 30 39 39 66 64 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 7d 2e 73 65 6e 64 52 65 66 65 72 72 61 6c 46 6f 72 6d 5f 6c 61 62 65 6c 5f 5f 63 43 36 70 53 20 73 75 70 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 73 65 6e 64 52 65 66 65 72 72 61 6c 46 6f 72 6d 5f 66 6f 72 6d 5f 5f 69 4f 6f 56 63 2c 2e 73 65 6e 64 52 65 66 65 72 72 61 6c 46 6f 72 6d 5f 74 79 70 2d 77 72 61 70 70 65 72 5f 5f 4b 67 64 32 68 7b 6d 69 6e 2d 77 69 64 74 68 3a 35 37 36 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 33 35 70 78 20 31 30 30 70 78 7d 40 6d 65 64 Data Ascii: _cC6pS mark{color:#0099fd;font-weight:700;background:none}.sendReferralForm_label__cC6pS sup{font-weight:400;font-size:13px;line-height:1}.sendReferralForm_form__iOoVc,.sendReferralForm_typ-wrapper__Kgd2h{min-width:576px;width:100%;padding:35px 100px}@med
2025-01-09 23:22:21 UTC	652	IN	Data Raw: 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 36 70 78 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 36 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 33 70 78 7d 2e 72 65 66 65 72 72 61 6c 5f 62 65 6e 65 66 69 74 5f 5f 67 34 7a 39 70 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 65 66 65 72 72 61 6c 5f 62 65 6e 65 66 69 74 5f 5f 67 34 7a 39 70 3a 62 65 66 6f 72 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 71 61 2e 67 6f 68 65 61 6c 74 68 2e 78 79 7a 2f 6c 65 61 64 2d 67 65 6e 65 72 61 74 69 6f 6e 2d 73 69 74 65 73 2f 63 6f 6d 6d 6f 6e 2f 63 68 65 63 6b 2d 69 63 6f 6e 2d 62 6c 75 65 2e 31 37 Data Ascii: ont-weight:400;line-height:16px;list-style:none;margin-right:26px;margin-top:13px}.referral_benefit__g4z9p:last-child{margin-right:0}.referral_benefit__g4z9p:before{background:url(https://cdn.qa.gohealth.xyz/lead-generation-sites/common/check-icon-blue.17

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.10	50029	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:20 UTC	952	OUT	GET /_next/static/css/b8e92ad69f85b8b9.css HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:20 UTC	308	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:20 GMT Content-Type: text/css; charset=UTF-8 Content-Length: 21642 Connection: close Cache-Control: public, max-age=31536000, immutable Accept-Ranges: bytes Last-Modified: Mon, 16 Dec 2024 13:03:00 GMT ETag: W/"548a-193cf9097a0" Vary: Accept-Encoding
2025-01-09 23:22:20 UTC	16076	IN	Data Raw: 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 38 30 70 78 29 7b 2e 70 72 6f 67 72 65 73 73 2d 62 61 72 5f 68 69 64 65 2d 6f 6e 2d 6d 6f 62 69 6c 65 5f 5f 61 6f 4d 34 42 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 38 31 70 78 29 7b 2e 70 72 6f 67 72 65 73 73 2d 62 61 72 5f 73 68 6f 77 2d 6f 6e 2d 6d 6f 62 69 6c 65 5f 5f 42 74 72 67 32 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 38 38 30 70 78 29 7b 2e 70 72 6f 67 72 65 73 73 2d 62 61 Data Ascii: @media only screen and (max-width:680px){.progress-bar_hide-on-mobile__aoM4B{display:none!important}}@media only screen and (min-width:681px){.progress-bar_show-on-mobile__Btrg2{display:none!important}}@media only screen and (max-width:880px){.progress-ba
2025-01-09 23:22:20 UTC	1486	IN	Data Raw: 73 69 7a 65 3a 33 36 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 39 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 30 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 39 32 30 70 78 29 7b 2e 74 72 75 73 74 70 69 6c 6f 74 52 65 76 69 65 77 73 5f 74 69 74 6c 65 5f 5f 71 5f 6c 71 77 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 38 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 7d 7d 2e 74 72 75 73 74 70 69 6c 6f 74 52 65 76 69 65 77 73 5f 77 72 61 70 70 65 72 5f 5f 74 48 6b 6b 4c 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 74 72 75 73 74 70 69 6c 6f 74 52 65 76 69 65 77 73 5f 72 65 76 69 65 77 73 5f 5f 73 6e 43 33 46 7b 64 69 73 Data Ascii: size:36px;font-weight:700;line-height:39px;padding-top:105px}@media only screen and (max-width:920px){.trustpilotReviews_title__q_lqw{font-size:28px;line-height:1.3}}.trustpilotReviews_wrapper__tHkkL{position:relative}.trustpilotReviews_reviews__snC3F{dis
2025-01-09 23:22:20 UTC	4080	IN	Data Raw: 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 31 38 30 70 78 29 7b 2e 6c 61 6e 64 69 6e 67 50 61 67 65 5a 69 70 5f 68 69 64 65 2d 6f 6e 2d 64 65 73 6b 74 6f 70 5f 5f 79 47 33 71 6b 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 31 38 31 70 78 29 7b 2e 6c 61 6e 64 69 6e 67 50 61 67 65 5a 69 70 5f 73 68 6f 77 2d 6f 6e 2d 64 65 73 6b 74 6f 70 5f 5f 6e 68 52 79 36 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 2e 6c 61 6e 64 69 6e 67 50 61 67 65 5a 69 70 5f 66 6f 72 6d 5f 5f Data Ascii: isplay:none!important}}@media only screen and (max-width:1180px){.landingPageZip_hide-on-desktop__yG3qk{display:none!important}}@media only screen and (min-width:1181px){.landingPageZip_show-on-desktop__nhRy6{display:none!important}}.landingPageZip_form__

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.10	50022	3.248.162.96	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:20 UTC	401	OUT	GET /mon HTTP/1.1 Host: obseu.netgreencolumn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
2025-01-09 23:22:20 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 09 Jan 2025 23:22:20 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.10	50036	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:21 UTC	948	OUT	GET /_next/static/chunks/webpack-fecf5287dadd8e47.js HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:21 UTC	321	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:21 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 6818 Connection: close Cache-Control: public, max-age=31536000, immutable Accept-Ranges: bytes Last-Modified: Mon, 16 Dec 2024 13:03:00 GMT ETag: W/"1aa2-193cf9097a0" Vary: Accept-Encoding
2025-01-09 23:22:21 UTC	6818	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 72 2c 5f 2c 63 2c 74 2c 61 2c 6e 2c 62 2c 66 2c 75 3d 7b 7d 2c 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 65 29 7b 76 61 72 20 72 3d 69 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 72 65 74 75 72 6e 20 72 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 5f 3d 69 5b 65 5d 3d 7b 69 64 3a 65 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 63 3d 21 30 3b 74 72 79 7b 75 5b 65 5d 2e 63 61 6c 6c 28 5f 2e 65 78 70 6f 72 74 73 2c 5f 2c 5f 2e 65 78 70 6f 72 74 73 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 2c 63 3d 21 31 7d 66 69 6e 61 6c 6c 79 7b 63 26 26 64 65 6c 65 74 65 20 Data Ascii: !function(){"use strict";var e,r,_,c,t,a,n,b,f,u={},i={};function __webpack_require__(e){var r=i[e];if(void 0!==r)return r.exports;var _=i[e]={id:e,loaded:!1,exports:{}},c=!0;try{u[e].call(_.exports,_,_.exports,__webpack_require__),c=!1}finally{c&&delete

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.10	50037	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:21 UTC	950	OUT	GET /_next/static/chunks/framework-209d228742ce58bd.js HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:21 UTC	324	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:21 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 141041 Connection: close Cache-Control: public, max-age=31536000, immutable Accept-Ranges: bytes Last-Modified: Mon, 16 Dec 2024 13:03:00 GMT ETag: W/"226f1-193cf9097a0" Vary: Accept-Encoding
2025-01-09 23:22:21 UTC	8597	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 37 37 34 5d 2c 7b 35 32 39 36 37 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 61 29 7b 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 52 65 61 63 74 0a 20 2a 20 72 65 61 63 74 2d 64 6f 6d 2e 70 72 6f 64 75 63 74 69 6f 6e 2e 6d 69 6e 2e 6a 73 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 61 6e 64 20 69 74 73 20 61 66 66 69 6c 69 61 74 65 73 2e 0a 20 2a 0a 20 2a 20 54 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9774],{52967:function(n,t,a){/** * @license React * react-dom.production.min.js * * Copyright (c) Facebook, Inc. and its affiliates. * * This source code is licensed under the MIT
2025-01-09 23:22:21 UTC	16384	IN	Data Raw: 68 28 74 29 7b 72 65 74 75 72 6e 20 6e 2e 62 6f 64 79 7d 7d 66 75 6e 63 74 69 6f 6e 20 59 61 28 6e 2c 74 29 7b 76 61 72 20 61 3d 74 2e 63 68 65 63 6b 65 64 3b 72 65 74 75 72 6e 20 65 62 28 7b 7d 2c 74 2c 7b 64 65 66 61 75 6c 74 43 68 65 63 6b 65 64 3a 76 6f 69 64 20 30 2c 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 76 6f 69 64 20 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 63 68 65 63 6b 65 64 3a 6e 75 6c 6c 21 3d 61 3f 61 3a 6e 2e 5f 77 72 61 70 70 65 72 53 74 61 74 65 2e 69 6e 69 74 69 61 6c 43 68 65 63 6b 65 64 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 61 28 6e 2c 74 29 7b 76 61 72 20 61 3d 6e 75 6c 6c 3d 3d 74 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3f 22 22 3a 74 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 2c 69 3d 6e 75 6c 6c 21 3d 74 2e 63 68 65 63 6b 65 64 3f Data Ascii: h(t){return n.body}}function Ya(n,t){var a=t.checked;return eb({},t,{defaultChecked:void 0,defaultValue:void 0,value:void 0,checked:null!=a?a:n._wrapperState.initialChecked})}function Za(n,t){var a=null==t.defaultValue?"":t.defaultValue,i=null!=t.checked?
2025-01-09 23:22:21 UTC	16384	IN	Data Raw: 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 6e 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 3f 6e 2e 66 72 6f 6d 45 6c 65 6d 65 6e 74 3d 3d 3d 6e 2e 73 72 63 45 6c 65 6d 65 6e 74 3f 6e 2e 74 6f 45 6c 65 6d 65 6e 74 3a 6e 2e 66 72 6f 6d 45 6c 65 6d 65 6e 74 3a 6e 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 7d 2c 6d 6f 76 65 6d 65 6e 74 58 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 22 6d 6f 76 65 6d 65 6e 74 58 22 69 6e 20 6e 3f 6e 2e 6d 6f 76 65 6d 65 6e 74 58 3a 28 6e 21 3d 3d 6e 45 26 26 28 6e 45 26 26 22 6d 6f 75 73 65 6d 6f 76 65 22 3d 3d 3d 6e 2e 74 79 70 65 3f 28 6e 77 3d 6e 2e 73 63 72 65 65 6e 58 2d 6e 45 2e 73 63 72 65 65 6e 58 2c 6e 53 3d 6e 2e 73 63 72 65 65 6e 59 2d 6e 45 2e 73 63 72 65 65 6e 59 29 3a 6e 53 3d 6e 77 3d 30 2c 6e Data Ascii: {return void 0===n.relatedTarget?n.fromElement===n.srcElement?n.toElement:n.fromElement:n.relatedTarget},movementX:function(n){return"movementX"in n?n.movementX:(n!==nE&&(nE&&"mousemove"===n.type?(nw=n.screenX-nE.screenX,nS=n.screenY-nE.screenY):nS=nw=0,n
2025-01-09 23:22:21 UTC	16384	IN	Data Raw: 26 26 22 24 21 22 21 3d 3d 61 7c 7c 69 2b 2b 7d 61 3d 75 7d 77 68 69 6c 65 28 61 29 3b 62 64 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 4c 66 28 6e 29 7b 66 6f 72 28 3b 6e 75 6c 6c 21 3d 6e 3b 6e 3d 6e 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 7b 76 61 72 20 74 3d 6e 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 31 3d 3d 3d 74 7c 7c 33 3d 3d 3d 74 29 62 72 65 61 6b 3b 69 66 28 38 3d 3d 3d 74 29 7b 69 66 28 22 24 22 3d 3d 3d 28 74 3d 6e 2e 64 61 74 61 29 7c 7c 22 24 21 22 3d 3d 3d 74 7c 7c 22 24 3f 22 3d 3d 3d 74 29 62 72 65 61 6b 3b 69 66 28 22 2f 24 22 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4d 66 28 6e 29 7b 6e 3d 6e 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 3b 66 6f 72 28 76 61 72 20 74 3d 30 Data Ascii: &&"$!"!==a\|\|i++}a=u}while(a);bd(t)}function Lf(n){for(;null!=n;n=n.nextSibling){var t=n.nodeType;if(1===t\|\|3===t)break;if(8===t){if("$"===(t=n.data)\|\|"$!"===t\|\|"$?"===t)break;if("/$"===t)return null}}return n}function Mf(n){n=n.previousSibling;for(var t=0
2025-01-09 23:22:21 UTC	7787	IN	Data Raw: 29 7b 78 68 28 72 6f 2e 63 75 72 72 65 6e 74 29 3b 76 61 72 20 74 3d 78 68 28 72 61 2e 63 75 72 72 65 6e 74 29 2c 61 3d 6c 62 28 74 2c 6e 2e 74 79 70 65 29 3b 74 21 3d 3d 61 26 26 28 47 28 72 75 2c 6e 29 2c 47 28 72 61 2c 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 42 68 28 6e 29 7b 72 75 2e 63 75 72 72 65 6e 74 3d 3d 3d 6e 26 26 28 45 28 72 61 29 2c 45 28 72 75 29 29 7d 76 61 72 20 72 73 3d 55 66 28 30 29 3b 66 75 6e 63 74 69 6f 6e 20 43 68 28 6e 29 7b 66 6f 72 28 76 61 72 20 74 3d 6e 3b 6e 75 6c 6c 21 3d 3d 74 3b 29 7b 69 66 28 31 33 3d 3d 3d 74 2e 74 61 67 29 7b 76 61 72 20 61 3d 74 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3b 69 66 28 6e 75 6c 6c 21 3d 3d 61 26 26 28 6e 75 6c 6c 3d 3d 3d 28 61 3d 61 2e 64 65 68 79 64 72 61 74 65 64 29 7c 7c 22 24 3f 22 3d Data Ascii: ){xh(ro.current);var t=xh(ra.current),a=lb(t,n.type);t!==a&&(G(ru,n),G(ra,a))}function Bh(n){ru.current===n&&(E(ra),E(ru))}var rs=Uf(0);function Ch(n){for(var t=n;null!==t;){if(13===t.tag){var a=t.memoizedState;if(null!==a&&(null===(a=a.dehydrated)\|\|"$?"=
2025-01-09 23:22:21 UTC	16384	IN	Data Raw: 20 54 68 28 29 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 6e 7d 2c 75 73 65 54 72 61 6e 73 69 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 68 69 28 21 31 29 2c 74 3d 6e 5b 30 5d 3b 72 65 74 75 72 6e 20 6e 3d 76 69 2e 62 69 6e 64 28 6e 75 6c 6c 2c 6e 5b 31 5d 29 2c 54 68 28 29 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 6e 2c 5b 74 2c 6e 5d 7d 2c 75 73 65 4d 75 74 61 62 6c 65 53 6f 75 72 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 75 73 65 53 79 6e 63 45 78 74 65 72 6e 61 6c 53 74 6f 72 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 61 29 7b 76 61 72 20 69 3d 72 67 2c 75 3d 54 68 28 29 3b 69 66 28 74 31 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 70 28 34 30 37 29 29 3b 61 3d 61 28 29 7d 65 Data Ascii: Th().memoizedState=n},useTransition:function(){var n=hi(!1),t=n[0];return n=vi.bind(null,n[1]),Th().memoizedState=n,[t,n]},useMutableSource:function(){},useSyncExternalStore:function(n,t,a){var i=rg,u=Th();if(t1){if(void 0===a)throw Error(p(407));a=a()}e
2025-01-09 23:22:21 UTC	1514	IN	Data Raw: 31 34 36 38 30 30 36 34 26 75 2e 66 6c 61 67 73 2c 75 2e 72 65 74 75 72 6e 3d 6e 2c 75 3d 75 2e 73 69 62 6c 69 6e 67 3b 65 6c 73 65 20 66 6f 72 28 75 3d 6e 2e 63 68 69 6c 64 3b 6e 75 6c 6c 21 3d 3d 75 3b 29 61 7c 3d 75 2e 6c 61 6e 65 73 7c 75 2e 63 68 69 6c 64 4c 61 6e 65 73 2c 69 7c 3d 75 2e 73 75 62 74 72 65 65 46 6c 61 67 73 2c 69 7c 3d 75 2e 66 6c 61 67 73 2c 75 2e 72 65 74 75 72 6e 3d 6e 2c 75 3d 75 2e 73 69 62 6c 69 6e 67 3b 72 65 74 75 72 6e 20 6e 2e 73 75 62 74 72 65 65 46 6c 61 67 73 7c 3d 69 2c 6e 2e 63 68 69 6c 64 4c 61 6e 65 73 3d 61 2c 74 7d 75 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 66 6f 72 28 76 61 72 20 61 3d 74 2e 63 68 69 6c 64 3b 6e 75 6c 6c 21 3d 3d 61 3b 29 7b 69 66 28 35 3d 3d 3d 61 2e 74 61 67 7c 7c 36 3d 3d 3d 61 2e 74 61 67 Data Ascii: 14680064&u.flags,u.return=n,u=u.sibling;else for(u=n.child;null!==u;)a\|=u.lanes\|u.childLanes,i\|=u.subtreeFlags,i\|=u.flags,u.return=n,u=u.sibling;return n.subtreeFlags\|=i,n.childLanes=a,t}u=function(n,t){for(var a=t.child;null!==a;){if(5===a.tag\|\|6===a.tag
2025-01-09 23:22:21 UTC	16384	IN	Data Raw: 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 22 3d 3d 3d 43 3f 28 78 3d 78 3f 78 2e 5f 5f 68 74 6d 6c 3a 76 6f 69 64 20 30 2c 77 3d 77 3f 77 2e 5f 5f 68 74 6d 6c 3a 76 6f 69 64 20 30 2c 6e 75 6c 6c 21 3d 78 26 26 77 21 3d 3d 78 26 26 28 73 3d 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 43 2c 78 29 29 3a 22 63 68 69 6c 64 72 65 6e 22 3d 3d 3d 43 3f 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 78 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 78 7c 7c 28 73 3d 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 43 2c 22 22 2b 78 29 3a 22 73 75 70 70 72 65 73 73 43 6f 6e 74 65 6e 74 45 64 69 74 61 62 6c 65 57 61 72 6e 69 6e 67 22 21 3d 3d 43 26 26 22 73 75 70 70 72 65 73 73 48 79 64 72 61 74 69 6f 6e 57 61 72 6e 69 6e 67 22 21 3d 3d 43 26 26 28 7a 2e 68 Data Ascii: erouslySetInnerHTML"===C?(x=x?x.__html:void 0,w=w?w.__html:void 0,null!=x&&w!==x&&(s=s\|\|[]).push(C,x)):"children"===C?"string"!=typeof x&&"number"!=typeof x\|\|(s=s\|\|[]).push(C,""+x):"suppressContentEditableWarning"!==C&&"suppressHydrationWarning"!==C&&(z.h
2025-01-09 23:22:21 UTC	16384	IN	Data Raw: 65 4e 6f 64 65 2c 7a 68 28 29 2c 45 28 74 55 29 2c 45 28 74 4f 29 2c 45 68 28 29 2c 69 2e 70 65 6e 64 69 6e 67 43 6f 6e 74 65 78 74 26 26 28 69 2e 63 6f 6e 74 65 78 74 3d 69 2e 70 65 6e 64 69 6e 67 43 6f 6e 74 65 78 74 2c 69 2e 70 65 6e 64 69 6e 67 43 6f 6e 74 65 78 74 3d 6e 75 6c 6c 29 2c 28 6e 75 6c 6c 3d 3d 3d 6e 7c 7c 6e 75 6c 6c 3d 3d 3d 6e 2e 63 68 69 6c 64 29 26 26 28 47 67 28 74 29 3f 74 2e 66 6c 61 67 73 7c 3d 34 3a 6e 75 6c 6c 3d 3d 3d 6e 7c 7c 6e 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 2e 69 73 44 65 68 79 64 72 61 74 65 64 26 26 30 3d 3d 28 32 35 36 26 74 2e 66 6c 61 67 73 29 7c 7c 28 74 2e 66 6c 61 67 73 7c 3d 31 30 32 34 2c 6e 75 6c 6c 21 3d 3d 74 32 26 26 28 46 6a 28 74 32 29 2c 74 32 3d 6e 75 6c 6c 29 29 29 2c 6f 28 6e 2c 74 29 2c 53 28 Data Ascii: eNode,zh(),E(tU),E(tO),Eh(),i.pendingContext&&(i.context=i.pendingContext,i.pendingContext=null),(null===n\|\|null===n.child)&&(Gg(t)?t.flags\|=4:null===n\|\|n.memoizedState.isDehydrated&&0==(256&t.flags)\|\|(t.flags\|=1024,null!==t2&&(Fj(t2),t2=null))),o(n,t),S(
2025-01-09 23:22:21 UTC	14870	IN	Data Raw: 61 75 6c 74 3a 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 6e 75 6c 6c 21 3d 3d 6e 29 73 77 69 74 63 68 28 6e 2e 24 24 74 79 70 65 6f 66 29 7b 63 61 73 65 20 65 61 3a 73 3d 31 30 3b 62 72 65 61 6b 20 65 3b 63 61 73 65 20 65 75 3a 73 3d 39 3b 62 72 65 61 6b 20 65 3b 63 61 73 65 20 65 6f 3a 73 3d 31 31 3b 62 72 65 61 6b 20 65 3b 63 61 73 65 20 65 66 3a 73 3d 31 34 3b 62 72 65 61 6b 20 65 3b 63 61 73 65 20 65 70 3a 73 3d 31 36 2c 69 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 65 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 70 28 31 33 30 2c 6e 75 6c 6c 3d 3d 6e 3f 6e 3a 74 79 70 65 6f 66 20 6e 2c 22 22 29 29 7d 72 65 74 75 72 6e 28 74 3d 42 67 28 73 2c 61 2c 74 2c 75 29 29 2e 65 6c 65 6d 65 6e 74 54 79 70 65 3d 6e 2c 74 2e 74 79 70 65 3d 69 2c 74 Data Ascii: ault:if("object"==typeof n&&null!==n)switch(n.$$typeof){case ea:s=10;break e;case eu:s=9;break e;case eo:s=11;break e;case ef:s=14;break e;case ep:s=16,i=null;break e}throw Error(p(130,null==n?n:typeof n,""))}return(t=Bg(s,a,t,u)).elementType=n,t.type=i,t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.10	50040	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:21 UTC	945	OUT	GET /_next/static/chunks/main-001bd2769c48104e.js HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:22 UTC	324	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:22 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 143063 Connection: close Cache-Control: public, max-age=31536000, immutable Accept-Ranges: bytes Last-Modified: Mon, 16 Dec 2024 13:03:00 GMT ETag: W/"22ed7-193cf9097a0" Vary: Accept-Encoding
2025-01-09 23:22:22 UTC	16060	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 39 5d 2c 7b 39 38 37 34 39 3a 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 67 65 74 44 65 70 6c 6f 79 6d 65 6e 74 49 64 51 75 65 72 79 4f 72 45 6d 70 74 79 53 74 72 69 6e 67 28 29 7b 72 65 74 75 72 6e 22 22 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 22 67 65 74 44 65 70 6c 6f 79 6d 65 6e 74 49 64 51 75 65 72 79 4f 72 45 6d 70 74 79 53 74 72 69 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{98749:function(r,n){"use strict";function getDeploymentIdQueryOrEmptyString(){return""}Object.defineProperty(n,"__esModule",{value:!0}),Object.defineProperty(n,"getDeploymentIdQueryOrEmptyStri
2025-01-09 23:22:22 UTC	16356	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 72 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6e 2d 68 72 65 66 22 29 7d 29 29 2c 6f 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 6e 6f 73 63 72 69 70 74 5b 64 61 74 61 2d 6e 2d 63 73 73 5d 22 29 2c 75 3d 6e 75 6c 6c 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6e 2d 63 73 73 22 29 3b 50 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 6f 3d 72 2e 68 72 65 66 2c 73 3d 72 2e 74 65 78 74 3b 69 66 28 21 6e 2e 68 61 73 28 6f 29 29 7b 76 61 72 20 6c 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 74 79 6c 65 22 29 3b 6c 2e 73 65 74 41 74 74 72 69 62 75 74 Data Ascii: unction(r){return r.getAttribute("data-n-href")})),o=document.querySelector("noscript[data-n-css]"),u=null==o?void 0:o.getAttribute("data-n-css");P.forEach(function(r){var o=r.href,s=r.text;if(!n.has(o)){var l=document.createElement("style");l.setAttribut
2025-01-09 23:22:22 UTC	16384	IN	Data Raw: 74 69 6f 6e 20 6d 61 79 62 65 45 78 65 63 75 74 65 53 63 72 69 70 74 28 72 29 7b 76 61 72 20 6e 2c 75 3d 6f 2e 67 65 74 28 72 2e 74 6f 53 74 72 69 6e 67 28 29 29 3b 72 65 74 75 72 6e 20 75 7c 7c 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 73 63 72 69 70 74 5b 73 72 63 5e 3d 22 27 2b 72 2b 27 22 5d 27 29 3f 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 3a 28 6f 2e 73 65 74 28 72 2e 74 6f 53 74 72 69 6e 67 28 29 2c 75 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 75 29 7b 28 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 29 2e 6f 6e 6c 6f 61 64 3d 6f 2c 6e 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 28 Data Ascii: tion maybeExecuteScript(r){var n,u=o.get(r.toString());return u\|\|(document.querySelector('script[src^="'+r+'"]')?Promise.resolve():(o.set(r.toString(),u=new Promise(function(o,u){(n=document.createElement("script")).onload=o,n.onerror=function(){return u(
2025-01-09 23:22:22 UTC	16384	IN	Data Raw: 29 7b 76 61 72 20 72 3d 74 68 69 73 2e 70 72 6f 70 73 2c 6e 3d 72 2e 73 74 61 74 75 73 43 6f 64 65 2c 6f 3d 72 2e 77 69 74 68 44 61 72 6b 4d 6f 64 65 2c 75 3d 74 68 69 73 2e 70 72 6f 70 73 2e 74 69 74 6c 65 7c 7c 79 5b 6e 5d 7c 7c 22 41 6e 20 75 6e 65 78 70 65 63 74 65 64 20 65 72 72 6f 72 20 68 61 73 20 6f 63 63 75 72 72 65 64 22 3b 72 65 74 75 72 6e 20 68 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 73 74 79 6c 65 3a 67 2e 65 72 72 6f 72 7d 2c 68 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 5f 2e 64 65 66 61 75 6c 74 2c 6e 75 6c 6c 2c 68 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 74 69 74 6c 65 22 2c 6e 75 6c 6c 2c 6e 3f 6e 2b 22 3a 20 22 2b 75 3a 22 41 70 Data Ascii: ){var r=this.props,n=r.statusCode,o=r.withDarkMode,u=this.props.title\|\|y[n]\|\|"An unexpected error has occurred";return h.default.createElement("div",{style:g.error},h.default.createElement(_.default,null,h.default.createElement("title",null,n?n+": "+u:"Ap
2025-01-09 23:22:22 UTC	352	IN	Data Raw: 2c 22 64 65 6e 6f 72 6d 61 6c 69 7a 65 50 61 67 65 50 61 74 68 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 6e 6f 72 6d 61 6c 69 7a 65 50 61 67 65 50 61 74 68 7d 7d 29 3b 76 61 72 20 75 3d 6f 28 38 37 36 39 32 29 2c 73 3d 6f 28 36 34 33 30 35 29 3b 66 75 6e 63 74 69 6f 6e 20 64 65 6e 6f 72 6d 61 6c 69 7a 65 50 61 67 65 50 61 74 68 28 72 29 7b 76 61 72 20 6e 3d 28 30 2c 73 2e 6e 6f 72 6d 61 6c 69 7a 65 50 61 74 68 53 65 70 29 28 72 29 3b 72 65 74 75 72 6e 20 6e 2e 73 74 61 72 74 73 57 69 74 68 28 22 2f 69 6e 64 65 78 2f 22 29 26 26 21 28 30 2c 75 2e 69 73 44 79 6e 61 6d 69 63 52 6f 75 74 65 29 28 6e 29 3f 6e 2e 73 6c 69 63 65 28 36 29 3a 22 2f 69 6e 64 65 78 22 21 3d 3d 6e 3f 6e Data Ascii: ,"denormalizePagePath",{enumerable:!0,get:function(){return denormalizePagePath}});var u=o(87692),s=o(64305);function denormalizePagePath(r){var n=(0,s.normalizePathSep)(r);return n.startsWith("/index/")&&!(0,u.isDynamicRoute)(n)?n.slice(6):"/index"!==n?n
2025-01-09 23:22:22 UTC	16384	IN	Data Raw: 3a 22 2f 22 2b 72 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 22 65 6e 73 75 72 65 4c 65 61 64 69 6e 67 53 6c 61 73 68 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 6e 73 75 72 65 4c 65 61 64 69 6e 67 53 6c 61 73 68 7d 7d 29 7d 2c 36 34 33 30 35 3a 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 6f 72 6d 61 6c 69 7a 65 50 61 74 68 53 65 70 28 72 29 7b 72 65 74 75 72 6e 20 72 2e 72 65 70 6c 61 63 65 28 2f 5c 5c 2f 67 2c 22 2f 22 29 7d 4f 62 6a 65 Data Ascii: :"/"+r}Object.defineProperty(n,"__esModule",{value:!0}),Object.defineProperty(n,"ensureLeadingSlash",{enumerable:!0,get:function(){return ensureLeadingSlash}})},64305:function(r,n){"use strict";function normalizePathSep(r){return r.replace(/\\/g,"/")}Obje
2025-01-09 23:22:22 UTC	1514	IN	Data Raw: 74 75 72 6e 20 5f 2e 73 65 6e 74 28 29 2c 68 61 6e 64 6c 65 48 61 72 64 4e 61 76 69 67 61 74 69 6f 6e 28 7b 75 72 6c 3a 6f 2c 72 6f 75 74 65 72 3a 79 7d 29 2c 5b 32 2c 21 31 5d 3b 63 61 73 65 20 31 31 3a 69 66 28 79 2e 75 72 6c 49 73 4e 65 77 28 65 69 29 7c 7c 65 75 7c 7c 28 72 3d 22 72 65 70 6c 61 63 65 53 74 61 74 65 22 29 2c 65 68 3d 6f 2c 65 63 3d 65 63 3f 28 30 2c 62 2e 72 65 6d 6f 76 65 54 72 61 69 6c 69 6e 67 53 6c 61 73 68 29 28 28 30 2c 48 2e 72 65 6d 6f 76 65 42 61 73 65 50 61 74 68 29 28 65 63 29 29 3a 65 63 2c 65 6d 3d 28 30 2c 62 2e 72 65 6d 6f 76 65 54 72 61 69 6c 69 6e 67 53 6c 61 73 68 29 28 65 63 29 2c 65 76 3d 21 21 28 28 65 5f 3d 6f 2e 73 74 61 72 74 73 57 69 74 68 28 22 2f 22 29 26 26 28 30 2c 41 2e 70 61 72 73 65 52 65 6c 61 74 69 76 Data Ascii: turn _.sent(),handleHardNavigation({url:o,router:y}),[2,!1];case 11:if(y.urlIsNew(ei)\|\|eu\|\|(r="replaceState"),eh=o,ec=ec?(0,b.removeTrailingSlash)((0,H.removeBasePath)(ec)):ec,em=(0,b.removeTrailingSlash)(ec),ev=!!((e_=o.startsWith("/")&&(0,A.parseRelativ
2025-01-09 23:22:22 UTC	16384	IN	Data Raw: 65 66 60 20 76 61 6c 75 65 20 28 22 2b 65 6d 2b 22 29 2e 20 22 29 2b 22 52 65 61 64 20 6d 6f 72 65 3a 20 68 74 74 70 73 3a 2f 2f 6e 65 78 74 6a 73 2e 6f 72 67 2f 64 6f 63 73 2f 6d 65 73 73 61 67 65 73 2f 22 2b 28 65 52 3f 22 68 72 65 66 2d 69 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 2d 66 61 69 6c 65 64 22 3a 22 69 6e 63 6f 6d 70 61 74 69 62 6c 65 2d 68 72 65 66 2d 61 73 22 29 29 7d 67 7c 7c 52 6f 75 74 65 72 2e 65 76 65 6e 74 73 2e 65 6d 69 74 28 22 72 6f 75 74 65 43 68 61 6e 67 65 53 74 61 72 74 22 2c 6f 2c 65 6f 29 2c 65 6a 3d 22 2f 34 30 34 22 3d 3d 3d 79 2e 70 61 74 68 6e 61 6d 65 7c 7c 22 2f 5f 65 72 72 6f 72 22 3d 3d 3d 79 2e 70 61 74 68 6e 61 6d 65 2c 5f 2e 6c 61 62 65 6c 3d 31 34 3b 63 61 73 65 20 31 34 3a 72 65 74 75 72 6e 20 5f 2e 74 72 79 73 2e 70 Data Ascii: ef` value ("+em+"). ")+"Read more: https://nextjs.org/docs/messages/"+(eR?"href-interpolation-failed":"incompatible-href-as"))}g\|\|Router.events.emit("routeChangeStart",o,eo),ej="/404"===y.pathname\|\|"/_error"===y.pathname,_.label=14;case 14:return _.trys.p
2025-01-09 23:22:22 UTC	10463	IN	Data Raw: 6e 5b 73 5d 29 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 22 63 6f 6d 70 61 72 65 52 6f 75 74 65 72 53 74 61 74 65 73 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 6f 6d 70 61 72 65 52 6f 75 74 65 72 53 74 61 74 65 73 7d 7d 29 7d 2c 39 39 31 36 32 3a 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c Data Ascii: n[s])return!1}return!0}Object.defineProperty(n,"__esModule",{value:!0}),Object.defineProperty(n,"compareRouterStates",{enumerable:!0,get:function(){return compareRouterStates}})},99162:function(r,n,o){"use strict";Object.defineProperty(n,"__esModule",{val
2025-01-09 23:22:22 UTC	16384	IN	Data Raw: 22 2e 2e 2e 22 29 3b 72 65 74 75 72 6e 20 6f 26 26 28 72 3d 72 2e 73 6c 69 63 65 28 33 29 29 2c 7b 6b 65 79 3a 72 2c 72 65 70 65 61 74 3a 6f 2c 6f 70 74 69 6f 6e 61 6c 3a 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 65 74 50 61 72 61 6d 65 74 72 69 7a 65 64 52 6f 75 74 65 28 72 29 7b 76 61 72 20 6e 3d 28 30 2c 64 2e 72 65 6d 6f 76 65 54 72 61 69 6c 69 6e 67 53 6c 61 73 68 29 28 72 29 2e 73 6c 69 63 65 28 31 29 2e 73 70 6c 69 74 28 22 2f 22 29 2c 6f 3d 7b 7d 2c 75 3d 31 3b 72 65 74 75 72 6e 7b 70 61 72 61 6d 65 74 65 72 69 7a 65 64 52 6f 75 74 65 3a 6e 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 6e 3d 6c 2e 49 4e 54 45 52 43 45 50 54 49 4f 4e 5f 52 4f 55 54 45 5f 4d 41 52 4b 45 52 53 2e 66 69 6e 64 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 Data Ascii: "...");return o&&(r=r.slice(3)),{key:r,repeat:o,optional:n}}function getParametrizedRoute(r){var n=(0,d.removeTrailingSlash)(r).slice(1).split("/"),o={},u=1;return{parameterizedRoute:n.map(function(r){var n=l.INTERCEPTION_ROUTE_MARKERS.find(function(n){re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.10	50038	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:21 UTC	951	OUT	GET /_next/static/chunks/pages/_app-b18dce690669cf4a.js HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:21 UTC	324	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:21 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 765596 Connection: close Cache-Control: public, max-age=31536000, immutable Accept-Ranges: bytes Last-Modified: Mon, 16 Dec 2024 13:03:00 GMT ETag: W/"bae9c-193cf9097a0" Vary: Accept-Encoding
2025-01-09 23:22:21 UTC	16060	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 38 38 38 5d 2c 7b 36 36 33 30 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 69 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 69 2e 69 73 55 6e 64 65 66 69 6e 65 64 3d 69 2e 69 73 44 65 66 69 6e 65 64 3d 76 6f 69 64 20 30 2c 69 2e 69 73 44 65 66 69 6e 65 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 74 7d 2c 69 2e 69 73 55 6e 64 65 66 69 6e 65 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 69 2e 69 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2888],{66306:function(t,i){"use strict";Object.defineProperty(i,"__esModule",{value:!0}),i.isUndefined=i.isDefined=void 0,i.isDefined=function(t){return null!=t},i.isUndefined=function(t){return!i.i
2025-01-09 23:22:21 UTC	16356	IN	Data Raw: 61 74 69 6f 6e 5f 63 6f 6e 73 75 6d 65 72 5f 6c 6f 61 64 73 2d 70 6c 61 6e 22 7d 2c 43 6f 6e 73 75 6d 65 72 4c 6f 61 64 73 50 6c 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 50 72 6f 70 65 72 74 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 6f 70 65 72 74 69 65 73 7d 2c 43 6f 6e 73 75 6d 65 72 4c 6f 61 64 73 50 6c 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 56 61 6c 69 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 43 6f 6e 73 75 6d 65 72 4c 6f 61 64 73 50 6c 61 6e 2e 52 45 51 55 49 52 45 44 5f 50 52 4f 50 45 52 54 49 45 53 2e 65 76 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 28 30 2c 64 2e 69 73 44 65 66 69 6e 65 64 29 28 74 2e 70 72 6f 70 65 Data Ascii: ation_consumer_loads-plan"},ConsumerLoadsPlan.prototype.getProperties=function(){return this.properties},ConsumerLoadsPlan.prototype.isValid=function(){var t=this;return ConsumerLoadsPlan.REQUIRED_PROPERTIES.every(function(i){return(0,d.isDefined)(t.prope
2025-01-09 23:22:21 UTC	16384	IN	Data Raw: 67 29 7d 2c 64 65 63 72 79 70 74 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 76 61 72 20 6c 3d 74 5b 69 2b 31 5d 3b 74 5b 69 2b 31 5d 3d 74 5b 69 2b 33 5d 2c 74 5b 69 2b 33 5d 3d 6c 2c 74 68 69 73 2e 5f 64 6f 43 72 79 70 74 42 6c 6f 63 6b 28 74 2c 69 2c 74 68 69 73 2e 5f 69 6e 76 4b 65 79 53 63 68 65 64 75 6c 65 2c 76 2c 43 2c 62 2c 5f 2c 70 29 3b 76 61 72 20 6c 3d 74 5b 69 2b 31 5d 3b 74 5b 69 2b 31 5d 3d 74 5b 69 2b 33 5d 2c 74 5b 69 2b 33 5d 3d 6c 7d 2c 5f 64 6f 43 72 79 70 74 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 6c 2c 75 2c 64 2c 66 2c 67 2c 70 29 7b 66 6f 72 28 76 61 72 20 6d 3d 74 68 69 73 2e 5f 6e 52 6f 75 6e 64 73 2c 42 3d 74 5b 69 5d 5e 6c 5b 30 5d 2c 77 3d 74 5b 69 2b 31 5d 5e 6c 5b 31 5d 2c 79 3d 74 5b 69 2b Data Ascii: g)},decryptBlock:function(t,i){var l=t[i+1];t[i+1]=t[i+3],t[i+3]=l,this._doCryptBlock(t,i,this._invKeySchedule,v,C,b,_,p);var l=t[i+1];t[i+1]=t[i+3],t[i+3]=l},_doCryptBlock:function(t,i,l,u,d,f,g,p){for(var m=this._nRounds,B=t[i]^l[0],w=t[i+1]^l[1],y=t[i+
2025-01-09 23:22:21 UTC	16384	IN	Data Raw: 74 72 69 6e 67 28 42 29 7d 2c 70 61 72 73 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 69 2c 6c 3d 42 2e 70 61 72 73 65 28 74 29 2c 75 3d 6c 2e 77 6f 72 64 73 3b 72 65 74 75 72 6e 20 31 33 39 38 38 39 33 36 38 34 3d 3d 75 5b 30 5d 26 26 31 37 30 31 30 37 36 38 33 31 3d 3d 75 5b 31 5d 26 26 28 69 3d 67 2e 63 72 65 61 74 65 28 75 2e 73 6c 69 63 65 28 32 2c 34 29 29 2c 75 2e 73 70 6c 69 63 65 28 30 2c 34 29 2c 6c 2e 73 69 67 42 79 74 65 73 2d 3d 31 36 29 2c 51 2e 63 72 65 61 74 65 28 7b 63 69 70 68 65 72 74 65 78 74 3a 6c 2c 73 61 6c 74 3a 69 7d 29 7d 7d 2c 45 3d 64 2e 53 65 72 69 61 6c 69 7a 61 62 6c 65 43 69 70 68 65 72 3d 66 2e 65 78 74 65 6e 64 28 7b 63 66 67 3a 66 2e 65 78 74 65 6e 64 28 7b 66 6f 72 6d 61 74 3a 55 7d 29 2c 65 6e 63 72 79 70 74 Data Ascii: tring(B)},parse:function(t){var i,l=B.parse(t),u=l.words;return 1398893684==u[0]&&1701076831==u[1]&&(i=g.create(u.slice(2,4)),u.splice(0,4),l.sigBytes-=16),Q.create({ciphertext:l,salt:i})}},E=d.SerializableCipher=f.extend({cfg:f.extend({format:U}),encrypt
2025-01-09 23:22:21 UTC	352	IN	Data Raw: 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 76 61 72 20 6c 3d 34 2a 69 2c 64 3d 6c 2d 74 2e 73 69 67 42 79 74 65 73 25 6c 3b 74 2e 63 6f 6e 63 61 74 28 75 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2e 72 61 6e 64 6f 6d 28 64 2d 31 29 29 2e 63 6f 6e 63 61 74 28 75 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2e 63 72 65 61 74 65 28 5b 64 3c 3c 32 34 5d 2c 31 29 29 7d 2c 75 6e 70 61 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 69 3d 32 35 35 26 74 2e 77 6f 72 64 73 5b 74 2e 73 69 67 42 79 74 65 73 2d 31 3e 3e 3e 32 5d 3b 74 2e 73 69 67 42 79 74 65 73 2d 3d 69 7d 7d 2c 75 2e 70 61 64 2e 49 73 6f 31 30 31 32 36 29 7d 2c 34 31 34 37 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 6c 29 7b 76 61 72 20 75 3b 74 2e 65 78 70 6f 72 74 73 3d 28 75 3d 6c 28 35 37 33 35 39 Data Ascii: nction(t,i){var l=4*i,d=l-t.sigBytes%l;t.concat(u.lib.WordArray.random(d-1)).concat(u.lib.WordArray.create([d<<24],1))},unpad:function(t){var i=255&t.words[t.sigBytes-1>>>2];t.sigBytes-=i}},u.pad.Iso10126)},41476:function(t,i,l){var u;t.exports=(u=l(57359
2025-01-09 23:22:21 UTC	16384	IN	Data Raw: 64 2e 5a 65 72 6f 50 61 64 64 69 6e 67 2e 70 61 64 28 74 2c 69 29 7d 2c 75 6e 70 61 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 75 2e 70 61 64 2e 5a 65 72 6f 50 61 64 64 69 6e 67 2e 75 6e 70 61 64 28 74 29 2c 74 2e 73 69 67 42 79 74 65 73 2d 2d 7d 7d 2c 75 2e 70 61 64 2e 49 73 6f 39 37 39 37 31 29 7d 2c 35 30 31 38 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 6c 29 7b 76 61 72 20 75 3b 74 2e 65 78 70 6f 72 74 73 3d 28 75 3d 6c 28 35 37 33 35 39 29 2c 6c 28 39 39 35 31 29 2c 75 2e 70 61 64 2e 4e 6f 50 61 64 64 69 6e 67 3d 7b 70 61 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 75 6e 70 61 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 2c 75 2e 70 61 64 2e 4e 6f 50 61 64 64 69 6e 67 29 7d 2c 32 37 39 32 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 6c 29 7b 76 61 Data Ascii: d.ZeroPadding.pad(t,i)},unpad:function(t){u.pad.ZeroPadding.unpad(t),t.sigBytes--}},u.pad.Iso97971)},50181:function(t,i,l){var u;t.exports=(u=l(57359),l(9951),u.pad.NoPadding={pad:function(){},unpad:function(){}},u.pad.NoPadding)},27921:function(t,i,l){va
2025-01-09 23:22:21 UTC	1514	IN	Data Raw: 5f 63 72 65 61 74 65 28 33 35 38 34 35 32 38 37 31 31 2c 32 34 36 36 39 34 38 39 30 31 29 2c 58 36 34 57 6f 72 64 5f 63 72 65 61 74 65 28 31 31 33 39 32 36 39 39 33 2c 33 37 35 38 33 32 36 33 38 33 29 2c 58 36 34 57 6f 72 64 5f 63 72 65 61 74 65 28 33 33 38 32 34 31 38 39 35 2c 31 36 38 37 31 37 39 33 36 29 2c 58 36 34 57 6f 72 64 5f 63 72 65 61 74 65 28 36 36 36 33 30 37 32 30 35 2c 31 31 38 38 31 37 39 39 36 34 29 2c 58 36 34 57 6f 72 64 5f 63 72 65 61 74 65 28 37 37 33 35 32 39 39 31 32 2c 31 35 34 36 30 34 35 37 33 34 29 2c 58 36 34 57 6f 72 64 5f 63 72 65 61 74 65 28 31 32 39 34 37 35 37 33 37 32 2c 31 35 32 32 38 30 35 34 38 35 29 2c 58 36 34 57 6f 72 64 5f 63 72 65 61 74 65 28 31 33 39 36 31 38 32 32 39 31 2c 32 36 34 33 38 33 33 38 32 33 29 2c 58 Data Ascii: _create(3584528711,2466948901),X64Word_create(113926993,3758326383),X64Word_create(338241895,168717936),X64Word_create(666307205,1188179964),X64Word_create(773529912,1546045734),X64Word_create(1294757372,1522805485),X64Word_create(1396182291,2643833823),X
2025-01-09 23:22:21 UTC	16384	IN	Data Raw: 39 32 34 32 31 2c 32 37 33 31 30 35 35 32 37 30 29 2c 58 36 34 57 6f 72 64 5f 63 72 65 61 74 65 28 32 38 39 33 38 30 33 35 36 2c 33 32 30 33 39 39 33 30 30 36 29 2c 58 36 34 57 6f 72 64 5f 63 72 65 61 74 65 28 34 36 30 33 39 33 32 36 39 2c 33 32 30 36 32 30 33 31 35 29 2c 58 36 34 57 6f 72 64 5f 63 72 65 61 74 65 28 36 38 35 34 37 31 37 33 33 2c 35 38 37 34 39 36 38 33 36 29 2c 58 36 34 57 6f 72 64 5f 63 72 65 61 74 65 28 38 35 32 31 34 32 39 37 31 2c 31 30 38 36 37 39 32 38 35 31 29 2c 58 36 34 57 6f 72 64 5f 63 72 65 61 74 65 28 31 30 31 37 30 33 36 32 39 38 2c 33 36 35 35 34 33 31 30 30 29 2c 58 36 34 57 6f 72 64 5f 63 72 65 61 74 65 28 31 31 32 36 30 30 30 35 38 30 2c 32 36 31 38 32 39 37 36 37 36 29 2c 58 36 34 57 6f 72 64 5f 63 72 65 61 74 65 28 31 Data Ascii: 92421,2731055270),X64Word_create(289380356,3203993006),X64Word_create(460393269,320620315),X64Word_create(685471733,587496836),X64Word_create(852142971,1086792851),X64Word_create(1017036298,365543100),X64Word_create(1126000580,2618297676),X64Word_create(1
2025-01-09 23:22:21 UTC	16384	IN	Data Raw: 79 70 65 6f 66 20 69 26 26 6e 75 6c 6c 21 3d 3d 69 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 6c 61 73 73 20 65 78 74 65 6e 64 73 20 76 61 6c 75 65 20 22 2b 53 74 72 69 6e 67 28 69 29 2b 22 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 6f 72 20 6e 75 6c 6c 22 29 3b 66 75 6e 63 74 69 6f 6e 20 5f 5f 28 29 7b 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 74 7d 65 78 74 65 6e 64 53 74 61 74 69 63 73 28 74 2c 69 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 75 6c 6c 3d 3d 3d 69 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 69 29 3a 28 5f 5f 2e 70 72 6f 74 6f 74 79 70 65 3d 69 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 5f 5f 29 7d 76 61 72 20 5f 5f 61 73 73 69 67 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 Data Ascii: ypeof i&&null!==i)throw TypeError("Class extends value "+String(i)+" is not a constructor or null");function __(){this.constructor=t}extendStatics(t,i),t.prototype=null===i?Object.create(i):(__.prototype=i.prototype,new __)}var __assign=function(){return(
2025-01-09 23:22:21 UTC	11977	IN	Data Raw: 77 41 44 41 41 4d 41 41 77 41 44 41 41 4d 41 41 77 41 44 41 41 2f 2f 38 45 41 41 51 41 42 41 41 45 41 41 51 41 42 41 41 45 41 41 51 41 42 41 41 4e 41 41 4d 41 41 51 41 42 41 41 49 41 42 41 41 45 41 41 51 41 42 41 41 45 41 41 51 41 42 41 41 45 41 41 51 41 42 41 41 45 41 41 51 41 42 41 41 45 41 41 51 41 42 41 41 45 41 41 51 41 43 67 41 54 41 42 63 41 48 67 41 62 41 42 6f 41 48 67 41 58 41 42 59 41 45 67 41 65 41 42 73 41 47 41 41 50 41 42 67 41 48 41 42 4c 41 45 73 41 53 77 42 4c 41 45 73 41 53 77 42 4c 41 45 73 41 53 77 42 4c 41 42 67 41 47 41 41 65 41 42 34 41 48 67 41 54 41 42 34 41 55 41 42 51 41 46 41 41 55 41 42 51 41 46 41 41 55 41 42 51 41 46 41 41 55 41 42 51 41 46 41 41 55 41 42 51 41 46 41 41 55 41 42 51 41 46 41 41 55 41 42 51 41 46 41 41 55 41 Data Ascii: wADAAMAAwADAAMAAwADAA//8EAAQABAAEAAQABAAEAAQABAANAAMAAQABAAIABAAEAAQABAAEAAQABAAEAAQABAAEAAQABAAEAAQABAAEAAQACgATABcAHgAbABoAHgAXABYAEgAeABsAGAAPABgAHABLAEsASwBLAEsASwBLAEsASwBLABgAGAAeAB4AHgATAB4AUABQAFAAUABQAFAAUABQAFAAUABQAFAAUABQAFAAUABQAFAAUABQAFAAUA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.10	50039	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:21 UTC	945	OUT	GET /_next/static/chunks/4619-31e9d68b459c55d8.js HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:21 UTC	323	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:21 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 81071 Connection: close Cache-Control: public, max-age=31536000, immutable Accept-Ranges: bytes Last-Modified: Mon, 16 Dec 2024 13:03:00 GMT ETag: W/"13caf-193cf9097a0" Vary: Accept-Encoding
2025-01-09 23:22:21 UTC	16061	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 36 31 39 5d 2c 7b 35 33 37 35 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 64 28 6e 2c 7b 62 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 41 6c 65 72 74 7d 7d 29 3b 76 61 72 20 6f 3d 74 28 35 32 33 32 32 29 2c 69 3d 74 28 32 37 38 34 29 2c 72 3d 74 28 31 32 35 32 34 29 2c 61 3d 74 2e 6e 28 72 29 2c 73 3d 74 28 36 30 32 39 39 29 2c 6c 3d 74 2e 6e 28 73 29 2c 41 6c 65 72 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 63 68 69 6c 64 72 65 6e 2c 74 3d 65 2e 69 64 2c 72 3d 65 2e 72 6f 6c 65 2c 73 3d 65 2e Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[4619],{53753:function(e,n,t){"use strict";t.d(n,{b:function(){return Alert}});var o=t(52322),i=t(2784),r=t(12524),a=t.n(r),s=t(60299),l=t.n(s),Alert=function(e){var n=e.children,t=e.id,r=e.role,s=e.
2025-01-09 23:22:21 UTC	10435	IN	Data Raw: 6f 6e 73 28 65 65 29 3a 5f 2e 73 65 63 74 69 6f 6e 73 29 7d 2c 5b 65 65 5d 29 2c 28 30 2c 67 2e 75 73 65 45 66 66 65 63 74 29 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 30 2c 75 2e 57 6e 4a 29 28 7b 74 6f 70 3a 30 2c 6c 65 66 74 3a 30 7d 29 2c 70 2e 63 75 72 72 65 6e 74 26 26 28 70 2e 63 75 72 72 65 6e 74 2e 73 63 72 6f 6c 6c 54 6f 70 3d 30 29 2c 5a 28 21 30 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 5a 28 21 31 29 7d 2c 36 30 30 29 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 65 66 6f 72 65 75 6e 6c 6f 61 64 22 2c 65 68 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 65 66 6f 72 65 75 6e 6c 6f 61 64 Data Ascii: ons(ee):_.sections)},[ee]),(0,g.useEffect)(function(){return(0,u.WnJ)({top:0,left:0}),p.current&&(p.current.scrollTop=0),Z(!0),setTimeout(function(){Z(!1)},600),window.addEventListener("beforeunload",eh),function(){window.removeEventListener("beforeunload
2025-01-09 23:22:21 UTC	16384	IN	Data Raw: 61 6c 6c 62 61 63 6b 29 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 76 2e 69 6e 64 65 78 4f 66 28 75 2e 41 79 57 2e 63 75 72 72 65 6e 74 53 65 63 74 69 6f 6e 4e 61 6d 65 29 2c 6e 3d 76 2e 69 6e 64 65 78 4f 66 28 70 29 3b 6d 2e 63 75 72 72 65 6e 74 3d 65 3c 6e 3b 76 61 72 20 74 3d 77 2e 69 6e 64 65 78 4f 66 28 70 29 3b 2d 31 21 3d 3d 74 26 26 6d 2e 63 75 72 72 65 6e 74 26 26 5f 28 74 29 7d 2c 5b 70 2c 77 2c 76 5d 29 3b 72 65 74 75 72 6e 28 30 2c 67 2e 75 73 65 45 66 66 65 63 74 29 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 28 30 2c 4d 2e 69 73 44 65 66 69 6e 65 64 29 28 6f 29 29 7b 76 61 72 20 65 3d 76 2e 69 6e 64 65 78 4f 66 28 75 2e 41 79 57 2e 63 75 72 72 65 6e 74 53 65 63 74 69 6f 6e 4e 61 6d 65 29 2c 6e 3d 77 2e 69 6e 64 65 78 4f 66 28 Data Ascii: allback)(function(){var e=v.indexOf(u.AyW.currentSectionName),n=v.indexOf(p);m.current=e<n;var t=w.indexOf(p);-1!==t&&m.current&&_(t)},[p,w,v]);return(0,g.useEffect)(function(){if(!(0,M.isDefined)(o)){var e=v.indexOf(u.AyW.currentSectionName),n=w.indexOf(
2025-01-09 23:22:21 UTC	16384	IN	Data Raw: 65 3a 22 6e 6f 5f 61 6e 73 77 65 72 22 2c 63 75 73 74 6f 6d 5f 71 75 65 73 74 69 6f 6e 5f 6d 65 64 69 63 61 69 64 5f 6c 61 62 65 6c 3a 6c 7d 29 29 2c 70 2e 6f 6e 53 6b 69 70 28 29 29 7d 3a 76 6f 69 64 20 30 2c 69 64 3a 22 6d 65 64 69 63 61 69 64 22 2c 22 61 72 69 61 2d 69 6e 76 61 6c 69 64 22 3a 5b 21 30 2c 21 31 5d 2e 69 6e 63 6c 75 64 65 73 28 41 2e 63 75 73 74 6f 6d 5f 71 75 65 73 74 69 6f 6e 5f 6d 65 64 69 63 61 69 64 5f 76 61 6c 75 65 29 3f 22 22 2e 63 6f 6e 63 61 74 28 21 31 3d 3d 3d 41 2e 63 75 73 74 6f 6d 5f 71 75 65 73 74 69 6f 6e 5f 6d 65 64 69 63 61 69 64 5f 76 61 6c 75 65 29 3a 76 6f 69 64 20 30 2c 63 68 69 6c 64 72 65 6e 3a 28 30 2c 72 2e 6a 73 78 29 28 5f 2e 65 2c 7b 6e 61 6d 65 3a 22 63 75 73 74 6f 6d 5f 71 75 65 73 74 69 6f 6e 5f 6d 65 64 Data Ascii: e:"no_answer",custom_question_medicaid_label:l})),p.onSkip())}:void 0,id:"medicaid","aria-invalid":[!0,!1].includes(A.custom_question_medicaid_value)?"".concat(!1===A.custom_question_medicaid_value):void 0,children:(0,r.jsx)(_.e,{name:"custom_question_med
2025-01-09 23:22:21 UTC	6272	IN	Data Raw: 22 2c 74 79 70 65 3a 22 73 75 62 6d 69 74 22 7d 7d 29 2c 28 30 2c 69 2e 6a 73 78 73 29 28 22 75 6c 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 79 28 29 2e 62 65 6e 65 66 69 74 73 2c 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 69 2e 6a 73 78 29 28 22 6c 69 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 79 28 29 2e 62 65 6e 65 66 69 74 2c 63 68 69 6c 64 72 65 6e 3a 22 4e 6f 20 43 6f 73 74 22 7d 29 2c 28 30 2c 69 2e 6a 73 78 29 28 22 6c 69 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 79 28 29 2e 62 65 6e 65 66 69 74 2c 63 68 69 6c 64 72 65 6e 3a 22 4e 6f 20 4f 62 6c 69 67 61 74 69 6f 6e 22 7d 29 2c 28 30 2c 69 2e 6a 73 78 29 28 22 6c 69 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 79 28 29 2e 62 65 6e 65 66 69 74 2c 63 68 69 6c 64 72 65 6e 3a 22 4e 6f 20 50 72 65 73 73 75 72 65 20 54 6f Data Ascii: ",type:"submit"}}),(0,i.jsxs)("ul",{className:y().benefits,children:[(0,i.jsx)("li",{className:y().benefit,children:"No Cost"}),(0,i.jsx)("li",{className:y().benefit,children:"No Obligation"}),(0,i.jsx)("li",{className:y().benefit,children:"No Pressure To
2025-01-09 23:22:21 UTC	15535	IN	Data Raw: 74 69 6f 6e 5f 5f 69 6e 6e 65 72 3a 22 66 6c 6f 77 5f 73 65 63 74 69 6f 6e 5f 5f 69 6e 6e 65 72 5f 5f 45 6b 6c 4d 44 22 2c 22 73 65 63 74 69 6f 6e 2d 2d 61 64 73 22 3a 22 66 6c 6f 77 5f 73 65 63 74 69 6f 6e 2d 2d 61 64 73 5f 5f 7a 5a 73 6a 6b 22 7d 7d 2c 37 30 38 35 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 7b 22 68 69 64 65 2d 6f 6e 2d 6d 6f 62 69 6c 65 22 3a 22 67 6f 6d 65 64 69 63 61 72 65 2d 66 6f 6f 74 65 72 5f 68 69 64 65 2d 6f 6e 2d 6d 6f 62 69 6c 65 5f 5f 79 57 51 61 6b 22 2c 22 73 68 6f 77 2d 6f 6e 2d 6d 6f 62 69 6c 65 22 3a 22 67 6f 6d 65 64 69 63 61 72 65 2d 66 6f 6f 74 65 72 5f 73 68 6f 77 2d 6f 6e 2d 6d 6f 62 69 6c 65 5f 5f 77 78 59 63 6b 22 2c 22 68 69 64 65 2d 6f 6e 2d 74 61 62 6c 65 74 22 3a 22 67 6f 6d 65 64 Data Ascii: tion__inner:"flow_section__inner__EklMD","section--ads":"flow_section--ads__zZsjk"}},70853:function(e){e.exports={"hide-on-mobile":"gomedicare-footer_hide-on-mobile__yWQak","show-on-mobile":"gomedicare-footer_show-on-mobile__wxYck","hide-on-tablet":"gomed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.10	50041	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:21 UTC	945	OUT	GET /_next/static/chunks/3365-49fcb6c89fee57c0.js HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:21 UTC	322	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:21 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 10664 Connection: close Cache-Control: public, max-age=31536000, immutable Accept-Ranges: bytes Last-Modified: Mon, 16 Dec 2024 13:03:00 GMT ETag: W/"29a8-193cf9097a0" Vary: Accept-Encoding
2025-01-09 23:22:21 UTC	10664	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 33 36 35 5d 2c 7b 35 32 30 34 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 2e 64 28 6e 2c 7b 6a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 6f 6e 73 65 6e 74 53 65 63 74 69 6f 6e 7d 2c 56 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5a 69 70 43 6f 64 65 53 65 63 74 69 6f 6e 7d 7d 29 3b 76 61 72 20 69 3d 6f 28 38 35 33 33 33 29 2c 61 3d 6f 28 36 36 39 32 29 2c 74 3d 6f 28 32 32 38 31 29 2c 72 3d 6f 28 32 36 39 36 39 29 2c 73 3d 6f 28 35 32 33 32 32 29 2c 6c 3d 6f 28 32 37 38 34 29 2c 63 3d 6f 28 38 32 38 37 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[3365],{52045:function(e,n,o){"use strict";o.d(n,{j:function(){return ConsentSection},V:function(){return ZipCodeSection}});var i=o(85333),a=o(6692),t=o(2281),r=o(26969),s=o(52322),l=o(2784),c=o(8287

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.10	50042	18.173.205.126	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:22 UTC	650	OUT	GET /lead-generation-sites/medicare/gohealth_logo_monochrome.1716538295.svg HTTP/1.1 Host: cdn.gohealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:22 UTC	501	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 5518 Connection: close Date: Thu, 09 Jan 2025 04:52:58 GMT Last-Modified: Wed, 18 Dec 2024 08:40:29 GMT ETag: "4037528aa2c0060922ee6c8a2674c929" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 a9a00cd74e5659e3b49c7fab5dc2863a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: b3chw0YORqh8rCcK7e5u41i1x5-720goVBkJ1HcXeTaOf-1IiqsyBA== Age: 66565
2025-01-09 23:22:22 UTC	5518	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 34 34 22 20 68 65 69 67 68 74 3d 22 32 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 34 20 32 39 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 69 64 3d 22 47 6f 48 65 61 6c 74 68 4c 6f 67 6f 22 3e 0a 3c 67 20 69 64 3d 22 47 72 6f 75 70 20 33 22 3e 0a 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 31 32 5f 32 37 37 31 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 6c 75 6d 69 6e 61 6e 63 65 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 32 22 20 77 69 64 74 68 3d 22 32 35 22 20 68 65 69 67 68 74 3d 22 32 37 22 3e 0a 3c 70 Data Ascii: <svg width="144" height="29" viewBox="0 0 144 29" fill="none" xmlns="http://www.w3.org/2000/svg"><g id="GoHealthLogo"><g id="Group 3"><mask id="mask0_12_2771" style="mask-type:luminance" maskUnits="userSpaceOnUse" x="0" y="2" width="25" height="27"><p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.10	50043	18.173.205.126	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:22 UTC	642	OUT	GET /lead-generation-sites/medicare/trustpilot-stars.1716278912.svg HTTP/1.1 Host: cdn.gohealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:22 UTC	497	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 9500 Connection: close Date: Thu, 09 Jan 2025 23:22:22 GMT Last-Modified: Wed, 18 Dec 2024 08:40:29 GMT ETag: "594191931da06ce81f1a08d9d8801936" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 7f26f4279546775ace8410d89a15a960.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: 9mcs-AoVaXO8ACmlWTFTgo88jdHNYxDKDw7lyX1HO6ZwaiyI4vC9Jw== Age: 1
2025-01-09 23:22:22 UTC	9500	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 39 30 70 78 22 20 68 65 69 67 68 74 3d 22 33 35 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 30 20 33 35 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 74 72 75 73 74 70 69 6c 6f 74 2d 73 74 61 72 73 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 46 69 6e 61 6c 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 20 73 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="190px" height="35px" viewBox="0 0 190 35" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>trustpilot-stars</title> <g id="Final" stroke="none" s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.10	50049	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:22 UTC	389	OUT	GET /_next/static/chunks/4619-31e9d68b459c55d8.js HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:22 UTC	323	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:22 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 81071 Connection: close Cache-Control: public, max-age=31536000, immutable Accept-Ranges: bytes Last-Modified: Mon, 16 Dec 2024 13:03:00 GMT ETag: W/"13caf-193cf9097a0" Vary: Accept-Encoding
2025-01-09 23:22:22 UTC	16061	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 36 31 39 5d 2c 7b 35 33 37 35 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 64 28 6e 2c 7b 62 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 41 6c 65 72 74 7d 7d 29 3b 76 61 72 20 6f 3d 74 28 35 32 33 32 32 29 2c 69 3d 74 28 32 37 38 34 29 2c 72 3d 74 28 31 32 35 32 34 29 2c 61 3d 74 2e 6e 28 72 29 2c 73 3d 74 28 36 30 32 39 39 29 2c 6c 3d 74 2e 6e 28 73 29 2c 41 6c 65 72 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 63 68 69 6c 64 72 65 6e 2c 74 3d 65 2e 69 64 2c 72 3d 65 2e 72 6f 6c 65 2c 73 3d 65 2e Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[4619],{53753:function(e,n,t){"use strict";t.d(n,{b:function(){return Alert}});var o=t(52322),i=t(2784),r=t(12524),a=t.n(r),s=t(60299),l=t.n(s),Alert=function(e){var n=e.children,t=e.id,r=e.role,s=e.
2025-01-09 23:22:22 UTC	10435	IN	Data Raw: 6f 6e 73 28 65 65 29 3a 5f 2e 73 65 63 74 69 6f 6e 73 29 7d 2c 5b 65 65 5d 29 2c 28 30 2c 67 2e 75 73 65 45 66 66 65 63 74 29 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 30 2c 75 2e 57 6e 4a 29 28 7b 74 6f 70 3a 30 2c 6c 65 66 74 3a 30 7d 29 2c 70 2e 63 75 72 72 65 6e 74 26 26 28 70 2e 63 75 72 72 65 6e 74 2e 73 63 72 6f 6c 6c 54 6f 70 3d 30 29 2c 5a 28 21 30 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 5a 28 21 31 29 7d 2c 36 30 30 29 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 65 66 6f 72 65 75 6e 6c 6f 61 64 22 2c 65 68 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 65 66 6f 72 65 75 6e 6c 6f 61 64 Data Ascii: ons(ee):_.sections)},[ee]),(0,g.useEffect)(function(){return(0,u.WnJ)({top:0,left:0}),p.current&&(p.current.scrollTop=0),Z(!0),setTimeout(function(){Z(!1)},600),window.addEventListener("beforeunload",eh),function(){window.removeEventListener("beforeunload
2025-01-09 23:22:22 UTC	16384	IN	Data Raw: 61 6c 6c 62 61 63 6b 29 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 76 2e 69 6e 64 65 78 4f 66 28 75 2e 41 79 57 2e 63 75 72 72 65 6e 74 53 65 63 74 69 6f 6e 4e 61 6d 65 29 2c 6e 3d 76 2e 69 6e 64 65 78 4f 66 28 70 29 3b 6d 2e 63 75 72 72 65 6e 74 3d 65 3c 6e 3b 76 61 72 20 74 3d 77 2e 69 6e 64 65 78 4f 66 28 70 29 3b 2d 31 21 3d 3d 74 26 26 6d 2e 63 75 72 72 65 6e 74 26 26 5f 28 74 29 7d 2c 5b 70 2c 77 2c 76 5d 29 3b 72 65 74 75 72 6e 28 30 2c 67 2e 75 73 65 45 66 66 65 63 74 29 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 28 30 2c 4d 2e 69 73 44 65 66 69 6e 65 64 29 28 6f 29 29 7b 76 61 72 20 65 3d 76 2e 69 6e 64 65 78 4f 66 28 75 2e 41 79 57 2e 63 75 72 72 65 6e 74 53 65 63 74 69 6f 6e 4e 61 6d 65 29 2c 6e 3d 77 2e 69 6e 64 65 78 4f 66 28 Data Ascii: allback)(function(){var e=v.indexOf(u.AyW.currentSectionName),n=v.indexOf(p);m.current=e<n;var t=w.indexOf(p);-1!==t&&m.current&&_(t)},[p,w,v]);return(0,g.useEffect)(function(){if(!(0,M.isDefined)(o)){var e=v.indexOf(u.AyW.currentSectionName),n=w.indexOf(
2025-01-09 23:22:22 UTC	16384	IN	Data Raw: 65 3a 22 6e 6f 5f 61 6e 73 77 65 72 22 2c 63 75 73 74 6f 6d 5f 71 75 65 73 74 69 6f 6e 5f 6d 65 64 69 63 61 69 64 5f 6c 61 62 65 6c 3a 6c 7d 29 29 2c 70 2e 6f 6e 53 6b 69 70 28 29 29 7d 3a 76 6f 69 64 20 30 2c 69 64 3a 22 6d 65 64 69 63 61 69 64 22 2c 22 61 72 69 61 2d 69 6e 76 61 6c 69 64 22 3a 5b 21 30 2c 21 31 5d 2e 69 6e 63 6c 75 64 65 73 28 41 2e 63 75 73 74 6f 6d 5f 71 75 65 73 74 69 6f 6e 5f 6d 65 64 69 63 61 69 64 5f 76 61 6c 75 65 29 3f 22 22 2e 63 6f 6e 63 61 74 28 21 31 3d 3d 3d 41 2e 63 75 73 74 6f 6d 5f 71 75 65 73 74 69 6f 6e 5f 6d 65 64 69 63 61 69 64 5f 76 61 6c 75 65 29 3a 76 6f 69 64 20 30 2c 63 68 69 6c 64 72 65 6e 3a 28 30 2c 72 2e 6a 73 78 29 28 5f 2e 65 2c 7b 6e 61 6d 65 3a 22 63 75 73 74 6f 6d 5f 71 75 65 73 74 69 6f 6e 5f 6d 65 64 Data Ascii: e:"no_answer",custom_question_medicaid_label:l})),p.onSkip())}:void 0,id:"medicaid","aria-invalid":[!0,!1].includes(A.custom_question_medicaid_value)?"".concat(!1===A.custom_question_medicaid_value):void 0,children:(0,r.jsx)(_.e,{name:"custom_question_med
2025-01-09 23:22:22 UTC	16384	IN	Data Raw: 22 2c 74 79 70 65 3a 22 73 75 62 6d 69 74 22 7d 7d 29 2c 28 30 2c 69 2e 6a 73 78 73 29 28 22 75 6c 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 79 28 29 2e 62 65 6e 65 66 69 74 73 2c 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 69 2e 6a 73 78 29 28 22 6c 69 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 79 28 29 2e 62 65 6e 65 66 69 74 2c 63 68 69 6c 64 72 65 6e 3a 22 4e 6f 20 43 6f 73 74 22 7d 29 2c 28 30 2c 69 2e 6a 73 78 29 28 22 6c 69 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 79 28 29 2e 62 65 6e 65 66 69 74 2c 63 68 69 6c 64 72 65 6e 3a 22 4e 6f 20 4f 62 6c 69 67 61 74 69 6f 6e 22 7d 29 2c 28 30 2c 69 2e 6a 73 78 29 28 22 6c 69 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 79 28 29 2e 62 65 6e 65 66 69 74 2c 63 68 69 6c 64 72 65 6e 3a 22 4e 6f 20 50 72 65 73 73 75 72 65 20 54 6f Data Ascii: ",type:"submit"}}),(0,i.jsxs)("ul",{className:y().benefits,children:[(0,i.jsx)("li",{className:y().benefit,children:"No Cost"}),(0,i.jsx)("li",{className:y().benefit,children:"No Obligation"}),(0,i.jsx)("li",{className:y().benefit,children:"No Pressure To
2025-01-09 23:22:22 UTC	5423	IN	Data Raw: 6e 64 52 65 66 65 72 72 61 6c 5f 68 69 64 65 2d 6f 6e 2d 74 61 62 6c 65 74 5f 5f 44 45 4e 79 34 22 2c 22 73 68 6f 77 2d 6f 6e 2d 74 61 62 6c 65 74 22 3a 22 73 65 6e 64 52 65 66 65 72 72 61 6c 5f 73 68 6f 77 2d 6f 6e 2d 74 61 62 6c 65 74 5f 5f 38 5a 52 52 59 22 2c 22 68 69 64 65 2d 6f 6e 2d 64 65 73 6b 74 6f 70 22 3a 22 73 65 6e 64 52 65 66 65 72 72 61 6c 5f 68 69 64 65 2d 6f 6e 2d 64 65 73 6b 74 6f 70 5f 5f 69 68 6e 6b 62 22 2c 22 73 68 6f 77 2d 6f 6e 2d 64 65 73 6b 74 6f 70 22 3a 22 73 65 6e 64 52 65 66 65 72 72 61 6c 5f 73 68 6f 77 2d 6f 6e 2d 64 65 73 6b 74 6f 70 5f 5f 64 4c 70 4a 74 22 2c 66 6f 72 6d 3a 22 73 65 6e 64 52 65 66 65 72 72 61 6c 5f 66 6f 72 6d 5f 5f 74 37 30 53 35 22 2c 22 66 6f 72 6d 2d 2d 76 31 22 3a 22 73 65 6e 64 52 65 66 65 72 72 61 Data Ascii: ndReferral_hide-on-tablet__DENy4","show-on-tablet":"sendReferral_show-on-tablet__8ZRRY","hide-on-desktop":"sendReferral_hide-on-desktop__ihnkb","show-on-desktop":"sendReferral_show-on-desktop__dLpJt",form:"sendReferral_form__t70S5","form--v1":"sendReferra

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.10	50051	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:22 UTC	945	OUT	GET /_next/static/chunks/1048-71f1a1614a540721.js HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:22 UTC	322	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:22 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 10156 Connection: close Cache-Control: public, max-age=31536000, immutable Accept-Ranges: bytes Last-Modified: Mon, 16 Dec 2024 13:03:00 GMT ETag: W/"27ac-193cf9097a0" Vary: Accept-Encoding
2025-01-09 23:22:22 UTC	10156	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 30 34 38 5d 2c 7b 37 32 37 36 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 73 2e 64 28 74 2c 7b 43 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 65 64 69 63 61 72 65 50 6c 61 6e 73 7d 7d 29 3b 76 61 72 20 69 3d 73 28 35 32 33 32 32 29 2c 6f 3d 73 28 37 35 38 34 31 29 2c 6e 3d 73 28 37 32 38 34 31 29 2c 72 3d 73 28 39 37 34 33 38 29 2c 6c 3d 73 28 34 37 36 39 29 2c 61 3d 73 2e 6e 28 6c 29 2c 4d 65 64 69 63 61 72 65 50 6c 61 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 28 30 2c 72 2e 24 47 29 28 22 63 6f 6d 6d Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[1048],{72763:function(e,t,s){"use strict";s.d(t,{C:function(){return MedicarePlans}});var i=s(52322),o=s(75841),n=s(72841),r=s(97438),l=s(4769),a=s.n(l),MedicarePlans=function(){var e=(0,r.$G)("comm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.10	50052	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:22 UTC	389	OUT	GET /_next/static/chunks/3365-49fcb6c89fee57c0.js HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:22 UTC	322	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:22 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 10664 Connection: close Cache-Control: public, max-age=31536000, immutable Accept-Ranges: bytes Last-Modified: Mon, 16 Dec 2024 13:03:00 GMT ETag: W/"29a8-193cf9097a0" Vary: Accept-Encoding
2025-01-09 23:22:22 UTC	10664	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 33 36 35 5d 2c 7b 35 32 30 34 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 2e 64 28 6e 2c 7b 6a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 43 6f 6e 73 65 6e 74 53 65 63 74 69 6f 6e 7d 2c 56 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5a 69 70 43 6f 64 65 53 65 63 74 69 6f 6e 7d 7d 29 3b 76 61 72 20 69 3d 6f 28 38 35 33 33 33 29 2c 61 3d 6f 28 36 36 39 32 29 2c 74 3d 6f 28 32 32 38 31 29 2c 72 3d 6f 28 32 36 39 36 39 29 2c 73 3d 6f 28 35 32 33 32 32 29 2c 6c 3d 6f 28 32 37 38 34 29 2c 63 3d 6f 28 38 32 38 37 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[3365],{52045:function(e,n,o){"use strict";o.d(n,{j:function(){return ConsentSection},V:function(){return ZipCodeSection}});var i=o(85333),a=o(6692),t=o(2281),r=o(26969),s=o(52322),l=o(2784),c=o(8287

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.10	50054	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:22 UTC	394	OUT	GET /_next/static/chunks/framework-209d228742ce58bd.js HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:23 UTC	324	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:23 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 141041 Connection: close Cache-Control: public, max-age=31536000, immutable Accept-Ranges: bytes Last-Modified: Mon, 16 Dec 2024 13:03:00 GMT ETag: W/"226f1-193cf9097a0" Vary: Accept-Encoding
2025-01-09 23:22:23 UTC	16060	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 37 37 34 5d 2c 7b 35 32 39 36 37 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 61 29 7b 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 52 65 61 63 74 0a 20 2a 20 72 65 61 63 74 2d 64 6f 6d 2e 70 72 6f 64 75 63 74 69 6f 6e 2e 6d 69 6e 2e 6a 73 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 61 6e 64 20 69 74 73 20 61 66 66 69 6c 69 61 74 65 73 2e 0a 20 2a 0a 20 2a 20 54 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9774],{52967:function(n,t,a){/** * @license React * react-dom.production.min.js * * Copyright (c) Facebook, Inc. and its affiliates. * * This source code is licensed under the MIT
2025-01-09 23:22:23 UTC	16356	IN	Data Raw: 2e 72 65 74 75 72 6e 29 29 7b 61 3d 69 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 69 66 28 75 2e 63 68 69 6c 64 3d 3d 3d 6f 2e 63 68 69 6c 64 29 7b 66 6f 72 28 6f 3d 75 2e 63 68 69 6c 64 3b 6f 3b 29 7b 69 66 28 6f 3d 3d 3d 61 29 72 65 74 75 72 6e 20 58 62 28 75 29 2c 6e 3b 69 66 28 6f 3d 3d 3d 69 29 72 65 74 75 72 6e 20 58 62 28 75 29 2c 74 3b 6f 3d 6f 2e 73 69 62 6c 69 6e 67 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 70 28 31 38 38 29 29 7d 69 66 28 61 2e 72 65 74 75 72 6e 21 3d 3d 69 2e 72 65 74 75 72 6e 29 61 3d 75 2c 69 3d 6f 3b 65 6c 73 65 7b 66 6f 72 28 76 61 72 20 73 3d 21 31 2c 77 3d 75 2e 63 68 69 6c 64 3b 77 3b 29 7b 69 66 28 77 3d 3d 3d 61 29 7b 73 3d 21 30 2c 61 3d 75 2c 69 3d 6f 3b 62 72 65 61 6b 7d 69 66 28 77 3d 3d 3d 69 29 7b 73 3d 21 30 Data Ascii: .return)){a=i;continue}break}if(u.child===o.child){for(o=u.child;o;){if(o===a)return Xb(u),n;if(o===i)return Xb(u),t;o=o.sibling}throw Error(p(188))}if(a.return!==i.return)a=u,i=o;else{for(var s=!1,w=u.child;w;){if(w===a){s=!0,a=u,i=o;break}if(w===i){s=!0
2025-01-09 23:22:23 UTC	3028	IN	Data Raw: 72 43 61 73 65 28 29 2b 74 68 2e 73 6c 69 63 65 28 31 29 29 29 7d 66 66 28 74 72 2c 22 6f 6e 41 6e 69 6d 61 74 69 6f 6e 45 6e 64 22 29 2c 66 66 28 74 6c 2c 22 6f 6e 41 6e 69 6d 61 74 69 6f 6e 49 74 65 72 61 74 69 6f 6e 22 29 2c 66 66 28 74 75 2c 22 6f 6e 41 6e 69 6d 61 74 69 6f 6e 53 74 61 72 74 22 29 2c 66 66 28 22 64 62 6c 63 6c 69 63 6b 22 2c 22 6f 6e 44 6f 75 62 6c 65 43 6c 69 63 6b 22 29 2c 66 66 28 22 66 6f 63 75 73 69 6e 22 2c 22 6f 6e 46 6f 63 75 73 22 29 2c 66 66 28 22 66 6f 63 75 73 6f 75 74 22 2c 22 6f 6e 42 6c 75 72 22 29 2c 66 66 28 74 6f 2c 22 6f 6e 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 29 2c 68 61 28 22 6f 6e 4d 6f 75 73 65 45 6e 74 65 72 22 2c 5b 22 6d 6f 75 73 65 6f 75 74 22 2c 22 6d 6f 75 73 65 6f 76 65 72 22 5d 29 2c 68 61 28 22 6f Data Ascii: rCase()+th.slice(1)))}ff(tr,"onAnimationEnd"),ff(tl,"onAnimationIteration"),ff(tu,"onAnimationStart"),ff("dblclick","onDoubleClick"),ff("focusin","onFocus"),ff("focusout","onBlur"),ff(to,"onTransitionEnd"),ha("onMouseEnter",["mouseout","mouseover"]),ha("o
2025-01-09 23:22:23 UTC	16384	IN	Data Raw: 65 26 26 78 2e 70 61 72 65 6e 74 4e 6f 64 65 3d 3d 3d 75 29 29 72 65 74 75 72 6e 3b 73 3d 73 2e 72 65 74 75 72 6e 7d 66 6f 72 28 3b 6e 75 6c 6c 21 3d 3d 77 3b 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 28 73 3d 57 63 28 77 29 29 29 72 65 74 75 72 6e 3b 69 66 28 35 3d 3d 3d 28 78 3d 73 2e 74 61 67 29 7c 7c 36 3d 3d 3d 78 29 7b 69 3d 6f 3d 73 3b 63 6f 6e 74 69 6e 75 65 20 65 7d 77 3d 77 2e 70 61 72 65 6e 74 4e 6f 64 65 7d 7d 69 3d 69 2e 72 65 74 75 72 6e 7d 4a 62 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 3d 6f 2c 75 3d 78 62 28 61 29 2c 73 3d 5b 5d 3b 65 3a 7b 76 61 72 20 77 3d 74 73 2e 67 65 74 28 6e 29 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 77 29 7b 76 61 72 20 78 3d 6e 43 2c 43 3d 6e 3b 73 77 69 74 63 68 28 6e 29 7b 63 61 73 65 22 6b 65 79 70 72 65 73 Data Ascii: e&&x.parentNode===u))return;s=s.return}for(;null!==w;){if(null===(s=Wc(w)))return;if(5===(x=s.tag)\|\|6===x){i=o=s;continue e}w=w.parentNode}}i=i.return}Jb(function(){var i=o,u=xb(a),s=[];e:{var w=ts.get(n);if(void 0!==w){var x=nC,C=n;switch(n){case"keypres
2025-01-09 23:22:23 UTC	13708	IN	Data Raw: 2c 75 29 7b 66 6f 72 28 76 61 72 20 6f 3d 6e 75 6c 6c 2c 73 3d 6e 75 6c 6c 2c 77 3d 61 2c 78 3d 61 3d 30 2c 43 3d 6e 75 6c 6c 3b 6e 75 6c 6c 21 3d 3d 77 26 26 78 3c 69 2e 6c 65 6e 67 74 68 3b 78 2b 2b 29 7b 77 2e 69 6e 64 65 78 3e 78 3f 28 43 3d 77 2c 77 3d 6e 75 6c 6c 29 3a 43 3d 77 2e 73 69 62 6c 69 6e 67 3b 76 61 72 20 5f 3d 72 28 74 2c 77 2c 69 5b 78 5d 2c 75 29 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 5f 29 7b 6e 75 6c 6c 3d 3d 3d 77 26 26 28 77 3d 43 29 3b 62 72 65 61 6b 7d 6e 26 26 77 26 26 6e 75 6c 6c 3d 3d 3d 5f 2e 61 6c 74 65 72 6e 61 74 65 26 26 62 28 74 2c 77 29 2c 61 3d 66 28 5f 2c 61 2c 78 29 2c 6e 75 6c 6c 3d 3d 3d 73 3f 6f 3d 5f 3a 73 2e 73 69 62 6c 69 6e 67 3d 5f 2c 73 3d 5f 2c 77 3d 43 7d 69 66 28 78 3d 3d 3d 69 2e 6c 65 6e 67 74 68 29 72 65 74 Data Ascii: ,u){for(var o=null,s=null,w=a,x=a=0,C=null;null!==w&&x<i.length;x++){w.index>x?(C=w,w=null):C=w.sibling;var _=r(t,w,i[x],u);if(null===_){null===w&&(w=C);break}n&&w&&null===_.alternate&&b(t,w),a=f(_,a,x),null===s?o=_:s.sibling=_,s=_,w=C}if(x===i.length)ret
2025-01-09 23:22:23 UTC	16384	IN	Data Raw: 20 54 68 28 29 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 6e 7d 2c 75 73 65 54 72 61 6e 73 69 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 68 69 28 21 31 29 2c 74 3d 6e 5b 30 5d 3b 72 65 74 75 72 6e 20 6e 3d 76 69 2e 62 69 6e 64 28 6e 75 6c 6c 2c 6e 5b 31 5d 29 2c 54 68 28 29 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 3d 6e 2c 5b 74 2c 6e 5d 7d 2c 75 73 65 4d 75 74 61 62 6c 65 53 6f 75 72 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 75 73 65 53 79 6e 63 45 78 74 65 72 6e 61 6c 53 74 6f 72 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 61 29 7b 76 61 72 20 69 3d 72 67 2c 75 3d 54 68 28 29 3b 69 66 28 74 31 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 70 28 34 30 37 29 29 3b 61 3d 61 28 29 7d 65 Data Ascii: Th().memoizedState=n},useTransition:function(){var n=hi(!1),t=n[0];return n=vi.bind(null,n[1]),Th().memoizedState=n,[t,n]},useMutableSource:function(){},useSyncExternalStore:function(n,t,a){var i=rg,u=Th();if(t1){if(void 0===a)throw Error(p(407));a=a()}e
2025-01-09 23:22:23 UTC	16384	IN	Data Raw: 31 34 36 38 30 30 36 34 26 75 2e 66 6c 61 67 73 2c 75 2e 72 65 74 75 72 6e 3d 6e 2c 75 3d 75 2e 73 69 62 6c 69 6e 67 3b 65 6c 73 65 20 66 6f 72 28 75 3d 6e 2e 63 68 69 6c 64 3b 6e 75 6c 6c 21 3d 3d 75 3b 29 61 7c 3d 75 2e 6c 61 6e 65 73 7c 75 2e 63 68 69 6c 64 4c 61 6e 65 73 2c 69 7c 3d 75 2e 73 75 62 74 72 65 65 46 6c 61 67 73 2c 69 7c 3d 75 2e 66 6c 61 67 73 2c 75 2e 72 65 74 75 72 6e 3d 6e 2c 75 3d 75 2e 73 69 62 6c 69 6e 67 3b 72 65 74 75 72 6e 20 6e 2e 73 75 62 74 72 65 65 46 6c 61 67 73 7c 3d 69 2c 6e 2e 63 68 69 6c 64 4c 61 6e 65 73 3d 61 2c 74 7d 75 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 66 6f 72 28 76 61 72 20 61 3d 74 2e 63 68 69 6c 64 3b 6e 75 6c 6c 21 3d 3d 61 3b 29 7b 69 66 28 35 3d 3d 3d 61 2e 74 61 67 7c 7c 36 3d 3d 3d 61 2e 74 61 67 Data Ascii: 14680064&u.flags,u.return=n,u=u.sibling;else for(u=n.child;null!==u;)a\|=u.lanes\|u.childLanes,i\|=u.subtreeFlags,i\|=u.flags,u.return=n,u=u.sibling;return n.subtreeFlags\|=i,n.childLanes=a,t}u=function(n,t){for(var a=t.child;null!==a;){if(5===a.tag\|\|6===a.tag
2025-01-09 23:22:23 UTC	3028	IN	Data Raw: 64 61 74 65 51 75 65 75 65 3d 55 7d 65 6c 73 65 20 4c 2e 61 64 64 28 78 29 3b 62 72 65 61 6b 20 65 7d 69 66 28 30 3d 3d 28 31 26 74 29 29 7b 53 69 28 6f 2c 43 2c 74 29 2c 74 6a 28 29 3b 62 72 65 61 6b 20 65 7d 78 3d 45 72 72 6f 72 28 70 28 34 32 36 29 29 7d 65 6c 73 65 20 69 66 28 74 31 26 26 31 26 77 2e 6d 6f 64 65 29 7b 76 61 72 20 56 3d 55 69 28 73 29 3b 69 66 28 6e 75 6c 6c 21 3d 3d 56 29 7b 30 3d 3d 28 36 35 35 33 36 26 56 2e 66 6c 61 67 73 29 26 26 28 56 2e 66 6c 61 67 73 7c 3d 32 35 36 29 2c 56 69 28 56 2c 73 2c 77 2c 6f 2c 74 29 2c 4a 67 28 4a 69 28 78 2c 77 29 29 3b 62 72 65 61 6b 20 65 7d 7d 6f 3d 78 3d 4a 69 28 78 2c 77 29 2c 34 21 3d 3d 72 71 26 26 28 72 71 3d 32 29 2c 6e 75 6c 6c 3d 3d 3d 72 30 3f 72 30 3d 5b 6f 5d 3a 72 30 2e 70 75 73 68 28 Data Ascii: dateQueue=U}else L.add(x);break e}if(0==(1&t)){Si(o,C,t),tj();break e}x=Error(p(426))}else if(t1&&1&w.mode){var V=Ui(s);if(null!==V){0==(65536&V.flags)&&(V.flags\|=256),Vi(V,s,w,o,t),Jg(Ji(x,w));break e}}o=x=Ji(x,w),4!==rq&&(rq=2),null===r0?r0=[o]:r0.push(
2025-01-09 23:22:23 UTC	16384	IN	Data Raw: 6b 3b 64 65 66 61 75 6c 74 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 43 2e 6f 6e 43 6c 69 63 6b 26 26 28 69 2e 6f 6e 63 6c 69 63 6b 3d 42 66 29 7d 69 3d 78 2c 74 2e 75 70 64 61 74 65 51 75 65 75 65 3d 69 2c 6e 75 6c 6c 21 3d 3d 69 26 26 28 74 2e 66 6c 61 67 73 7c 3d 34 29 7d 65 6c 73 65 7b 5f 3d 39 3d 3d 3d 78 2e 6e 6f 64 65 54 79 70 65 3f 78 3a 78 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3d 3d 3d 6e 26 26 28 6e 3d 6b 62 28 61 29 29 2c 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3d 3d 3d 6e 3f 22 73 63 72 69 70 74 22 3d 3d 3d 61 3f 28 28 6e 3d 5f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 Data Ascii: k;default:"function"==typeof C.onClick&&(i.onclick=Bf)}i=x,t.updateQueue=i,null!==i&&(t.flags\|=4)}else{_=9===x.nodeType?x:x.ownerDocument,"http://www.w3.org/1999/xhtml"===n&&(n=kb(a)),"http://www.w3.org/1999/xhtml"===n?"script"===a?((n=_.createElement("di
2025-01-09 23:22:23 UTC	13356	IN	Data Raw: 72 72 6f 72 28 70 28 31 37 30 29 29 3b 76 61 72 20 74 3d 6e 3b 64 6f 7b 73 77 69 74 63 68 28 74 2e 74 61 67 29 7b 63 61 73 65 20 33 3a 74 3d 74 2e 73 74 61 74 65 4e 6f 64 65 2e 63 6f 6e 74 65 78 74 3b 62 72 65 61 6b 20 65 3b 63 61 73 65 20 31 3a 69 66 28 5a 66 28 74 2e 74 79 70 65 29 29 7b 74 3d 74 2e 73 74 61 74 65 4e 6f 64 65 2e 5f 5f 72 65 61 63 74 49 6e 74 65 72 6e 61 6c 4d 65 6d 6f 69 7a 65 64 4d 65 72 67 65 64 43 68 69 6c 64 43 6f 6e 74 65 78 74 3b 62 72 65 61 6b 20 65 7d 7d 74 3d 74 2e 72 65 74 75 72 6e 7d 77 68 69 6c 65 28 6e 75 6c 6c 21 3d 3d 74 29 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 70 28 31 37 31 29 29 7d 69 66 28 31 3d 3d 3d 6e 2e 74 61 67 29 7b 76 61 72 20 61 3d 6e 2e 74 79 70 65 3b 69 66 28 5a 66 28 61 29 29 72 65 74 75 72 6e 20 62 67 28 Data Ascii: rror(p(170));var t=n;do{switch(t.tag){case 3:t=t.stateNode.context;break e;case 1:if(Zf(t.type)){t=t.stateNode.__reactInternalMemoizedMergedChildContext;break e}}t=t.return}while(null!==t);throw Error(p(171))}if(1===n.tag){var a=n.type;if(Zf(a))return bg(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.10	50050	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:22 UTC	392	OUT	GET /_next/static/chunks/webpack-fecf5287dadd8e47.js HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:23 UTC	321	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:23 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 6818 Connection: close Cache-Control: public, max-age=31536000, immutable Accept-Ranges: bytes Last-Modified: Mon, 16 Dec 2024 13:03:00 GMT ETag: W/"1aa2-193cf9097a0" Vary: Accept-Encoding
2025-01-09 23:22:23 UTC	6818	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 72 2c 5f 2c 63 2c 74 2c 61 2c 6e 2c 62 2c 66 2c 75 3d 7b 7d 2c 69 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 65 29 7b 76 61 72 20 72 3d 69 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 72 65 74 75 72 6e 20 72 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 5f 3d 69 5b 65 5d 3d 7b 69 64 3a 65 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 63 3d 21 30 3b 74 72 79 7b 75 5b 65 5d 2e 63 61 6c 6c 28 5f 2e 65 78 70 6f 72 74 73 2c 5f 2c 5f 2e 65 78 70 6f 72 74 73 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 2c 63 3d 21 31 7d 66 69 6e 61 6c 6c 79 7b 63 26 26 64 65 6c 65 74 65 20 Data Ascii: !function(){"use strict";var e,r,_,c,t,a,n,b,f,u={},i={};function __webpack_require__(e){var r=i[e];if(void 0!==r)return r.exports;var _=i[e]={id:e,loaded:!1,exports:{}},c=!0;try{u[e].call(_.exports,_,_.exports,__webpack_require__),c=!1}finally{c&&delete

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.10	50053	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:22 UTC	967	OUT	GET /_next/static/chunks/pages/medicare-marketplace-6d439b8e5c426b00.js HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:22 UTC	322	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:22 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 10664 Connection: close Cache-Control: public, max-age=31536000, immutable Accept-Ranges: bytes Last-Modified: Mon, 16 Dec 2024 13:03:00 GMT ETag: W/"29a8-193cf9097a0" Vary: Accept-Encoding
2025-01-09 23:22:22 UTC	8599	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 31 38 37 5d 2c 7b 36 35 34 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 6d 65 64 69 63 61 72 65 2d 6d 61 72 6b 65 74 70 6c 61 63 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 28 31 38 37 38 29 7d 5d 29 7d 2c 35 34 36 33 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 65 74 75 72 6e 69 6e 67 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[7187],{65404:function(e,t,n){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/medicare-marketplace",function(){return n(1878)}])},54636:function(e,t,n){"use strict";n.d(t,{v:function(){return returning
2025-01-09 23:22:22 UTC	2065	IN	Data Raw: 3a 22 74 6f 67 67 6c 65 22 2c 73 65 63 74 69 6f 6e 73 3a 5b 4c 61 6e 64 69 6e 67 50 61 67 65 57 69 74 68 5a 69 70 53 65 63 74 69 6f 6e 2c 7b 61 6e 69 6d 61 74 69 6f 6e 3a 22 73 6c 69 64 65 22 2c 73 65 63 74 69 6f 6e 73 3a 5b 6c 2e 24 44 2c 6c 2e 45 65 2c 6d 2e 56 2c 70 2e 50 2c 6c 2e 46 68 5d 2c 54 6f 70 43 6f 6d 70 6f 6e 65 6e 74 3a 50 72 6f 67 72 65 73 73 42 61 72 44 6f 74 73 7d 2c 6c 2e 65 56 5d 7d 7d 2c 69 6e 69 74 69 61 6c 41 6e 73 77 65 72 73 3a 7b 72 65 64 69 72 65 63 74 3a 28 30 2c 63 2e 24 7a 32 29 28 29 7d 7d 29 7d 2c 5b 6e 5d 29 3b 72 65 74 75 72 6e 28 30 2c 61 2e 75 73 65 45 66 66 65 63 74 29 28 66 75 6e 63 74 69 6f 6e 28 29 7b 28 30 2c 63 2e 51 72 48 29 28 6f 2e 61 67 2e 6c 61 6e 67 75 61 67 65 2c 22 65 73 22 2c 21 30 2c 66 75 6e 63 74 69 6f Data Ascii: :"toggle",sections:[LandingPageWithZipSection,{animation:"slide",sections:[l.$D,l.Ee,m.V,p.P,l.Fh],TopComponent:ProgressBarDots},l.eV]}},initialAnswers:{redirect:(0,c.$z2)()}})},[n]);return(0,a.useEffect)(function(){(0,c.QrH)(o.ag.language,"es",!0,functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.10	50057	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:22 UTC	953	OUT	GET /_next/static/6Pd7UXE0cORMG2cg_igAQ/_buildManifest.js HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:23 UTC	321	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:22 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 9849 Connection: close Cache-Control: public, max-age=31536000, immutable Accept-Ranges: bytes Last-Modified: Mon, 16 Dec 2024 13:03:00 GMT ETag: W/"2679-193cf9097a0" Vary: Accept-Encoding
2025-01-09 23:22:23 UTC	8600	IN	Data Raw: 73 65 6c 66 2e 5f 5f 42 55 49 4c 44 5f 4d 41 4e 49 46 45 53 54 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 73 2c 65 2c 61 2c 74 2c 69 2c 64 2c 72 2c 6e 2c 75 2c 68 2c 66 2c 6c 2c 62 2c 6b 2c 6d 2c 6f 29 7b 72 65 74 75 72 6e 7b 5f 5f 72 65 77 72 69 74 65 73 3a 7b 61 66 74 65 72 46 69 6c 65 73 3a 5b 5d 2c 62 65 66 6f 72 65 46 69 6c 65 73 3a 5b 5d 2c 66 61 6c 6c 62 61 63 6b 3a 5b 5d 7d 2c 22 2f 22 3a 5b 63 2c 73 2c 65 2c 22 73 74 61 74 69 63 2f 63 73 73 2f 37 65 33 39 32 34 36 63 65 64 63 34 61 37 35 35 2e 63 73 73 22 2c 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 69 6e 64 65 78 2d 61 32 31 62 31 35 38 61 62 34 64 35 66 38 64 37 2e 6a 73 22 5d 2c 22 2f 5f 65 72 72 6f 72 22 3a 5b 63 2c 73 2c 22 73 74 61 74 69 63 2f 63 73 73 2f 32 35 61 30 65 39 30 Data Ascii: self.__BUILD_MANIFEST=function(c,s,e,a,t,i,d,r,n,u,h,f,l,b,k,m,o){return{__rewrites:{afterFiles:[],beforeFiles:[],fallback:[]},"/":[c,s,e,"static/css/7e39246cedc4a755.css","static/chunks/pages/index-a21b158ab4d5f8d7.js"],"/_error":[c,s,"static/css/25a0e90
2025-01-09 23:22:23 UTC	1249	IN	Data Raw: 22 2f 72 65 74 72 79 22 2c 22 2f 73 65 6e 64 2d 72 65 66 65 72 72 61 6c 22 2c 22 2f 73 74 61 6e 64 61 72 64 2d 6c 65 61 64 2d 66 6f 72 6d 22 2c 22 2f 73 75 72 76 65 79 31 22 2c 22 2f 74 65 72 6d 73 2d 63 6f 6e 64 69 74 69 6f 6e 73 22 2c 22 2f 74 68 61 6e 6b 2d 79 6f 75 22 2c 22 2f 74 68 61 6e 6b 2d 79 6f 75 2f 67 6f 6f 64 72 78 22 2c 22 2f 74 68 61 6e 6b 2d 79 6f 75 2f 6c 31 32 39 34 22 2c 22 2f 74 68 61 6e 6b 2d 79 6f 75 2f 6c 31 37 30 36 22 2c 22 2f 74 68 61 6e 6b 2d 79 6f 75 2f 6c 31 38 37 37 22 2c 22 2f 74 68 61 6e 6b 2d 79 6f 75 2f 6c 31 38 38 39 22 2c 22 2f 74 68 61 6e 6b 2d 79 6f 75 2f 6c 31 39 30 36 22 2c 22 2f 74 68 61 6e 6b 2d 79 6f 75 2f 6c 32 30 31 31 22 2c 22 2f 74 68 61 6e 6b 2d 79 6f 75 2f 6c 32 30 32 36 22 2c 22 2f 74 68 61 6e 6b 2d 79 6f Data Ascii: "/retry","/send-referral","/standard-lead-form","/survey1","/terms-conditions","/thank-you","/thank-you/goodrx","/thank-you/l1294","/thank-you/l1706","/thank-you/l1877","/thank-you/l1889","/thank-you/l1906","/thank-you/l2011","/thank-you/l2026","/thank-yo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.10	50058	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:22 UTC	951	OUT	GET /_next/static/6Pd7UXE0cORMG2cg_igAQ/_ssgManifest.js HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:23 UTC	317	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:22 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 77 Connection: close Cache-Control: public, max-age=31536000, immutable Accept-Ranges: bytes Last-Modified: Mon, 16 Dec 2024 13:03:00 GMT ETag: W/"4d-193cf9097a0" Vary: Accept-Encoding
2025-01-09 23:22:23 UTC	77	IN	Data Raw: 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 3d 6e 65 77 20 53 65 74 2c 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 26 26 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 28 29 3b Data Ascii: self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.10	50065	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:22 UTC	395	OUT	GET /_next/static/chunks/pages/_app-b18dce690669cf4a.js HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:23 UTC	324	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:23 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 765596 Connection: close Cache-Control: public, max-age=31536000, immutable Accept-Ranges: bytes Last-Modified: Mon, 16 Dec 2024 13:03:00 GMT ETag: W/"bae9c-193cf9097a0" Vary: Accept-Encoding
2025-01-09 23:22:23 UTC	16060	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 38 38 38 5d 2c 7b 36 36 33 30 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 69 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 69 2e 69 73 55 6e 64 65 66 69 6e 65 64 3d 69 2e 69 73 44 65 66 69 6e 65 64 3d 76 6f 69 64 20 30 2c 69 2e 69 73 44 65 66 69 6e 65 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 74 7d 2c 69 2e 69 73 55 6e 64 65 66 69 6e 65 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 69 2e 69 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[2888],{66306:function(t,i){"use strict";Object.defineProperty(i,"__esModule",{value:!0}),i.isUndefined=i.isDefined=void 0,i.isDefined=function(t){return null!=t},i.isUndefined=function(t){return!i.i
2025-01-09 23:22:23 UTC	10435	IN	Data Raw: 61 74 69 6f 6e 5f 63 6f 6e 73 75 6d 65 72 5f 6c 6f 61 64 73 2d 70 6c 61 6e 22 7d 2c 43 6f 6e 73 75 6d 65 72 4c 6f 61 64 73 50 6c 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 50 72 6f 70 65 72 74 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 6f 70 65 72 74 69 65 73 7d 2c 43 6f 6e 73 75 6d 65 72 4c 6f 61 64 73 50 6c 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 56 61 6c 69 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 43 6f 6e 73 75 6d 65 72 4c 6f 61 64 73 50 6c 61 6e 2e 52 45 51 55 49 52 45 44 5f 50 52 4f 50 45 52 54 49 45 53 2e 65 76 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 28 30 2c 64 2e 69 73 44 65 66 69 6e 65 64 29 28 74 2e 70 72 6f 70 65 Data Ascii: ation_consumer_loads-plan"},ConsumerLoadsPlan.prototype.getProperties=function(){return this.properties},ConsumerLoadsPlan.prototype.isValid=function(){var t=this;return ConsumerLoadsPlan.REQUIRED_PROPERTIES.every(function(i){return(0,d.isDefined)(t.prope
2025-01-09 23:22:23 UTC	16384	IN	Data Raw: 5b 6c 5d 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 29 7b 66 6f 72 28 76 61 72 20 66 3d 75 28 7b 7d 2c 74 29 2c 67 3d 30 3b 67 3c 69 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 7b 69 66 28 21 28 64 2e 69 73 44 65 66 69 6e 65 64 28 66 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 66 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 26 26 66 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 5b 67 5d 29 29 29 72 65 74 75 72 6e 3b 66 3d 66 5b 69 5b 67 5d 5d 7d 72 65 74 75 72 6e 20 66 7d 7d 7d 2c 38 33 38 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 6c 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 69 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 Data Ascii: [l];if("object"==typeof t){for(var f=u({},t),g=0;g<i.length;g++){if(!(d.isDefined(f)&&"function"==typeof f.hasOwnProperty&&f.hasOwnProperty(i[g])))return;f=f[i[g]]}return f}}},8384:function(t,i,l){"use strict";Object.defineProperty(i,"__esModule",{value:!
2025-01-09 23:22:23 UTC	1514	IN	Data Raw: 30 32 38 30 35 2c 35 35 39 38 31 31 38 36 2c 32 33 32 37 34 36 31 30 35 31 2c 36 37 36 34 32 37 35 33 37 2c 33 32 35 35 34 39 31 30 36 34 2c 32 38 38 32 32 39 34 31 31 39 2c 33 34 33 33 39 32 37 32 36 33 2c 31 33 30 37 30 35 35 39 35 33 2c 39 34 32 37 32 36 32 38 36 2c 39 33 33 30 35 38 36 35 38 2c 32 34 36 38 34 31 31 37 39 33 2c 33 39 33 33 39 30 30 39 39 34 2c 34 32 31 35 31 37 36 31 34 32 2c 31 33 36 31 31 37 30 30 32 30 2c 32 30 30 31 37 31 34 37 33 38 2c 32 38 33 30 35 35 38 30 37 38 2c 33 32 37 34 32 35 39 37 38 32 2c 31 32 32 32 35 32 39 38 39 37 2c 31 36 37 39 30 32 35 37 39 32 2c 32 37 32 39 33 31 34 33 32 30 2c 33 37 31 34 39 35 33 37 36 34 2c 31 37 37 30 33 33 35 37 34 31 2c 31 35 31 34 36 32 32 34 36 2c 33 30 31 33 32 33 32 31 33 38 2c 31 36 Data Ascii: 02805,55981186,2327461051,676427537,3255491064,2882294119,3433927263,1307055953,942726286,933058658,2468411793,3933900994,4215176142,1361170020,2001714738,2830558078,3274259782,1222529897,1679025792,2729314320,3714953764,1770335741,151462246,3013232138,16
2025-01-09 23:22:23 UTC	16384	IN	Data Raw: 38 31 30 32 33 36 2c 33 34 34 37 31 30 32 35 30 37 2c 31 33 39 33 36 33 39 31 30 34 2c 33 37 33 33 35 31 33 37 39 2c 39 35 30 37 37 39 32 33 32 2c 36 32 35 34 35 34 35 37 36 2c 33 31 32 34 32 34 30 35 34 30 2c 34 31 34 38 36 31 32 37 32 36 2c 32 30 30 37 39 39 38 39 31 37 2c 35 34 34 35 36 33 32 39 36 2c 32 32 34 34 37 33 38 36 33 38 2c 32 33 33 30 34 39 36 34 37 32 2c 32 30 35 38 30 32 35 33 39 32 2c 31 32 39 31 34 33 30 35 32 36 2c 34 32 34 31 39 38 37 34 38 2c 35 30 30 33 39 34 33 36 2c 32 39 35 38 34 31 30 30 2c 33 36 30 35 37 38 33 30 33 33 2c 32 34 32 39 38 37 36 33 32 39 2c 32 37 39 31 31 30 34 31 36 30 2c 31 30 35 37 35 36 33 39 34 39 2c 33 32 35 35 33 36 33 32 33 31 2c 33 30 37 35 33 36 37 32 31 38 2c 33 34 36 33 39 36 33 32 32 37 2c 31 34 36 39 Data Ascii: 810236,3447102507,1393639104,373351379,950779232,625454576,3124240540,4148612726,2007998917,544563296,2244738638,2330496472,2058025392,1291430526,424198748,50039436,29584100,3605783033,2429876329,2791104160,1057563949,3255363231,3075367218,3463963227,1469
2025-01-09 23:22:23 UTC	4759	IN	Data Raw: 4c 2c 4f 2c 6b 2c 79 2c 31 31 2c 67 5b 33 37 5d 29 2c 6b 3d 48 48 28 6b 2c 44 2c 4c 2c 4f 2c 62 2c 31 36 2c 67 5b 33 38 5d 29 2c 4f 3d 48 48 28 4f 2c 6b 2c 44 2c 4c 2c 55 2c 32 33 2c 67 5b 33 39 5d 29 2c 4c 3d 48 48 28 4c 2c 4f 2c 6b 2c 44 2c 53 2c 34 2c 67 5b 34 30 5d 29 2c 44 3d 48 48 28 44 2c 4c 2c 4f 2c 6b 2c 70 2c 31 31 2c 67 5b 34 31 5d 29 2c 6b 3d 48 48 28 6b 2c 44 2c 4c 2c 4f 2c 77 2c 31 36 2c 67 5b 34 32 5d 29 2c 4f 3d 48 48 28 4f 2c 6b 2c 44 2c 4c 2c 43 2c 32 33 2c 67 5b 34 33 5d 29 2c 4c 3d 48 48 28 4c 2c 4f 2c 6b 2c 44 2c 51 2c 34 2c 67 5b 34 34 5d 29 2c 44 3d 48 48 28 44 2c 4c 2c 4f 2c 6b 2c 49 2c 31 31 2c 67 5b 34 35 5d 29 2c 6b 3d 48 48 28 6b 2c 44 2c 4c 2c 4f 2c 48 2c 31 36 2c 67 5b 34 36 5d 29 2c 4f 3d 48 48 28 4f 2c 6b 2c 44 2c 4c 2c 42 Data Ascii: L,O,k,y,11,g[37]),k=HH(k,D,L,O,b,16,g[38]),O=HH(O,k,D,L,U,23,g[39]),L=HH(L,O,k,D,S,4,g[40]),D=HH(D,L,O,k,p,11,g[41]),k=HH(k,D,L,O,w,16,g[42]),O=HH(O,k,D,L,C,23,g[43]),L=HH(L,O,k,D,Q,4,g[44]),D=HH(D,L,O,k,I,11,g[45]),k=HH(k,D,L,O,H,16,g[46]),O=HH(O,k,D,L,B
2025-01-09 23:22:23 UTC	8949	IN	Data Raw: 64 2e 5a 65 72 6f 50 61 64 64 69 6e 67 2e 70 61 64 28 74 2c 69 29 7d 2c 75 6e 70 61 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 75 2e 70 61 64 2e 5a 65 72 6f 50 61 64 64 69 6e 67 2e 75 6e 70 61 64 28 74 29 2c 74 2e 73 69 67 42 79 74 65 73 2d 2d 7d 7d 2c 75 2e 70 61 64 2e 49 73 6f 39 37 39 37 31 29 7d 2c 35 30 31 38 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 6c 29 7b 76 61 72 20 75 3b 74 2e 65 78 70 6f 72 74 73 3d 28 75 3d 6c 28 35 37 33 35 39 29 2c 6c 28 39 39 35 31 29 2c 75 2e 70 61 64 2e 4e 6f 50 61 64 64 69 6e 67 3d 7b 70 61 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 75 6e 70 61 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 2c 75 2e 70 61 64 2e 4e 6f 50 61 64 64 69 6e 67 29 7d 2c 32 37 39 32 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 6c 29 7b 76 61 Data Ascii: d.ZeroPadding.pad(t,i)},unpad:function(t){u.pad.ZeroPadding.unpad(t),t.sigBytes--}},u.pad.Iso97971)},50181:function(t,i,l){var u;t.exports=(u=l(57359),l(9951),u.pad.NoPadding={pad:function(){},unpad:function(){}},u.pad.NoPadding)},27921:function(t,i,l){va
2025-01-09 23:22:23 UTC	16384	IN	Data Raw: 2e 5f 70 72 6f 63 65 73 73 28 29 3b 66 6f 72 28 76 61 72 20 64 3d 74 68 69 73 2e 5f 68 61 73 68 2c 66 3d 64 2e 77 6f 72 64 73 2c 67 3d 30 3b 67 3c 35 3b 67 2b 2b 29 7b 76 61 72 20 70 3d 66 5b 67 5d 3b 66 5b 67 5d 3d 28 70 3c 3c 38 7c 70 3e 3e 3e 32 34 29 26 31 36 37 31 31 39 33 35 7c 28 70 3c 3c 32 34 7c 70 3e 3e 3e 38 29 26 34 32 37 38 32 35 35 33 36 30 7d 72 65 74 75 72 6e 20 64 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 64 2e 63 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 5f 68 61 73 68 3d 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 2c 74 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 72 6f 74 6c 28 74 2c 69 29 7b 72 65 74 75 72 6e 20 74 3c 3c 69 7c 74 3e 3e 3e 33 32 2d 69 7d 75 2e 52 49 Data Ascii: ._process();for(var d=this._hash,f=d.words,g=0;g<5;g++){var p=f[g];f[g]=(p<<8\|p>>>24)&16711935\|(p<<24\|p>>>8)&4278255360}return d},clone:function(){var t=d.clone.call(this);return t._hash=this._hash.clone(),t}});function rotl(t,i){return t<<i\|t>>>32-i}u.RI
2025-01-09 23:22:23 UTC	16384	IN	Data Raw: 36 30 38 30 3a 36 34 2c 32 30 33 31 36 31 36 3a 34 30 39 36 2c 31 30 38 31 33 34 34 3a 32 31 35 31 36 37 37 39 35 32 2c 31 31 34 36 38 38 30 3a 32 31 35 31 36 38 32 31 31 32 2c 31 32 31 32 34 31 36 3a 30 2c 31 32 37 37 39 35 32 3a 34 31 39 38 34 30 30 2c 31 33 34 33 34 38 38 3a 34 31 39 34 33 36 38 2c 31 34 30 39 30 32 34 3a 32 31 34 37 34 38 33 36 34 38 2c 31 34 37 34 35 36 30 3a 32 31 34 37 34 38 37 38 30 38 2c 31 35 34 30 30 39 36 3a 36 34 2c 31 36 30 35 36 33 32 3a 32 31 34 37 34 38 33 37 31 32 2c 31 36 37 31 31 36 38 3a 34 30 39 36 2c 31 37 33 36 37 30 34 3a 32 31 34 37 34 38 37 37 34 34 2c 31 38 30 32 32 34 30 3a 32 31 35 31 36 37 38 30 31 36 2c 31 38 36 37 37 37 36 3a 34 31 36 30 2c 31 39 33 33 33 31 32 3a 32 31 35 31 36 38 32 30 34 38 2c 31 39 39 Data Ascii: 6080:64,2031616:4096,1081344:2151677952,1146880:2151682112,1212416:0,1277952:4198400,1343488:4194368,1409024:2147483648,1474560:2147487808,1540096:64,1605632:2147483712,1671168:4096,1736704:2147487744,1802240:2151678016,1867776:4160,1933312:2151682048,199
2025-01-09 23:22:23 UTC	16384	IN	Data Raw: 77 48 4c 41 63 73 42 79 77 48 4c 41 63 73 42 79 77 48 4c 41 63 73 42 79 77 48 4c 41 63 73 42 79 77 48 4c 41 63 73 42 79 77 48 4c 41 63 73 42 79 77 48 4c 41 63 73 42 79 77 48 4c 41 63 73 42 79 77 48 4c 41 63 73 42 79 77 48 4c 41 63 73 42 79 77 48 4c 41 63 73 42 79 77 48 4c 41 63 73 42 79 77 48 4c 41 63 73 42 79 77 48 4c 41 63 73 42 79 77 48 4c 41 63 73 42 79 77 48 4c 41 63 73 42 79 77 48 4c 41 63 73 42 79 77 48 4c 41 63 73 42 79 77 48 4c 41 63 73 42 79 77 48 4c 41 63 73 42 79 77 48 4c 41 63 73 42 79 77 48 4c 41 63 73 42 79 77 48 4c 41 63 73 42 79 77 48 4c 41 63 73 42 79 77 48 4c 41 63 73 42 79 77 48 4c 41 63 73 42 79 77 48 4c 41 63 73 42 79 77 48 4c 41 63 73 42 79 77 48 4c 41 63 73 42 79 77 48 4c 41 63 73 42 79 77 48 4c 41 63 73 42 79 77 48 4c 41 63 73 42 Data Ascii: wHLAcsBywHLAcsBywHLAcsBywHLAcsBywHLAcsBywHLAcsBywHLAcsBywHLAcsBywHLAcsBywHLAcsBywHLAcsBywHLAcsBywHLAcsBywHLAcsBywHLAcsBywHLAcsBywHLAcsBywHLAcsBywHLAcsBywHLAcsBywHLAcsBywHLAcsBywHLAcsBywHLAcsBywHLAcsBywHLAcsBywHLAcsBywHLAcsBywHLAcsBywHLAcsBywHLAcsBywHLAcsB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.10	50059	18.173.205.126	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:23 UTC	641	OUT	GET /lead-generation-sites/medicare/trustpilot-logo.1716278912.svg HTTP/1.1 Host: cdn.gohealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:23 UTC	498	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 13031 Connection: close Date: Thu, 09 Jan 2025 23:22:23 GMT Last-Modified: Wed, 18 Dec 2024 08:40:29 GMT ETag: "4e4073589578c3728dc5c606033ce657" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 2ce23ed5e0f70e0006a9917211b6355c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: yW_Y28tnScFKSkiSqzjLVqe3BIu8KpR7YwNt4R8QfelskK1KxhaWKw== Age: 1
2025-01-09 23:22:23 UTC	13031	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 36 2e 39 39 39 38 39 33 70 78 22 20 68 65 69 67 68 74 3d 22 32 36 2e 32 36 38 34 34 36 35 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 36 2e 39 39 39 38 39 33 20 32 36 2e 32 36 38 34 34 36 35 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 74 72 75 73 74 70 69 6c 6f 74 2d 6c 6f 67 6f 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="106.999893px" height="26.2684465px" viewBox="0 0 106.999893 26.2684465" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>trustpilot-logo</title>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.10	50060	18.173.205.126	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:23 UTC	637	OUT	GET /lead-generation-sites/medicare/carrier-map.1728363876.jpg HTTP/1.1 Host: cdn.gohealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:23 UTC	499	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 84108 Connection: close Last-Modified: Wed, 18 Dec 2024 08:40:29 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 09 Jan 2025 19:07:10 GMT ETag: "a402298b9954c484a4f76e7d3623aaab" X-Cache: Hit from cloudfront Via: 1.1 2ce23ed5e0f70e0006a9917211b6355c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: 8w2lYEySGKiA9V1u6R-oj0p_FjHzfLbJimaNz2UsdqPpTo4ufVsahw== Age: 15314
2025-01-09 23:22:23 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c2 00 11 08 02 1b 02 90 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 05 03 04 06 02 07 01 08 ff c4 00 1b 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f7 f0 00 00 00 Data Ascii: JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222
2025-01-09 23:22:23 UTC	16384	IN	Data Raw: 8c b5 ee 6a 5a c0 e3 2e 5d 8b 8f 5e 0f 1c 96 d8 6a a8 63 2a 63 17 2b a7 7f d3 58 8c a3 fb ed a1 0a ac 80 4a 7f 60 7f 34 cd 17 f3 4b fe cf 36 7b 67 2d f1 1b 82 3c 20 9f 12 73 ca 52 30 4b e2 4b f1 13 10 b7 90 c4 0c 0b 8a 46 22 6a 21 0d 4c 95 8f 6f 8a 8f d2 da 54 e9 b2 5f a1 c9 55 4c 88 1c 39 5d 25 6c 2d d9 51 18 74 93 f4 8b 90 97 47 27 b2 29 64 bb cf 15 95 9b 5b a9 fb 6a e1 20 92 68 77 d2 14 76 57 65 0c cc bb 81 44 3c c8 9c 73 35 00 83 91 cf 33 e3 b6 b1 94 06 e3 a7 b9 b7 c5 05 0a 52 ac 91 ef c9 8d 64 01 69 ad 8b 55 0d 53 12 49 22 06 13 98 5e 03 a0 e7 79 3c 4f f4 6a 3f df 07 f3 4c d1 7f 34 bf ec f2 aa 7d 8f 52 dc 04 d3 c1 97 7c b6 dc d7 ab bc 44 5b a6 bb 0b fc 11 82 19 98 60 c7 22 da 04 20 c7 7d 47 38 5c f0 e8 be 4d e5 36 b1 ed 6a 4a 65 15 2f 5d 12 e9 a2 8b Data Ascii: jZ.]^jc*c+XJ`4K6{g-< sR0KKF"j!LoT_UL9]%l-QtG')d[j hwvWeD<s53RdiUSI"^y<Oj?L4}R\|D[`" }G8\M6jJe/]
2025-01-09 23:22:23 UTC	16384	IN	Data Raw: fd ac 43 77 a4 0f 05 49 94 99 07 ed 03 30 a0 1e cb 60 7f c5 61 c7 07 74 9c d3 1a 1b 83 8c 86 99 1c 16 da 5e f9 b0 a4 41 3e 64 4a a6 58 4e 64 99 94 09 f7 28 fa 20 01 39 a7 c8 69 80 bb d3 62 1a 25 68 84 5b cd 55 2c 8c ca c2 74 71 60 b0 44 99 f5 66 11 c2 0f 67 55 a9 10 81 c2 6f 29 d7 72 93 1a 15 12 a6 75 2b 5a 2c f8 74 7d fe 86 3d d1 b6 d6 30 c1 24 dd 6c 1b 5d 76 09 c6 1a 06 e0 1c 7e 89 95 6a ec ae 66 28 6b 24 c6 b2 b6 4e dd 29 6e 40 52 1c 55 1a b4 5a ca 4c bb c8 71 7d b4 82 56 c7 5b 66 a5 b4 1c 0c aa 4b 48 c5 c1 d0 6c a9 ba be d4 f1 8b ab 64 59 bc 49 d0 2a 0f a2 f6 ec 10 5a ef e2 08 86 ff 00 b1 8c ff 00 ca aa b0 9d cb 03 f7 c2 30 c6 d0 67 c0 40 5b 1d 6d 9a 9e d0 70 53 aa 4b 48 c5 c0 c1 b2 a0 fa fb 4b 29 f5 8f 00 86 86 8e f2 98 fa 6f a5 50 d2 a9 4d f9 b5 c1 Data Ascii: CwI0`at^A>dJXNd( 9ib%h[U,tq`DfgUo)ru+Z,t}=0$l]v~jf(k$N)n@RUZLq}V[fKHldYI*Z0g@[mpSKHK)oPM
2025-01-09 23:22:23 UTC	14808	IN	Data Raw: 46 b4 76 0e 77 da 06 cf c3 be dd f2 3e b2 8e 60 1d 61 90 0b d1 47 16 d5 a0 2c 1e 74 b6 0e 0b 3a cd dd 1b 20 ad 31 47 bc 5b 1f 83 3c fb 61 82 99 a4 64 0c 72 11 2b ed f5 fd eb 82 1d f3 95 4e e2 14 9b f5 c9 80 58 6d 53 ab 0d 24 3c ec 69 58 7e 81 21 0b 07 29 58 98 53 c0 e9 58 82 16 2e c2 8e 8f ac 31 30 4b f6 e8 82 61 69 17 c7 c4 74 6a e0 df b2 a2 0c d9 07 54 eb 10 7f 34 1a c1 4f e8 b2 59 2c 86 e9 5c eb ad 59 67 d7 58 c4 43 01 9f 9e f7 1d a7 34 ba 57 bc 5c 0a a2 80 7d e0 2e 84 36 6a e8 e2 6f 14 53 87 c9 09 6d bd 39 32 a6 22 0a b9 83 7a 8a 00 29 59 79 cf 3d 61 54 21 00 b1 28 c1 f2 64 16 a5 e1 bb 4e 38 8b 65 c2 bb 24 51 d8 f6 e9 28 51 13 37 a7 b8 4c fd 34 70 cf 77 10 71 84 df 98 b3 04 5c 62 f2 58 79 a7 3a 25 96 ab 8a 6c 3d fe 39 8e a0 2a d6 b2 3e 65 ee 5c 85 38 Data Ascii: Fvw>`aG,t: 1G[<adr+NXmS$<iX~!)XSX.10KaitjT4OY,\YgXC4W\}.6joSm92"z)Yy=aT!(dN8e$Q(Q7L4pwq\bXy:%l=9*>e\8
2025-01-09 23:22:23 UTC	16384	IN	Data Raw: a7 71 86 b3 87 0a 17 44 aa a1 9f 4a d4 5f fc 73 11 29 0d 15 71 0a 82 b9 66 c7 ac 2b bc 52 aa 28 37 2d a1 ab d5 29 64 bf 30 1c ab 55 0b dd 56 54 7a 4b eb 07 b2 3f e1 e1 a5 a5 1c e3 3b 81 50 85 a1 7a 6f 09 cc 62 af 7d 6e d6 20 8c 6c 04 b6 94 a7 06 71 10 95 60 a8 e4 b2 59 62 e7 fc e6 19 af 37 e0 6f e1 8f 28 30 0b c7 99 53 d7 55 d8 80 54 26 6e 7b 1d 58 77 8f 40 8d cd ab 19 97 a1 0e 7f 45 c7 fd a7 e2 18 9e 4a 1f a4 5f c2 d4 7d a3 a3 cf 17 fc 43 fd 37 e2 35 f7 7f 88 75 5c e7 b6 3a 8f 27 f2 a0 55 00 ca b0 3b af 26 d4 33 eb d0 f2 fa 72 66 f6 99 b7 da 0b 90 d5 ec 66 e8 3d f7 17 77 2e 56 5e 4d 12 e9 ec 0e f9 d5 2a 1e 35 44 54 39 5a 14 38 06 64 5f ee 91 e8 b5 d8 45 fa 57 d6 33 73 84 9b 51 62 6f 53 6d d1 a5 c1 eb 51 ce 55 55 13 7e 50 5f 4c 45 d8 30 36 66 ef 99 48 95 Data Ascii: qDJ_s)qf+R(7-)d0UVTzK?;Pzob}n lq`Yb7o(0SUT&n{Xw@EJ_}C75u\:'U;&3rff=w.V^M*5DT9Z8d_EW3sQboSmQUU~P_LE06fH
2025-01-09 23:22:23 UTC	3764	IN	Data Raw: 58 5c 16 c9 c9 9c 9c 56 63 9b 2f 1a 7a 7b b9 35 b4 95 5a 1b 19 64 23 6c 72 ae 94 af 16 69 c2 d8 e7 a5 02 7e 45 f4 dd bb fe 4a 2a c5 02 90 d2 12 c2 89 24 97 6f 15 9b 38 ca 21 05 14 4b 95 44 e0 d6 1e 22 6c 3a 65 89 8f 91 e9 af a9 41 c7 f9 38 be 0b c2 24 9d 89 91 91 a8 f3 43 5e c4 24 d9 4d 1a 73 b4 4a 54 8d f6 49 9d 89 0a 92 2c 92 c2 13 2c 97 f2 71 eb 29 b2 ed 62 da 25 2b 37 32 9b 13 1b b2 2e 0a 3c b9 da ac c3 5a 51 54 9b be 5a 79 92 76 47 b2 cb 2c 6e d0 91 b4 51 72 74 38 ec 64 ad 94 ff 00 85 a2 86 bd b5 ec a1 41 09 fd 0e 25 88 ae 06 ab 0c b3 76 14 5b 1c 1a cb 4d 76 b3 79 4b 0f 11 ca 27 65 bc 3a 36 8a 0a b9 f4 cf 4d 9b 08 69 27 de a4 14 7a 22 91 48 8c 74 2b 96 b2 95 e3 82 8a 45 22 90 e3 fa 8c 5f 4d c2 29 7c 69 21 c3 df b5 0d 08 8a a2 90 98 d8 9b 1c 58 a0 51 Data Ascii: X\Vc/z{5Zd#lri~EJ*$o8!KD"l:eA8$C^$MsJTI,,q)b%+72.<ZQTZyvG,nQrt8dA%v[MvyK'e:6Mi'z"Ht+E"_M)\|i!XQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.10	50061	18.173.205.63	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:23 UTC	410	OUT	GET /lead-generation-sites/medicare/gohealth_logo_monochrome.1716538295.svg HTTP/1.1 Host: cdn.gohealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:23 UTC	501	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 5518 Connection: close Date: Thu, 09 Jan 2025 04:52:58 GMT Last-Modified: Wed, 18 Dec 2024 08:40:29 GMT ETag: "4037528aa2c0060922ee6c8a2674c929" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 6331d4bbb4ca00ba6bb24a0730ab986c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: SEr_yJts7b11zgxxg8_drU-GSbGXZcEQQxzXe7bnkF9gYIsgdtXkeA== Age: 66566
2025-01-09 23:22:23 UTC	5518	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 34 34 22 20 68 65 69 67 68 74 3d 22 32 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 34 20 32 39 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 69 64 3d 22 47 6f 48 65 61 6c 74 68 4c 6f 67 6f 22 3e 0a 3c 67 20 69 64 3d 22 47 72 6f 75 70 20 33 22 3e 0a 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 31 32 5f 32 37 37 31 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 6c 75 6d 69 6e 61 6e 63 65 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 32 22 20 77 69 64 74 68 3d 22 32 35 22 20 68 65 69 67 68 74 3d 22 32 37 22 3e 0a 3c 70 Data Ascii: <svg width="144" height="29" viewBox="0 0 144 29" fill="none" xmlns="http://www.w3.org/2000/svg"><g id="GoHealthLogo"><g id="Group 3"><mask id="mask0_12_2771" style="mask-type:luminance" maskUnits="userSpaceOnUse" x="0" y="2" width="25" height="27"><p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.10	50064	18.173.205.126	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:23 UTC	642	OUT	GET /lead-generation-sites/medicare/trustpilot-badge.1716283270.svg HTTP/1.1 Host: cdn.gohealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:23 UTC	498	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 29215 Connection: close Date: Thu, 09 Jan 2025 23:22:23 GMT Last-Modified: Wed, 18 Dec 2024 08:40:29 GMT ETag: "7ea2aa63add37fc5ef70d084fe6d264f" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 24df21f8156a0df29febdf6c3e09e32c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: slPEMpEnJt-S9trROvhTd1j11WRv5Rt8b4fAkgYWIFwuc_Z4K8P3ng== Age: 1
2025-01-09 23:22:23 UTC	15886	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 34 36 2e 38 31 37 30 35 33 70 78 22 20 68 65 69 67 68 74 3d 22 36 31 2e 39 39 39 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 36 2e 38 31 37 30 35 33 20 36 31 2e 39 39 39 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 74 72 75 73 74 70 69 6c 6f 74 2d 62 61 64 67 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 64 65 66 73 3e 0a Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="146.817053px" height="61.999px" viewBox="0 0 146.817053 61.999" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>trustpilot-badge</title> <defs>
2025-01-09 23:22:23 UTC	13329	IN	Data Raw: 2c 33 35 2e 34 31 35 20 31 31 37 2e 38 30 39 37 31 31 2c 33 35 2e 34 31 35 20 43 31 31 36 2e 31 30 36 37 31 31 2c 33 35 2e 34 31 35 20 31 31 34 2e 36 30 30 37 31 31 2c 33 35 2e 30 39 35 20 31 31 33 2e 32 39 30 37 31 31 2c 33 34 2e 34 35 34 20 4c 31 31 33 2e 32 39 30 37 31 31 2c 33 31 2e 33 31 20 43 31 31 34 2e 33 36 36 37 31 31 2c 33 31 2e 37 39 20 31 31 35 2e 32 37 38 37 31 31 2c 33 32 2e 31 32 39 20 31 31 36 2e 30 32 33 37 31 31 2c 33 32 2e 33 32 36 20 43 31 31 36 2e 37 36 39 37 31 31 2c 33 32 2e 35 32 32 20 31 31 37 2e 34 35 32 37 31 31 2c 33 32 2e 36 32 20 31 31 38 2e 30 37 30 37 31 31 2c 33 32 2e 36 32 20 43 31 31 38 2e 38 31 32 37 31 31 2c 33 32 2e 36 32 20 31 31 39 2e 33 38 32 37 31 31 2c 33 32 2e 34 37 38 20 31 31 39 2e 37 37 38 37 31 31 2c 33 32 Data Ascii: ,35.415 117.809711,35.415 C116.106711,35.415 114.600711,35.095 113.290711,34.454 L113.290711,31.31 C114.366711,31.79 115.278711,32.129 116.023711,32.326 C116.769711,32.522 117.452711,32.62 118.070711,32.62 C118.812711,32.62 119.382711,32.478 119.778711,32

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.10	50062	18.173.205.63	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:23 UTC	402	OUT	GET /lead-generation-sites/medicare/trustpilot-stars.1716278912.svg HTTP/1.1 Host: cdn.gohealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:23 UTC	497	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 9500 Connection: close Date: Thu, 09 Jan 2025 23:22:22 GMT Last-Modified: Wed, 18 Dec 2024 08:40:29 GMT ETag: "594191931da06ce81f1a08d9d8801936" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 8a7cd2920ac4cbceb2a8f9a130562a4c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: MijZBv5aDdFiMfvjIe7-p9kQ8la20smuy9DPRRNeJmnFpEbua1czhg== Age: 2
2025-01-09 23:22:23 UTC	9500	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 39 30 70 78 22 20 68 65 69 67 68 74 3d 22 33 35 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 30 20 33 35 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 74 72 75 73 74 70 69 6c 6f 74 2d 73 74 61 72 73 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 46 69 6e 61 6c 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 20 73 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="190px" height="35px" viewBox="0 0 190 35" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>trustpilot-stars</title> <g id="Final" stroke="none" s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.10	50069	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:23 UTC	411	OUT	GET /_next/static/chunks/pages/medicare-marketplace-6d439b8e5c426b00.js HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:23 UTC	322	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:23 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 10664 Connection: close Cache-Control: public, max-age=31536000, immutable Accept-Ranges: bytes Last-Modified: Mon, 16 Dec 2024 13:03:00 GMT ETag: W/"29a8-193cf9097a0" Vary: Accept-Encoding
2025-01-09 23:22:23 UTC	8599	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 31 38 37 5d 2c 7b 36 35 34 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 6d 65 64 69 63 61 72 65 2d 6d 61 72 6b 65 74 70 6c 61 63 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 28 31 38 37 38 29 7d 5d 29 7d 2c 35 34 36 33 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 65 74 75 72 6e 69 6e 67 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[7187],{65404:function(e,t,n){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/medicare-marketplace",function(){return n(1878)}])},54636:function(e,t,n){"use strict";n.d(t,{v:function(){return returning
2025-01-09 23:22:23 UTC	2065	IN	Data Raw: 3a 22 74 6f 67 67 6c 65 22 2c 73 65 63 74 69 6f 6e 73 3a 5b 4c 61 6e 64 69 6e 67 50 61 67 65 57 69 74 68 5a 69 70 53 65 63 74 69 6f 6e 2c 7b 61 6e 69 6d 61 74 69 6f 6e 3a 22 73 6c 69 64 65 22 2c 73 65 63 74 69 6f 6e 73 3a 5b 6c 2e 24 44 2c 6c 2e 45 65 2c 6d 2e 56 2c 70 2e 50 2c 6c 2e 46 68 5d 2c 54 6f 70 43 6f 6d 70 6f 6e 65 6e 74 3a 50 72 6f 67 72 65 73 73 42 61 72 44 6f 74 73 7d 2c 6c 2e 65 56 5d 7d 7d 2c 69 6e 69 74 69 61 6c 41 6e 73 77 65 72 73 3a 7b 72 65 64 69 72 65 63 74 3a 28 30 2c 63 2e 24 7a 32 29 28 29 7d 7d 29 7d 2c 5b 6e 5d 29 3b 72 65 74 75 72 6e 28 30 2c 61 2e 75 73 65 45 66 66 65 63 74 29 28 66 75 6e 63 74 69 6f 6e 28 29 7b 28 30 2c 63 2e 51 72 48 29 28 6f 2e 61 67 2e 6c 61 6e 67 75 61 67 65 2c 22 65 73 22 2c 21 30 2c 66 75 6e 63 74 69 6f Data Ascii: :"toggle",sections:[LandingPageWithZipSection,{animation:"slide",sections:[l.$D,l.Ee,m.V,p.P,l.Fh],TopComponent:ProgressBarDots},l.eV]}},initialAnswers:{redirect:(0,c.$z2)()}})},[n]);return(0,a.useEffect)(function(){(0,c.QrH)(o.ag.language,"es",!0,functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.10	50070	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:23 UTC	389	OUT	GET /_next/static/chunks/1048-71f1a1614a540721.js HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:23 UTC	322	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:23 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 10156 Connection: close Cache-Control: public, max-age=31536000, immutable Accept-Ranges: bytes Last-Modified: Mon, 16 Dec 2024 13:03:00 GMT ETag: W/"27ac-193cf9097a0" Vary: Accept-Encoding
2025-01-09 23:22:23 UTC	10156	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 30 34 38 5d 2c 7b 37 32 37 36 33 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 73 2e 64 28 74 2c 7b 43 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 65 64 69 63 61 72 65 50 6c 61 6e 73 7d 7d 29 3b 76 61 72 20 69 3d 73 28 35 32 33 32 32 29 2c 6f 3d 73 28 37 35 38 34 31 29 2c 6e 3d 73 28 37 32 38 34 31 29 2c 72 3d 73 28 39 37 34 33 38 29 2c 6c 3d 73 28 34 37 36 39 29 2c 61 3d 73 2e 6e 28 6c 29 2c 4d 65 64 69 63 61 72 65 50 6c 61 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 28 30 2c 72 2e 24 47 29 28 22 63 6f 6d 6d Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[1048],{72763:function(e,t,s){"use strict";s.d(t,{C:function(){return MedicarePlans}});var i=s(52322),o=s(75841),n=s(72841),r=s(97438),l=s(4769),a=s.n(l),MedicarePlans=function(){var e=(0,r.$G)("comm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.10	50068	18.173.205.126	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:23 UTC	634	OUT	GET /lead-generation-sites/medicare/verified.1716283293.svg HTTP/1.1 Host: cdn.gohealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:23 UTC	498	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 15654 Connection: close Date: Thu, 09 Jan 2025 23:22:23 GMT Last-Modified: Wed, 18 Dec 2024 08:40:29 GMT ETag: "991d81bd709d8cbe593efaccdced2eff" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 2ce23ed5e0f70e0006a9917211b6355c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: u_Jpjem7Y0jbXNwKzrQiQR0LkgDmji5DS6B2hxwCC1RNYg6fqPDWRA== Age: 1
2025-01-09 23:22:23 UTC	15654	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 36 2e 31 34 38 70 78 22 20 68 65 69 67 68 74 3d 22 31 38 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 36 2e 31 34 38 20 31 38 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 76 65 72 69 66 69 65 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 46 69 6e 61 6c 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 20 73 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="166.148px" height="18px" viewBox="0 0 166.148 18" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>verified</title> <g id="Final" stroke="none" s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.10	50074	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:23 UTC	389	OUT	GET /_next/static/chunks/main-001bd2769c48104e.js HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:23 UTC	324	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:23 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 143063 Connection: close Cache-Control: public, max-age=31536000, immutable Accept-Ranges: bytes Last-Modified: Mon, 16 Dec 2024 13:03:00 GMT ETag: W/"22ed7-193cf9097a0" Vary: Accept-Encoding
2025-01-09 23:22:23 UTC	8597	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 39 5d 2c 7b 39 38 37 34 39 3a 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 67 65 74 44 65 70 6c 6f 79 6d 65 6e 74 49 64 51 75 65 72 79 4f 72 45 6d 70 74 79 53 74 72 69 6e 67 28 29 7b 72 65 74 75 72 6e 22 22 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 22 67 65 74 44 65 70 6c 6f 79 6d 65 6e 74 49 64 51 75 65 72 79 4f 72 45 6d 70 74 79 53 74 72 69 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{98749:function(r,n){"use strict";function getDeploymentIdQueryOrEmptyString(){return""}Object.defineProperty(n,"__esModule",{value:!0}),Object.defineProperty(n,"getDeploymentIdQueryOrEmptyStri
2025-01-09 23:22:23 UTC	16384	IN	Data Raw: 62 2c 50 2c 45 3d 6f 28 38 31 38 36 32 29 2c 53 3d 6f 28 34 37 38 30 33 29 2c 52 3d 6f 28 31 32 29 2c 4f 3d 6f 28 34 39 33 34 36 29 2c 77 3d 6f 28 31 36 37 39 34 29 2c 6a 3d 6f 28 38 35 33 33 33 29 2c 4d 3d 6f 28 36 36 39 32 29 2c 41 3d 6f 28 32 36 39 36 39 29 2c 43 3d 6f 28 35 36 31 30 37 29 2c 78 3d 6f 28 32 31 35 37 32 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 29 7b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 6e 29 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 2c 6f 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 5b 6f 5d 7d 29 7d 28 6e 2c 7b 76 65 72 73 69 6f 6e 3a 66 75 6e Data Ascii: b,P,E=o(81862),S=o(47803),R=o(12),O=o(49346),w=o(16794),j=o(85333),M=o(6692),A=o(26969),C=o(56107),x=o(21572);Object.defineProperty(n,"__esModule",{value:!0}),function(r,n){for(var o in n)Object.defineProperty(r,o,{enumerable:!0,get:n[o]})}(n,{version:fun
2025-01-09 23:22:23 UTC	1514	IN	Data Raw: 28 6e 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 75 3d 6f 28 32 36 39 36 39 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 22 50 6f 72 74 61 6c 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 6f 72 74 61 6c 7d 7d 29 3b 76 61 72 20 73 3d 6f 28 32 37 38 34 29 2c 6c 3d 6f 28 32 38 33 31 36 29 2c 50 6f 72 74 61 6c 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 76 61 72 20 6e 3d 72 2e 63 68 69 6c 64 72 65 6e 2c 6f 3d 72 2e 74 79 70 65 2c 66 3d 75 2e 5f 28 28 30 2c 73 2e 75 73 Data Ascii: (n,"__esModule",{value:!0});var u=o(26969);Object.defineProperty(n,"__esModule",{value:!0}),Object.defineProperty(n,"Portal",{enumerable:!0,get:function(){return Portal}});var s=o(2784),l=o(28316),Portal=function(r){var n=r.children,o=r.type,f=u._((0,s.us
2025-01-09 23:22:23 UTC	16384	IN	Data Raw: 63 65 28 6e 2e 6c 65 6e 67 74 68 2b 31 29 3a 72 7d 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 2e 64 65 66 61 75 6c 74 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6e 2e 64 65 66 61 75 6c 74 26 26 6e 75 6c 6c 21 3d 3d 6e 2e 64 65 66 61 75 6c 74 29 26 26 76 6f 69 64 20 30 3d 3d 3d 6e 2e 64 65 66 61 75 6c 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 26 26 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2e 64 65 66 61 75 6c 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 6e 2e 64 65 66 61 75 6c 74 2c 6e 29 2c 72 2e 65 78 70 6f 72 74 73 3d 6e 2e 64 65 66 61 75 6c 74 29 7d 2c 38 32 31 32 30 3a 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 29 7b 22 75 Data Ascii: ce(n.length+1):r}("function"==typeof n.default\|\|"object"==typeof n.default&&null!==n.default)&&void 0===n.default.__esModule&&(Object.defineProperty(n.default,"__esModule",{value:!0}),Object.assign(n.default,n),r.exports=n.default)},82120:function(r,n){"u
2025-01-09 23:22:23 UTC	10463	IN	Data Raw: 45 78 70 65 63 74 65 64 20 73 70 61 6e 20 74 6f 20 62 65 20 65 6e 64 65 64 22 29 3b 28 30 2c 75 2e 73 65 6e 64 4d 65 73 73 61 67 65 29 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 65 76 65 6e 74 3a 22 73 70 61 6e 2d 65 6e 64 22 2c 73 74 61 72 74 54 69 6d 65 3a 72 2e 73 74 61 72 74 54 69 6d 65 2c 65 6e 64 54 69 6d 65 3a 72 2e 73 74 61 74 65 2e 65 6e 64 54 69 6d 65 2c 73 70 61 6e 4e 61 6d 65 3a 72 2e 6e 61 6d 65 2c 61 74 74 72 69 62 75 74 65 73 3a 72 2e 61 74 74 72 69 62 75 74 65 73 7d 29 29 7d 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 2e 64 65 66 61 75 6c 74 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6e 2e 64 65 66 61 75 6c 74 26 26 6e 75 6c 6c 21 3d 3d 6e 2e 64 65 66 61 75 6c 74 29 26 26 76 6f 69 64 20 30 3d 3d 3d Data Ascii: Expected span to be ended");(0,u.sendMessage)(JSON.stringify({event:"span-end",startTime:r.startTime,endTime:r.state.endTime,spanName:r.name,attributes:r.attributes}))}("function"==typeof n.default\|\|"object"==typeof n.default&&null!==n.default)&&void 0===
2025-01-09 23:22:23 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 7d 2c 50 48 41 53 45 5f 44 45 56 45 4c 4f 50 4d 45 4e 54 5f 53 45 52 56 45 52 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 7d 2c 50 48 41 53 45 5f 54 45 53 54 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 7d 2c 50 48 41 53 45 5f 49 4e 46 4f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 45 7d 2c 50 41 47 45 53 5f 4d 41 4e 49 46 45 53 54 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 53 7d 2c 41 50 50 5f 50 41 54 48 53 5f 4d 41 4e 49 46 45 53 54 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 52 7d 2c 41 50 50 5f 50 41 54 48 5f 52 4f 55 54 45 53 5f 4d 41 4e 49 46 45 53 54 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4f 7d 2c 42 55 49 Data Ascii: unction(){return g},PHASE_DEVELOPMENT_SERVER:function(){return b},PHASE_TEST:function(){return P},PHASE_INFO:function(){return E},PAGES_MANIFEST:function(){return S},APP_PATHS_MANIFEST:function(){return R},APP_PATH_ROUTES_MANIFEST:function(){return O},BUI
2025-01-09 23:22:23 UTC	16384	IN	Data Raw: 3a 28 30 2c 55 2e 61 64 64 42 61 73 65 50 61 74 68 29 28 73 29 2c 67 3d 6f 3f 73 74 72 69 70 4f 72 69 67 69 6e 28 28 30 2c 57 2e 72 65 73 6f 6c 76 65 48 72 65 66 29 28 72 2c 6f 29 29 3a 6c 7c 7c 73 3b 72 65 74 75 72 6e 7b 75 72 6c 3a 79 2c 61 73 3a 5f 3f 67 3a 28 30 2c 55 2e 61 64 64 42 61 73 65 50 61 74 68 29 28 67 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 65 73 6f 6c 76 65 44 79 6e 61 6d 69 63 52 6f 75 74 65 28 72 2c 6e 29 7b 76 61 72 20 6f 3d 28 30 2c 62 2e 72 65 6d 6f 76 65 54 72 61 69 6c 69 6e 67 53 6c 61 73 68 29 28 28 30 2c 52 2e 64 65 6e 6f 72 6d 61 6c 69 7a 65 50 61 67 65 50 61 74 68 29 28 72 29 29 3b 72 65 74 75 72 6e 22 2f 34 30 34 22 3d 3d 3d 6f 7c 7c 22 2f 5f 65 72 72 6f 72 22 3d 3d 3d 6f 3f 72 3a 28 6e 2e 69 6e 63 6c 75 64 65 73 28 6f 29 7c 7c Data Ascii: :(0,U.addBasePath)(s),g=o?stripOrigin((0,W.resolveHref)(r,o)):l\|\|s;return{url:y,as:_?g:(0,U.addBasePath)(g)}}function resolveDynamicRoute(r,n){var o=(0,b.removeTrailingSlash)((0,R.denormalizePagePath)(r));return"/404"===o\|\|"/_error"===o?r:(n.includes(o)\|\|
2025-01-09 23:22:23 UTC	16384	IN	Data Raw: 5f 4e 45 58 54 5f 44 41 54 41 5f 5f 2e 70 72 6f 70 73 29 3f 76 6f 69 64 20 30 3a 6e 75 6c 6c 3d 3d 28 65 4d 3d 65 41 2e 70 61 67 65 50 72 6f 70 73 29 3f 76 6f 69 64 20 30 3a 65 4d 2e 73 74 61 74 75 73 43 6f 64 65 29 3d 3d 3d 35 30 30 26 26 28 6e 75 6c 6c 3d 3d 28 65 54 3d 65 43 2e 70 72 6f 70 73 29 3f 76 6f 69 64 20 30 3a 65 54 2e 70 61 67 65 50 72 6f 70 73 29 26 26 28 65 43 2e 70 72 6f 70 73 2e 70 61 67 65 50 72 6f 70 73 2e 73 74 61 74 75 73 43 6f 64 65 3d 35 30 30 29 2c 65 47 3d 73 2e 73 68 61 6c 6c 6f 77 26 26 77 2e 72 6f 75 74 65 3d 3d 3d 28 6e 75 6c 6c 21 3d 28 65 7a 3d 65 43 2e 72 6f 75 74 65 29 3f 65 7a 3a 65 6d 29 2c 65 58 3d 28 65 4b 3d 6e 75 6c 6c 21 3d 28 65 56 3d 73 2e 73 63 72 6f 6c 6c 29 3f 65 56 3a 21 67 26 26 21 65 47 29 3f 7b 78 3a 30 2c Data Ascii: _NEXT_DATA__.props)?void 0:null==(eM=eA.pageProps)?void 0:eM.statusCode)===500&&(null==(eT=eC.props)?void 0:eT.pageProps)&&(eC.props.pageProps.statusCode=500),eG=s.shallow&&w.route===(null!=(ez=eC.route)?ez:em),eX=(eK=null!=(eV=s.scroll)?eV:!g&&!eG)?{x:0,
2025-01-09 23:22:23 UTC	4542	IN	Data Raw: 68 28 22 2f 22 29 3a 68 7d 3b 66 26 26 28 30 2c 6c 2e 70 61 74 68 48 61 73 50 72 65 66 69 78 29 28 5f 2e 70 61 74 68 6e 61 6d 65 2c 66 29 26 26 28 5f 2e 70 61 74 68 6e 61 6d 65 3d 28 30 2c 73 2e 72 65 6d 6f 76 65 50 61 74 68 50 72 65 66 69 78 29 28 5f 2e 70 61 74 68 6e 61 6d 65 2c 66 29 2c 5f 2e 62 61 73 65 50 61 74 68 3d 66 29 3b 76 61 72 20 79 3d 5f 2e 70 61 74 68 6e 61 6d 65 3b 69 66 28 5f 2e 70 61 74 68 6e 61 6d 65 2e 73 74 61 72 74 73 57 69 74 68 28 22 2f 5f 6e 65 78 74 2f 64 61 74 61 2f 22 29 26 26 5f 2e 70 61 74 68 6e 61 6d 65 2e 65 6e 64 73 57 69 74 68 28 22 2e 6a 73 6f 6e 22 29 29 7b 76 61 72 20 67 3d 5f 2e 70 61 74 68 6e 61 6d 65 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 2f 5f 6e 65 78 74 5c 2f 64 61 74 61 5c 2f 2f 2c 22 22 29 2e 72 65 70 6c 61 63 65 Data Ascii: h("/"):h};f&&(0,l.pathHasPrefix)(_.pathname,f)&&(_.pathname=(0,s.removePathPrefix)(_.pathname,f),_.basePath=f);var y=_.pathname;if(_.pathname.startsWith("/_next/data/")&&_.pathname.endsWith(".json")){var g=_.pathname.replace(/^\/_next\/data\//,"").replace
2025-01-09 23:22:23 UTC	16384	IN	Data Raw: 6e 67 74 68 29 7d 7d 7d 2c 37 35 32 34 37 3a 66 75 6e 63 74 69 6f 6e 28 72 2c 6e 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 22 70 61 74 68 48 61 73 50 72 65 66 69 78 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 61 74 68 48 61 73 50 72 65 66 69 78 7d 7d 29 3b 76 61 72 20 75 3d 6f 28 32 34 30 35 35 29 3b 66 75 6e 63 74 69 6f 6e 20 70 61 74 68 48 61 73 50 72 65 66 69 78 28 72 2c 6e 29 7b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 72 29 72 65 74 Data Ascii: ngth)}}},75247:function(r,n,o){"use strict";Object.defineProperty(n,"__esModule",{value:!0}),Object.defineProperty(n,"pathHasPrefix",{enumerable:!0,get:function(){return pathHasPrefix}});var u=o(24055);function pathHasPrefix(r,n){if("string"!=typeof r)ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.10	50076	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:23 UTC	1011	OUT	GET /api/geo-location/ip HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" gh-request-id: 392a938b-a094-4bd6-9d72-ce521ff09bbd sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: form_url=%2Fmedicare-marketplace
2025-01-09 23:22:23 UTC	466	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:23 GMT Content-Type: application/json; charset=utf-8 Content-Length: 710 Connection: close access-control-allow-origin: * access-control-allow-headers: Origin, Content-Type, Authorization access-control-allow-methods: GET, OPTIONS, POST etag: W/"2c6-gYFbEyuYtZj6kb8y1PxjNU+CDUS" cache-control: public, max-age=3600 set-cookie: gh-session-id=fc99a7c8-08f9-4875-be9f-f97a9821de17; Path=/ accept-ranges: bytes
2025-01-09 23:22:23 UTC	710	IN	Data Raw: 7b 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 22 69 70 41 64 64 72 65 73 73 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 22 73 74 61 74 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 73 74 61 74 65 41 62 62 72 65 76 22 3a 22 4e 59 22 2c 22 66 69 70 73 43 6f 64 65 73 22 3a 5b 22 33 36 30 30 31 22 2c 22 33 36 30 30 33 22 2c 22 33 36 30 30 35 22 2c 22 33 36 30 30 37 22 2c 22 33 36 30 30 39 22 2c 22 33 36 30 31 31 22 2c 22 33 36 30 31 33 22 2c 22 33 36 30 31 35 22 2c 22 33 36 30 31 37 22 2c 22 33 36 30 31 39 22 2c 22 33 36 30 32 31 22 2c 22 33 36 30 32 33 22 2c 22 33 36 30 32 35 22 2c 22 33 36 30 32 37 22 2c 22 33 36 30 32 39 22 2c 22 33 36 30 33 31 22 2c 22 33 36 30 33 33 22 2c 22 33 36 30 33 35 22 2c 22 33 36 30 33 37 22 2c 22 Data Ascii: {"city":"New York City","ipAddress":"8.46.123.189","state":"New York","stateAbbrev":"NY","fipsCodes":["36001","36003","36005","36007","36009","36011","36013","36015","36017","36019","36021","36023","36025","36027","36029","36031","36033","36035","36037","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.10	50075	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:23 UTC	1048	OUT	GET /api/consent/message/62b5af34-0370-11ee-be56-0242ac120002 HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" gh-request-id: 392a938b-a094-4bd6-9d72-ce521ff09bbd sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: form_url=%2Fmedicare-marketplace
2025-01-09 23:22:23 UTC	634	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:23 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers,accept-encoding x-content-type-options: nosniff x-xss-protection: 0 cache-control: no-cache, no-store, max-age=0, must-revalidate pragma: no-cache expires: 0 x-frame-options: DENY access-control-allow-origin: * access-control-allow-headers: Origin, Content-Type, Authorization access-control-allow-methods: GET, OPTIONS, POST set-cookie: gh-session-id=e0ed71f9-b359-46ed-810d-cacb7b884c01; Path=/
2025-01-09 23:22:23 UTC	1209	IN	Data Raw: 34 62 32 0d 0a 7b 22 6d 65 73 73 61 67 65 49 64 22 3a 22 36 33 22 2c 22 74 65 78 74 4d 65 73 73 61 67 65 22 3a 22 3c 70 3e 3c 73 74 72 6f 6e 67 3e 50 6c 65 61 73 65 20 65 6e 74 65 72 20 79 6f 75 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 68 61 76 65 20 61 20 6c 69 63 65 6e 73 65 64 20 69 6e 73 75 72 61 6e 63 65 20 61 67 65 6e 74 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 72 65 67 61 72 64 69 6e 67 20 4d 65 64 69 63 61 72 65 20 41 64 76 61 6e 74 61 67 65 20 61 6e 64 2f 6f 72 20 50 72 65 73 63 72 69 70 74 69 6f 6e 20 44 72 75 67 20 50 6c 61 6e 73 2e 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 70 3e 3c 70 3e 3c 73 74 72 6f 6e 67 3e 42 79 20 63 6c 69 63 6b 69 6e 67 20 74 68 65 20 62 75 74 74 6f 6e 2c 20 79 6f 75 20 63 6f 6e 73 65 6e 74 20 74 6f 20 62 65 20 63 6f 6e Data Ascii: 4b2{"messageId":"63","textMessage":"<p><strong>Please enter your information to have a licensed insurance agent contact you regarding Medicare Advantage and/or Prescription Drug Plans.</strong></p><p><strong>By clicking the button, you consent to be con
2025-01-09 23:22:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.10	50077	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:23 UTC	397	OUT	GET /_next/static/6Pd7UXE0cORMG2cg_igAQ/_buildManifest.js HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:23 UTC	321	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:23 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 9849 Connection: close Cache-Control: public, max-age=31536000, immutable Accept-Ranges: bytes Last-Modified: Mon, 16 Dec 2024 13:03:00 GMT ETag: W/"2679-193cf9097a0" Vary: Accept-Encoding
2025-01-09 23:22:23 UTC	9849	IN	Data Raw: 73 65 6c 66 2e 5f 5f 42 55 49 4c 44 5f 4d 41 4e 49 46 45 53 54 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 73 2c 65 2c 61 2c 74 2c 69 2c 64 2c 72 2c 6e 2c 75 2c 68 2c 66 2c 6c 2c 62 2c 6b 2c 6d 2c 6f 29 7b 72 65 74 75 72 6e 7b 5f 5f 72 65 77 72 69 74 65 73 3a 7b 61 66 74 65 72 46 69 6c 65 73 3a 5b 5d 2c 62 65 66 6f 72 65 46 69 6c 65 73 3a 5b 5d 2c 66 61 6c 6c 62 61 63 6b 3a 5b 5d 7d 2c 22 2f 22 3a 5b 63 2c 73 2c 65 2c 22 73 74 61 74 69 63 2f 63 73 73 2f 37 65 33 39 32 34 36 63 65 64 63 34 61 37 35 35 2e 63 73 73 22 2c 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 69 6e 64 65 78 2d 61 32 31 62 31 35 38 61 62 34 64 35 66 38 64 37 2e 6a 73 22 5d 2c 22 2f 5f 65 72 72 6f 72 22 3a 5b 63 2c 73 2c 22 73 74 61 74 69 63 2f 63 73 73 2f 32 35 61 30 65 39 30 Data Ascii: self.__BUILD_MANIFEST=function(c,s,e,a,t,i,d,r,n,u,h,f,l,b,k,m,o){return{__rewrites:{afterFiles:[],beforeFiles:[],fallback:[]},"/":[c,s,e,"static/css/7e39246cedc4a755.css","static/chunks/pages/index-a21b158ab4d5f8d7.js"],"/_error":[c,s,"static/css/25a0e90

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.10	50083	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:23 UTC	437	OUT	GET /_next/static/6Pd7UXE0cORMG2cg_igAQ/_ssgManifest.js HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: form_url=%2Fmedicare-marketplace
2025-01-09 23:22:24 UTC	317	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:24 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 77 Connection: close Cache-Control: public, max-age=31536000, immutable Accept-Ranges: bytes Last-Modified: Mon, 16 Dec 2024 13:03:00 GMT ETag: W/"4d-193cf9097a0" Vary: Accept-Encoding
2025-01-09 23:22:24 UTC	77	IN	Data Raw: 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 3d 6e 65 77 20 53 65 74 2c 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 26 26 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 28 29 3b Data Ascii: self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.10	50085	18.173.205.63	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:24 UTC	401	OUT	GET /lead-generation-sites/medicare/trustpilot-logo.1716278912.svg HTTP/1.1 Host: cdn.gohealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:24 UTC	498	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 13031 Connection: close Date: Thu, 09 Jan 2025 23:22:23 GMT Last-Modified: Wed, 18 Dec 2024 08:40:29 GMT ETag: "4e4073589578c3728dc5c606033ce657" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 392cb865edfd76152c5ac655614b2f60.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: KWrWa2ZAJvYT6nXBVmXdoXAvKOVdkTRc7DMVXx3KAcrFzDhr8QkDEA== Age: 2
2025-01-09 23:22:24 UTC	13031	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 36 2e 39 39 39 38 39 33 70 78 22 20 68 65 69 67 68 74 3d 22 32 36 2e 32 36 38 34 34 36 35 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 36 2e 39 39 39 38 39 33 20 32 36 2e 32 36 38 34 34 36 35 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 74 72 75 73 74 70 69 6c 6f 74 2d 6c 6f 67 6f 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="106.999893px" height="26.2684465px" viewBox="0 0 106.999893 26.2684465" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>trustpilot-logo</title>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.10	50087	18.173.205.63	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:24 UTC	402	OUT	GET /lead-generation-sites/medicare/trustpilot-badge.1716283270.svg HTTP/1.1 Host: cdn.gohealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:24 UTC	498	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 29215 Connection: close Date: Thu, 09 Jan 2025 23:22:23 GMT Last-Modified: Wed, 18 Dec 2024 08:40:29 GMT ETag: "7ea2aa63add37fc5ef70d084fe6d264f" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 f41688bac877227b82b3347b2428d266.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: De0qQcOwMvPfQoNiHXEhdq2-y0jMoxoncPU5YgT8sIJY5db5tB75Xw== Age: 2
2025-01-09 23:22:24 UTC	16384	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 34 36 2e 38 31 37 30 35 33 70 78 22 20 68 65 69 67 68 74 3d 22 36 31 2e 39 39 39 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 36 2e 38 31 37 30 35 33 20 36 31 2e 39 39 39 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 74 72 75 73 74 70 69 6c 6f 74 2d 62 61 64 67 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 64 65 66 73 3e 0a Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="146.817053px" height="61.999px" viewBox="0 0 146.817053 61.999" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>trustpilot-badge</title> <defs>
2025-01-09 23:22:24 UTC	12831	IN	Data Raw: 31 35 2e 35 36 37 37 31 31 2c 32 37 2e 34 31 31 20 31 31 35 2e 30 38 30 37 31 31 2c 32 36 2e 39 38 39 20 43 31 31 34 2e 35 39 32 37 31 31 2c 32 36 2e 35 36 37 20 31 31 34 2e 32 30 33 37 31 31 2c 32 36 2e 30 37 36 20 31 31 33 2e 39 31 32 37 31 31 2c 32 35 2e 35 31 35 20 43 31 31 33 2e 36 32 31 37 31 31 2c 32 34 2e 39 35 34 20 31 31 33 2e 34 37 35 37 31 31 2c 32 34 2e 33 20 31 31 33 2e 34 37 35 37 31 31 2c 32 33 2e 35 35 20 43 31 31 33 2e 34 37 35 37 31 31 2c 32 32 2e 31 33 39 20 31 31 33 2e 39 35 34 37 31 31 2c 32 31 2e 30 32 39 20 31 31 34 2e 39 31 30 37 31 31 2c 32 30 2e 32 32 31 20 43 31 31 35 2e 38 36 37 37 31 31 2c 31 39 2e 34 31 33 20 31 31 37 2e 31 38 39 37 31 31 2c 31 39 2e 30 31 20 31 31 38 2e 38 37 38 37 31 31 2c 31 39 2e 30 31 20 43 31 31 39 2e Data Ascii: 15.567711,27.411 115.080711,26.989 C114.592711,26.567 114.203711,26.076 113.912711,25.515 C113.621711,24.954 113.475711,24.3 113.475711,23.55 C113.475711,22.139 113.954711,21.029 114.910711,20.221 C115.867711,19.413 117.189711,19.01 118.878711,19.01 C119.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.10	50089	18.173.205.63	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:24 UTC	397	OUT	GET /lead-generation-sites/medicare/carrier-map.1728363876.jpg HTTP/1.1 Host: cdn.gohealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:24 UTC	499	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 84108 Connection: close Last-Modified: Wed, 18 Dec 2024 08:40:29 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 09 Jan 2025 19:07:10 GMT ETag: "a402298b9954c484a4f76e7d3623aaab" X-Cache: Hit from cloudfront Via: 1.1 65c5d5104f267ee43cce97d81871c884.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: 93-3M4h8Ygj08O-9vwHwAfiIA0ClAwFUR4B_3HHZjKu3hHvpHZq0dA== Age: 15315
2025-01-09 23:22:24 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c2 00 11 08 02 1b 02 90 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 05 03 04 06 02 07 01 08 ff c4 00 1b 01 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 f7 f0 00 00 00 Data Ascii: JFIFC $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222
2025-01-09 23:22:24 UTC	16384	IN	Data Raw: 8c b5 ee 6a 5a c0 e3 2e 5d 8b 8f 5e 0f 1c 96 d8 6a a8 63 2a 63 17 2b a7 7f d3 58 8c a3 fb ed a1 0a ac 80 4a 7f 60 7f 34 cd 17 f3 4b fe cf 36 7b 67 2d f1 1b 82 3c 20 9f 12 73 ca 52 30 4b e2 4b f1 13 10 b7 90 c4 0c 0b 8a 46 22 6a 21 0d 4c 95 8f 6f 8a 8f d2 da 54 e9 b2 5f a1 c9 55 4c 88 1c 39 5d 25 6c 2d d9 51 18 74 93 f4 8b 90 97 47 27 b2 29 64 bb cf 15 95 9b 5b a9 fb 6a e1 20 92 68 77 d2 14 76 57 65 0c cc bb 81 44 3c c8 9c 73 35 00 83 91 cf 33 e3 b6 b1 94 06 e3 a7 b9 b7 c5 05 0a 52 ac 91 ef c9 8d 64 01 69 ad 8b 55 0d 53 12 49 22 06 13 98 5e 03 a0 e7 79 3c 4f f4 6a 3f df 07 f3 4c d1 7f 34 bf ec f2 aa 7d 8f 52 dc 04 d3 c1 97 7c b6 dc d7 ab bc 44 5b a6 bb 0b fc 11 82 19 98 60 c7 22 da 04 20 c7 7d 47 38 5c f0 e8 be 4d e5 36 b1 ed 6a 4a 65 15 2f 5d 12 e9 a2 8b Data Ascii: jZ.]^jc*c+XJ`4K6{g-< sR0KKF"j!LoT_UL9]%l-QtG')d[j hwvWeD<s53RdiUSI"^y<Oj?L4}R\|D[`" }G8\M6jJe/]
2025-01-09 23:22:24 UTC	16384	IN	Data Raw: fd ac 43 77 a4 0f 05 49 94 99 07 ed 03 30 a0 1e cb 60 7f c5 61 c7 07 74 9c d3 1a 1b 83 8c 86 99 1c 16 da 5e f9 b0 a4 41 3e 64 4a a6 58 4e 64 99 94 09 f7 28 fa 20 01 39 a7 c8 69 80 bb d3 62 1a 25 68 84 5b cd 55 2c 8c ca c2 74 71 60 b0 44 99 f5 66 11 c2 0f 67 55 a9 10 81 c2 6f 29 d7 72 93 1a 15 12 a6 75 2b 5a 2c f8 74 7d fe 86 3d d1 b6 d6 30 c1 24 dd 6c 1b 5d 76 09 c6 1a 06 e0 1c 7e 89 95 6a ec ae 66 28 6b 24 c6 b2 b6 4e dd 29 6e 40 52 1c 55 1a b4 5a ca 4c bb c8 71 7d b4 82 56 c7 5b 66 a5 b4 1c 0c aa 4b 48 c5 c1 d0 6c a9 ba be d4 f1 8b ab 64 59 bc 49 d0 2a 0f a2 f6 ec 10 5a ef e2 08 86 ff 00 b1 8c ff 00 ca aa b0 9d cb 03 f7 c2 30 c6 d0 67 c0 40 5b 1d 6d 9a 9e d0 70 53 aa 4b 48 c5 c0 c1 b2 a0 fa fb 4b 29 f5 8f 00 86 86 8e f2 98 fa 6f a5 50 d2 a9 4d f9 b5 c1 Data Ascii: CwI0`at^A>dJXNd( 9ib%h[U,tq`DfgUo)ru+Z,t}=0$l]v~jf(k$N)n@RUZLq}V[fKHldYI*Z0g@[mpSKHK)oPM
2025-01-09 23:22:24 UTC	16384	IN	Data Raw: 46 b4 76 0e 77 da 06 cf c3 be dd f2 3e b2 8e 60 1d 61 90 0b d1 47 16 d5 a0 2c 1e 74 b6 0e 0b 3a cd dd 1b 20 ad 31 47 bc 5b 1f 83 3c fb 61 82 99 a4 64 0c 72 11 2b ed f5 fd eb 82 1d f3 95 4e e2 14 9b f5 c9 80 58 6d 53 ab 0d 24 3c ec 69 58 7e 81 21 0b 07 29 58 98 53 c0 e9 58 82 16 2e c2 8e 8f ac 31 30 4b f6 e8 82 61 69 17 c7 c4 74 6a e0 df b2 a2 0c d9 07 54 eb 10 7f 34 1a c1 4f e8 b2 59 2c 86 e9 5c eb ad 59 67 d7 58 c4 43 01 9f 9e f7 1d a7 34 ba 57 bc 5c 0a a2 80 7d e0 2e 84 36 6a e8 e2 6f 14 53 87 c9 09 6d bd 39 32 a6 22 0a b9 83 7a 8a 00 29 59 79 cf 3d 61 54 21 00 b1 28 c1 f2 64 16 a5 e1 bb 4e 38 8b 65 c2 bb 24 51 d8 f6 e9 28 51 13 37 a7 b8 4c fd 34 70 cf 77 10 71 84 df 98 b3 04 5c 62 f2 58 79 a7 3a 25 96 ab 8a 6c 3d fe 39 8e a0 2a d6 b2 3e 65 ee 5c 85 38 Data Ascii: Fvw>`aG,t: 1G[<adr+NXmS$<iX~!)XSX.10KaitjT4OY,\YgXC4W\}.6joSm92"z)Yy=aT!(dN8e$Q(Q7L4pwq\bXy:%l=9*>e\8
2025-01-09 23:22:24 UTC	16384	IN	Data Raw: 28 ed c3 c7 3f 7b 9b 88 69 7b f7 40 7b 00 40 69 f4 b4 1d 58 a1 dc 8a f3 34 3d a7 23 d4 cc 64 d3 e3 f6 84 6a 15 a3 0e 78 74 c0 a7 d6 24 4b 00 ad e6 29 d4 11 7b eb 5d 3d c8 21 f7 57 87 71 b7 ab 12 f6 59 47 36 7d 4b 7b c6 88 00 05 04 b5 b9 61 cc d4 be c1 d5 e8 12 b2 56 f5 96 98 3a 59 1f b0 87 95 2d b4 9d f0 74 08 81 7d 03 d3 03 d3 58 4d 91 fb ed 38 20 fd 3e 76 91 1c 23 d2 e5 67 d5 3c 24 15 3e d0 3d 6f ea bf c0 e5 69 be de 0c c1 ad a1 5e b2 c6 55 81 85 13 46 34 57 92 09 2e 57 8a 98 c5 aa d8 90 53 46 5e 62 5a 41 3e 22 ba 2e 5b e4 83 64 e2 f2 66 b8 84 b7 00 b5 54 11 bb c6 90 4b de 51 d3 74 38 fc 19 43 a3 d7 1f 64 ab de 40 0a 16 00 fc 4b b9 6c 16 dd 8d cc 14 37 3d 0f 24 ea c5 a6 85 70 e6 a2 66 19 86 10 7a 25 c2 54 86 d3 99 80 5d 79 81 9c a9 00 6f 3f e3 0e d9 a4 Data Ascii: (?{i{@{@iX4=#djxt$K){]=!WqYG6}K{aV:Y-t}XM8 >v#g<$>=oi^UF4W.WSF^bZA>".[dfTKQt8Cd@Kl7=$pfz%T]yo?
2025-01-09 23:22:24 UTC	2188	IN	Data Raw: 4b 5b ca d2 d2 bf 1f c2 f3 ff 00 25 3d 54 be 44 34 d9 18 d7 67 08 6e c4 8a c2 74 39 de 25 1a 11 02 95 15 58 97 59 4f 3a 70 4f 97 d1 d9 38 d8 db 4e 9a a1 f5 f1 ae 8b 2f 2f 0c ec 58 62 c2 42 42 6f d9 2f 66 bf 96 b4 de d8 df 97 5b 8d 0f 22 7a 90 90 fc d9 29 73 1d 46 b4 f7 ea 47 c9 d6 d6 6d 69 3f 2f 57 49 ed d4 87 91 29 45 c8 fe bd ee 48 96 bf 91 25 ba 1e 3f 98 e7 2d 93 d6 d6 8e 94 77 4a 1a fe 46 af 30 5e 64 a0 dc 75 bc 6d 67 ab 0d cf 0b 12 62 9b 1f ed d6 2d c4 94 ec a6 c4 99 08 34 f9 9c ad 88 89 b8 bc 3e b1 47 d9 64 20 db e5 2d aa 93 69 10 9d ba 64 e0 a4 52 4c db c7 c7 f5 ec ed 7b 12 36 b3 6b 29 b7 42 81 f6 28 0e 02 e0 75 f5 89 66 6e a2 d9 e2 2d fa c9 b2 1a 51 84 9c 96 af f9 0c f3 13 7a 2e bf 1e d6 d6 8f c8 35 bd 23 41 35 a5 14 e6 af 5d ac 75 e4 1e 7c 9b d4 Data Ascii: K[%=TD4gnt9%XYO:pO8N//XbBBo/f["z)sFGmi?/WI)EH%?-wJF0^dumgb-4>Gd -idRL{6k)B(ufn-Qz.5#A5]u\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.10	50088	18.173.205.63	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:24 UTC	394	OUT	GET /lead-generation-sites/medicare/verified.1716283293.svg HTTP/1.1 Host: cdn.gohealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:24 UTC	498	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 15654 Connection: close Date: Thu, 09 Jan 2025 23:22:23 GMT Last-Modified: Wed, 18 Dec 2024 08:40:29 GMT ETag: "991d81bd709d8cbe593efaccdced2eff" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 e240913a5e90e18bd637baa6899f2280.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: 7r9xqBisA1ZcgSru123nwC4-sBdg3HVwY3BMrBc6nr5Ybk6IZM8LnA== Age: 2
2025-01-09 23:22:24 UTC	15654	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 36 36 2e 31 34 38 70 78 22 20 68 65 69 67 68 74 3d 22 31 38 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 36 36 2e 31 34 38 20 31 38 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 76 65 72 69 66 69 65 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 67 20 69 64 3d 22 46 69 6e 61 6c 22 20 73 74 72 6f 6b 65 3d 22 6e 6f 6e 65 22 20 73 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="166.148px" height="18px" viewBox="0 0 166.148 18" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>verified</title> <g id="Final" stroke="none" s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.10	50093	104.18.65.57	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:24 UTC	540	OUT	GET /js/24547810247.js HTTP/1.1 Host: cdn.optimizely.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:24 UTC	912	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:24 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-id-2: 2roVfyr0uUgnbi34OMHu+OX8ZXQ1OqNVs2pvHTtwxa+2vHZi8YLYQwwMnHVNnisHoLaN2XtAIJ4= x-amz-request-id: WJVDM3GBBYHJZJGF x-amz-replication-status: PENDING Last-Modified: Tue, 07 Jan 2025 22:26:18 GMT ETag: W/"a3dbb89f61ed892576c11dbebff85628" x-amz-server-side-encryption: AES256 Cache-Control: max-age=120 x-amz-meta-revision: 3530 x-amz-meta-pci_enabled: False x-amz-version-id: 6zt_xThO.3wZPhBdrbKf.ZWY4R8WyWF7 CF-Cache-Status: HIT Age: 500 Timing-Allow-Origin: * Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Headers: * Access-Control-Expose-Headers: x-amz-meta-revision Access-Control-Allow-Credentials: false Access-Control-Max-Age: 86400 Server: cloudflare CF-RAY: 8ff82b4ffc787ce7-EWR
2025-01-09 23:22:24 UTC	457	IN	Data Raw: 33 38 62 31 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 63 6c 69 65 6e 74 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 7b 35 38 31 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 29 7b 76 61 72 20 65 3b 21 66 75 6e 63 74 69 6f 6e 28 72 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 22 66 75 6e 63 74 69 6f 6e 22 2c 75 3d 22 75 6e 64 65 66 69 6e 65 64 22 2c 63 3d 22 6f 62 6a 65 63 74 22 2c 73 3d 22 73 74 72 69 6e 67 22 2c 66 3d 22 6d 6f 64 65 6c 22 2c 6c 3d 22 6e 61 6d 65 22 2c 64 3d 22 74 79 70 65 22 2c 76 3d 22 76 65 6e 64 6f Data Ascii: 38b1/! For license information please see client.min.js.LICENSE.txt /(function(){var __webpack_modules__={5817:function(t,n,i){var e;!function(r,o){"use strict";var a="function",u="undefined",c="object",s="string",f="model",l="name",d="type",v="vendo
2025-01-09 23:22:24 UTC	1369	IN	Data Raw: 65 69 22 2c 44 3d 22 4c 47 22 2c 4f 3d 22 4d 69 63 72 6f 73 6f 66 74 22 2c 78 3d 22 4d 6f 74 6f 72 6f 6c 61 22 2c 4d 3d 22 4f 70 65 72 61 22 2c 50 3d 22 53 61 6d 73 75 6e 67 22 2c 4c 3d 22 53 68 61 72 70 22 2c 56 3d 22 53 6f 6e 79 22 2c 55 3d 22 58 69 61 6f 6d 69 22 2c 46 3d 22 5a 65 62 72 61 22 2c 42 3d 22 46 61 63 65 62 6f 6f 6b 22 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 7b 7d 2c 69 3d 30 3b 69 3c 74 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 6e 5b 74 5b 69 5d 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 3d 74 5b 69 5d 3b 72 65 74 75 72 6e 20 6e 7d 2c 47 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 3d 3d 3d 73 26 26 2d 31 21 3d 3d 6a 28 6e 29 2e 69 6e 64 65 78 4f 66 28 6a 28 74 29 Data Ascii: ei",D="LG",O="Microsoft",x="Motorola",M="Opera",P="Samsung",L="Sharp",V="Sony",U="Xiaomi",F="Zebra",B="Facebook",z=function(t){for(var n={},i=0;i<t.length;i++)n[t[i].toUpperCase()]=t[i];return n},G=function(t,n){return typeof t===s&&-1!==j(n).indexOf(j(t)
2025-01-09 23:22:24 UTC	1369	IN	Data Raw: 6c 65 74 61 62 5d 7b 33 2c 36 7d 29 5c 62 2e 2b 76 65 72 73 69 6f 6e 5c 2f 28 5b 2d 5c 77 5c 2e 5d 2b 29 2f 69 2c 2f 28 6f 70 65 72 61 29 28 3f 3a 2e 2b 76 65 72 73 69 6f 6e 5c 2f 7c 5b 5c 2f 20 5d 2b 29 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 5d 2c 5b 6c 2c 68 5d 2c 5b 2f 6f 70 69 6f 73 5b 5c 2f 20 5d 2b 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 5d 2c 5b 68 2c 5b 6c 2c 4d 2b 22 20 4d 69 6e 69 22 5d 5d 2c 5b 2f 5c 62 6f 70 72 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 5d 2c 5b 68 2c 5b 6c 2c 4d 5d 5d 2c 5b 2f 28 6b 69 6e 64 6c 65 29 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 2c 2f 28 6c 75 6e 61 73 63 61 70 65 7c 6d 61 78 74 68 6f 6e 7c 6e 65 74 66 72 6f 6e 74 7c 6a 61 73 6d 69 6e 65 7c 62 6c 61 7a 65 72 29 5b 5c 2f 20 5d 3f 28 5b 5c 77 5c 2e 5d 2a 29 2f 69 2c 2f 28 61 76 61 6e Data Ascii: letab]{3,6})\b.+version\/([-\w\.]+)/i,/(opera)(?:.+version\/\|[\/ ]+)([\w\.]+)/i],[l,h],[/opios[\/ ]+([\w\.]+)/i],[h,[l,M+" Mini"]],[/\bopr\/([\w\.]+)/i],[h,[l,M]],[/(kindle)\/([\w\.]+)/i,/(lunascape\|maxthon\|netfront\|jasmine\|blazer)[\/ ]?([\w\.]*)/i,/(avan
2025-01-09 23:22:24 UTC	1369	IN	Data Raw: 7c 73 61 69 6c 66 69 73 68 7c 68 75 61 77 65 69 29 62 72 6f 77 73 65 72 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 5d 2c 5b 5b 6c 2c 2f 28 2e 2b 29 2f 2c 22 24 31 20 22 2b 53 5d 2c 68 5d 2c 5b 2f 28 63 6f 6d 6f 64 6f 5f 64 72 61 67 6f 6e 29 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 5d 2c 5b 5b 6c 2c 2f 5f 2f 67 2c 22 20 22 5d 2c 68 5d 2c 5b 2f 28 65 6c 65 63 74 72 6f 6e 29 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 20 73 61 66 61 72 69 2f 69 2c 2f 28 74 65 73 6c 61 29 28 3f 3a 20 71 74 63 61 72 62 72 6f 77 73 65 72 7c 5c 2f 28 32 30 5c 64 5c 64 5c 2e 5b 2d 5c 77 5c 2e 5d 2b 29 29 2f 69 2c 2f 6d 3f 28 71 71 62 72 6f 77 73 65 72 7c 62 61 69 64 75 62 6f 78 61 70 70 7c 32 33 34 35 45 78 70 6c 6f 72 65 72 29 5b 5c 2f 20 5d 3f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 5d 2c 5b 6c 2c 68 Data Ascii: \|sailfish\|huawei)browser\/([\w\.]+)/i],[[l,/(.+)/,"$1 "+S],h],[/(comodo_dragon)\/([\w\.]+)/i],[[l,/_/g," "],h],[/(electron)\/([\w\.]+) safari/i,/(tesla)(?: qtcarbrowser\|\/(20\d\d\.[-\w\.]+))/i,/m?(qqbrowser\|baiduboxapp\|2345Explorer)[\/ ]?([\w\.]+)/i],[l,h
2025-01-09 23:22:24 UTC	1369	IN	Data Raw: 66 74 66 6f 78 29 2f 69 2c 2f 28 69 63 65 64 72 61 67 6f 6e 7c 69 63 65 77 65 61 73 65 6c 7c 63 61 6d 69 6e 6f 7c 63 68 69 6d 65 72 61 7c 66 65 6e 6e 65 63 7c 6d 61 65 6d 6f 20 62 72 6f 77 73 65 72 7c 6d 69 6e 69 6d 6f 7c 63 6f 6e 6b 65 72 6f 72 7c 6b 6c 61 72 29 5b 5c 2f 20 5d 3f 28 5b 5c 77 5c 2e 5c 2b 5d 2b 29 2f 69 2c 2f 28 73 65 61 6d 6f 6e 6b 65 79 7c 6b 2d 6d 65 6c 65 6f 6e 7c 69 63 65 63 61 74 7c 69 63 65 61 70 65 7c 66 69 72 65 62 69 72 64 7c 70 68 6f 65 6e 69 78 7c 70 61 6c 65 6d 6f 6f 6e 7c 62 61 73 69 6c 69 73 6b 7c 77 61 74 65 72 66 6f 78 29 5c 2f 28 5b 2d 5c 77 5c 2e 5d 2b 29 24 2f 69 2c 2f 28 66 69 72 65 66 6f 78 29 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 2c 2f 28 6d 6f 7a 69 6c 6c 61 29 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 20 2e 2b 72 76 5c 3a Data Ascii: ftfox)/i,/(icedragon\|iceweasel\|camino\|chimera\|fennec\|maemo browser\|minimo\|conkeror\|klar)[\/ ]?([\w\.\+]+)/i,/(seamonkey\|k-meleon\|icecat\|iceape\|firebird\|phoenix\|palemoon\|basilisk\|waterfox)\/([-\w\.]+)$/i,/(firefox)\/([\w\.]+)/i,/(mozilla)\/([\w\.]+) .+rv\:
2025-01-09 23:22:24 UTC	1369	IN	Data Raw: 5b 76 2c 49 5d 2c 5b 64 2c 5f 5d 5d 2c 5b 2f 28 6d 61 63 69 6e 74 6f 73 68 29 3b 2f 69 5d 2c 5b 66 2c 5b 76 2c 49 5d 5d 2c 5b 2f 5c 62 28 73 68 2d 3f 5b 61 6c 74 76 7a 5d 3f 5c 64 5c 64 5b 61 2d 65 6b 6d 5d 3f 29 2f 69 5d 2c 5b 66 2c 5b 76 2c 4c 5d 2c 5b 64 2c 6d 5d 5d 2c 5b 2f 5c 62 28 28 3f 3a 61 67 5b 72 73 5d 5b 32 33 5d 3f 7c 62 61 68 32 3f 7c 73 68 74 3f 7c 62 74 76 29 2d 61 3f 5b 6c 77 5d 5c 64 7b 32 7d 29 5c 62 28 3f 21 2e 2b 64 5c 2f 73 29 2f 69 5d 2c 5b 66 2c 5b 76 2c 4e 5d 2c 5b 64 2c 5f 5d 5d 2c 5b 2f 28 3f 3a 68 75 61 77 65 69 7c 68 6f 6e 6f 72 29 28 5b 2d 5c 77 20 5d 2b 29 5b 3b 5c 29 5d 2f 69 2c 2f 5c 62 28 6e 65 78 75 73 20 36 70 7c 5c 77 7b 32 2c 34 7d 65 3f 2d 5b 61 74 75 5d 3f 5b 6c 6e 5d 5b 5c 64 78 5d 5b 30 31 32 33 35 39 63 5d 5b 61 Data Ascii: [v,I],[d,_]],[/(macintosh);/i],[f,[v,I]],[/\b(sh-?[altvz]?\d\d[a-ekm]?)/i],[f,[v,L],[d,m]],[/\b((?:ag[rs][23]?\|bah2?\|sht?\|btv)-a?[lw]\d{2})\b(?!.+d\/s)/i],[f,[v,N],[d,_]],[/(?:huawei\|honor)([-\w ]+)[;\)]/i,/\b(nexus 6p\|\w{2,4}e?-[atu]?[ln][\dx][012359c][a
2025-01-09 23:22:24 UTC	1369	IN	Data Raw: 77 20 5d 2b 29 2f 69 2c 2f 6c 65 6e 6f 76 6f 20 3f 28 73 5b 35 36 5d 30 30 30 5b 2d 5c 77 5d 2b 7c 74 61 62 28 3f 3a 5b 5c 77 20 5d 2b 29 7c 79 74 5b 2d 5c 64 5c 77 5d 7b 36 7d 7c 74 62 5b 2d 5c 64 5c 77 5d 7b 36 7d 29 2f 69 5d 2c 5b 66 2c 5b 76 2c 22 4c 65 6e 6f 76 6f 22 5d 2c 5b 64 2c 5f 5d 5d 2c 5b 2f 28 3f 3a 6d 61 65 6d 6f 7c 6e 6f 6b 69 61 29 2e 2a 28 6e 39 30 30 7c 6c 75 6d 69 61 20 5c 64 2b 29 2f 69 2c 2f 6e 6f 6b 69 61 5b 2d 5f 20 5d 3f 28 5b 2d 5c 77 5c 2e 5d 2a 29 2f 69 5d 2c 5b 5b 66 2c 2f 5f 2f 67 2c 22 20 22 5d 2c 5b 76 2c 22 4e 6f 6b 69 61 22 5d 2c 5b 64 2c 6d 5d 5d 2c 5b 2f 28 70 69 78 65 6c 20 63 29 5c 62 2f 69 5d 2c 5b 66 2c 5b 76 2c 43 5d 2c 5b 64 2c 5f 5d 5d 2c 5b 2f 64 72 6f 69 64 2e 2b 3b 20 28 70 69 78 65 6c 5b 5c 64 61 78 6c 20 5d Data Ascii: w ]+)/i,/lenovo ?(s[56]000[-\w]+\|tab(?:[\w ]+)\|yt[-\d\w]{6}\|tb[-\d\w]{6})/i],[f,[v,"Lenovo"],[d,_]],[/(?:maemo\|nokia).(n900\|lumia \d+)/i,/nokia[-_ ]?([-\w\.])/i],[[f,/_/g," "],[v,"Nokia"],[d,m]],[/(pixel c)\b/i],[f,[v,C],[d,_]],[/droid.+; (pixel[\daxl ]
2025-01-09 23:22:24 UTC	1369	IN	Data Raw: 20 6e 6f 74 65 29 20 62 75 69 2f 69 2c 2f 5c 62 6d 7a 2d 28 5b 2d 5c 77 5d 7b 32 2c 7d 29 2f 69 5d 2c 5b 66 2c 5b 76 2c 22 4d 65 69 7a 75 22 5d 2c 5b 64 2c 6d 5d 5d 2c 5b 2f 28 62 6c 61 63 6b 62 65 72 72 79 7c 62 65 6e 71 7c 70 61 6c 6d 28 3f 3d 5c 2d 29 7c 73 6f 6e 79 65 72 69 63 73 73 6f 6e 7c 61 63 65 72 7c 61 73 75 73 7c 64 65 6c 6c 7c 6d 65 69 7a 75 7c 6d 6f 74 6f 72 6f 6c 61 7c 70 6f 6c 79 74 72 6f 6e 29 5b 2d 5f 20 5d 3f 28 5b 2d 5c 77 5d 2a 29 2f 69 2c 2f 28 68 70 29 20 28 5b 5c 77 20 5d 2b 5c 77 29 2f 69 2c 2f 28 61 73 75 73 29 2d 3f 28 5c 77 2b 29 2f 69 2c 2f 28 6d 69 63 72 6f 73 6f 66 74 29 3b 20 28 6c 75 6d 69 61 5b 5c 77 20 5d 2b 29 2f 69 2c 2f 28 6c 65 6e 6f 76 6f 29 5b 2d 5f 20 5d 3f 28 5b 2d 5c 77 5d 2b 29 2f 69 2c 2f 28 6a 6f 6c 6c 61 29 Data Ascii: note) bui/i,/\bmz-([-\w]{2,})/i],[f,[v,"Meizu"],[d,m]],[/(blackberry\|benq\|palm(?=\-)\|sonyericsson\|acer\|asus\|dell\|meizu\|motorola\|polytron)[-_ ]?([-\w]*)/i,/(hp) ([\w ]+\w)/i,/(asus)-?(\w+)/i,/(microsoft); (lumia[\w ]+)/i,/(lenovo)[-_ ]?([-\w]+)/i,/(jolla)
2025-01-09 23:22:24 UTC	1369	IN	Data Raw: 5b 66 2c 5b 76 2c 22 49 6e 73 69 67 6e 69 61 22 5d 2c 5b 64 2c 5f 5d 5d 2c 5b 2f 5c 62 28 28 6e 78 61 7c 6e 65 78 74 29 2d 3f 5c 77 7b 30 2c 39 7d 29 20 62 2f 69 5d 2c 5b 66 2c 5b 76 2c 22 4e 65 78 74 42 6f 6f 6b 22 5d 2c 5b 64 2c 5f 5d 5d 2c 5b 2f 5c 62 28 78 74 72 65 6d 65 5c 5f 29 3f 28 76 28 31 5b 30 34 35 5d 7c 32 5b 30 31 35 5d 7c 5b 33 34 36 39 5d 30 7c 37 5b 30 35 5d 29 29 20 62 2f 69 5d 2c 5b 5b 76 2c 22 56 6f 69 63 65 22 5d 2c 66 2c 5b 64 2c 6d 5d 5d 2c 5b 2f 5c 62 28 6c 76 74 65 6c 5c 2d 29 3f 28 76 31 5b 31 32 5d 29 20 62 2f 69 5d 2c 5b 5b 76 2c 22 4c 76 54 65 6c 22 5d 2c 66 2c 5b 64 2c 6d 5d 5d 2c 5b 2f 5c 62 28 70 68 2d 31 29 20 2f 69 5d 2c 5b 66 2c 5b 76 2c 22 45 73 73 65 6e 74 69 61 6c 22 5d 2c 5b 64 2c 6d 5d 5d 2c 5b 2f 5c 62 28 76 28 31 Data Ascii: [f,[v,"Insignia"],[d,_]],[/\b((nxa\|next)-?\w{0,9}) b/i],[f,[v,"NextBook"],[d,_]],[/\b(xtreme\_)?(v(1[045]\|2[015]\|[3469]0\|7[05])) b/i],[[v,"Voice"],f,[d,m]],[/\b(lvtel\-)?(v1[12]) b/i],[[v,"LvTel"],f,[d,m]],[/\b(ph-1) /i],[f,[v,"Essential"],[d,m]],[/\b(v(1
2025-01-09 23:22:24 UTC	1369	IN	Data Raw: 66 2c 5b 64 2c 67 5d 5d 2c 5b 2f 64 72 6f 69 64 2e 2b 3b 20 28 73 68 69 65 6c 64 29 20 62 75 69 2f 69 5d 2c 5b 66 2c 5b 76 2c 22 4e 76 69 64 69 61 22 5d 2c 5b 64 2c 67 5d 5d 2c 5b 2f 28 70 6c 61 79 73 74 61 74 69 6f 6e 20 5b 33 34 35 70 6f 72 74 61 62 6c 65 76 69 5d 2b 29 2f 69 5d 2c 5b 66 2c 5b 76 2c 56 5d 2c 5b 64 2c 67 5d 5d 2c 5b 2f 5c 62 28 78 62 6f 78 28 3f 3a 20 6f 6e 65 29 3f 28 3f 21 3b 20 78 62 6f 78 29 29 5b 5c 29 3b 20 5d 2f 69 5d 2c 5b 66 2c 5b 76 2c 4f 5d 2c 5b 64 2c 67 5d 5d 2c 5b 2f 28 28 70 65 62 62 6c 65 29 29 61 70 70 2f 69 5d 2c 5b 76 2c 66 2c 5b 64 2c 77 5d 5d 2c 5b 2f 64 72 6f 69 64 2e 2b 3b 20 28 67 6c 61 73 73 29 20 5c 64 2f 69 5d 2c 5b 66 2c 5b 76 2c 43 5d 2c 5b 64 2c 77 5d 5d 2c 5b 2f 64 72 6f 69 64 2e 2b 3b 20 28 77 74 36 33 3f Data Ascii: f,[d,g]],[/droid.+; (shield) bui/i],[f,[v,"Nvidia"],[d,g]],[/(playstation [345portablevi]+)/i],[f,[v,V],[d,g]],[/\b(xbox(?: one)?(?!; xbox))[\); ]/i],[f,[v,O],[d,g]],[/((pebble))app/i],[v,f,[d,w]],[/droid.+; (glass) \d/i],[f,[v,C],[d,w]],[/droid.+; (wt63?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.10	50097	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:24 UTC	1063	OUT	GET /api/moca-state-data HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" gh-request-id: 392a938b-a094-4bd6-9d72-ce521ff09bbd sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: form_url=%2Fmedicare-marketplace; gh-session-id=fc99a7c8-08f9-4875-be9f-f97a9821de17
2025-01-09 23:22:24 UTC	796	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:24 GMT Content-Type: application/json; charset=utf-8 Content-Length: 83821 Connection: close last-modified: Thu, 09 Jan 2025 12:24:58 GMT etag: "62857fadffe9a42a11a968c2964ac93a" x-amz-server-side-encryption: AES256 accept-ranges: bytes server: AmazonS3 x-cache: Hit from cloudfront via: 1.1 28541d1c5ba94fa4ae7d6f7a2c07f4f8.cloudfront.net (CloudFront) x-amz-cf-pop: CMH68-P3 x-amz-cf-id: KqO6AaQGuggHEoyLViP7COdt4gt-8fpbo12gIdKwwPqdq8VroY9Txw== age: 1 access-control-allow-origin: * access-control-allow-headers: Origin, Content-Type, Authorization access-control-allow-methods: GET, OPTIONS, POST cache-control: public, max-age=3600 set-cookie: gh-session-id=fc99a7c8-08f9-4875-be9f-f97a9821de17; Path=/ vary: accept-encoding
2025-01-09 23:22:24 UTC	8125	IN	Data Raw: 7b 22 44 45 22 3a 7b 22 73 74 61 74 65 5f 61 62 62 72 65 76 69 61 74 69 6f 6e 22 3a 22 44 45 22 2c 22 63 61 72 72 69 65 72 73 5f 69 6e 63 6c 75 64 65 64 5f 4d 41 5f 70 69 70 65 5f 64 65 6c 69 6d 69 74 65 72 22 3a 22 43 69 67 6e 61 20 48 65 61 6c 74 68 63 61 72 65 20 7c 20 48 69 67 68 6d 61 72 6b 20 48 65 61 6c 74 68 20 7c 20 48 75 6d 61 6e 61 20 7c 20 55 6e 69 74 65 64 48 65 61 6c 74 68 63 61 72 65 c2 ae 20 7c 20 57 65 6c 6c 63 61 72 65 22 2c 22 63 61 72 72 69 65 72 73 5f 69 6e 63 6c 75 64 65 64 5f 4d 41 5f 63 6f 75 6e 74 22 3a 35 2c 22 64 69 73 74 69 6e 63 74 5f 4d 41 5f 70 6c 61 6e 73 5f 6f 66 66 65 72 65 64 22 3a 31 36 2c 22 64 65 6e 74 61 6c 5f 70 72 65 76 65 6e 74 61 74 69 76 65 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 6d 69 6e 22 3a 31 30 30 Data Ascii: {"DE":{"state_abbreviation":"DE","carriers_included_MA_pipe_delimiter":"Cigna Healthcare \| Highmark Health \| Humana \| UnitedHealthcare \| Wellcare","carriers_included_MA_count":5,"distinct_MA_plans_offered":16,"dental_preventative_yearly_benefit_min":100
2025-01-09 23:22:24 UTC	7759	IN	Data Raw: 65 6e 74 65 20 7c 20 55 6e 69 74 65 64 48 65 61 6c 74 68 63 61 72 65 c2 ae 22 2c 22 63 61 72 72 69 65 72 73 5f 69 6e 63 6c 75 64 65 64 5f 4d 41 5f 63 6f 75 6e 74 22 3a 34 2c 22 64 69 73 74 69 6e 63 74 5f 4d 41 5f 70 6c 61 6e 73 5f 6f 66 66 65 72 65 64 22 3a 32 35 2c 22 64 65 6e 74 61 6c 5f 70 72 65 76 65 6e 74 61 74 69 76 65 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 6d 69 6e 22 3a 31 30 30 30 2c 22 64 65 6e 74 61 6c 5f 70 72 65 76 65 6e 74 61 74 69 76 65 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 22 3a 32 34 35 38 2c 22 64 65 6e 74 61 6c 5f 63 6f 6d 70 72 65 68 65 6e 73 69 76 65 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 6d 69 6e 22 3a 35 30 30 2c 22 64 65 6e 74 61 6c 5f 63 6f 6d 70 72 65 68 65 6e 73 69 76 65 5f 79 65 61 72 6c 79 Data Ascii: ente \| UnitedHealthcare","carriers_included_MA_count":4,"distinct_MA_plans_offered":25,"dental_preventative_yearly_benefit_min":1000,"dental_preventative_yearly_benefit_avg":2458,"dental_comprehensive_yearly_benefit_min":500,"dental_comprehensive_yearly
2025-01-09 23:22:24 UTC	8949	IN	Data Raw: 5f 62 65 6e 65 66 69 74 5f 61 76 67 20 7c 20 22 2c 22 62 65 6e 65 66 69 74 5f 31 22 3a 22 66 6f 6f 64 5f 63 61 72 64 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 22 2c 22 62 65 6e 65 66 69 74 5f 32 22 3a 22 64 65 6e 74 61 6c 5f 70 72 65 76 65 6e 74 61 74 69 76 65 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 22 2c 22 62 65 6e 65 66 69 74 5f 33 22 3a 22 6f 74 63 5f 64 72 75 67 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 22 2c 22 62 65 6e 65 66 69 74 5f 34 22 3a 22 76 69 73 69 6f 6e 5f 65 79 65 5f 77 65 61 72 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 22 2c 22 62 65 6e 65 66 69 74 5f 35 22 3a 22 68 65 61 72 69 6e 67 5f 61 69 64 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 22 7d 2c 22 55 54 22 3a Data Ascii: _benefit_avg \| ","benefit_1":"food_card_yearly_benefit_avg","benefit_2":"dental_preventative_yearly_benefit_avg","benefit_3":"otc_drug_yearly_benefit_avg","benefit_4":"vision_eye_wear_yearly_benefit_avg","benefit_5":"hearing_aid_yearly_benefit_avg"},"UT":
2025-01-09 23:22:25 UTC	16384	IN	Data Raw: 5f 65 79 65 5f 77 65 61 72 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 6d 69 6e 22 3a 31 30 30 2c 22 76 69 73 69 6f 6e 5f 65 79 65 5f 77 65 61 72 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 22 3a 32 39 36 2c 22 76 69 73 69 6f 6e 5f 65 79 65 5f 65 78 61 6d 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 6d 69 6e 22 3a 34 30 2c 22 76 69 73 69 6f 6e 5f 65 79 65 5f 65 78 61 6d 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 22 3a 36 32 2c 22 76 69 73 69 6f 6e 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 22 3a 33 30 39 2c 22 68 65 61 72 69 6e 67 5f 61 69 64 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 6d 69 6e 22 3a 32 35 30 2c 22 68 65 61 72 69 6e 67 5f 61 69 64 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 Data Ascii: _eye_wear_yearly_benefit_min":100,"vision_eye_wear_yearly_benefit_avg":296,"vision_eye_exam_yearly_benefit_min":40,"vision_eye_exam_yearly_benefit_avg":62,"vision_yearly_benefit_avg":309,"hearing_aid_yearly_benefit_min":250,"hearing_aid_yearly_benefit_avg
2025-01-09 23:22:25 UTC	1514	IN	Data Raw: 62 65 6e 65 66 69 74 5f 61 76 67 22 3a 31 36 36 36 2c 22 76 69 73 69 6f 6e 5f 65 79 65 5f 77 65 61 72 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 6d 69 6e 22 3a 31 30 30 2c 22 76 69 73 69 6f 6e 5f 65 79 65 5f 77 65 61 72 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 22 3a 31 34 36 2c 22 76 69 73 69 6f 6e 5f 65 79 65 5f 65 78 61 6d 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 6d 69 6e 22 3a 36 39 2c 22 76 69 73 69 6f 6e 5f 65 79 65 5f 65 78 61 6d 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 22 3a 37 33 2c 22 76 69 73 69 6f 6e 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 22 3a 31 36 31 2c 22 68 65 61 72 69 6e 67 5f 61 69 64 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 6d 69 6e 22 3a 31 30 30 30 2c 22 68 65 61 72 Data Ascii: benefit_avg":1666,"vision_eye_wear_yearly_benefit_min":100,"vision_eye_wear_yearly_benefit_avg":146,"vision_eye_exam_yearly_benefit_min":69,"vision_eye_exam_yearly_benefit_avg":73,"vision_yearly_benefit_avg":161,"hearing_aid_yearly_benefit_min":1000,"hear
2025-01-09 23:22:25 UTC	16384	IN	Data Raw: 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 6d 69 6e 22 3a 31 30 30 30 2c 22 64 65 6e 74 61 6c 5f 63 6f 6d 70 72 65 68 65 6e 73 69 76 65 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 22 3a 31 35 30 30 2c 22 64 65 6e 74 61 6c 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 22 3a 32 38 37 35 2c 22 76 69 73 69 6f 6e 5f 65 79 65 5f 77 65 61 72 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 6d 69 6e 22 3a 31 30 30 2c 22 76 69 73 69 6f 6e 5f 65 79 65 5f 77 65 61 72 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 22 3a 31 35 31 2c 22 76 69 73 69 6f 6e 5f 65 79 65 5f 65 78 61 6d 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 6d 69 6e 22 3a 37 35 2c 22 76 69 73 69 6f 6e 5f 65 79 65 5f 65 78 61 6d 5f 79 65 61 72 6c 79 5f 62 65 6e 65 Data Ascii: yearly_benefit_min":1000,"dental_comprehensive_yearly_benefit_avg":1500,"dental_yearly_benefit_avg":2875,"vision_eye_wear_yearly_benefit_min":100,"vision_eye_wear_yearly_benefit_avg":151,"vision_eye_exam_yearly_benefit_min":75,"vision_eye_exam_yearly_bene
2025-01-09 23:22:25 UTC	5921	IN	Data Raw: 35 32 2c 22 64 65 6e 74 61 6c 5f 63 6f 6d 70 72 65 68 65 6e 73 69 76 65 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 6d 69 6e 22 3a 33 30 30 30 2c 22 64 65 6e 74 61 6c 5f 63 6f 6d 70 72 65 68 65 6e 73 69 76 65 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 22 3a 34 30 30 30 2c 22 64 65 6e 74 61 6c 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 22 3a 32 35 37 35 2c 22 76 69 73 69 6f 6e 5f 65 79 65 5f 77 65 61 72 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 6d 69 6e 22 3a 37 35 2c 22 76 69 73 69 6f 6e 5f 65 79 65 5f 77 65 61 72 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 22 3a 32 38 37 2c 22 76 69 73 69 6f 6e 5f 65 79 65 5f 65 78 61 6d 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 6d 69 6e 22 3a 34 30 2c 22 76 69 73 Data Ascii: 52,"dental_comprehensive_yearly_benefit_min":3000,"dental_comprehensive_yearly_benefit_avg":4000,"dental_yearly_benefit_avg":2575,"vision_eye_wear_yearly_benefit_min":75,"vision_eye_wear_yearly_benefit_avg":287,"vision_eye_exam_yearly_benefit_min":40,"vis
2025-01-09 23:22:25 UTC	16384	IN	Data Raw: 22 2c 22 63 61 72 72 69 65 72 5f 6f 76 65 72 61 6c 6c 5f 37 22 3a 22 22 2c 22 63 61 72 72 69 65 72 5f 6f 76 65 72 61 6c 6c 5f 38 22 3a 22 22 2c 22 63 61 72 72 69 65 72 5f 6f 76 65 72 61 6c 6c 5f 39 22 3a 22 22 2c 22 63 61 72 72 69 65 72 5f 6f 76 65 72 61 6c 6c 5f 31 30 22 3a 22 22 2c 22 70 72 69 6f 72 69 74 69 7a 65 64 5f 62 65 6e 65 66 69 74 5f 6c 69 73 74 22 3a 22 66 6f 6f 64 5f 63 61 72 64 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 20 7c 20 64 65 6e 74 61 6c 5f 70 72 65 76 65 6e 74 61 74 69 76 65 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 20 7c 20 6f 74 63 5f 64 72 75 67 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 20 7c 20 76 69 73 69 6f 6e 5f 65 79 65 5f 77 65 61 72 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 Data Ascii: ","carrier_overall_7":"","carrier_overall_8":"","carrier_overall_9":"","carrier_overall_10":"","prioritized_benefit_list":"food_card_yearly_benefit_avg \| dental_preventative_yearly_benefit_avg \| otc_drug_yearly_benefit_avg \| vision_eye_wear_yearly_benefit
2025-01-09 23:22:25 UTC	2401	IN	Data Raw: 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 6d 69 6e 22 3a 31 32 30 30 2c 22 66 6f 6f 64 5f 63 61 72 64 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 22 3a 32 30 32 38 2c 22 63 61 72 72 69 65 72 5f 6f 76 65 72 61 6c 6c 5f 31 22 3a 22 43 69 67 6e 61 20 48 65 61 6c 74 68 63 61 72 65 22 2c 22 63 61 72 72 69 65 72 5f 6f 76 65 72 61 6c 6c 5f 32 22 3a 22 44 65 76 6f 74 65 64 20 48 65 61 6c 74 68 22 2c 22 63 61 72 72 69 65 72 5f 6f 76 65 72 61 6c 6c 5f 33 22 3a 22 48 75 6d 61 6e 61 22 2c 22 63 61 72 72 69 65 72 5f 6f 76 65 72 61 6c 6c 5f 34 22 3a 22 55 6e 69 74 65 64 48 65 61 6c 74 68 63 61 72 65 c2 ae 22 2c 22 63 61 72 72 69 65 72 5f 6f 76 65 72 61 6c 6c 5f 35 22 3a 22 57 65 6c 6c 50 6f 69 6e 74 22 2c 22 63 61 72 72 69 65 72 5f 6f 76 65 72 61 6c 6c Data Ascii: yearly_benefit_min":1200,"food_card_yearly_benefit_avg":2028,"carrier_overall_1":"Cigna Healthcare","carrier_overall_2":"Devoted Health","carrier_overall_3":"Humana","carrier_overall_4":"UnitedHealthcare","carrier_overall_5":"WellPoint","carrier_overall

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.10	50099	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:24 UTC	495	OUT	GET /api/consent/message/62b5af34-0370-11ee-be56-0242ac120002 HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: form_url=%2Fmedicare-marketplace; gh-session-id=fc99a7c8-08f9-4875-be9f-f97a9821de17
2025-01-09 23:22:24 UTC	634	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:24 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers,accept-encoding x-content-type-options: nosniff x-xss-protection: 0 cache-control: no-cache, no-store, max-age=0, must-revalidate pragma: no-cache expires: 0 x-frame-options: DENY access-control-allow-origin: * access-control-allow-headers: Origin, Content-Type, Authorization access-control-allow-methods: GET, OPTIONS, POST set-cookie: gh-session-id=fc99a7c8-08f9-4875-be9f-f97a9821de17; Path=/
2025-01-09 23:22:24 UTC	1209	IN	Data Raw: 34 62 32 0d 0a 7b 22 6d 65 73 73 61 67 65 49 64 22 3a 22 36 33 22 2c 22 74 65 78 74 4d 65 73 73 61 67 65 22 3a 22 3c 70 3e 3c 73 74 72 6f 6e 67 3e 50 6c 65 61 73 65 20 65 6e 74 65 72 20 79 6f 75 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 74 6f 20 68 61 76 65 20 61 20 6c 69 63 65 6e 73 65 64 20 69 6e 73 75 72 61 6e 63 65 20 61 67 65 6e 74 20 63 6f 6e 74 61 63 74 20 79 6f 75 20 72 65 67 61 72 64 69 6e 67 20 4d 65 64 69 63 61 72 65 20 41 64 76 61 6e 74 61 67 65 20 61 6e 64 2f 6f 72 20 50 72 65 73 63 72 69 70 74 69 6f 6e 20 44 72 75 67 20 50 6c 61 6e 73 2e 3c 2f 73 74 72 6f 6e 67 3e 3c 2f 70 3e 3c 70 3e 3c 73 74 72 6f 6e 67 3e 42 79 20 63 6c 69 63 6b 69 6e 67 20 74 68 65 20 62 75 74 74 6f 6e 2c 20 79 6f 75 20 63 6f 6e 73 65 6e 74 20 74 6f 20 62 65 20 63 6f 6e Data Ascii: 4b2{"messageId":"63","textMessage":"<p><strong>Please enter your information to have a licensed insurance agent contact you regarding Medicare Advantage and/or Prescription Drug Plans.</strong></p><p><strong>By clicking the button, you consent to be con
2025-01-09 23:22:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.10	50092	18.173.205.126	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:24 UTC	642	OUT	GET /lead-generation-sites/medicare/x_logo_dark_gray.1724068743.svg HTTP/1.1 Host: cdn.gohealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:24 UTC	496	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 523 Connection: close Last-Modified: Wed, 18 Dec 2024 08:40:29 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 09 Jan 2025 23:22:24 GMT ETag: "0b851bb95c11c46cda6e567c0c1b3fc2" X-Cache: Hit from cloudfront Via: 1.1 90cfd2dca03ef57cde2166b6abbd53ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: Xm1iCggNvBv1jqZ8VOh4sGERVWG091dRr2o1Xa1PG01EDl2wfn4jhw== Age: 1
2025-01-09 23:22:24 UTC	523	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 30 20 31 36 43 30 20 37 2e 31 37 38 36 37 20 37 2e 31 37 37 33 33 20 30 20 31 36 20 30 43 32 34 2e 38 32 32 37 20 30 20 33 32 20 37 2e 31 37 38 36 37 20 33 32 20 31 36 43 33 32 20 32 34 2e 38 32 32 37 20 32 34 2e 38 32 32 37 20 33 32 20 31 36 20 33 32 43 37 2e 31 37 37 33 33 20 33 32 20 30 20 32 34 2e 38 32 32 37 20 30 20 31 Data Ascii: <svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M0 16C0 7.17867 7.17733 0 16 0C24.8227 0 32 7.17867 32 16C32 24.8227 24.8227 32 16 32C7.17733 32 0 24.8227 0 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.10	50091	18.173.205.126	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:24 UTC	649	OUT	GET /lead-generation-sites/medicare/facebook_logo_dark_gray.1724069057.svg HTTP/1.1 Host: cdn.gohealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:24 UTC	496	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 523 Connection: close Last-Modified: Wed, 18 Dec 2024 08:40:29 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 09 Jan 2025 23:22:24 GMT ETag: "10269217a8db4e8e0ebd2862f3bf61a2" X-Cache: Hit from cloudfront Via: 1.1 8c1c3a8ed856f5c19ce3b4158bff94a8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: niXo4t8Wj43CxRqzAhlxYdJPn-r1dvXZGhPQHQYlgsYUXGbc2vERBw== Age: 1
2025-01-09 23:22:24 UTC	523	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 30 2e 34 33 31 34 20 31 35 2e 30 36 32 34 48 31 37 2e 36 33 38 31 56 32 34 2e 31 32 39 31 48 31 33 2e 36 33 38 31 56 31 35 2e 30 36 32 34 48 31 30 2e 39 37 31 34 56 31 32 2e 34 37 31 39 48 31 33 2e 36 33 38 31 56 31 30 2e 39 36 34 33 43 31 33 2e 36 33 38 31 20 39 2e 35 34 30 38 20 31 34 2e 31 30 37 34 20 37 2e 33 31 34 32 Data Ascii: <svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M20.4314 15.0624H17.6381V24.1291H13.6381V15.0624H10.9714V12.4719H13.6381V10.9643C13.6381 9.5408 14.1074 7.3142

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.10	50095	18.173.205.126	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:24 UTC	649	OUT	GET /lead-generation-sites/medicare/linkedin_logo_dark_gray.1724069057.svg HTTP/1.1 Host: cdn.gohealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:25 UTC	496	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 847 Connection: close Last-Modified: Wed, 18 Dec 2024 08:40:29 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 09 Jan 2025 23:22:24 GMT ETag: "b107c91992bbe80c09488d4219ea6a14" X-Cache: Hit from cloudfront Via: 1.1 43be4ee3b8e339e1d27addbbdc49a4d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: 0pJXJqxkqZUWCE_fbWHT0MfbqKFsF9cySZG5f1g8w3gs70N86V0WuQ== Age: 1
2025-01-09 23:22:25 UTC	847	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 34 2e 38 36 34 20 32 31 2e 37 37 31 37 48 32 31 2e 30 32 35 33 56 31 36 2e 35 35 31 38 43 32 31 2e 30 32 35 33 20 31 35 2e 37 32 38 31 20 32 30 2e 33 33 37 33 20 31 35 2e 30 35 39 37 20 31 39 2e 34 39 30 37 20 31 35 2e 30 35 39 37 43 31 38 2e 36 34 31 33 20 31 35 2e 30 35 39 37 20 31 37 2e 39 35 34 37 20 31 35 2e 37 32 38 Data Ascii: <svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M24.864 21.7717H21.0253V16.5518C21.0253 15.7281 20.3373 15.0597 19.4907 15.0597C18.6413 15.0597 17.9547 15.728

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.10	50094	18.173.205.126	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:24 UTC	650	OUT	GET /lead-generation-sites/medicare/instagram_logo_dark_gray.1724069057.svg HTTP/1.1 Host: cdn.gohealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:25 UTC	497	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 2734 Connection: close Date: Thu, 09 Jan 2025 23:22:24 GMT Last-Modified: Wed, 18 Dec 2024 08:40:29 GMT ETag: "09abdedb9d270d570ed3cf9d37d1c856" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 e240913a5e90e18bd637baa6899f2280.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: yOkfvJrFDJwUYXNDFtgKoKOe8OfmeU2BHR_7WIhkcAUTBm0GFMCkSA== Age: 1
2025-01-09 23:22:25 UTC	2734	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 30 2e 35 33 38 20 31 32 2e 35 38 31 32 43 31 39 2e 39 33 35 33 20 31 32 2e 35 38 35 32 20 31 39 2e 34 33 32 37 20 31 32 2e 30 38 37 39 20 31 39 2e 34 33 32 37 20 31 31 2e 34 38 37 39 43 31 39 2e 34 33 34 20 31 30 2e 38 39 31 39 20 31 39 2e 39 32 32 20 31 30 2e 34 30 32 36 20 32 30 2e 35 32 32 20 31 30 2e 33 39 37 32 43 32 Data Ascii: <svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M20.538 12.5812C19.9353 12.5852 19.4327 12.0879 19.4327 11.4879C19.434 10.8919 19.922 10.4026 20.522 10.3972C2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.10	50103	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:24 UTC	458	OUT	GET /api/geo-location/ip HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: form_url=%2Fmedicare-marketplace; gh-session-id=fc99a7c8-08f9-4875-be9f-f97a9821de17
2025-01-09 23:22:24 UTC	466	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:24 GMT Content-Type: application/json; charset=utf-8 Content-Length: 710 Connection: close access-control-allow-origin: * access-control-allow-headers: Origin, Content-Type, Authorization access-control-allow-methods: GET, OPTIONS, POST etag: W/"2c6-gYFbEyuYtZj6kb8y1PxjNU+CDUS" cache-control: public, max-age=3600 set-cookie: gh-session-id=fc99a7c8-08f9-4875-be9f-f97a9821de17; Path=/ accept-ranges: bytes
2025-01-09 23:22:24 UTC	710	IN	Data Raw: 7b 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 22 2c 22 69 70 41 64 64 72 65 73 73 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 22 73 74 61 74 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 73 74 61 74 65 41 62 62 72 65 76 22 3a 22 4e 59 22 2c 22 66 69 70 73 43 6f 64 65 73 22 3a 5b 22 33 36 30 30 31 22 2c 22 33 36 30 30 33 22 2c 22 33 36 30 30 35 22 2c 22 33 36 30 30 37 22 2c 22 33 36 30 30 39 22 2c 22 33 36 30 31 31 22 2c 22 33 36 30 31 33 22 2c 22 33 36 30 31 35 22 2c 22 33 36 30 31 37 22 2c 22 33 36 30 31 39 22 2c 22 33 36 30 32 31 22 2c 22 33 36 30 32 33 22 2c 22 33 36 30 32 35 22 2c 22 33 36 30 32 37 22 2c 22 33 36 30 32 39 22 2c 22 33 36 30 33 31 22 2c 22 33 36 30 33 33 22 2c 22 33 36 30 33 35 22 2c 22 33 36 30 33 37 22 2c 22 Data Ascii: {"city":"New York City","ipAddress":"8.46.123.189","state":"New York","stateAbbrev":"NY","fipsCodes":["36001","36003","36005","36007","36009","36011","36013","36015","36017","36019","36021","36023","36025","36027","36029","36031","36033","36035","36037","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.10	50096	18.173.205.126	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:24 UTC	642	OUT	GET /lead-generation-sites/medicare/norton_logo_gray.1716543816.svg HTTP/1.1 Host: cdn.gohealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:25 UTC	497	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 7131 Connection: close Last-Modified: Wed, 18 Dec 2024 08:40:29 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 09 Jan 2025 23:22:24 GMT ETag: "ab9c9a4ea610572c867ef77362e54d3c" X-Cache: Hit from cloudfront Via: 1.1 392cb865edfd76152c5ac655614b2f60.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: 4iNWPl8P-Dnp4wlOnBTm5XQuAsYZVYGYVmNm3q-gMt4ab7q2abj2IA== Age: 1
2025-01-09 23:22:25 UTC	7131	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 39 33 22 20 68 65 69 67 68 74 3d 22 33 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 39 33 20 33 39 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 5f 31 36 35 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 6c 75 6d 69 6e 61 6e 63 65 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 31 22 20 79 3d 22 36 22 20 77 69 64 74 68 3d 22 39 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 Data Ascii: <svg width="93" height="39" viewBox="0 0 93 39" fill="none" xmlns="http://www.w3.org/2000/svg"><mask id="mask0_2_165" style="mask-type:luminance" maskUnits="userSpaceOnUse" x="1" y="6" width="92" height="32"><path fill-rule="evenodd" clip-rule="evenodd"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.10	50098	54.75.69.192	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:24 UTC	685	OUT	POST /mon HTTP/1.1 Host: obseu.netgreencolumn.com Connection: keep-alive Content-Length: 3147 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: http://api.myuhchvision.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://api.myuhchvision.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
2025-01-09 23:22:24 UTC	3147	OUT	Data Raw: 65 3d 33 37 64 66 62 64 38 65 65 38 34 65 30 30 31 32 36 39 65 38 63 33 33 33 65 65 34 65 38 38 39 35 39 32 32 35 63 32 34 66 35 36 37 64 34 33 64 36 64 61 31 39 30 38 62 65 36 32 34 35 63 61 64 37 62 64 37 30 61 39 37 36 37 31 30 63 65 36 30 65 64 38 39 33 37 33 62 66 65 37 30 65 39 63 32 30 63 31 65 35 33 65 38 64 35 39 31 39 38 61 36 64 32 65 31 37 30 37 31 61 31 30 61 63 66 39 66 32 39 66 36 37 31 66 38 33 64 37 38 39 30 35 32 39 33 36 31 66 66 36 32 65 37 37 30 35 38 35 33 64 38 62 33 37 39 35 35 31 33 37 35 31 37 31 63 31 35 30 35 34 30 61 33 64 30 33 30 39 39 30 65 62 33 64 31 63 37 37 62 65 32 36 62 62 32 35 63 62 34 33 65 32 39 62 32 35 66 34 35 34 37 31 61 64 30 66 32 65 36 34 31 30 64 32 35 61 66 65 35 61 65 63 64 32 39 34 38 61 37 66 65 30 37 Data Ascii: e=37dfbd8ee84e001269e8c333ee4e88959225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d59198a6d2e17071a10acf9f29f671f83d7890529361ff62e7705853d8b379551375171c150540a3d030990eb3d1c77be26bb25cb43e29b25f45471ad0f2e6410d25afe5aecd2948a7fe07
2025-01-09 23:22:25 UTC	286	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: http://api.myuhchvision.com Content-Length: 0 Content-Type: application/json Date: Thu, 09 Jan 2025 23:22:25 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.10	50121	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:25 UTC	611	OUT	GET /api/moca-state-data HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: form_url=%2Fmedicare-marketplace; gh-session-id=fc99a7c8-08f9-4875-be9f-f97a9821de17; _gcl_aw=GCL.1736464944.EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE; _gcl_gs=2.1.k5$i1736464937$u41793726; _gcl_au=1.1.1804017665.1736464944
2025-01-09 23:22:26 UTC	796	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:25 GMT Content-Type: application/json; charset=utf-8 Content-Length: 83821 Connection: close last-modified: Thu, 09 Jan 2025 12:24:58 GMT etag: "62857fadffe9a42a11a968c2964ac93a" x-amz-server-side-encryption: AES256 accept-ranges: bytes server: AmazonS3 x-cache: Hit from cloudfront via: 1.1 2e518fdd52a59136f75dd93fdd93aeb0.cloudfront.net (CloudFront) x-amz-cf-pop: CMH68-P3 x-amz-cf-id: DYMkonsHFZ6Lea8yEencyP8Afg2MhfP162SPNNN3-ta_kimIevIoJQ== age: 2 access-control-allow-origin: * access-control-allow-headers: Origin, Content-Type, Authorization access-control-allow-methods: GET, OPTIONS, POST cache-control: public, max-age=3600 set-cookie: gh-session-id=fc99a7c8-08f9-4875-be9f-f97a9821de17; Path=/ vary: accept-encoding
2025-01-09 23:22:26 UTC	15588	IN	Data Raw: 7b 22 44 45 22 3a 7b 22 73 74 61 74 65 5f 61 62 62 72 65 76 69 61 74 69 6f 6e 22 3a 22 44 45 22 2c 22 63 61 72 72 69 65 72 73 5f 69 6e 63 6c 75 64 65 64 5f 4d 41 5f 70 69 70 65 5f 64 65 6c 69 6d 69 74 65 72 22 3a 22 43 69 67 6e 61 20 48 65 61 6c 74 68 63 61 72 65 20 7c 20 48 69 67 68 6d 61 72 6b 20 48 65 61 6c 74 68 20 7c 20 48 75 6d 61 6e 61 20 7c 20 55 6e 69 74 65 64 48 65 61 6c 74 68 63 61 72 65 c2 ae 20 7c 20 57 65 6c 6c 63 61 72 65 22 2c 22 63 61 72 72 69 65 72 73 5f 69 6e 63 6c 75 64 65 64 5f 4d 41 5f 63 6f 75 6e 74 22 3a 35 2c 22 64 69 73 74 69 6e 63 74 5f 4d 41 5f 70 6c 61 6e 73 5f 6f 66 66 65 72 65 64 22 3a 31 36 2c 22 64 65 6e 74 61 6c 5f 70 72 65 76 65 6e 74 61 74 69 76 65 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 6d 69 6e 22 3a 31 30 30 Data Ascii: {"DE":{"state_abbreviation":"DE","carriers_included_MA_pipe_delimiter":"Cigna Healthcare \| Highmark Health \| Humana \| UnitedHealthcare \| Wellcare","carriers_included_MA_count":5,"distinct_MA_plans_offered":16,"dental_preventative_yearly_benefit_min":100
2025-01-09 23:22:26 UTC	796	IN	Data Raw: 69 65 72 5f 6f 76 65 72 61 6c 6c 5f 36 22 3a 22 22 2c 22 63 61 72 72 69 65 72 5f 6f 76 65 72 61 6c 6c 5f 37 22 3a 22 22 2c 22 63 61 72 72 69 65 72 5f 6f 76 65 72 61 6c 6c 5f 38 22 3a 22 22 2c 22 63 61 72 72 69 65 72 5f 6f 76 65 72 61 6c 6c 5f 39 22 3a 22 22 2c 22 63 61 72 72 69 65 72 5f 6f 76 65 72 61 6c 6c 5f 31 30 22 3a 22 22 2c 22 70 72 69 6f 72 69 74 69 7a 65 64 5f 62 65 6e 65 66 69 74 5f 6c 69 73 74 22 3a 22 66 6f 6f 64 5f 63 61 72 64 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 20 7c 20 64 65 6e 74 61 6c 5f 70 72 65 76 65 6e 74 61 74 69 76 65 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 20 7c 20 6f 74 63 5f 64 72 75 67 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 20 7c 20 76 69 73 69 6f 6e 5f 65 79 65 5f 77 65 61 Data Ascii: ier_overall_6":"","carrier_overall_7":"","carrier_overall_8":"","carrier_overall_9":"","carrier_overall_10":"","prioritized_benefit_list":"food_card_yearly_benefit_avg \| dental_preventative_yearly_benefit_avg \| otc_drug_yearly_benefit_avg \| vision_eye_wea
2025-01-09 23:22:26 UTC	16384	IN	Data Raw: 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 22 3a 32 37 35 30 2c 22 64 65 6e 74 61 6c 5f 63 6f 6d 70 72 65 68 65 6e 73 69 76 65 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 6d 69 6e 22 3a 6e 75 6c 6c 2c 22 64 65 6e 74 61 6c 5f 63 6f 6d 70 72 65 68 65 6e 73 69 76 65 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 22 3a 6e 75 6c 6c 2c 22 64 65 6e 74 61 6c 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 22 3a 32 37 35 30 2c 22 76 69 73 69 6f 6e 5f 65 79 65 5f 77 65 61 72 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 6d 69 6e 22 3a 31 30 30 2c 22 76 69 73 69 6f 6e 5f 65 79 65 5f 77 65 61 72 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 22 3a 31 37 33 2c 22 76 69 73 69 6f 6e 5f 65 79 65 5f 65 78 61 6d 5f 79 65 61 72 6c 79 5f Data Ascii: rly_benefit_avg":2750,"dental_comprehensive_yearly_benefit_min":null,"dental_comprehensive_yearly_benefit_avg":null,"dental_yearly_benefit_avg":2750,"vision_eye_wear_yearly_benefit_min":100,"vision_eye_wear_yearly_benefit_avg":173,"vision_eye_exam_yearly_
2025-01-09 23:22:26 UTC	12488	IN	Data Raw: 65 72 73 5f 69 6e 63 6c 75 64 65 64 5f 4d 41 5f 70 69 70 65 5f 64 65 6c 69 6d 69 74 65 72 22 3a 22 43 69 67 6e 61 20 48 65 61 6c 74 68 63 61 72 65 20 7c 20 44 65 76 6f 74 65 64 20 48 65 61 6c 74 68 20 7c 20 48 75 6d 61 6e 61 20 7c 20 55 6e 69 74 65 64 48 65 61 6c 74 68 63 61 72 65 c2 ae 20 7c 20 57 65 6c 6c 63 61 72 65 22 2c 22 63 61 72 72 69 65 72 73 5f 69 6e 63 6c 75 64 65 64 5f 4d 41 5f 63 6f 75 6e 74 22 3a 35 2c 22 64 69 73 74 69 6e 63 74 5f 4d 41 5f 70 6c 61 6e 73 5f 6f 66 66 65 72 65 64 22 3a 39 33 2c 22 64 65 6e 74 61 6c 5f 70 72 65 76 65 6e 74 61 74 69 76 65 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 6d 69 6e 22 3a 32 35 30 2c 22 64 65 6e 74 61 6c 5f 70 72 65 76 65 6e 74 61 74 69 76 65 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 Data Ascii: ers_included_MA_pipe_delimiter":"Cigna Healthcare \| Devoted Health \| Humana \| UnitedHealthcare \| Wellcare","carriers_included_MA_count":5,"distinct_MA_plans_offered":93,"dental_preventative_yearly_benefit_min":250,"dental_preventative_yearly_benefit_avg
2025-01-09 23:22:26 UTC	16384	IN	Data Raw: 69 74 5f 61 76 67 20 7c 20 6f 74 63 5f 64 72 75 67 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 20 7c 20 76 69 73 69 6f 6e 5f 65 79 65 5f 77 65 61 72 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 20 7c 20 22 2c 22 62 65 6e 65 66 69 74 5f 31 22 3a 22 64 65 6e 74 61 6c 5f 70 72 65 76 65 6e 74 61 74 69 76 65 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 22 2c 22 62 65 6e 65 66 69 74 5f 32 22 3a 22 6f 74 63 5f 64 72 75 67 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 22 2c 22 62 65 6e 65 66 69 74 5f 33 22 3a 22 76 69 73 69 6f 6e 5f 65 79 65 5f 77 65 61 72 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 22 2c 22 62 65 6e 65 66 69 74 5f 34 22 3a 22 22 2c 22 62 65 6e 65 66 69 74 5f 35 22 3a 22 22 7d 2c 22 4e Data Ascii: it_avg \| otc_drug_yearly_benefit_avg \| vision_eye_wear_yearly_benefit_avg \| ","benefit_1":"dental_preventative_yearly_benefit_avg","benefit_2":"otc_drug_yearly_benefit_avg","benefit_3":"vision_eye_wear_yearly_benefit_avg","benefit_4":"","benefit_5":""},"N
2025-01-09 23:22:26 UTC	1514	IN	Data Raw: 65 22 2c 22 63 61 72 72 69 65 72 5f 6f 76 65 72 61 6c 6c 5f 35 22 3a 22 55 6e 69 74 65 64 48 65 61 6c 74 68 63 61 72 65 c2 ae 22 2c 22 63 61 72 72 69 65 72 5f 6f 76 65 72 61 6c 6c 5f 36 22 3a 22 57 65 6c 6c 63 61 72 65 22 2c 22 63 61 72 72 69 65 72 5f 6f 76 65 72 61 6c 6c 5f 37 22 3a 22 22 2c 22 63 61 72 72 69 65 72 5f 6f 76 65 72 61 6c 6c 5f 38 22 3a 22 22 2c 22 63 61 72 72 69 65 72 5f 6f 76 65 72 61 6c 6c 5f 39 22 3a 22 22 2c 22 63 61 72 72 69 65 72 5f 6f 76 65 72 61 6c 6c 5f 31 30 22 3a 22 22 2c 22 70 72 69 6f 72 69 74 69 7a 65 64 5f 62 65 6e 65 66 69 74 5f 6c 69 73 74 22 3a 22 66 6f 6f 64 5f 63 61 72 64 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 20 7c 20 64 65 6e 74 61 6c 5f 70 72 65 76 65 6e 74 61 74 69 76 65 5f 79 65 61 72 6c 79 5f 62 Data Ascii: e","carrier_overall_5":"UnitedHealthcare","carrier_overall_6":"Wellcare","carrier_overall_7":"","carrier_overall_8":"","carrier_overall_9":"","carrier_overall_10":"","prioritized_benefit_list":"food_card_yearly_benefit_avg \| dental_preventative_yearly_b
2025-01-09 23:22:26 UTC	16384	IN	Data Raw: 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 22 3a 31 33 34 38 2c 22 63 61 72 72 69 65 72 5f 6f 76 65 72 61 6c 6c 5f 31 22 3a 22 43 69 67 6e 61 20 48 65 61 6c 74 68 63 61 72 65 22 2c 22 63 61 72 72 69 65 72 5f 6f 76 65 72 61 6c 6c 5f 32 22 3a 22 48 75 6d 61 6e 61 22 2c 22 63 61 72 72 69 65 72 5f 6f 76 65 72 61 6c 6c 5f 33 22 3a 22 55 6e 69 74 65 64 48 65 61 6c 74 68 63 61 72 65 c2 ae 22 2c 22 63 61 72 72 69 65 72 5f 6f 76 65 72 61 6c 6c 5f 34 22 3a 22 57 65 6c 6c 63 61 72 65 22 2c 22 63 61 72 72 69 65 72 5f 6f 76 65 72 61 6c 6c 5f 35 22 3a 22 22 2c 22 63 61 72 72 69 65 72 5f 6f 76 65 72 61 6c 6c 5f 36 22 3a 22 22 2c 22 63 61 72 72 69 65 72 5f 6f 76 65 72 61 6c 6c 5f 37 22 3a 22 22 2c 22 63 61 72 72 69 65 72 5f 6f 76 65 72 61 6c 6c 5f 38 22 3a 22 22 2c 22 63 61 Data Ascii: y_benefit_avg":1348,"carrier_overall_1":"Cigna Healthcare","carrier_overall_2":"Humana","carrier_overall_3":"UnitedHealthcare","carrier_overall_4":"Wellcare","carrier_overall_5":"","carrier_overall_6":"","carrier_overall_7":"","carrier_overall_8":"","ca
2025-01-09 23:22:26 UTC	4283	IN	Data Raw: 22 3a 31 34 33 37 2c 22 68 65 61 72 69 6e 67 5f 65 78 61 6d 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 6d 69 6e 22 3a 6e 75 6c 6c 2c 22 68 65 61 72 69 6e 67 5f 65 78 61 6d 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 22 3a 6e 75 6c 6c 2c 22 68 65 61 72 69 6e 67 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 22 3a 31 34 33 37 2c 22 6f 74 63 5f 64 72 75 67 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 22 3a 31 30 30 38 2c 22 6f 74 63 5f 64 72 75 67 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 6d 69 6e 22 3a 31 30 30 2c 22 66 6f 6f 64 5f 63 61 72 64 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 6d 69 6e 22 3a 36 36 30 2c 22 66 6f 6f 64 5f 63 61 72 64 5f 79 65 61 72 6c 79 5f 62 65 6e 65 66 69 74 5f 61 76 67 22 3a 31 Data Ascii: ":1437,"hearing_exam_yearly_benefit_min":null,"hearing_exam_yearly_benefit_avg":null,"hearing_yearly_benefit_avg":1437,"otc_drug_yearly_benefit_avg":1008,"otc_drug_yearly_benefit_min":100,"food_card_yearly_benefit_min":660,"food_card_yearly_benefit_avg":1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.10	50112	18.173.205.63	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:25 UTC	563	OUT	GET /lead-generation-sites/medicare/x_logo_dark_gray.1724068743.svg HTTP/1.1 Host: cdn.gohealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_aw=GCL.1736464944.EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE; _gcl_gs=2.1.k5$i1736464937$u41793726; _gcl_au=1.1.1804017665.1736464944
2025-01-09 23:22:25 UTC	496	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 523 Connection: close Last-Modified: Wed, 18 Dec 2024 08:40:29 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 09 Jan 2025 23:22:24 GMT ETag: "0b851bb95c11c46cda6e567c0c1b3fc2" X-Cache: Hit from cloudfront Via: 1.1 e240913a5e90e18bd637baa6899f2280.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: CV5zRrupGbcVmagZG5pZ5uOiY550OUrT6l8sWQBmVhwsQa37MkAQBQ== Age: 2
2025-01-09 23:22:25 UTC	523	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 30 20 31 36 43 30 20 37 2e 31 37 38 36 37 20 37 2e 31 37 37 33 33 20 30 20 31 36 20 30 43 32 34 2e 38 32 32 37 20 30 20 33 32 20 37 2e 31 37 38 36 37 20 33 32 20 31 36 43 33 32 20 32 34 2e 38 32 32 37 20 32 34 2e 38 32 32 37 20 33 32 20 31 36 20 33 32 43 37 2e 31 37 37 33 33 20 33 32 20 30 20 32 34 2e 38 32 32 37 20 30 20 31 Data Ascii: <svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M0 16C0 7.17867 7.17733 0 16 0C24.8227 0 32 7.17867 32 16C32 24.8227 24.8227 32 16 32C7.17733 32 0 24.8227 0 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.10	50111	18.173.205.63	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:25 UTC	570	OUT	GET /lead-generation-sites/medicare/facebook_logo_dark_gray.1724069057.svg HTTP/1.1 Host: cdn.gohealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_aw=GCL.1736464944.EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE; _gcl_gs=2.1.k5$i1736464937$u41793726; _gcl_au=1.1.1804017665.1736464944
2025-01-09 23:22:25 UTC	496	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 523 Connection: close Last-Modified: Wed, 18 Dec 2024 08:40:29 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 09 Jan 2025 23:22:24 GMT ETag: "10269217a8db4e8e0ebd2862f3bf61a2" X-Cache: Hit from cloudfront Via: 1.1 ea7cd71b17e29a29176686830f1a76c4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: piXsas_R7QJDk-R2Mn4yLKAlVRiPxerNY5Xw0b0KUgP6YGjP_KeA-A== Age: 2
2025-01-09 23:22:25 UTC	523	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 30 2e 34 33 31 34 20 31 35 2e 30 36 32 34 48 31 37 2e 36 33 38 31 56 32 34 2e 31 32 39 31 48 31 33 2e 36 33 38 31 56 31 35 2e 30 36 32 34 48 31 30 2e 39 37 31 34 56 31 32 2e 34 37 31 39 48 31 33 2e 36 33 38 31 56 31 30 2e 39 36 34 33 43 31 33 2e 36 33 38 31 20 39 2e 35 34 30 38 20 31 34 2e 31 30 37 34 20 37 2e 33 31 34 32 Data Ascii: <svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M20.4314 15.0624H17.6381V24.1291H13.6381V15.0624H10.9714V12.4719H13.6381V10.9643C13.6381 9.5408 14.1074 7.3142

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.10	50126	104.18.65.57	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:25 UTC	359	OUT	GET /js/24547810247.js HTTP/1.1 Host: cdn.optimizely.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:25 UTC	912	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:25 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-id-2: 2roVfyr0uUgnbi34OMHu+OX8ZXQ1OqNVs2pvHTtwxa+2vHZi8YLYQwwMnHVNnisHoLaN2XtAIJ4= x-amz-request-id: WJVDM3GBBYHJZJGF x-amz-replication-status: PENDING Last-Modified: Tue, 07 Jan 2025 22:26:18 GMT ETag: W/"a3dbb89f61ed892576c11dbebff85628" x-amz-server-side-encryption: AES256 Cache-Control: max-age=120 x-amz-meta-revision: 3530 x-amz-meta-pci_enabled: False x-amz-version-id: 6zt_xThO.3wZPhBdrbKf.ZWY4R8WyWF7 CF-Cache-Status: HIT Age: 501 Timing-Allow-Origin: * Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Access-Control-Allow-Headers: * Access-Control-Expose-Headers: x-amz-meta-revision Access-Control-Allow-Credentials: false Access-Control-Max-Age: 86400 Server: cloudflare CF-RAY: 8ff82b577b287ca2-EWR
2025-01-09 23:22:25 UTC	457	IN	Data Raw: 37 63 30 38 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 63 6c 69 65 6e 74 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 7b 35 38 31 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 29 7b 76 61 72 20 65 3b 21 66 75 6e 63 74 69 6f 6e 28 72 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 22 66 75 6e 63 74 69 6f 6e 22 2c 75 3d 22 75 6e 64 65 66 69 6e 65 64 22 2c 63 3d 22 6f 62 6a 65 63 74 22 2c 73 3d 22 73 74 72 69 6e 67 22 2c 66 3d 22 6d 6f 64 65 6c 22 2c 6c 3d 22 6e 61 6d 65 22 2c 64 3d 22 74 79 70 65 22 2c 76 3d 22 76 65 6e 64 6f Data Ascii: 7c08/! For license information please see client.min.js.LICENSE.txt /(function(){var __webpack_modules__={5817:function(t,n,i){var e;!function(r,o){"use strict";var a="function",u="undefined",c="object",s="string",f="model",l="name",d="type",v="vendo
2025-01-09 23:22:25 UTC	1369	IN	Data Raw: 65 69 22 2c 44 3d 22 4c 47 22 2c 4f 3d 22 4d 69 63 72 6f 73 6f 66 74 22 2c 78 3d 22 4d 6f 74 6f 72 6f 6c 61 22 2c 4d 3d 22 4f 70 65 72 61 22 2c 50 3d 22 53 61 6d 73 75 6e 67 22 2c 4c 3d 22 53 68 61 72 70 22 2c 56 3d 22 53 6f 6e 79 22 2c 55 3d 22 58 69 61 6f 6d 69 22 2c 46 3d 22 5a 65 62 72 61 22 2c 42 3d 22 46 61 63 65 62 6f 6f 6b 22 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 7b 7d 2c 69 3d 30 3b 69 3c 74 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 6e 5b 74 5b 69 5d 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 3d 74 5b 69 5d 3b 72 65 74 75 72 6e 20 6e 7d 2c 47 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 3d 3d 3d 73 26 26 2d 31 21 3d 3d 6a 28 6e 29 2e 69 6e 64 65 78 4f 66 28 6a 28 74 29 Data Ascii: ei",D="LG",O="Microsoft",x="Motorola",M="Opera",P="Samsung",L="Sharp",V="Sony",U="Xiaomi",F="Zebra",B="Facebook",z=function(t){for(var n={},i=0;i<t.length;i++)n[t[i].toUpperCase()]=t[i];return n},G=function(t,n){return typeof t===s&&-1!==j(n).indexOf(j(t)
2025-01-09 23:22:25 UTC	1369	IN	Data Raw: 6c 65 74 61 62 5d 7b 33 2c 36 7d 29 5c 62 2e 2b 76 65 72 73 69 6f 6e 5c 2f 28 5b 2d 5c 77 5c 2e 5d 2b 29 2f 69 2c 2f 28 6f 70 65 72 61 29 28 3f 3a 2e 2b 76 65 72 73 69 6f 6e 5c 2f 7c 5b 5c 2f 20 5d 2b 29 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 5d 2c 5b 6c 2c 68 5d 2c 5b 2f 6f 70 69 6f 73 5b 5c 2f 20 5d 2b 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 5d 2c 5b 68 2c 5b 6c 2c 4d 2b 22 20 4d 69 6e 69 22 5d 5d 2c 5b 2f 5c 62 6f 70 72 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 5d 2c 5b 68 2c 5b 6c 2c 4d 5d 5d 2c 5b 2f 28 6b 69 6e 64 6c 65 29 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 2c 2f 28 6c 75 6e 61 73 63 61 70 65 7c 6d 61 78 74 68 6f 6e 7c 6e 65 74 66 72 6f 6e 74 7c 6a 61 73 6d 69 6e 65 7c 62 6c 61 7a 65 72 29 5b 5c 2f 20 5d 3f 28 5b 5c 77 5c 2e 5d 2a 29 2f 69 2c 2f 28 61 76 61 6e Data Ascii: letab]{3,6})\b.+version\/([-\w\.]+)/i,/(opera)(?:.+version\/\|[\/ ]+)([\w\.]+)/i],[l,h],[/opios[\/ ]+([\w\.]+)/i],[h,[l,M+" Mini"]],[/\bopr\/([\w\.]+)/i],[h,[l,M]],[/(kindle)\/([\w\.]+)/i,/(lunascape\|maxthon\|netfront\|jasmine\|blazer)[\/ ]?([\w\.]*)/i,/(avan
2025-01-09 23:22:25 UTC	1369	IN	Data Raw: 7c 73 61 69 6c 66 69 73 68 7c 68 75 61 77 65 69 29 62 72 6f 77 73 65 72 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 5d 2c 5b 5b 6c 2c 2f 28 2e 2b 29 2f 2c 22 24 31 20 22 2b 53 5d 2c 68 5d 2c 5b 2f 28 63 6f 6d 6f 64 6f 5f 64 72 61 67 6f 6e 29 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 5d 2c 5b 5b 6c 2c 2f 5f 2f 67 2c 22 20 22 5d 2c 68 5d 2c 5b 2f 28 65 6c 65 63 74 72 6f 6e 29 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 20 73 61 66 61 72 69 2f 69 2c 2f 28 74 65 73 6c 61 29 28 3f 3a 20 71 74 63 61 72 62 72 6f 77 73 65 72 7c 5c 2f 28 32 30 5c 64 5c 64 5c 2e 5b 2d 5c 77 5c 2e 5d 2b 29 29 2f 69 2c 2f 6d 3f 28 71 71 62 72 6f 77 73 65 72 7c 62 61 69 64 75 62 6f 78 61 70 70 7c 32 33 34 35 45 78 70 6c 6f 72 65 72 29 5b 5c 2f 20 5d 3f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 5d 2c 5b 6c 2c 68 Data Ascii: \|sailfish\|huawei)browser\/([\w\.]+)/i],[[l,/(.+)/,"$1 "+S],h],[/(comodo_dragon)\/([\w\.]+)/i],[[l,/_/g," "],h],[/(electron)\/([\w\.]+) safari/i,/(tesla)(?: qtcarbrowser\|\/(20\d\d\.[-\w\.]+))/i,/m?(qqbrowser\|baiduboxapp\|2345Explorer)[\/ ]?([\w\.]+)/i],[l,h
2025-01-09 23:22:25 UTC	1369	IN	Data Raw: 66 74 66 6f 78 29 2f 69 2c 2f 28 69 63 65 64 72 61 67 6f 6e 7c 69 63 65 77 65 61 73 65 6c 7c 63 61 6d 69 6e 6f 7c 63 68 69 6d 65 72 61 7c 66 65 6e 6e 65 63 7c 6d 61 65 6d 6f 20 62 72 6f 77 73 65 72 7c 6d 69 6e 69 6d 6f 7c 63 6f 6e 6b 65 72 6f 72 7c 6b 6c 61 72 29 5b 5c 2f 20 5d 3f 28 5b 5c 77 5c 2e 5c 2b 5d 2b 29 2f 69 2c 2f 28 73 65 61 6d 6f 6e 6b 65 79 7c 6b 2d 6d 65 6c 65 6f 6e 7c 69 63 65 63 61 74 7c 69 63 65 61 70 65 7c 66 69 72 65 62 69 72 64 7c 70 68 6f 65 6e 69 78 7c 70 61 6c 65 6d 6f 6f 6e 7c 62 61 73 69 6c 69 73 6b 7c 77 61 74 65 72 66 6f 78 29 5c 2f 28 5b 2d 5c 77 5c 2e 5d 2b 29 24 2f 69 2c 2f 28 66 69 72 65 66 6f 78 29 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 2f 69 2c 2f 28 6d 6f 7a 69 6c 6c 61 29 5c 2f 28 5b 5c 77 5c 2e 5d 2b 29 20 2e 2b 72 76 5c 3a Data Ascii: ftfox)/i,/(icedragon\|iceweasel\|camino\|chimera\|fennec\|maemo browser\|minimo\|conkeror\|klar)[\/ ]?([\w\.\+]+)/i,/(seamonkey\|k-meleon\|icecat\|iceape\|firebird\|phoenix\|palemoon\|basilisk\|waterfox)\/([-\w\.]+)$/i,/(firefox)\/([\w\.]+)/i,/(mozilla)\/([\w\.]+) .+rv\:
2025-01-09 23:22:25 UTC	1369	IN	Data Raw: 5b 76 2c 49 5d 2c 5b 64 2c 5f 5d 5d 2c 5b 2f 28 6d 61 63 69 6e 74 6f 73 68 29 3b 2f 69 5d 2c 5b 66 2c 5b 76 2c 49 5d 5d 2c 5b 2f 5c 62 28 73 68 2d 3f 5b 61 6c 74 76 7a 5d 3f 5c 64 5c 64 5b 61 2d 65 6b 6d 5d 3f 29 2f 69 5d 2c 5b 66 2c 5b 76 2c 4c 5d 2c 5b 64 2c 6d 5d 5d 2c 5b 2f 5c 62 28 28 3f 3a 61 67 5b 72 73 5d 5b 32 33 5d 3f 7c 62 61 68 32 3f 7c 73 68 74 3f 7c 62 74 76 29 2d 61 3f 5b 6c 77 5d 5c 64 7b 32 7d 29 5c 62 28 3f 21 2e 2b 64 5c 2f 73 29 2f 69 5d 2c 5b 66 2c 5b 76 2c 4e 5d 2c 5b 64 2c 5f 5d 5d 2c 5b 2f 28 3f 3a 68 75 61 77 65 69 7c 68 6f 6e 6f 72 29 28 5b 2d 5c 77 20 5d 2b 29 5b 3b 5c 29 5d 2f 69 2c 2f 5c 62 28 6e 65 78 75 73 20 36 70 7c 5c 77 7b 32 2c 34 7d 65 3f 2d 5b 61 74 75 5d 3f 5b 6c 6e 5d 5b 5c 64 78 5d 5b 30 31 32 33 35 39 63 5d 5b 61 Data Ascii: [v,I],[d,_]],[/(macintosh);/i],[f,[v,I]],[/\b(sh-?[altvz]?\d\d[a-ekm]?)/i],[f,[v,L],[d,m]],[/\b((?:ag[rs][23]?\|bah2?\|sht?\|btv)-a?[lw]\d{2})\b(?!.+d\/s)/i],[f,[v,N],[d,_]],[/(?:huawei\|honor)([-\w ]+)[;\)]/i,/\b(nexus 6p\|\w{2,4}e?-[atu]?[ln][\dx][012359c][a
2025-01-09 23:22:25 UTC	1369	IN	Data Raw: 77 20 5d 2b 29 2f 69 2c 2f 6c 65 6e 6f 76 6f 20 3f 28 73 5b 35 36 5d 30 30 30 5b 2d 5c 77 5d 2b 7c 74 61 62 28 3f 3a 5b 5c 77 20 5d 2b 29 7c 79 74 5b 2d 5c 64 5c 77 5d 7b 36 7d 7c 74 62 5b 2d 5c 64 5c 77 5d 7b 36 7d 29 2f 69 5d 2c 5b 66 2c 5b 76 2c 22 4c 65 6e 6f 76 6f 22 5d 2c 5b 64 2c 5f 5d 5d 2c 5b 2f 28 3f 3a 6d 61 65 6d 6f 7c 6e 6f 6b 69 61 29 2e 2a 28 6e 39 30 30 7c 6c 75 6d 69 61 20 5c 64 2b 29 2f 69 2c 2f 6e 6f 6b 69 61 5b 2d 5f 20 5d 3f 28 5b 2d 5c 77 5c 2e 5d 2a 29 2f 69 5d 2c 5b 5b 66 2c 2f 5f 2f 67 2c 22 20 22 5d 2c 5b 76 2c 22 4e 6f 6b 69 61 22 5d 2c 5b 64 2c 6d 5d 5d 2c 5b 2f 28 70 69 78 65 6c 20 63 29 5c 62 2f 69 5d 2c 5b 66 2c 5b 76 2c 43 5d 2c 5b 64 2c 5f 5d 5d 2c 5b 2f 64 72 6f 69 64 2e 2b 3b 20 28 70 69 78 65 6c 5b 5c 64 61 78 6c 20 5d Data Ascii: w ]+)/i,/lenovo ?(s[56]000[-\w]+\|tab(?:[\w ]+)\|yt[-\d\w]{6}\|tb[-\d\w]{6})/i],[f,[v,"Lenovo"],[d,_]],[/(?:maemo\|nokia).(n900\|lumia \d+)/i,/nokia[-_ ]?([-\w\.])/i],[[f,/_/g," "],[v,"Nokia"],[d,m]],[/(pixel c)\b/i],[f,[v,C],[d,_]],[/droid.+; (pixel[\daxl ]
2025-01-09 23:22:25 UTC	1369	IN	Data Raw: 20 6e 6f 74 65 29 20 62 75 69 2f 69 2c 2f 5c 62 6d 7a 2d 28 5b 2d 5c 77 5d 7b 32 2c 7d 29 2f 69 5d 2c 5b 66 2c 5b 76 2c 22 4d 65 69 7a 75 22 5d 2c 5b 64 2c 6d 5d 5d 2c 5b 2f 28 62 6c 61 63 6b 62 65 72 72 79 7c 62 65 6e 71 7c 70 61 6c 6d 28 3f 3d 5c 2d 29 7c 73 6f 6e 79 65 72 69 63 73 73 6f 6e 7c 61 63 65 72 7c 61 73 75 73 7c 64 65 6c 6c 7c 6d 65 69 7a 75 7c 6d 6f 74 6f 72 6f 6c 61 7c 70 6f 6c 79 74 72 6f 6e 29 5b 2d 5f 20 5d 3f 28 5b 2d 5c 77 5d 2a 29 2f 69 2c 2f 28 68 70 29 20 28 5b 5c 77 20 5d 2b 5c 77 29 2f 69 2c 2f 28 61 73 75 73 29 2d 3f 28 5c 77 2b 29 2f 69 2c 2f 28 6d 69 63 72 6f 73 6f 66 74 29 3b 20 28 6c 75 6d 69 61 5b 5c 77 20 5d 2b 29 2f 69 2c 2f 28 6c 65 6e 6f 76 6f 29 5b 2d 5f 20 5d 3f 28 5b 2d 5c 77 5d 2b 29 2f 69 2c 2f 28 6a 6f 6c 6c 61 29 Data Ascii: note) bui/i,/\bmz-([-\w]{2,})/i],[f,[v,"Meizu"],[d,m]],[/(blackberry\|benq\|palm(?=\-)\|sonyericsson\|acer\|asus\|dell\|meizu\|motorola\|polytron)[-_ ]?([-\w]*)/i,/(hp) ([\w ]+\w)/i,/(asus)-?(\w+)/i,/(microsoft); (lumia[\w ]+)/i,/(lenovo)[-_ ]?([-\w]+)/i,/(jolla)
2025-01-09 23:22:25 UTC	1369	IN	Data Raw: 5b 66 2c 5b 76 2c 22 49 6e 73 69 67 6e 69 61 22 5d 2c 5b 64 2c 5f 5d 5d 2c 5b 2f 5c 62 28 28 6e 78 61 7c 6e 65 78 74 29 2d 3f 5c 77 7b 30 2c 39 7d 29 20 62 2f 69 5d 2c 5b 66 2c 5b 76 2c 22 4e 65 78 74 42 6f 6f 6b 22 5d 2c 5b 64 2c 5f 5d 5d 2c 5b 2f 5c 62 28 78 74 72 65 6d 65 5c 5f 29 3f 28 76 28 31 5b 30 34 35 5d 7c 32 5b 30 31 35 5d 7c 5b 33 34 36 39 5d 30 7c 37 5b 30 35 5d 29 29 20 62 2f 69 5d 2c 5b 5b 76 2c 22 56 6f 69 63 65 22 5d 2c 66 2c 5b 64 2c 6d 5d 5d 2c 5b 2f 5c 62 28 6c 76 74 65 6c 5c 2d 29 3f 28 76 31 5b 31 32 5d 29 20 62 2f 69 5d 2c 5b 5b 76 2c 22 4c 76 54 65 6c 22 5d 2c 66 2c 5b 64 2c 6d 5d 5d 2c 5b 2f 5c 62 28 70 68 2d 31 29 20 2f 69 5d 2c 5b 66 2c 5b 76 2c 22 45 73 73 65 6e 74 69 61 6c 22 5d 2c 5b 64 2c 6d 5d 5d 2c 5b 2f 5c 62 28 76 28 31 Data Ascii: [f,[v,"Insignia"],[d,_]],[/\b((nxa\|next)-?\w{0,9}) b/i],[f,[v,"NextBook"],[d,_]],[/\b(xtreme\_)?(v(1[045]\|2[015]\|[3469]0\|7[05])) b/i],[[v,"Voice"],f,[d,m]],[/\b(lvtel\-)?(v1[12]) b/i],[[v,"LvTel"],f,[d,m]],[/\b(ph-1) /i],[f,[v,"Essential"],[d,m]],[/\b(v(1
2025-01-09 23:22:25 UTC	1369	IN	Data Raw: 66 2c 5b 64 2c 67 5d 5d 2c 5b 2f 64 72 6f 69 64 2e 2b 3b 20 28 73 68 69 65 6c 64 29 20 62 75 69 2f 69 5d 2c 5b 66 2c 5b 76 2c 22 4e 76 69 64 69 61 22 5d 2c 5b 64 2c 67 5d 5d 2c 5b 2f 28 70 6c 61 79 73 74 61 74 69 6f 6e 20 5b 33 34 35 70 6f 72 74 61 62 6c 65 76 69 5d 2b 29 2f 69 5d 2c 5b 66 2c 5b 76 2c 56 5d 2c 5b 64 2c 67 5d 5d 2c 5b 2f 5c 62 28 78 62 6f 78 28 3f 3a 20 6f 6e 65 29 3f 28 3f 21 3b 20 78 62 6f 78 29 29 5b 5c 29 3b 20 5d 2f 69 5d 2c 5b 66 2c 5b 76 2c 4f 5d 2c 5b 64 2c 67 5d 5d 2c 5b 2f 28 28 70 65 62 62 6c 65 29 29 61 70 70 2f 69 5d 2c 5b 76 2c 66 2c 5b 64 2c 77 5d 5d 2c 5b 2f 64 72 6f 69 64 2e 2b 3b 20 28 67 6c 61 73 73 29 20 5c 64 2f 69 5d 2c 5b 66 2c 5b 76 2c 43 5d 2c 5b 64 2c 77 5d 5d 2c 5b 2f 64 72 6f 69 64 2e 2b 3b 20 28 77 74 36 33 3f Data Ascii: f,[d,g]],[/droid.+; (shield) bui/i],[f,[v,"Nvidia"],[d,g]],[/(playstation [345portablevi]+)/i],[f,[v,V],[d,g]],[/\b(xbox(?: one)?(?!; xbox))[\); ]/i],[f,[v,O],[d,g]],[/((pebble))app/i],[v,f,[d,w]],[/droid.+; (glass) \d/i],[f,[v,C],[d,w]],[/droid.+; (wt63?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.10	50113	18.173.205.126	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:25 UTC	800	OUT	GET /lead-generation-sites/medicare/bbb_logo_gray.1716543816.svg HTTP/1.1 Host: cdn.gohealth.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_aw=GCL.1736464944.EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE; _gcl_gs=2.1.k5$i1736464937$u41793726; _gcl_au=1.1.1804017665.1736464944
2025-01-09 23:22:26 UTC	498	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 19010 Connection: close Last-Modified: Wed, 18 Dec 2024 08:40:29 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 09 Jan 2025 23:22:25 GMT ETag: "0cb0d20627d16b3987097865827dbd72" X-Cache: Hit from cloudfront Via: 1.1 daf01c71790f42e645ae4024c607941e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: gAzv_OZLclkyahqv3xC55tLISZGVey84th0CelJZpXqu4b1JT3-sfw== Age: 1
2025-01-09 23:22:26 UTC	16384	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 32 34 22 20 68 65 69 67 68 74 3d 22 34 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 34 20 34 33 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 32 33 2e 37 33 37 20 33 36 2e 38 35 32 39 43 31 32 33 2e 37 33 37 20 34 30 2e 31 30 33 32 20 31 32 31 2e 30 39 36 20 34 32 2e 37 33 38 20 31 31 37 2e 38 33 37 20 34 32 2e 37 33 38 48 35 2e 39 30 30 32 33 43 32 2e 36 34 31 35 36 20 34 32 2e 37 33 38 20 30 2e 30 30 30 32 34 34 31 34 31 20 34 30 2e 31 30 33 32 20 30 2e 30 30 30 32 34 34 31 34 31 20 33 36 2e 38 35 32 39 56 36 2e 31 32 30 39 36 43 30 2e 30 30 30 32 34 34 31 34 31 20 32 2e Data Ascii: <svg width="124" height="43" viewBox="0 0 124 43" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M123.737 36.8529C123.737 40.1032 121.096 42.738 117.837 42.738H5.90023C2.64156 42.738 0.000244141 40.1032 0.000244141 36.8529V6.12096C0.000244141 2.
2025-01-09 23:22:26 UTC	2626	IN	Data Raw: 20 31 30 35 2e 35 39 35 20 32 37 2e 36 33 33 36 20 31 30 35 2e 35 34 37 20 32 37 2e 35 35 30 31 43 31 30 35 2e 34 39 38 20 32 37 2e 34 36 36 39 20 31 30 35 2e 34 37 33 20 32 37 2e 33 36 33 37 20 31 30 35 2e 34 37 33 20 32 37 2e 32 34 43 31 30 35 2e 34 37 33 20 32 37 2e 31 35 32 37 20 31 30 35 2e 34 39 33 20 32 37 2e 30 36 39 34 20 31 30 35 2e 35 33 20 32 36 2e 39 38 39 37 43 31 30 35 2e 35 36 38 20 32 36 2e 39 31 20 31 30 35 2e 36 33 31 20 32 36 2e 38 33 37 33 20 31 30 35 2e 37 32 31 20 32 36 2e 37 37 31 37 43 31 30 35 2e 38 31 20 32 36 2e 37 30 36 36 20 31 30 35 2e 39 32 36 20 32 36 2e 36 35 33 38 20 31 30 36 2e 30 36 38 20 32 36 2e 36 31 34 43 31 30 36 2e 32 31 20 32 36 2e 35 37 34 31 20 31 30 36 2e 33 38 35 20 32 36 2e 35 35 34 32 20 31 30 36 2e 35 39 Data Ascii: 105.595 27.6336 105.547 27.5501C105.498 27.4669 105.473 27.3637 105.473 27.24C105.473 27.1527 105.493 27.0694 105.53 26.9897C105.568 26.91 105.631 26.8373 105.721 26.7717C105.81 26.7066 105.926 26.6538 106.068 26.614C106.21 26.5741 106.385 26.5542 106.59

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.10	50123	18.173.205.63	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:25 UTC	570	OUT	GET /lead-generation-sites/medicare/linkedin_logo_dark_gray.1724069057.svg HTTP/1.1 Host: cdn.gohealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_aw=GCL.1736464944.EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE; _gcl_gs=2.1.k5$i1736464937$u41793726; _gcl_au=1.1.1804017665.1736464944
2025-01-09 23:22:26 UTC	496	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 847 Connection: close Last-Modified: Wed, 18 Dec 2024 08:40:29 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 09 Jan 2025 23:22:24 GMT ETag: "b107c91992bbe80c09488d4219ea6a14" X-Cache: Hit from cloudfront Via: 1.1 b4c8f37704271e217979234a38712c42.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: oufZSnGJoGV-BKTx_2TjUYiKryGycGU1R5rVbFG1tjK3FdoxGp85iw== Age: 2
2025-01-09 23:22:26 UTC	847	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 34 2e 38 36 34 20 32 31 2e 37 37 31 37 48 32 31 2e 30 32 35 33 56 31 36 2e 35 35 31 38 43 32 31 2e 30 32 35 33 20 31 35 2e 37 32 38 31 20 32 30 2e 33 33 37 33 20 31 35 2e 30 35 39 37 20 31 39 2e 34 39 30 37 20 31 35 2e 30 35 39 37 43 31 38 2e 36 34 31 33 20 31 35 2e 30 35 39 37 20 31 37 2e 39 35 34 37 20 31 35 2e 37 32 38 Data Ascii: <svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M24.864 21.7717H21.0253V16.5518C21.0253 15.7281 20.3373 15.0597 19.4907 15.0597C18.6413 15.0597 17.9547 15.728

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.10	50122	18.173.205.63	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:25 UTC	563	OUT	GET /lead-generation-sites/medicare/norton_logo_gray.1716543816.svg HTTP/1.1 Host: cdn.gohealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_aw=GCL.1736464944.EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE; _gcl_gs=2.1.k5$i1736464937$u41793726; _gcl_au=1.1.1804017665.1736464944
2025-01-09 23:22:26 UTC	497	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 7131 Connection: close Last-Modified: Wed, 18 Dec 2024 08:40:29 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 09 Jan 2025 23:22:24 GMT ETag: "ab9c9a4ea610572c867ef77362e54d3c" X-Cache: Hit from cloudfront Via: 1.1 a9a00cd74e5659e3b49c7fab5dc2863a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: Rwk3plbFnC5jwE4M2x47XA-dmoQk4vT3ad9fhbR3HMYjDoRaPBu4rw== Age: 2
2025-01-09 23:22:26 UTC	7131	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 39 33 22 20 68 65 69 67 68 74 3d 22 33 39 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 39 33 20 33 39 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 5f 31 36 35 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 6c 75 6d 69 6e 61 6e 63 65 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 31 22 20 79 3d 22 36 22 20 77 69 64 74 68 3d 22 39 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 Data Ascii: <svg width="93" height="39" viewBox="0 0 93 39" fill="none" xmlns="http://www.w3.org/2000/svg"><mask id="mask0_2_165" style="mask-type:luminance" maskUnits="userSpaceOnUse" x="1" y="6" width="92" height="32"><path fill-rule="evenodd" clip-rule="evenodd"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.10	50128	104.18.66.57	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:25 UTC	731	OUT	GET /client_storage/a24403740715.html HTTP/1.1 Host: a24403740715.cdn.optimizely.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:25 UTC	623	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:25 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Ray: 8ff82b57f8b4191e-EWR CF-Cache-Status: HIT Age: 76 Cache-Control: max-age=120 Last-Modified: Tue, 07 Jan 2025 22:26:10 GMT x-amz-id-2: FVLUp3n16wnJmR5WjeTAuvx9wcq4nyADLD7L1m9UqGgAGe0MAQhnKafYFPo6LbbPPIrmnTIRuv8= x-amz-meta-pci_enabled: False x-amz-replication-status: COMPLETED x-amz-request-id: QDY1YSDPW6EGF49Z x-amz-server-side-encryption: AES256 x-amz-version-id: k_PGYErAGbd_QXuDBr1.knJAO_hc4DC1 Server-Timing: cfCacheStatus;desc="HIT" Server: cloudflare
2025-01-09 23:22:25 UTC	746	IN	Data Raw: 37 39 62 0d 0a 0a 3c 73 63 72 69 70 74 3e 0a 0a 76 61 72 20 61 6c 6c 6f 77 65 64 4f 72 69 67 69 6e 73 20 3d 20 5b 5b 22 5e 68 74 74 70 73 3f 3a 2f 2f 28 2e 2b 5c 5c 2e 29 3f 77 77 77 5c 5c 2e 67 6f 6d 65 64 69 63 61 72 65 5c 5c 2e 63 6f 6d 24 22 2c 20 22 22 5d 2c 20 5b 22 5e 68 74 74 70 73 3f 3a 2f 2f 28 2e 2b 5c 5c 2e 29 3f 67 6f 68 65 61 6c 74 68 5c 5c 2e 63 6f 6d 24 22 2c 20 22 22 5d 2c 20 5b 22 5e 68 74 74 70 73 3f 3a 2f 2f 28 2e 2b 5c 5c 2e 29 3f 73 75 72 76 65 79 5c 5c 2e 67 6f 68 65 61 6c 74 68 69 6e 73 75 72 61 6e 63 65 5c 5c 2e 63 6f 6d 24 22 2c 20 22 22 5d 2c 20 5b 22 5e 68 74 74 70 73 3f 3a 2f 2f 28 2e 2b 5c 5c 2e 29 3f 69 6e 74 65 72 6e 61 6c 5c 5c 2e 67 6f 68 65 61 6c 74 68 5c 5c 2e 6e 65 74 24 22 2c 20 22 22 5d 2c 20 5b 22 5e 68 74 74 70 73 Data Ascii: 79b<script>var allowedOrigins = [["^https?://(.+\\.)?www\\.gomedicare\\.com$", ""], ["^https?://(.+\\.)?gohealth\\.com$", ""], ["^https?://(.+\\.)?survey\\.gohealthinsurance\\.com$", ""], ["^https?://(.+\\.)?internal\\.gohealth\\.net$", ""], ["^https
2025-01-09 23:22:25 UTC	1208	IN	Data Raw: 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 29 7b 69 66 28 21 72 29 7b 76 61 72 20 69 3d 7b 69 64 3a 22 69 66 72 61 6d 65 65 72 72 6f 72 22 2c 74 79 70 65 3a 22 45 52 52 4f 52 22 2c 72 65 73 70 6f 6e 73 65 3a 22 45 72 72 6f 72 20 61 63 63 65 73 73 69 6e 67 20 6c 6f 63 61 6c 53 74 6f 72 61 67 65 3a 20 22 2b 28 72 3d 65 3f 65 2e 74 6f 53 74 72 69 6e 67 28 29 3a 22 4c 6f 63 61 6c 73 74 6f 72 61 67 65 20 69 73 20 75 6e 64 65 66 69 6e 65 64 22 29 7d 3b 30 2c 65 76 65 6e 74 2e 73 6f 75 72 63 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 69 29 2c 65 76 65 6e 74 2e 6f 72 69 67 69 6e 29 7d 7d 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: )}function p(e){if(!r){var i={id:"iframeerror",type:"ERROR",response:"Error accessing localStorage: "+(r=e?e.toString():"Localstorage is undefined")};0,event.source.postMessage(JSON.stringify(i),event.origin)}}window.addEventListener("message",function(e)
2025-01-09 23:22:25 UTC	480	IN	Data Raw: 31 64 39 0d 0a 3c 73 63 72 69 70 74 20 64 65 66 65 72 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 63 6c 6f 75 64 66 6c 61 72 65 69 6e 73 69 67 68 74 73 2e 63 6f 6d 2f 62 65 61 63 6f 6e 2e 6d 69 6e 2e 6a 73 2f 76 63 64 31 35 63 62 65 37 37 37 32 66 34 39 63 33 39 39 63 36 61 35 62 61 62 66 32 32 63 31 32 34 31 37 31 37 36 38 39 31 37 36 30 31 35 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 35 31 32 2d 5a 70 73 4f 6d 6c 52 51 56 36 79 39 30 37 54 49 30 64 4b 42 48 71 39 4d 64 32 39 6e 6e 61 45 49 50 6c 6b 66 38 34 72 6e 61 45 52 6e 71 36 7a 76 57 76 50 55 71 72 32 66 74 38 4d 31 61 53 32 38 6f 4e 37 32 50 64 72 43 7a 53 6a 59 34 55 36 56 61 41 77 31 45 51 3d 3d 22 20 64 61 74 61 2d 63 66 2d 62 65 61 63 6f 6e 3d 27 7b 22 72 61 79 49 64 Data Ascii: 1d9<script defer src="https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015" integrity="sha512-ZpsOmlRQV6y907TI0dKBHq9Md29nnaEIPlkf84rnaERnq6zvWvPUqr2ft8M1aS28oN72PdrCzSjY4U6VaAw1EQ==" data-cf-beacon='{"rayId
2025-01-09 23:22:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.10	50120	18.173.205.63	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:25 UTC	571	OUT	GET /lead-generation-sites/medicare/instagram_logo_dark_gray.1724069057.svg HTTP/1.1 Host: cdn.gohealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_aw=GCL.1736464944.EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE; _gcl_gs=2.1.k5$i1736464937$u41793726; _gcl_au=1.1.1804017665.1736464944
2025-01-09 23:22:26 UTC	497	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 2734 Connection: close Date: Thu, 09 Jan 2025 23:22:24 GMT Last-Modified: Wed, 18 Dec 2024 08:40:29 GMT ETag: "09abdedb9d270d570ed3cf9d37d1c856" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 5f2b92535eb1297cf75fcc5a4a4e50cc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: MMW5E_98vL_yXzO90DTAR9x-Kqd9cQw7ISvzovb6-d03CO8uAcdk2Q== Age: 3
2025-01-09 23:22:26 UTC	2734	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 20 33 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 32 30 2e 35 33 38 20 31 32 2e 35 38 31 32 43 31 39 2e 39 33 35 33 20 31 32 2e 35 38 35 32 20 31 39 2e 34 33 32 37 20 31 32 2e 30 38 37 39 20 31 39 2e 34 33 32 37 20 31 31 2e 34 38 37 39 43 31 39 2e 34 33 34 20 31 30 2e 38 39 31 39 20 31 39 2e 39 32 32 20 31 30 2e 34 30 32 36 20 32 30 2e 35 32 32 20 31 30 2e 33 39 37 32 43 32 Data Ascii: <svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M20.538 12.5812C19.9353 12.5852 19.4327 12.0879 19.4327 11.4879C19.434 10.8919 19.922 10.4026 20.522 10.3972C2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.10	50116	18.66.147.56	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:25 UTC	648	OUT	GET /lead-generation-sites/medicare/gohealth_logo_gray.1716542403.svg HTTP/1.1 Host: cdn.qa.gohealth.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:26 UTC	495	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 7043 Connection: close Last-Modified: Thu, 09 Jan 2025 15:47:34 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 09 Jan 2025 23:22:27 GMT ETag: "027d4df1a0b41fe0da94ba6111ca03e7" X-Cache: RefreshHit from cloudfront Via: 1.1 19dbc4cbbe0be3dca8e57283a83b57c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: zOuGVsiI1JiANBQHDpiP8xmL7Y1ZoBwH0CWqPqT3tTomW_X6TOYOUg==
2025-01-09 23:22:26 UTC	7043	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 35 37 22 20 68 65 69 67 68 74 3d 22 33 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 37 20 33 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 5f 36 38 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 6c 75 6d 69 6e 61 6e 63 65 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 38 22 20 68 65 69 67 68 74 3d 22 33 31 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 Data Ascii: <svg width="157" height="31" viewBox="0 0 157 31" fill="none" xmlns="http://www.w3.org/2000/svg"><mask id="mask0_2_68" style="mask-type:luminance" maskUnits="userSpaceOnUse" x="0" y="0" width="28" height="31"><path fill-rule="evenodd" clip-rule="evenodd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.10	50117	18.66.147.56	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:25 UTC	645	OUT	GET /lead-generation-sites/medicare/arrow-down-gray.1726470758.svg HTTP/1.1 Host: cdn.qa.gohealth.xyz Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:26 UTC	494	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 202 Connection: close Last-Modified: Thu, 09 Jan 2025 15:47:34 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 09 Jan 2025 23:22:27 GMT ETag: "ca543d8a57515596482a871320d39416" X-Cache: RefreshHit from cloudfront Via: 1.1 9c920cc684a38b53bc9c7a44ba794874.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: SK_eTBoNl2QihqkwmbmSTD8hxcvAgxZek5NN0UV58hh2b1oCQa8VUg==
2025-01-09 23:22:26 UTC	202	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 33 22 20 68 65 69 67 68 74 3d 22 32 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 33 20 32 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 36 2e 32 30 32 33 39 20 38 2e 33 32 34 33 34 4c 31 31 2e 37 30 32 34 20 31 33 2e 38 32 34 33 4c 31 37 2e 32 30 32 34 20 38 2e 33 32 34 33 34 22 20 73 74 72 6f 6b 65 3d 22 23 31 42 31 44 31 46 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 32 22 20 2f 3e 0a 3c 2f 73 76 67 3e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="23" height="22" viewBox="0 0 23 22" fill="none"> <path d="M6.20239 8.32434L11.7024 13.8243L17.2024 8.32434" stroke="#1B1D1F" stroke-width="2" /></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.10	50125	157.240.0.6	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:25 UTC	542	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:26 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-OUgFPsNH' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2025-01-09 23:22:26 UTC	1671	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2025-01-09 23:22:26 UTC	1	IN	Data Raw: 2f Data Ascii: /
2025-01-09 23:22:26 UTC	14680	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2025-01-09 23:22:26 UTC	16384	IN	Data Raw: 7c 64 3d 3d 3d 22 47 54 4d 22 7c 7c 64 3d 3d 3d 22 4a 53 4f 4e 5f 4c 44 22 7c 7c 64 3d 3d 3d 22 4d 45 54 41 5f 54 41 47 22 7c 7c 64 3d 3d 3d 22 4f 50 45 4e 5f 47 52 41 50 48 22 7c 7c 64 3d 3d 3d 22 52 44 46 41 22 7c 7c 64 3d 3d 3d 22 53 43 48 45 4d 41 5f 44 4f 54 5f 4f 52 47 22 7c 7c 64 3d 3d 3d 22 55 52 49 22 3f 64 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 63 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 26 26 64 21 3d 6e 75 6c 6c 3f 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 62 2c 65 76 65 6e 74 5f 74 79 70 65 3a 63 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 64 2c 69 64 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e Data Ascii: \|d==="GTM"\|\|d==="JSON_LD"\|\|d==="META_TAG"\|\|d==="OPEN_GRAPH"\|\|d==="RDFA"\|\|d==="SCHEMA_DOT_ORG"\|\|d==="URI"?d:null;return b!=null&&c!=null&&a!=null&&d!=null?{domain_uri:b,event_type:c,extractor_type:d,id:a}:null}function g(a){if(a==null\|\|(typeof a==="undefin
2025-01-09 23:22:26 UTC	16384	IN	Data Raw: 75 72 6e 20 6a 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 70 65 72 69 6d 65 6e 74 73 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 54 79 70 65 64 3b 61 2e 63 6f 65 72 63 65 3b 61 2e 65 6e 66 6f Data Ascii: urn j.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsExperimentsTypedef",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b=a.Typed;a.coerce;a.enfo
2025-01-09 23:22:26 UTC	16384	IN	Data Raw: 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 42 61 73 65 45 76 65 6e 74 22 29 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 69 78 65 6c 54 79 70 65 64 65 66 22 29 2c 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 64 3d 63 2e 54 79 70 65 64 2c 65 3d 63 2e 63 6f 65 72 63 65 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 63 2c 66 2c 67 2c 68 29 7b 61 3d 65 28 61 2c 62 29 3b 63 3d 65 28 63 2c 64 2e 73 74 72 69 6e 67 28 29 29 3b 76 61 72 20 6a 3d 7b 7d 3b 66 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 66 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 Data Ascii: odules("SignalsFBEventsBaseEvent"),b=f.getFbeventsModules("SignalsFBEventsPixelTypedef"),c=f.getFbeventsModules("SignalsFBEventsTyped"),d=c.Typed,e=c.coerce;function g(a,c,f,g,h){a=e(a,b);c=e(c,d.string());var j={};f!=null&&(typeof f==="undefined"?"undefi
2025-01-09 23:22:26 UTC	1703	IN	Data Raw: 62 2e 67 65 74 50 72 6f 74 6f 63 6f 6c 2e 63 61 6c 6c 26 26 62 2e 67 65 74 50 72 6f 74 6f 63 6f 6c 28 29 3d 3d 3d 64 3f 62 3a 6e 75 6c 6c 3b 62 21 3d 3d 6e 75 6c 6c 26 26 28 6a 5b 61 5b 30 5d 5d 3d 6a 5b 61 5b 30 5d 5d 7c 7c 7b 7d 2c 6a 5b 61 5b 30 5d 5d 5b 61 5b 31 5d 5d 3d 62 29 3b 72 65 74 75 72 6e 20 62 21 3d 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 61 3d 6a 5b 61 2e 69 64 5d 7c 7c 7b 7d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 2e 70 75 73 68 28 61 5b 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 61 29 7b 72 65 74 75 72 6e 20 6e 28 61 29 2e 6c Data Ascii: b.getProtocol.call&&b.getProtocol()===d?b:null;b!==null&&(j[a[0]]=j[a[0]]\|\|{},j[a[0]][a[1]]=b);return b!==null}function n(a){var b=[];a=j[a.id]\|\|{};for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b.push(a[c]);return b}function o(a){return n(a).l
2025-01-09 23:22:26 UTC	14681	IN	Data Raw: 6c 26 26 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 3d 61 29 7d 7d 2c 7b 6b 65 79 3a 22 61 64 64 45 6e 63 6f 64 69 6e 67 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 74 68 69 73 3b 69 66 28 67 2e 66 62 71 3d 3d 6e 75 6c 6c 7c 7c 67 2e 66 62 71 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 69 66 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 66 3d 62 28 67 2e 66 62 71 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 2c 64 2e 6f 62 6a 65 63 74 28 29 29 3b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 66 3d 6b 28 69 28 6a 28 Data Ascii: l&&(this.moduleEncodings=a)}},{key:"addEncodings",value:function(a){var c=this;if(g.fbq==null\|\|g.fbq.__fbeventsResolvedModules==null)return;if(this.moduleEncodings==null)return;var f=b(g.fbq.__fbeventsResolvedModules,d.object());if(f==null)return;f=k(i(j(
2025-01-09 23:22:26 UTC	16384	IN	Data Raw: 6c 73 46 42 45 76 65 6e 74 73 4c 6f 67 67 69 6e 67 22 29 2c 63 3d 62 2e 6c 6f 67 45 72 72 6f 72 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 3b 76 61 72 20 64 3d 62 2e 6d 61 70 2c 65 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 61 72 61 6d 4c 69 73 74 22 29 2c 68 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 42 65 61 63 6f 6e 22 29 2c 69 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 47 45 54 22 29 3b 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 Data Ascii: lsFBEventsLogging"),c=b.logError;b=f.getFbeventsModules("SignalsFBEventsUtils");var d=b.map,e=f.getFbeventsModules("SignalsParamList"),h=f.getFbeventsModules("signalsFBEventsSendBeacon"),i=f.getFbeventsModules("signalsFBEventsSendGET");f.getFbeventsModule
2025-01-09 23:22:26 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 20 70 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 71 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 26 26 74 79 70 65 6f 66 20 61 21 3d 3d 22 6e 75 6d 62 65 72 22 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d Data Ascii: nction p(){return function(a){if(typeof a!=="string")throw new g();return a}}function q(){return function(a){if(typeof a!=="string"&&typeof a!=="number")throw new g();return a}}function r(){return function(a){if((typeof a==="undefined"?"undefined":i(a))!=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.10	50118	18.66.102.11	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:25 UTC	546	OUT	GET /c/hotjar-1419317.js?sv=7 HTTP/1.1 Host: static.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:26 UTC	640	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Thu, 09 Jan 2025 23:22:24 GMT Access-Control-Allow-Origin: * Cache-Control: max-age=60 Cross-Origin-Resource-Policy: cross-origin ETag: W/16fa72f22822661137fde4156a344296 Strict-Transport-Security: max-age=2592000; includeSubDomains X-Cache-Hit: 1 X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c2e56cd54e2593df95ccca8a6d98c958.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: 50IQZE1uyLO0w_kB1GVIKVHAWhtwVpGjceaqap8zlFV_DeljLm6qUg== Age: 2
2025-01-09 23:22:26 UTC	13116	IN	Data Raw: 33 33 33 34 0d 0a 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 3d 20 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 7c 7c 20 7b 22 73 69 74 65 5f 69 64 22 3a 31 34 31 39 33 31 37 2c 22 72 65 63 5f 76 61 6c 75 65 22 3a 30 2e 30 2c 22 73 74 61 74 65 5f 63 68 61 6e 67 65 5f 6c 69 73 74 65 6e 5f 6d 6f 64 65 22 3a 22 61 75 74 6f 6d 61 74 69 63 22 2c 22 72 65 63 6f 72 64 22 3a 74 72 75 65 2c 22 63 6f 6e 74 69 6e 75 6f 75 73 5f 63 61 70 74 75 72 65 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 72 65 63 6f 72 64 69 6e 67 5f 63 61 70 74 75 72 65 5f 6b 65 79 73 74 72 6f 6b 65 73 22 3a 66 61 6c 73 65 2c 22 73 65 73 73 69 6f 6e 5f 63 61 70 74 75 72 65 5f 63 6f 6e 73 6f 6c 65 5f 63 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 Data Ascii: 3334window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":1419317,"rec_value":0.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":false,"session_capture_console_consent":false,"
2025-01-09 23:22:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.10	50127	3.248.162.96	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:26 UTC	401	OUT	GET /mon HTTP/1.1 Host: obseu.netgreencolumn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cg_uuid=f1d025948f0126debe7dbb2de87ffefc
2025-01-09 23:22:26 UTC	268	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: undefined Content-Length: 0 Content-Type: application/json Date: Thu, 09 Jan 2025 23:22:26 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.10	50130	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:26 UTC	1454	OUT	POST /api/v1/event/lead-generation_consumer_loads-lead-form-action HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive Content-Length: 522 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" content-type: application/json;charset=utf-8 gh-request-id: 392a938b-a094-4bd6-9d72-ce521ff09bbd sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://medicare.gohealth.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: form_url=%2Fmedicare-marketplace; gh-session-id=fc99a7c8-08f9-4875-be9f-f97a9821de17; _gcl_aw=GCL.1736464944.EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE; _gcl_gs=2.1.k5$i1736464937$u41793726; _gcl_au=1.1.1804017665.1736464944; optimizelyEndUserId=oeu1736464944079r0.8329921030541232; optimizelySession=1736464944099
2025-01-09 23:22:26 UTC	522	OUT	Data Raw: 7b 22 61 63 74 69 76 69 74 79 4e 61 6d 65 22 3a 22 76 69 65 77 65 64 53 65 63 74 69 6f 6e 73 22 2c 22 61 63 74 69 76 69 74 79 56 61 6c 75 65 22 3a 22 77 65 6c 63 6f 6d 65 22 2c 22 6c 65 61 64 47 65 6e 65 72 61 74 69 6f 6e 49 64 22 3a 22 33 39 32 61 39 33 38 62 2d 61 30 39 34 2d 34 62 64 36 2d 39 64 37 32 2d 63 65 35 32 31 66 66 30 39 62 62 64 22 2c 22 63 6c 69 65 6e 74 49 64 22 3a 22 4e 4f 5f 49 4e 54 45 52 41 43 54 49 4f 4e 5f 49 44 22 2c 22 6c 69 6e 6b 49 64 22 3a 31 38 33 30 37 2c 22 72 65 66 65 72 72 61 6c 55 72 6c 22 3a 22 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 6d 65 64 69 63 61 72 65 2e 67 6f 68 65 61 6c 74 68 2e 63 6f 6d 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 64 69 63 61 72 65 2e 67 6f 68 65 61 6c 74 68 2e 63 6f 6d 2f 6d 65 64 69 63 Data Ascii: {"activityName":"viewedSections","activityValue":"welcome","leadGenerationId":"392a938b-a094-4bd6-9d72-ce521ff09bbd","clientId":"NO_INTERACTION_ID","linkId":18307,"referralUrl":"","domain":"medicare.gohealth.com","url":"https://medicare.gohealth.com/medic
2025-01-09 23:22:26 UTC	400	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:26 GMT Content-Type: application/json; charset=utf-8 Content-Length: 16 Connection: close access-control-allow-origin: * access-control-allow-headers: Origin, Content-Type, Authorization access-control-allow-methods: GET, OPTIONS, POST cache-control: public, max-age=3600 set-cookie: gh-session-id=fc99a7c8-08f9-4875-be9f-f97a9821de17; Path=/
2025-01-09 23:22:26 UTC	16	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d Data Ascii: {"success":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.10	50132	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:26 UTC	1440	OUT	POST /api/v1/event/lead-generation_consumer_click-ad HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive Content-Length: 264 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" content-type: application/json;charset=utf-8 gh-request-id: 392a938b-a094-4bd6-9d72-ce521ff09bbd sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://medicare.gohealth.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: form_url=%2Fmedicare-marketplace; gh-session-id=fc99a7c8-08f9-4875-be9f-f97a9821de17; _gcl_aw=GCL.1736464944.EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE; _gcl_gs=2.1.k5$i1736464937$u41793726; _gcl_au=1.1.1804017665.1736464944; optimizelyEndUserId=oeu1736464944079r0.8329921030541232; optimizelySession=1736464944099
2025-01-09 23:22:26 UTC	264	OUT	Data Raw: 7b 22 63 6c 69 65 6e 74 49 64 22 3a 22 4e 4f 5f 49 4e 54 45 52 41 43 54 49 4f 4e 5f 49 44 22 2c 22 6b 65 79 77 6f 72 64 22 3a 22 7b 6b 65 79 77 6f 72 64 7d 22 2c 22 61 64 47 72 6f 75 70 22 3a 22 7b 61 64 67 72 6f 75 70 69 64 7d 22 2c 22 6c 69 6e 6b 49 64 22 3a 31 38 33 30 37 2c 22 63 61 6d 70 61 69 67 6e 22 3a 22 22 2c 22 61 66 66 69 6c 69 61 74 65 49 64 22 3a 34 33 39 37 2c 22 64 65 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 64 69 63 61 72 65 2e 67 6f 68 65 61 6c 74 68 2e 63 6f 6d 2f 6d 65 64 69 63 61 72 65 2d 6d 61 72 6b 65 74 70 6c 61 63 65 22 2c 22 6c 65 61 64 47 65 6e 65 72 61 74 69 6f 6e 49 64 22 3a 22 33 39 32 61 39 33 38 62 2d 61 30 39 34 2d 34 62 64 36 2d 39 64 37 32 2d 63 65 35 32 31 66 66 30 39 62 62 64 22 2c 22 72 65 66 65 72 72 61 Data Ascii: {"clientId":"NO_INTERACTION_ID","keyword":"{keyword}","adGroup":"{adgroupid}","linkId":18307,"campaign":"","affiliateId":4397,"destUrl":"https://medicare.gohealth.com/medicare-marketplace","leadGenerationId":"392a938b-a094-4bd6-9d72-ce521ff09bbd","referra
2025-01-09 23:22:26 UTC	400	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:26 GMT Content-Type: application/json; charset=utf-8 Content-Length: 16 Connection: close access-control-allow-origin: * access-control-allow-headers: Origin, Content-Type, Authorization access-control-allow-methods: GET, OPTIONS, POST cache-control: public, max-age=3600 set-cookie: gh-session-id=fc99a7c8-08f9-4875-be9f-f97a9821de17; Path=/
2025-01-09 23:22:26 UTC	16	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d Data Ascii: {"success":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.10	50135	104.16.80.73	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:26 UTC	650	OUT	GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://a24403740715.cdn.optimizely.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://a24403740715.cdn.optimizely.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:26 UTC	373	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:26 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19948 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2024.6.1" Last-Modified: Thu, 06 Jun 2024 15:52:56 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8ff82b5d1ff44257-EWR
2025-01-09 23:22:26 UTC	1369	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 7c 7c 30 2c 69 3d 74 3b 72 65 74 75 72 6e 5b 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r+
2025-01-09 23:22:26 UTC	1369	IN	Data Raw: 72 20 69 3d 6e 28 36 39 39 29 2c 6f 3d 6e 28 37 35 32 29 2c 61 3d 6e 28 31 30 34 29 2c 63 3d 6e 28 35 30 38 29 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 74 3d 22 22 3b 69 66 28 74 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 3f 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 6f 72 69 67 69 6e 3a 22 22 2e 63 6f 6e 63 61 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2c 22 3a 2f 2f 22 29 2e 63 6f 6e 63 61 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 29 2c 65 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 69 66 28 30 3d 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 2f 22 29 29 74 2b 3d 65 3b 65 6c 73 65 20 74 72 79 7b 76 61 Data Ascii: r i=n(699),o=n(752),a=n(104),c=n(508);!function(){function e(e){var t="";if(t=window.location.origin?window.location.origin:"".concat(window.location.protocol,"://").concat(window.location.host),e&&"string"==typeof e)if(0===e.indexOf("/"))t+=e;else try{va
2025-01-09 23:22:26 UTC	1369	IN	Data Raw: 29 3d 3d 74 26 26 28 6e 75 6c 6c 3d 3d 77 3f 76 6f 69 64 20 30 3a 77 2e 74 72 69 67 67 65 72 65 64 29 7c 7c 50 28 29 2c 5f 28 74 29 7d 21 62 26 26 77 26 26 28 62 3d 21 30 2c 42 28 29 29 7d 65 6c 73 65 22 76 69 73 69 62 6c 65 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 29 29 3b 76 61 72 20 45 3d 7b 7d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 50 65 72 66 6f 72 6d 61 6e 63 65 4f 62 73 65 72 76 65 72 26 26 28 28 30 2c 61 2e 6f 6e 4c 43 50 29 28 78 29 2c 28 30 2c 61 2e 6f 6e 46 49 44 29 28 78 29 2c 28 30 2c 61 2e 6f 6e 46 43 50 29 28 78 29 2c 28 30 2c 61 2e 6f 6e 49 4e 50 29 28 78 29 2c 28 30 2c 61 2e 6f 6e 54 54 46 42 29 28 78 29 2c Data Ascii: )==t&&(null==w?void 0:w.triggered)\|\|P(),_(t)}!b&&w&&(b=!0,B())}else"visible"===document.visibilityState&&(new Date).getTime()}));var E={};"function"==typeof PerformanceObserver&&((0,a.onLCP)(x),(0,a.onFID)(x),(0,a.onFCP)(x),(0,a.onINP)(x),(0,a.onTTFB)(x),
2025-01-09 23:22:26 UTC	1369	IN	Data Raw: 2c 70 26 26 28 28 30 2c 6f 2e 73 65 6e 64 4f 62 6a 65 63 74 42 65 61 63 6f 6e 29 28 22 22 2c 61 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 21 31 2c 43 29 2c 76 6f 69 64 20 30 21 3d 3d 70 2e 66 6f 72 77 61 72 64 26 26 76 6f 69 64 20 30 21 3d 3d 70 2e 66 6f 72 77 61 72 64 2e 75 72 6c 26 26 28 30 2c 6f 2e 73 65 6e 64 4f 62 6a 65 63 74 42 65 61 63 6f 6e 29 28 22 22 2c 61 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 21 31 2c 70 2e 66 6f 72 77 61 72 64 2e 75 72 6c 29 29 29 7d 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 73 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 6e 61 76 69 67 61 74 69 6f 6e 22 29 5b 30 5d 2c 6e 3d 22 22 3b 74 72 79 7b 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 Data Ascii: ,p&&((0,o.sendObjectBeacon)("",a,(function(){}),!1,C),void 0!==p.forward&&void 0!==p.forward.url&&(0,o.sendObjectBeacon)("",a,(function(){}),!1,p.forward.url)))},B=function(){var t=function(){var t=s.getEntriesByType("navigation")[0],n="";try{n="function"
2025-01-09 23:22:26 UTC	1369	IN	Data Raw: 28 6f 2c 61 2c 63 29 7b 6e 3d 65 28 63 29 3b 76 61 72 20 75 3d 65 28 29 2c 73 3d 21 30 3b 72 65 74 75 72 6e 20 6e 3d 3d 75 26 26 28 73 3d 21 31 29 2c 73 26 26 28 41 28 29 26 26 28 28 6e 75 6c 6c 3d 3d 77 3f 76 6f 69 64 20 30 3a 77 2e 75 72 6c 29 3d 3d 75 26 26 28 6e 75 6c 6c 3d 3d 77 3f 76 6f 69 64 20 30 3a 77 2e 74 72 69 67 67 65 72 65 64 29 7c 7c 50 28 75 29 2c 5f 28 75 29 29 2c 69 28 29 29 2c 72 2e 61 70 70 6c 79 28 74 2c 5b 6f 2c 61 2c 63 5d 29 7d 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 6f 70 73 74 61 74 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 41 28 29 26 26 28 28 6e 75 6c 6c 3d 3d 77 3f 76 6f 69 64 20 30 3a 77 2e 75 72 6c 29 3d 3d 6e 26 26 28 6e 75 6c 6c 3d 3d 77 3f 76 6f 69 64 20 30 3a 77 2e 74 72 69 Data Ascii: (o,a,c){n=e(c);var u=e(),s=!0;return n==u&&(s=!1),s&&(A()&&((null==w?void 0:w.url)==u&&(null==w?void 0:w.triggered)\|\|P(u),_(u)),i()),r.apply(t,[o,a,c])},window.addEventListener("popstate",(function(t){A()&&((null==w?void 0:w.url)==n&&(null==w?void 0:w.tri
2025-01-09 23:22:26 UTC	1369	IN	Data Raw: 45 2e 69 6e 70 2e 65 6c 65 6d 65 6e 74 3d 63 2e 65 76 65 6e 74 54 61 72 67 65 74 2c 45 2e 69 6e 70 2e 6e 61 6d 65 3d 63 2e 65 76 65 6e 74 54 79 70 65 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 28 29 7b 72 65 74 75 72 6e 20 73 2e 74 69 6d 65 4f 72 69 67 69 6e 7d 66 75 6e 63 74 69 6f 6e 20 49 28 29 7b 69 66 28 70 26 26 70 2e 73 65 72 76 65 72 54 69 6d 69 6e 67 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 74 3d 30 2c 6e 3d 5b 22 6e 61 76 69 67 61 74 69 6f 6e 22 2c 22 72 65 73 6f 75 72 63 65 22 5d 3b 74 3c 6e 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 66 6f 72 28 76 61 72 20 72 3d 6e 5b 74 5d 2c 69 3d 30 2c 6f 3d 73 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 72 29 3b 69 3c 6f 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 61 3d 6f 5b 69 5d 2c 63 3d 61 Data Ascii: E.inp.element=c.eventTarget,E.inp.name=c.eventType))}}function F(){return s.timeOrigin}function I(){if(p&&p.serverTiming){for(var e=[],t=0,n=["navigation","resource"];t<n.length;t++)for(var r=n[t],i=0,o=s.getEntriesByType(r);i<o.length;i++){var a=o[i],c=a
2025-01-09 23:22:26 UTC	1369	IN	Data Raw: 29 7d 28 29 7d 2c 37 35 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 74 2e 73 65 6e 64 4f 62 6a 65 63 74 42 65 61 63 6f 6e 3d 76 6f 69 64 20 30 2c 74 2e 73 65 6e 64 4f 62 6a 65 63 74 42 65 61 63 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 29 7b 76 6f 69 64 20 30 3d 3d 3d 72 26 26 28 72 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 69 26 26 28 69 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 69 7c 7c 28 74 2e 73 69 74 65 54 6f 6b 65 6e 26 26 74 2e 76 65 72 73 69 6f 6e 73 2e 66 6c 3f 22 2f 63 64 6e 2d 63 67 69 2f 72 75 6d 3f 22 2e 63 6f 6e 63 61 74 28 65 29 3a 22 2f 63 64 6e 2d 63 67 69 2f 62 65 61 63 6f 6e 2f 70 65 72 66 6f 72 6d 61 6e 63 65 3f 22 2e 63 6f 6e Data Ascii: )}()},752:function(e,t){"use strict";t.__esModule=!0,t.sendObjectBeacon=void 0,t.sendObjectBeacon=function(e,t,n,r,i){void 0===r&&(r=!1),void 0===i&&(i=null);var o=i\|\|(t.siteToken&&t.versions.fl?"/cdn-cgi/rum?".concat(e):"/cdn-cgi/beacon/performance?".con
2025-01-09 23:22:26 UTC	1369	IN	Data Raw: 69 6e 67 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 29 72 65 74 75 72 6e 22 6c 6f 61 64 69 6e 67 22 3b 76 61 72 20 74 3d 61 28 29 3b 69 66 28 74 29 7b 69 66 28 65 3c 74 2e 64 6f 6d 49 6e 74 65 72 61 63 74 69 76 65 29 72 65 74 75 72 6e 22 6c 6f 61 64 69 6e 67 22 3b 69 66 28 30 3d 3d 3d 74 2e 64 6f 6d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 45 76 65 6e 74 53 74 61 72 74 7c 7c 65 3c 74 2e 64 6f 6d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 45 76 65 6e 74 53 74 61 72 74 29 72 65 74 75 72 6e 22 64 6f 6d 2d 69 6e 74 65 72 61 63 74 69 76 65 22 3b 69 66 28 30 3d 3d 3d 74 2e 64 6f 6d 43 6f 6d 70 6c 65 74 65 7c 7c 65 3c 74 2e 64 6f 6d 43 6f 6d 70 6c 65 74 65 29 72 65 74 75 72 6e 22 64 6f 6d 2d 63 6f 6e 74 65 6e 74 2d 6c 6f 61 64 65 64 22 7d 72 Data Ascii: ing"===document.readyState)return"loading";var t=a();if(t){if(e<t.domInteractive)return"loading";if(0===t.domContentLoadedEventStart\|\|e<t.domContentLoadedEventStart)return"dom-interactive";if(0===t.domComplete\|\|e<t.domComplete)return"dom-content-loaded"}r
2025-01-09 23:22:26 UTC	1369	IN	Data Raw: 65 29 7b 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 65 2e 67 65 74 45 6e 74 72 69 65 73 28 29 29 7d 29 29 7d 29 29 3b 72 65 74 75 72 6e 20 72 2e 6f 62 73 65 72 76 65 28 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 74 79 70 65 3a 65 2c 62 75 66 66 65 72 65 64 3a 21 30 7d 2c 6e 7c 7c 7b 7d 29 29 2c 72 7d 7d 63 61 74 63 68 28 65 29 7b 7d 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 2e 76 61 6c 75 65 3e 3d 30 26 26 28 61 7c 7c 72 29 26 26 28 28 6f 3d 74 2e 76 61 6c 75 65 2d 28 69 7c 7c 30 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 29 26 26 28 69 3d 74 2e 76 61 6c 75 65 2c 74 2e 64 65 6c 74 Data Ascii: e){Promise.resolve().then((function(){t(e.getEntries())}))}));return r.observe(Object.assign({type:e,buffered:!0},n\|\|{})),r}}catch(e){}},g=function(e,t,n,r){var i,o;return function(a){t.value>=0&&(a\|\|r)&&((o=t.value-(i\|\|0))\|\|void 0===i)&&(i=t.value,t.delt
2025-01-09 23:22:26 UTC	1369	IN	Data Raw: 7b 7d 2c 50 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 72 3d 43 28 29 2c 69 3d 70 28 22 46 43 50 22 29 2c 6f 3d 6d 28 22 70 61 69 6e 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 2e 6e 61 6d 65 26 26 28 6f 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 65 2e 73 74 61 72 74 54 69 6d 65 3c 72 2e 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 26 26 28 69 2e 76 61 6c 75 65 3d 4d 61 74 68 2e 6d 61 78 28 65 2e 73 74 61 72 74 54 69 6d 65 2d 76 28 29 2c 30 29 2c 69 2e 65 6e 74 72 69 65 73 2e 70 75 73 68 28 65 29 2c 6e 28 21 30 29 29 29 7d 29 29 7d 29 29 3b 6f 26 26 28 6e 3d 67 28 65 2c 69 2c 42 2c 74 2e Data Ascii: {},P((function(){var n,r=C(),i=p("FCP"),o=m("paint",(function(e){e.forEach((function(e){"first-contentful-paint"===e.name&&(o.disconnect(),e.startTime<r.firstHiddenTime&&(i.value=Math.max(e.startTime-v(),0),i.entries.push(e),n(!0)))}))}));o&&(n=g(e,i,B,t.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.10	50136	34.49.241.189	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:26 UTC	630	OUT	POST /v1/events HTTP/1.1 Host: logx.optimizely.com Connection: keep-alive Content-Length: 911 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://medicare.gohealth.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:26 UTC	911	OUT	Data Raw: 7b 22 61 63 63 6f 75 6e 74 5f 69 64 22 3a 22 32 34 34 30 33 37 34 30 37 31 35 22 2c 22 61 6e 6f 6e 79 6d 69 7a 65 5f 69 70 22 3a 74 72 75 65 2c 22 63 6c 69 65 6e 74 5f 6e 61 6d 65 22 3a 22 6a 73 22 2c 22 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 22 30 2e 32 31 38 2e 30 22 2c 22 65 6e 72 69 63 68 5f 64 65 63 69 73 69 6f 6e 73 22 3a 74 72 75 65 2c 22 70 72 6f 6a 65 63 74 5f 69 64 22 3a 22 32 34 35 34 37 38 31 30 32 34 37 22 2c 22 72 65 76 69 73 69 6f 6e 22 3a 22 33 35 33 30 22 2c 22 76 69 73 69 74 6f 72 73 22 3a 5b 7b 22 76 69 73 69 74 6f 72 5f 69 64 22 3a 22 6f 65 75 31 37 33 36 34 36 34 39 34 34 30 37 39 72 30 2e 38 33 32 39 39 32 31 30 33 30 35 34 31 32 33 32 22 2c 22 73 65 73 73 69 6f 6e 5f 69 64 22 3a 22 41 55 54 4f 22 2c 22 61 74 74 72 69 62 75 Data Ascii: {"account_id":"24403740715","anonymize_ip":true,"client_name":"js","client_version":"0.218.0","enrich_decisions":true,"project_id":"24547810247","revision":"3530","visitors":[{"visitor_id":"oeu1736464944079r0.8329921030541232","session_id":"AUTO","attribu
2025-01-09 23:22:26 UTC	604	IN	HTTP/1.1 204 No Content timing-allow-origin: * access-control-allow-credentials: true access-control-allow-origin: https://medicare.gohealth.com access-control-allow-headers: X-Requested-With,Content-Type,Accept,Origin,X-App-Trace-Id,X-Optimizely-Strict access-control-allow-methods: POST,OPTIONS access-control-expose-headers: X-Requested-With,Content-Type,Accept,Origin,X-App-Trace-Id Content-Type: text/plain X-Request-Id: 5e6937fe-13f9-4d11-a06f-3c94b17351f9 Date: Thu, 09 Jan 2025 23:22:26 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.10	50138	35.186.249.72	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:27 UTC	562	OUT	GET /A4782568-7cfe-4f0c-8bd3-4f4c594e53291.js HTTP/1.1 Host: utt.impactcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:27 UTC	899	IN	HTTP/1.1 200 OK X-GUploader-UploadID: AFiumC5hg_wdqXbhcfM3gwVUBJk6hxddU6aVa_ME4OxGdgd0dAvugND8oMFPwkzniuTdy8c x-goog-generation: 1733952450852893 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 19230 x-goog-hash: crc32c=GdbkCQ== x-goog-hash: md5=/3H+Rk/Fjqx53L9yEgXTVg== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped Server: UploadServer Date: Thu, 09 Jan 2025 23:22:24 GMT Expires: Thu, 09 Jan 2025 23:27:24 GMT Cache-Control: public,max-age=900,s-maxage=300 Last-Modified: Wed, 11 Dec 2024 21:27:30 GMT ETag: W/"ff71fe464fc58eac79dcbf721205d356" Content-Type: text/javascript; charset=utf-8 Vary: Accept-Encoding Content-Length: 45744 Age: 3 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-09 23:22:27 UTC	491	IN	Data Raw: 2f 2a 21 20 40 62 75 69 6c 64 20 31 35 31 62 31 64 37 31 20 40 64 61 74 65 20 32 30 32 34 2d 31 30 2d 31 37 54 31 35 3a 34 31 3a 34 31 2e 37 31 33 5a 20 40 67 65 6e 65 72 61 74 65 64 20 32 30 32 34 2d 31 32 2d 31 31 54 32 31 3a 32 37 3a 33 30 2e 35 38 33 30 33 30 36 34 38 5a 20 2a 2f 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 7b 38 37 31 34 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 76 61 72 20 61 3d 72 28 39 38 31 34 29 2c 66 3d 72 28 39 34 30 32 29 2c 64 3d 72 28 38 39 35 36 29 2c 6c 3d 72 28 34 32 36 29 2c 73 3d 72 28 35 34 32 33 29 2c 6d 3d 72 28 34 35 30 29 2e 74 2c 76 3d 72 28 31 35 33 37 29 2e 69 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 63 29 7b 76 61 72 20 6e 3d 6e Data Ascii: /! @build 151b1d71 @date 2024-10-17T15:41:41.713Z @generated 2024-12-11T21:27:30.583030648Z /!function(){"use strict";var r={8714:function(n,t,r){var a=r(9814),f=r(9402),d=r(8956),l=r(426),s=r(5423),m=r(450).t,v=r(1537).i;n.exports=function(i,c){var n=n
2025-01-09 23:22:27 UTC	1390	IN	Data Raw: 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 76 61 72 20 62 3d 72 28 39 33 34 30 29 2e 43 2c 68 3d 72 28 39 37 39 30 29 2c 78 3d 72 28 38 37 31 34 29 2c 79 3d 72 28 31 33 37 34 29 2c 77 3d 72 28 32 31 33 32 29 2c 67 3d 72 28 37 37 32 35 29 2c 24 3d 72 28 34 36 36 34 29 2c 43 3d 72 28 37 39 35 30 29 2e 46 2c 46 3d 72 28 31 35 33 37 29 2e 76 2c 6b 3d 72 28 37 37 38 38 29 2c 5a 3d 72 28 38 37 38 33 29 2c 7a 3d 72 28 37 30 36 32 29 2c 52 3d 72 28 34 35 30 29 2e 6b 2c 59 3d 72 28 38 35 34 36 29 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 2c 65 29 7b 76 61 72 20 69 2c 74 3d 52 28 24 2e 5a 28 43 28 59 29 29 2c 74 29 2c 63 3d 67 28 77 28 6e 2c 74 2c 62 29 2c 7b 64 65 62 75 67 3a 21 30 7d 29 2c 75 3d 7b 52 3a 21 31 7d 2c 6f 3d 7b 59 3a 75 Data Ascii: ction(n,t,r){var b=r(9340).C,h=r(9790),x=r(8714),y=r(1374),w=r(2132),g=r(7725),$=r(4664),C=r(7950).F,F=r(1537).v,k=r(7788),Z=r(8783),z=r(7062),R=r(450).k,Y=r(8546);n.exports=function(n,t,r,e){var i,t=R($.Z(C(Y)),t),c=g(w(n,t,b),{debug:!0}),u={R:!1},o={Y:u
2025-01-09 23:22:27 UTC	1390	IN	Data Raw: 75 61 57 38 76 63 33 46 31 59 58 52 6a 61 43 31 71 63 30 41 79 49 69 77 69 59 33 42 6b 49 6a 6f 69 63 43 35 70 62 58 42 6a 64 43 35 7a 61 58 52 6c 49 69 77 69 5a 33 52 6b 49 6a 6f 69 5a 43 35 70 62 58 42 6a 64 43 35 7a 61 58 52 6c 49 69 77 69 5a 47 52 6b 49 6a 6f 69 5a 43 35 70 62 58 42 6a 64 43 35 7a 61 58 52 6c 49 69 77 69 5a 47 52 6c 49 6a 6f 69 5a 43 49 73 49 6e 6f 78 5a 69 49 36 49 6d 6c 74 63 47 46 6a 64 43 31 6c 64 6d 56 75 64 48 4d 69 4c 43 4a 36 4d 57 63 69 4f 69 4a 70 62 58 42 68 59 33 51 74 62 47 39 35 59 57 78 30 65 53 49 73 49 6e 4a 7a 61 79 49 36 49 6d 6c 74 63 47 46 6a 64 43 31 79 5a 57 5a 6c 63 6e 4a 68 62 43 49 73 49 6e 6f 78 61 43 49 36 49 6d 4e 30 49 69 77 69 65 6a 46 77 49 6a 6f 69 63 47 63 69 4c 43 4a 36 4d 58 45 69 4f 69 4a 65 4b 47 Data Ascii: uaW8vc3F1YXRjaC1qc0AyIiwiY3BkIjoicC5pbXBjdC5zaXRlIiwiZ3RkIjoiZC5pbXBjdC5zaXRlIiwiZGRkIjoiZC5pbXBjdC5zaXRlIiwiZGRlIjoiZCIsInoxZiI6ImltcGFjdC1ldmVudHMiLCJ6MWciOiJpbXBhY3QtbG95YWx0eSIsInJzayI6ImltcGFjdC1yZWZlcnJhbCIsInoxaCI6ImN0IiwiejFwIjoicGciLCJ6MXEiOiJeKG
2025-01-09 23:22:27 UTC	1390	IN	Data Raw: 30 59 70 66 43 68 62 50 79 5a 64 4b 58 52 30 50 53 68 63 58 47 51 72 4b 56 38 6f 58 46 78 6b 4b 79 6c 66 4b 46 78 63 5a 43 73 70 4b 46 39 62 58 46 78 33 4c 56 30 72 4b 54 39 38 4b 46 78 63 4c 33 52 63 58 43 39 30 58 46 77 76 58 46 77 2f 59 54 30 6f 58 46 78 6b 4b 79 6b 70 66 43 68 63 58 43 39 30 58 46 77 76 64 46 78 63 50 32 45 39 4b 46 78 63 5a 43 73 70 4b 58 77 6f 59 57 5a 6d 58 32 4e 63 58 46 4d 71 50 32 46 6d 5a 6c 39 70 5a 44 30 6f 58 46 78 6b 4b 79 6b 70 66 47 52 7a 4d 56 78 63 4c 6d 35 73 58 46 77 76 59 31 78 63 4c 33 77 6f 4b 47 35 6b 64 44 56 38 62 48 51 30 4e 58 78 6d 63 6a 45 7a 4e 58 78 6b 64 44 55 78 66 47 46 30 4d 54 6c 38 61 6d 59 33 4f 58 78 79 61 32 34 7a 4b 56 78 63 4c 6d 35 6c 64 46 78 63 4c 32 4e 63 58 43 38 70 66 43 68 79 63 33 52 35 Data Ascii: 0YpfChbPyZdKXR0PShcXGQrKV8oXFxkKylfKFxcZCspKF9bXFx3LV0rKT98KFxcL3RcXC90XFwvXFw/YT0oXFxkKykpfChcXC90XFwvdFxcP2E9KFxcZCspKXwoYWZmX2NcXFMqP2FmZl9pZD0oXFxkKykpfGRzMVxcLm5sXFwvY1xcL3woKG5kdDV8bHQ0NXxmcjEzNXxkdDUxfGF0MTl8amY3OXxya24zKVxcLm5ldFxcL2NcXC8pfChyc3R5
2025-01-09 23:22:27 UTC	1390	IN	Data Raw: 75 59 32 39 74 66 48 52 79 59 57 35 7a 63 47 46 79 5a 57 35 30 62 47 46 69 63 31 78 63 4c 6d 4e 76 62 58 78 79 62 32 64 31 5a 57 5a 70 64 47 35 6c 63 33 4e 63 58 43 35 6a 62 32 31 38 62 47 56 68 62 6d 4a 6c 59 57 35 76 5a 6d 5a 70 59 32 6c 68 62 46 78 63 4c 6d 4e 76 62 58 78 79 5a 57 46 73 61 32 56 30 62 32 35 6c 63 31 78 63 4c 6d 4e 76 62 58 78 68 62 58 42 73 5a 57 31 6c 59 57 78 63 58 43 35 6a 62 32 30 70 66 43 68 62 50 33 77 6d 66 43 4e 64 59 56 39 68 61 57 51 39 57 32 45 74 65 6b 45 74 57 6a 41 74 4f 56 30 72 4b 58 77 6f 59 6d 68 77 61 47 39 30 62 33 5a 70 5a 47 56 76 58 46 77 75 59 32 39 74 58 46 77 76 59 31 78 63 4c 33 42 79 62 32 52 31 59 33 52 63 58 46 4d 71 58 46 77 76 51 6b 6c 63 58 43 39 63 58 47 51 71 58 46 78 54 4b 6c 78 63 4c 30 74 43 53 55 Data Ascii: uY29tfHRyYW5zcGFyZW50bGFic1xcLmNvbXxyb2d1ZWZpdG5lc3NcXC5jb218bGVhbmJlYW5vZmZpY2lhbFxcLmNvbXxyZWFsa2V0b25lc1xcLmNvbXxhbXBsZW1lYWxcXC5jb20pfChbP3wmfCNdYV9haWQ9W2EtekEtWjAtOV0rKXwoYmhwaG90b3ZpZGVvXFwuY29tXFwvY1xcL3Byb2R1Y3RcXFMqXFwvQklcXC9cXGQqXFxTKlxcL0tCSU
2025-01-09 23:22:27 UTC	1390	IN	Data Raw: 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 5d 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 6f 3d 5b 5d 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 28 61 2e 64 65 62 75 67 7c 7c 64 29 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 29 7d 3b 72 65 74 75 72 6e 20 61 2e 64 65 62 75 67 3d 64 2c 61 2e 65 72 72 6f 72 3d 64 2c 61 2e 69 6e 66 6f 3d 64 2c 61 2e 77 61 72 6e 3d 64 2c 28 61 2e 41 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 28 74 3d 74 7c 7c 7b 7d 29 2e 74 69 6d 65 73 74 61 6d 70 3f 31 3a 32 2c 69 3d 74 2e 64 65 62 75 67 3f 30 3a 31 2c 72 3d 30 2c 63 3d 6f 2e 6c 65 6e 67 74 68 3b 72 3c 63 3b 2b 2b 72 29 6e 5b 6f 5b 72 Data Ascii: ","warn","error"];n.exports=function(n,t){var o=[],a=function(){(a.debug\|\|d).apply(null,[].slice.call(arguments))};return a.debug=d,a.error=d,a.info=d,a.warn=d,(a.A=function(n,t){for(var e=(t=t\|\|{}).timestamp?1:2,i=t.debug?0:1,r=0,c=o.length;r<c;++r)n[o[r
2025-01-09 23:22:27 UTC	1390	IN	Data Raw: 3a 72 2e 74 73 2c 7a 31 32 3a 72 2e 7a 31 32 2c 7a 31 38 3a 6e 2c 7a 31 37 3a 74 2c 7a 31 33 3a 6c 2e 61 6e 28 65 29 2c 61 63 69 64 3a 6f 2e 61 63 69 64 2c 76 65 72 3a 61 2e 76 65 72 2c 7a 6d 3a 22 31 35 31 62 31 64 37 31 22 2c 7a 31 6f 3a 6e 61 76 69 67 61 74 6f 72 26 26 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 3f 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 3a 22 75 6e 61 76 61 69 6c 61 62 6c 65 22 7d 29 29 7d 3b 66 28 69 2c 63 2c 7b 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 26 26 64 28 69 2c 63 2c 7b 7d 2c 6c 2e 50 29 7d 29 7d 7d 3b 72 65 74 75 72 6e 7b 64 65 62 75 67 3a 6e 3e 3d 65 2e 5f 3f 74 28 69 2e 5f 29 3a 6c 2e 50 2c 69 6e 66 6f 3a 6e 3e 3d 65 2e 6e 6e 3f 74 28 69 2e 6e 6e 29 3a 6c 2e 50 2c 77 61 72 6e 3a 6e 3e 3d Data Ascii: :r.ts,z12:r.z12,z18:n,z17:t,z13:l.an(e),acid:o.acid,ver:a.ver,zm:"151b1d71",z1o:navigator&&navigator.userAgent?navigator.userAgent:"unavailable"}))};f(i,c,{},function(n){n&&d(i,c,{},l.P)})}};return{debug:n>=e._?t(i._):l.P,info:n>=e.nn?t(i.nn):l.P,warn:n>=
2025-01-09 23:22:27 UTC	1390	IN	Data Raw: 20 75 28 29 3b 65 2e 78 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 74 3d 63 2e 6c 65 6e 67 74 68 3b 6e 3c 74 3b 2b 2b 6e 29 7b 76 61 72 20 72 3d 63 5b 6e 5d 3b 69 66 28 72 2e 75 26 26 6f 2e 68 2e 77 6e 2e 79 6e 28 72 2e 75 2c 6e 75 6c 6c 2c 7b 74 61 67 3a 22 69 66 22 3d 3d 3d 72 2e 74 3f 22 69 66 72 61 6d 65 22 3a 22 69 6d 61 67 65 22 7d 2c 75 29 2c 21 72 2e 63 29 72 65 74 75 72 6e 20 75 28 29 3b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 2c 65 3d 28 65 2e 69 64 3d 22 69 6d 70 61 63 74 50 6f 73 74 62 61 63 6b 46 72 61 6d 65 22 2b 6e 2c 65 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 28 65 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 7c 7c 65 29 2e Data Ascii: u();e.xn(function(){for(var n=0,t=c.length;n<t;++n){var r=c[n];if(r.u&&o.h.wn.yn(r.u,null,{tag:"if"===r.t?"iframe":"image"},u),!r.c)return u();var e=document.createElement("iframe"),e=(e.id="impactPostbackFrame"+n,e.contentDocument\|\|(e.contentWindow\|\|e).
2025-01-09 23:22:27 UTC	1390	IN	Data Raw: 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 2c 75 3d 2f 5e 28 3f 3a 5b 41 2d 5a 61 2d 7a 5c 64 2b 5c 2f 5d 7b 34 7d 29 2a 3f 28 3f 3a 5b 41 2d 5a 61 2d 7a 5c 64 2b 5c 2f 5d 7b 32 7d 28 3f 3a 3d 3d 29 3f 7c 5b 41 2d 5a 61 2d 7a 5c 64 2b 5c 2f 5d 7b 33 7d 3d 3f 29 3f 24 2f 2c 61 3d 2f 5b 5c 74 5c 6e 5c 66 5c 72 20 5d 2b 2f 67 2c 65 3d 72 28 77 69 6e 64 6f 77 2e 62 74 6f 61 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 74 2c 72 2c 65 2c 69 3d 22 22 2c 63 3d 28 6e 3d 53 74 72 69 6e 67 28 6e 29 29 2e 6c 65 6e 67 74 68 25 33 2c 75 3d 30 3b 75 3c 6e 2e 6c 65 6e 67 74 68 3b 29 7b 69 66 28 32 35 35 3c 28 74 3d 6e 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 7c 7c 32 35 35 3c 28 72 3d Data Ascii: ghijklmnopqrstuvwxyz0123456789+/=",u=/^(?:[A-Za-z\d+\/]{4})*?(?:[A-Za-z\d+\/]{2}(?:==)?\|[A-Za-z\d+\/]{3}=?)?$/,a=/[\t\n\f\r ]+/g,e=r(window.btoa,function(n){for(var t,r,e,i="",c=(n=String(n)).length%3,u=0;u<n.length;){if(255<(t=n.charCodeAt(u++))\|\|255<(r=
2025-01-09 23:22:27 UTC	1390	IN	Data Raw: 73 65 49 6e 74 28 74 2c 31 36 29 2d 32 32 34 2c 72 3d 70 61 72 73 65 49 6e 74 28 72 2c 31 36 29 2d 31 32 38 3b 72 65 74 75 72 6e 21 74 26 26 72 3c 33 32 7c 7c 36 35 35 33 35 3c 28 74 3d 28 74 3c 3c 31 32 29 2b 28 72 3c 3c 36 29 2b 28 70 61 72 73 65 49 6e 74 28 65 2c 31 36 29 2d 31 32 38 29 29 3f 6e 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 74 29 7d 29 2e 72 65 70 6c 61 63 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 74 3d 70 61 72 73 65 49 6e 74 28 74 2c 31 36 29 2d 31 39 32 3b 72 65 74 75 72 6e 20 74 3c 32 3f 6e 3a 28 6e 3d 70 61 72 73 65 49 6e 74 28 72 2c 31 36 29 2d 31 32 38 2c 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 28 74 3c 3c 36 29 2b 6e 29 29 7d 29 2e 72 65 70 6c 61 63 65 28 69 2c 66 75 6e 63 Data Ascii: seInt(t,16)-224,r=parseInt(r,16)-128;return!t&&r<32\|\|65535<(t=(t<<12)+(r<<6)+(parseInt(e,16)-128))?n:String.fromCharCode(t)}).replace(e,function(n,t,r){t=parseInt(t,16)-192;return t<2?n:(n=parseInt(r,16)-128,String.fromCharCode((t<<6)+n))}).replace(i,func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.10	50137	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:27 UTC	1450	OUT	POST /api/v1/event/lead-generation_consumer_loads-geo-location HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive Content-Length: 432 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" content-type: application/json;charset=utf-8 gh-request-id: 392a938b-a094-4bd6-9d72-ce521ff09bbd sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://medicare.gohealth.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://medicare.gohealth.com/medicare-marketplace?link_id=18307&src=GS_18373&cmpn=%7Bcampaignid%7D&adg=%7Badgroupid%7D&ad=%7Bcreative%7D&kw=%7Bkeyword%7D&pos=%7Badposition%7D&mt=%7Bmatchtype%7D&pl=%7Bplacement%7D&nw=%7Bnetwork%7D&p1=%7Bdevice%7D&p2=%7Bdevicemodel%7D&p3=%7Bloc_physical_ms%7D&source_type=PPCWEB&affiliate_id=4397&gad_source=5&gclid=EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: form_url=%2Fmedicare-marketplace; gh-session-id=fc99a7c8-08f9-4875-be9f-f97a9821de17; _gcl_aw=GCL.1736464944.EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE; _gcl_gs=2.1.k5$i1736464937$u41793726; _gcl_au=1.1.1804017665.1736464944; optimizelyEndUserId=oeu1736464944079r0.8329921030541232; optimizelySession=1736464944099
2025-01-09 23:22:27 UTC	432	OUT	Data Raw: 7b 22 69 70 41 64 64 72 65 73 73 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 22 63 6f 75 6e 74 79 22 3a 22 22 2c 22 7a 69 70 43 6f 64 65 22 3a 22 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 66 69 70 73 43 6f 64 65 22 3a 22 22 2c 22 6c 69 6e 6b 49 64 22 3a 31 38 33 30 37 2c 22 6c 65 61 64 47 65 6e 65 72 61 74 69 6f 6e 49 64 22 3a 22 33 39 32 61 39 33 38 62 2d 61 30 39 34 2d 34 62 64 36 2d 39 64 37 32 2d 63 65 35 32 31 66 66 30 39 62 62 64 22 2c 22 63 6c 69 65 6e 74 49 64 22 3a 22 4e 4f 5f 49 4e 54 45 52 41 43 54 49 4f 4e 5f 49 44 22 2c 22 72 65 66 65 72 72 61 6c 55 72 6c 22 3a 22 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 6d 65 64 69 63 61 72 65 2e 67 6f 68 65 61 6c 74 68 2e 63 6f 6d 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 64 69 63 61 Data Ascii: {"ipAddress":"8.46.123.189","county":"","zipCode":"","state":"NY","fipsCode":"","linkId":18307,"leadGenerationId":"392a938b-a094-4bd6-9d72-ce521ff09bbd","clientId":"NO_INTERACTION_ID","referralUrl":"","domain":"medicare.gohealth.com","url":"https://medica
2025-01-09 23:22:27 UTC	400	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:27 GMT Content-Type: application/json; charset=utf-8 Content-Length: 16 Connection: close access-control-allow-origin: * access-control-allow-headers: Origin, Content-Type, Authorization access-control-allow-methods: GET, OPTIONS, POST cache-control: public, max-age=3600 set-cookie: gh-session-id=fc99a7c8-08f9-4875-be9f-f97a9821de17; Path=/
2025-01-09 23:22:27 UTC	16	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d Data Ascii: {"success":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.10	50141	216.239.34.181	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:27 UTC	1797	OUT	POST /g/collect?v=2&tid=G-G99G7L25WL&gtm=45je5170v875571548z8841278742za200zb841278742&_p=1736464942000&_gaz=1&gcd=13l3l3l3l1l1&npa=0&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&cid=1197952561.1736464946&ul=en-us&sr=1280x1024&lps=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.149&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1736464945&sct=1&seg=0&dl=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&dr=https%3A%2F%2Fsyndica [TRUNCATED] Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://medicare.gohealth.com X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:27 UTC	852	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://medicare.gohealth.com Date: Thu, 09 Jan 2025 23:22:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:136:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsggc:136:0"}],} Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.10	50140	142.250.186.130	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:27 UTC	1876	OUT	GET /td/rul/408830293?random=1736464945641&cv=11&fst=1736464945641&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be5170z8841278742za201zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%253DBrand%3B [TRUNCATED] Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:27 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 09 Jan 2025 23:22:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 09-Jan-2025 23:37:27 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-09 23:22:27 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2025-01-09 23:22:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.10	50139	3.167.227.110	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:27 UTC	534	OUT	GET /a-06nm.min.js HTTP/1.1 Host: b-code.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:27 UTC	402	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 138980 Connection: close Date: Thu, 09 Jan 2025 23:22:25 GMT Cache-Control: public,max-age=86400 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 965b4705c2c785676c6b2cc3a0acb2b2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P11 X-Amz-Cf-Id: j5FyYHHEbIfTrTKsvJ9r2LyhDVOc2Do5ZSgIO6h5RIDyJlwXnNJx0Q== Age: 2
2025-01-09 23:22:27 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 4c 49 3d 7b 22 61 70 70 49 64 22 3a 22 61 2d 30 36 6e 6d 22 2c 22 61 64 76 65 72 74 69 73 65 72 49 64 22 3a 36 37 38 34 38 2c 22 73 79 6e 63 22 3a 66 61 6c 73 65 2c 22 65 75 6e 73 22 3a 66 61 6c 73 65 2c 22 69 64 65 6e 74 69 66 69 65 72 73 54 6f 52 65 73 6f 6c 76 65 22 3a 22 5f 61 61 6c 79 74 69 63 73 75 69 64 2c 74 72 63 5f 63 6f 6f 6b 69 65 5f 73 74 6f 72 61 67 65 2c 64 74 6d 5f 74 6f 6b 65 6e 2c 5f 70 75 62 63 69 64 2c 68 69 64 2c 6d 75 75 69 64 2c 67 6c 6f 62 61 6c 54 49 5f 53 49 44 2c 61 6a 73 5f 75 73 65 72 5f 69 64 2c 5f 6c 69 5f 75 75 69 64 2c 73 5f 65 63 69 64 2c 5f 73 68 6f 70 69 66 79 5f 79 2c 67 75 70 5f 61 6e 6f 6e 69 64 2c 73 5f 76 69 2c 49 58 57 52 41 50 50 45 52 4c 69 76 65 49 6e 74 Data Ascii: !function(){window.LI={"appId":"a-06nm","advertiserId":67848,"sync":false,"euns":false,"identifiersToResolve":"_aalyticsuid,trc_cookie_storage,dtm_token,_pubcid,hid,muuid,globalTI_SID,ajs_user_id,_li_uuid,s_ecid,_shopify_y,gup_anonid,s_vi,IXWRAPPERLiveInt
2025-01-09 23:22:27 UTC	10463	IN	Data Raw: 64 3f 61 3d 31 26 63 3d 33 22 21 3d 3d 65 2e 68 72 65 66 7c 7c 22 33 22 21 3d 3d 74 2e 67 65 74 28 22 63 22 29 7c 7c 22 61 3d 31 22 21 3d 3d 53 74 72 69 6e 67 28 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 22 3f 61 3d 31 22 29 29 7c 7c 21 74 5b 52 73 5d 7c 7c 22 61 22 21 3d 3d 6e 65 77 20 55 52 4c 28 22 68 74 74 70 73 3a 2f 2f 61 40 62 22 29 2e 75 73 65 72 6e 61 6d 65 7c 7c 22 62 22 21 3d 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 22 61 3d 62 22 29 29 2e 67 65 74 28 22 61 22 29 7c 7c 22 78 6e 2d 2d 65 31 61 79 62 63 22 21 3d 3d 6e 65 77 20 55 52 4c 28 22 68 74 74 70 73 3a 2f 2f d1 82 d0 b5 d1 81 d1 82 22 29 2e 68 6f 73 74 7c 7c 22 23 25 44 30 25 42 31 22 21 3d Data Ascii: d?a=1&c=3"!==e.href\|\|"3"!==t.get("c")\|\|"a=1"!==String(new URLSearchParams("?a=1"))\|\|!t[Rs]\|\|"a"!==new URL("https://a@b").username\|\|"b"!==new URLSearchParams(new URLSearchParams("a=b")).get("a")\|\|"xn--e1aybc"!==new URL("https://").host\|\|"#%D0%B1"!=
2025-01-09 23:22:27 UTC	16384	IN	Data Raw: 2c 57 63 28 72 75 28 68 2b 67 25 76 29 29 29 2c 70 3d 58 63 28 67 2f 76 29 2c 66 2b 3d 33 36 7d 4b 63 28 74 2c 57 63 28 72 75 28 70 29 29 29 2c 61 3d 6f 75 28 73 2c 64 2c 63 3d 3d 3d 6c 29 2c 73 3d 30 2c 63 2b 2b 7d 7d 73 2b 2b 2c 69 2b 2b 7d 72 65 74 75 72 6e 20 5a 63 28 74 2c 22 22 29 7d 2c 73 75 3d 71 6e 2c 61 75 3d 70 65 2c 6c 75 3d 49 73 2c 63 75 3d 24 2c 75 75 3d 63 6e 2c 64 75 3d 6c 2c 70 75 3d 58 6f 2c 66 75 3d 5f 73 2c 68 75 3d 54 73 2c 67 75 3d 6d 2c 76 75 3d 5a 6c 2c 79 75 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 4c 63 28 65 29 2c 6e 3d 44 63 28 74 68 69 73 29 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6f 3d 72 3e 31 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 76 6f 69 64 20 30 2c 69 3d 76 6f 69 64 20 30 21 3d 3d Data Ascii: ,Wc(ru(h+g%v))),p=Xc(g/v),f+=36}Kc(t,Wc(ru(p))),a=ou(s,d,c===l),s=0,c++}}s++,i++}return Zc(t,"")},su=qn,au=pe,lu=Is,cu=$,uu=cn,du=l,pu=Xo,fu=_s,hu=Ts,gu=m,vu=Zl,yu=function(e){var t=Lc(e),n=Dc(this),r=arguments.length,o=r>1?arguments[1]:void 0,i=void 0!==
2025-01-09 23:22:27 UTC	16384	IN	Data Raw: 2c 6b 66 3d 45 66 2c 50 66 3d 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 2c 52 66 3d 63 6e 2c 49 66 3d 67 65 2c 4f 66 3d 67 6e 2c 5f 66 3d 73 74 2c 41 66 3d 6c 63 2c 55 66 3d 57 6e 2c 4c 66 3d 6e 65 2c 54 66 3d 57 73 2c 6a 66 3d 42 73 2c 44 66 3d 6e 63 2c 46 66 3d 54 79 70 65 45 72 72 6f 72 2c 48 66 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 73 74 6f 70 70 65 64 3d 65 2c 74 68 69 73 2e 72 65 73 75 6c 74 3d 74 7d 2c 24 66 3d 48 66 2e 70 72 6f 74 6f 74 79 70 65 2c 4e 66 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 6f 2c 69 2c 73 2c 61 2c 6c 2c 63 2c 75 3d 6e 26 26 6e 2e 74 68 61 74 2c 64 3d 21 28 21 6e 7c 7c 21 6e 2e 41 53 5f 45 4e 54 52 49 45 53 29 2c 70 3d 21 28 21 6e 7c 7c 21 6e 2e 49 53 Data Ascii: ,kf=Ef,Pf=Error.captureStackTrace,Rf=cn,If=ge,Of=gn,_f=st,Af=lc,Uf=Wn,Lf=ne,Tf=Ws,jf=Bs,Df=nc,Ff=TypeError,Hf=function(e,t){this.stopped=e,this.result=t},$f=Hf.prototype,Nf=function(e,t,n){var r,o,i,s,a,l,c,u=n&&n.that,d=!(!n\|\|!n.AS_ENTRIES),p=!(!n\|\|!n.IS
2025-01-09 23:22:27 UTC	1514	IN	Data Raw: 77 6f 72 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 22 2b 65 2c 6e 3d 74 68 69 73 2e 69 6e 64 65 78 2c 72 3d 6e 2b 74 2e 6c 65 6e 67 74 68 3b 69 66 28 63 77 28 74 68 69 73 2e 73 6f 75 72 63 65 2c 6e 2c 72 29 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 6f 77 28 22 46 61 69 6c 65 64 20 74 6f 20 70 61 72 73 65 20 76 61 6c 75 65 20 61 74 3a 20 22 2b 6e 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 6f 64 65 28 30 2c 65 2c 6e 2c 72 29 7d 2c 73 6b 69 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 68 69 73 2e 73 6f 75 72 63 65 3b 74 3c 6e 2e 6c 65 6e 67 74 68 26 26 75 77 28 65 2c 6c 77 28 6e 2c 74 29 29 3b 74 2b 2b 29 3b 72 65 74 75 72 6e 20 74 7d 2c 75 6e 74 69 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b Data Ascii: word:function(e){var t=""+e,n=this.index,r=n+t.length;if(cw(this.source,n,r)!==t)throw new ow("Failed to parse value at: "+n);return this.node(0,e,n,r)},skip:function(e,t){for(var n=this.source;t<n.length&&uw(e,lw(n,t));t++);return t},until:function(e,t){
2025-01-09 23:22:27 UTC	12792	IN	Data Raw: 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 52 77 28 6e 29 29 3a 49 77 28 4f 62 6a 65 63 74 28 6e 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 6e 2c 74 29 29 7d 29 29 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 5f 77 28 65 2c 74 2c 6e 2c 72 2c 6f 2c 69 2c 73 29 7b 74 72 79 7b 76 61 72 20 61 3d 65 5b 69 5d 28 73 29 2c 6c 3d 61 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 6e 28 65 29 7d 61 2e 64 6f 6e 65 3f 74 28 6c 29 3a 4b 79 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 72 2c 6f 29 7d Data Ascii: .defineProperties(e,Rw(n)):Iw(Object(n)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}function _w(e,t,n,r,o,i,s){try{var a=e[i](s),l=a.value}catch(e){return void n(e)}a.done?t(l):Ky.resolve(l).then(r,o)}
2025-01-09 23:22:27 UTC	6396	IN	Data Raw: 3d 22 3d 22 2b 6f 5b 73 5d 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 29 29 3b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 65 2b 22 3d 22 2b 74 2e 77 72 69 74 65 28 72 2c 65 29 2b 69 7d 7d 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 7b 73 65 74 3a 72 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 26 26 28 21 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 7c 7c 65 29 29 7b 66 6f 72 28 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3f 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 20 22 29 3a 5b 5d 2c 72 3d 7b 7d 2c 6f 3d 30 3b 6f 3c 6e 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 Data Ascii: ="="+o[s].split(";")[0]));return document.cookie=e+"="+t.write(r,e)+i}}return Object.create({set:r,get:function(e){if("undefined"!=typeof document&&(!arguments.length\|\|e)){for(var n=document.cookie?document.cookie.split("; "):[],r={},o=0;o<n.length;o++){v
2025-01-09 23:22:27 UTC	224	IN	Data Raw: 72 6c 79 3a 72 2e 61 62 6f 72 74 45 61 72 6c 79 2c 61 62 6f 72 74 50 69 70 65 45 61 72 6c 79 3a 72 2e 61 62 6f 72 74 50 69 70 65 45 61 72 6c 79 7d 2c 79 3d 22 73 63 68 65 6d 61 22 3d 3d 3d 65 2e 6b 69 6e 64 2c 6d 3d 6e 75 6c 6c 21 3d 3d 28 6c 3d 6e 75 6c 6c 21 3d 3d 28 63 3d 6e 75 6c 6c 21 3d 3d 28 75 3d 6e 75 6c 6c 21 3d 3d 28 64 3d 6e 75 6c 6c 21 3d 3d 28 70 3d 6e 75 6c 6c 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 6d 65 73 73 61 67 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 70 3f 70 3a 65 2e 6d 65 73 73 61 67 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 64 3f 64 3a 28 65 2e 72 65 66 65 72 65 6e 63 65 2c 76 6f 69 64 20 76 2e 6c 61 6e 67 29 29 26 26 76 6f 69 64 20 30 21 3d 3d Data Ascii: rly:r.abortEarly,abortPipeEarly:r.abortPipeEarly},y="schema"===e.kind,m=null!==(l=null!==(c=null!==(u=null!==(d=null!==(p=null==o?void 0:o.message)&&void 0!==p?p:e.message)&&void 0!==d?d:(e.reference,void v.lang))&&void 0!==
2025-01-09 23:22:27 UTC	12792	IN	Data Raw: 75 3f 75 3a 79 3f 76 6f 69 64 20 76 2e 6c 61 6e 67 3a 6e 75 6c 6c 29 26 26 76 6f 69 64 20 30 21 3d 3d 63 3f 63 3a 72 2e 6d 65 73 73 61 67 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 6c 3f 6c 3a 76 6f 69 64 20 76 2e 6c 61 6e 67 3b 76 61 72 20 77 3b 28 6d 26 26 28 76 2e 6d 65 73 73 61 67 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6d 3f 6d 28 76 29 3a 6d 29 2c 79 26 26 28 6e 2e 74 79 70 65 64 3d 21 31 29 2c 6e 2e 69 73 73 75 65 73 29 3f 6d 72 28 77 3d 6e 2e 69 73 73 75 65 73 29 2e 63 61 6c 6c 28 77 2c 76 29 3a 6e 2e 69 73 73 75 65 73 3d 5b 76 5d 7d 66 75 6e 63 74 69 6f 6e 20 71 62 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6c 6d 28 65 2c 74 29 26 26 22 5f 5f 70 72 6f 74 6f 5f 5f 22 21 3d 3d 74 26 26 22 70 72 6f 74 6f 74 79 70 65 22 21 3d 3d 74 26 Data Ascii: u?u:y?void v.lang:null)&&void 0!==c?c:r.message)&&void 0!==l?l:void v.lang;var w;(m&&(v.message="function"==typeof m?m(v):m),y&&(n.typed=!1),n.issues)?mr(w=n.issues).call(w,v):n.issues=[v]}function qb(e,t){return lm(e,t)&&"__proto__"!==t&&"prototype"!==t&
2025-01-09 23:22:27 UTC	3592	IN	Data Raw: 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 6e 75 6c 6c 2c 74 3d 65 26 26 28 65 2e 63 72 79 70 74 6f 7c 7c 65 2e 6d 73 43 72 79 70 74 6f 29 3b 69 66 28 74 29 72 65 74 75 72 6e 28 29 3d 3e 7b 63 6f 6e 73 74 20 65 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 31 29 3b 72 65 74 75 72 6e 20 74 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 65 29 2c 65 5b 30 5d 2f 32 35 35 7d 3b 72 65 74 75 72 6e 28 29 3d 3e 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 59 53 28 29 7b 6c 65 74 20 65 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 57 53 28 29 2a 47 53 29 3b 72 65 74 75 72 6e 20 65 3d 3d 3d 47 53 26 26 28 65 3d 47 53 2d 31 29 2c 56 53 Data Ascii: tion(){const e="undefined"!=typeof window?window:null,t=e&&(e.crypto\|\|e.msCrypto);if(t)return()=>{const e=new Uint8Array(1);return t.getRandomValues(e),e[0]/255};return()=>Math.random()}();function YS(){let e=Math.floor(WS()*GS);return e===GS&&(e=GS-1),VS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.10	50142	142.250.186.130	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:27 UTC	1008	OUT	GET /td/ga/rul?tid=G-G99G7L25WL&gacid=1197952561.1736464946&gtm=45je5170v875571548z8841278742za200zb841278742&dma=0&gcd=13l3l3l3l1l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=101925629~102067555~102067808~102081485~102198178&z=2058577249 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:27 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 09 Jan 2025 23:22:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 09-Jan-2025 23:37:27 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-09 23:22:27 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2025-01-09 23:22:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.10	50143	142.250.186.130	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:27 UTC	1912	OUT	GET /td/rul/1042882457?random=1736464945734&cv=11&fst=1736464945734&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je5170v875571548z8841278742za200zb841278742&gcd=13l3l3l3l1l1&dma=0&tag_exp=101925629~102067555~102067808~102081485~102198178&u_w=1280&u_h=1024&url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&ref=https%3A%2F%2Fsyndicatedsearch.goog%2F&hn=www.googleadservices.com&frm=0&tiba=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&npa=0&pscdl=noapi&auid=1804017665.1736464944&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.149%7CNot%253BA%2 [TRUNCATED] Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIkqHLAQiFoM0BCLnKzQEIutTNARjymM0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:27 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 09 Jan 2025 23:22:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 09-Jan-2025 23:37:27 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-09 23:22:27 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2025-01-09 23:22:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.10	50146	104.18.66.57	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:27 UTC	691	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: a24403740715.cdn.optimizely.com Connection: keep-alive Content-Length: 1649 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json Accept: / Origin: https://a24403740715.cdn.optimizely.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://a24403740715.cdn.optimizely.com/client_storage/a24403740715.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:27 UTC	1649	OUT	Data Raw: 7b 22 6d 65 6d 6f 72 79 22 3a 7b 22 74 6f 74 61 6c 4a 53 48 65 61 70 53 69 7a 65 22 3a 33 31 30 32 33 37 39 2c 22 75 73 65 64 4a 53 48 65 61 70 53 69 7a 65 22 3a 32 35 32 33 38 31 39 2c 22 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 22 3a 32 31 37 32 36 34 39 34 37 32 7d 2c 22 72 65 73 6f 75 72 63 65 73 22 3a 5b 5d 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 6d 65 64 69 63 61 72 65 2e 67 6f 68 65 61 6c 74 68 2e 63 6f 6d 2f 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 31 2c 22 66 69 72 73 74 50 61 69 6e 74 22 3a 30 2c 22 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 22 3a 30 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 33 36 34 36 34 39 34 34 31 30 39 2e 35 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 66 6c 22 3a 22 32 30 32 34 Data Ascii: {"memory":{"totalJSHeapSize":3102379,"usedJSHeapSize":2523819,"jsHeapSizeLimit":2172649472},"resources":[],"referrer":"https://medicare.gohealth.com/","eventType":1,"firstPaint":0,"firstContentfulPaint":0,"startTime":1736464944109.5,"versions":{"fl":"2024
2025-01-09 23:22:27 UTC	388	IN	HTTP/1.1 204 No Content Date: Thu, 09 Jan 2025 23:22:27 GMT Connection: close access-control-allow-origin: https://a24403740715.cdn.optimizely.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 8ff82b62b8038c33-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.10	50144	18.173.205.63	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:27 UTC	738	OUT	GET /lead-generation-sites/medicare/bbb_logo_gray.1716543816.svg HTTP/1.1 Host: cdn.gohealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_gs=2.1.k5$i1736464937$u41793726; _gcl_au=1.1.1804017665.1736464944; optimizelyEndUserId=oeu1736464944079r0.8329921030541232; optimizelySession=1736464944099; _gcl_aw=GCL.1736464946.EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE; _ga=GA1.1.1197952561.1736464946; _ga_G99G7L25WL=GS1.1.1736464945.1.0.1736464945.60.0.0
2025-01-09 23:22:27 UTC	498	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 19010 Connection: close Last-Modified: Wed, 18 Dec 2024 08:40:29 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 09 Jan 2025 23:22:25 GMT ETag: "0cb0d20627d16b3987097865827dbd72" X-Cache: Hit from cloudfront Via: 1.1 e787a68a5271d06ea7b7e56fa6886dc8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P12 X-Amz-Cf-Id: Xdx8HT2oziRjDJQIz6lbr3_hPTkQDcF9p84W70YtXpnRfEWbL2FJqQ== Age: 3
2025-01-09 23:22:27 UTC	15886	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 32 34 22 20 68 65 69 67 68 74 3d 22 34 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 34 20 34 33 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 32 33 2e 37 33 37 20 33 36 2e 38 35 32 39 43 31 32 33 2e 37 33 37 20 34 30 2e 31 30 33 32 20 31 32 31 2e 30 39 36 20 34 32 2e 37 33 38 20 31 31 37 2e 38 33 37 20 34 32 2e 37 33 38 48 35 2e 39 30 30 32 33 43 32 2e 36 34 31 35 36 20 34 32 2e 37 33 38 20 30 2e 30 30 30 32 34 34 31 34 31 20 34 30 2e 31 30 33 32 20 30 2e 30 30 30 32 34 34 31 34 31 20 33 36 2e 38 35 32 39 56 36 2e 31 32 30 39 36 43 30 2e 30 30 30 32 34 34 31 34 31 20 32 2e Data Ascii: <svg width="124" height="43" viewBox="0 0 124 43" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M123.737 36.8529C123.737 40.1032 121.096 42.738 117.837 42.738H5.90023C2.64156 42.738 0.000244141 40.1032 0.000244141 36.8529V6.12096C0.000244141 2.
2025-01-09 23:22:28 UTC	3124	IN	Data Raw: 32 33 38 20 33 32 2e 37 36 30 32 43 31 30 31 2e 36 32 33 20 33 32 2e 36 34 34 32 20 31 30 31 2e 39 34 32 20 33 32 2e 34 37 38 39 20 31 30 32 2e 31 39 36 20 33 32 2e 32 36 34 39 43 31 30 32 2e 34 35 20 33 32 2e 30 35 31 20 31 30 32 2e 36 33 37 20 33 31 2e 37 39 34 38 20 31 30 32 2e 37 35 37 20 33 31 2e 34 39 37 33 43 31 30 32 2e 38 37 36 20 33 31 2e 31 39 39 36 20 31 30 32 2e 39 33 36 20 33 30 2e 38 36 39 36 20 31 30 32 2e 39 33 36 20 33 30 2e 35 30 36 34 5a 22 20 66 69 6c 6c 3d 22 23 46 32 46 32 46 33 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 30 39 2e 36 37 37 20 33 30 2e 35 30 36 34 43 31 30 39 2e 36 37 37 20 33 30 2e 30 39 32 39 20 31 30 39 2e 35 39 38 20 32 39 2e 37 35 31 34 20 31 30 39 2e 34 34 32 20 32 39 2e 34 38 33 43 31 30 39 2e 32 38 35 20 32 Data Ascii: 238 32.7602C101.623 32.6442 101.942 32.4789 102.196 32.2649C102.45 32.051 102.637 31.7948 102.757 31.4973C102.876 31.1996 102.936 30.8696 102.936 30.5064Z" fill="#F2F2F3"/><path d="M109.677 30.5064C109.677 30.0929 109.598 29.7514 109.442 29.483C109.285 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.10	50154	104.16.79.73	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:27 UTC	413	OUT	GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:27 UTC	373	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:27 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19948 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2024.6.1" Last-Modified: Thu, 06 Jun 2024 15:52:56 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8ff82b63fb66f78f-EWR
2025-01-09 23:22:27 UTC	996	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 7c 7c 30 2c 69 3d 74 3b 72 65 74 75 72 6e 5b 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r+
2025-01-09 23:22:27 UTC	1369	IN	Data Raw: 3b 69 66 28 61 5b 36 5d 3d 31 35 26 61 5b 36 5d 7c 36 34 2c 61 5b 38 5d 3d 36 33 26 61 5b 38 5d 7c 31 32 38 2c 74 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 31 36 3b 2b 2b 63 29 74 5b 6f 2b 63 5d 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 69 28 61 29 7d 7d 2c 31 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 Data Ascii: ;if(a[6]=15&a[6]\|64,a[8]=63&a[8]\|128,t)for(var c=0;c<16;++c)t[o+c]=a[c];return t\|\|i(a)}},168:function(e,t,n){"use strict";var r=this&&this.__assign\|\|function(){return r=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arg
2025-01-09 23:22:27 UTC	1369	IN	Data Raw: 72 63 68 50 61 72 61 6d 73 29 7b 76 61 72 20 79 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 67 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 29 2c 68 3d 79 2e 67 65 74 28 22 74 6f 6b 65 6e 22 29 3b 68 26 26 28 70 2e 74 6f 6b 65 6e 3d 68 29 3b 76 61 72 20 54 3d 79 2e 67 65 74 28 22 73 70 61 22 29 3b 70 2e 73 70 61 3d 6e 75 6c 6c 3d 3d 3d 54 7c 7c 22 74 72 75 65 22 3d 3d 3d 54 7d 7d 70 26 26 22 6d 75 6c 74 69 22 21 3d 3d 70 2e 6c 6f 61 64 26 26 28 70 2e 6c 6f 61 64 3d 22 73 69 6e 67 6c 65 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 63 66 42 65 61 63 6f 6e 3d 70 7d 69 66 28 73 26 26 70 26 26 70 2e 74 6f 6b 65 6e 29 7b 76 61 72 20 77 2c 53 2c 62 3d 21 31 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 Data Ascii: rchParams){var y=new URLSearchParams(g.replace(/^[^\?]+\??/,"")),h=y.get("token");h&&(p.token=h);var T=y.get("spa");p.spa=null===T\|\|"true"===T}}p&&"multi"!==p.load&&(p.load="single"),window.__cfBeacon=p}if(s&&p&&p.token){var w,S,b=!1;document.addEventList
2025-01-09 23:22:27 UTC	1369	IN	Data Raw: 2e 74 69 6d 69 6e 67 73 56 32 3d 7b 7d 2c 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 3d 32 2c 64 2e 64 74 3d 6d 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 2c 64 65 6c 65 74 65 20 64 2e 74 69 6d 69 6e 67 73 2c 74 28 6d 5b 30 5d 2c 64 2e 74 69 6d 69 6e 67 73 56 32 29 29 7d 31 3d 3d 3d 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 26 26 74 28 63 2c 64 2e 74 69 6d 69 6e 67 73 29 2c 74 28 75 2c 64 2e 6d 65 6d 6f 72 79 29 7d 65 6c 73 65 20 4f 28 64 29 3b 72 65 74 75 72 6e 20 64 2e 66 69 72 73 74 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 70 61 69 6e 74 22 29 2c 64 2e 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 29 2c 70 26 26 28 70 2e 69 63 Data Ascii: .timingsV2={},d.versions.timings=2,d.dt=m[0].deliveryType,delete d.timings,t(m[0],d.timingsV2))}1===d.versions.timings&&t(c,d.timings),t(u,d.memory)}else O(d);return d.firstPaint=k("first-paint"),d.firstContentfulPaint=k("first-contentful-paint"),p&&(p.ic
2025-01-09 23:22:27 UTC	1369	IN	Data Raw: 65 72 65 64 3a 21 30 7d 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 52 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 52 29 7d 29 29 3b 76 61 72 20 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 26 26 30 3d 3d 3d 76 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 3d 3d 3d 6c 7d 29 29 2e 6c 65 6e 67 74 68 7d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 2e 70 75 73 68 28 7b 69 64 3a 6c 2c 75 72 6c 3a 65 2c 74 73 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 Data Ascii: ered:!0}};"complete"===window.document.readyState?R():window.addEventListener("load",(function(){window.setTimeout(R)}));var A=function(){return L&&0===v.filter((function(e){return e.id===l})).length},_=function(e){v.push({id:l,url:e,ts:(new Date).getTime
2025-01-09 23:22:27 UTC	1369	IN	Data Raw: 72 63 65 4c 6f 61 64 54 69 6d 65 2c 45 2e 6c 63 70 2e 65 72 64 3d 63 2e 65 6c 65 6d 65 6e 74 52 65 6e 64 65 72 44 65 6c 61 79 2c 45 2e 6c 63 70 2e 69 74 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 63 2e 6c 63 70 52 65 73 6f 75 72 63 65 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 2c 45 2e 6c 63 70 2e 66 70 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 63 2e 6c 63 70 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 65 6c 65 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 66 65 74 63 68 70 72 69 6f 72 69 74 79 22 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 49 4e 50 22 Data Ascii: rceLoadTime,E.lcp.erd=c.elementRenderDelay,E.lcp.it=null===(i=c.lcpResourceEntry)\|\|void 0===i?void 0:i.initiatorType,E.lcp.fp=null===(a=null===(o=c.lcpEntry)\|\|void 0===o?void 0:o.element)\|\|void 0===a?void 0:a.getAttribute("fetchpriority"));break;case"INP"
2025-01-09 23:22:27 UTC	1369	IN	Data Raw: 64 65 64 42 6f 64 79 53 69 7a 65 26 26 28 72 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 3d 6e 5b 30 5d 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 29 2c 65 2e 64 74 3d 6e 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 29 2c 74 28 72 2c 65 2e 74 69 6d 69 6e 67 73 56 32 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 76 61 72 20 74 3b 69 66 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 26 26 45 2e 66 63 70 26 26 45 2e 66 63 70 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 45 2e 66 63 70 2e 76 61 6c 75 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 73 2e 67 65 74 45 6e 74 72 69 Data Ascii: dedBodySize&&(r.decodedBodySize=n[0].decodedBodySize),e.dt=n[0].deliveryType),t(r,e.timingsV2)}}function k(e){var t;if("first-contentful-paint"===e&&E.fcp&&E.fcp.value)return E.fcp.value;if("function"==typeof s.getEntriesByType){var n=null===(t=s.getEntri
2025-01-09 23:22:27 UTC	1369	IN	Data Raw: 76 65 6e 74 54 79 70 65 3d 7b 7d 29 29 5b 72 2e 4c 6f 61 64 3d 31 5d 3d 22 4c 6f 61 64 22 2c 72 5b 72 2e 41 64 64 69 74 69 6f 6e 61 6c 3d 32 5d 3d 22 41 64 64 69 74 69 6f 6e 61 6c 22 2c 72 5b 72 2e 57 65 62 56 69 74 61 6c 73 56 32 3d 33 5d 3d 22 57 65 62 56 69 74 61 6c 73 56 32 22 2c 28 6e 3d 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 7c 7c 28 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 3d 7b 7d 29 29 2e 48 69 67 68 3d 22 68 69 67 68 22 2c 6e 2e 4c 6f 77 3d 22 6c 6f 77 22 2c 6e 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 2c 31 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 Data Ascii: ventType={}))[r.Load=1]="Load",r[r.Additional=2]="Additional",r[r.WebVitalsV2=3]="WebVitalsV2",(n=t.FetchPriority\|\|(t.FetchPriority={})).High="high",n.Low="low",n.Auto="auto"},104:function(e,t){!function(e){"use strict";var t,n,r,i,o,a=function(){return w
2025-01-09 23:22:27 UTC	1369	IN	Data Raw: 30 3f 72 3d 22 70 72 65 72 65 6e 64 65 72 22 3a 64 6f 63 75 6d 65 6e 74 2e 77 61 73 44 69 73 63 61 72 64 65 64 3f 72 3d 22 72 65 73 74 6f 72 65 22 3a 6e 2e 74 79 70 65 26 26 28 72 3d 6e 2e 74 79 70 65 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2d 22 29 29 29 2c 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 2d 31 3a 74 2c 72 61 74 69 6e 67 3a 22 67 6f 6f 64 22 2c 64 65 6c 74 61 3a 30 2c 65 6e 74 72 69 65 73 3a 5b 5d 2c 69 64 3a 22 76 33 2d 22 2e 63 6f 6e 63 61 74 28 44 61 74 65 2e 6e 6f 77 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 39 39 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 65 31 32 29 2c 6e 61 76 69 67 61 74 69 6f 6e 54 79 70 65 3a 72 7d 7d 2c Data Ascii: 0?r="prerender":document.wasDiscarded?r="restore":n.type&&(r=n.type.replace(/_/g,"-"))),{name:e,value:void 0===t?-1:t,rating:"good",delta:0,entries:[],id:"v3-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:r}},
2025-01-09 23:22:27 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 72 65 72 65 6e 64 65 72 69 6e 67 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 3c 30 26 26 28 77 3d 53 28 29 2c 45 28 29 2c 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 3d 53 28 29 2c 45 28 29 7d 29 2c 30 29 7d 29 29 29 2c 7b 67 65 74 20 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 28 29 7b 72 65 74 75 72 6e 20 77 7d 7d 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 70 Data Ascii: function(){removeEventListener("visibilitychange",b,!0),removeEventListener("prerenderingchange",b,!0)},C=function(){return w<0&&(w=S(),E(),l((function(){setTimeout((function(){w=S(),E()}),0)}))),{get firstHiddenTime(){return w}}},P=function(e){document.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.10	50145	18.66.102.51	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:27 UTC	365	OUT	GET /c/hotjar-1419317.js?sv=7 HTTP/1.1 Host: static.hotjar.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:28 UTC	640	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Date: Thu, 09 Jan 2025 23:22:24 GMT Access-Control-Allow-Origin: * Cache-Control: max-age=60 Cross-Origin-Resource-Policy: cross-origin ETag: W/16fa72f22822661137fde4156a344296 Strict-Transport-Security: max-age=2592000; includeSubDomains X-Cache-Hit: 1 X-Content-Type-Options: nosniff Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 59d5785a1d012a54118141e7e216a492.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: n3-2B-qmnw80i9sFf5SYGTgZPA739f56oNmJd-SuH0EdQ4eOWGG5TQ== Age: 3
2025-01-09 23:22:28 UTC	13116	IN	Data Raw: 33 33 33 34 0d 0a 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 3d 20 77 69 6e 64 6f 77 2e 68 6a 53 69 74 65 53 65 74 74 69 6e 67 73 20 7c 7c 20 7b 22 73 69 74 65 5f 69 64 22 3a 31 34 31 39 33 31 37 2c 22 72 65 63 5f 76 61 6c 75 65 22 3a 30 2e 30 2c 22 73 74 61 74 65 5f 63 68 61 6e 67 65 5f 6c 69 73 74 65 6e 5f 6d 6f 64 65 22 3a 22 61 75 74 6f 6d 61 74 69 63 22 2c 22 72 65 63 6f 72 64 22 3a 74 72 75 65 2c 22 63 6f 6e 74 69 6e 75 6f 75 73 5f 63 61 70 74 75 72 65 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 72 65 63 6f 72 64 69 6e 67 5f 63 61 70 74 75 72 65 5f 6b 65 79 73 74 72 6f 6b 65 73 22 3a 66 61 6c 73 65 2c 22 73 65 73 73 69 6f 6e 5f 63 61 70 74 75 72 65 5f 63 6f 6e 73 6f 6c 65 5f 63 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 Data Ascii: 3334window.hjSiteSettings = window.hjSiteSettings \|\| {"site_id":1419317,"rec_value":0.0,"state_change_listen_mode":"automatic","record":true,"continuous_capture_enabled":true,"recording_capture_keystrokes":false,"session_capture_console_consent":false,"
2025-01-09 23:22:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.10	50149	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:27 UTC	830	OUT	GET /api/v1/event/lead-generation_consumer_loads-lead-form-action HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: form_url=%2Fmedicare-marketplace; gh-session-id=fc99a7c8-08f9-4875-be9f-f97a9821de17; _gcl_gs=2.1.k5$i1736464937$u41793726; _gcl_au=1.1.1804017665.1736464944; optimizelyEndUserId=oeu1736464944079r0.8329921030541232; optimizelySession=1736464944099; _gcl_aw=GCL.1736464946.EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE; _ga=GA1.1.1197952561.1736464946; _ga_G99G7L25WL=GS1.1.1736464945.1.0.1736464945.60.0.0
2025-01-09 23:22:27 UTC	1222	IN	HTTP/1.1 404 Not Found Date: Thu, 09 Jan 2025 23:22:27 GMT Content-Type: text/html; charset=utf-8 Content-Length: 55258 Connection: close Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://.optimizely.com https://optimizely.s3.amazonaws.com https://cdn-assets-prod.s3.amazonaws.com https: ; style-src 'self' 'unsafe-inline' https: ; object-src 'none'; worker-src data:; connect-src 'self' https: wss://.hotjar.com https://.optimizely.com ; img-src 'self' https: http: data: https://.optimizely.com; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://.typekit.net; frame-src 'self' https://.googletagmanager.com https://.hotjar.com https://.snapchat.com https://.google.com https://.mediaalpha.com https://.optimizely.com https://.taboola.com https://.doubleclick.net; frame-ancestors 'self' https://.optimizely.com Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Frame-Options: sameorigin X-Download-Options: noopen X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Cache-Control: no-cache, no-store, max-age=0, must-revalidate ETag: "xqy33piqbq16mp" Vary: Accept-Encoding
2025-01-09 23:22:27 UTC	15162	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 61 74 61 2d 61 70 70 2d 6e 61 6d 65 3d 22 63 6d 2d 6d 65 64 69 63 61 72 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6e 65 78 74 2d 68 65 61 64 2d 63 6f 75 6e 74 22 20 63 6f 6e 74 65 6e 74 3d 22 32 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 64 61 74 61 2d 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 2e 74 79 70 65 6b 69 74 2e 6e 65 74 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 Data Ascii: <!DOCTYPE html><html lang="en" data-app-name="cm-medicare"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><meta name="next-head-count" content="2"/><link rel="preconnect" data-href="https://use.typekit.net"/><link rel="pr
2025-01-09 23:22:28 UTC	10435	IN	Data Raw: 20 6e 3d 72 28 38 33 36 29 2c 69 3d 72 28 36 30 37 29 3b 63 6f 6e 73 74 20 6f 3d 22 6e 72 40 6f 72 69 67 69 6e 61 6c 3a 22 2e 63 6f 6e 63 61 74 28 69 2e 57 29 3b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 73 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 7c 7c 28 65 3d 6e 2e 65 65 29 2c 72 2e 69 6e 50 6c 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 2c 6f 29 7b 6e 7c 7c 28 6e 3d 22 22 29 3b 63 6f 6e 73 74 20 61 3d 22 2d 22 3d 3d 3d 6e 2e 63 68 61 72 41 74 28 30 29 3b 66 6f 72 28 6c 65 74 20 73 3d 30 3b 73 3c 74 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 63 6f 6e 73 74 20 63 3d 74 5b 73 5d 2c 75 3d 65 5b 63 5d 3b 6c 28 75 29 7c 7c 28 65 5b Data Ascii: n=r(836),i=r(607);const o="nr@original:".concat(i.W);var a=Object.prototype.hasOwnProperty,s=!1;function c(e,t){return e\|\|(e=n.ee),r.inPlace=function(e,t,n,i,o){n\|\|(n="");const a="-"===n.charAt(0);for(let s=0;s<t.length;s++){const c=t[s],u=e[c];l(u)\|\|(e[
2025-01-09 23:22:28 UTC	16384	IN	Data Raw: 2c 69 29 3d 3e 6e 3d 65 5b 74 5d 3d 5b 72 2c 69 5d 29 29 3b 72 2e 70 75 73 68 28 6e 5b 32 5d 3d 6f 29 3b 76 61 72 20 61 3d 69 2e 70 2b 69 2e 75 28 74 29 2c 73 3d 6e 65 77 20 45 72 72 6f 72 3b 69 2e 6c 28 61 2c 28 72 3d 3e 7b 69 66 28 69 2e 6f 28 65 2c 74 29 26 26 28 30 21 3d 3d 28 6e 3d 65 5b 74 5d 29 26 26 28 65 5b 74 5d 3d 76 6f 69 64 20 30 29 2c 6e 29 29 7b 76 61 72 20 6f 3d 72 26 26 28 22 6c 6f 61 64 22 3d 3d 3d 72 2e 74 79 70 65 3f 22 6d 69 73 73 69 6e 67 22 3a 72 2e 74 79 70 65 29 2c 61 3d 72 26 26 72 2e 74 61 72 67 65 74 26 26 72 2e 74 61 72 67 65 74 2e 73 72 63 3b 73 2e 6d 65 73 73 61 67 65 3d 22 4c 6f 61 64 69 6e 67 20 63 68 75 6e 6b 20 22 2b 74 2b 22 20 66 61 69 6c 65 64 2e 5c 6e 28 22 2b 6f 2b 22 3a 20 22 2b 61 2b 22 29 22 2c 73 2e 6e 61 6d 65 Data Ascii: ,i)=>n=e[t]=[r,i]));r.push(n[2]=o);var a=i.p+i.u(t),s=new Error;i.l(a,(r=>{if(i.o(e,t)&&(0!==(n=e[t])&&(e[t]=void 0),n)){var o=r&&("load"===r.type?"missing":r.type),a=r&&r.target&&r.target.src;s.message="Loading chunk "+t+" failed.\n("+o+": "+a+")",s.name
2025-01-09 23:22:28 UTC	13277	IN	Data Raw: 61 74 69 63 20 74 65 6c 65 70 68 6f 6e 65 20 64 69 61 6c 69 6e 67 20 73 79 73 74 65 6d 2c 20 61 72 74 69 66 69 63 69 61 6c 20 76 6f 69 63 65 20 61 6e 64 2f 6f 72 20 70 72 65 2d 72 65 63 6f 72 64 65 64 20 6d 65 73 73 61 67 65 2c 20 6f 72 20 74 65 78 74 20 6d 65 73 73 61 67 65 20 61 74 20 74 68 65 20 74 65 6c 65 70 68 6f 6e 65 20 6e 75 6d 62 65 72 20 79 6f 75 20 70 72 6f 76 69 64 65 64 2e 20 49 66 20 79 6f 75 20 63 68 6f 6f 73 65 20 74 6f 20 70 72 6f 76 69 64 65 20 79 6f 75 72 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 2c 20 79 6f 75 20 63 6f 6e 73 65 6e 74 20 74 6f 20 62 65 20 63 6f 6e 74 61 63 74 65 64 20 61 74 20 74 68 61 74 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 20 62 79 20 55 6e 69 74 65 64 48 65 61 6c 74 68 63 61 72 65 20 66 6f 72 20 74 68 65 20 73 Data Ascii: atic telephone dialing system, artificial voice and/or pre-recorded message, or text message at the telephone number you provided. If you choose to provide your email address, you consent to be contacted at that email address by UnitedHealthcare for the s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.10	50150	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:27 UTC	816	OUT	GET /api/v1/event/lead-generation_consumer_click-ad HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: form_url=%2Fmedicare-marketplace; gh-session-id=fc99a7c8-08f9-4875-be9f-f97a9821de17; _gcl_gs=2.1.k5$i1736464937$u41793726; _gcl_au=1.1.1804017665.1736464944; optimizelyEndUserId=oeu1736464944079r0.8329921030541232; optimizelySession=1736464944099; _gcl_aw=GCL.1736464946.EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE; _ga=GA1.1.1197952561.1736464946; _ga_G99G7L25WL=GS1.1.1736464945.1.0.1736464945.60.0.0
2025-01-09 23:22:27 UTC	1222	IN	HTTP/1.1 404 Not Found Date: Thu, 09 Jan 2025 23:22:27 GMT Content-Type: text/html; charset=utf-8 Content-Length: 55258 Connection: close Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://.optimizely.com https://optimizely.s3.amazonaws.com https://cdn-assets-prod.s3.amazonaws.com https: ; style-src 'self' 'unsafe-inline' https: ; object-src 'none'; worker-src data:; connect-src 'self' https: wss://.hotjar.com https://.optimizely.com ; img-src 'self' https: http: data: https://.optimizely.com; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://.typekit.net; frame-src 'self' https://.googletagmanager.com https://.hotjar.com https://.snapchat.com https://.google.com https://.mediaalpha.com https://.optimizely.com https://.taboola.com https://.doubleclick.net; frame-ancestors 'self' https://.optimizely.com Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Frame-Options: sameorigin X-Download-Options: noopen X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Cache-Control: no-cache, no-store, max-age=0, must-revalidate ETag: "i8egu8mg4l16mp" Vary: Accept-Encoding
2025-01-09 23:22:27 UTC	7699	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 61 74 61 2d 61 70 70 2d 6e 61 6d 65 3d 22 63 6d 2d 6d 65 64 69 63 61 72 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6e 65 78 74 2d 68 65 61 64 2d 63 6f 75 6e 74 22 20 63 6f 6e 74 65 6e 74 3d 22 32 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 64 61 74 61 2d 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 2e 74 79 70 65 6b 69 74 2e 6e 65 74 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 Data Ascii: <!DOCTYPE html><html lang="en" data-app-name="cm-medicare"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><meta name="next-head-count" content="2"/><link rel="preconnect" data-href="https://use.typekit.net"/><link rel="pr
2025-01-09 23:22:28 UTC	16384	IN	Data Raw: 69 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 73 65 6c 66 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 57 6f 72 6b 65 72 47 6c 6f 62 61 6c 53 63 6f 70 65 26 26 67 6c 6f 62 61 6c 54 68 69 73 29 2c 73 3d 42 6f 6f 6c 65 61 6e 28 22 68 69 64 64 65 6e 22 3d 3d 3d 61 3f 2e 64 6f 63 75 6d 65 6e 74 3f 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 29 2c 63 3d 2f Data Ascii: i?window:"undefined"!=typeof WorkerGlobalScope&&("undefined"!=typeof self&&self instanceof WorkerGlobalScope&&self\|\|"undefined"!=typeof globalThis&&globalThis instanceof WorkerGlobalScope&&globalThis),s=Boolean("hidden"===a?.document?.visibilityState),c=/
2025-01-09 23:22:28 UTC	1514	IN	Data Raw: 74 29 69 2e 6f 28 74 2c 72 29 26 26 21 69 2e 6f 28 65 2c 72 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 72 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 74 5b 72 5d 7d 29 7d 2c 69 2e 66 3d 7b 7d 2c 69 2e 65 3d 65 3d 3e 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 4f 62 6a 65 63 74 2e 6b 65 79 73 28 69 2e 66 29 2e 72 65 64 75 63 65 28 28 28 74 2c 72 29 3d 3e 28 69 2e 66 5b 72 5d 28 65 2c 74 29 2c 74 29 29 2c 5b 5d 29 29 2c 69 2e 75 3d 65 3d 3e 22 6e 72 2d 72 75 6d 2d 31 2e 32 37 38 2e 31 2e 6d 69 6e 2e 6a 73 22 2c 69 2e 6f 3d 28 65 2c 74 29 3d 3e 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 2c 65 3d 7b 7d 2c 74 3d 22 4e 52 42 41 2d 31 2e Data Ascii: t)i.o(t,r)&&!i.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:t[r]})},i.f={},i.e=e=>Promise.all(Object.keys(i.f).reduce(((t,r)=>(i.f[r](e,t),t)),[])),i.u=e=>"nr-rum-1.278.1.min.js",i.o=(e,t)=>Object.prototype.hasOwnProperty.call(e,t),e={},t="NRBA-1.
2025-01-09 23:22:28 UTC	16384	IN	Data Raw: 2c 69 29 3d 3e 6e 3d 65 5b 74 5d 3d 5b 72 2c 69 5d 29 29 3b 72 2e 70 75 73 68 28 6e 5b 32 5d 3d 6f 29 3b 76 61 72 20 61 3d 69 2e 70 2b 69 2e 75 28 74 29 2c 73 3d 6e 65 77 20 45 72 72 6f 72 3b 69 2e 6c 28 61 2c 28 72 3d 3e 7b 69 66 28 69 2e 6f 28 65 2c 74 29 26 26 28 30 21 3d 3d 28 6e 3d 65 5b 74 5d 29 26 26 28 65 5b 74 5d 3d 76 6f 69 64 20 30 29 2c 6e 29 29 7b 76 61 72 20 6f 3d 72 26 26 28 22 6c 6f 61 64 22 3d 3d 3d 72 2e 74 79 70 65 3f 22 6d 69 73 73 69 6e 67 22 3a 72 2e 74 79 70 65 29 2c 61 3d 72 26 26 72 2e 74 61 72 67 65 74 26 26 72 2e 74 61 72 67 65 74 2e 73 72 63 3b 73 2e 6d 65 73 73 61 67 65 3d 22 4c 6f 61 64 69 6e 67 20 63 68 75 6e 6b 20 22 2b 74 2b 22 20 66 61 69 6c 65 64 2e 5c 6e 28 22 2b 6f 2b 22 3a 20 22 2b 61 2b 22 29 22 2c 73 2e 6e 61 6d 65 Data Ascii: ,i)=>n=e[t]=[r,i]));r.push(n[2]=o);var a=i.p+i.u(t),s=new Error;i.l(a,(r=>{if(i.o(e,t)&&(0!==(n=e[t])&&(e[t]=void 0),n)){var o=r&&("load"===r.type?"missing":r.type),a=r&&r.target&&r.target.src;s.message="Loading chunk "+t+" failed.\n("+o+": "+a+")",s.name
2025-01-09 23:22:28 UTC	1514	IN	Data Raw: 61 74 69 63 20 74 65 6c 65 70 68 6f 6e 65 20 64 69 61 6c 69 6e 67 20 73 79 73 74 65 6d 2c 20 61 72 74 69 66 69 63 69 61 6c 20 76 6f 69 63 65 20 61 6e 64 2f 6f 72 20 70 72 65 2d 72 65 63 6f 72 64 65 64 20 6d 65 73 73 61 67 65 2c 20 6f 72 20 74 65 78 74 20 6d 65 73 73 61 67 65 20 61 74 20 74 68 65 20 74 65 6c 65 70 68 6f 6e 65 20 6e 75 6d 62 65 72 20 79 6f 75 20 70 72 6f 76 69 64 65 64 2e 20 49 66 20 79 6f 75 20 63 68 6f 6f 73 65 20 74 6f 20 70 72 6f 76 69 64 65 20 79 6f 75 72 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 2c 20 79 6f 75 20 63 6f 6e 73 65 6e 74 20 74 6f 20 62 65 20 63 6f 6e 74 61 63 74 65 64 20 61 74 20 74 68 61 74 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 20 62 79 20 55 6e 69 74 65 64 48 65 61 6c 74 68 63 61 72 65 20 66 6f 72 20 74 68 65 20 73 Data Ascii: atic telephone dialing system, artificial voice and/or pre-recorded message, or text message at the telephone number you provided. If you choose to provide your email address, you consent to be contacted at that email address by UnitedHealthcare for the s
2025-01-09 23:22:28 UTC	11763	IN	Data Raw: 69 74 73 22 2c 22 66 6f 6f 74 65 72 2e 72 69 67 68 74 73 22 3a 22 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 22 2c 22 66 6f 6f 74 65 72 2e 77 65 62 73 69 74 65 22 3a 22 54 68 69 73 20 77 65 62 73 69 74 65 20 69 73 20 6e 6f 74 20 61 66 66 69 6c 69 61 74 65 64 20 77 69 74 68 20 47 6f 48 65 61 6c 74 68 20 55 72 67 65 6e 74 20 43 61 72 65 2e 22 2c 22 68 65 61 64 65 72 2e 61 67 65 6e 74 22 3a 22 53 70 65 61 6b 20 74 6f 20 61 20 4c 69 63 65 6e 73 65 64 20 49 6e 73 75 72 61 6e 63 65 20 41 67 65 6e 74 22 2c 22 68 65 61 64 65 72 2e 75 73 65 72 73 22 3a 22 54 54 59 20 55 73 65 72 73 22 2c 22 68 6f 75 72 73 6f 66 6f 70 65 72 61 74 69 6f 6e 73 2e 6d 65 73 73 61 67 65 22 3a 22 47 72 65 61 74 21 20 57 65 27 6c 6c 20 72 65 61 63 68 20 6f 75 74 20 74 6f 20 Data Ascii: its","footer.rights":"All Rights Reserved","footer.website":"This website is not affiliated with GoHealth Urgent Care.","header.agent":"Speak to a Licensed Insurance Agent","header.users":"TTY Users","hoursofoperations.message":"Great! We'll reach out to

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.10	50148	18.66.147.56	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:27 UTC	404	OUT	GET /lead-generation-sites/medicare/arrow-down-gray.1726470758.svg HTTP/1.1 Host: cdn.qa.gohealth.xyz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:28 UTC	494	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 202 Connection: close Last-Modified: Thu, 09 Jan 2025 15:47:34 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 09 Jan 2025 23:22:29 GMT ETag: "ca543d8a57515596482a871320d39416" X-Cache: RefreshHit from cloudfront Via: 1.1 b47ba5841a54cf2d19fc521c78e94514.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: ZT2YXn88e4PCRFxGksRRDafN8ztAkEU3r7W-7MF7YGZrTzgAAFu1BA==
2025-01-09 23:22:28 UTC	202	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 32 33 22 20 68 65 69 67 68 74 3d 22 32 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 33 20 32 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 36 2e 32 30 32 33 39 20 38 2e 33 32 34 33 34 4c 31 31 2e 37 30 32 34 20 31 33 2e 38 32 34 33 4c 31 37 2e 32 30 32 34 20 38 2e 33 32 34 33 34 22 20 73 74 72 6f 6b 65 3d 22 23 31 42 31 44 31 46 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 32 22 20 2f 3e 0a 3c 2f 73 76 67 3e Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="23" height="22" viewBox="0 0 23 22" fill="none"> <path d="M6.20239 8.32434L11.7024 13.8243L17.2024 8.32434" stroke="#1B1D1F" stroke-width="2" /></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.10	50147	18.66.147.56	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:27 UTC	407	OUT	GET /lead-generation-sites/medicare/gohealth_logo_gray.1716542403.svg HTTP/1.1 Host: cdn.qa.gohealth.xyz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:28 UTC	495	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 7043 Connection: close Last-Modified: Thu, 09 Jan 2025 15:47:34 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Thu, 09 Jan 2025 23:22:29 GMT ETag: "027d4df1a0b41fe0da94ba6111ca03e7" X-Cache: RefreshHit from cloudfront Via: 1.1 19dbc4cbbe0be3dca8e57283a83b57c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: uR_e721euobVeoLoAS9n0O6qfDOQs9vKeC6K4zr7RInjROtJpszWTA==
2025-01-09 23:22:28 UTC	7043	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 35 37 22 20 68 65 69 67 68 74 3d 22 33 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 37 20 33 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 6d 61 73 6b 20 69 64 3d 22 6d 61 73 6b 30 5f 32 5f 36 38 22 20 73 74 79 6c 65 3d 22 6d 61 73 6b 2d 74 79 70 65 3a 6c 75 6d 69 6e 61 6e 63 65 22 20 6d 61 73 6b 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 3d 22 30 22 20 79 3d 22 30 22 20 77 69 64 74 68 3d 22 32 38 22 20 68 65 69 67 68 74 3d 22 33 31 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 Data Ascii: <svg width="157" height="31" viewBox="0 0 157 31" fill="none" xmlns="http://www.w3.org/2000/svg"><mask id="mask0_2_68" style="mask-type:luminance" maskUnits="userSpaceOnUse" x="0" y="0" width="28" height="31"><path fill-rule="evenodd" clip-rule="evenodd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.10	50156	35.186.249.72	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:27 UTC	381	OUT	GET /A4782568-7cfe-4f0c-8bd3-4f4c594e53291.js HTTP/1.1 Host: utt.impactcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:27 UTC	907	IN	HTTP/1.1 200 OK X-GUploader-UploadID: AFIdbgS2FuyPuSrF-62EjTUZxXdmjHAFPrPXU7l6rEslK0c1TUjM2IFzQtVUUJtYcY_SRZe3sBa_VjQ x-goog-generation: 1733952450852893 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 19230 x-goog-hash: crc32c=GdbkCQ== x-goog-hash: md5=/3H+Rk/Fjqx53L9yEgXTVg== x-goog-storage-class: MULTI_REGIONAL Access-Control-Allow-Origin: * X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped Server: UploadServer Date: Thu, 09 Jan 2025 23:22:27 GMT Expires: Thu, 09 Jan 2025 23:27:27 GMT Cache-Control: public,max-age=900,s-maxage=300 Last-Modified: Wed, 11 Dec 2024 21:27:30 GMT ETag: W/"ff71fe464fc58eac79dcbf721205d356" Content-Type: text/javascript; charset=utf-8 Vary: Accept-Encoding Content-Length: 45744 Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-09 23:22:27 UTC	483	IN	Data Raw: 2f 2a 21 20 40 62 75 69 6c 64 20 31 35 31 62 31 64 37 31 20 40 64 61 74 65 20 32 30 32 34 2d 31 30 2d 31 37 54 31 35 3a 34 31 3a 34 31 2e 37 31 33 5a 20 40 67 65 6e 65 72 61 74 65 64 20 32 30 32 34 2d 31 32 2d 31 31 54 32 31 3a 32 37 3a 33 30 2e 35 38 33 30 33 30 36 34 38 5a 20 2a 2f 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 7b 38 37 31 34 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 76 61 72 20 61 3d 72 28 39 38 31 34 29 2c 66 3d 72 28 39 34 30 32 29 2c 64 3d 72 28 38 39 35 36 29 2c 6c 3d 72 28 34 32 36 29 2c 73 3d 72 28 35 34 32 33 29 2c 6d 3d 72 28 34 35 30 29 2e 74 2c 76 3d 72 28 31 35 33 37 29 2e 69 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 63 29 7b 76 61 72 20 6e 3d 6e Data Ascii: /! @build 151b1d71 @date 2024-10-17T15:41:41.713Z @generated 2024-12-11T21:27:30.583030648Z /!function(){"use strict";var r={8714:function(n,t,r){var a=r(9814),f=r(9402),d=r(8956),l=r(426),s=r(5423),m=r(450).t,v=r(1537).i;n.exports=function(i,c){var n=n
2025-01-09 23:22:27 UTC	1390	IN	Data Raw: 36 31 34 35 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 76 61 72 20 62 3d 72 28 39 33 34 30 29 2e 43 2c 68 3d 72 28 39 37 39 30 29 2c 78 3d 72 28 38 37 31 34 29 2c 79 3d 72 28 31 33 37 34 29 2c 77 3d 72 28 32 31 33 32 29 2c 67 3d 72 28 37 37 32 35 29 2c 24 3d 72 28 34 36 36 34 29 2c 43 3d 72 28 37 39 35 30 29 2e 46 2c 46 3d 72 28 31 35 33 37 29 2e 76 2c 6b 3d 72 28 37 37 38 38 29 2c 5a 3d 72 28 38 37 38 33 29 2c 7a 3d 72 28 37 30 36 32 29 2c 52 3d 72 28 34 35 30 29 2e 6b 2c 59 3d 72 28 38 35 34 36 29 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 2c 65 29 7b 76 61 72 20 69 2c 74 3d 52 28 24 2e 5a 28 43 28 59 29 29 2c 74 29 2c 63 3d 67 28 77 28 6e 2c 74 2c 62 29 2c 7b 64 65 62 75 67 3a 21 30 7d 29 2c 75 3d 7b 52 3a 21 31 Data Ascii: 6145:function(n,t,r){var b=r(9340).C,h=r(9790),x=r(8714),y=r(1374),w=r(2132),g=r(7725),$=r(4664),C=r(7950).F,F=r(1537).v,k=r(7788),Z=r(8783),z=r(7062),R=r(450).k,Y=r(8546);n.exports=function(n,t,r,e){var i,t=R($.Z(C(Y)),t),c=g(w(n,t,b),{debug:!0}),u={R:!1
2025-01-09 23:22:27 UTC	1390	IN	Data Raw: 30 4c 6e 4e 7a 63 58 51 75 61 57 38 76 63 33 46 31 59 58 52 6a 61 43 31 71 63 30 41 79 49 69 77 69 59 33 42 6b 49 6a 6f 69 63 43 35 70 62 58 42 6a 64 43 35 7a 61 58 52 6c 49 69 77 69 5a 33 52 6b 49 6a 6f 69 5a 43 35 70 62 58 42 6a 64 43 35 7a 61 58 52 6c 49 69 77 69 5a 47 52 6b 49 6a 6f 69 5a 43 35 70 62 58 42 6a 64 43 35 7a 61 58 52 6c 49 69 77 69 5a 47 52 6c 49 6a 6f 69 5a 43 49 73 49 6e 6f 78 5a 69 49 36 49 6d 6c 74 63 47 46 6a 64 43 31 6c 64 6d 56 75 64 48 4d 69 4c 43 4a 36 4d 57 63 69 4f 69 4a 70 62 58 42 68 59 33 51 74 62 47 39 35 59 57 78 30 65 53 49 73 49 6e 4a 7a 61 79 49 36 49 6d 6c 74 63 47 46 6a 64 43 31 79 5a 57 5a 6c 63 6e 4a 68 62 43 49 73 49 6e 6f 78 61 43 49 36 49 6d 4e 30 49 69 77 69 65 6a 46 77 49 6a 6f 69 63 47 63 69 4c 43 4a 36 4d 58 Data Ascii: 0LnNzcXQuaW8vc3F1YXRjaC1qc0AyIiwiY3BkIjoicC5pbXBjdC5zaXRlIiwiZ3RkIjoiZC5pbXBjdC5zaXRlIiwiZGRkIjoiZC5pbXBjdC5zaXRlIiwiZGRlIjoiZCIsInoxZiI6ImltcGFjdC1ldmVudHMiLCJ6MWciOiJpbXBhY3QtbG95YWx0eSIsInJzayI6ImltcGFjdC1yZWZlcnJhbCIsInoxaCI6ImN0IiwiejFwIjoicGciLCJ6MX
2025-01-09 23:22:27 UTC	1390	IN	Data Raw: 32 78 70 59 32 73 6c 4d 30 59 70 66 43 68 62 50 79 5a 64 4b 58 52 30 50 53 68 63 58 47 51 72 4b 56 38 6f 58 46 78 6b 4b 79 6c 66 4b 46 78 63 5a 43 73 70 4b 46 39 62 58 46 78 33 4c 56 30 72 4b 54 39 38 4b 46 78 63 4c 33 52 63 58 43 39 30 58 46 77 76 58 46 77 2f 59 54 30 6f 58 46 78 6b 4b 79 6b 70 66 43 68 63 58 43 39 30 58 46 77 76 64 46 78 63 50 32 45 39 4b 46 78 63 5a 43 73 70 4b 58 77 6f 59 57 5a 6d 58 32 4e 63 58 46 4d 71 50 32 46 6d 5a 6c 39 70 5a 44 30 6f 58 46 78 6b 4b 79 6b 70 66 47 52 7a 4d 56 78 63 4c 6d 35 73 58 46 77 76 59 31 78 63 4c 33 77 6f 4b 47 35 6b 64 44 56 38 62 48 51 30 4e 58 78 6d 63 6a 45 7a 4e 58 78 6b 64 44 55 78 66 47 46 30 4d 54 6c 38 61 6d 59 33 4f 58 78 79 61 32 34 7a 4b 56 78 63 4c 6d 35 6c 64 46 78 63 4c 32 4e 63 58 43 38 70 Data Ascii: 2xpY2slM0YpfChbPyZdKXR0PShcXGQrKV8oXFxkKylfKFxcZCspKF9bXFx3LV0rKT98KFxcL3RcXC90XFwvXFw/YT0oXFxkKykpfChcXC90XFwvdFxcP2E9KFxcZCspKXwoYWZmX2NcXFMqP2FmZl9pZD0oXFxkKykpfGRzMVxcLm5sXFwvY1xcL3woKG5kdDV8bHQ0NXxmcjEzNXxkdDUxfGF0MTl8amY3OXxya24zKVxcLm5ldFxcL2NcXC8p
2025-01-09 23:22:27 UTC	1390	IN	Data Raw: 30 63 6e 68 6b 58 46 77 75 59 32 39 74 66 48 52 79 59 57 35 7a 63 47 46 79 5a 57 35 30 62 47 46 69 63 31 78 63 4c 6d 4e 76 62 58 78 79 62 32 64 31 5a 57 5a 70 64 47 35 6c 63 33 4e 63 58 43 35 6a 62 32 31 38 62 47 56 68 62 6d 4a 6c 59 57 35 76 5a 6d 5a 70 59 32 6c 68 62 46 78 63 4c 6d 4e 76 62 58 78 79 5a 57 46 73 61 32 56 30 62 32 35 6c 63 31 78 63 4c 6d 4e 76 62 58 78 68 62 58 42 73 5a 57 31 6c 59 57 78 63 58 43 35 6a 62 32 30 70 66 43 68 62 50 33 77 6d 66 43 4e 64 59 56 39 68 61 57 51 39 57 32 45 74 65 6b 45 74 57 6a 41 74 4f 56 30 72 4b 58 77 6f 59 6d 68 77 61 47 39 30 62 33 5a 70 5a 47 56 76 58 46 77 75 59 32 39 74 58 46 77 76 59 31 78 63 4c 33 42 79 62 32 52 31 59 33 52 63 58 46 4d 71 58 46 77 76 51 6b 6c 63 58 43 39 63 58 47 51 71 58 46 78 54 4b 6c Data Ascii: 0cnhkXFwuY29tfHRyYW5zcGFyZW50bGFic1xcLmNvbXxyb2d1ZWZpdG5lc3NcXC5jb218bGVhbmJlYW5vZmZpY2lhbFxcLmNvbXxyZWFsa2V0b25lc1xcLmNvbXxhbXBsZW1lYWxcXC5jb20pfChbP3wmfCNdYV9haWQ9W2EtekEtWjAtOV0rKXwoYmhwaG90b3ZpZGVvXFwuY29tXFwvY1xcL3Byb2R1Y3RcXFMqXFwvQklcXC9cXGQqXFxTKl
2025-01-09 23:22:27 UTC	1390	IN	Data Raw: 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 5d 3b 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 76 61 72 20 6f 3d 5b 5d 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 28 61 2e 64 65 62 75 67 7c 7c 64 29 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 29 7d 3b 72 65 74 75 72 6e 20 61 2e 64 65 62 75 67 3d 64 2c 61 2e 65 72 72 6f 72 3d 64 2c 61 2e 69 6e 66 6f 3d 64 2c 61 2e 77 61 72 6e 3d 64 2c 28 61 2e 41 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 28 74 3d 74 7c 7c 7b 7d 29 2e 74 69 6d 65 73 74 61 6d 70 3f 31 3a 32 2c 69 3d 74 2e 64 65 62 75 67 3f 30 3a 31 2c 72 3d 30 2c 63 3d 6f 2e 6c 65 6e 67 74 68 3b 72 3c 63 3b 2b Data Ascii: g","info","warn","error"];n.exports=function(n,t){var o=[],a=function(){(a.debug\|\|d).apply(null,[].slice.call(arguments))};return a.debug=d,a.error=d,a.info=d,a.warn=d,(a.A=function(n,t){for(var e=(t=t\|\|{}).timestamp?1:2,i=t.debug?0:1,r=0,c=o.length;r<c;+
2025-01-09 23:22:27 UTC	1390	IN	Data Raw: 7a 31 6d 3a 75 2c 74 73 3a 72 2e 74 73 2c 7a 31 32 3a 72 2e 7a 31 32 2c 7a 31 38 3a 6e 2c 7a 31 37 3a 74 2c 7a 31 33 3a 6c 2e 61 6e 28 65 29 2c 61 63 69 64 3a 6f 2e 61 63 69 64 2c 76 65 72 3a 61 2e 76 65 72 2c 7a 6d 3a 22 31 35 31 62 31 64 37 31 22 2c 7a 31 6f 3a 6e 61 76 69 67 61 74 6f 72 26 26 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 3f 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 3a 22 75 6e 61 76 61 69 6c 61 62 6c 65 22 7d 29 29 7d 3b 66 28 69 2c 63 2c 7b 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 26 26 64 28 69 2c 63 2c 7b 7d 2c 6c 2e 50 29 7d 29 7d 7d 3b 72 65 74 75 72 6e 7b 64 65 62 75 67 3a 6e 3e 3d 65 2e 5f 3f 74 28 69 2e 5f 29 3a 6c 2e 50 2c 69 6e 66 6f 3a 6e 3e 3d 65 2e 6e 6e 3f 74 28 69 2e 6e 6e 29 3a 6c 2e 50 2c Data Ascii: z1m:u,ts:r.ts,z12:r.z12,z18:n,z17:t,z13:l.an(e),acid:o.acid,ver:a.ver,zm:"151b1d71",z1o:navigator&&navigator.userAgent?navigator.userAgent:"unavailable"}))};f(i,c,{},function(n){n&&d(i,c,{},l.P)})}};return{debug:n>=e._?t(i._):l.P,info:n>=e.nn?t(i.nn):l.P,
2025-01-09 23:22:27 UTC	1390	IN	Data Raw: 68 29 72 65 74 75 72 6e 20 75 28 29 3b 65 2e 78 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 74 3d 63 2e 6c 65 6e 67 74 68 3b 6e 3c 74 3b 2b 2b 6e 29 7b 76 61 72 20 72 3d 63 5b 6e 5d 3b 69 66 28 72 2e 75 26 26 6f 2e 68 2e 77 6e 2e 79 6e 28 72 2e 75 2c 6e 75 6c 6c 2c 7b 74 61 67 3a 22 69 66 22 3d 3d 3d 72 2e 74 3f 22 69 66 72 61 6d 65 22 3a 22 69 6d 61 67 65 22 7d 2c 75 29 2c 21 72 2e 63 29 72 65 74 75 72 6e 20 75 28 29 3b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 2c 65 3d 28 65 2e 69 64 3d 22 69 6d 70 61 63 74 50 6f 73 74 62 61 63 6b 46 72 61 6d 65 22 2b 6e 2c 65 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 28 65 2e 63 6f 6e 74 65 6e 74 57 69 6e Data Ascii: h)return u();e.xn(function(){for(var n=0,t=c.length;n<t;++n){var r=c[n];if(r.u&&o.h.wn.yn(r.u,null,{tag:"if"===r.t?"iframe":"image"},u),!r.c)return u();var e=document.createElement("iframe"),e=(e.id="impactPostbackFrame"+n,e.contentDocument\|\|(e.contentWin
2025-01-09 23:22:27 UTC	1390	IN	Data Raw: 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 2c 75 3d 2f 5e 28 3f 3a 5b 41 2d 5a 61 2d 7a 5c 64 2b 5c 2f 5d 7b 34 7d 29 2a 3f 28 3f 3a 5b 41 2d 5a 61 2d 7a 5c 64 2b 5c 2f 5d 7b 32 7d 28 3f 3a 3d 3d 29 3f 7c 5b 41 2d 5a 61 2d 7a 5c 64 2b 5c 2f 5d 7b 33 7d 3d 3f 29 3f 24 2f 2c 61 3d 2f 5b 5c 74 5c 6e 5c 66 5c 72 20 5d 2b 2f 67 2c 65 3d 72 28 77 69 6e 64 6f 77 2e 62 74 6f 61 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 6f 72 28 76 61 72 20 74 2c 72 2c 65 2c 69 3d 22 22 2c 63 3d 28 6e 3d 53 74 72 69 6e 67 28 6e 29 29 2e 6c 65 6e 67 74 68 25 33 2c 75 3d 30 3b 75 3c 6e 2e 6c 65 6e 67 74 68 3b 29 7b 69 66 28 32 35 35 3c 28 74 3d 6e 2e 63 68 61 72 43 6f 64 65 41 74 28 75 2b 2b 29 29 7c Data Ascii: YZabcdefghijklmnopqrstuvwxyz0123456789+/=",u=/^(?:[A-Za-z\d+\/]{4})*?(?:[A-Za-z\d+\/]{2}(?:==)?\|[A-Za-z\d+\/]{3}=?)?$/,a=/[\t\n\f\r ]+/g,e=r(window.btoa,function(n){for(var t,r,e,i="",c=(n=String(n)).length%3,u=0;u<n.length;){if(255<(t=n.charCodeAt(u++))\|
2025-01-09 23:22:27 UTC	1390	IN	Data Raw: 61 72 20 74 3d 70 61 72 73 65 49 6e 74 28 74 2c 31 36 29 2d 32 32 34 2c 72 3d 70 61 72 73 65 49 6e 74 28 72 2c 31 36 29 2d 31 32 38 3b 72 65 74 75 72 6e 21 74 26 26 72 3c 33 32 7c 7c 36 35 35 33 35 3c 28 74 3d 28 74 3c 3c 31 32 29 2b 28 72 3c 3c 36 29 2b 28 70 61 72 73 65 49 6e 74 28 65 2c 31 36 29 2d 31 32 38 29 29 3f 6e 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 74 29 7d 29 2e 72 65 70 6c 61 63 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 74 3d 70 61 72 73 65 49 6e 74 28 74 2c 31 36 29 2d 31 39 32 3b 72 65 74 75 72 6e 20 74 3c 32 3f 6e 3a 28 6e 3d 70 61 72 73 65 49 6e 74 28 72 2c 31 36 29 2d 31 32 38 2c 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 28 74 3c 3c 36 29 2b 6e 29 29 7d 29 2e 72 65 70 6c 61 63 Data Ascii: ar t=parseInt(t,16)-224,r=parseInt(r,16)-128;return!t&&r<32\|\|65535<(t=(t<<12)+(r<<6)+(parseInt(e,16)-128))?n:String.fromCharCode(t)}).replace(e,function(n,t,r){t=parseInt(t,16)-192;return t<2?n:(n=parseInt(r,16)-128,String.fromCharCode((t<<6)+n))}).replac

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.10	50155	151.101.65.44	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:27 UTC	546	OUT	GET /libtrc/unip/1190412/tfa.js HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:27 UTC	767	IN	HTTP/1.1 200 OK Connection: close Content-Length: 72982 x-amz-id-2: ooBo6Rm0dyqAsR3AEfhFeWnVEnYxe5/4BI1gv9DLQ9BNvchn8+yXMj/W33OjC5dChTPmtIIwQeY= x-amz-request-id: 4EXY1MZKRWN0A8Q2 x-amz-replication-status: COMPLETED Last-Modified: Sun, 05 Jan 2025 11:09:11 GMT ETag: "02e1cc68c7c8a2524ea36562cf55b694" x-amz-server-side-encryption: AES256 x-amz-version-id: arx1tvoZuMJD79h94GU8h06hERS4m.9T Content-Type: application/javascript; charset=utf-8 Server: AmazonS3 Accept-Ranges: bytes Date: Thu, 09 Jan 2025 23:22:27 GMT Via: 1.1 varnish Age: 3 X-Served-By: cache-ewr-kewr1740067-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1736464948.951659,VS0,VE1 Cache-Control: private,max-age=14401 Vary: Accept-Encoding abp: 6 Access-Control-Allow-Origin: *
2025-01-09 23:22:27 UTC	1378	IN	Data Raw: 2f 2a 21 20 32 30 32 35 30 31 30 32 2d 38 2d 52 45 4c 45 41 53 45 20 2a 2f 0a 0a 66 75 6e 63 74 69 6f 6e 20 5f 74 79 70 65 6f 66 28 74 29 7b 22 40 62 61 62 65 6c 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 28 5f 74 79 70 65 6f 66 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 74 21 3d 3d 53 Data Ascii: /! 20250102-8-RELEASE /function _typeof(t){"@babel/helpers - typeof";return(_typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==S
2025-01-09 23:22:27 UTC	1378	IN	Data Raw: 68 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 72 29 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 5b 72 5d 29 29 3b 72 65 74 75 72 6e 20 6e 2e 6a 6f 69 6e 28 22 26 22 29 7d 2c 66 6f 72 6d 61 74 42 65 61 63 6f 6e 50 61 72 61 6d 73 3a 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 6e 3d 22 22 2c 72 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 65 29 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 26 26 28 6e 2b 3d 69 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 5b 69 5d 29 2b 22 26 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 42 6c 6f 62 28 5b 6e 2e 73 6c 69 63 65 28 30 2c 2d 31 29 5d 2c 7b 74 79 70 65 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d Data Ascii: h(encodeURIComponent(r)+"="+encodeURIComponent(e[r]));return n.join("&")},formatBeaconParams:function t(e){var n="",r;for(var i in e)e.hasOwnProperty(i)&&(n+=i+"="+encodeURIComponent(e[i])+"&");return new Blob([n.slice(0,-1)],{type:"application/x-www-form
2025-01-09 23:22:27 UTC	1378	IN	Data Raw: 6f 75 74 48 61 6e 64 6c 65 73 5b 72 5d 7c 7c 28 74 68 69 73 2e 74 69 6d 65 6f 75 74 48 61 6e 64 6c 65 73 5b 72 5d 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 74 69 6d 65 6f 75 74 48 61 6e 64 6c 65 73 5b 72 5d 3d 6e 75 6c 6c 3b 76 61 72 20 74 3d 7b 7d 3b 74 5b 74 68 69 73 2e 67 72 6f 75 70 69 6e 67 4b 65 79 4e 61 6d 65 5d 3d 65 2c 69 2e 63 61 6c 6c 28 74 68 69 73 2c 7b 64 65 74 61 69 6c 3a 74 2c 74 79 70 65 3a 22 64 74 22 7d 29 7d 2e 62 69 6e 64 28 74 68 69 73 29 2c 6e 29 29 7d 3b 65 2e 4d 65 73 73 61 67 65 44 65 6c 61 79 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 6f 29 7b 69 66 28 74 68 69 73 2e 67 72 6f 75 70 69 6e 67 4b 65 79 4e 61 6d 65 3d 74 2c 74 68 69 73 2e 64 65 6c 61 79 65 64 45 76 65 6e 74 73 4d 61 70 Data Ascii: outHandles[r]\|\|(this.timeoutHandles[r]=setTimeout(function(){this.timeoutHandles[r]=null;var t={};t[this.groupingKeyName]=e,i.call(this,{detail:t,type:"dt"})}.bind(this),n))};e.MessageDelayer=function(t,n,o){if(this.groupingKeyName=t,this.delayedEventsMap
2025-01-09 23:22:27 UTC	1378	IN	Data Raw: 6c 73 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 3d 6e 2e 65 76 65 6e 74 55 74 69 6c 73 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 43 75 73 74 6f 6d 45 76 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 74 2c 7b 64 65 74 61 69 6c 3a 65 7c 7c 7b 7d 7d 29 29 7d 2c 6e 2e 65 76 65 6e 74 55 74 69 6c 73 2e 73 61 66 65 41 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 6e 2e 65 76 65 6e 74 55 74 69 6c 73 2e 73 61 66 65 41 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 Data Ascii: ls.dispatchEvent=n.eventUtils.dispatchEvent\|\|function(t,e){"function"==typeof CustomEvent&&document.dispatchEvent(new CustomEvent(t,{detail:e\|\|{}}))},n.eventUtils.safeAddEventListener=n.eventUtils.safeAddEventListener\|\|function(t,e){document.addEventListe
2025-01-09 23:22:27 UTC	1378	IN	Data Raw: 27 54 46 41 53 43 27 5d 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 5f 74 66 61 3d 74 2e 5f 74 66 61 7c 7c 5b 5d 2c 74 2e 5f 74 66 61 2e 63 6f 6e 66 69 67 7c 7c 28 74 2e 5f 74 66 61 2e 54 66 61 43 6f 6e 66 69 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 63 6f 6e 66 69 67 4d 61 70 3d 7b 7d 7d 2c 74 2e 5f 74 66 61 2e 54 66 61 43 6f 6e 66 69 67 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 73 61 66 65 47 65 74 3a 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 2c 61 3b 69 66 28 72 26 26 74 68 69 73 2e 63 6f 6e 66 69 67 4d 61 70 5b 72 5d 29 69 3d 22 22 2b 72 3b 65 6c 73 65 7b 69 66 28 21 74 68 69 73 2e 66 69 72 73 74 50 75 62 6c 69 73 68 65 72 49 64 29 72 65 74 75 72 6e 20 6e 3b 69 3d 74 68 69 73 2e 66 69 72 73 74 50 75 62 Data Ascii: 'TFASC']),function(t,e){t._tfa=t._tfa\|\|[],t._tfa.config\|\|(t._tfa.TfaConfig=function(){this.configMap={}},t._tfa.TfaConfig.prototype={safeGet:function t(e,n,r){var i,o,a;if(r&&this.configMap[r])i=""+r;else{if(!this.firstPublisherId)return n;i=this.firstPub
2025-01-09 23:22:27 UTC	1378	IN	Data Raw: 53 43 27 5d 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 5b 6e 2e 6a 73 53 63 6f 70 65 5d 2c 69 3d 7b 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 6e 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 70 29 72 65 74 75 72 6e 20 6e 2e 6d 61 70 28 65 29 3b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 6e 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 72 2e 70 75 73 68 28 65 28 6e 5b 69 5d 2c 69 2c 6e 29 29 3b 72 65 74 75 72 6e 20 72 7d 2c 66 6f 72 45 61 63 68 3a 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 6e 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 Data Ascii: SC']),function(t,e,n){"use strict";var r=t[n.jsScope],i={map:function t(e,n){if("function"==typeof Array.prototype.map)return n.map(e);for(var r=[],i=0;i<n.length;i++)r.push(e(n[i],i,n));return r},forEach:function t(e,n){if("function"==typeof Array.protot
2025-01-09 23:22:27 UTC	1378	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 7b 7d 2c 65 3d 69 2e 6f 62 6a 4b 65 79 73 28 6e 2e 6e 65 74 77 6f 72 6b 4d 61 70 29 2c 6f 3d 30 3b 6f 3c 65 2e 6c 65 6e 67 74 68 3b 2b 2b 6f 29 7b 76 61 72 20 61 3b 74 5b 22 22 2b 6e 2e 6e 65 74 77 6f 72 6b 4d 61 70 5b 65 5b 6f 5d 5d 5b 55 5b 72 2e 70 75 62 6c 69 73 68 65 72 49 64 54 79 70 65 2e 49 44 5d 5d 5d 3d 21 30 7d 72 65 74 75 72 6e 20 74 7d 28 29 2c 4e 3d 22 67 6b 22 2c 4c 3d 22 64 6b 22 2c 4d 3d 22 54 52 4b 5f 52 45 4c 45 41 53 45 5f 44 45 4c 41 59 45 44 5f 52 45 51 55 45 53 54 53 5f 45 56 45 4e 54 22 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 7d 3b 72 65 74 75 72 6e 20 74 5b 4e 5d 3d 4c 2c 74 7d 28 29 2c 56 3d 6e 65 77 20 72 2e 4d 65 73 73 61 67 65 44 65 6c 61 Data Ascii: =function(){for(var t={},e=i.objKeys(n.networkMap),o=0;o<e.length;++o){var a;t[""+n.networkMap[e[o]][U[r.publisherIdType.ID]]]=!0}return t}(),N="gk",L="dk",M="TRK_RELEASE_DELAYED_REQUESTS_EVENT",x=function(){var t={};return t[N]=L,t}(),V=new r.MessageDela
2025-01-09 23:22:27 UTC	1378	IN	Data Raw: 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 5f 5f 74 63 66 61 70 69 7d 2c 69 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 4c 69 73 74 65 6e 65 72 46 6f 72 43 6f 6e 73 65 6e 74 43 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 5f 5f 74 63 66 61 70 69 28 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 2c 32 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 21 65 7c 7c 22 74 63 6c 6f 61 64 65 64 22 21 3d 3d 74 2e 65 76 65 6e 74 53 74 61 74 75 73 26 26 22 75 73 65 72 61 63 74 69 6f 6e 63 6f 6d 70 6c 65 74 65 22 21 3d 3d 74 2e 65 76 65 6e 74 53 74 61 74 75 73 7c 7c 71 28 7b 74 63 53 74 72 69 6e 67 3a 74 2e 74 63 53 74 72 69 6e 67 2c 67 64 70 72 41 70 70 6c 69 65 73 3a 74 2e 67 64 70 72 41 70 70 6c 69 65 73 2c 63 6d 70 53 74 61 74 75 Data Ascii: "function"==typeof t.__tcfapi},i.prototype.addListenerForConsentChange=function(){t.__tcfapi("addEventListener",2,function(t,e){!e\|\|"tcloaded"!==t.eventStatus&&"useractioncomplete"!==t.eventStatus\|\|q({tcString:t.tcString,gdprApplies:t.gdprApplies,cmpStatu
2025-01-09 23:22:27 UTC	1378	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 74 2e 44 69 64 6f 6d 69 2e 6e 6f 74 69 63 65 26 26 76 6f 69 64 20 30 21 3d 3d 74 2e 44 69 64 6f 6d 69 2e 6e 6f 74 69 63 65 2e 69 73 56 69 73 69 62 6c 65 26 26 74 2e 44 69 64 6f 6d 69 2e 6e 6f 74 69 63 65 2e 69 73 56 69 73 69 62 6c 65 28 29 7d 3b 76 61 72 20 73 3d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 7d 3b 28 73 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 2e 70 72 6f 74 6f 74 79 70 65 29 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 73 2c 73 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 6f 76 69 64 65 72 4e 61 6d 65 3d 22 55 73 65 72 63 65 6e 74 72 69 63 73 22 2c 73 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 4f 66 50 72 6f Data Ascii: unction(){return void 0!==t.Didomi.notice&&void 0!==t.Didomi.notice.isVisible&&t.Didomi.notice.isVisible()};var s=function t(){};(s.prototype=Object.create(n.prototype)).constructor=s,s.prototype.providerName="Usercentrics",s.prototype.isCookieBannerOfPro
2025-01-09 23:22:27 UTC	1378	IN	Data Raw: 65 72 3f 77 69 6e 64 6f 77 2e 5f 73 70 5f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6f 6e 43 6f 6e 73 65 6e 74 52 65 61 64 79 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 71 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 7b 74 63 53 74 72 69 6e 67 3a 6e 2c 63 6d 70 53 74 61 74 75 73 3a 30 7d 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 7b 74 63 53 74 72 69 6e 67 3a 65 2c 63 6d 70 53 74 61 74 75 73 3a 30 7d 3a 6e 75 6c 6c 29 7d 29 3a 71 28 6e 75 6c 6c 29 7d 2c 7b 22 54 63 66 41 70 69 2c 56 32 22 3a 6e 65 77 20 69 2c 22 4f 6e 65 54 72 75 73 74 2c 56 31 22 3a 6e 65 77 20 6f 2c 22 44 69 64 6f 6d 69 2c 56 31 22 3a 6e 65 77 20 61 2c 22 55 73 65 72 63 65 6e 74 72 69 63 73 2c 56 31 22 3a 6e 65 77 20 73 2c 22 43 Data Ascii: er?window._sp_.addEventListener("onConsentReady",function(t,e,n){q("string"==typeof n?{tcString:n,cmpStatus:0}:"string"==typeof e?{tcString:e,cmpStatus:0}:null)}):q(null)},{"TcfApi,V2":new i,"OneTrust,V1":new o,"Didomi,V1":new a,"Usercentrics,V1":new s,"C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.10	50153	157.240.253.1	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:27 UTC	361	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:28 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-FrjUWSg5' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2025-01-09 23:22:28 UTC	1670	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2025-01-09 23:22:28 UTC	1	IN	Data Raw: 2f Data Ascii: /
2025-01-09 23:22:28 UTC	14680	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2025-01-09 23:22:28 UTC	16384	IN	Data Raw: 7c 64 3d 3d 3d 22 47 54 4d 22 7c 7c 64 3d 3d 3d 22 4a 53 4f 4e 5f 4c 44 22 7c 7c 64 3d 3d 3d 22 4d 45 54 41 5f 54 41 47 22 7c 7c 64 3d 3d 3d 22 4f 50 45 4e 5f 47 52 41 50 48 22 7c 7c 64 3d 3d 3d 22 52 44 46 41 22 7c 7c 64 3d 3d 3d 22 53 43 48 45 4d 41 5f 44 4f 54 5f 4f 52 47 22 7c 7c 64 3d 3d 3d 22 55 52 49 22 3f 64 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 63 21 3d 6e 75 6c 6c 26 26 61 21 3d 6e 75 6c 6c 26 26 64 21 3d 6e 75 6c 6c 3f 7b 64 6f 6d 61 69 6e 5f 75 72 69 3a 62 2c 65 76 65 6e 74 5f 74 79 70 65 3a 63 2c 65 78 74 72 61 63 74 6f 72 5f 74 79 70 65 3a 64 2c 69 64 3a 61 7d 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e Data Ascii: \|d==="GTM"\|\|d==="JSON_LD"\|\|d==="META_TAG"\|\|d==="OPEN_GRAPH"\|\|d==="RDFA"\|\|d==="SCHEMA_DOT_ORG"\|\|d==="URI"?d:null;return b!=null&&c!=null&&a!=null&&d!=null?{domain_uri:b,event_type:c,extractor_type:d,id:a}:null}function g(a){if(a==null\|\|(typeof a==="undefin
2025-01-09 23:22:28 UTC	16384	IN	Data Raw: 75 72 6e 20 6a 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 0a 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 70 65 72 69 6d 65 6e 74 73 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 62 3d 61 2e 54 79 70 65 64 3b 61 2e 63 6f 65 72 63 65 3b 61 2e 65 6e 66 6f Data Ascii: urn j.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsExperimentsTypedef",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsTyped"),b=a.Typed;a.coerce;a.enfo
2025-01-09 23:22:28 UTC	16384	IN	Data Raw: 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 42 61 73 65 45 76 65 6e 74 22 29 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 69 78 65 6c 54 79 70 65 64 65 66 22 29 2c 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 54 79 70 65 64 22 29 2c 64 3d 63 2e 54 79 70 65 64 2c 65 3d 63 2e 63 6f 65 72 63 65 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 63 2c 66 2c 67 2c 68 29 7b 61 3d 65 28 61 2c 62 29 3b 63 3d 65 28 63 2c 64 2e 73 74 72 69 6e 67 28 29 29 3b 76 61 72 20 6a 3d 7b 7d 3b 66 21 3d 6e 75 6c 6c 26 26 28 74 79 70 65 6f 66 20 66 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 Data Ascii: odules("SignalsFBEventsBaseEvent"),b=f.getFbeventsModules("SignalsFBEventsPixelTypedef"),c=f.getFbeventsModules("SignalsFBEventsTyped"),d=c.Typed,e=c.coerce;function g(a,c,f,g,h){a=e(a,b);c=e(c,d.string());var j={};f!=null&&(typeof f==="undefined"?"undefi
2025-01-09 23:22:28 UTC	1703	IN	Data Raw: 62 2e 67 65 74 50 72 6f 74 6f 63 6f 6c 2e 63 61 6c 6c 26 26 62 2e 67 65 74 50 72 6f 74 6f 63 6f 6c 28 29 3d 3d 3d 64 3f 62 3a 6e 75 6c 6c 3b 62 21 3d 3d 6e 75 6c 6c 26 26 28 6a 5b 61 5b 30 5d 5d 3d 6a 5b 61 5b 30 5d 5d 7c 7c 7b 7d 2c 6a 5b 61 5b 30 5d 5d 5b 61 5b 31 5d 5d 3d 62 29 3b 72 65 74 75 72 6e 20 62 21 3d 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 61 3d 6a 5b 61 2e 69 64 5d 7c 7c 7b 7d 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 2e 70 75 73 68 28 61 5b 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 61 29 7b 72 65 74 75 72 6e 20 6e 28 61 29 2e 6c Data Ascii: b.getProtocol.call&&b.getProtocol()===d?b:null;b!==null&&(j[a[0]]=j[a[0]]\|\|{},j[a[0]][a[1]]=b);return b!==null}function n(a){var b=[];a=j[a.id]\|\|{};for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b.push(a[c]);return b}function o(a){return n(a).l
2025-01-09 23:22:28 UTC	14681	IN	Data Raw: 6c 26 26 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 3d 61 29 7d 7d 2c 7b 6b 65 79 3a 22 61 64 64 45 6e 63 6f 64 69 6e 67 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 74 68 69 73 3b 69 66 28 67 2e 66 62 71 3d 3d 6e 75 6c 6c 7c 7c 67 2e 66 62 71 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 69 66 28 74 68 69 73 2e 6d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 76 61 72 20 66 3d 62 28 67 2e 66 62 71 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 2c 64 2e 6f 62 6a 65 63 74 28 29 29 3b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 66 3d 6b 28 69 28 6a 28 Data Ascii: l&&(this.moduleEncodings=a)}},{key:"addEncodings",value:function(a){var c=this;if(g.fbq==null\|\|g.fbq.__fbeventsResolvedModules==null)return;if(this.moduleEncodings==null)return;var f=b(g.fbq.__fbeventsResolvedModules,d.object());if(f==null)return;f=k(i(j(
2025-01-09 23:22:28 UTC	16384	IN	Data Raw: 6c 73 46 42 45 76 65 6e 74 73 4c 6f 67 67 69 6e 67 22 29 2c 63 3d 62 2e 6c 6f 67 45 72 72 6f 72 3b 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 3b 76 61 72 20 64 3d 62 2e 6d 61 70 2c 65 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 50 61 72 61 6d 4c 69 73 74 22 29 2c 68 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 42 65 61 63 6f 6e 22 29 2c 69 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 47 45 54 22 29 3b 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 Data Ascii: lsFBEventsLogging"),c=b.logError;b=f.getFbeventsModules("SignalsFBEventsUtils");var d=b.map,e=f.getFbeventsModules("SignalsParamList"),h=f.getFbeventsModules("signalsFBEventsSendBeacon"),i=f.getFbeventsModules("signalsFBEventsSendGET");f.getFbeventsModule
2025-01-09 23:22:28 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 20 70 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 71 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 26 26 74 79 70 65 6f 66 20 61 21 3d 3d 22 6e 75 6d 62 65 72 22 29 74 68 72 6f 77 20 6e 65 77 20 67 28 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d Data Ascii: nction p(){return function(a){if(typeof a!=="string")throw new g();return a}}function q(){return function(a){if(typeof a!=="string"&&typeof a!=="number")throw new g();return a}}function r(){return function(a){if((typeof a==="undefined"?"undefined":i(a))!=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.10	50157	35.227.211.136	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:27 UTC	663	OUT	POST /xch/42778/1799340/21320 HTTP/1.1 Host: gohealth.sjv.io Connection: keep-alive Content-Length: 711 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://medicare.gohealth.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:27 UTC	711	OUT	Data Raw: 63 75 73 74 69 64 3d 33 39 32 61 39 33 38 62 2d 61 30 39 34 2d 34 62 64 36 2d 39 64 37 32 2d 63 65 35 32 31 66 66 30 39 62 62 64 26 5f 69 72 3d 55 33 33 25 37 43 25 37 43 31 37 33 36 34 36 34 39 34 36 33 31 34 25 37 43 31 35 31 62 31 64 37 31 26 73 72 63 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 25 32 46 26 6c 61 6e 64 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6d 65 64 69 63 61 72 65 2e 67 6f 68 65 61 6c 74 68 2e 63 6f 6d 25 32 46 6d 65 64 69 63 61 72 65 2d 6d 61 72 6b 65 74 70 6c 61 63 65 25 33 46 6c 69 6e 6b 5f 69 64 25 33 44 31 38 33 30 37 25 32 36 73 72 63 25 33 44 47 53 5f 31 38 33 37 33 25 32 36 63 6d 70 6e 25 33 44 25 32 35 37 42 63 61 6d 70 61 69 67 6e 69 64 25 Data Ascii: custid=392a938b-a094-4bd6-9d72-ce521ff09bbd&_ir=U33%7C%7C1736464946314%7C151b1d71&srcref=https%3A%2F%2Fsyndicatedsearch.goog%2F&landurl=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%
2025-01-09 23:22:28 UTC	1013	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://medicare.gohealth.com Access-Control-Allow-Credentials: true Cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Thu, 09 Jan 2025 23:22:27 GMT P3P: policyref="/w3c/p3p.xml", CP="ALL BUS LEG DSP COR ADM CUR DEV PSA OUR NAV INT" Timing-Allow-Origin: * Set-Cookie: brwsr=97672532-cee0-11ef-af94-ef1d83635a26; Domain=.sjv.io; Path=/; Secure; Max-Age=62208000; Expires=Wed, 30 Dec 2026 23:22:27 GMT; HttpOnly; SameSite=None Set-Cookie: irld=LwTHS2H2oS0OWX49zIKSEvT4j; Path=/; Secure; Max-Age=15552000; Expires=Tue, 8 Jul 2025 23:22:27 GMT; HttpOnly; SameSite=None Set-Cookie: irtps=1; Domain=.sjv.io; Path=/; Secure; Max-Age=86400; Expires=Fri, 10 Jan 2025 23:22:27 GMT; HttpOnly; SameSite=None Content-Type: application/json; charset=UTF-8 Date: Thu, 09 Jan 2025 23:22:27 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-09 23:22:28 UTC	131	IN	Data Raw: 37 38 0d 0a 7b 22 74 70 73 22 3a 5b 7b 22 75 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6f 6a 72 71 2e 6e 65 74 2f 70 2f 3f 72 65 74 75 72 6e 3d 26 63 69 64 3d 32 31 33 32 30 26 74 70 73 79 6e 63 3d 6e 6f 26 61 75 74 68 3d 22 7d 5d 2c 22 66 70 63 22 3a 22 39 37 36 37 32 35 33 32 2d 63 65 65 30 2d 31 31 65 66 2d 61 66 39 34 2d 65 66 31 64 38 33 36 33 35 61 32 36 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 78{"tps":[{"u":"https://www.ojrq.net/p/?return=&cid=21320&tpsync=no&auth="}],"fpc":"97672532-cee0-11ef-af94-ef1d83635a26"}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.10	50161	172.67.154.89	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:28 UTC	550	OUT	GET /tm/2G21D2G5FC7G65237799.js HTTP/1.1 Host: static.synccake.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:28 UTC	792	IN	HTTP/1.1 404 Not Found Date: Thu, 09 Jan 2025 23:22:28 GMT Content-Length: 0 Connection: close Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1406899 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IIUw0EYQDbBnVb1ZydO6UU4gv5qF%2FYy1TSQwfx3H5Rm4TsUfUzhGTUqm5Qdr3ZnKmG6kIDxMwj%2FvsQUnfQEGikVKU%2BEZFhBiTZpocQmgYrLJ35oucazUzTb5yKRWdDG8o%2BaMPmh%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ff82b659b906a55-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1864&min_rtt=1816&rtt_var=715&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2829&recv_bytes=1128&delivery_rate=1607929&cwnd=235&unsent_bytes=0&cid=00d8490ee8bbef1b&ts=135&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.10	50158	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:28 UTC	987	OUT	GET /api/v1/event/lead-generation_consumer_loads-geo-location HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: form_url=%2Fmedicare-marketplace; gh-session-id=fc99a7c8-08f9-4875-be9f-f97a9821de17; _gcl_gs=2.1.k5$i1736464937$u41793726; _gcl_au=1.1.1804017665.1736464944; optimizelyEndUserId=oeu1736464944079r0.8329921030541232; optimizelySession=1736464944099; _gcl_aw=GCL.1736464946.EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE; _ga=GA1.1.1197952561.1736464946; _ga_G99G7L25WL=GS1.1.1736464945.1.0.1736464945.60.0.0; IR_gbd=gohealth.com; IR_21320=1736464946314%7Cc-42778%7C1736464946314%7C%7C; _uetsid=96720a30cee011ef9fd7a32c31084dbc; _uetvid=967229b0cee011efae4b7b3fd2cccb6c
2025-01-09 23:22:28 UTC	1222	IN	HTTP/1.1 404 Not Found Date: Thu, 09 Jan 2025 23:22:28 GMT Content-Type: text/html; charset=utf-8 Content-Length: 55259 Connection: close Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://.optimizely.com https://optimizely.s3.amazonaws.com https://cdn-assets-prod.s3.amazonaws.com https: ; style-src 'self' 'unsafe-inline' https: ; object-src 'none'; worker-src data:; connect-src 'self' https: wss://.hotjar.com https://.optimizely.com ; img-src 'self' https: http: data: https://.optimizely.com; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://.typekit.net; frame-src 'self' https://.googletagmanager.com https://.hotjar.com https://.snapchat.com https://.google.com https://.mediaalpha.com https://.optimizely.com https://.taboola.com https://.doubleclick.net; frame-ancestors 'self' https://.optimizely.com Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Frame-Options: sameorigin X-Download-Options: noopen X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Cache-Control: no-cache, no-store, max-age=0, must-revalidate ETag: "krhaf43k3016mq" Vary: Accept-Encoding
2025-01-09 23:22:28 UTC	15162	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 61 74 61 2d 61 70 70 2d 6e 61 6d 65 3d 22 63 6d 2d 6d 65 64 69 63 61 72 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6e 65 78 74 2d 68 65 61 64 2d 63 6f 75 6e 74 22 20 63 6f 6e 74 65 6e 74 3d 22 32 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 64 61 74 61 2d 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 2e 74 79 70 65 6b 69 74 2e 6e 65 74 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 Data Ascii: <!DOCTYPE html><html lang="en" data-app-name="cm-medicare"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><meta name="next-head-count" content="2"/><link rel="preconnect" data-href="https://use.typekit.net"/><link rel="pr
2025-01-09 23:22:28 UTC	1486	IN	Data Raw: 72 20 6e 3d 72 28 38 33 36 29 2c 69 3d 72 28 36 30 37 29 3b 63 6f 6e 73 74 20 6f 3d 22 6e 72 40 6f 72 69 67 69 6e 61 6c 3a 22 2e 63 6f 6e 63 61 74 28 69 2e 57 29 3b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 73 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 7c 7c 28 65 3d 6e 2e 65 65 29 2c 72 2e 69 6e 50 6c 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 2c 6f 29 7b 6e 7c 7c 28 6e 3d 22 22 29 3b 63 6f 6e 73 74 20 61 3d 22 2d 22 3d 3d 3d 6e 2e 63 68 61 72 41 74 28 30 29 3b 66 6f 72 28 6c 65 74 20 73 3d 30 3b 73 3c 74 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 63 6f 6e 73 74 20 63 3d 74 5b 73 5d 2c 75 3d 65 5b 63 5d 3b 6c 28 75 29 7c 7c 28 65 Data Ascii: r n=r(836),i=r(607);const o="nr@original:".concat(i.W);var a=Object.prototype.hasOwnProperty,s=!1;function c(e,t){return e\|\|(e=n.ee),r.inPlace=function(e,t,n,i,o){n\|\|(n="");const a="-"===n.charAt(0);for(let s=0;s<t.length;s++){const c=t[s],u=e[c];l(u)\|\|(e
2025-01-09 23:22:28 UTC	16384	IN	Data Raw: 64 28 74 2c 7b 54 3a 28 29 3d 3e 6e 7d 29 3b 63 6f 6e 73 74 20 6e 3d 72 28 38 36 30 29 2e 4b 37 2e 70 61 67 65 56 69 65 77 45 76 65 6e 74 7d 2c 37 38 32 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 54 3a 28 29 3d 3e 6e 7d 29 3b 63 6f 6e 73 74 20 6e 3d 72 28 38 36 30 29 2e 4b 37 2e 70 61 67 65 56 69 65 77 54 69 6d 69 6e 67 7d 2c 33 34 34 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 74 2c 7b 47 34 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 6e 3d 72 28 36 31 34 29 3b 72 28 38 36 30 29 2e 4b 37 2e 73 65 73 73 69 6f 6e 52 65 70 6c 61 79 3b 63 6f 6e 73 74 20 69 3d 7b 52 45 43 4f 52 44 3a 22 72 65 63 6f 72 64 52 65 70 6c 61 79 22 2c 50 41 55 53 45 3a 22 70 61 75 73 65 52 65 70 6c Data Ascii: d(t,{T:()=>n});const n=r(860).K7.pageViewEvent},782:(e,t,r)=>{"use strict";r.d(t,{T:()=>n});const n=r(860).K7.pageViewTiming},344:(e,t,r)=>{"use strict";r.d(t,{G4:()=>i});var n=r(614);r(860).K7.sessionReplay;const i={RECORD:"recordReplay",PAUSE:"pauseRepl
2025-01-09 23:22:28 UTC	16384	IN	Data Raw: 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 67 6f 68 65 61 6c 74 68 2e 63 6f 6d 2f 6c 65 61 64 2d 67 65 6e 65 72 61 74 69 6f 6e 2d 73 69 74 65 73 2f 6d 65 64 69 63 61 72 65 2f 67 6f 68 65 61 6c 74 68 2e 31 36 31 34 36 31 32 39 35 30 2e 73 76 67 22 20 61 6c 74 3d 22 47 6f 48 65 61 6c 74 68 20 4c 6f 67 6f 22 20 77 69 64 74 68 3d 22 31 34 34 22 20 68 65 69 67 68 74 3d 22 32 39 22 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 5f 6c 6f 67 6f 5f 5f 44 62 30 76 6e 20 68 65 61 64 65 72 5f 6c 6f 67 6f 2d 2d 6d 65 64 69 63 61 72 65 5f 5f 79 56 37 6a 39 22 2f 3e 3c 2f 64 69 76 3e 3c 70 20 63 6c 61 73 73 3d 22 6c 69 63 65 6e 73 65 64 2d 69 6e 73 75 72 61 6e 63 65 2d 61 67 65 6e 74 5f 74 65 78 74 5f 5f 6a 63 45 6f 51 20 6c 69 63 65 6e 73 65 64 2d 69 Data Ascii: <img src="https://cdn.gohealth.com/lead-generation-sites/medicare/gohealth.1614612950.svg" alt="GoHealth Logo" width="144" height="29" class="header_logo__Db0vn header_logo--medicare__yV7j9"/></div><p class="licensed-insurance-agent_text__jcEoQ licensed-i
2025-01-09 23:22:28 UTC	5843	IN	Data Raw: 4d 65 64 69 63 61 72 65 20 50 61 72 74 73 20 41 5c 75 30 30 32 36 42 5c 75 30 30 33 63 2f 32 5c 75 30 30 33 65 3f 22 2c 22 6d 65 64 69 63 61 72 65 51 75 69 7a 2e 6d 65 64 69 63 61 69 64 2e 74 69 74 6c 65 22 3a 22 41 72 65 20 79 6f 75 20 5c 75 30 30 33 63 32 5c 75 30 30 33 65 72 65 63 65 69 76 69 6e 67 20 62 65 6e 65 66 69 74 73 20 66 72 6f 6d 20 4d 65 64 69 63 61 69 64 5c 75 30 30 33 63 2f 32 5c 75 30 30 33 65 3f 22 2c 22 63 6f 6e 67 72 61 74 75 6c 61 74 69 6f 6e 73 22 3a 22 43 6f 6e 67 72 61 74 75 6c 61 74 69 6f 6e 73 21 22 2c 22 6d 65 64 69 63 61 72 65 51 75 69 7a 32 2e 74 79 70 2e 68 32 22 3a 22 54 68 65 72 65 20 6d 61 79 20 62 65 20 61 6e 20 6f 70 70 6f 72 74 75 6e 69 74 79 5c 75 30 30 33 63 62 72 2f 5c 75 30 30 33 65 20 74 6f 20 69 6d 70 72 6f 76 65 Data Ascii: Medicare Parts A\u0026B\u003c/2\u003e?","medicareQuiz.medicaid.title":"Are you \u003c2\u003ereceiving benefits from Medicaid\u003c/2\u003e?","congratulations":"Congratulations!","medicareQuiz2.typ.h2":"There may be an opportunity\u003cbr/\u003e to improve

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.10	50159	3.74.15.141	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:28 UTC	537	OUT	GET /events.js HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:28 UTC	1283	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:28 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=5 Set-Cookie: sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCC0tIG8BjABOgT87-jmQgQ_QCZc.O3M9N%2FjNocxDAkJgoeKCY4eteFsk5sYBegvZtk1NJzo; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCC0tIG8BjABOgT87-jmQgQ_QCZc.O3M9N%2FjNocxDAkJgoeKCY4eteFsk5sYBegvZtk1NJzo; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None
2025-01-09 23:22:28 UTC	1634	IN	Data Raw: 36 35 62 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 77 29 20 7b 0a 20 20 2f 2f 20 42 65 67 69 6e 20 64 6f 63 0a 0a 20 20 76 61 72 20 69 73 5f 64 65 76 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 69 66 20 28 20 66 61 6c 73 65 20 29 20 7b 0a 20 20 20 20 69 73 5f 64 65 76 20 3d 20 74 72 75 65 3b 0a 20 20 7d 0a 0a 20 20 76 61 72 20 64 69 73 61 62 6c 65 5f 73 79 6e 63 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 69 66 20 28 20 74 72 75 65 20 29 20 7b 0a 20 20 20 20 64 69 73 61 62 6c 65 5f 73 79 6e 63 20 3d 20 74 72 75 65 0a 20 20 7d 0a 0a 20 20 76 61 72 20 74 69 70 20 3d 20 22 72 32 56 42 6a 65 49 32 6b 7a 4c 75 76 42 64 4e 31 50 73 63 6b 58 43 77 51 4e 4d 48 56 57 51 39 6e 5f 34 4f 65 48 6f 52 48 44 55 22 0a 20 20 0a 20 20 76 61 72 20 75 73 65 72 49 64 43 6f 6f 6b 69 65 56 Data Ascii: 65b(function (w) { // Begin doc var is_dev = false; if ( false ) { is_dev = true; } var disable_sync = false; if ( true ) { disable_sync = true } var tip = "r2VBjeI2kzLuvBdN1PsckXCwQNMHVWQ9n_4OeHoRHDU" var userIdCookieV
2025-01-09 23:22:28 UTC	2895	IN	Data Raw: 62 34 38 0d 0a 76 65 2b 2b 7d 29 2c 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 69 73 44 65 73 6b 74 6f 70 3d 21 31 2c 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 6f 69 6e 74 65 72 75 70 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 75 6d 54 61 70 73 2b 2b 7d 29 29 7d 63 61 74 63 68 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 67 65 74 49 6e 74 65 72 61 63 74 69 6f 6e 50 61 72 61 6d 73 28 29 7b 72 65 74 75 72 6e 22 26 6e 5f 63 3d 22 2b 6e 75 6d 43 6c 69 63 6b 73 2b 22 26 6e 5f 74 3d 22 2b 6e 75 6d 54 61 70 73 2b 22 26 6e 5f 73 3d 22 2b 6e 75 6d 53 75 62 6d 69 74 73 2b 22 26 6e 5f 62 3d 22 2b Data Ascii: b48ve++}),"ontouchstart"in document.documentElement&&(isDesktop=!1,document.addEventListener("pointerup",function(e){numTaps++}))}catch(e){console.log(e)}function getInteractionParams(){return"&n_c="+numClicks+"&n_t="+numTaps+"&n_s="+numSubmits+"&n_b="+
2025-01-09 23:22:28 UTC	2903	IN	Data Raw: 62 35 30 0d 0a 6f 6b 69 65 73 2e 67 65 74 28 22 73 61 2d 72 2d 73 6f 75 72 63 65 22 29 29 2c 6e 3d 43 6f 6f 6b 69 65 73 2e 67 65 74 28 22 73 61 2d 72 2d 64 61 74 65 22 29 3b 72 65 74 75 72 6e 20 74 26 26 22 22 21 3d 74 26 26 6e 26 26 22 22 21 3d 6e 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6c 6f 63 61 6c 53 74 6f 72 61 67 65 7c 7c 28 74 3d 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 73 61 2d 72 2d 73 6f 75 72 63 65 22 29 2c 6e 3d 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 73 61 2d 72 2d 64 61 74 65 22 29 29 2c 74 7c 7c 28 6e 3d 74 3d 22 22 29 2c 22 26 6c 5f 73 72 63 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 2b 22 26 6c 5f 73 72 63 5f 64 3d 22 2b 65 6e 63 6f Data Ascii: b50okies.get("sa-r-source")),n=Cookies.get("sa-r-date");return t&&""!=t&&n&&""!=n\|\|"undefined"==typeof localStorage\|\|(t=localStorage.getItem("sa-r-source"),n=localStorage.getItem("sa-r-date")),t\|\|(n=t=""),"&l_src="+encodeURIComponent(t)+"&l_src_d="+enco
2025-01-09 23:22:28 UTC	2903	IN	Data Raw: 62 35 30 0d 0a 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6f 3d 7b 7d 2c 74 3d 65 3f 65 2e 73 70 6c 69 74 28 22 3b 20 22 29 3a 5b 5d 2c 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 43 6f 6f 6b 69 65 73 2e 5f 67 65 74 4b 65 79 56 61 6c 75 65 50 61 69 72 46 72 6f 6d 43 6f 6f 6b 69 65 53 74 72 69 6e 67 28 74 5b 6e 5d 29 3b 76 6f 69 64 20 30 3d 3d 3d 6f 5b 72 2e 6b 65 79 5d 26 26 28 6f 5b 72 2e 6b 65 79 5d 3d 72 2e 76 61 6c 75 65 29 7d 72 65 74 75 72 6e 20 6f 7d 2c 43 6f 6f 6b 69 65 73 2e 5f 67 65 74 4b 65 79 56 61 6c 75 65 50 61 69 72 46 72 6f 6d 43 6f 6f 6b 69 65 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 76 61 72 20 74 3d 28 74 3d 6f 2e 69 6e 64 65 78 4f 66 28 22 3d 22 29 Data Ascii: b50String=function(e){for(var o={},t=e?e.split("; "):[],n=0;n<t.length;n++){var r=Cookies._getKeyValuePairFromCookieString(t[n]);void 0===o[r.key]&&(o[r.key]=r.value)}return o},Cookies._getKeyValuePairFromCookieString=function(o){var t=(t=o.indexOf("=")
2025-01-09 23:22:28 UTC	2889	IN	Data Raw: 62 34 32 0d 0a 74 2e 6f 6e 65 72 72 6f 72 3d 72 2c 74 2e 6f 6e 6c 6f 61 64 3d 72 2c 74 2e 73 72 63 3d 65 2b 22 2f 6c 61 6c 3f 73 69 64 3d 22 2b 6f 2b 22 26 75 72 6c 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6e 29 2b 22 26 74 3d 22 2b 67 65 74 54 69 74 6c 65 28 29 2b 22 26 74 69 70 3d 22 2b 74 69 70 2b 67 65 74 4c 61 73 74 53 6f 75 72 63 65 28 29 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2c 63 75 72 72 65 6e 74 5f 77 69 6e 64 6f 77 5f 75 72 6c 5f 70 61 72 61 6d 29 26 26 2d 31 3c 63 75 72 72 65 6e 74 5f 77 69 6e 64 6f 77 5f 75 72 6c 5f 70 61 72 61 6d 2e 69 6e 64 65 78 4f 66 28 67 6c 6f 62 61 6c 73 2e 73 61 5f 64 65 62 75 67 5f 6b 65 79 29 26 26 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 53 41 Data Ascii: b42t.onerror=r,t.onload=r,t.src=e+"/lal?sid="+o+"&url="+encodeURIComponent(n)+"&t="+getTitle()+"&tip="+tip+getLastSource(),document.body.appendChild(t),current_window_url_param)&&-1<current_window_url_param.indexOf(globals.sa_debug_key)&&console.log("SA
2025-01-09 23:22:28 UTC	2895	IN	Data Raw: 62 34 38 0d 0a 70 73 3a 2f 2f 74 61 67 73 2e 73 72 76 2e 73 74 61 63 6b 61 64 61 70 74 2e 63 6f 6d 22 29 2b 22 2f 73 61 71 5f 70 78 6c 3f 75 69 64 3d 22 2b 65 2b 22 26 69 73 5f 6a 73 3d 74 72 75 65 26 6c 61 6e 64 69 6e 67 5f 75 72 6c 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 72 29 2b 22 26 74 3d 22 2b 67 65 74 54 69 74 6c 65 28 29 2b 22 26 74 69 70 3d 22 2b 74 69 70 2b 22 26 68 6f 73 74 3d 22 2b 67 6c 6f 62 61 6c 73 2e 68 6f 73 74 2b 74 2b 67 65 74 4c 61 73 74 53 6f 75 72 63 65 28 29 3b 74 72 79 7b 76 61 72 20 61 3d 61 70 70 65 6e 64 53 61 43 6f 6f 6b 69 65 73 54 6f 55 72 6c 28 65 29 2c 65 3d 61 5b 31 5d 3f 61 5b 30 5d 3a 61 70 70 65 6e 64 53 61 4c 6f 63 61 6c 53 74 6f 72 61 67 65 54 6f 55 72 6c 28 65 29 7d 63 61 74 63 68 28 65 29 Data Ascii: b48ps://tags.srv.stackadapt.com")+"/saq_pxl?uid="+e+"&is_js=true&landing_url="+encodeURIComponent(r)+"&t="+getTitle()+"&tip="+tip+"&host="+globals.host+t+getLastSource();try{var a=appendSaCookiesToUrl(e),e=a[1]?a[0]:appendSaLocalStorageToUrl(e)}catch(e)
2025-01-09 23:22:28 UTC	2903	IN	Data Raw: 62 35 30 0d 0a 2c 22 22 21 3d 3d 75 73 65 72 69 64 76 33 26 26 28 6f 2b 3d 22 26 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 22 73 61 2d 75 73 65 72 2d 69 64 2d 76 33 22 29 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 75 73 65 72 69 64 76 33 29 29 3b 76 61 72 20 74 3d 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 73 61 2d 63 61 6d 70 2d 6c 69 73 74 2d 6c 6f 63 61 6c 53 74 6f 72 61 67 65 22 29 3b 69 66 28 22 22 3d 3d 74 29 72 65 74 75 72 6e 20 6f 3b 66 6f 72 28 76 61 72 20 6e 2c 72 3d 74 2e 73 70 6c 69 74 28 22 3b 22 29 2c 61 3d 30 3b 61 3c 72 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 74 72 79 7b 22 22 21 3d 3d 28 6c 6f 63 61 6c 53 74 6f 72 65 64 43 61 6d 70 3d 6c 6f 63 61 6c 53 74 6f 72 61 67 Data Ascii: b50,""!==useridv3&&(o+="&"+encodeURIComponent("sa-user-id-v3")+"="+encodeURIComponent(useridv3));var t=localStorage.getItem("sa-camp-list-localStorage");if(""==t)return o;for(var n,r=t.split(";"),a=0;a<r.length;a++){try{""!==(localStoredCamp=localStorag
2025-01-09 23:22:28 UTC	2903	IN	Data Raw: 62 35 30 0d 0a 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 20 6d 65 74 68 6f 64 2e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 75 6e 73 75 70 70 6f 72 74 65 64 49 74 65 72 61 62 6c 65 54 6f 41 72 72 61 79 28 65 2c 6f 29 7b 76 61 72 20 74 3b 69 66 28 65 29 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5f 61 72 72 61 79 4c 69 6b Data Ascii: b50){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}function _unsupportedIterableToArray(e,o){var t;if(e)return"string"==typeof e?_arrayLik
2025-01-09 23:22:28 UTC	398	IN	Data Raw: 31 38 37 0d 0a 65 29 7d 65 6c 73 65 20 73 77 69 74 63 68 28 6f 29 7b 63 61 73 65 22 63 6f 6e 76 22 3a 72 65 74 75 72 6e 20 6c 6f 61 64 43 6f 6e 76 2e 61 70 70 6c 79 28 74 68 69 73 2c 74 29 3b 63 61 73 65 22 74 73 22 3a 72 65 74 75 72 6e 20 6c 6f 61 64 54 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 74 29 3b 64 65 66 61 75 6c 74 3a 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 75 6e 6b 6e 6f 77 6e 20 66 75 6e 63 74 69 6f 6e 22 29 7d 7d 7d 3b 66 6f 72 28 76 61 72 20 78 3d 73 61 5f 70 61 72 61 6d 73 2e 71 75 65 75 65 2e 73 6c 69 63 65 28 29 2c 79 3d 30 2c 7a 3d 78 2e 6c 65 6e 67 74 68 3b 79 3c 7a 3b 79 2b 2b 29 73 61 5f 70 61 72 61 6d 73 2e 63 61 6c 6c 4d 65 74 68 6f 64 2e 61 70 70 6c 79 28 73 61 5f 70 61 72 61 6d 73 2c 78 5b 79 5d 29 7d 63 61 74 63 68 28 65 29 7b 63 6f Data Ascii: 187e)}else switch(o){case"conv":return loadConv.apply(this,t);case"ts":return loadTs.apply(this,t);default:console.log("unknown function")}}};for(var x=sa_params.queue.slice(),y=0,z=x.length;y<z;y++)sa_params.callMethod.apply(sa_params,x[y])}catch(e){co
2025-01-09 23:22:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.10	50168	151.101.1.44	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:28 UTC	565	OUT	GET /topics_api HTTP/1.1 Host: psb.taboola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://medicare.gohealth.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:28 UTC	418	IN	HTTP/1.1 200 OK Connection: close Content-Length: 65 Server: Varnish Retry-After: 0 Content-Type: text/html; charset=utf-8 Cache-Control: private, max-age=2592000 Observe-Browsing-Topics: ?1 Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Thu, 09 Jan 2025 23:22:28 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740042-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1736464949.880719,VS0,VE0
2025-01-09 23:22:28 UTC	65	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 20 3c 54 49 54 4c 45 3e 32 30 30 20 4f 4b 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 4f 4b 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e Data Ascii: <HTML><HEAD> <TITLE>200 OK</TITLE></HEAD><BODY>OK</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.10	50163	157.240.0.6	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:29 UTC	1387	OUT	GET /signals/config/753743931636742?v=2.9.179&r=stable&domain=medicare.gohealth.com&hme=b8122d5d96cd6f542162ba4f497489972d1ebe228d24c39d34f560e30ae932ce&ex_m=70%2C122%2C107%2C111%2C61%2C4%2C100%2C69%2C16%2C97%2C89%2C51%2C54%2C173%2C176%2C188%2C184%2C185%2C187%2C29%2C101%2C53%2C77%2C186%2C168%2C171%2C181%2C182%2C189%2C132%2C41%2C191%2C192%2C34%2C144%2C15%2C50%2C197%2C196%2C134%2C18%2C40%2C1%2C43%2C65%2C66%2C67%2C71%2C93%2C17%2C14%2C96%2C92%2C91%2C108%2C52%2C110%2C39%2C109%2C30%2C94%2C26%2C169%2C172%2C141%2C86%2C56%2C84%2C33%2C73%2C0%2C95%2C32%2C28%2C82%2C83%2C88%2C47%2C46%2C87%2C37%2C11%2C12%2C13%2C6%2C7%2C25%2C22%2C23%2C57%2C62%2C64%2C75%2C102%2C27%2C76%2C9%2C8%2C80%2C48%2C21%2C104%2C103%2C105%2C98%2C10%2C20%2C3%2C38%2C74%2C19%2C5%2C90%2C81%2C44%2C35%2C85%2C2%2C36%2C63%2C42%2C106%2C45%2C79%2C68%2C112%2C60%2C59%2C31%2C99%2C58%2C55%2C49%2C78%2C72%2C24%2C113 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:29 UTC	1452	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src 'nonce-9ZRpDj72' .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2025-01-09 23:22:29 UTC	1671	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2025-01-09 23:22:29 UTC	1	IN	Data Raw: 2f Data Ascii: /
2025-01-09 23:22:29 UTC	13810	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2025-01-09 23:22:29 UTC	16384	IN	Data Raw: 70 72 6f 68 69 62 69 74 65 64 53 6f 75 72 63 65 73 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 2e 64 6f 6d 61 69 6e 21 3d 6e 75 6c 6c 26 26 62 2e 64 6f 6d 61 69 6e 3d 3d 3d 6a 28 61 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 29 7d 29 2e 6c 65 6e 67 74 68 3e 30 3b 66 26 26 28 65 2e 6c 6f 63 6b 73 2e 6c 6f 63 6b 28 22 70 72 6f 68 69 62 69 74 65 64 5f 73 6f 75 72 63 65 73 5f 22 2b 63 29 2c 67 2e 63 6f 6e 73 6f 6c 65 57 61 72 6e 28 22 5b 66 62 70 69 78 65 6c 5d 20 22 2b 64 2e 69 64 2b 22 20 69 73 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 20 47 6f 20 74 6f 20 45 76 65 6e 74 73 20 4d 61 6e 61 67 65 72 20 74 6f 20 6c 65 61 72 6e 20 6d 6f 72 65 22 29 29 7d 29 7d 29 7d 29 28 29 3b 72 65 74 75 72 6e 20 65 2e 65 78 70 6f 72 74 73 7d 28 61 Data Ascii: prohibitedSources,function(b){return b.domain!=null&&b.domain===j(a.location.hostname)}).length>0;f&&(e.locks.lock("prohibited_sources_"+c),g.consoleWarn("[fbpixel] "+d.id+" is unavailable. Go to Events Manager to learn more"))})})})();return e.exports}(a
2025-01-09 23:22:29 UTC	16384	IN	Data Raw: 73 2e 65 76 65 6e 74 76 61 6c 69 64 61 74 69 6f 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 6c 75 67 69 6e 22 29 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 45 76 65 6e 74 45 76 65 6e 74 22 29 2c 63 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e Data Ascii: s.eventvalidation",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=f.getFbeventsModules("SignalsFBEventsPlugin"),b=f.getFbeventsModules("SignalsFBEventsSendEventEvent"),c=f.getFbeventsModules("SignalsFBEven
2025-01-09 23:22:29 UTC	16384	IN	Data Raw: 2e 73 65 74 28 70 2c 53 74 72 69 6e 67 28 61 2e 70 6c 61 74 66 6f 72 6d 56 65 72 73 69 6f 6e 29 29 3b 76 61 72 20 62 3d 76 6f 69 64 20 30 2c 63 3d 76 6f 69 64 20 30 2c 65 3d 21 30 2c 66 3d 21 31 2c 67 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 68 3d 61 2e 66 75 6c 6c 56 65 72 73 69 6f 6e 4c 69 73 74 5b 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 5d 28 29 2c 61 3b 21 28 65 3d 28 61 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 3b 65 3d 21 30 29 63 3d 61 2e 76 61 6c 75 65 2c 63 2e 62 72 61 6e 64 2e 69 6e 63 6c 75 64 65 73 28 22 43 68 72 6f 6d 65 22 29 26 26 28 62 3d 63 2e 76 65 72 73 69 6f 6e 29 7d 63 61 74 63 68 28 61 Data Ascii: .set(p,String(a.platformVersion));var b=void 0,c=void 0,e=!0,f=!1,g=void 0;try{for(var h=a.fullVersionList[typeof Symbol==="function"?Symbol.iterator:"@@iterator"](),a;!(e=(a=h.next()).done);e=!0)c=a.value,c.brand.includes("Chrome")&&(b=c.version)}catch(a
2025-01-09 23:22:29 UTC	2573	IN	Data Raw: 63 61 74 63 68 22 5d 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 22 6d 65 73 73 61 67 65 22 29 26 26 28 61 2e 6d 65 73 73 61 67 65 3d 22 5b 41 63 74 69 6f 6e 49 44 20 45 72 72 6f 72 5d 20 57 65 62 20 52 54 43 20 65 72 72 6f 72 3a 20 22 2b 61 2e 6d 65 73 73 61 67 65 29 2c 6a 28 61 29 7d 29 7d 3b 73 2e 6f 6e 69 63 65 63 6f 6e 6e 65 63 74 69 6f 6e 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 73 2e 69 63 65 43 6f 6e 6e 65 63 74 69 6f 6e 53 74 61 74 65 3d 3d 3d 22 63 6f 6e 6e 65 63 74 65 64 22 3f 28 6c 28 6f 2c 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 Data Ascii: catch"](function(a){a instanceof Error&&Object.prototype.hasOwnProperty.call(a,"message")&&(a.message="[ActionID Error] Web RTC error: "+a.message),j(a)})};s.oniceconnectionstatechange=function(b){s.iceConnectionState==="connected"?(l(o,new Date().getTime
2025-01-09 23:22:29 UTC	13811	IN	Data Raw: 22 3a 22 61 65 6d 22 2c 22 65 62 70 5f 70 61 74 68 22 3a 22 61 65 6d 22 7d 5d 7d 2c 22 65 6e 61 62 6c 65 46 62 63 50 61 72 61 6d 53 70 6c 69 74 22 3a 66 61 6c 73 65 7d 29 3b 0a 66 62 71 2e 6c 6f 61 64 50 6c 75 67 69 6e 28 22 63 6f 6f 6b 69 65 22 29 3b 0a 69 6e 73 74 61 6e 63 65 2e 6f 70 74 49 6e 28 22 37 35 33 37 34 33 39 33 31 36 33 36 37 34 32 22 2c 20 22 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 73 22 2c 20 74 72 75 65 29 3b 0a 66 62 71 2e 6c 6f 61 64 50 6c 75 67 69 6e 28 22 61 75 74 6f 6d 61 74 69 63 6d 61 74 63 68 69 6e 67 66 6f 72 70 61 72 74 6e 65 72 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 29 3b 0a 69 6e 73 74 61 6e 63 65 2e 6f 70 74 49 6e 28 22 37 35 33 37 34 33 39 33 31 36 33 36 37 34 32 22 2c 20 22 41 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 Data Ascii: ":"aem","ebp_path":"aem"}]},"enableFbcParamSplit":false});fbq.loadPlugin("cookie");instance.optIn("753743931636742", "FirstPartyCookies", true);fbq.loadPlugin("automaticmatchingforpartnerintegrations");instance.optIn("753743931636742", "AutomaticMatch
2025-01-09 23:22:29 UTC	5942	IN	Data Raw: 22 3a 5b 7b 22 72 65 71 75 69 72 65 5f 65 78 61 63 74 5f 6d 61 74 63 68 22 3a 74 72 75 65 2c 22 70 6f 74 65 6e 74 69 61 6c 5f 6d 61 74 63 68 65 73 22 3a 5b 22 61 76 61 69 6c 61 62 6c 65 5f 73 6f 6f 6e 22 2c 22 66 6f 72 5f 72 65 6e 74 22 2c 22 66 6f 72 5f 73 61 6c 65 22 2c 22 6f 66 66 5f 6d 61 72 6b 65 74 22 2c 22 72 65 63 65 6e 74 6c 79 5f 73 6f 6c 64 22 2c 22 73 61 6c 65 5f 70 65 6e 64 69 6e 67 22 5d 7d 5d 2c 22 70 72 6f 70 65 72 74 79 5f 74 79 70 65 22 3a 5b 7b 22 72 65 71 75 69 72 65 5f 65 78 61 63 74 5f 6d 61 74 63 68 22 3a 74 72 75 65 2c 22 70 6f 74 65 6e 74 69 61 6c 5f 6d 61 74 63 68 65 73 22 3a 5b 22 61 70 61 72 74 6d 65 6e 74 22 2c 22 61 70 61 72 74 6d 65 6e 74 5f 72 6f 6f 6d 22 2c 22 62 75 69 6c 64 65 72 5f 66 6c 6f 6f 72 22 2c 22 62 75 6e 67 61 Data Ascii: ":[{"require_exact_match":true,"potential_matches":["available_soon","for_rent","for_sale","off_market","recently_sold","sale_pending"]}],"property_type":[{"require_exact_match":true,"potential_matches":["apartment","apartment_room","builder_floor","bunga

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.10	50165	3.130.114.26	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:29 UTC	548	OUT	GET /tv2track.js HTTP/1.1 Host: collector-47776.us.tvsquared.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:29 UTC	333	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=600 Content-Type: application/javascript Date: Thu, 09 Jan 2025 23:22:29 GMT ETag: "65cf3449-5152" Expires: Thu, 09 Jan 2025 23:32:29 GMT Last-Modified: Fri, 16 Feb 2024 10:09:13 GMT Server: nginx X-Robots-Tag: noindex Content-Length: 20818 Connection: Close
2025-01-09 23:22:29 UTC	16051	IN	Data Raw: 2f 2a 21 0a 20 2a 20 50 69 77 69 6b 20 2d 20 57 65 62 20 41 6e 61 6c 79 74 69 63 73 0a 20 2a 0a 20 2a 20 4a 61 76 61 53 63 72 69 70 74 20 74 72 61 63 6b 69 6e 67 20 63 6c 69 65 6e 74 0a 20 2a 0a 20 2a 20 40 6c 69 6e 6b 20 68 74 74 70 3a 2f 2f 70 69 77 69 6b 2e 6f 72 67 0a 20 2a 20 40 73 6f 75 72 63 65 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 70 69 77 69 6b 2f 70 69 77 69 6b 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 6a 73 2f 70 69 77 69 6b 2e 6a 73 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 68 74 74 70 3a 2f 2f 70 69 77 69 6b 2e 6f 72 67 2f 66 72 65 65 2d 73 6f 66 74 77 61 72 65 2f 62 73 64 2f 20 53 69 6d 70 6c 69 66 69 65 64 20 42 53 44 20 28 61 6c 73 6f 20 69 6e 20 6a 73 2f 4c 49 43 45 4e 53 45 2e 74 78 74 29 0a 20 2a 2f 0a 69 66 28 74 79 70 Data Ascii: /! Piwik - Web Analytics * * JavaScript tracking client * * @link http://piwik.org * @source https://github.com/piwik/piwik/blob/master/js/piwik.js * @license http://piwik.org/free-software/bsd/ Simplified BSD (also in js/LICENSE.txt) */if(typ
2025-01-09 23:22:29 UTC	4767	IN	Data Raw: 6e 20 62 66 28 29 7b 76 61 72 20 62 6e 2c 62 6f 2c 62 70 3d 7b 70 64 66 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 70 64 66 22 2c 71 74 3a 22 76 69 64 65 6f 2f 71 75 69 63 6b 74 69 6d 65 22 2c 72 65 61 6c 70 3a 22 61 75 64 69 6f 2f 78 2d 70 6e 2d 72 65 61 6c 61 75 64 69 6f 2d 70 6c 75 67 69 6e 22 2c 77 6d 61 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6d 70 6c 61 79 65 72 32 22 2c 64 69 72 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 64 69 72 65 63 74 6f 72 22 2c 66 6c 61 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 73 68 6f 63 6b 77 61 76 65 2d 66 6c 61 73 68 22 2c 6a 61 76 61 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 2d 76 6d 22 2c 67 65 61 72 73 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 67 6f 6f 67 6c 65 67 65 61 72 73 Data Ascii: n bf(){var bn,bo,bp={pdf:"application/pdf",qt:"video/quicktime",realp:"audio/x-pn-realaudio-plugin",wma:"application/x-mplayer2",dir:"application/x-director",fla:"application/x-shockwave-flash",java:"application/x-java-vm",gears:"application/x-googlegears

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.10	50172	35.227.211.136	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:29 UTC	455	OUT	GET /xch/42778/1799340/21320 HTTP/1.1 Host: gohealth.sjv.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: brwsr=97672532-cee0-11ef-af94-ef1d83635a26; irld=LwTHS2H2oS0OWX49zIKSEvT4j; irtps=1
2025-01-09 23:22:29 UTC	880	IN	HTTP/1.1 301 Moved Permanently Cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: Thu, 09 Jan 2025 23:22:29 GMT P3P: policyref="/w3c/p3p.xml", CP="ALL BUS LEG DSP COR ADM CUR DEV PSA OUR NAV INT" Timing-Allow-Origin: * Set-Cookie: brwsr=97672532-cee0-11ef-af94-ef1d83635a26; Domain=.sjv.io; Path=/; Secure; Max-Age=62208000; Expires=Wed, 30 Dec 2026 23:22:29 GMT; HttpOnly; SameSite=None Set-Cookie: irld=LyswUer0xm12lWH9UYwW4WXTX; Path=/; Secure; Max-Age=15552000; Expires=Tue, 8 Jul 2025 23:22:29 GMT; HttpOnly; SameSite=None Location: https://medicare.gohealth.com/medicare?link_id=18767&irclickid=RFq2geQ7sxyKW-gX4FUVr1MvUks0BqzgU257TY0&sharedid=&irpid=0&irgwc=1 Content-Length: 0 Date: Thu, 09 Jan 2025 23:22:29 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.10	50174	151.101.129.44	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:29 UTC	365	OUT	GET /libtrc/unip/1190412/tfa.js HTTP/1.1 Host: cdn.taboola.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:29 UTC	768	IN	HTTP/1.1 200 OK Connection: close Content-Length: 72982 x-amz-id-2: ooBo6Rm0dyqAsR3AEfhFeWnVEnYxe5/4BI1gv9DLQ9BNvchn8+yXMj/W33OjC5dChTPmtIIwQeY= x-amz-request-id: 4EXY1MZKRWN0A8Q2 x-amz-replication-status: COMPLETED Last-Modified: Sun, 05 Jan 2025 11:09:11 GMT ETag: "02e1cc68c7c8a2524ea36562cf55b694" x-amz-server-side-encryption: AES256 x-amz-version-id: arx1tvoZuMJD79h94GU8h06hERS4m.9T Content-Type: application/javascript; charset=utf-8 Server: AmazonS3 Accept-Ranges: bytes Date: Thu, 09 Jan 2025 23:22:29 GMT Via: 1.1 varnish Age: 4 X-Served-By: cache-ewr-kewr1740052-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1736464949.139287,VS0,VE1 Cache-Control: private,max-age=14401 Vary: Accept-Encoding abp: 77 Access-Control-Allow-Origin: *
2025-01-09 23:22:29 UTC	16384	IN	Data Raw: 2f 2a 21 20 32 30 32 35 30 31 30 32 2d 38 2d 52 45 4c 45 41 53 45 20 2a 2f 0a 0a 66 75 6e 63 74 69 6f 6e 20 5f 74 79 70 65 6f 66 28 74 29 7b 22 40 62 61 62 65 6c 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 28 5f 74 79 70 65 6f 66 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 74 21 3d 3d 53 Data Ascii: /! 20250102-8-RELEASE /function _typeof(t){"@babel/helpers - typeof";return(_typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==S
2025-01-09 23:22:29 UTC	16384	IN	Data Raw: 72 62 6f 78 54 72 63 50 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 74 72 63 2e 74 61 62 6f 6f 6c 61 2e 63 6f 6d 2f 22 2b 72 2b 22 2f 74 72 63 2f 33 2f 6a 73 6f 6e 3f 22 2b 22 74 69 6d 3d 22 2b 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2b 22 26 22 2b 22 64 61 74 61 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 63 74 28 61 29 29 29 2b 22 26 22 2b 22 70 75 62 69 74 3d 22 2b 69 2c 63 3d 6f 2e 69 73 4d 65 64 69 61 52 65 71 75 65 73 74 3f 74 2e 5f 74 66 61 2e 63 6f 6e 66 69 67 2e 73 61 66 65 47 65 74 28 22 74 66 61 3a 74 72 6b 3a 74 72 61 63 6b 69 6e 67 2d 72 65 71 75 65 73 74 2d 74 69 6d 65 6f 75 74 22 2c 54 2c 72 29 3a 62 3b 61 5b 45 5d 3d 5f 2c 61 5b 6d 5d 3d 74 2e 73 65 74 54 69 6d 65 Data Ascii: rboxTrcProtocol+"//trc.taboola.com/"+r+"/trc/3/json?"+"tim="+(new Date).getTime()+"&"+"data="+encodeURIComponent(JSON.stringify(ct(a)))+"&"+"pubit="+i,c=o.isMediaRequest?t._tfa.config.safeGet("tfa:trk:tracking-request-timeout",T,r):b;a[E]=_,a[m]=t.setTime
2025-01-09 23:22:29 UTC	16384	IN	Data Raw: 29 7b 6e 5b 74 5d 3d 65 2c 6c 28 29 7d 2c 74 68 69 73 2e 72 65 6d 6f 76 65 4b 65 79 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 64 65 6c 65 74 65 20 6e 5b 74 5d 2c 6c 28 29 7d 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 76 61 72 20 65 3d 74 7c 7c 7b 7d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 5b 74 5d 3f 65 5b 74 5d 3a 6e 75 6c 6c 7d 2c 74 68 69 73 2e 73 65 74 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 65 5b 74 5d 3d 6e 7d 2c 74 68 69 73 2e 72 65 6d 6f 76 65 4b 65 79 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 64 65 6c 65 74 65 20 65 5b 74 5d 7d 2c 74 68 69 73 2e 67 65 74 44 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 2c Data Ascii: ){n[t]=e,l()},this.removeKey=function(t){delete n[t],l()},this}function o(t){var e=t\|\|{};return this.getValue=function(t){return e[t]?e[t]:null},this.setValue=function(t,n){e[t]=n},this.removeKey=function(t){delete e[t]},this.getData=function(){return e},
2025-01-09 23:22:29 UTC	16384	IN	Data Raw: 74 68 69 73 2e 69 6e 69 74 4c 69 73 74 65 6e 65 72 28 29 7d 2c 69 6e 69 74 4d 65 74 72 69 63 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 74 68 69 73 2e 69 73 50 61 67 65 48 69 64 64 65 6e 3d 64 6f 63 75 6d 65 6e 74 5b 74 68 69 73 2e 68 69 64 64 65 6e 50 72 6f 70 5d 7d 2c 69 6e 69 74 4c 69 73 74 65 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 65 2e 65 76 65 6e 74 55 74 69 6c 73 2e 73 61 66 65 41 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 68 69 73 2e 76 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 45 76 65 6e 74 4e 61 6d 65 2c 74 68 69 73 2e 68 61 6e 64 6c 65 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 2e 62 69 6e 64 28 74 68 69 73 29 29 7d 2c 73 65 74 56 69 73 69 62 69 6c 69 74 79 50 72 6f 70 65 72 74 69 65 73 3a 66 75 6e 63 74 Data Ascii: this.initListener()},initMetricData:function t(){this.isPageHidden=document[this.hiddenProp]},initListener:function t(){e.eventUtils.safeAddEventListener(this.visibilityChangeEventName,this.handleVisibilityChange.bind(this))},setVisibilityProperties:funct
2025-01-09 23:22:29 UTC	7446	IN	Data Raw: 28 74 5b 22 72 69 22 5d 3d 72 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 74 2c 6e 29 7b 76 61 72 20 72 3d 65 2e 74 72 6b 2e 67 65 74 50 75 62 6c 69 73 68 65 72 53 65 73 73 69 6f 6e 44 61 74 61 28 6e 29 3b 72 26 26 28 74 5b 22 73 64 22 5d 3d 72 29 7d 66 75 6e 63 74 69 6f 6e 20 57 28 74 2c 65 29 7b 74 5b 22 6d 72 69 72 22 5d 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 74 29 7b 74 5b 22 63 76 22 5d 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 59 28 74 2c 6e 29 7b 76 61 72 20 72 3d 72 74 28 29 2c 69 3b 69 66 28 21 65 2e 74 72 6b 2e 67 65 74 50 75 62 6c 69 73 68 65 72 52 65 71 75 65 73 74 49 64 28 74 29 29 7b 69 66 28 65 2e 74 72 6b 2e 69 73 52 65 71 75 65 73 74 50 72 6f 63 65 73 73 69 6e 67 28 74 29 29 72 65 74 75 72 6e 20 76 6f 69 64 20 72 2e 6d 65 73 73 61 67 65 44 65 6c Data Ascii: (t["ri"]=r)}function J(t,n){var r=e.trk.getPublisherSessionData(n);r&&(t["sd"]=r)}function W(t,e){t["mrir"]=e}function z(t){t["cv"]=n}function Y(t,n){var r=rt(),i;if(!e.trk.getPublisherRequestId(t)){if(e.trk.isRequestProcessing(t))return void r.messageDel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.10	50169	34.231.219.101	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:29 UTC	1632	OUT	GET /j?dtstmp=1736464947236&aid=a-06nm&se=e30&duid=268be191801d--01jh6p0nx115ahtaqq7ymqjjak&tv=v3.6.0&pu=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&wpn=lc-bundle&wpv=v3.6.0&refr=https%3A%2F%2Fsyndicatedsearch.goog%2F&cd=.gohealth.com&c=PGxpbmsgcmVsPSJjYW5vbmljYWwiIGhyZWY9Imh0dHBzOi8vbWVkaWNhcmUuZ29oZWFsdGguY29tIj48bGluayByZWw9ImNhbm9uaWNhbCIgaHJlZj0iaHR0cHM6Ly9tZWRpY2FyZS5nb2hlYWx0aC5jb20iPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSJXZSBoZWxwIHBlb3BsZSBvbiBNZWRpY2FyZSBmaW5kIHNhdmluZ3MiPjx0aXRsZT5Hb0hlYWx0aCB8IEdldCBNb3JlIE1lZGljYXJlIE [TRUNCATED] Host: rp.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://medicare.gohealth.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:29 UTC	1563	IN	HTTP/1.1 302 Found Date: Thu, 09 Jan 2025 23:22:29 GMT Content-Length: 0 Connection: close set-cookie: lidid=1dabb312-2853-42f0-9d67-1eb0b9e15f00; Max-Age=63072000; Expires=Sat, 09 Jan 2027 23:22:29 GMT; Path=/; Domain=.liadm.com; Secure; SameSite=None location: /j?dtstmp=1736464947236&aid=a-06nm&se=e30&duid=268be191801d--01jh6p0nx115ahtaqq7ymqjjak&tv=v3.6.0&pu=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&wpn=lc-bundle&wpv=v3.6.0&refr=https%3A%2F%2Fsyndicatedsearch.goog%2F&cd=.gohealth.com&c=PGxpbmsgcmVsPSJjYW5vbmljYWwiIGhyZWY9Imh0dHBzOi8vbWVkaWNhcmUuZ29oZWFsdGguY29tIj48bGluayByZWw9ImNhbm9uaWNhbCIgaHJlZj0iaHR0cHM6Ly9tZWRpY2FyZS5nb2hlYWx0aC5jb20iPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSJXZSBoZWxwIHBlb3BsZSBvbiBNZWRpY2FyZSBmaW5kIHNhdmluZ3MiPjx0aXRsZT5Hb0hlYWx0aCB8IEdldCBNb3JlIE1lZGlj [TRUNCATED] access-control-allow-origin: https://medicare.gohealth.com access-control-allow-methods: GET access-control-allow-credentials: true access-control-expose-headers: * access-control-max-age: 86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.10	50171	64.202.112.31	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:29 UTC	1306	OUT	GET /unifiedPixel?au=false&bust=004892440068507509&referrer=https%3A%2F%2Fsyndicatedsearch.goog%2F&marketerId=003678ec07dcd7129be54125730b23cabc&name=PAGE_VIEW&dl=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&g=0&zone=all&obApiVersion=1.1&obtpVersion=2.18.158 HTTP/1.1 Host: tr.outbrain.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger;event-source Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:29 UTC	264	IN	HTTP/1.1 200 OK date: Thu, 09 Jan 2025 23:22:29 GMT content-type: image/gif; content-length: 53 cache-control: no-cache x-traceid: 1ad87b33a5485a9f8ff57933b8378656 strict-transport-security: max-age=31536000; includeSubDomains; preload connection: close
2025-01-09 23:22:29 UTC	53	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 ef bf bd 00 00 00 00 00 ef bf bd ef bf bd ef bf bd 21 ef bf bd 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 02 02 44 01 00 3b Data Ascii: GIF89a!,@D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.10	50164	13.33.187.74	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:29 UTC	553	OUT	GET /modules.60031afbf51fb3e88a5b.js HTTP/1.1 Host: script.hotjar.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:29 UTC	720	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 228108 Connection: close Date: Wed, 18 Dec 2024 11:51:09 GMT Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin ETag: "51f0735cf6390af81e4cb97c3cde2cb7" Last-Modified: Wed, 18 Dec 2024 11:50:24 GMT Strict-Transport-Security: max-age=2592000; includeSubDomains X-Content-Type-Options: nosniff X-Robots-Tag: none Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 2e8126aebd83e92e3cf50c4f9c832912.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P9 X-Amz-Cf-Id: oTGshlULhnt0AhAS5FheSt8M6idaqYScJYWtq9m_2Rtf8Oe9On35kw== Age: 1942280
2025-01-09 23:22:29 UTC	15664	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 6f 64 75 6c 65 73 2e 36 30 30 33 31 61 66 62 66 35 31 66 62 33 65 38 38 61 35 62 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 34 37 38 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 7d 29 3b 63 6f 6e 73 74 20 72 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 49 44 45 4e 54 49 46 59 5f 55 53 45 52 3a 22 69 64 65 6e 74 69 66 79 5f 75 73 65 72 22 2c 41 55 54 4f 54 41 47 5f 52 45 43 4f 52 44 49 4e 47 3a 22 61 75 74 6f 74 61 67 5f 72 65 63 6f Data Ascii: /! For license information please see modules.60031afbf51fb3e88a5b.js.LICENSE.txt /!function(){var e={4788:function(e,t,n){"use strict";n.d(t,{s:function(){return r}});const r=Object.freeze({IDENTIFY_USER:"identify_user",AUTOTAG_RECORDING:"autotag_reco
2025-01-09 23:22:29 UTC	16384	IN	Data Raw: 6c 6f 67 2e 64 65 62 75 67 28 22 55 73 65 72 20 76 61 6c 69 64 61 74 69 6f 6e 20 41 50 49 20 63 61 6c 6c 20 73 75 63 63 65 73 73 66 75 6c 2e 22 2c 22 75 73 65 72 41 74 74 72 69 62 75 74 65 73 22 2c 65 29 7d 29 2c 22 75 73 65 72 41 74 74 72 69 62 75 74 65 73 22 29 2c 68 6a 2e 74 72 79 43 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 68 6a 2e 6c 6f 67 2e 64 65 62 75 67 28 22 55 73 65 72 20 41 74 74 72 69 62 75 74 65 73 20 76 61 6c 69 64 61 74 69 6f 6e 20 41 50 49 20 63 61 6c 6c 20 66 61 69 6c 65 64 2e 22 2c 22 75 73 65 72 41 74 74 72 69 62 75 74 65 73 22 2c 65 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 26 26 4a 53 4f 4e 2e 70 61 72 73 65 28 65 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 29 7c 7c 22 75 6e 6b 6e 6f 77 6e 5f 66 61 69 6c 75 72 65 22 29 7d 29 2c Data Ascii: log.debug("User validation API call successful.","userAttributes",e)}),"userAttributes"),hj.tryCatch((function(e){hj.log.debug("User Attributes validation API call failed.","userAttributes",e.responseText&&JSON.parse(e.responseText)\|\|"unknown_failure")}),
2025-01-09 23:22:29 UTC	16384	IN	Data Raw: 28 29 7d 7d 7d 28 29 2c 6e 3d 76 6f 69 64 20 30 21 3d 3d 74 2c 6f 3d 6e 75 6c 6c 21 3d 3d 69 2e 67 65 74 28 29 3b 72 65 74 75 72 6e 20 6e 26 26 69 2e 73 65 74 28 7b 72 65 66 65 72 72 65 72 3a 74 7d 29 2c 6f 7c 7c 6e 7d 7d 2c 36 31 37 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 4b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 7d 29 3b 76 61 72 20 72 2c 6f 2c 69 3d 28 28 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 29 7d 29 2e 74 65 73 74 3d 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 69 66 28 21 6e 61 76 69 67 61 74 6f 72 29 72 65 74 75 72 6e 22 4e 6f 20 55 73 65 72 2d 41 67 65 6e 74 20 50 72 6f 76 69 64 65 64 22 3b 69 66 28 6e 75 6c 6c Data Ascii: ()}}}(),n=void 0!==t,o=null!==i.get();return n&&i.set({referrer:t}),o\|\|n}},6175:function(e,t,n){"use strict";n.d(t,{K:function(){return i}});var r,o,i=((o=function(){return r()}).test=r=function(){var e;if(!navigator)return"No User-Agent Provided";if(null
2025-01-09 23:22:29 UTC	16384	IN	Data Raw: 73 69 67 6e 65 64 53 6c 6f 74 3b 29 73 3d 73 2e 61 73 73 69 67 6e 65 64 53 6c 6f 74 3b 72 65 74 75 72 6e 20 75 28 68 6a 2e 68 71 28 73 29 2e 70 61 72 65 6e 74 28 29 2c 22 3e 22 2b 6f 2b 6e 29 7d 72 65 74 75 72 6e 20 75 28 65 2e 70 61 72 65 6e 74 28 29 2c 22 3e 22 2b 6f 2b 6e 29 7d 29 2c 22 63 6f 6d 6d 6f 6e 22 29 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 5b 5d 3b 72 65 74 75 72 6e 21 28 76 6f 69 64 20 30 3d 3d 3d 28 65 3d 68 6a 2e 68 71 2e 74 72 69 6d 28 28 65 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 73 5c 73 2b 2f 67 2c 22 20 22 29 29 29 7c 7c 22 22 3d 3d 3d 65 7c 7c 65 2e 69 6e 64 65 78 4f 66 28 22 79 75 69 5f 22 29 3e 2d 31 29 26 26 28 28 65 3d 65 2e 72 65 70 6c 61 63 65 28 6e 2c 22 5c 5c 24 31 22 29 29 2e 73 70 6c 69 74 28 Data Ascii: signedSlot;)s=s.assignedSlot;return u(hj.hq(s).parent(),">"+o+n)}return u(e.parent(),">"+o+n)}),"common"),l=function(e){var r=[];return!(void 0===(e=hj.hq.trim((e\|\|"").replace(/\s\s+/g," ")))\|\|""===e\|\|e.indexOf("yui_")>-1)&&((e=e.replace(n,"\\$1")).split(
2025-01-09 23:22:29 UTC	16384	IN	Data Raw: 73 74 53 65 65 6e 22 29 7d 7d 28 68 6a 2e 76 69 73 69 74 44 61 74 61 2e 67 65 74 50 61 67 65 56 69 73 69 74 49 6e 66 6f 28 74 2c 68 6a 2e 73 65 74 74 69 6e 67 73 2e 73 69 74 65 5f 69 64 29 2c 6e 2c 72 29 7d 2c 61 29 29 2e 66 6c 75 73 68 28 29 2c 68 6a 2e 65 76 65 6e 74 53 74 72 65 61 6d 2e 72 65 70 6f 72 74 50 61 67 65 43 6f 6e 74 65 6e 74 28 65 29 2c 28 30 2c 63 2e 4e 29 28 69 2e 73 2e 53 43 52 4f 4c 4c 5f 52 45 41 43 48 2c 7b 6d 61 78 5f 62 6f 74 74 6f 6d 3a 68 6a 2e 75 69 2e 67 65 74 42 6f 74 74 6f 6d 41 73 50 65 72 63 65 6e 74 61 67 65 28 29 7d 2c 21 30 29 2c 6f 3f 71 2e 65 6e 61 62 6c 65 52 65 63 6f 72 64 69 6e 67 28 29 3a 42 2e 79 2e 6f 6e 28 22 70 61 67 65 49 6e 66 6f 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4b 2e 69 6e 69 74 69 61 6c 69 Data Ascii: stSeen")}}(hj.visitData.getPageVisitInfo(t,hj.settings.site_id),n,r)},a)).flush(),hj.eventStream.reportPageContent(e),(0,c.N)(i.s.SCROLL_REACH,{max_bottom:hj.ui.getBottomAsPercentage()},!0),o?q.enableRecording():B.y.on("pageInfo",(function(e,t){K.initiali
2025-01-09 23:22:29 UTC	16384	IN	Data Raw: 68 6a 5f 6d 75 74 61 74 69 6f 6e 5f 73 75 6d 6d 61 72 79 5f 6e 6f 64 65 5f 6d 61 70 5f 69 64 5f 5f 22 2c 74 65 2e 6e 65 78 74 49 64 5f 3d 31 3b 76 61 72 20 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 65 2e 53 54 41 59 45 44 5f 4f 55 54 3d 30 5d 3d 22 53 54 41 59 45 44 5f 4f 55 54 22 2c 65 5b 65 2e 45 4e 54 45 52 45 44 3d 31 5d 3d 22 45 4e 54 45 52 45 44 22 2c 65 5b 65 2e 53 54 41 59 45 44 5f 49 4e 3d 32 5d 3d 22 53 54 41 59 45 44 5f 49 4e 22 2c 65 5b 65 2e 52 45 50 41 52 45 4e 54 45 44 3d 33 5d 3d 22 52 45 50 41 52 45 4e 54 45 44 22 2c 65 5b 65 2e 52 45 4f 52 44 45 52 45 44 3d 34 5d 3d 22 52 45 4f 52 44 45 52 45 44 22 2c 65 5b 65 2e 45 58 49 54 45 44 3d 35 5d 3d 22 45 58 49 54 45 44 22 2c 65 7d 28 6e 65 7c 7c 7b 7d 29 2c 72 65 Data Ascii: hj_mutation_summary_node_map_id__",te.nextId_=1;var ne=function(e){return e[e.STAYED_OUT=0]="STAYED_OUT",e[e.ENTERED=1]="ENTERED",e[e.STAYED_IN=2]="STAYED_IN",e[e.REPARENTED=3]="REPARENTED",e[e.REORDERED=4]="REORDERED",e[e.EXITED=5]="EXITED",e}(ne\|\|{}),re
2025-01-09 23:22:29 UTC	16384	IN	Data Raw: 74 65 6e 74 3a 22 22 7d 5d 2c 6f 2e 72 65 64 61 63 74 65 64 43 6f 6e 74 65 6e 74 49 64 2d 2d 29 3a 74 26 26 28 68 2e 63 68 69 6c 64 4e 6f 64 65 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6e 6f 64 65 2c 6e 3d 65 2e 73 68 61 64 6f 77 52 6f 6f 74 2c 72 3d 65 2e 73 65 72 69 61 6c 69 7a 65 2c 6f 3d 65 2e 69 6e 69 74 69 61 6c 43 68 69 6c 64 4e 6f 64 65 73 7c 7c 5b 5d 3b 69 66 28 6e 26 26 6e 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 29 7b 6f 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 69 3d 6e 2e 66 69 72 73 74 43 68 69 6c 64 3b 69 3b 69 3d 69 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 7b 76 61 72 20 61 3d 72 28 69 29 3b 61 2e 69 73 49 6e 53 68 61 64 6f 77 52 6f 6f 74 3d 21 30 2c 6f 2e 70 75 73 68 28 61 29 7d 7d 69 66 28 74 2e 63 68 69 6c Data Ascii: tent:""}],o.redactedContentId--):t&&(h.childNodes=function(e){var t=e.node,n=e.shadowRoot,r=e.serialize,o=e.initialChildNodes\|\|[];if(n&&n.childNodes.length){o=[];for(var i=n.firstChild;i;i=i.nextSibling){var a=r(i);a.isInShadowRoot=!0,o.push(a)}}if(t.chil
2025-01-09 23:22:29 UTC	16384	IN	Data Raw: 64 28 65 29 2c 6e 26 26 28 69 2e 69 64 3d 6e 29 2c 69 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 6f 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 28 5b 65 5d 29 7d 29 29 7d 72 65 74 75 72 6e 20 74 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 28 65 3d 43 53 53 53 74 79 6c 65 53 68 65 65 74 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 52 75 6c 65 2c 43 53 53 53 74 79 6c 65 53 68 65 65 74 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 52 75 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 2c 6e 3d 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 6f 3d 74 68 69 73 Data Ascii: d(e),n&&(i.id=n),i};function a(e){o.forEach((function(t){t([e])}))}return t.init=function(){n\|\|(e=CSSStyleSheet.prototype.deleteRule,CSSStyleSheet.prototype.deleteRule=function(){var t=Array.prototype.slice.call(arguments),n=e.apply(this,arguments),o=this
2025-01-09 23:22:29 UTC	16384	IN	Data Raw: 69 6e 63 72 28 29 2c 72 2e 72 65 61 64 28 29 2e 74 68 65 6e 28 65 29 7d 29 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 74 69 6d 65 2c 72 3d 65 2e 63 6f 6d 70 72 65 73 73 65 64 3b 74 28 7b 73 75 63 63 65 73 73 3a 21 30 2c 63 6f 6d 70 72 65 73 73 65 64 3a 72 2c 74 69 6d 65 3a 6e 7d 29 7d 29 29 2e 63 61 74 63 68 28 61 29 7d 63 61 74 63 68 28 65 29 7b 61 28 65 29 7d 7d 28 74 2c 73 29 7d 2c 72 65 70 6f 72 74 50 61 67 65 43 6f 6e 74 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 77 3d 21 31 2c 67 3d 75 2e 79 2e 6f 6e 28 22 70 61 67 65 43 6f 6e 74 65 6e 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 2c 6f 3d 74 2e 75 75 69 64 2c 69 3d 74 2e 6d 64 35 2c 61 3d 68 6a 2e 64 6f 6d 2e 67 65 74 43 53 53 55 52 Data Ascii: incr(),r.read().then(e)}))).then((function(e){var n=e.time,r=e.compressed;t({success:!0,compressed:r,time:n})})).catch(a)}catch(e){a(e)}}(t,s)},reportPageContent:function(e){w=!1,g=u.y.on("pageContent",(function(t){var n,o=t.uuid,i=t.md5,a=hj.dom.getCSSUR
2025-01-09 23:22:29 UTC	16384	IN	Data Raw: 74 29 7c 7c 74 3b 72 65 74 75 72 6e 20 6f 3f 72 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 3f 72 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 5b 6f 5d 7c 7c 28 61 28 22 55 6e 61 62 6c 65 20 74 6f 20 61 63 63 65 73 73 20 70 72 6f 70 65 72 74 79 20 77 69 74 68 20 6e 61 6d 65 20 5b 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 5d 20 66 72 6f 6d 20 61 6e 20 49 46 72 61 6d 65 20 63 6f 6e 74 65 78 74 22 29 29 2c 65 29 3a 28 61 28 22 55 6e 61 62 6c 65 20 74 6f 20 61 63 63 65 73 73 20 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 20 70 72 6f 70 65 72 74 79 22 29 2c 65 29 3a 28 61 28 22 55 6e 61 62 6c 65 20 74 6f 20 6e 61 6d 65 20 70 72 6f 70 65 72 74 79 20 6f 72 20 6d 69 73 73 69 6e 67 20 66 61 6c 6c 62 61 63 6b 4e 61 6d 65 22 29 2c 65 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 Data Ascii: t)\|\|t;return o?r.contentWindow?r.contentWindow[o]\|\|(a("Unable to access property with name [".concat(o,"] from an IFrame context")),e):(a("Unable to access contentWindow property"),e):(a("Unable to name property or missing fallbackName"),e)}catch(t){retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.10	50173	3.167.227.50	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:29 UTC	353	OUT	GET /a-06nm.min.js HTTP/1.1 Host: b-code.liadm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:29 UTC	402	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 138980 Connection: close Date: Thu, 09 Jan 2025 23:22:25 GMT Cache-Control: public,max-age=86400 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 a6cf64e69a19d3b39479c6c39a829974.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P11 X-Amz-Cf-Id: ISYIw6OsTGjBJBEMZRqdj98M7q-31Y5XOXCfJkRgfgCdirKi0goFiw== Age: 4
2025-01-09 23:22:29 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 4c 49 3d 7b 22 61 70 70 49 64 22 3a 22 61 2d 30 36 6e 6d 22 2c 22 61 64 76 65 72 74 69 73 65 72 49 64 22 3a 36 37 38 34 38 2c 22 73 79 6e 63 22 3a 66 61 6c 73 65 2c 22 65 75 6e 73 22 3a 66 61 6c 73 65 2c 22 69 64 65 6e 74 69 66 69 65 72 73 54 6f 52 65 73 6f 6c 76 65 22 3a 22 5f 61 61 6c 79 74 69 63 73 75 69 64 2c 74 72 63 5f 63 6f 6f 6b 69 65 5f 73 74 6f 72 61 67 65 2c 64 74 6d 5f 74 6f 6b 65 6e 2c 5f 70 75 62 63 69 64 2c 68 69 64 2c 6d 75 75 69 64 2c 67 6c 6f 62 61 6c 54 49 5f 53 49 44 2c 61 6a 73 5f 75 73 65 72 5f 69 64 2c 5f 6c 69 5f 75 75 69 64 2c 73 5f 65 63 69 64 2c 5f 73 68 6f 70 69 66 79 5f 79 2c 67 75 70 5f 61 6e 6f 6e 69 64 2c 73 5f 76 69 2c 49 58 57 52 41 50 50 45 52 4c 69 76 65 49 6e 74 Data Ascii: !function(){window.LI={"appId":"a-06nm","advertiserId":67848,"sync":false,"euns":false,"identifiersToResolve":"_aalyticsuid,trc_cookie_storage,dtm_token,_pubcid,hid,muuid,globalTI_SID,ajs_user_id,_li_uuid,s_ecid,_shopify_y,gup_anonid,s_vi,IXWRAPPERLiveInt
2025-01-09 23:22:29 UTC	16384	IN	Data Raw: 64 3f 61 3d 31 26 63 3d 33 22 21 3d 3d 65 2e 68 72 65 66 7c 7c 22 33 22 21 3d 3d 74 2e 67 65 74 28 22 63 22 29 7c 7c 22 61 3d 31 22 21 3d 3d 53 74 72 69 6e 67 28 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 22 3f 61 3d 31 22 29 29 7c 7c 21 74 5b 52 73 5d 7c 7c 22 61 22 21 3d 3d 6e 65 77 20 55 52 4c 28 22 68 74 74 70 73 3a 2f 2f 61 40 62 22 29 2e 75 73 65 72 6e 61 6d 65 7c 7c 22 62 22 21 3d 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 22 61 3d 62 22 29 29 2e 67 65 74 28 22 61 22 29 7c 7c 22 78 6e 2d 2d 65 31 61 79 62 63 22 21 3d 3d 6e 65 77 20 55 52 4c 28 22 68 74 74 70 73 3a 2f 2f d1 82 d0 b5 d1 81 d1 82 22 29 2e 68 6f 73 74 7c 7c 22 23 25 44 30 25 42 31 22 21 3d Data Ascii: d?a=1&c=3"!==e.href\|\|"3"!==t.get("c")\|\|"a=1"!==String(new URLSearchParams("?a=1"))\|\|!t[Rs]\|\|"a"!==new URL("https://a@b").username\|\|"b"!==new URLSearchParams(new URLSearchParams("a=b")).get("a")\|\|"xn--e1aybc"!==new URL("https://").host\|\|"#%D0%B1"!=
2025-01-09 23:22:29 UTC	16384	IN	Data Raw: 3b 63 61 73 65 22 23 22 3a 6c 2e 68 6f 73 74 3d 6e 2e 68 6f 73 74 2c 6c 2e 70 61 74 68 3d 6d 75 28 6e 2e 70 61 74 68 29 2c 6c 2e 71 75 65 72 79 3d 6e 2e 71 75 65 72 79 2c 6c 2e 66 72 61 67 6d 65 6e 74 3d 22 22 2c 63 3d 48 64 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 76 64 28 46 75 28 6d 75 28 72 2c 75 29 2c 22 22 29 29 7c 7c 28 6c 2e 68 6f 73 74 3d 6e 2e 68 6f 73 74 2c 6c 2e 70 61 74 68 3d 6d 75 28 6e 2e 70 61 74 68 29 2c 6c 2e 73 68 6f 72 74 65 6e 50 61 74 68 28 29 29 2c 63 3d 6a 64 3b 63 6f 6e 74 69 6e 75 65 7d 7d 62 72 65 61 6b 3b 63 61 73 65 20 55 64 3a 69 66 28 22 2f 22 3d 3d 3d 6f 7c 7c 22 5c 5c 22 3d 3d 3d 6f 29 7b 63 3d 4c 64 3b 62 72 65 61 6b 7d 6e 26 26 22 66 69 6c 65 22 3d 3d 3d 6e 2e 73 63 68 65 6d 65 26 26 21 76 64 28 46 75 28 6d 75 28 72 Data Ascii: ;case"#":l.host=n.host,l.path=mu(n.path),l.query=n.query,l.fragment="",c=Hd;break;default:vd(Fu(mu(r,u),""))\|\|(l.host=n.host,l.path=mu(n.path),l.shortenPath()),c=jd;continue}}break;case Ud:if("/"===o\|\|"\\"===o){c=Ld;break}n&&"file"===n.scheme&&!vd(Fu(mu(r
2025-01-09 23:22:29 UTC	14808	IN	Data Raw: 3d 73 3f 65 2e 6f 6b 3a 65 2e 66 61 69 6c 2c 6c 3d 65 2e 72 65 73 6f 6c 76 65 2c 63 3d 65 2e 72 65 6a 65 63 74 2c 75 3d 65 2e 64 6f 6d 61 69 6e 3b 74 72 79 7b 61 3f 28 73 7c 7c 28 32 3d 3d 3d 74 2e 72 65 6a 65 63 74 69 6f 6e 26 26 46 76 28 74 29 2c 74 2e 72 65 6a 65 63 74 69 6f 6e 3d 31 29 2c 21 30 3d 3d 3d 61 3f 6e 3d 69 3a 28 75 26 26 75 2e 65 6e 74 65 72 28 29 2c 6e 3d 61 28 69 29 2c 75 26 26 28 75 2e 65 78 69 74 28 29 2c 6f 3d 21 30 29 29 2c 6e 3d 3d 3d 65 2e 70 72 6f 6d 69 73 65 3f 63 28 6e 65 77 20 78 76 28 22 50 72 6f 6d 69 73 65 2d 63 68 61 69 6e 20 63 79 63 6c 65 22 29 29 3a 28 72 3d 41 76 28 6e 29 29 3f 5a 67 28 72 2c 6e 2c 6c 2c 63 29 3a 6c 28 6e 29 29 3a 63 28 69 29 7d 63 61 74 63 68 28 65 29 7b 75 26 26 21 6f 26 26 75 2e 65 78 69 74 28 29 2c Data Ascii: =s?e.ok:e.fail,l=e.resolve,c=e.reject,u=e.domain;try{a?(s\|\|(2===t.rejection&&Fv(t),t.rejection=1),!0===a?n=i:(u&&u.enter(),n=a(i),u&&(u.exit(),o=!0)),n===e.promise?c(new xv("Promise-chain cycle")):(r=Av(n))?Zg(r,n,l,c):l(n)):c(i)}catch(e){u&&!o&&u.exit(),
2025-01-09 23:22:29 UTC	16384	IN	Data Raw: 74 6f 72 28 65 29 7b 76 61 72 20 74 3b 55 77 28 74 68 69 73 2c 22 63 61 6c 6c 48 61 6e 64 6c 65 72 22 2c 76 6f 69 64 20 30 29 2c 55 77 28 74 68 69 73 2c 22 62 61 73 65 51 75 65 72 79 22 2c 76 6f 69 64 20 30 29 2c 55 77 28 74 68 69 73 2c 22 70 69 78 65 6c 42 61 73 65 55 72 6c 22 2c 76 6f 69 64 20 30 29 2c 55 77 28 74 68 69 73 2c 22 73 61 6d 70 6c 65 52 61 74 65 22 2c 76 6f 69 64 20 30 29 2c 74 68 69 73 2e 63 61 6c 6c 48 61 6e 64 6c 65 72 3d 65 2e 63 61 6c 6c 48 61 6e 64 6c 65 72 3b 63 6f 6e 73 74 20 6e 3d 4c 77 28 29 3b 6c 65 74 20 72 3b 6e 75 6c 6c 21 3d 6e 2e 70 61 67 65 55 72 6c 26 26 28 72 3d 6e 65 77 20 6f 70 28 6e 2e 70 61 67 65 55 72 6c 29 2c 72 2e 73 65 61 72 63 68 3d 22 22 29 2c 74 68 69 73 2e 62 61 73 65 51 75 65 72 79 3d 46 77 2e 65 6d 70 74 79 Data Ascii: tor(e){var t;Uw(this,"callHandler",void 0),Uw(this,"baseQuery",void 0),Uw(this,"pixelBaseUrl",void 0),Uw(this,"sampleRate",void 0),this.callHandler=e.callHandler;const n=Lw();let r;null!=n.pageUrl&&(r=new op(n.pageUrl),r.search=""),this.baseQuery=Fw.empty
2025-01-09 23:22:29 UTC	16384	IN	Data Raw: 61 72 6c 79 3a 72 2e 61 62 6f 72 74 50 69 70 65 45 61 72 6c 79 7d 2c 79 3d 22 73 63 68 65 6d 61 22 3d 3d 3d 65 2e 6b 69 6e 64 2c 6d 3d 6e 75 6c 6c 21 3d 3d 28 6c 3d 6e 75 6c 6c 21 3d 3d 28 63 3d 6e 75 6c 6c 21 3d 3d 28 75 3d 6e 75 6c 6c 21 3d 3d 28 64 3d 6e 75 6c 6c 21 3d 3d 28 70 3d 6e 75 6c 6c 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 6d 65 73 73 61 67 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 70 3f 70 3a 65 2e 6d 65 73 73 61 67 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 64 3f 64 3a 28 65 2e 72 65 66 65 72 65 6e 63 65 2c 76 6f 69 64 20 76 2e 6c 61 6e 67 29 29 26 26 76 6f 69 64 20 30 21 3d 3d 75 3f 75 3a 79 3f 76 6f 69 64 20 76 2e 6c 61 6e 67 3a 6e 75 6c 6c 29 26 26 76 6f 69 64 20 30 21 3d 3d 63 3f 63 3a 72 2e 6d 65 73 73 61 67 65 29 26 26 76 6f 69 64 20 30 21 3d Data Ascii: arly:r.abortPipeEarly},y="schema"===e.kind,m=null!==(l=null!==(c=null!==(u=null!==(d=null!==(p=null==o?void 0:o.message)&&void 0!==p?p:e.message)&&void 0!==d?d:(e.reference,void v.lang))&&void 0!==u?u:y?void v.lang:null)&&void 0!==c?c:r.message)&&void 0!=
2025-01-09 23:22:29 UTC	16384	IN	Data Raw: 6f 53 74 72 69 6e 67 28 29 29 3b 72 65 74 75 72 6e 20 74 2e 70 61 74 68 6e 61 6d 65 3d 22 22 2c 74 2e 73 65 61 72 63 68 3d 22 22 2c 74 7d 28 61 2e 70 61 67 65 55 72 6c 29 2e 74 6f 53 74 72 69 6e 67 28 29 3a 76 6f 69 64 20 30 29 2e 61 64 64 4f 70 74 69 6f 6e 61 6c 28 22 67 64 70 72 22 2c 67 29 2e 61 64 64 4f 70 74 69 6f 6e 61 6c 28 22 67 64 70 72 5f 63 6f 6e 73 65 6e 74 22 2c 6e 75 6c 6c 3d 3d 3d 28 6e 3d 63 2e 67 64 70 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 76 6f 69 64 20 30 3a 6e 2e 63 6f 6e 73 65 6e 74 53 74 72 69 6e 67 29 2e 61 64 64 4f 70 74 69 6f 6e 61 6c 28 22 75 73 5f 70 72 69 76 61 63 79 22 2c 6e 75 6c 6c 3d 3d 3d 28 72 3d 63 2e 75 73 50 72 69 76 61 63 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 63 6f 6e 73 65 6e Data Ascii: oString());return t.pathname="",t.search="",t}(a.pageUrl).toString():void 0).addOptional("gdpr",g).addOptional("gdpr_consent",null===(n=c.gdpr)\|\|void 0===n?void 0:n.consentString).addOptional("us_privacy",null===(r=c.usPrivacy)\|\|void 0===r?void 0:r.consen
2025-01-09 23:22:29 UTC	16384	IN	Data Raw: 70 72 6f 70 73 2e 65 6d 61 69 6c 45 78 74 72 61 63 74 69 6f 6e 53 65 74 74 69 6e 67 73 2e 77 69 6e 64 6f 77 50 72 6f 70 65 72 74 79 50 61 74 68 73 2e 6c 65 6e 67 74 68 3e 30 29 26 26 65 2e 73 63 68 65 64 75 6c 65 41 66 74 65 72 44 65 6c 61 79 28 6e 2e 70 72 6f 70 73 2e 68 75 62 43 6f 6e 66 69 67 2e 73 69 64 65 43 68 61 6e 6e 65 6c 52 65 67 69 73 74 65 72 43 6f 6c 6c 65 63 74 44 65 6c 61 79 2c 7b 74 79 70 65 3a 22 63 6f 6c 6c 65 63 74 5f 74 6f 5f 73 69 64 65 5f 63 68 61 6e 6e 65 6c 22 2c 63 6c 69 65 6e 74 52 65 66 3a 74 7d 29 2c 6e 2e 70 72 6f 70 73 2e 61 75 74 6f 43 6f 6c 6c 65 63 74 53 65 74 74 69 6e 67 73 2e 65 6e 61 62 6c 65 64 26 26 65 2e 73 63 68 65 64 75 6c 65 41 66 74 65 72 44 65 6c 61 79 28 6e 2e 70 72 6f 70 73 2e 61 75 74 6f 43 6f 6c 6c 65 63 74 Data Ascii: props.emailExtractionSettings.windowPropertyPaths.length>0)&&e.scheduleAfterDelay(n.props.hubConfig.sideChannelRegisterCollectDelay,{type:"collect_to_side_channel",clientRef:t}),n.props.autoCollectSettings.enabled&&e.scheduleAfterDelay(n.props.autoCollect
2025-01-09 23:22:29 UTC	9484	IN	Data Raw: 74 54 72 69 67 67 65 72 65 64 43 6f 6c 6c 65 63 74 69 6f 6e 53 65 74 74 69 6e 67 73 3a 5f 43 2c 65 6d 61 69 6c 45 78 74 72 61 63 74 69 6f 6e 53 65 74 74 69 6e 67 73 3a 52 43 2c 69 64 35 43 6f 6c 6c 65 63 74 69 6f 6e 53 65 74 74 69 6e 67 73 3a 49 43 2c 70 61 67 65 44 65 70 65 6e 64 65 6e 74 53 65 74 74 69 6e 67 73 3a 54 43 7d 29 2c 44 43 3d 57 62 28 7b 74 79 70 65 3a 7a 62 28 22 63 6f 6c 6c 65 63 74 22 29 2c 63 6c 69 65 6e 74 52 65 66 3a 77 43 2c 73 6f 75 72 63 65 45 76 65 6e 74 3a 63 43 7d 29 2c 46 43 3d 57 62 28 7b 74 79 70 65 3a 7a 62 28 22 72 65 73 6f 6c 76 65 22 29 2c 63 6c 69 65 6e 74 52 65 66 3a 77 43 2c 72 65 71 75 65 73 74 65 64 41 74 74 72 69 62 75 74 65 73 3a 41 43 2c 61 64 64 69 74 69 6f 6e 61 6c 52 65 73 6f 6c 76 65 50 61 72 61 6d 65 74 65 72 Data Ascii: tTriggeredCollectionSettings:_C,emailExtractionSettings:RC,id5CollectionSettings:IC,pageDependentSettings:TC}),DC=Wb({type:zb("collect"),clientRef:wC,sourceEvent:cC}),FC=Wb({type:zb("resolve"),clientRef:wC,requestedAttributes:AC,additionalResolveParameter

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.10	50179	3.74.15.141	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:29 UTC	570	OUT	GET /sa.jpeg HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://medicare.gohealth.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-09 23:22:29 UTC	1324	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:29 GMT Content-Type: image/jpeg Content-Length: 651 Connection: close Access-Control-Allow-Origin: * Cache-Control: only-if-cached, no-transform, private, max-age=7776000 Set-Cookie: sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCC1tIG8BjABOgT87-jmQgTy45lx.%2FX410hc2k80Gz3p8s5PYldIPmeY36VpV%2FDoSkRrv%2BvI; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCC1tIG8BjABOgT87-jmQgTy45lx.%2FX410hc2k80Gz3p8s5PYldIPmeY36VpV%2FDoSkRrv%2BvI; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None
2025-01-09 23:22:29 UTC	651	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 01 00 01 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``C $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.10	50178	3.74.15.141	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:29 UTC	1248	OUT	GET /sa.css HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCC0tIG8BjABOgT87-jmQgQ_QCZc.O3M9N%2FjNocxDAkJgoeKCY4eteFsk5sYBegvZtk1NJzo; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCC0tIG8BjABOgT87-jmQgQ_QCZc.O3M9N%2FjNocxDAkJgoeKCY4eteFsk5sYBegvZtk1NJzo
2025-01-09 23:22:29 UTC	222	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:29 GMT Content-Type: text/css Content-Length: 65 Connection: close Access-Control-Allow-Origin: * Cache-Control: only-if-cached, no-transform, private, max-age=7776000
2025-01-09 23:22:29 UTC	65	IN	Data Raw: 3a 72 6f 6f 74 20 7b 0a 20 20 20 20 2d 2d 73 61 2d 75 69 64 3a 20 27 30 2d 39 36 62 38 35 31 66 39 2d 37 62 62 36 2d 35 36 37 65 2d 37 31 37 61 2d 65 39 34 33 64 65 31 64 66 30 61 63 27 3b 0a 7d Data Ascii: :root { --sa-uid: '0-96b851f9-7bb6-567e-717a-e943de1df0ac';}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.10	50181	34.231.219.101	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:29 UTC	1694	OUT	GET /j?dtstmp=1736464947236&aid=a-06nm&se=e30&duid=268be191801d--01jh6p0nx115ahtaqq7ymqjjak&tv=v3.6.0&pu=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&wpn=lc-bundle&wpv=v3.6.0&refr=https%3A%2F%2Fsyndicatedsearch.goog%2F&cd=.gohealth.com&c=PGxpbmsgcmVsPSJjYW5vbmljYWwiIGhyZWY9Imh0dHBzOi8vbWVkaWNhcmUuZ29oZWFsdGguY29tIj48bGluayByZWw9ImNhbm9uaWNhbCIgaHJlZj0iaHR0cHM6Ly9tZWRpY2FyZS5nb2hlYWx0aC5jb20iPjxtZXRhIG5hbWU9ImRlc2NyaXB0aW9uIiBjb250ZW50PSJXZSBoZWxwIHBlb3BsZSBvbiBNZWRpY2FyZSBmaW5kIHNhdmluZ3MiPjx0aXRsZT5Hb0hlYWx0aCB8IEdldCBNb3JlIE1lZGljYXJlIE [TRUNCATED] Host: rp.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://medicare.gohealth.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=1dabb312-2853-42f0-9d67-1eb0b9e15f00
2025-01-09 23:22:29 UTC	547	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:29 GMT Content-Type: application/json Content-Length: 13 Connection: close X-Pixel-Event-Id: b63740a9-803b-4c6e-b04a-7626bce212b6 set-cookie: lidid=1dabb312-2853-42f0-9d67-1eb0b9e15f00; Max-Age=63072000; Expires=Sat, 09 Jan 2027 23:22:29 GMT; Path=/j; Domain=.liadm.com; Secure; SameSite=None access-control-allow-origin: https://medicare.gohealth.com access-control-allow-methods: GET access-control-allow-credentials: true access-control-expose-headers: * access-control-max-age: 86400
2025-01-09 23:22:29 UTC	13	IN	Data Raw: 7b 22 62 61 6b 65 72 73 22 3a 5b 5d 7d Data Ascii: {"bakers":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.10	50180	3.74.15.141	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:30 UTC	2439	OUT	GET /saq_pxl?uid=jBubxyJLG1_zSNqfyTn1Aw&is_js=true&landing_url=https%3A%2F%2Fmedicare.gohealth.com%2Fmedicare-marketplace%3Flink_id%3D18307%26src%3DGS_18373%26cmpn%3D%257Bcampaignid%257D%26adg%3D%257Badgroupid%257D%26ad%3D%257Bcreative%257D%26kw%3D%257Bkeyword%257D%26pos%3D%257Badposition%257D%26mt%3D%257Bmatchtype%257D%26pl%3D%257Bplacement%257D%26nw%3D%257Bnetwork%257D%26p1%3D%257Bdevice%257D%26p2%3D%257Bdevicemodel%257D%26p3%3D%257Bloc_physical_ms%257D%26source_type%3DPPCWEB%26affiliate_id%3D4397%26gad_source%3D5%26gclid%3DEAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE&t=GoHealth%20%7C%20Get%20More%20Medicare%20Benefits&tip=r2VBjeI2kzLuvBdN1PsckXCwQNMHVWQ9n_4OeHoRHDU&host=https%3A%2F%2Fmedicare.gohealth.com&l_src=syndicatedsearch.goog&l_src_d=2025-01-09T23%3A22%3A27.616Z&u_src=&u_src_d=&shop=false&sa-user-id-v3=s%253AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCC0tIG8BjABOgT87-jmQgQ_QCZc.O3M9N%252FjNocxDAkJgoeKCY4eteFsk5sYBegvZtk1NJzo&sa-user-id-v2=s%253AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxx [TRUNCATED] Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://medicare.gohealth.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://medicare.gohealth.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id=s%3A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%2FL7%2F67hBh4a3iUq5VBv7eLYiyAmcJqNB%2B4cJQ; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v2=s%3AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%2Bwm4OfOz4n4F%2FPoM; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCC0tIG8BjABOgT87-jmQgQ_QCZc.O3M9N%2FjNocxDAkJgoeKCY4eteFsk5sYBegvZtk1NJzo; sa-user-id-v3=s%3AAQAKIP_2LDQAqcT0YYWD_ZCWbk5bESIjkVfKpXa_1qH6cSBNEHwYBCC0tIG8BjABOgT87-jmQgQ_QCZc.O3M9N%2FjNocxDAkJgoeKCY4eteFsk5sYBegvZtk1NJzo
2025-01-09 23:22:30 UTC	305	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:30 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 141 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://medicare.gohealth.com
2025-01-09 23:22:30 UTC	141	IN	Data Raw: 7b 22 63 6f 6e 76 65 72 73 69 6f 6e 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 72 65 74 61 72 67 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 5b 22 4f 4c 34 65 77 7a 42 4b 63 51 36 47 47 35 74 45 46 6f 51 6f 4b 61 22 2c 22 71 67 4d 50 65 62 4f 34 6a 6e 69 4d 68 59 51 75 31 37 58 4e 66 67 22 5d 2c 22 6c 6f 6f 6b 61 6c 69 6b 65 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 7d Data Ascii: {"conversion_tracker_uids":null,"retargeting_tracker_uids":["OL4ewzBKcQ6GG5tEFoQoKa","qgMPebO4jniMhYQu17XNfg"],"lookalike_tracker_uids":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.10	50183	35.71.185.236	443	6212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-09 23:22:30 UTC	1673	OUT	GET /medicare?link_id=18767&irclickid=RFq2geQ7sxyKW-gX4FUVr1MvUks0BqzgU257TY0&sharedid=&irpid=0&irgwc=1 HTTP/1.1 Host: medicare.gohealth.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: form_url=%2Fmedicare-marketplace; gh-session-id=fc99a7c8-08f9-4875-be9f-f97a9821de17; _gcl_gs=2.1.k5$i1736464937$u41793726; _gcl_au=1.1.1804017665.1736464944; optimizelyEndUserId=oeu1736464944079r0.8329921030541232; optimizelySession=1736464944099; _gcl_aw=GCL.1736464946.EAIaIQobChMIoszF-ePpigMVBhiiAx2_kChZEAAYASAAEgL8jvD_BwE; _ga=GA1.1.1197952561.1736464946; _ga_G99G7L25WL=GS1.1.1736464945.1.0.1736464945.60.0.0; IR_gbd=gohealth.com; IR_21320=1736464946314%7Cc-42778%7C1736464946314%7C%7C; _uetsid=96720a30cee011ef9fd7a32c31084dbc; _uetvid=967229b0cee011efae4b7b3fd2cccb6c; IR_PI=97672532-cee0-11ef-af94-ef1d83635a26%7C1736464946314; _li_dcdm_c=.gohealth.com; _lc2_fpi=268be191801d--01jh6p0nx115ahtaqq7ymqjjak; sa-r-source=syndicatedsearch.goog; sa-r-date=2025-01-09T23:22:27.616Z; sa-user-id=s%253A0-96b851f9-7bb6-567e-717a-e943de1df0ac.Um1A5m%252FL7%252F67hBh4a3iUq5VBv7eLYiyAmcJqNB%252B4cJQ; sa-user-id-v2=s%253AlrhR-Xu2Vn5xeulD3h3wrAgue70.5hBMxxlB6JGC5ipPro58wzgcM0z%252Bwm4OfOz4n4F%252FPoM; sa-user-id-v3=s% [TRUNCATED]
2025-01-09 23:22:30 UTC	1224	IN	HTTP/1.1 200 OK Date: Thu, 09 Jan 2025 23:22:30 GMT Content-Type: text/html; charset=utf-8 Content-Length: 62801 Connection: close Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://.optimizely.com https://optimizely.s3.amazonaws.com https://cdn-assets-prod.s3.amazonaws.com https: ; style-src 'self' 'unsafe-inline' https: ; object-src 'none'; worker-src data:; connect-src 'self' https: wss://.hotjar.com https://.optimizely.com ; img-src 'self' https: http: data: https://.optimizely.com; font-src 'self' https://fonts.googleapis.com https://fonts.gstatic.com https://.typekit.net; frame-src 'self' https://.googletagmanager.com https://.hotjar.com https://.snapchat.com https://.google.com https://.mediaalpha.com https://.optimizely.com https://.taboola.com https://.doubleclick.net; frame-ancestors 'self' https://.optimizely.com Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Frame-Options: sameorigin X-Download-Options: noopen X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate ETag: "k86btnyh5k1cg9" Vary: Accept-Encoding
2025-01-09 23:22:30 UTC	15160	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 61 74 61 2d 61 70 70 2d 6e 61 6d 65 3d 22 63 6d 2d 6d 65 64 69 63 61 72 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6e 65 78 74 2d 68 65 61 64 2d 63 6f 75 6e 74 22 20 63 6f 6e 74 65 6e 74 3d 22 32 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 64 61 74 61 2d 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 75 73 65 2e 74 79 70 65 6b 69 74 2e 6e 65 74 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 Data Ascii: <!DOCTYPE html><html lang="en" data-app-name="cm-medicare"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><meta name="next-head-count" content="2"/><link rel="preconnect" data-href="https://use.typekit.net"/><link rel="pr
2025-01-09 23:22:30 UTC	16356	IN	Data Raw: 76 61 72 20 6e 3d 72 28 38 33 36 29 2c 69 3d 72 28 36 30 37 29 3b 63 6f 6e 73 74 20 6f 3d 22 6e 72 40 6f 72 69 67 69 6e 61 6c 3a 22 2e 63 6f 6e 63 61 74 28 69 2e 57 29 3b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 73 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 7c 7c 28 65 3d 6e 2e 65 65 29 2c 72 2e 69 6e 50 6c 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 2c 6f 29 7b 6e 7c 7c 28 6e 3d 22 22 29 3b 63 6f 6e 73 74 20 61 3d 22 2d 22 3d 3d 3d 6e 2e 63 68 61 72 41 74 28 30 29 3b 66 6f 72 28 6c 65 74 20 73 3d 30 3b 73 3c 74 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 63 6f 6e 73 74 20 63 3d 74 5b 73 5d 2c 75 3d 65 5b 63 5d 3b 6c 28 75 29 7c 7c Data Ascii: var n=r(836),i=r(607);const o="nr@original:".concat(i.W);var a=Object.prototype.hasOwnProperty,s=!1;function c(e,t){return e\|\|(e=n.ee),r.inPlace=function(e,t,n,i,o){n\|\|(n="");const a="-"===n.charAt(0);for(let s=0;s<t.length;s++){const c=t[s],u=e[c];l(u)\|\|
2025-01-09 23:22:30 UTC	16384	IN	Data Raw: 2f 37 37 33 39 38 30 31 36 34 30 63 65 64 30 36 61 2e 63 73 73 22 20 61 73 3d 22 73 74 79 6c 65 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 63 73 73 2f 37 37 33 39 38 30 31 36 34 30 63 65 64 30 36 61 2e 63 73 73 22 20 64 61 74 61 2d 6e 2d 70 3d 22 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 63 73 73 2f 63 32 30 30 32 39 35 66 33 38 36 65 64 62 64 63 2e 63 73 73 22 20 61 73 3d 22 73 74 79 6c 65 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 63 73 73 2f 63 32 30 30 32 39 35 66 33 38 36 65 64 Data Ascii: /7739801640ced06a.css" as="style"/><link rel="stylesheet" href="/_next/static/css/7739801640ced06a.css" data-n-p=""/><link rel="preload" href="/_next/static/css/c200295f386edbdc.css" as="style"/><link rel="stylesheet" href="/_next/static/css/c200295f386ed
2025-01-09 23:22:30 UTC	14901	IN	Data Raw: 33 63 70 5c 75 30 30 33 65 5c 75 30 30 33 63 73 74 72 6f 6e 67 5c 75 30 30 33 65 42 79 20 63 6c 69 63 6b 69 6e 67 20 74 68 65 20 62 75 74 74 6f 6e 2c 20 79 6f 75 20 63 6f 6e 73 65 6e 74 20 74 6f 20 62 65 20 63 6f 6e 74 61 63 74 65 64 20 62 79 20 61 20 6c 69 63 65 6e 73 65 64 20 69 6e 73 75 72 61 6e 63 65 20 61 67 65 6e 74 20 61 74 20 47 6f 48 65 61 6c 74 68 20 6f 72 20 47 6f 48 65 61 6c 74 68 20 73 65 72 76 69 63 65 73 20 61 62 6f 75 74 20 4d 65 64 69 63 61 72 65 20 41 64 76 61 6e 74 61 67 65 2c 20 4d 65 64 69 63 61 72 65 20 53 75 70 70 6c 65 6d 65 6e 74 20 49 6e 73 75 72 61 6e 63 65 20 50 6c 61 6e 73 2c 20 53 74 61 6e 64 2d 41 6c 6f 6e 65 20 50 72 65 73 63 72 69 70 74 69 6f 6e 20 44 72 75 67 20 70 6c 61 6e 73 5c 75 30 30 33 63 2f 73 74 72 6f 6e 67 5c 75 Data Ascii: 3cp\u003e\u003cstrong\u003eBy clicking the button, you consent to be contacted by a licensed insurance agent at GoHealth or GoHealth services about Medicare Advantage, Medicare Supplement Insurance Plans, Stand-Alone Prescription Drug plans\u003c/strong\u

Target ID:	0
Start time:	18:21:36
Start date:	09/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	18:21:40
Start date:	09/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 --field-trial-handle=1912,i,3466874189630771730,1920044593678216292,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	18:21:47
Start date:	09/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://api.myuhchvision.com/"
Imagebase:	0x7ff6c5c30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://api.myuhchvision.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Windows Analysis Report
http://api.myuhchvision.com/