Edit tour

Windows Analysis Report
https://androiddatahost.com/sdsd3

Overview

General Information

Sample URL:	https://androiddatahost.com/sdsd3
Analysis ID:	1591543
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Suricata IDS alerts for network traffic

Downloads suspicious files via Chrome

Creates a process in suspended mode (likely to inject code)

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTML page contains hidden javascript code

May sleep (evasive loops) to hinder dynamic analysis

Queries the volume information (name, serial number etc) of a device

Sample execution stops while process was sleeping (likely an evasion)

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6304 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6992 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1972,i,11324115554718533007,5483598246334832712,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6680 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://androiddatahost.com/sdsd3" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

rundll32.exe (PID: 7972 cmdline: C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding MD5: EF3179D498793BF4234F708D3BE28633)

PhoenixSuit.exe (PID: 7520 cmdline: "C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe" MD5: D1412352B9617DBAE75253250F2EE093)

PhoenixSuit.exe (PID: 7964 cmdline: "C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe" MD5: D1412352B9617DBAE75253250F2EE093)

PhoenixDaemon.exe (PID: 1132 cmdline: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe start-server MD5: 877B85B87727D1B30C78F7EAA92E59DB)

conhost.exe (PID: 7304 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

PhoenixDaemon.exe (PID: 7608 cmdline: adb fork-server server MD5: 877B85B87727D1B30C78F7EAA92E59DB)

adb.exe (PID: 7920 cmdline: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\adb.exe devices MD5: 877B85B87727D1B30C78F7EAA92E59DB)

conhost.exe (PID: 7988 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

UpdateVerEx.exe (PID: 1164 cmdline: "C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe" MD5: 6E1F3FD25CFD0145AD1D2DEC2A138B01)

PhoenixDaemon.exe (PID: 724 cmdline: "C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe" MD5: 877B85B87727D1B30C78F7EAA92E59DB)

conhost.exe (PID: 4960 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

PhoenixInstall.exe (PID: 3132 cmdline: "C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixInstall.exe" MD5: 5D65986B8BE9EC7F1562AC5F811694DA)

cleanup

Suricata Signatures

ET MALWARE Suspicious User Agent Detected (RookIE) - Common with Downloaders

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-15T03:51:08.557364+0100	2003635	1	A Network Trojan was detected	192.168.2.16	50043	61.143.38.50	80	TCP

ETPRO MALWARE Common Downloader Header Pattern UH

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-15T03:51:08.557364+0100	2803274	2	Potentially Bad Traffic	192.168.2.16	50043	61.143.38.50	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Source: https://androiddatahost.com/sdsd3

HTTP Parser: Base64 decoded: <?xml version="1.0" encoding="utf-8"?><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 1637.5 548.4" style="enable-background:new 0 0 1637.5 548.4;" xml:space...

Source: https://androiddatahost.com/sdsd3	HTTP Parser: No favicon
Source: https://androiddatahost.com/sdsd3	HTTP Parser: No favicon
Source: https://androiddatahost.com/sdsd3	HTTP Parser: No favicon
Source: https://androiddatahost.com/sdsd3	HTTP Parser: No favicon
Source: https://androiddatahost.com/sdsd3	HTTP Parser: No favicon
Source: https://androiddatahost.com/sdsd3	HTTP Parser: No favicon
Source: https://androiddatahost.com/sdsd3#google_vignette	HTTP Parser: No favicon
Source: https://androiddatahost.com/sdsd3#google_vignette	HTTP Parser: No favicon
Source: https://androiddatahost.com/sdsd3#google_vignette	HTTP Parser: No favicon
Source: https://androiddatahost.com/sdsd3#google_vignette	HTTP Parser: No favicon
Source: https://androiddatahost.com/sdsd3#google_vignette	HTTP Parser: No favicon
Source: https://androiddatahost.com/sdsd3#google_vignette	HTTP Parser: No favicon
Source: https://androiddatahost.com/sdsd3#google_vignette	HTTP Parser: No favicon
Source: https://androiddatahost.com/sdsd3#google_vignette	HTTP Parser: No favicon
Source: https://androiddatahost.com/sdsd3#google_vignette	HTTP Parser: No favicon
Source: https://androiddatahost.com/sdsd3#google_vignette	HTTP Parser: No favicon

Source:	Binary string: d:\winners\eStudio\eTool300\StudioAssist\UpdateVer\UpdateVer\Release\UpdateVer.pdb source: UpdateVerEx.exe, 00000019.00000000.2052050617.00000000006BA000.00000002.00000001.01000000.0000001D.sdmp
Source:	Binary string: c:\code\android\donut\development\host\windows\usb\winusb\objfre_wxp_x86\i386\AdbWinUsbApi.pdb source: PhoenixDaemon.exe, 00000011.00000002.1700222100.0000000073D51000.00000020.00000001.01000000.0000001B.sdmp
Source:	Binary string: c:\code\android\donut\development\host\windows\usb\api\objfre_wxp_x86\i386\AdbWinApi.pdb(P source: PhoenixDaemon.exe, 00000011.00000002.1700636960.0000000073DE1000.00000020.00000001.01000000.00000019.sdmp
Source:	Binary string: c:\code\android\donut\development\host\windows\usb\api\objfre_wxp_x86\i386\AdbWinApi.pdb source: PhoenixDaemon.exe, 00000011.00000002.1700636960.0000000073DE1000.00000020.00000001.01000000.00000019.sdmp

Networking

Suricata IDS alerts for network traffic

Source: Network traffic

Suricata IDS: 2003635 - Severity 1 - ET MALWARE Suspicious User Agent Detected (RookIE) - Common with Downloaders : 192.168.2.16:50043 -> 61.143.38.50:80

Source: Network traffic

Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.16:50043 -> 61.143.38.50:80

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.77.188
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.77.188
Source: unknown	TCP traffic detected without corresponding DNS query: 61.143.38.50
Source: unknown	TCP traffic detected without corresponding DNS query: 61.143.38.50
Source: unknown	TCP traffic detected without corresponding DNS query: 61.143.38.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.20
Source: unknown	TCP traffic detected without corresponding DNS query: 61.143.38.50
Source: unknown	TCP traffic detected without corresponding DNS query: 61.143.38.50
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /sdsd3 HTTP/1.1Host: androiddatahost.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-rocket/assets/js/wpr-beacon.min.js HTTP/1.1Host: androiddatahost.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://androiddatahost.com/sdsd3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-rocket/assets/js/wpr-beacon.min.js HTTP/1.1Host: androiddatahost.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/html/r20250113/r20190131/zrt_lookup_fy2021.html HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://androiddatahost.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-2840258101411863&output=html&adk=1812271804&adf=3025194257&abgtt=6&lmt=1736881262&plat=9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&plas=174x816_l%7C193x816_r&format=0x0&url=https%3A%2F%2Fandroiddatahost.com%2Fsdsd3&pra=5&wgl=1&aihb=0&aiof=3&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~3~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aicel=33~38&aifxl=29_18~30_19&aiixl=29_5~30_6&aiict=1&aiapm=0.2&aiapmi=0.33938&aief=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736909361571&bpp=4&bdt=1272&idt=1483&shv=r20250113&mjsv=m202501080201&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=8040805227545&frm=20&pv=2&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533203%2C31089542%2C31089715%2C95350245%2C31089639&oid=2&pvsid=539208937878820&tmod=1359503699&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=1550 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://androiddatahost.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-2840258101411863&output=html&h=280&slotname=2448584244&adk=39937659&adf=2782902954&pi=t.ma~as.2448584244&w=856&abgtt=6&fwrn=4&fwrnh=100&lmt=1736881262&rafmt=1&format=856x280&url=https%3A%2F%2Fandroiddatahost.com%2Fsdsd3&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736909361575&bpp=2&bdt=1276&idt=1551&shv=r20250113&mjsv=m202501080201&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=1&correlator=8040805227545&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=204&ady=186&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533203%2C31089542%2C31089715%2C95350245%2C31089639&oid=2&pvsid=539208937878820&tmod=1359503699&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CoeE%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&fsb=1&dtd=1556 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://androiddatahost.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-2840258101411863&output=html&h=280&slotname=8499285160&adk=978467678&adf=2230146881&pi=t.ma~as.8499285160&w=336&abgtt=6&lmt=1736881262&format=336x280&url=https%3A%2F%2Fandroiddatahost.com%2Fsdsd3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736909361577&bpp=1&bdt=1278&idt=1558&shv=r20250113&mjsv=m202501080201&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C856x280&nras=1&correlator=8040805227545&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=464&ady=639&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533203%2C31089542%2C31089715%2C95350245%2C31089639&oid=2&pvsid=539208937878820&tmod=1359503699&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CoeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=1564 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://androiddatahost.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-2840258101411863&output=html&h=280&slotname=1589304026&adk=2488830594&adf=2972800098&pi=t.ma~as.1589304026&w=856&abgtt=6&fwrn=4&fwrnh=100&lmt=1736881262&rafmt=1&format=856x280&url=https%3A%2F%2Fandroiddatahost.com%2Fsdsd3&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736909361577&bpp=1&bdt=1279&idt=1568&shv=r20250113&mjsv=m202501080201&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C856x280%2C336x280&nras=1&correlator=8040805227545&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=204&ady=1649&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533203%2C31089542%2C31089715%2C95350245%2C31089639&oid=2&pvsid=539208937878820&tmod=1359503699&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CoeEbr%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=1&fsb=1&dtd=1571 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://androiddatahost.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-2840258101411863&output=html&h=280&slotname=8499285160&adk=3371522416&adf=601265536&pi=t.ma~as.8499285160&w=336&abgtt=6&lmt=1736881262&format=336x280&url=https%3A%2F%2Fandroiddatahost.com%2Fsdsd3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736909361578&bpp=1&bdt=1279&idt=1576&shv=r20250113&mjsv=m202501080201&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C856x280%2C336x280%2C856x280&nras=1&correlator=8040805227545&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=464&ady=2039&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533203%2C31089542%2C31089715%2C95350245%2C31089639&oid=2&pvsid=539208937878820&tmod=1359503699&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CoeEbr%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=2&fsb=1&dtd=1579 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://androiddatahost.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /site.webmanifest HTTP/1.1Host: androiddatahost.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://androiddatahost.com/sdsd3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=Ce9lBNCKHZ4WqI-Gpx_APx5j5gAe9qs_Ndemi3NbEEsCNtwEQASAAYMmWy4vEpPwPggEXY2EtcHViLTI4NDAyNTgxMDE0MTE4NjPIAQmoAwHIAwKqBNcBT9DoNuiUZHUdweH8KgQzKbK61CX76_bOcrmrgzhaUeHoMTasQ-dMvmCj4l3HctP9sLbGPKzpHu3yRlkNcUSt0vEJsN7c2HP5dJPXWqLeVcTqW5Z6SMmymcwllFNe6Yk344XLgVxvr1U4BCfTYIwiAHCU_JDF5FIbOSHrswXCwvyFYSgN2CsX3DjE8l0n3sUW6UI1_NjZLmFoqVCf6SynkgviT9opKtGpiuVavOqoSC409gL9Le82gZ2X2VfqGhyZ_K8Id_ZssE8RI0OlR2gNYK6UXVE_x0KABpqs7Zf5__P85QGgBiGoB6a-G6gHltgbqAeqm7ECqAf_nrECqAffn7ECqAetvrEC2AcA0ggkCIBhEAEyAooCOguAQIDAgICAoKiAAki9_cE6WJHwus3b9ooDgAoB-gsCCAGADAHQFQGAFwGyFxwKGBIUcHViLTI4NDAyNTgxMDE0MTE4NjMYABgM&sigh=FTSn9xkY3C0&uach_m=%5BUACH%5D&cid=CAQSTwCa7L7daosxhDwEOP4OczbnRoWulX9WY3LBBNUBPpuH-RcSRc9uPCkjRcNGA89EaJkyxS51uvMT8aKC0oftGN15oHJIW8u0Cgw8nGcsrO4YAQ HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2840258101411863&output=html&h=280&slotname=1589304026&adk=2488830594&adf=2972800098&pi=t.ma~as.1589304026&w=856&abgtt=6&fwrn=4&fwrnh=100&lmt=1736881262&rafmt=1&format=856x280&url=https%3A%2F%2Fandroiddatahost.com%2Fsdsd3&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736909361577&bpp=1&bdt=1279&idt=1568&shv=r20250113&mjsv=m202501080201&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C856x280%2C336x280&nras=1&correlator=8040805227545&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=204&ady=1649&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533203%2C31089542%2C31089715%2C95350245%2C31089639&oid=2&pvsid=539208937878820&tmod=1359503699&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CoeEbr%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=1&fsb=1&dtd=1571Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CFPDfNCKHZ-i4JLy_x_APlLjtoAK9qs_Ndemi3NbEEsCNtwEQASAAYMmWy4vEpPwPggEXY2EtcHViLTI4NDAyNTgxMDE0MTE4NjPIAQmoAwHIAwKqBNcBT9BzfWUBQRlZbMayk2xZ2PsMoHrGWEmT1JkE9g69N58ArmaiqK2HlITxYx7QgNaJQx2wt1seuKcef_1A3pVOCzbA2hg05tiqpL2UTn5Js2nFcjUF7agZl9I4McETJ_LDzxOHIQ6obx2dC18QTx-oOsnzsWLtjor1k3MCbopsxUwK6E3xvkhy0BOUVEdXWYCW6p8Bosf5kTkoIvksQbcbnOsbPixXguIfSkCBLoLK64KVQu8fmfJ87fGq-kRLc3ZrI-AU6WXKHGzvUQL9bAt1C-9k_cDfNIKABpqs7Zf5__P85QGgBiGoB6a-G6gHltgbqAeqm7ECqAf_nrECqAffn7ECqAetvrEC2AcA0ggkCIBhEAEyAooCOguAQIDAgICAoKiAAki9_cE6WML9u83b9ooDgAoB-gsCCAGADAHQFQGAFwGyFxwKGBIUcHViLTI4NDAyNTgxMDE0MTE4NjMYABgM&sigh=FlZf2KQFH94&uach_m=%5BUACH%5D&cid=CAQSTwCa7L7dxapE7wWzQROX7OOdYEdVIW8XMOL9DoWpVWPr2dO-vtXKbAsg1HfWIeXPZLtNxQU5eaRT4TdCClwz9xInoMoQqpE_1rGtrVH-buMYAQ HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2840258101411863&output=html&h=280&slotname=8499285160&adk=3371522416&adf=601265536&pi=t.ma~as.8499285160&w=336&abgtt=6&lmt=1736881262&format=336x280&url=https%3A%2F%2Fandroiddatahost.com%2Fsdsd3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736909361578&bpp=1&bdt=1279&idt=1576&shv=r20250113&mjsv=m202501080201&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C856x280%2C336x280%2C856x280&nras=1&correlator=8040805227545&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=464&ady=2039&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533203%2C31089542%2C31089715%2C95350245%2C31089639&oid=2&pvsid=539208937878820&tmod=1359503699&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CoeEbr%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=2&fsb=1&dtd=1579Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CPe1WNCKHZ_-kItemx_APw-iu2A69qs_Ndemi3NbEEsCNtwEQASAAYMmWy4vEpPwPggEXY2EtcHViLTI4NDAyNTgxMDE0MTE4NjPIAQmoAwHIAwKqBNEBT9B-WcbwooRGWVBhVESMskTAZ4pSSHzVQHbRNgko04tKFckoRrXfdTEo_5R_P_uGjxj380ahW2rxN0sHn2Fppx2sKFokGLWoJIp8kiyhEC6FetALp1PNlsKJhouvL5msZdu-6m1XxPnx--z_dmxY1LTeR8IR4GGgaKiwPiIo6WLtCq8DvlNkwziyeopKxnxMzXx_gt-URuwxOi5GdaOyI_hEatGdMEC_1cgIUxOX6gQ22RhJXwi5wMmRKNmb7abpKs0yhzKEwZSPGNioKw2jJQKABpqs7Zf5__P85QGgBiGoB6a-G6gHltgbqAeqm7ECqAf_nrECqAffn7ECqAetvrEC2AcA0ggkCIBhEAEyAooCOguAQIDAgICAoKiAAki9_cE6WPTsuc3b9ooDgAoB-gsCCAGADAHQFQGAFwGyFxwKGBIUcHViLTI4NDAyNTgxMDE0MTE4NjMYABgM&sigh=ZWtW9IDO94M&uach_m=%5BUACH%5D&cid=CAQSTgCa7L7dSW0PiL7yYolxCVmMh06nEePYuqlSGMyaFdKSydCCRqasFRLX5D9-116-aNp-Ok7p-nC8ltNex0RnoQWWsZPWW_eRUZ_MgV3y-xgB HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2840258101411863&output=html&h=280&slotname=8499285160&adk=978467678&adf=2230146881&pi=t.ma~as.8499285160&w=336&abgtt=6&lmt=1736881262&format=336x280&url=https%3A%2F%2Fandroiddatahost.com%2Fsdsd3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736909361577&bpp=1&bdt=1278&idt=1558&shv=r20250113&mjsv=m202501080201&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C856x280&nras=1&correlator=8040805227545&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=464&ady=639&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533203%2C31089542%2C31089715%2C95350245%2C31089639&oid=2&pvsid=539208937878820&tmod=1359503699&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CoeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=1564Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=Cwd0LNCKHZ5_jIeSWx_APrMukUL2qz8116aLc1sQSwI23ARABIABgyZbLi8Sk_A-CARdjYS1wdWItMjg0MDI1ODEwMTQxMTg2M8gBCagDAcgDAqoE0QFP0LGg-Vd9KdxqQwYVXv7dV62k_Pw1C4rVBIxi-Gr980ewd8A-QP-4HR74RN2Ctt2wVPkLDrStbuVy7KKdTI_QWNPCnMs6pq8uuFHHZBIWhkzgX9p8dPIkAQCRwrZMqH0ODXz7chHlRHTkDIOeQ0fTLqO0q0k_r_Z7Ci7Vy8we5i4bjuuwwoQZATlBVhB77wG8f40sHfR0JqVw_6gn8s8w6BzoPM8gjWpb8thcwhvc9SNfBVgixoasLNqEOeGLyj6jVRJyzGQtaIZHG1haIZIq_YAGmqztl_n_8_zlAaAGIagHpr4bqAeW2BuoB6qbsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCQIgGEQATICigI6C4BAgMCAgICgqIACSL39wTpY_Km5zdv2igOACgH6CwIIAYAMAdAVAYAXAbIXHAoYEhRwdWItMjg0MDI1ODEwMTQxMTg2MxgAGAw&sigh=Bmj6HpcG_Ks&uach_m=%5BUACH%5D&cid=CAQSTwCa7L7dNpLe2c8cdaZnoUlDXDHcDxMKdHfYZXlAeMpZaaysjIM4ZzleToZlSH8kBGPhOJeiSY3ngjUptty6rJWoFu4OIPo-JARlZdt6D-AYAQ HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2840258101411863&output=html&h=280&slotname=2448584244&adk=39937659&adf=2782902954&pi=t.ma~as.2448584244&w=856&abgtt=6&fwrn=4&fwrnh=100&lmt=1736881262&rafmt=1&format=856x280&url=https%3A%2F%2Fandroiddatahost.com%2Fsdsd3&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736909361575&bpp=2&bdt=1276&idt=1551&shv=r20250113&mjsv=m202501080201&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=1&correlator=8040805227545&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=204&ady=186&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533203%2C31089542%2C31089715%2C95350245%2C31089639&oid=2&pvsid=539208937878820&tmod=1359503699&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CoeE%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&fsb=1&dtd=1556Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /ng-assets/creative/assets/polyfills-a3f452c3.js HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://googleads.g.doubleclick.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtimp?a=imp&cr=ext_download_prot_smrtsp&d=androiddatahost.com&gid=&im=WvqEWoub5i7-wbFq6SzlnF9uEQ6-DRvG4th9BOzKDOXmRNHtLMqI8kI53Z0ViZ8r_52kOqtFAIbK-7HqzahBdWbt4T0elE4Hsd_a2y7MgSAiHTmiImHD3pSXu5MOhUuxBE-RqPnKDqDUkf8jHa5t_x92d59EQIjgSDUm_W4POLV07Q-9CZ_IQXj8Bp87ChlsADIHCAhvgCZWQLsS_6cU6pLf0QamUAcXq869S2ZCRcQ-nPp8Y8Hx9WOBweupX6rsR4kij69CkBTzczNgD68KrydLsmLNk6mwzd3M7lpIGsvbgLHZROb3bSQix0iN79BCOHKdDjp3k1Zg3XOc0tiN74JM6M-WdxX1zuD9Kj8oTMPFzs49CGykzdU80FMi_Qs3UQPmrIXXBGxx3SwIppw2PA&p=Z4ciNAAI1QUIEdThAB5MR83lxaWzSatV77M14g&sid=546ad295-d2eb-11ef-959f-d6c599cbf4fc HTTP/1.1Host: g.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtimp?a=imp&cr=ext_download_prot_smrtsp&d=androiddatahost.com&gid=&im=Pacs0y_h8AoSpSdmuFfjA2-Jh85D8lauvwtIHB_1GiprXZB5z-_E3J1H5hUXQDZEsvVW7JVWUdGMa_U0C5_tkb4mP1ZlEnp9SQCOUT9ZGqvUPKVQlnmpO-een_K5kYXADLIbU7cZM4adhhdJ64sqRb0XuCC1NIhymkr9Rdf6tXrmlHUvVik_ArV3ViEcLerL2da9b1cfNz3_0XekAPi53bNl_N0IIvDnrrUavtgn0hCj0v3n5UVbx3vj68zJh5EwhSyMCcqSgdvmBMtFnMUY0fIc3kCwuYNWcv9gb37hXO2aW-4ok0VCS57r6DU_Rp5Cr-rj3hrIb1i1cgEBLvfU7WGsD1UHx0L5uBiNGZ2yMVsuwdLN2VS93UYZKceGIhWo5t2oNt_gGhoxejNAlTmutQ&p=Z4ciNAAJHGgIEd-8ABtcFJi2RsjNQuKdC0LPiQ&sid=546da6d0-d2eb-11ef-ad61-06f8d311b573 HTTP/1.1Host: g.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ng-assets/creative/assets/index-127e2d55.css HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtimp?a=imp&cr=ext_download_prot_smrtsp&d=androiddatahost.com&gid=&im=qDSwbOIr0D22sbu8qzOWzzsgTAyjXaYD0Wjekk-CBtqkqW2Giw8aaBY9H03jsjUd--RPJIQCc8isfXRoLz_JxXvWOsgFLQ0LXQCV_vRO7WZso6I-8X5nh-iPSXKXhlSitp-6I3vA0zWdpJtuEiSGRrUctJZaV7UE5ikGD2wk5NsDkmfe7LpIf9AMxB5x2ZUweOrir-bu-a3rsExFJzVnbf5fhQeei_SdD-FHZGzKvArczRnV44Yv9tLz80gy1aR-GZE2cRmIEW-HaNIcITlS40JDTcYNzulopQueEojNVc9cKUgiOvbjBagX0YVWcjCVxnLXYplgeAgGA8zT1qOiHoyY_vKGQOPnfCST-N1GlBWQMxxI8wxrHXg6kgSfDts7oessD_HNRJEmspPirMn3sw&p=Z4ciNAAIkn8IEdNXAAu0Q6gnw-wgAu8T7McH4w&sid=546ef294-d2eb-11ef-94e6-12087e0c0b48 HTTP/1.1Host: g.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtimp?a=imp&cr=ext_download_prot_smrtsp&d=androiddatahost.com&gid=&im=IjHuoKH9nmywyVTiGioDNCAuLUDL12hOuGl7bgdSfVyyVYBTz7Zsr7uuTl8TJIk5dWf81UH-AsKoN3EadDwjUBJQuQQlVyA963QpKBLhZSvMIbHPvJlfiVhzqVlZKwqSew6ekPvMJQivc9sVYYFqAv999a3EJ_hMi7vf7H_2ZGtihHOTvM6iqjMxqmJD3Q8Seu9mRdQ1GLakJW_Pj4XXdwzV5SezfbVTEvG0p-7i6Sc2AI8XNTkJMEsw2f9vhGucJwsBt9wx-rXfqKI6RUW5LPjCc9zy15g9MVC09kM3Iuwfi6vTIytAZgtIUykHXKylA3w3k2pnPUspiV_ZsBroYyDkOWAaHeeLepaoKhBX4c1zj-q9IHbhhARl1DuhJqnQN6FcAcEdSd5az2KddOvO2mdZRN2LwYifC0OPtebWzdSWf9-50JeiZHpbeeiGCfeO&p=Z4ciNAAIcZ8IEctkAAklrGRc4Ee14pU5y6FM0w&sid=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf HTTP/1.1Host: g.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ng-assets/creative/assets/index-5333d910.js HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://googleads.g.doubleclick.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=Ce9lBNCKHZ4WqI-Gpx_APx5j5gAe9qs_Ndemi3NbEEsCNtwEQASAAYMmWy4vEpPwPggEXY2EtcHViLTI4NDAyNTgxMDE0MTE4NjPIAQmoAwHIAwKqBNcBT9DoNuiUZHUdweH8KgQzKbK61CX76_bOcrmrgzhaUeHoMTasQ-dMvmCj4l3HctP9sLbGPKzpHu3yRlkNcUSt0vEJsN7c2HP5dJPXWqLeVcTqW5Z6SMmymcwllFNe6Yk344XLgVxvr1U4BCfTYIwiAHCU_JDF5FIbOSHrswXCwvyFYSgN2CsX3DjE8l0n3sUW6UI1_NjZLmFoqVCf6SynkgviT9opKtGpiuVavOqoSC409gL9Le82gZ2X2VfqGhyZ_K8Id_ZssE8RI0OlR2gNYK6UXVE_x0KABpqs7Zf5__P85QGgBiGoB6a-G6gHltgbqAeqm7ECqAf_nrECqAffn7ECqAetvrEC2AcA0ggkCIBhEAEyAooCOguAQIDAgICAoKiAAki9_cE6WJHwus3b9ooDgAoB-gsCCAGADAHQFQGAFwGyFxwKGBIUcHViLTI4NDAyNTgxMDE0MTE4NjMYABgM&sigh=FTSn9xkY3C0&uach_m=%5BUACH%5D&cid=CAQSTwCa7L7daosxhDwEOP4OczbnRoWulX9WY3LBBNUBPpuH-RcSRc9uPCkjRcNGA89EaJkyxS51uvMT8aKC0oftGN15oHJIW8u0Cgw8nGcsrO4YAQ HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnbU-NmvTifVqwq0yZ1fP3SkHVxKWHpOMVBxEF-Ito7T4QgjYCvyETlmVSybNY
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CFPDfNCKHZ-i4JLy_x_APlLjtoAK9qs_Ndemi3NbEEsCNtwEQASAAYMmWy4vEpPwPggEXY2EtcHViLTI4NDAyNTgxMDE0MTE4NjPIAQmoAwHIAwKqBNcBT9BzfWUBQRlZbMayk2xZ2PsMoHrGWEmT1JkE9g69N58ArmaiqK2HlITxYx7QgNaJQx2wt1seuKcef_1A3pVOCzbA2hg05tiqpL2UTn5Js2nFcjUF7agZl9I4McETJ_LDzxOHIQ6obx2dC18QTx-oOsnzsWLtjor1k3MCbopsxUwK6E3xvkhy0BOUVEdXWYCW6p8Bosf5kTkoIvksQbcbnOsbPixXguIfSkCBLoLK64KVQu8fmfJ87fGq-kRLc3ZrI-AU6WXKHGzvUQL9bAt1C-9k_cDfNIKABpqs7Zf5__P85QGgBiGoB6a-G6gHltgbqAeqm7ECqAf_nrECqAffn7ECqAetvrEC2AcA0ggkCIBhEAEyAooCOguAQIDAgICAoKiAAki9_cE6WML9u83b9ooDgAoB-gsCCAGADAHQFQGAFwGyFxwKGBIUcHViLTI4NDAyNTgxMDE0MTE4NjMYABgM&sigh=FlZf2KQFH94&uach_m=%5BUACH%5D&cid=CAQSTwCa7L7dxapE7wWzQROX7OOdYEdVIW8XMOL9DoWpVWPr2dO-vtXKbAsg1HfWIeXPZLtNxQU5eaRT4TdCClwz9xInoMoQqpE_1rGtrVH-buMYAQ HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlabMD6ll5_3gm75ZQodyk7HUznoGWrniSqUeAMOIudeC0QBW3HBBQ3YUiDiBY
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CPe1WNCKHZ_-kItemx_APw-iu2A69qs_Ndemi3NbEEsCNtwEQASAAYMmWy4vEpPwPggEXY2EtcHViLTI4NDAyNTgxMDE0MTE4NjPIAQmoAwHIAwKqBNEBT9B-WcbwooRGWVBhVESMskTAZ4pSSHzVQHbRNgko04tKFckoRrXfdTEo_5R_P_uGjxj380ahW2rxN0sHn2Fppx2sKFokGLWoJIp8kiyhEC6FetALp1PNlsKJhouvL5msZdu-6m1XxPnx--z_dmxY1LTeR8IR4GGgaKiwPiIo6WLtCq8DvlNkwziyeopKxnxMzXx_gt-URuwxOi5GdaOyI_hEatGdMEC_1cgIUxOX6gQ22RhJXwi5wMmRKNmb7abpKs0yhzKEwZSPGNioKw2jJQKABpqs7Zf5__P85QGgBiGoB6a-G6gHltgbqAeqm7ECqAf_nrECqAffn7ECqAetvrEC2AcA0ggkCIBhEAEyAooCOguAQIDAgICAoKiAAki9_cE6WPTsuc3b9ooDgAoB-gsCCAGADAHQFQGAFwGyFxwKGBIUcHViLTI4NDAyNTgxMDE0MTE4NjMYABgM&sigh=ZWtW9IDO94M&uach_m=%5BUACH%5D&cid=CAQSTgCa7L7dSW0PiL7yYolxCVmMh06nEePYuqlSGMyaFdKSydCCRqasFRLX5D9-116-aNp-Ok7p-nC8ltNex0RnoQWWsZPWW_eRUZ_MgV3y-xgB HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmTi409006ZPLrw0Hm6PRqIc2Fosaqp9nOCjlIeAk-_T6iOJajn-jllN2l_jHU
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=Cwd0LNCKHZ5_jIeSWx_APrMukUL2qz8116aLc1sQSwI23ARABIABgyZbLi8Sk_A-CARdjYS1wdWItMjg0MDI1ODEwMTQxMTg2M8gBCagDAcgDAqoE0QFP0LGg-Vd9KdxqQwYVXv7dV62k_Pw1C4rVBIxi-Gr980ewd8A-QP-4HR74RN2Ctt2wVPkLDrStbuVy7KKdTI_QWNPCnMs6pq8uuFHHZBIWhkzgX9p8dPIkAQCRwrZMqH0ODXz7chHlRHTkDIOeQ0fTLqO0q0k_r_Z7Ci7Vy8we5i4bjuuwwoQZATlBVhB77wG8f40sHfR0JqVw_6gn8s8w6BzoPM8gjWpb8thcwhvc9SNfBVgixoasLNqEOeGLyj6jVRJyzGQtaIZHG1haIZIq_YAGmqztl_n_8_zlAaAGIagHpr4bqAeW2BuoB6qbsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCQIgGEQATICigI6C4BAgMCAgICgqIACSL39wTpY_Km5zdv2igOACgH6CwIIAYAMAdAVAYAXAbIXHAoYEhRwdWItMjg0MDI1ODEwMTQxMTg2MxgAGAw&sigh=Bmj6HpcG_Ks&uach_m=%5BUACH%5D&cid=CAQSTwCa7L7dNpLe2c8cdaZnoUlDXDHcDxMKdHfYZXlAeMpZaaysjIM4ZzleToZlSH8kBGPhOJeiSY3ngjUptty6rJWoFu4OIPo-JARlZdt6D-AYAQ HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm9YsVInCwq_kuLG4Eoy4GuHk43hyeVzgbbZa3d16vwPQ6hkEJ5gfvmZT0zHrk
Source: global traffic	HTTP traffic detected: GET /ng-assets/creative/assets/polyfills-a3f452c3.js HTTP/1.1Host: cdn.bidbrain.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sig.js?rpclid=546ad295-d2eb-11ef-959f-d6c599cbf4fc&params=WvqEWoub5i7-wbFq6SzlnF9uEQ6-DRvG4th9BOzKDOXmRNHtLMqI8kI53Z0ViZ8r_52kOqtFAIbK-7HqzahBdWbt4T0elE4Hsd_a2y7MgSAiHTmiImHD3pSXu5MOhUuxBE-RqPnKDqDUkf8jHa5t_x92d59EQIjgSDUm_W4POLV07Q-9CZ_IQXj8Bp87ChlsADIHCAhvgCZWQLsS_6cU6pLf0QamUAcXq869S2ZCRcQ-nPp8Y8Hx9WOBweupX6rsR4kij69CkBTzczNgD68KrydLsmLNk6mwzd3M7lpIGsvbgLHZROb3bSQix0iN79BCOHKdDjp3k1Zg3XOc0tiN74JM6M-WdxX1zuD9Kj8oTMPFzs49CGykzdU80FMi_Qs3UQPmrIXXBGxx3SwIppw2PA HTTP/1.1Host: serve.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=556f2fde-d2eb-11ef-a567-3210f5befaf0; sid_cross=546ef294-d2eb-11ef-94e6-12087e0c0b48
Source: global traffic	HTTP traffic detected: GET /sig.js?rpclid=546ef294-d2eb-11ef-94e6-12087e0c0b48&params=qDSwbOIr0D22sbu8qzOWzzsgTAyjXaYD0Wjekk-CBtqkqW2Giw8aaBY9H03jsjUd--RPJIQCc8isfXRoLz_JxXvWOsgFLQ0LXQCV_vRO7WZso6I-8X5nh-iPSXKXhlSitp-6I3vA0zWdpJtuEiSGRrUctJZaV7UE5ikGD2wk5NsDkmfe7LpIf9AMxB5x2ZUweOrir-bu-a3rsExFJzVnbf5fhQeei_SdD-FHZGzKvArczRnV44Yv9tLz80gy1aR-GZE2cRmIEW-HaNIcITlS40JDTcYNzulopQueEojNVc9cKUgiOvbjBagX0YVWcjCVxnLXYplgeAgGA8zT1qOiHoyY_vKGQOPnfCST-N1GlBWQMxxI8wxrHXg6kgSfDts7oessD_HNRJEmspPirMn3sw HTTP/1.1Host: serve.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=556f2fde-d2eb-11ef-a567-3210f5befaf0; sid_cross=546ef294-d2eb-11ef-94e6-12087e0c0b48
Source: global traffic	HTTP traffic detected: GET /sig.js?rpclid=546da6d0-d2eb-11ef-ad61-06f8d311b573&params=Pacs0y_h8AoSpSdmuFfjA2-Jh85D8lauvwtIHB_1GiprXZB5z-_E3J1H5hUXQDZEsvVW7JVWUdGMa_U0C5_tkb4mP1ZlEnp9SQCOUT9ZGqvUPKVQlnmpO-een_K5kYXADLIbU7cZM4adhhdJ64sqRb0XuCC1NIhymkr9Rdf6tXrmlHUvVik_ArV3ViEcLerL2da9b1cfNz3_0XekAPi53bNl_N0IIvDnrrUavtgn0hCj0v3n5UVbx3vj68zJh5EwhSyMCcqSgdvmBMtFnMUY0fIc3kCwuYNWcv9gb37hXO2aW-4ok0VCS57r6DU_Rp5Cr-rj3hrIb1i1cgEBLvfU7WGsD1UHx0L5uBiNGZ2yMVsuwdLN2VS93UYZKceGIhWo5t2oNt_gGhoxejNAlTmutQ HTTP/1.1Host: serve.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=5570e428-d2eb-11ef-9fe5-8ed26a284edb; sid_cross=546da6d0-d2eb-11ef-ad61-06f8d311b573
Source: global traffic	HTTP traffic detected: GET /sig.js?rpclid=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf&params=IjHuoKH9nmywyVTiGioDNCAuLUDL12hOuGl7bgdSfVyyVYBTz7Zsr7uuTl8TJIk5dWf81UH-AsKoN3EadDwjUBJQuQQlVyA963QpKBLhZSvMIbHPvJlfiVhzqVlZKwqSew6ekPvMJQivc9sVYYFqAv999a3EJ_hMi7vf7H_2ZGtihHOTvM6iqjMxqmJD3Q8Seu9mRdQ1GLakJW_Pj4XXdwzV5SezfbVTEvG0p-7i6Sc2AI8XNTkJMEsw2f9vhGucJwsBt9wx-rXfqKI6RUW5LPjCc9zy15g9MVC09kM3Iuwfi6vTIytAZgtIUykHXKylA3w3k2pnPUspiV_ZsBroYyDkOWAaHeeLepaoKhBX4c1zj-q9IHbhhARl1DuhJqnQN6FcAcEdSd5az2KddOvO2mdZRN2LwYifC0OPtebWzdSWf9-50JeiZHpbeeiGCfeO HTTP/1.1Host: serve.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf
Source: global traffic	HTTP traffic detected: GET /ng-assets/creative/assets/index-5333d910.js HTTP/1.1Host: cdn.bidbrain.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf
Source: global traffic	HTTP traffic detected: GET /ext/Footer-Logo_1720602781.svg+xml HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf
Source: global traffic	HTTP traffic detected: GET /ext/download-icon_1697445891.svg+xml HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf
Source: global traffic	HTTP traffic detected: GET /pagead/drt/s?v=r20120211 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/pagead/html/r20250113/r20190131/zrt_lookup_fy2021.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm9YsVInCwq_kuLG4Eoy4GuHk43hyeVzgbbZa3d16vwPQ6hkEJ5gfvmZT0zHrk
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=Cjr4WNCKHZ8TGIYi-x_AP0IOfsALGvqzIfMb0rcCNE6KUxJKNDhABILm_uSFgyZbLi8Sk_A-gAZPCv5A-yAECqAMByAPJBKoE3gFP0F_5Dz4w7OehnAdro3idBuuuft1-qZLbic0FwptSgAhjZsBi3SBbMVHh9u-1KrxsqFsUqpYbrzghNlP-nlLiG4sQv45jttPW7y_2VBpWy7pBpA6WnDm-exf0Jjd9VRRSQ1ZQuiM3QgUPwS84aANvMc3GZWRgR-RNUS_AJfYjEYj1dMcSnuUZxQk5SsOTtHL5WM3TOd5UAYQl6gsh85qoa4Q8UGoGASp8rsTWe7FQDPnkUJNpYzlIhbRKnuKE-xE6kzxMSYUkK9E0RnEzG9gZZLzecwOx0iYFm6Ll3xTABPyy29D0BIgF7t_amVGSBQQIBBgBkgUECAUYBKAGAoAHk_qP8BioB9XJG6gH2baxAqgHpr4bqAeOzhuoB5PYG6gH8OAbqAfulrECqAf-nrECqAevvrECqAf3wrEC2AcB8gcFEOSHlAHSCCYIgGEQARgfMgKKAjoLgECAwICAgKCogAJIvf3BOljri7nN2_aKA5oJS2h0dHBzOi8vcGNhcHBzdG9yZS5jb20vP2FwPWFkd3AmYXM9Z19kX2FsbF9uZXdfaW4mZG1bdHlwZV09ZGlzJmdhZF9zb3VyY2U9NYAKAcgLAdoMEAoKENDSrYHgy4i-HBICAQPYEwzQFQGYFgGAFwGyFx4KGggAEhRwdWItMjg0MDI1ODEwMTQxMTg2MxgAGAG6FwI4AbIYCRICsFMYAiIBANAYAegYAQ&sigh=rw7p8sLgrS4&uach_m=%5BUACH%5D&ase=2&cid=CAQSTgCa7L7df4xwUHVujsXH2F66vTtJuY0JMzCDUy0RwlGknM5o1hgUj27nZz3JKyLm39Z1qfeU48liOx_XvHXY-00wQ4VbHo9Y1_AGgVhlnRgB&vis=1&ebtr=1&nis=6 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger=navigation-source, event-sourceReferer: https://googleads.g.doubleclick.net/pagead/html/r20250113/r20190131/zrt_lookup_fy2021.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm9YsVInCwq_kuLG4Eoy4GuHk43hyeVzgbbZa3d16vwPQ6hkEJ5gfvmZT0zHrk
Source: global traffic	HTTP traffic detected: GET /sig.js?rpclid=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f&params=q547IniEp1qY7OEg0PE-zvI7c4TTbyJ9yUbJXX9aXRRFZ2RSaC1aqKVcNwFLzvoOUSB1Cq-kKAVCZMCO8wGiXvdmW_R_lhWj9VZ0BXYdLq3CVfee3Dl8WI3WkDd6zz6cgPeOrWRQd0pYTBtp6b-MEhqkYNKcIqKwWY9oCnbEV53vVc0S-miSf-21MKIOFFWwwrtgyKpTFmSAzSgQs0FZTJxX5Gsm3mrnNfhxWN0Pw1JdgjYx4A0MtW9X9sFmXm843WGJGXK0aLApHA07DzpbVdhE2OFP0N5Ku5qSpfS_KMrn0gcgzJWCemoSEDAXtqiudxnIdUJXflbA_NEbsxnE161AqUOD5U2bGvzX9q0umM_UPOpSxsZxgkmK5Rd_E0400H-5SWuxjHpFtYcXu8P-aYhdwh-QT38DroSKr_E8gRGeWPVy9UB5x_1996Dl-nvO HTTP/1.1Host: serve.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf
Source: global traffic	HTTP traffic detected: GET /sig.js?rpclid=546afe47-d2eb-11ef-ad78-a23bd1412fc2&params=hAI2KqFVzEgluZhAFrsrWfd-Wm5J9P0-DIF3OWjFomhzv7esNBBwxT-MVRciluG1Em3k-v7IwStlOhtk7jcv6I0NHULMTqaBvQGCBiSPrhm3tzFUMiTH8VVWTByXhtrRPdhdeLwaNKNsq-s8vFkx5w3t-HXQd-4TJbUzt0wLn79lA8u7bdlg2XViQ0oaQzFpJILJcIMRGdSYKDQX3H8RvJGWs8VlgCgz2d6yebS_XHRc0BE77BrYpBTdb8j5bVSgE-E-6SJs35W-rpjWlFSxtDhI0W2vjAEmOyPffbeWt3-FLCepBF5SL3rC83uQ5acUP-y6vtSV-nKF2-LJDQW8PQtx4YCry_iFzAYflfyfaTjhOtwOzraXWnau_Q2n6euY2JfE1c1uK8BD98tLjDnouA HTTP/1.1Host: serve.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf
Source: global traffic	HTTP traffic detected: GET /click_1734018555_64x64.png HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ef294-d2eb-11ef-94e6-12087e0c0b48
Source: global traffic	HTTP traffic detected: GET /compressedFonts/RobotoRegular.woff2 HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://googleads.g.doubleclick.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /compressedFonts/RobotoBold.woff2 HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://googleads.g.doubleclick.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /download_l_1734165033_64x64.png HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ef294-d2eb-11ef-94e6-12087e0c0b48
Source: global traffic	HTTP traffic detected: GET /btr/view?ai=Cjr4WNCKHZ8TGIYi-x_AP0IOfsALGvqzIfMb0rcCNE6KUxJKNDhABILm_uSFgyZbLi8Sk_A-gAZPCv5A-yAECqAMByAPJBKoE3gFP0F_5Dz4w7OehnAdro3idBuuuft1-qZLbic0FwptSgAhjZsBi3SBbMVHh9u-1KrxsqFsUqpYbrzghNlP-nlLiG4sQv45jttPW7y_2VBpWy7pBpA6WnDm-exf0Jjd9VRRSQ1ZQuiM3QgUPwS84aANvMc3GZWRgR-RNUS_AJfYjEYj1dMcSnuUZxQk5SsOTtHL5WM3TOd5UAYQl6gsh85qoa4Q8UGoGASp8rsTWe7FQDPnkUJNpYzlIhbRKnuKE-xE6kzxMSYUkK9E0RnEzG9gZZLzecwOx0iYFm6Ll3xTABPyy29D0BIgF7t_amVGSBQQIBBgBkgUECAUYBKAGAoAHk_qP8BioB9XJG6gH2baxAqgHpr4bqAeOzhuoB5PYG6gH8OAbqAfulrECqAf-nrECqAevvrECqAf3wrEC2AcB8gcFEOSHlAHSCCYIgGEQARgfMgKKAjoLgECAwICAgKCogAJIvf3BOljri7nN2_aKA5oJS2h0dHBzOi8vcGNhcHBzdG9yZS5jb20vP2FwPWFkd3AmYXM9Z19kX2FsbF9uZXdfaW4mZG1bdHlwZV09ZGlzJmdhZF9zb3VyY2U9NYAKAcgLAdoMEAoKENDSrYHgy4i-HBICAQPYEwzQFQGYFgGAFwGyFx4KGggAEhRwdWItMjg0MDI1ODEwMTQxMTg2MxgAGAG6FwI4AbIYCRICsFMYAiIBANAYAegYAQ&sigh=rw7p8sLgrS4&uach_m=%5BUACH%5D&ase=2&cid=CAQSTgCa7L7df4xwUHVujsXH2F66vTtJuY0JMzCDUy0RwlGknM5o1hgUj27nZz3JKyLm39Z1qfeU48liOx_XvHXY-00wQ4VbHo9Y1_AGgVhlnRgB&vis=1&ibtr=1&nis=6 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://googleads.g.doubleclick.net/pagead/html/r20250113/r20190131/zrt_lookup_fy2021.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm9YsVInCwq_kuLG4Eoy4GuHk43hyeVzgbbZa3d16vwPQ6hkEJ5gfvmZT0zHrk
Source: global traffic	HTTP traffic detected: GET /pagead/drt/ui HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sig.js?rpclid=546ef294-d2eb-11ef-94e6-12087e0c0b48&params=qDSwbOIr0D22sbu8qzOWzzsgTAyjXaYD0Wjekk-CBtqkqW2Giw8aaBY9H03jsjUd--RPJIQCc8isfXRoLz_JxXvWOsgFLQ0LXQCV_vRO7WZso6I-8X5nh-iPSXKXhlSitp-6I3vA0zWdpJtuEiSGRrUctJZaV7UE5ikGD2wk5NsDkmfe7LpIf9AMxB5x2ZUweOrir-bu-a3rsExFJzVnbf5fhQeei_SdD-FHZGzKvArczRnV44Yv9tLz80gy1aR-GZE2cRmIEW-HaNIcITlS40JDTcYNzulopQueEojNVc9cKUgiOvbjBagX0YVWcjCVxnLXYplgeAgGA8zT1qOiHoyY_vKGQOPnfCST-N1GlBWQMxxI8wxrHXg6kgSfDts7oessD_HNRJEmspPirMn3sw HTTP/1.1Host: serve.bidbrain.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f
Source: global traffic	HTTP traffic detected: GET /sig.js?rpclid=546ad295-d2eb-11ef-959f-d6c599cbf4fc&params=WvqEWoub5i7-wbFq6SzlnF9uEQ6-DRvG4th9BOzKDOXmRNHtLMqI8kI53Z0ViZ8r_52kOqtFAIbK-7HqzahBdWbt4T0elE4Hsd_a2y7MgSAiHTmiImHD3pSXu5MOhUuxBE-RqPnKDqDUkf8jHa5t_x92d59EQIjgSDUm_W4POLV07Q-9CZ_IQXj8Bp87ChlsADIHCAhvgCZWQLsS_6cU6pLf0QamUAcXq869S2ZCRcQ-nPp8Y8Hx9WOBweupX6rsR4kij69CkBTzczNgD68KrydLsmLNk6mwzd3M7lpIGsvbgLHZROb3bSQix0iN79BCOHKdDjp3k1Zg3XOc0tiN74JM6M-WdxX1zuD9Kj8oTMPFzs49CGykzdU80FMi_Qs3UQPmrIXXBGxx3SwIppw2PA HTTP/1.1Host: serve.bidbrain.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f
Source: global traffic	HTTP traffic detected: GET /sig.js?rpclid=546da6d0-d2eb-11ef-ad61-06f8d311b573&params=Pacs0y_h8AoSpSdmuFfjA2-Jh85D8lauvwtIHB_1GiprXZB5z-_E3J1H5hUXQDZEsvVW7JVWUdGMa_U0C5_tkb4mP1ZlEnp9SQCOUT9ZGqvUPKVQlnmpO-een_K5kYXADLIbU7cZM4adhhdJ64sqRb0XuCC1NIhymkr9Rdf6tXrmlHUvVik_ArV3ViEcLerL2da9b1cfNz3_0XekAPi53bNl_N0IIvDnrrUavtgn0hCj0v3n5UVbx3vj68zJh5EwhSyMCcqSgdvmBMtFnMUY0fIc3kCwuYNWcv9gb37hXO2aW-4ok0VCS57r6DU_Rp5Cr-rj3hrIb1i1cgEBLvfU7WGsD1UHx0L5uBiNGZ2yMVsuwdLN2VS93UYZKceGIhWo5t2oNt_gGhoxejNAlTmutQ HTTP/1.1Host: serve.bidbrain.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f
Source: global traffic	HTTP traffic detected: GET /sig.js?rpclid=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf&params=IjHuoKH9nmywyVTiGioDNCAuLUDL12hOuGl7bgdSfVyyVYBTz7Zsr7uuTl8TJIk5dWf81UH-AsKoN3EadDwjUBJQuQQlVyA963QpKBLhZSvMIbHPvJlfiVhzqVlZKwqSew6ekPvMJQivc9sVYYFqAv999a3EJ_hMi7vf7H_2ZGtihHOTvM6iqjMxqmJD3Q8Seu9mRdQ1GLakJW_Pj4XXdwzV5SezfbVTEvG0p-7i6Sc2AI8XNTkJMEsw2f9vhGucJwsBt9wx-rXfqKI6RUW5LPjCc9zy15g9MVC09kM3Iuwfi6vTIytAZgtIUykHXKylA3w3k2pnPUspiV_ZsBroYyDkOWAaHeeLepaoKhBX4c1zj-q9IHbhhARl1DuhJqnQN6FcAcEdSd5az2KddOvO2mdZRN2LwYifC0OPtebWzdSWf9-50JeiZHpbeeiGCfeO HTTP/1.1Host: serve.bidbrain.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f
Source: global traffic	HTTP traffic detected: GET /ext/Footer-Logo_1720602781.svg+xml HTTP/1.1Host: cdn.bidbrain.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546afe47-d2eb-11ef-ad78-a23bd1412fc2
Source: global traffic	HTTP traffic detected: GET /ext/download-icon_1697445891.svg+xml HTTP/1.1Host: cdn.bidbrain.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546afe47-d2eb-11ef-ad78-a23bd1412fc2
Source: global traffic	HTTP traffic detected: GET /sig.js?rpclid=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f&params=q547IniEp1qY7OEg0PE-zvI7c4TTbyJ9yUbJXX9aXRRFZ2RSaC1aqKVcNwFLzvoOUSB1Cq-kKAVCZMCO8wGiXvdmW_R_lhWj9VZ0BXYdLq3CVfee3Dl8WI3WkDd6zz6cgPeOrWRQd0pYTBtp6b-MEhqkYNKcIqKwWY9oCnbEV53vVc0S-miSf-21MKIOFFWwwrtgyKpTFmSAzSgQs0FZTJxX5Gsm3mrnNfhxWN0Pw1JdgjYx4A0MtW9X9sFmXm843WGJGXK0aLApHA07DzpbVdhE2OFP0N5Ku5qSpfS_KMrn0gcgzJWCemoSEDAXtqiudxnIdUJXflbA_NEbsxnE161AqUOD5U2bGvzX9q0umM_UPOpSxsZxgkmK5Rd_E0400H-5SWuxjHpFtYcXu8P-aYhdwh-QT38DroSKr_E8gRGeWPVy9UB5x_1996Dl-nvO HTTP/1.1Host: serve.bidbrain.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546afe47-d2eb-11ef-ad78-a23bd1412fc2
Source: global traffic	HTTP traffic detected: GET /rtimp?sid=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f&d=androiddatahost.com&cr=ext_download_prot_smrtsp&gid=&im=q547IniEp1qY7OEg0PE-zvI7c4TTbyJ9yUbJXX9aXRRFZ2RSaC1aqKVcNwFLzvoOUSB1Cq-kKAVCZMCO8wGiXvdmW_R_lhWj9VZ0BXYdLq3CVfee3Dl8WI3WkDd6zz6cgPeOrWRQd0pYTBtp6b-MEhqkYNKcIqKwWY9oCnbEV53vVc0S-miSf-21MKIOFFWwwrtgyKpTFmSAzSgQs0FZTJxX5Gsm3mrnNfhxWN0Pw1JdgjYx4A0MtW9X9sFmXm843WGJGXK0aLApHA07DzpbVdhE2OFP0N5Ku5qSpfS_KMrn0gcgzJWCemoSEDAXtqiudxnIdUJXflbA_NEbsxnE161AqUOD5U2bGvzX9q0umM_UPOpSxsZxgkmK5Rd_E0400H-5SWuxjHpFtYcXu8P-aYhdwh-QT38DroSKr_E8gRGeWPVy9UB5x_1996Dl-nvO&p=Z4ciNAAIY0EIEd8IAAfB0JS4R6VqDmLSSExu6A&r=698754296&a=ipv4&ow=1280&oh=984&iw=0&ih=0&tzof=300&tz=America%2FNew_York&pxr=1&cts=1736909368.576&cto=1552&edx=7&furl=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fhtml%2Fr20250113%2Fr20190131%2Fzrt_lookup_fy2021.html&ctp=creative&cnm=ext_download_prot_smrtsp HTTP/1.1Host: g4.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ad295-d2eb-11ef-959f-d6c599cbf4fc
Source: global traffic	HTTP traffic detected: GET /rtimp?sid=546ad295-d2eb-11ef-959f-d6c599cbf4fc&d=androiddatahost.com&cr=ext_download_prot_smrtsp&gid=&im=WvqEWoub5i7-wbFq6SzlnF9uEQ6-DRvG4th9BOzKDOXmRNHtLMqI8kI53Z0ViZ8r_52kOqtFAIbK-7HqzahBdWbt4T0elE4Hsd_a2y7MgSAiHTmiImHD3pSXu5MOhUuxBE-RqPnKDqDUkf8jHa5t_x92d59EQIjgSDUm_W4POLV07Q-9CZ_IQXj8Bp87ChlsADIHCAhvgCZWQLsS_6cU6pLf0QamUAcXq869S2ZCRcQ-nPp8Y8Hx9WOBweupX6rsR4kij69CkBTzczNgD68KrydLsmLNk6mwzd3M7lpIGsvbgLHZROb3bSQix0iN79BCOHKdDjp3k1Zg3XOc0tiN74JM6M-WdxX1zuD9Kj8oTMPFzs49CGykzdU80FMi_Qs3UQPmrIXXBGxx3SwIppw2PA&p=Z4ciNAAI1QUIEdThAB5MR83lxaWzSatV77M14g&r=1125375760&a=ipv4&ow=1280&oh=984&iw=856&ih=280&tzof=300&tz=America%2FNew_York&pxr=1&cts=1736909368.605&cto=2459&edx=10&furl=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-2840258101411863%26output%3Dhtml%26h%3D280%26slotname%3D1589304026%26adk%3D2488830594%26adf%3D2972800098%26pi%3Dt.ma~as.1589304026%26w%3D856%26abgtt%3D6%26fwrn%3D4%26fwrnh%3D100%26lmt%3D1736881262%26rafmt%3D1%26format%3D856x280%26url%3Dhttps%253A%252F%252Fandroiddatahost.com%252Fsdsd3%26fwr%3D0%26fwrattr%3Dtrue%26rpe%3D1%26resp_fmts%3D3%26wgl%3D1%26uach%3DWyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.%26dt%3D1736909361577%26bpp%3D1%26bdt%3D1279%26idt%3D1568%26shv%3Dr20250113%26mjsv%3Dm202501080201%26ptt%3D9%26saldr%3Daa%26abxe%3D1%26cookie_enabled%3D1%26eoidce%3D1%26prev_fmts%3D0x0%252C856x280%252C336x280%26nras%3D1%26correlator%3D8040805227545%26frm%3D20%26pv%3D1%26u_tz%3D-300%26u_his%3D1%26u_h%3D1024%26u_w%3D1280%26u_ah%3D984%26u_aw%3D1280%26u_cd%3D24%26u_sd%3D1%26dmc%3D8%26adx%3D204%26ady%3D1649%26biw%3D1263%26bih%3D907%26scr_x%3D0%26scr_y%3D0%26eid%3D42533203%252C31089542%252C31089715%252C95350245%252C31089639%26oid%3D2%26pvsid%3D539208937878820%26tmod%3D1359503699%26uas%3D0%26nvt%3D1%26fc%3D1920%26brdim%3D0%252C0%252C0%252C0%252C1280%252C0%252C1280%252C984%252C1280%252C907%26vis%3D1%26rsz%3D%257C%257CoeEbr%257C%26abl%3DCS%26pfx%3D0%26fu%3D128%26bc%3D31%26bz%3D1%26td%3D1%26tdf%3D0%26psd%3DW251bGwsbnVsbCxudWxsLDNd%26nt%3D1%26ifi%3D4%26uci%3Da!4%26btvi%3D1%26fsb%3D1%26dtd%3D1571&ctp=creative&cnm=ext_download_prot_smrtsp HTTP/1.1Host: g4.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8
Source: global traffic	HTTP traffic detected: GET /rtimp?sid=546da6d0-d2eb-11ef-ad61-06f8d311b573&d=androiddatahost.com&cr=ext_download_prot_smrtsp&gid=&im=Pacs0y_h8AoSpSdmuFfjA2-Jh85D8lauvwtIHB_1GiprXZB5z-_E3J1H5hUXQDZEsvVW7JVWUdGMa_U0C5_tkb4mP1ZlEnp9SQCOUT9ZGqvUPKVQlnmpO-een_K5kYXADLIbU7cZM4adhhdJ64sqRb0XuCC1NIhymkr9Rdf6tXrmlHUvVik_ArV3ViEcLerL2da9b1cfNz3_0XekAPi53bNl_N0IIvDnrrUavtgn0hCj0v3n5UVbx3vj68zJh5EwhSyMCcqSgdvmBMtFnMUY0fIc3kCwuYNWcv9gb37hXO2aW-4ok0VCS57r6DU_Rp5Cr-rj3hrIb1i1cgEBLvfU7WGsD1UHx0L5uBiNGZ2yMVsuwdLN2VS93UYZKceGIhWo5t2oNt_gGhoxejNAlTmutQ&p=Z4ciNAAJHGgIEd-8ABtcFJi2RsjNQuKdC0LPiQ&r=1086721484&a=ipv4&ow=1280&oh=984&iw=336&ih=280&tzof=300&tz=America%2FNew_York&pxr=1&cts=1736909368.637&cto=2424&edx=9&furl=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-2840258101411863%26output%3Dhtml%26h%3D280%26slotname%3D8499285160%26adk%3D3371522416%26adf%3D601265536%26pi%3Dt.ma~as.8499285160%26w%3D336%26abgtt%3D6%26lmt%3D1736881262%26format%3D336x280%26url%3Dhttps%253A%252F%252Fandroiddatahost.com%252Fsdsd3%26wgl%3D1%26uach%3DWyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.%26dt%3D1736909361578%26bpp%3D1%26bdt%3D1279%26idt%3D1576%26shv%3Dr20250113%26mjsv%3Dm202501080201%26ptt%3D9%26saldr%3Daa%26abxe%3D1%26cookie_enabled%3D1%26eoidce%3D1%26prev_fmts%3D0x0%252C856x280%252C336x280%252C856x280%26nras%3D1%26correlator%3D8040805227545%26frm%3D20%26pv%3D1%26u_tz%3D-300%26u_his%3D1%26u_h%3D1024%26u_w%3D1280%26u_ah%3D984%26u_aw%3D1280%26u_cd%3D24%26u_sd%3D1%26dmc%3D8%26adx%3D464%26ady%3D2039%26biw%3D1263%26bih%3D907%26scr_x%3D0%26scr_y%3D0%26eid%3D42533203%252C31089542%252C31089715%252C95350245%252C31089639%26oid%3D2%26pvsid%3D539208937878820%26tmod%3D1359503699%26uas%3D0%26nvt%3D1%26fc%3D1920%26brdim%3D0%252C0%252C0%252C0%252C1280%252C0%252C1280%252C984%252C1280%252C907%26vis%3D1%26rsz%3D%257C%257CoeEbr%257C%26abl%3DCS%26pfx%3D0%26fu%3D0%26bc%3D31%26bz%3D1%26td%3D1%26tdf%3D0%26psd%3DW251bGwsbnVsbCxudWxsLDNd%26nt%3D1%26ifi%3D5%26uci%3Da!5%26btvi%3D2%26fsb%3D1%26dtd%3D1579&ctp=creative&cnm=ext_download_prot_smrtsp HTTP/1.1Host: g4.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ad295-d2eb-11ef-959f-d6c599cbf4fc
Source: global traffic	HTTP traffic detected: GET /rtimp?sid=546ef294-d2eb-11ef-94e6-12087e0c0b48&d=androiddatahost.com&cr=ext_download_prot_smrtsp&gid=&im=qDSwbOIr0D22sbu8qzOWzzsgTAyjXaYD0Wjekk-CBtqkqW2Giw8aaBY9H03jsjUd--RPJIQCc8isfXRoLz_JxXvWOsgFLQ0LXQCV_vRO7WZso6I-8X5nh-iPSXKXhlSitp-6I3vA0zWdpJtuEiSGRrUctJZaV7UE5ikGD2wk5NsDkmfe7LpIf9AMxB5x2ZUweOrir-bu-a3rsExFJzVnbf5fhQeei_SdD-FHZGzKvArczRnV44Yv9tLz80gy1aR-GZE2cRmIEW-HaNIcITlS40JDTcYNzulopQueEojNVc9cKUgiOvbjBagX0YVWcjCVxnLXYplgeAgGA8zT1qOiHoyY_vKGQOPnfCST-N1GlBWQMxxI8wxrHXg6kgSfDts7oessD_HNRJEmspPirMn3sw&p=Z4ciNAAIkn8IEdNXAAu0Q6gnw-wgAu8T7McH4w&r=1203031400&a=ipv4&ow=1280&oh=984&iw=336&ih=280&tzof=300&tz=America%2FNew_York&pxr=1&cts=1736909368.656&cto=2466&edx=9&furl=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-2840258101411863%26output%3Dhtml%26h%3D280%26slotname%3D8499285160%26adk%3D978467678%26adf%3D2230146881%26pi%3Dt.ma~as.8499285160%26w%3D336%26abgtt%3D6%26lmt%3D1736881262%26format%3D336x280%26url%3Dhttps%253A%252F%252Fandroiddatahost.com%252Fsdsd3%26wgl%3D1%26uach%3DWyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.%26dt%3D1736909361577%26bpp%3D1%26bdt%3D1278%26idt%3D1558%26shv%3Dr20250113%26mjsv%3Dm202501080201%26ptt%3D9%26saldr%3Daa%26abxe%3D1%26cookie_enabled%3D1%26eoidce%3D1%26prev_fmts%3D0x0%252C856x280%26nras%3D1%26correlator%3D8040805227545%26frm%3D20%26pv%3D1%26u_tz%3D-300%26u_his%3D1%26u_h%3D1024%26u_w%3D1280%26u_ah%3D984%26u_aw%3D1280%26u_cd%3D24%26u_sd%3D1%26dmc%3D8%26adx%3D464%26ady%3D639%26biw%3D1263%26bih%3D907%26scr_x%3D0%26scr_y%3D0%26eid%3D42533203%252C31089542%252C31089715%252C95350245%252C31089639%26oid%3D2%26pvsid%3D539208937878820%26tmod%3D1359503699%26uas%3D0%26nvt%3D1%26fc%3D1920%26brdim%3D0%252C0%252C0%252C0%252C1280%252C0%252C1280%252C984%252C1280%252C907%26vis%3D1%26rsz%3D%257C%257CoeE%257C%26abl%3DCS%26pfx%3D0%26fu%3D0%26bc%3D31%26bz%3D1%26td%3D1%26tdf%3D0%26psd%3DW251bGwsbnVsbCxudWxsLDNd%26nt%3D1%26ifi%3D3%26uci%3Da!3%26fsb%3D1%26dtd%3D1564&ctp=creative&cnm=ext_download_prot_smrtsp HTTP/1.1Host: g4.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ad295-d2eb-11ef-959f-d6c599cbf4fc
Source: global traffic	HTTP traffic detected: GET /rtimp?sid=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf&d=androiddatahost.com&cr=ext_download_prot_smrtsp&gid=&im=IjHuoKH9nmywyVTiGioDNCAuLUDL12hOuGl7bgdSfVyyVYBTz7Zsr7uuTl8TJIk5dWf81UH-AsKoN3EadDwjUBJQuQQlVyA963QpKBLhZSvMIbHPvJlfiVhzqVlZKwqSew6ekPvMJQivc9sVYYFqAv999a3EJ_hMi7vf7H_2ZGtihHOTvM6iqjMxqmJD3Q8Seu9mRdQ1GLakJW_Pj4XXdwzV5SezfbVTEvG0p-7i6Sc2AI8XNTkJMEsw2f9vhGucJwsBt9wx-rXfqKI6RUW5LPjCc9zy15g9MVC09kM3Iuwfi6vTIytAZgtIUykHXKylA3w3k2pnPUspiV_ZsBroYyDkOWAaHeeLepaoKhBX4c1zj-q9IHbhhARl1DuhJqnQN6FcAcEdSd5az2KddOvO2mdZRN2LwYifC0OPtebWzdSWf9-50JeiZHpbeeiGCfeO&p=Z4ciNAAIcZ8IEctkAAklrGRc4Ee14pU5y6FM0w&r=1214026116&a=ipv4&ow=1280&oh=984&iw=856&ih=280&tzof=300&tz=America%2FNew_York&pxr=1&cts=1736909368.676&cto=2444&edx=9&furl=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-2840258101411863%26output%3Dhtml%26h%3D280%26slotname%3D2448584244%26adk%3D39937659%26adf%3D2782902954%26pi%3Dt.ma~as.2448584244%26w%3D856%26abgtt%3D6%26fwrn%3D4%26fwrnh%3D100%26lmt%3D1736881262%26rafmt%3D1%26format%3D856x280%26url%3Dhttps%253A%252F%252Fandroiddatahost.com%252Fsdsd3%26fwr%3D0%26fwrattr%3Dtrue%26rpe%3D1%26resp_fmts%3D3%26wgl%3D1%26uach%3DWyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.%26dt%3D1736909361575%26bpp%3D2%26bdt%3D1276%26idt%3D1551%26shv%3Dr20250113%26mjsv%3Dm202501080201%26ptt%3D9%26saldr%3Daa%26abxe%3D1%26cookie_enabled%3D1%26eoidce%3D1%26prev_fmts%3D0x0%26nras%3D1%26correlator%3D8040805227545%26frm%3D20%26pv%3D1%26u_tz%3D-300%26u_his%3D1%26u_h%3D1024%26u_w%3D1280%26u_ah%3D984%26u_aw%3D1280%26u_cd%3D24%26u_sd%3D1%26dmc%3D8%26adx%3D204%26ady%3D186%26biw%3D1263%26bih%3D907%26scr_x%3D0%26scr_y%3D0%26eid%3D42533203%252C31089542%252C31089715%252C95350245%252C31089639%26oid%3D2%26pvsid%3D539208937878820%26tmod%3D1359503699%26uas%3D0%26nvt%3D1%26fc%3D1920%26brdim%3D0%252C0%252C0%252C0%252C1280%252C0%252C1280%252C984%252C1280%252C907%26vis%3D1%26rsz%3D%257C%257CoeE%257C%26abl%3DCS%26pfx%3D0%26fu%3D128%26bc%3D31%26bz%3D1%26td%3D1%26tdf%3D0%26psd%3DW251bGwsbnVsbCxudWxsLDNd%26nt%3D1%26ifi%3D2%26uci%3Da!2%26fsb%3D1%26dtd%3D1556&ctp=creative&cnm=ext_download_prot_smrtsp HTTP/1.1Host: g4.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db
Source: global traffic	HTTP traffic detected: GET /sig.js?rpclid=546afe47-d2eb-11ef-ad78-a23bd1412fc2&params=hAI2KqFVzEgluZhAFrsrWfd-Wm5J9P0-DIF3OWjFomhzv7esNBBwxT-MVRciluG1Em3k-v7IwStlOhtk7jcv6I0NHULMTqaBvQGCBiSPrhm3tzFUMiTH8VVWTByXhtrRPdhdeLwaNKNsq-s8vFkx5w3t-HXQd-4TJbUzt0wLn79lA8u7bdlg2XViQ0oaQzFpJILJcIMRGdSYKDQX3H8RvJGWs8VlgCgz2d6yebS_XHRc0BE77BrYpBTdb8j5bVSgE-E-6SJs35W-rpjWlFSxtDhI0W2vjAEmOyPffbeWt3-FLCepBF5SL3rC83uQ5acUP-y6vtSV-nKF2-LJDQW8PQtx4YCry_iFzAYflfyfaTjhOtwOzraXWnau_Q2n6euY2JfE1c1uK8BD98tLjDnouA HTTP/1.1Host: serve.bidbrain.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546afe47-d2eb-11ef-ad78-a23bd1412fc2
Source: global traffic	HTTP traffic detected: GET /rtimp?sid=546afe47-d2eb-11ef-ad78-a23bd1412fc2&d=androiddatahost.com&cr=ext_download_prot_smrtsp&gid=&im=hAI2KqFVzEgluZhAFrsrWfd-Wm5J9P0-DIF3OWjFomhzv7esNBBwxT-MVRciluG1Em3k-v7IwStlOhtk7jcv6I0NHULMTqaBvQGCBiSPrhm3tzFUMiTH8VVWTByXhtrRPdhdeLwaNKNsq-s8vFkx5w3t-HXQd-4TJbUzt0wLn79lA8u7bdlg2XViQ0oaQzFpJILJcIMRGdSYKDQX3H8RvJGWs8VlgCgz2d6yebS_XHRc0BE77BrYpBTdb8j5bVSgE-E-6SJs35W-rpjWlFSxtDhI0W2vjAEmOyPffbeWt3-FLCepBF5SL3rC83uQ5acUP-y6vtSV-nKF2-LJDQW8PQtx4YCry_iFzAYflfyfaTjhOtwOzraXWnau_Q2n6euY2JfE1c1uK8BD98tLjDnouA&p=Z4ciNAAIY0MIEd8IAAfB0JWq2MZ5niF8kccdvQ&r=1466544634&a=ipv4&ow=1280&oh=984&iw=0&ih=0&tzof=300&tz=America%2FNew_York&pxr=1&cts=1736909368.697&cto=1556&edx=7&furl=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fhtml%2Fr20250113%2Fr20190131%2Fzrt_lookup_fy2021.html%23RS-2-%26adk%3D1812271804%26client%3Dca-pub-2840258101411863%26fa%3D4%26ifi%3D8%26uci%3Da!8%26btvi%3D4&ctp=creative&cnm=ext_download_prot_smrtsp HTTP/1.1Host: g4.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ad295-d2eb-11ef-959f-d6c599cbf4fc
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/PhoenixSuit_V1.08.zip HTTP/1.1Host: androiddatahost.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://androiddatahost.com/sdsd3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.378168725.1736909362; _gid=GA1.2.1596410557.1736909362; _gat=1; _ga_L3KCHB9NB2=GS1.2.1736909364.1.0.1736909364.0.0.0; __gads=ID=a9d88aad96a4f337:T=1736909364:RT=1736909364:S=ALNI_MYpTjbATQ96LU0SNgdD42A-b9Szjw; __gpi=UID=00000fb9551bdf9b:T=1736909364:RT=1736909364:S=ALNI_Mb6VpJ5WHmDN-dR3_vNiUnzy0Rz1w; __eoi=ID=561f09b7ce22ff6f:T=1736909364:RT=1736909364:S=AA-AfjZhVpDGU5us2vSioVEh1-JY
Source: global traffic	HTTP traffic detected: GET /rtimp?a=imp&cr=ext_download_prot_smrtsp&d=androiddatahost.com&gid=&im=q547IniEp1qY7OEg0PE-zvI7c4TTbyJ9yUbJXX9aXRRFZ2RSaC1aqKVcNwFLzvoOUSB1Cq-kKAVCZMCO8wGiXvdmW_R_lhWj9VZ0BXYdLq3CVfee3Dl8WI3WkDd6zz6cgPeOrWRQd0pYTBtp6b-MEhqkYNKcIqKwWY9oCnbEV53vVc0S-miSf-21MKIOFFWwwrtgyKpTFmSAzSgQs0FZTJxX5Gsm3mrnNfhxWN0Pw1JdgjYx4A0MtW9X9sFmXm843WGJGXK0aLApHA07DzpbVdhE2OFP0N5Ku5qSpfS_KMrn0gcgzJWCemoSEDAXtqiudxnIdUJXflbA_NEbsxnE161AqUOD5U2bGvzX9q0umM_UPOpSxsZxgkmK5Rd_E0400H-5SWuxjHpFtYcXu8P-aYhdwh-QT38DroSKr_E8gRGeWPVy9UB5x_1996Dl-nvO&p=Z4ciNAAIY0EIEd8IAAfB0JS4R6VqDmLSSExu6A&sid=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f HTTP/1.1Host: g.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf
Source: global traffic	HTTP traffic detected: GET /click_1734018555_64x64.png HTTP/1.1Host: cdn.bidbrain.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ad295-d2eb-11ef-959f-d6c599cbf4fc
Source: global traffic	HTTP traffic detected: GET /pagead/drt/si?st=NO_DATA HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm9YsVInCwq_kuLG4Eoy4GuHk43hyeVzgbbZa3d16vwPQ6hkEJ5gfvmZT0zHrk
Source: global traffic	HTTP traffic detected: GET /download_l_1734165033_64x64.png HTTP/1.1Host: cdn.bidbrain.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ad295-d2eb-11ef-959f-d6c599cbf4fc
Source: global traffic	HTTP traffic detected: GET /btr/view?ai=Cjr4WNCKHZ8TGIYi-x_AP0IOfsALGvqzIfMb0rcCNE6KUxJKNDhABILm_uSFgyZbLi8Sk_A-gAZPCv5A-yAECqAMByAPJBKoE3gFP0F_5Dz4w7OehnAdro3idBuuuft1-qZLbic0FwptSgAhjZsBi3SBbMVHh9u-1KrxsqFsUqpYbrzghNlP-nlLiG4sQv45jttPW7y_2VBpWy7pBpA6WnDm-exf0Jjd9VRRSQ1ZQuiM3QgUPwS84aANvMc3GZWRgR-RNUS_AJfYjEYj1dMcSnuUZxQk5SsOTtHL5WM3TOd5UAYQl6gsh85qoa4Q8UGoGASp8rsTWe7FQDPnkUJNpYzlIhbRKnuKE-xE6kzxMSYUkK9E0RnEzG9gZZLzecwOx0iYFm6Ll3xTABPyy29D0BIgF7t_amVGSBQQIBBgBkgUECAUYBKAGAoAHk_qP8BioB9XJG6gH2baxAqgHpr4bqAeOzhuoB5PYG6gH8OAbqAfulrECqAf-nrECqAevvrECqAf3wrEC2AcB8gcFEOSHlAHSCCYIgGEQARgfMgKKAjoLgECAwICAgKCogAJIvf3BOljri7nN2_aKA5oJS2h0dHBzOi8vcGNhcHBzdG9yZS5jb20vP2FwPWFkd3AmYXM9Z19kX2FsbF9uZXdfaW4mZG1bdHlwZV09ZGlzJmdhZF9zb3VyY2U9NYAKAcgLAdoMEAoKENDSrYHgy4i-HBICAQPYEwzQFQGYFgGAFwGyFx4KGggAEhRwdWItMjg0MDI1ODEwMTQxMTg2MxgAGAG6FwI4AbIYCRICsFMYAiIBANAYAegYAQ&sigh=rw7p8sLgrS4&uach_m=%5BUACH%5D&ase=2&cid=CAQSTgCa7L7df4xwUHVujsXH2F66vTtJuY0JMzCDUy0RwlGknM5o1hgUj27nZz3JKyLm39Z1qfeU48liOx_XvHXY-00wQ4VbHo9Y1_AGgVhlnRgB&vis=1&ibtr=1&nis=6 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm9YsVInCwq_kuLG4Eoy4GuHk43hyeVzgbbZa3d16vwPQ6hkEJ5gfvmZT0zHrk
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=Ca41ENCKHZ8HGIYi-x_AP0IOfsAK9qs_Ndemi3NbEEsCNtwEQASAAYMmWy4vEpPwPggEXY2EtcHViLTI4NDAyNTgxMDE0MTE4NjPIAQmoAwHIAwKqBNIBT9BJRRuVYISJd-fb-0pSnEr7rNnJo8yDZyCYQINFimNUQE-owkEoXVZzu-dS81KRZB4SsdU3Tz_42zZNvlUHV8GQvuRgPmImZtm2v2yTtyH2dASJJot8-ZcYy_eIqTAGjkP2lBalTlnoCOlgKBUI-xAh7ZQ6cXUU6RaHyziNzRen6YX7aV_iAb0YdNfuaOeWMI2YBe9xYy3-0PjE7cwMDp74_4FBiXDopZqk0YYiwzTFSrAGPgBa3K6h360jC3OZ48LOPvn9r9Lt1ITK2NzuUX7FgAaarO2X-f_z_OUBoAYhqAemvhuoB5bYG6gHqpuxAqgH_56xAqgH35-xAqgHrb6xAtgHANIIJAiAYRABMgKKAjoLgECAwICAgKCogAJIvf3BOljri7nN2_aKA4AKAfoLAggBgAwB0BUBgBcBshccChgSFHB1Yi0yODQwMjU4MTAxNDExODYzGAAYDA&sigh=p4dKFt52T8c&uach_m=%5BUACH%5D&cid=CAQSTgCa7L7df4xwUHVujsXH2F66vTtJuY0JMzCDUy0RwlGknM5o1hgUj27nZz3JKyLm39Z1qfeU48liOx_XvHXY-00wQ4VbHo9Y1_AGgVhlnRgB&vis=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/pagead/html/r20250113/r20190131/zrt_lookup_fy2021.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm9YsVInCwq_kuLG4Eoy4GuHk43hyeVzgbbZa3d16vwPQ6hkEJ5gfvmZT0zHrk
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=Ca41ENCKHZ8HGIYi-x_AP0IOfsAK9qs_Ndemi3NbEEsCNtwEQASAAYMmWy4vEpPwPggEXY2EtcHViLTI4NDAyNTgxMDE0MTE4NjPIAQmoAwHIAwKqBNIBT9BJRRuVYISJd-fb-0pSnEr7rNnJo8yDZyCYQINFimNUQE-owkEoXVZzu-dS81KRZB4SsdU3Tz_42zZNvlUHV8GQvuRgPmImZtm2v2yTtyH2dASJJot8-ZcYy_eIqTAGjkP2lBalTlnoCOlgKBUI-xAh7ZQ6cXUU6RaHyziNzRen6YX7aV_iAb0YdNfuaOeWMI2YBe9xYy3-0PjE7cwMDp74_4FBiXDopZqk0YYiwzTFSrAGPgBa3K6h360jC3OZ48LOPvn9r9Lt1ITK2NzuUX7FgAaarO2X-f_z_OUBoAYhqAemvhuoB5bYG6gHqpuxAqgH_56xAqgH35-xAqgHrb6xAtgHANIIJAiAYRABMgKKAjoLgECAwICAgKCogAJIvf3BOljri7nN2_aKA4AKAfoLAggBgAwB0BUBgBcBshccChgSFHB1Yi0yODQwMjU4MTAxNDExODYzGAAYDA&sigh=p4dKFt52T8c&uach_m=%5BUACH%5D&cid=CAQSTgCa7L7df4xwUHVujsXH2F66vTtJuY0JMzCDUy0RwlGknM5o1hgUj27nZz3JKyLm39Z1qfeU48liOx_XvHXY-00wQ4VbHo9Y1_AGgVhlnRgB&vis=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm9YsVInCwq_kuLG4Eoy4GuHk43hyeVzgbbZa3d16vwPQ6hkEJ5gfvmZT0zHrk; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /favicon-32x32.png HTTP/1.1Host: androiddatahost.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://androiddatahost.com/sdsd3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.378168725.1736909362; _gid=GA1.2.1596410557.1736909362; _gat=1; _ga_L3KCHB9NB2=GS1.2.1736909364.1.0.1736909364.0.0.0; __gads=ID=a9d88aad96a4f337:T=1736909364:RT=1736909364:S=ALNI_MYpTjbATQ96LU0SNgdD42A-b9Szjw; __gpi=UID=00000fb9551bdf9b:T=1736909364:RT=1736909364:S=ALNI_Mb6VpJ5WHmDN-dR3_vNiUnzy0Rz1w; __eoi=ID=561f09b7ce22ff6f:T=1736909364:RT=1736909364:S=AA-AfjZhVpDGU5us2vSioVEh1-JY; FCNEC=%5B%5B%22AKsRol99hD3LJP4ogQhrFGORTThgCSWYsYvMQO49kttl7Ba2whU9zPMsY7gcL92_v7LWe_lY2MfglL7SP6O79Jkuj29fdW0Mf9pbXmhGsQbZEM5ydtrDyP9HZjQ9qAXQQJ70zwCA0TrBnqVvXj96Fi53p6_0pYGLmw%3D%3D%22%5D%5D
Source: global traffic	HTTP traffic detected: GET /android-chrome-192x192.png HTTP/1.1Host: androiddatahost.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://androiddatahost.com/sdsd3Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.378168725.1736909362; _gid=GA1.2.1596410557.1736909362; _gat=1; _ga_L3KCHB9NB2=GS1.2.1736909364.1.0.1736909364.0.0.0; __gads=ID=a9d88aad96a4f337:T=1736909364:RT=1736909364:S=ALNI_MYpTjbATQ96LU0SNgdD42A-b9Szjw; __gpi=UID=00000fb9551bdf9b:T=1736909364:RT=1736909364:S=ALNI_Mb6VpJ5WHmDN-dR3_vNiUnzy0Rz1w; __eoi=ID=561f09b7ce22ff6f:T=1736909364:RT=1736909364:S=AA-AfjZhVpDGU5us2vSioVEh1-JY; FCNEC=%5B%5B%22AKsRol99hD3LJP4ogQhrFGORTThgCSWYsYvMQO49kttl7Ba2whU9zPMsY7gcL92_v7LWe_lY2MfglL7SP6O79Jkuj29fdW0Mf9pbXmhGsQbZEM5ydtrDyP9HZjQ9qAXQQJ70zwCA0TrBnqVvXj96Fi53p6_0pYGLmw%3D%3D%22%5D%5D
Source: global traffic	HTTP traffic detected: GET /favicon-32x32.png HTTP/1.1Host: androiddatahost.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.378168725.1736909362; _gid=GA1.2.1596410557.1736909362; _gat=1; _ga_L3KCHB9NB2=GS1.2.1736909364.1.0.1736909364.0.0.0; __gads=ID=a9d88aad96a4f337:T=1736909364:RT=1736909364:S=ALNI_MYpTjbATQ96LU0SNgdD42A-b9Szjw; __gpi=UID=00000fb9551bdf9b:T=1736909364:RT=1736909364:S=ALNI_Mb6VpJ5WHmDN-dR3_vNiUnzy0Rz1w; __eoi=ID=561f09b7ce22ff6f:T=1736909364:RT=1736909364:S=AA-AfjZhVpDGU5us2vSioVEh1-JY; FCNEC=%5B%5B%22AKsRol99hD3LJP4ogQhrFGORTThgCSWYsYvMQO49kttl7Ba2whU9zPMsY7gcL92_v7LWe_lY2MfglL7SP6O79Jkuj29fdW0Mf9pbXmhGsQbZEM5ydtrDyP9HZjQ9qAXQQJ70zwCA0TrBnqVvXj96Fi53p6_0pYGLmw%3D%3D%22%5D%5D
Source: global traffic	HTTP traffic detected: GET /android-chrome-192x192.png HTTP/1.1Host: androiddatahost.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.378168725.1736909362; _gid=GA1.2.1596410557.1736909362; _gat=1; _ga_L3KCHB9NB2=GS1.2.1736909364.1.0.1736909364.0.0.0; __gads=ID=a9d88aad96a4f337:T=1736909364:RT=1736909364:S=ALNI_MYpTjbATQ96LU0SNgdD42A-b9Szjw; __gpi=UID=00000fb9551bdf9b:T=1736909364:RT=1736909364:S=ALNI_Mb6VpJ5WHmDN-dR3_vNiUnzy0Rz1w; __eoi=ID=561f09b7ce22ff6f:T=1736909364:RT=1736909364:S=AA-AfjZhVpDGU5us2vSioVEh1-JY; FCNEC=%5B%5B%22AKsRol99hD3LJP4ogQhrFGORTThgCSWYsYvMQO49kttl7Ba2whU9zPMsY7gcL92_v7LWe_lY2MfglL7SP6O79Jkuj29fdW0Mf9pbXmhGsQbZEM5ydtrDyP9HZjQ9qAXQQJ70zwCA0TrBnqVvXj96Fi53p6_0pYGLmw%3D%3D%22%5D%5D
Source: global traffic	HTTP traffic detected: GET /getconfig/sodar?sv=200&tid=gda&tv=r20250113&st=env HTTP/1.1Host: ep1.adtrafficquality.googleConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sodar/sodar2.js HTTP/1.1Host: ep2.adtrafficquality.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://androiddatahost.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sodar/sodar2.js HTTP/1.1Host: ep2.adtrafficquality.googleConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sodar/sodar2/232/runner.html HTTP/1.1Host: ep2.adtrafficquality.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://androiddatahost.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://androiddatahost.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eStudio/VersionTab.ulf HTTP/1.1User-Agent: RookIE/1.0Host: 61.143.38.50

Source: chromecache_153.1.dr, chromecache_143.1.dr

String found in binary or memory: return b}QE.F="internal.enableAutoEventOnTimer";var Vb=wa(["data-gtm-yt-inspected-"]),SE=["www.youtube.com","www.youtube-nocookie.com"],TE,UE=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: androiddatahost.com
Source: global traffic	DNS traffic detected: DNS query: cdn.androiddatahost.com
Source: global traffic	DNS traffic detected: DNS query: c0.wp.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: g.bidbrain.app
Source: global traffic	DNS traffic detected: DNS query: cdn.bidbrain.app
Source: global traffic	DNS traffic detected: DNS query: fundingchoicesmessages.google.com
Source: global traffic	DNS traffic detected: DNS query: serve.bidbrain.app
Source: global traffic	DNS traffic detected: DNS query: g4.bidbrain.app
Source: global traffic	DNS traffic detected: DNS query: g6.bidbrain.app
Source: global traffic	DNS traffic detected: DNS query: ep1.adtrafficquality.google
Source: global traffic	DNS traffic detected: DNS query: ep2.adtrafficquality.google

Source: unknown

HTTP traffic detected: POST /rtimp HTTP/1.1Host: g.bidbrain.appConnection: keep-aliveContent-Length: 1979sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://googleads.g.doubleclick.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf

Source: UpdateVerEx.exe, 00000019.00000002.2800364356.0000000000E31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://61.143.38.50/
Source: UpdateVerEx.exe, 00000019.00000002.2804940686.00000000035C0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://61.143.38.50/eStudio/
Source: UpdateVerEx.exe, 00000019.00000002.2800364356.0000000000DF5000.00000004.00000020.00020000.00000000.sdmp, UpdateVerEx.exe, 00000019.00000002.2800364356.0000000000E57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://61.143.38.50/eStudio/VersionTab.ulf
Source: UpdateVerEx.exe, 00000019.00000002.2800364356.0000000000E31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://61.143.38.50/eStudio/VersionTab.ulf$
Source: UpdateVerEx.exe, 00000019.00000002.2800364356.0000000000DF5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://61.143.38.50/eStudio/VersionTab.ulf2
Source: UpdateVerEx.exe, 00000019.00000002.2800364356.0000000000E48000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://61.143.38.50/eStudio/VersionTab.ulf43=W
Source: UpdateVerEx.exe, 00000019.00000002.2800364356.0000000000E31000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://61.143.38.50/eStudio/VersionTab.ulfL
Source: UpdateVerEx.exe, 00000019.00000002.2800364356.0000000000E48000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://61.143.38.50/eStudio/VersionTab.ulffP3QW
Source: UpdateVerEx.exe, 00000019.00000002.2800364356.0000000000E57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://61.143.38.50/eStudio/VersionTab.ulffY
Source: UpdateVerEx.exe, 00000019.00000002.2800364356.0000000000DF5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://61.143.38.50/eStudio/VersionTab.ulfi
Source: PhoenixSuit.exe, 00000010.00000003.1636370017.0000000003310000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://61.143.38.50/ps/index.html
Source: chromecache_196.1.dr, chromecache_206.1.dr	String found in binary or memory: http://google.com
Source: chromecache_196.1.dr, chromecache_186.1.dr, chromecache_194.1.dr, chromecache_206.1.dr	String found in binary or memory: http://googleads.g.doubleclick.net
Source: chromecache_196.1.dr, chromecache_206.1.dr	String found in binary or memory: http://mathiasbynens.be/
Source: chromecache_196.1.dr, chromecache_186.1.dr, chromecache_194.1.dr, chromecache_206.1.dr	String found in binary or memory: http://pagead2.googlesyndication.com
Source: chromecache_158.1.dr, chromecache_164.1.dr, chromecache_141.1.dr, chromecache_183.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_189.1.dr, chromecache_159.1.dr	String found in binary or memory: http://www.broofa.com
Source: PhoenixDaemon.exe, 00000011.00000000.1642876919.000000000049D000.00000002.00000001.01000000.0000000A.sdmp	String found in binary or memory: http://www.openssl.org/support/faq.html
Source: PhoenixDaemon.exe, 00000011.00000000.1642876919.000000000049D000.00000002.00000001.01000000.0000000A.sdmp	String found in binary or memory: http://www.openssl.org/support/faq.htmlRAND
Source: chromecache_174.1.dr, chromecache_223.1.dr	String found in binary or memory: https://adsense.com.
Source: chromecache_143.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_176.1.dr, chromecache_190.1.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_172.1.dr	String found in binary or memory: https://androiddatahost.com
Source: chromecache_153.1.dr, chromecache_143.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_196.1.dr, chromecache_206.1.dr	String found in binary or memory: https://cdn.ampproject.org/amp4ads-host-v0.js
Source: chromecache_196.1.dr, chromecache_206.1.dr	String found in binary or memory: https://cdn.ampproject.org/rtv/$
Source: chromecache_196.1.dr, chromecache_206.1.dr	String found in binary or memory: https://cse.google.com/cse.js
Source: chromecache_189.1.dr, chromecache_159.1.dr	String found in binary or memory: https://developers.google.com/ad-placement
Source: chromecache_210.1.dr, chromecache_161.1.dr, chromecache_160.1.dr	String found in binary or memory: https://ep1.adtrafficquality.google/bg/
Source: chromecache_196.1.dr, chromecache_206.1.dr	String found in binary or memory: https://ep1.adtrafficquality.google/getconfig/sodar
Source: chromecache_161.1.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=231
Source: chromecache_210.1.dr, chromecache_160.1.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=232
Source: chromecache_161.1.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/sodar?id=sodar2&v=231
Source: chromecache_210.1.dr, chromecache_160.1.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/sodar?id=sodar2&v=232
Source: chromecache_160.1.dr	String found in binary or memory: https://ep2.adtrafficquality.google
Source: chromecache_210.1.dr, chromecache_160.1.dr	String found in binary or memory: https://ep2.adtrafficquality.google/sodar/
Source: chromecache_196.1.dr, chromecache_206.1.dr	String found in binary or memory: https://ep2.adtrafficquality.google/sodar/$
Source: chromecache_196.1.dr, chromecache_206.1.dr	String found in binary or memory: https://ep3.adtrafficquality.google/ivt/worklet/caw.js
Source: chromecache_200.1.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_206.1.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Google
Source: chromecache_206.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Google
Source: chromecache_200.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v62/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RP
Source: chromecache_196.1.dr, chromecache_206.1.dr	String found in binary or memory: https://fundingchoicesmessages.google.com/i/$
Source: chromecache_194.1.dr, chromecache_206.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_196.1.dr, chromecache_206.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/$
Source: chromecache_143.1.dr, chromecache_146.1.dr, chromecache_145.1.dr, chromecache_189.1.dr, chromecache_159.1.dr, chromecache_195.1.dr, chromecache_156.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_210.1.dr, chromecache_161.1.dr, chromecache_160.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/
Source: chromecache_196.1.dr, chromecache_206.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/getconfig/sodar
Source: chromecache_141.1.dr, chromecache_183.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=colleague-executed&name=
Source: chromecache_141.1.dr, chromecache_183.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=
Source: chromecache_141.1.dr, chromecache_183.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&name=invalid_geo&context=10
Source: chromecache_141.1.dr, chromecache_183.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=extra&rnd=
Source: chromecache_141.1.dr, chromecache_183.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&lidartos
Source: chromecache_141.1.dr, chromecache_183.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&start&control&fle=1&s
Source: chromecache_141.1.dr, chromecache_183.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-fallback2
Source: chromecache_141.1.dr, chromecache_183.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-later2
Source: chromecache_141.1.dr, chromecache_183.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-pagehide2
Source: chromecache_141.1.dr, chromecache_183.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-start2
Source: chromecache_141.1.dr, chromecache_183.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=reach&proto=
Source: chromecache_211.1.dr, chromecache_151.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=fccs&
Source: chromecache_174.1.dr, chromecache_223.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=plmetrics
Source: chromecache_186.1.dr, chromecache_194.1.dr, chromecache_189.1.dr, chromecache_159.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=rcs_internal
Source: chromecache_161.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=231
Source: chromecache_210.1.dr, chromecache_160.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=232
Source: chromecache_153.1.dr, chromecache_143.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_196.1.dr, chromecache_206.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/html/$
Source: chromecache_206.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/$
Source: chromecache_196.1.dr, chromecache_186.1.dr, chromecache_194.1.dr, chromecache_206.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
Source: chromecache_196.1.dr, chromecache_206.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=
Source: chromecache_196.1.dr, chromecache_206.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=$
Source: chromecache_196.1.dr, chromecache_186.1.dr, chromecache_174.1.dr, chromecache_223.1.dr, chromecache_194.1.dr, chromecache_206.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/err_rep.js
Source: chromecache_196.1.dr, chromecache_174.1.dr, chromecache_223.1.dr, chromecache_206.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/logging_library.js
Source: chromecache_206.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/managed/js/adsense/$
Source: chromecache_196.1.dr, chromecache_206.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping
Source: chromecache_206.1.dr, chromecache_189.1.dr, chromecache_159.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping?e=1
Source: chromecache_201.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?
Source: chromecache_161.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=231
Source: chromecache_210.1.dr, chromecache_160.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=232
Source: chromecache_183.1.dr	String found in binary or memory: https://publickeyservice.msmt.gcp.privacysandboxservices.com
Source: chromecache_196.1.dr, chromecache_206.1.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/car.js
Source: chromecache_196.1.dr, chromecache_206.1.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/cocar.js
Source: chromecache_196.1.dr, chromecache_206.1.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Source: chromecache_153.1.dr, chromecache_143.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_190.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_176.1.dr, chromecache_190.1.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_153.1.dr, chromecache_143.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_160.1.dr	String found in binary or memory: https://tpc.googlesyndication.com
Source: chromecache_210.1.dr, chromecache_160.1.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/
Source: chromecache_196.1.dr, chromecache_206.1.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/$
Source: chromecache_176.1.dr, chromecache_190.1.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_176.1.dr, chromecache_190.1.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_176.1.dr, chromecache_190.1.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_160.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_176.1.dr, chromecache_190.1.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_174.1.dr, chromecache_223.1.dr	String found in binary or memory: https://www.google.com/adsense
Source: chromecache_196.1.dr, chromecache_206.1.dr	String found in binary or memory: https://www.google.com/adsense/search/async-ads.js
Source: chromecache_222.1.dr	String found in binary or memory: https://www.google.com/pagead/drt/ui
Source: chromecache_196.1.dr, chromecache_210.1.dr, chromecache_206.1.dr, chromecache_161.1.dr, chromecache_160.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: chromecache_196.1.dr, chromecache_206.1.dr	String found in binary or memory: https://www.google.com/s2/favicons?sz=64&domain_url=
Source: chromecache_141.1.dr, chromecache_153.1.dr, chromecache_143.1.dr, chromecache_183.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_141.1.dr, chromecache_183.1.dr	String found in binary or memory: https://www.googleadservices.com/.well-known/private-aggregation/report-shared-storage
Source: chromecache_141.1.dr, chromecache_183.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/managed/js/activeview/
Source: chromecache_143.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_176.1.dr, chromecache_190.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_141.1.dr, chromecache_183.1.dr	String found in binary or memory: https://www.googletagservices.com/agrp/
Source: chromecache_206.1.dr	String found in binary or memory: https://www.gstatic.com
Source: chromecache_196.1.dr, chromecache_206.1.dr	String found in binary or memory: https://www.gstatic.com/prose/protected/$
Source: chromecache_153.1.dr, chromecache_143.1.dr	String found in binary or memory: https://www.merchant-center-analytics.goog

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

System Summary

Downloads suspicious files via Chrome

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File dump: C:\Users\user\Downloads\PhoenixSuit_V1.08.zip (copy)

Jump to dropped file

Source: UpdateVerEx.exe, 00000019.00000000.2052050617.00000000006BA000.00000002.00000001.01000000.0000001D.sdmp

Binary or memory string: {b.vbPvb

Source: classification engine

Classification label: mal52.win@39/149@48/20

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Mutant created: \Sessions\1\BaseNamedObjects\E1513390-B092-448d-949E-9ACEC74F33CE
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7304:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7988:120:WilError_03
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:4960:120:WilError_03

Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe

File created: C:\Users\user\AppData\Local\Temp\adb.log

Jump to behavior

Source: C:\Windows\System32\rundll32.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown

Process created: C:\Windows\System32\rundll32.exe C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1972,i,11324115554718533007,5483598246334832712,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://androiddatahost.com/sdsd3"
Source: unknown	Process created: C:\Windows\System32\rundll32.exe C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
Source: unknown	Process created: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe "C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe"
Source: unknown	Process created: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe "C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe"
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Process created: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe start-server
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe	Process created: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe adb fork-server server
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Process created: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\adb.exe C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\adb.exe devices
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\adb.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe "C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe"
Source: unknown	Process created: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe "C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe"
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: unknown	Process created: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixInstall.exe "C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixInstall.exe"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1972,i,11324115554718533007,5483598246334832712,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Process created: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe start-server	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Process created: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\adb.exe C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\adb.exe devices	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe	Process created: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe adb fork-server server	Jump to behavior

Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Section loaded: msimg32.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Section loaded: oledlg.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Section loaded: imgdecode64.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Section loaded: imgdecode32.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Section loaded: mfc42.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe	Section loaded: adbwinapi.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe	Section loaded: adbwinusbapi.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe	Section loaded: winusb.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe	Section loaded: adbwinapi.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe	Section loaded: adbwinusbapi.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe	Section loaded: winusb.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe	Section loaded: devobj.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\adb.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\adb.exe	Section loaded: adbwinapi.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\adb.exe	Section loaded: adbwinusbapi.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\adb.exe	Section loaded: winusb.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\adb.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Section loaded: msimg32.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Section loaded: oledlg.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Section loaded: lua5.1.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Section loaded: mfc42.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe	Section loaded: adbwinapi.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe	Section loaded: adbwinusbapi.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe	Section loaded: winusb.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixInstall.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixInstall.exe	Section loaded: msimg32.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixInstall.exe	Section loaded: oledlg.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixInstall.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixInstall.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixInstall.exe	Section loaded: dwmapi.dll	Jump to behavior

Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe

File opened: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.cfg

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe

Window detected: Number of UI elements: 17

Source:	Binary string: d:\winners\eStudio\eTool300\StudioAssist\UpdateVer\UpdateVer\Release\UpdateVer.pdb source: UpdateVerEx.exe, 00000019.00000000.2052050617.00000000006BA000.00000002.00000001.01000000.0000001D.sdmp
Source:	Binary string: c:\code\android\donut\development\host\windows\usb\winusb\objfre_wxp_x86\i386\AdbWinUsbApi.pdb source: PhoenixDaemon.exe, 00000011.00000002.1700222100.0000000073D51000.00000020.00000001.01000000.0000001B.sdmp
Source:	Binary string: c:\code\android\donut\development\host\windows\usb\api\objfre_wxp_x86\i386\AdbWinApi.pdb(P source: PhoenixDaemon.exe, 00000011.00000002.1700636960.0000000073DE1000.00000020.00000001.01000000.00000019.sdmp
Source:	Binary string: c:\code\android\donut\development\host\windows\usb\api\objfre_wxp_x86\i386\AdbWinApi.pdb source: PhoenixDaemon.exe, 00000011.00000002.1700636960.0000000073DE1000.00000020.00000001.01000000.00000019.sdmp

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixInstall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixInstall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixInstall.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe	Window / User API: threadDelayed 557			Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe	Window / User API: threadDelayed 9423			Jump to behavior

Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe TID: 7636	Thread sleep count: 557 > 30	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe TID: 7636	Thread sleep time: -557000s >= -30000s	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe TID: 7636	Thread sleep count: 9423 > 30	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe TID: 7636	Thread sleep time: -9423000s >= -30000s	Jump to behavior

Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe	Last function: Thread delayed
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: PhoenixDaemon.exe, 00000013.00000002.2800862777.0000000000768000.00000004.00000020.00020000.00000000.sdmp, UpdateVerEx.exe, 00000019.00000002.2800364356.0000000000E5F000.00000004.00000020.00020000.00000000.sdmp, UpdateVerEx.exe, 00000019.00000002.2800364356.0000000000E31000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: PhoenixDaemon.exe, 00000011.00000002.1699586898.00000000007DE000.00000004.00000020.00020000.00000000.sdmp, PhoenixDaemon.exe, 00000013.00000002.2800862777.0000000000768000.00000004.00000020.00020000.00000000.sdmp, adb.exe, 00000014.00000002.1705283881.000000000086E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Process created: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe start-server	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Process created: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\adb.exe C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\adb.exe devices	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe	Process created: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe adb fork-server server	Jump to behavior

Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	11 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	1 Registry Run Keys / Startup Folder	1 Virtualization/Sandbox Evasion	LSASS Memory	1 Virtualization/Sandbox Evasion	Remote Desktop Protocol	Data from Removable Media	1 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 DLL Side-Loading	11 Process Injection	Security Account Manager	1 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Rundll32	NTDS	1 Application Window Discovery	Distributed Component Object Model	Input Capture	4 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	12 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://androiddatahost.com/sdsd3	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
http://61.143.38.50/eStudio/VersionTab.ulffP3QW	0%	Avira URL Cloud	safe
https://androiddatahost.com/favicon-32x32.png	0%	Avira URL Cloud	safe
https://androiddatahost.com/wp-content/plugins/wp-rocket/assets/js/wpr-beacon.min.js	0%	Avira URL Cloud	safe
https://g4.bidbrain.app/rtimp?sid=546da6d0-d2eb-11ef-ad61-06f8d311b573&d=androiddatahost.com&cr=ext_download_prot_smrtsp&gid=&im=Pacs0y_h8AoSpSdmuFfjA2-Jh85D8lauvwtIHB_1GiprXZB5z-_E3J1H5hUXQDZEsvVW7JVWUdGMa_U0C5_tkb4mP1ZlEnp9SQCOUT9ZGqvUPKVQlnmpO-een_K5kYXADLIbU7cZM4adhhdJ64sqRb0XuCC1NIhymkr9Rdf6tXrmlHUvVik_ArV3ViEcLerL2da9b1cfNz3_0XekAPi53bNl_N0IIvDnrrUavtgn0hCj0v3n5UVbx3vj68zJh5EwhSyMCcqSgdvmBMtFnMUY0fIc3kCwuYNWcv9gb37hXO2aW-4ok0VCS57r6DU_Rp5Cr-rj3hrIb1i1cgEBLvfU7WGsD1UHx0L5uBiNGZ2yMVsuwdLN2VS93UYZKceGIhWo5t2oNt_gGhoxejNAlTmutQ&p=Z4ciNAAJHGgIEd-8ABtcFJi2RsjNQuKdC0LPiQ&r=1086721484&a=ipv4&ow=1280&oh=984&iw=336&ih=280&tzof=300&tz=America%2FNew_York&pxr=1&cts=1736909368.637&cto=2424&edx=9&furl=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-2840258101411863%26output%3Dhtml%26h%3D280%26slotname%3D8499285160%26adk%3D3371522416%26adf%3D601265536%26pi%3Dt.ma~as.8499285160%26w%3D336%26abgtt%3D6%26lmt%3D1736881262%26format%3D336x280%26url%3Dhttps%253A%252F%252Fandroiddatahost.com%252Fsdsd3%26wgl%3D1%26uach%3DWyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.%26dt%3D1736909361578%26bpp%3D1%26bdt%3D1279%26idt%3D1576%26shv%3Dr20250113%26mjsv%3Dm202501080201%26ptt%3D9%26saldr%3Daa%26abxe%3D1%26cookie_enabled%3D1%26eoidce%3D1%26prev_fmts%3D0x0%252C856x280%252C336x280%252C856x280%26nras%3D1%26correlator%3D8040805227545%26frm%3D20%26pv%3D1%26u_tz%3D-300%26u_his%3D1%26u_h%3D1024%26u_w%3D1280%26u_ah%3D984%26u_aw%3D1280%26u_cd%3D24%26u_sd%3D1%26dmc%3D8%26adx%3D464%26ady%3D2039%26biw%3D1263%26bih%3D907%26scr_x%3D0%26scr_y%3D0%26eid%3D42533203%252C31089542%252C31089715%252C95350245%252C31089639%26oid%3D2%26pvsid%3D539208937878820%26tmod%3D1359503699%26uas%3D0%26nvt%3D1%26fc%3D1920%26brdim%3D0%252C0%252C0%252C0%252C1280%252C0%252C1280%252C984%252C1280%252C907%26vis%3D1%26rsz%3D%257C%257CoeEbr%257C%26abl%3DCS%26pfx%3D0%26fu%3D0%26bc%3D31%26bz%3D1%26td%3D1%26tdf%3D0%26psd%3DW251bGwsbnVsbCxudWxsLDNd%26nt%3D1%26ifi%3D5%26uci%3Da!5%26btvi%3D2%26fsb%3D1%26dtd%3D1579&ctp=creative&cnm=ext_download_prot_smrtsp	0%	Avira URL Cloud	safe
https://g4.bidbrain.app/rtimp?sid=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf&d=androiddatahost.com&cr=ext_download_prot_smrtsp&gid=&im=IjHuoKH9nmywyVTiGioDNCAuLUDL12hOuGl7bgdSfVyyVYBTz7Zsr7uuTl8TJIk5dWf81UH-AsKoN3EadDwjUBJQuQQlVyA963QpKBLhZSvMIbHPvJlfiVhzqVlZKwqSew6ekPvMJQivc9sVYYFqAv999a3EJ_hMi7vf7H_2ZGtihHOTvM6iqjMxqmJD3Q8Seu9mRdQ1GLakJW_Pj4XXdwzV5SezfbVTEvG0p-7i6Sc2AI8XNTkJMEsw2f9vhGucJwsBt9wx-rXfqKI6RUW5LPjCc9zy15g9MVC09kM3Iuwfi6vTIytAZgtIUykHXKylA3w3k2pnPUspiV_ZsBroYyDkOWAaHeeLepaoKhBX4c1zj-q9IHbhhARl1DuhJqnQN6FcAcEdSd5az2KddOvO2mdZRN2LwYifC0OPtebWzdSWf9-50JeiZHpbeeiGCfeO&p=Z4ciNAAIcZ8IEctkAAklrGRc4Ee14pU5y6FM0w&r=1214026116&a=ipv4&ow=1280&oh=984&iw=856&ih=280&tzof=300&tz=America%2FNew_York&pxr=1&cts=1736909368.676&cto=2444&edx=9&furl=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-2840258101411863%26output%3Dhtml%26h%3D280%26slotname%3D2448584244%26adk%3D39937659%26adf%3D2782902954%26pi%3Dt.ma~as.2448584244%26w%3D856%26abgtt%3D6%26fwrn%3D4%26fwrnh%3D100%26lmt%3D1736881262%26rafmt%3D1%26format%3D856x280%26url%3Dhttps%253A%252F%252Fandroiddatahost.com%252Fsdsd3%26fwr%3D0%26fwrattr%3Dtrue%26rpe%3D1%26resp_fmts%3D3%26wgl%3D1%26uach%3DWyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.%26dt%3D1736909361575%26bpp%3D2%26bdt%3D1276%26idt%3D1551%26shv%3Dr20250113%26mjsv%3Dm202501080201%26ptt%3D9%26saldr%3Daa%26abxe%3D1%26cookie_enabled%3D1%26eoidce%3D1%26prev_fmts%3D0x0%26nras%3D1%26correlator%3D8040805227545%26frm%3D20%26pv%3D1%26u_tz%3D-300%26u_his%3D1%26u_h%3D1024%26u_w%3D1280%26u_ah%3D984%26u_aw%3D1280%26u_cd%3D24%26u_sd%3D1%26dmc%3D8%26adx%3D204%26ady%3D186%26biw%3D1263%26bih%3D907%26scr_x%3D0%26scr_y%3D0%26eid%3D42533203%252C31089542%252C31089715%252C95350245%252C31089639%26oid%3D2%26pvsid%3D539208937878820%26tmod%3D1359503699%26uas%3D0%26nvt%3D1%26fc%3D1920%26brdim%3D0%252C0%252C0%252C0%252C1280%252C0%252C1280%252C984%252C1280%252C907%26vis%3D1%26rsz%3D%257C%257CoeE%257C%26abl%3DCS%26pfx%3D0%26fu%3D128%26bc%3D31%26bz%3D1%26td%3D1%26tdf%3D0%26psd%3DW251bGwsbnVsbCxudWxsLDNd%26nt%3D1%26ifi%3D2%26uci%3Da!2%26fsb%3D1%26dtd%3D1556&ctp=creative&cnm=ext_download_prot_smrtsp	0%	Avira URL Cloud	safe
https://androiddatahost.com/wp-content/uploads/PhoenixSuit_V1.08.zip	0%	Avira URL Cloud	safe
https://g4.bidbrain.app/rtimp?sid=546ad295-d2eb-11ef-959f-d6c599cbf4fc&d=androiddatahost.com&cr=ext_download_prot_smrtsp&gid=&im=WvqEWoub5i7-wbFq6SzlnF9uEQ6-DRvG4th9BOzKDOXmRNHtLMqI8kI53Z0ViZ8r_52kOqtFAIbK-7HqzahBdWbt4T0elE4Hsd_a2y7MgSAiHTmiImHD3pSXu5MOhUuxBE-RqPnKDqDUkf8jHa5t_x92d59EQIjgSDUm_W4POLV07Q-9CZ_IQXj8Bp87ChlsADIHCAhvgCZWQLsS_6cU6pLf0QamUAcXq869S2ZCRcQ-nPp8Y8Hx9WOBweupX6rsR4kij69CkBTzczNgD68KrydLsmLNk6mwzd3M7lpIGsvbgLHZROb3bSQix0iN79BCOHKdDjp3k1Zg3XOc0tiN74JM6M-WdxX1zuD9Kj8oTMPFzs49CGykzdU80FMi_Qs3UQPmrIXXBGxx3SwIppw2PA&p=Z4ciNAAI1QUIEdThAB5MR83lxaWzSatV77M14g&r=1125375760&a=ipv4&ow=1280&oh=984&iw=856&ih=280&tzof=300&tz=America%2FNew_York&pxr=1&cts=1736909368.605&cto=2459&edx=10&furl=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-2840258101411863%26output%3Dhtml%26h%3D280%26slotname%3D1589304026%26adk%3D2488830594%26adf%3D2972800098%26pi%3Dt.ma~as.1589304026%26w%3D856%26abgtt%3D6%26fwrn%3D4%26fwrnh%3D100%26lmt%3D1736881262%26rafmt%3D1%26format%3D856x280%26url%3Dhttps%253A%252F%252Fandroiddatahost.com%252Fsdsd3%26fwr%3D0%26fwrattr%3Dtrue%26rpe%3D1%26resp_fmts%3D3%26wgl%3D1%26uach%3DWyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.%26dt%3D1736909361577%26bpp%3D1%26bdt%3D1279%26idt%3D1568%26shv%3Dr20250113%26mjsv%3Dm202501080201%26ptt%3D9%26saldr%3Daa%26abxe%3D1%26cookie_enabled%3D1%26eoidce%3D1%26prev_fmts%3D0x0%252C856x280%252C336x280%26nras%3D1%26correlator%3D8040805227545%26frm%3D20%26pv%3D1%26u_tz%3D-300%26u_his%3D1%26u_h%3D1024%26u_w%3D1280%26u_ah%3D984%26u_aw%3D1280%26u_cd%3D24%26u_sd%3D1%26dmc%3D8%26adx%3D204%26ady%3D1649%26biw%3D1263%26bih%3D907%26scr_x%3D0%26scr_y%3D0%26eid%3D42533203%252C31089542%252C31089715%252C95350245%252C31089639%26oid%3D2%26pvsid%3D539208937878820%26tmod%3D1359503699%26uas%3D0%26nvt%3D1%26fc%3D1920%26brdim%3D0%252C0%252C0%252C0%252C1280%252C0%252C1280%252C984%252C1280%252C907%26vis%3D1%26rsz%3D%257C%257CoeEbr%257C%26abl%3DCS%26pfx%3D0%26fu%3D128%26bc%3D31%26bz%3D1%26td%3D1%26tdf%3D0%26psd%3DW251bGwsbnVsbCxudWxsLDNd%26nt%3D1%26ifi%3D4%26uci%3Da!4%26btvi%3D1%26fsb%3D1%26dtd%3D1571&ctp=creative&cnm=ext_download_prot_smrtsp	0%	Avira URL Cloud	safe
http://61.143.38.50/eStudio/VersionTab.ulffY	0%	Avira URL Cloud	safe
https://g4.bidbrain.app/rtimp?sid=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f&d=androiddatahost.com&cr=ext_download_prot_smrtsp&gid=&im=q547IniEp1qY7OEg0PE-zvI7c4TTbyJ9yUbJXX9aXRRFZ2RSaC1aqKVcNwFLzvoOUSB1Cq-kKAVCZMCO8wGiXvdmW_R_lhWj9VZ0BXYdLq3CVfee3Dl8WI3WkDd6zz6cgPeOrWRQd0pYTBtp6b-MEhqkYNKcIqKwWY9oCnbEV53vVc0S-miSf-21MKIOFFWwwrtgyKpTFmSAzSgQs0FZTJxX5Gsm3mrnNfhxWN0Pw1JdgjYx4A0MtW9X9sFmXm843WGJGXK0aLApHA07DzpbVdhE2OFP0N5Ku5qSpfS_KMrn0gcgzJWCemoSEDAXtqiudxnIdUJXflbA_NEbsxnE161AqUOD5U2bGvzX9q0umM_UPOpSxsZxgkmK5Rd_E0400H-5SWuxjHpFtYcXu8P-aYhdwh-QT38DroSKr_E8gRGeWPVy9UB5x_1996Dl-nvO&p=Z4ciNAAIY0EIEd8IAAfB0JS4R6VqDmLSSExu6A&r=698754296&a=ipv4&ow=1280&oh=984&iw=0&ih=0&tzof=300&tz=America%2FNew_York&pxr=1&cts=1736909368.576&cto=1552&edx=7&furl=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fhtml%2Fr20250113%2Fr20190131%2Fzrt_lookup_fy2021.html&ctp=creative&cnm=ext_download_prot_smrtsp	0%	Avira URL Cloud	safe
https://g4.bidbrain.app/rtimp?sid=546afe47-d2eb-11ef-ad78-a23bd1412fc2&d=androiddatahost.com&cr=ext_download_prot_smrtsp&gid=&im=hAI2KqFVzEgluZhAFrsrWfd-Wm5J9P0-DIF3OWjFomhzv7esNBBwxT-MVRciluG1Em3k-v7IwStlOhtk7jcv6I0NHULMTqaBvQGCBiSPrhm3tzFUMiTH8VVWTByXhtrRPdhdeLwaNKNsq-s8vFkx5w3t-HXQd-4TJbUzt0wLn79lA8u7bdlg2XViQ0oaQzFpJILJcIMRGdSYKDQX3H8RvJGWs8VlgCgz2d6yebS_XHRc0BE77BrYpBTdb8j5bVSgE-E-6SJs35W-rpjWlFSxtDhI0W2vjAEmOyPffbeWt3-FLCepBF5SL3rC83uQ5acUP-y6vtSV-nKF2-LJDQW8PQtx4YCry_iFzAYflfyfaTjhOtwOzraXWnau_Q2n6euY2JfE1c1uK8BD98tLjDnouA&p=Z4ciNAAIY0MIEd8IAAfB0JWq2MZ5niF8kccdvQ&r=1466544634&a=ipv4&ow=1280&oh=984&iw=0&ih=0&tzof=300&tz=America%2FNew_York&pxr=1&cts=1736909368.697&cto=1556&edx=7&furl=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fhtml%2Fr20250113%2Fr20190131%2Fzrt_lookup_fy2021.html%23RS-2-%26adk%3D1812271804%26client%3Dca-pub-2840258101411863%26fa%3D4%26ifi%3D8%26uci%3Da!8%26btvi%3D4&ctp=creative&cnm=ext_download_prot_smrtsp	0%	Avira URL Cloud	safe
http://61.143.38.50/eStudio/VersionTab.ulfi	0%	Avira URL Cloud	safe
http://61.143.38.50/eStudio/VersionTab.ulf43=W	0%	Avira URL Cloud	safe
http://61.143.38.50/eStudio/VersionTab.ulf	0%	Avira URL Cloud	safe
http://61.143.38.50/ps/index.html	0%	Avira URL Cloud	safe
http://61.143.38.50/eStudio/VersionTab.ulfL	0%	Avira URL Cloud	safe
http://61.143.38.50/eStudio/VersionTab.ulf$	0%	Avira URL Cloud	safe
http://61.143.38.50/eStudio/	0%	Avira URL Cloud	safe
https://g4.bidbrain.app/rtimp?sid=546ef294-d2eb-11ef-94e6-12087e0c0b48&d=androiddatahost.com&cr=ext_download_prot_smrtsp&gid=&im=qDSwbOIr0D22sbu8qzOWzzsgTAyjXaYD0Wjekk-CBtqkqW2Giw8aaBY9H03jsjUd--RPJIQCc8isfXRoLz_JxXvWOsgFLQ0LXQCV_vRO7WZso6I-8X5nh-iPSXKXhlSitp-6I3vA0zWdpJtuEiSGRrUctJZaV7UE5ikGD2wk5NsDkmfe7LpIf9AMxB5x2ZUweOrir-bu-a3rsExFJzVnbf5fhQeei_SdD-FHZGzKvArczRnV44Yv9tLz80gy1aR-GZE2cRmIEW-HaNIcITlS40JDTcYNzulopQueEojNVc9cKUgiOvbjBagX0YVWcjCVxnLXYplgeAgGA8zT1qOiHoyY_vKGQOPnfCST-N1GlBWQMxxI8wxrHXg6kgSfDts7oessD_HNRJEmspPirMn3sw&p=Z4ciNAAIkn8IEdNXAAu0Q6gnw-wgAu8T7McH4w&r=1203031400&a=ipv4&ow=1280&oh=984&iw=336&ih=280&tzof=300&tz=America%2FNew_York&pxr=1&cts=1736909368.656&cto=2466&edx=9&furl=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-2840258101411863%26output%3Dhtml%26h%3D280%26slotname%3D8499285160%26adk%3D978467678%26adf%3D2230146881%26pi%3Dt.ma~as.8499285160%26w%3D336%26abgtt%3D6%26lmt%3D1736881262%26format%3D336x280%26url%3Dhttps%253A%252F%252Fandroiddatahost.com%252Fsdsd3%26wgl%3D1%26uach%3DWyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.%26dt%3D1736909361577%26bpp%3D1%26bdt%3D1278%26idt%3D1558%26shv%3Dr20250113%26mjsv%3Dm202501080201%26ptt%3D9%26saldr%3Daa%26abxe%3D1%26cookie_enabled%3D1%26eoidce%3D1%26prev_fmts%3D0x0%252C856x280%26nras%3D1%26correlator%3D8040805227545%26frm%3D20%26pv%3D1%26u_tz%3D-300%26u_his%3D1%26u_h%3D1024%26u_w%3D1280%26u_ah%3D984%26u_aw%3D1280%26u_cd%3D24%26u_sd%3D1%26dmc%3D8%26adx%3D464%26ady%3D639%26biw%3D1263%26bih%3D907%26scr_x%3D0%26scr_y%3D0%26eid%3D42533203%252C31089542%252C31089715%252C95350245%252C31089639%26oid%3D2%26pvsid%3D539208937878820%26tmod%3D1359503699%26uas%3D0%26nvt%3D1%26fc%3D1920%26brdim%3D0%252C0%252C0%252C0%252C1280%252C0%252C1280%252C984%252C1280%252C907%26vis%3D1%26rsz%3D%257C%257CoeE%257C%26abl%3DCS%26pfx%3D0%26fu%3D0%26bc%3D31%26bz%3D1%26td%3D1%26tdf%3D0%26psd%3DW251bGwsbnVsbCxudWxsLDNd%26nt%3D1%26ifi%3D3%26uci%3Da!3%26fsb%3D1%26dtd%3D1564&ctp=creative&cnm=ext_download_prot_smrtsp	0%	Avira URL Cloud	safe
https://androiddatahost.com	0%	Avira URL Cloud	safe
http://61.143.38.50/eStudio/VersionTab.ulf2	0%	Avira URL Cloud	safe
http://61.143.38.50/	0%	Avira URL Cloud	safe
https://androiddatahost.com/android-chrome-192x192.png	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
c0.wp.com	192.0.77.37	true	false	high
androidatahost.b-cdn.net	169.150.236.105	true	false	unknown
googleads.g.doubleclick.net	142.250.184.226	true	false	high
www3.l.google.com	216.58.212.174	true	false	high
ep1.adtrafficquality.google	216.58.206.34	true	false	high
cdn.bidbrain.app	104.21.80.92	true	false	high
androiddatahost.com	192.124.249.38	true	false	high
www.google.com	142.250.186.36	true	false	high
g4.bidbrain.app	34.8.123.242	true	false	high
ep2.adtrafficquality.google	142.250.185.97	true	false	high
serve.bidbrain.app	172.67.176.164	true	false	high
g.bidbrain.app	172.67.176.164	true	false	high
cdn.androiddatahost.com	unknown	unknown	false	unknown
g6.bidbrain.app	unknown	unknown	false	high
fundingchoicesmessages.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2840258101411863&output=html&adk=1812271804&adf=3025194257&abgtt=6&lmt=1736881262&plat=9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&plas=174x816_l%7C193x816_r&format=0x0&url=https%3A%2F%2Fandroiddatahost.com%2Fsdsd3&pra=5&wgl=1&aihb=0&aiof=3&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~3~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aicel=33~38&aifxl=29_18~30_19&aiixl=29_5~30_6&aiict=1&aiapm=0.2&aiapmi=0.33938&aief=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736909361571&bpp=4&bdt=1272&idt=1483&shv=r20250113&mjsv=m202501080201&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=8040805227545&frm=20&pv=2&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533203%2C31089542%2C31089715%2C95350245%2C31089639&oid=2&pvsid=539208937878820&tmod=1359503699&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=1550	false		high
https://googleads.g.doubleclick.net/pagead/drt/s?v=r20120211	false		high
https://g4.bidbrain.app/rtimp?sid=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf&d=androiddatahost.com&cr=ext_download_prot_smrtsp&gid=&im=IjHuoKH9nmywyVTiGioDNCAuLUDL12hOuGl7bgdSfVyyVYBTz7Zsr7uuTl8TJIk5dWf81UH-AsKoN3EadDwjUBJQuQQlVyA963QpKBLhZSvMIbHPvJlfiVhzqVlZKwqSew6ekPvMJQivc9sVYYFqAv999a3EJ_hMi7vf7H_2ZGtihHOTvM6iqjMxqmJD3Q8Seu9mRdQ1GLakJW_Pj4XXdwzV5SezfbVTEvG0p-7i6Sc2AI8XNTkJMEsw2f9vhGucJwsBt9wx-rXfqKI6RUW5LPjCc9zy15g9MVC09kM3Iuwfi6vTIytAZgtIUykHXKylA3w3k2pnPUspiV_ZsBroYyDkOWAaHeeLepaoKhBX4c1zj-q9IHbhhARl1DuhJqnQN6FcAcEdSd5az2KddOvO2mdZRN2LwYifC0OPtebWzdSWf9-50JeiZHpbeeiGCfeO&p=Z4ciNAAIcZ8IEctkAAklrGRc4Ee14pU5y6FM0w&r=1214026116&a=ipv4&ow=1280&oh=984&iw=856&ih=280&tzof=300&tz=America%2FNew_York&pxr=1&cts=1736909368.676&cto=2444&edx=9&furl=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-2840258101411863%26output%3Dhtml%26h%3D280%26slotname%3D2448584244%26adk%3D39937659%26adf%3D2782902954%26pi%3Dt.ma~as.2448584244%26w%3D856%26abgtt%3D6%26fwrn%3D4%26fwrnh%3D100%26lmt%3D1736881262%26rafmt%3D1%26format%3D856x280%26url%3Dhttps%253A%252F%252Fandroiddatahost.com%252Fsdsd3%26fwr%3D0%26fwrattr%3Dtrue%26rpe%3D1%26resp_fmts%3D3%26wgl%3D1%26uach%3DWyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.%26dt%3D1736909361575%26bpp%3D2%26bdt%3D1276%26idt%3D1551%26shv%3Dr20250113%26mjsv%3Dm202501080201%26ptt%3D9%26saldr%3Daa%26abxe%3D1%26cookie_enabled%3D1%26eoidce%3D1%26prev_fmts%3D0x0%26nras%3D1%26correlator%3D8040805227545%26frm%3D20%26pv%3D1%26u_tz%3D-300%26u_his%3D1%26u_h%3D1024%26u_w%3D1280%26u_ah%3D984%26u_aw%3D1280%26u_cd%3D24%26u_sd%3D1%26dmc%3D8%26adx%3D204%26ady%3D186%26biw%3D1263%26bih%3D907%26scr_x%3D0%26scr_y%3D0%26eid%3D42533203%252C31089542%252C31089715%252C95350245%252C31089639%26oid%3D2%26pvsid%3D539208937878820%26tmod%3D1359503699%26uas%3D0%26nvt%3D1%26fc%3D1920%26brdim%3D0%252C0%252C0%252C0%252C1280%252C0%252C1280%252C984%252C1280%252C907%26vis%3D1%26rsz%3D%257C%257CoeE%257C%26abl%3DCS%26pfx%3D0%26fu%3D128%26bc%3D31%26bz%3D1%26td%3D1%26tdf%3D0%26psd%3DW251bGwsbnVsbCxudWxsLDNd%26nt%3D1%26ifi%3D2%26uci%3Da!2%26fsb%3D1%26dtd%3D1556&ctp=creative&cnm=ext_download_prot_smrtsp	false	Avira URL Cloud: safe	unknown
https://cdn.bidbrain.app/ng-assets/creative/assets/index-5333d910.js	false		high
https://cdn.bidbrain.app/ext/Footer-Logo_1720602781.svg+xml	false		high
https://g4.bidbrain.app/rtimp?sid=546ad295-d2eb-11ef-959f-d6c599cbf4fc&d=androiddatahost.com&cr=ext_download_prot_smrtsp&gid=&im=WvqEWoub5i7-wbFq6SzlnF9uEQ6-DRvG4th9BOzKDOXmRNHtLMqI8kI53Z0ViZ8r_52kOqtFAIbK-7HqzahBdWbt4T0elE4Hsd_a2y7MgSAiHTmiImHD3pSXu5MOhUuxBE-RqPnKDqDUkf8jHa5t_x92d59EQIjgSDUm_W4POLV07Q-9CZ_IQXj8Bp87ChlsADIHCAhvgCZWQLsS_6cU6pLf0QamUAcXq869S2ZCRcQ-nPp8Y8Hx9WOBweupX6rsR4kij69CkBTzczNgD68KrydLsmLNk6mwzd3M7lpIGsvbgLHZROb3bSQix0iN79BCOHKdDjp3k1Zg3XOc0tiN74JM6M-WdxX1zuD9Kj8oTMPFzs49CGykzdU80FMi_Qs3UQPmrIXXBGxx3SwIppw2PA&p=Z4ciNAAI1QUIEdThAB5MR83lxaWzSatV77M14g&r=1125375760&a=ipv4&ow=1280&oh=984&iw=856&ih=280&tzof=300&tz=America%2FNew_York&pxr=1&cts=1736909368.605&cto=2459&edx=10&furl=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-2840258101411863%26output%3Dhtml%26h%3D280%26slotname%3D1589304026%26adk%3D2488830594%26adf%3D2972800098%26pi%3Dt.ma~as.1589304026%26w%3D856%26abgtt%3D6%26fwrn%3D4%26fwrnh%3D100%26lmt%3D1736881262%26rafmt%3D1%26format%3D856x280%26url%3Dhttps%253A%252F%252Fandroiddatahost.com%252Fsdsd3%26fwr%3D0%26fwrattr%3Dtrue%26rpe%3D1%26resp_fmts%3D3%26wgl%3D1%26uach%3DWyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.%26dt%3D1736909361577%26bpp%3D1%26bdt%3D1279%26idt%3D1568%26shv%3Dr20250113%26mjsv%3Dm202501080201%26ptt%3D9%26saldr%3Daa%26abxe%3D1%26cookie_enabled%3D1%26eoidce%3D1%26prev_fmts%3D0x0%252C856x280%252C336x280%26nras%3D1%26correlator%3D8040805227545%26frm%3D20%26pv%3D1%26u_tz%3D-300%26u_his%3D1%26u_h%3D1024%26u_w%3D1280%26u_ah%3D984%26u_aw%3D1280%26u_cd%3D24%26u_sd%3D1%26dmc%3D8%26adx%3D204%26ady%3D1649%26biw%3D1263%26bih%3D907%26scr_x%3D0%26scr_y%3D0%26eid%3D42533203%252C31089542%252C31089715%252C95350245%252C31089639%26oid%3D2%26pvsid%3D539208937878820%26tmod%3D1359503699%26uas%3D0%26nvt%3D1%26fc%3D1920%26brdim%3D0%252C0%252C0%252C0%252C1280%252C0%252C1280%252C984%252C1280%252C907%26vis%3D1%26rsz%3D%257C%257CoeEbr%257C%26abl%3DCS%26pfx%3D0%26fu%3D128%26bc%3D31%26bz%3D1%26td%3D1%26tdf%3D0%26psd%3DW251bGwsbnVsbCxudWxsLDNd%26nt%3D1%26ifi%3D4%26uci%3Da!4%26btvi%3D1%26fsb%3D1%26dtd%3D1571&ctp=creative&cnm=ext_download_prot_smrtsp	false	Avira URL Cloud: safe	unknown
https://ep1.adtrafficquality.google/getconfig/sodar?sv=200&tid=gda&tv=r20250113&st=env	false		high
https://cdn.bidbrain.app/ng-assets/creative/assets/polyfills-a3f452c3.js	false		high
https://g.bidbrain.app/rtimp?a=imp&cr=ext_download_prot_smrtsp&d=androiddatahost.com&gid=&im=qDSwbOIr0D22sbu8qzOWzzsgTAyjXaYD0Wjekk-CBtqkqW2Giw8aaBY9H03jsjUd--RPJIQCc8isfXRoLz_JxXvWOsgFLQ0LXQCV_vRO7WZso6I-8X5nh-iPSXKXhlSitp-6I3vA0zWdpJtuEiSGRrUctJZaV7UE5ikGD2wk5NsDkmfe7LpIf9AMxB5x2ZUweOrir-bu-a3rsExFJzVnbf5fhQeei_SdD-FHZGzKvArczRnV44Yv9tLz80gy1aR-GZE2cRmIEW-HaNIcITlS40JDTcYNzulopQueEojNVc9cKUgiOvbjBagX0YVWcjCVxnLXYplgeAgGA8zT1qOiHoyY_vKGQOPnfCST-N1GlBWQMxxI8wxrHXg6kgSfDts7oessD_HNRJEmspPirMn3sw&p=Z4ciNAAIkn8IEdNXAAu0Q6gnw-wgAu8T7McH4w&sid=546ef294-d2eb-11ef-94e6-12087e0c0b48	false		high
https://androiddatahost.com/favicon-32x32.png	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/btr/view?ai=Cjr4WNCKHZ8TGIYi-x_AP0IOfsALGvqzIfMb0rcCNE6KUxJKNDhABILm_uSFgyZbLi8Sk_A-gAZPCv5A-yAECqAMByAPJBKoE3gFP0F_5Dz4w7OehnAdro3idBuuuft1-qZLbic0FwptSgAhjZsBi3SBbMVHh9u-1KrxsqFsUqpYbrzghNlP-nlLiG4sQv45jttPW7y_2VBpWy7pBpA6WnDm-exf0Jjd9VRRSQ1ZQuiM3QgUPwS84aANvMc3GZWRgR-RNUS_AJfYjEYj1dMcSnuUZxQk5SsOTtHL5WM3TOd5UAYQl6gsh85qoa4Q8UGoGASp8rsTWe7FQDPnkUJNpYzlIhbRKnuKE-xE6kzxMSYUkK9E0RnEzG9gZZLzecwOx0iYFm6Ll3xTABPyy29D0BIgF7t_amVGSBQQIBBgBkgUECAUYBKAGAoAHk_qP8BioB9XJG6gH2baxAqgHpr4bqAeOzhuoB5PYG6gH8OAbqAfulrECqAf-nrECqAevvrECqAf3wrEC2AcB8gcFEOSHlAHSCCYIgGEQARgfMgKKAjoLgECAwICAgKCogAJIvf3BOljri7nN2_aKA5oJS2h0dHBzOi8vcGNhcHBzdG9yZS5jb20vP2FwPWFkd3AmYXM9Z19kX2FsbF9uZXdfaW4mZG1bdHlwZV09ZGlzJmdhZF9zb3VyY2U9NYAKAcgLAdoMEAoKENDSrYHgy4i-HBICAQPYEwzQFQGYFgGAFwGyFx4KGggAEhRwdWItMjg0MDI1ODEwMTQxMTg2MxgAGAG6FwI4AbIYCRICsFMYAiIBANAYAegYAQ&sigh=rw7p8sLgrS4&uach_m=%5BUACH%5D&ase=2&cid=CAQSTgCa7L7df4xwUHVujsXH2F66vTtJuY0JMzCDUy0RwlGknM5o1hgUj27nZz3JKyLm39Z1qfeU48liOx_XvHXY-00wQ4VbHo9Y1_AGgVhlnRgB&vis=1&ibtr=1&nis=6	false		high
https://g.bidbrain.app/rtimp?a=imp&cr=ext_download_prot_smrtsp&d=androiddatahost.com&gid=&im=Pacs0y_h8AoSpSdmuFfjA2-Jh85D8lauvwtIHB_1GiprXZB5z-_E3J1H5hUXQDZEsvVW7JVWUdGMa_U0C5_tkb4mP1ZlEnp9SQCOUT9ZGqvUPKVQlnmpO-een_K5kYXADLIbU7cZM4adhhdJ64sqRb0XuCC1NIhymkr9Rdf6tXrmlHUvVik_ArV3ViEcLerL2da9b1cfNz3_0XekAPi53bNl_N0IIvDnrrUavtgn0hCj0v3n5UVbx3vj68zJh5EwhSyMCcqSgdvmBMtFnMUY0fIc3kCwuYNWcv9gb37hXO2aW-4ok0VCS57r6DU_Rp5Cr-rj3hrIb1i1cgEBLvfU7WGsD1UHx0L5uBiNGZ2yMVsuwdLN2VS93UYZKceGIhWo5t2oNt_gGhoxejNAlTmutQ&p=Z4ciNAAJHGgIEd-8ABtcFJi2RsjNQuKdC0LPiQ&sid=546da6d0-d2eb-11ef-ad61-06f8d311b573	false		high
https://androiddatahost.com/wp-content/plugins/wp-rocket/assets/js/wpr-beacon.min.js	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2840258101411863&output=html&h=280&slotname=2448584244&adk=39937659&adf=2782902954&pi=t.ma~as.2448584244&w=856&abgtt=6&fwrn=4&fwrnh=100&lmt=1736881262&rafmt=1&format=856x280&url=https%3A%2F%2Fandroiddatahost.com%2Fsdsd3&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736909361575&bpp=2&bdt=1276&idt=1551&shv=r20250113&mjsv=m202501080201&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=1&correlator=8040805227545&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=204&ady=186&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533203%2C31089542%2C31089715%2C95350245%2C31089639&oid=2&pvsid=539208937878820&tmod=1359503699&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CoeE%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&fsb=1&dtd=1556	false		high
https://serve.bidbrain.app/sig.js?rpclid=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f&params=q547IniEp1qY7OEg0PE-zvI7c4TTbyJ9yUbJXX9aXRRFZ2RSaC1aqKVcNwFLzvoOUSB1Cq-kKAVCZMCO8wGiXvdmW_R_lhWj9VZ0BXYdLq3CVfee3Dl8WI3WkDd6zz6cgPeOrWRQd0pYTBtp6b-MEhqkYNKcIqKwWY9oCnbEV53vVc0S-miSf-21MKIOFFWwwrtgyKpTFmSAzSgQs0FZTJxX5Gsm3mrnNfhxWN0Pw1JdgjYx4A0MtW9X9sFmXm843WGJGXK0aLApHA07DzpbVdhE2OFP0N5Ku5qSpfS_KMrn0gcgzJWCemoSEDAXtqiudxnIdUJXflbA_NEbsxnE161AqUOD5U2bGvzX9q0umM_UPOpSxsZxgkmK5Rd_E0400H-5SWuxjHpFtYcXu8P-aYhdwh-QT38DroSKr_E8gRGeWPVy9UB5x_1996Dl-nvO	false		high
https://g.bidbrain.app/rtimp?a=imp&cr=ext_download_prot_smrtsp&d=androiddatahost.com&gid=&im=IjHuoKH9nmywyVTiGioDNCAuLUDL12hOuGl7bgdSfVyyVYBTz7Zsr7uuTl8TJIk5dWf81UH-AsKoN3EadDwjUBJQuQQlVyA963QpKBLhZSvMIbHPvJlfiVhzqVlZKwqSew6ekPvMJQivc9sVYYFqAv999a3EJ_hMi7vf7H_2ZGtihHOTvM6iqjMxqmJD3Q8Seu9mRdQ1GLakJW_Pj4XXdwzV5SezfbVTEvG0p-7i6Sc2AI8XNTkJMEsw2f9vhGucJwsBt9wx-rXfqKI6RUW5LPjCc9zy15g9MVC09kM3Iuwfi6vTIytAZgtIUykHXKylA3w3k2pnPUspiV_ZsBroYyDkOWAaHeeLepaoKhBX4c1zj-q9IHbhhARl1DuhJqnQN6FcAcEdSd5az2KddOvO2mdZRN2LwYifC0OPtebWzdSWf9-50JeiZHpbeeiGCfeO&p=Z4ciNAAIcZ8IEctkAAklrGRc4Ee14pU5y6FM0w&sid=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf	false		high
https://androiddatahost.com/wp-content/uploads/PhoenixSuit_V1.08.zip	false	Avira URL Cloud: safe	unknown
https://g.bidbrain.app/rtimp?a=imp&cr=ext_download_prot_smrtsp&d=androiddatahost.com&gid=&im=WvqEWoub5i7-wbFq6SzlnF9uEQ6-DRvG4th9BOzKDOXmRNHtLMqI8kI53Z0ViZ8r_52kOqtFAIbK-7HqzahBdWbt4T0elE4Hsd_a2y7MgSAiHTmiImHD3pSXu5MOhUuxBE-RqPnKDqDUkf8jHa5t_x92d59EQIjgSDUm_W4POLV07Q-9CZ_IQXj8Bp87ChlsADIHCAhvgCZWQLsS_6cU6pLf0QamUAcXq869S2ZCRcQ-nPp8Y8Hx9WOBweupX6rsR4kij69CkBTzczNgD68KrydLsmLNk6mwzd3M7lpIGsvbgLHZROb3bSQix0iN79BCOHKdDjp3k1Zg3XOc0tiN74JM6M-WdxX1zuD9Kj8oTMPFzs49CGykzdU80FMi_Qs3UQPmrIXXBGxx3SwIppw2PA&p=Z4ciNAAI1QUIEdThAB5MR83lxaWzSatV77M14g&sid=546ad295-d2eb-11ef-959f-d6c599cbf4fc	false		high
https://g4.bidbrain.app/rtimp?sid=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f&d=androiddatahost.com&cr=ext_download_prot_smrtsp&gid=&im=q547IniEp1qY7OEg0PE-zvI7c4TTbyJ9yUbJXX9aXRRFZ2RSaC1aqKVcNwFLzvoOUSB1Cq-kKAVCZMCO8wGiXvdmW_R_lhWj9VZ0BXYdLq3CVfee3Dl8WI3WkDd6zz6cgPeOrWRQd0pYTBtp6b-MEhqkYNKcIqKwWY9oCnbEV53vVc0S-miSf-21MKIOFFWwwrtgyKpTFmSAzSgQs0FZTJxX5Gsm3mrnNfhxWN0Pw1JdgjYx4A0MtW9X9sFmXm843WGJGXK0aLApHA07DzpbVdhE2OFP0N5Ku5qSpfS_KMrn0gcgzJWCemoSEDAXtqiudxnIdUJXflbA_NEbsxnE161AqUOD5U2bGvzX9q0umM_UPOpSxsZxgkmK5Rd_E0400H-5SWuxjHpFtYcXu8P-aYhdwh-QT38DroSKr_E8gRGeWPVy9UB5x_1996Dl-nvO&p=Z4ciNAAIY0EIEd8IAAfB0JS4R6VqDmLSSExu6A&r=698754296&a=ipv4&ow=1280&oh=984&iw=0&ih=0&tzof=300&tz=America%2FNew_York&pxr=1&cts=1736909368.576&cto=1552&edx=7&furl=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fhtml%2Fr20250113%2Fr20190131%2Fzrt_lookup_fy2021.html&ctp=creative&cnm=ext_download_prot_smrtsp	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/adview?ai=Cwd0LNCKHZ5_jIeSWx_APrMukUL2qz8116aLc1sQSwI23ARABIABgyZbLi8Sk_A-CARdjYS1wdWItMjg0MDI1ODEwMTQxMTg2M8gBCagDAcgDAqoE0QFP0LGg-Vd9KdxqQwYVXv7dV62k_Pw1C4rVBIxi-Gr980ewd8A-QP-4HR74RN2Ctt2wVPkLDrStbuVy7KKdTI_QWNPCnMs6pq8uuFHHZBIWhkzgX9p8dPIkAQCRwrZMqH0ODXz7chHlRHTkDIOeQ0fTLqO0q0k_r_Z7Ci7Vy8we5i4bjuuwwoQZATlBVhB77wG8f40sHfR0JqVw_6gn8s8w6BzoPM8gjWpb8thcwhvc9SNfBVgixoasLNqEOeGLyj6jVRJyzGQtaIZHG1haIZIq_YAGmqztl_n_8_zlAaAGIagHpr4bqAeW2BuoB6qbsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCQIgGEQATICigI6C4BAgMCAgICgqIACSL39wTpY_Km5zdv2igOACgH6CwIIAYAMAdAVAYAXAbIXHAoYEhRwdWItMjg0MDI1ODEwMTQxMTg2MxgAGAw&sigh=Bmj6HpcG_Ks&uach_m=%5BUACH%5D&cid=CAQSTwCa7L7dNpLe2c8cdaZnoUlDXDHcDxMKdHfYZXlAeMpZaaysjIM4ZzleToZlSH8kBGPhOJeiSY3ngjUptty6rJWoFu4OIPo-JARlZdt6D-AYAQ	false		high
https://g.bidbrain.app/rtimp?a=imp&cr=ext_download_prot_smrtsp&d=androiddatahost.com&gid=&im=q547IniEp1qY7OEg0PE-zvI7c4TTbyJ9yUbJXX9aXRRFZ2RSaC1aqKVcNwFLzvoOUSB1Cq-kKAVCZMCO8wGiXvdmW_R_lhWj9VZ0BXYdLq3CVfee3Dl8WI3WkDd6zz6cgPeOrWRQd0pYTBtp6b-MEhqkYNKcIqKwWY9oCnbEV53vVc0S-miSf-21MKIOFFWwwrtgyKpTFmSAzSgQs0FZTJxX5Gsm3mrnNfhxWN0Pw1JdgjYx4A0MtW9X9sFmXm843WGJGXK0aLApHA07DzpbVdhE2OFP0N5Ku5qSpfS_KMrn0gcgzJWCemoSEDAXtqiudxnIdUJXflbA_NEbsxnE161AqUOD5U2bGvzX9q0umM_UPOpSxsZxgkmK5Rd_E0400H-5SWuxjHpFtYcXu8P-aYhdwh-QT38DroSKr_E8gRGeWPVy9UB5x_1996Dl-nvO&p=Z4ciNAAIY0EIEd8IAAfB0JS4R6VqDmLSSExu6A&sid=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f	false		high
https://ep2.adtrafficquality.google/sodar/sodar2/232/runner.html	false		high
https://cdn.bidbrain.app/ext/download-icon_1697445891.svg+xml	false		high
https://g4.bidbrain.app/rtimp?sid=546afe47-d2eb-11ef-ad78-a23bd1412fc2&d=androiddatahost.com&cr=ext_download_prot_smrtsp&gid=&im=hAI2KqFVzEgluZhAFrsrWfd-Wm5J9P0-DIF3OWjFomhzv7esNBBwxT-MVRciluG1Em3k-v7IwStlOhtk7jcv6I0NHULMTqaBvQGCBiSPrhm3tzFUMiTH8VVWTByXhtrRPdhdeLwaNKNsq-s8vFkx5w3t-HXQd-4TJbUzt0wLn79lA8u7bdlg2XViQ0oaQzFpJILJcIMRGdSYKDQX3H8RvJGWs8VlgCgz2d6yebS_XHRc0BE77BrYpBTdb8j5bVSgE-E-6SJs35W-rpjWlFSxtDhI0W2vjAEmOyPffbeWt3-FLCepBF5SL3rC83uQ5acUP-y6vtSV-nKF2-LJDQW8PQtx4YCry_iFzAYflfyfaTjhOtwOzraXWnau_Q2n6euY2JfE1c1uK8BD98tLjDnouA&p=Z4ciNAAIY0MIEd8IAAfB0JWq2MZ5niF8kccdvQ&r=1466544634&a=ipv4&ow=1280&oh=984&iw=0&ih=0&tzof=300&tz=America%2FNew_York&pxr=1&cts=1736909368.697&cto=1556&edx=7&furl=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fhtml%2Fr20250113%2Fr20190131%2Fzrt_lookup_fy2021.html%23RS-2-%26adk%3D1812271804%26client%3Dca-pub-2840258101411863%26fa%3D4%26ifi%3D8%26uci%3Da!8%26btvi%3D4&ctp=creative&cnm=ext_download_prot_smrtsp	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/adview?ai=Ce9lBNCKHZ4WqI-Gpx_APx5j5gAe9qs_Ndemi3NbEEsCNtwEQASAAYMmWy4vEpPwPggEXY2EtcHViLTI4NDAyNTgxMDE0MTE4NjPIAQmoAwHIAwKqBNcBT9DoNuiUZHUdweH8KgQzKbK61CX76_bOcrmrgzhaUeHoMTasQ-dMvmCj4l3HctP9sLbGPKzpHu3yRlkNcUSt0vEJsN7c2HP5dJPXWqLeVcTqW5Z6SMmymcwllFNe6Yk344XLgVxvr1U4BCfTYIwiAHCU_JDF5FIbOSHrswXCwvyFYSgN2CsX3DjE8l0n3sUW6UI1_NjZLmFoqVCf6SynkgviT9opKtGpiuVavOqoSC409gL9Le82gZ2X2VfqGhyZ_K8Id_ZssE8RI0OlR2gNYK6UXVE_x0KABpqs7Zf5__P85QGgBiGoB6a-G6gHltgbqAeqm7ECqAf_nrECqAffn7ECqAetvrEC2AcA0ggkCIBhEAEyAooCOguAQIDAgICAoKiAAki9_cE6WJHwus3b9ooDgAoB-gsCCAGADAHQFQGAFwGyFxwKGBIUcHViLTI4NDAyNTgxMDE0MTE4NjMYABgM&sigh=FTSn9xkY3C0&uach_m=%5BUACH%5D&cid=CAQSTwCa7L7daosxhDwEOP4OczbnRoWulX9WY3LBBNUBPpuH-RcSRc9uPCkjRcNGA89EaJkyxS51uvMT8aKC0oftGN15oHJIW8u0Cgw8nGcsrO4YAQ	false		high
https://cdn.bidbrain.app/click_1734018555_64x64.png	false		high
https://serve.bidbrain.app/sig.js?rpclid=546afe47-d2eb-11ef-ad78-a23bd1412fc2&params=hAI2KqFVzEgluZhAFrsrWfd-Wm5J9P0-DIF3OWjFomhzv7esNBBwxT-MVRciluG1Em3k-v7IwStlOhtk7jcv6I0NHULMTqaBvQGCBiSPrhm3tzFUMiTH8VVWTByXhtrRPdhdeLwaNKNsq-s8vFkx5w3t-HXQd-4TJbUzt0wLn79lA8u7bdlg2XViQ0oaQzFpJILJcIMRGdSYKDQX3H8RvJGWs8VlgCgz2d6yebS_XHRc0BE77BrYpBTdb8j5bVSgE-E-6SJs35W-rpjWlFSxtDhI0W2vjAEmOyPffbeWt3-FLCepBF5SL3rC83uQ5acUP-y6vtSV-nKF2-LJDQW8PQtx4YCry_iFzAYflfyfaTjhOtwOzraXWnau_Q2n6euY2JfE1c1uK8BD98tLjDnouA	false		high
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2840258101411863&output=html&h=280&slotname=8499285160&adk=3371522416&adf=601265536&pi=t.ma~as.8499285160&w=336&abgtt=6&lmt=1736881262&format=336x280&url=https%3A%2F%2Fandroiddatahost.com%2Fsdsd3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736909361578&bpp=1&bdt=1279&idt=1576&shv=r20250113&mjsv=m202501080201&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C856x280%2C336x280%2C856x280&nras=1&correlator=8040805227545&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=464&ady=2039&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533203%2C31089542%2C31089715%2C95350245%2C31089639&oid=2&pvsid=539208937878820&tmod=1359503699&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CoeEbr%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=2&fsb=1&dtd=1579	false		high
https://g4.bidbrain.app/rtimp?sid=546da6d0-d2eb-11ef-ad61-06f8d311b573&d=androiddatahost.com&cr=ext_download_prot_smrtsp&gid=&im=Pacs0y_h8AoSpSdmuFfjA2-Jh85D8lauvwtIHB_1GiprXZB5z-_E3J1H5hUXQDZEsvVW7JVWUdGMa_U0C5_tkb4mP1ZlEnp9SQCOUT9ZGqvUPKVQlnmpO-een_K5kYXADLIbU7cZM4adhhdJ64sqRb0XuCC1NIhymkr9Rdf6tXrmlHUvVik_ArV3ViEcLerL2da9b1cfNz3_0XekAPi53bNl_N0IIvDnrrUavtgn0hCj0v3n5UVbx3vj68zJh5EwhSyMCcqSgdvmBMtFnMUY0fIc3kCwuYNWcv9gb37hXO2aW-4ok0VCS57r6DU_Rp5Cr-rj3hrIb1i1cgEBLvfU7WGsD1UHx0L5uBiNGZ2yMVsuwdLN2VS93UYZKceGIhWo5t2oNt_gGhoxejNAlTmutQ&p=Z4ciNAAJHGgIEd-8ABtcFJi2RsjNQuKdC0LPiQ&r=1086721484&a=ipv4&ow=1280&oh=984&iw=336&ih=280&tzof=300&tz=America%2FNew_York&pxr=1&cts=1736909368.637&cto=2424&edx=9&furl=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-2840258101411863%26output%3Dhtml%26h%3D280%26slotname%3D8499285160%26adk%3D3371522416%26adf%3D601265536%26pi%3Dt.ma~as.8499285160%26w%3D336%26abgtt%3D6%26lmt%3D1736881262%26format%3D336x280%26url%3Dhttps%253A%252F%252Fandroiddatahost.com%252Fsdsd3%26wgl%3D1%26uach%3DWyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.%26dt%3D1736909361578%26bpp%3D1%26bdt%3D1279%26idt%3D1576%26shv%3Dr20250113%26mjsv%3Dm202501080201%26ptt%3D9%26saldr%3Daa%26abxe%3D1%26cookie_enabled%3D1%26eoidce%3D1%26prev_fmts%3D0x0%252C856x280%252C336x280%252C856x280%26nras%3D1%26correlator%3D8040805227545%26frm%3D20%26pv%3D1%26u_tz%3D-300%26u_his%3D1%26u_h%3D1024%26u_w%3D1280%26u_ah%3D984%26u_aw%3D1280%26u_cd%3D24%26u_sd%3D1%26dmc%3D8%26adx%3D464%26ady%3D2039%26biw%3D1263%26bih%3D907%26scr_x%3D0%26scr_y%3D0%26eid%3D42533203%252C31089542%252C31089715%252C95350245%252C31089639%26oid%3D2%26pvsid%3D539208937878820%26tmod%3D1359503699%26uas%3D0%26nvt%3D1%26fc%3D1920%26brdim%3D0%252C0%252C0%252C0%252C1280%252C0%252C1280%252C984%252C1280%252C907%26vis%3D1%26rsz%3D%257C%257CoeEbr%257C%26abl%3DCS%26pfx%3D0%26fu%3D0%26bc%3D31%26bz%3D1%26td%3D1%26tdf%3D0%26psd%3DW251bGwsbnVsbCxudWxsLDNd%26nt%3D1%26ifi%3D5%26uci%3Da!5%26btvi%3D2%26fsb%3D1%26dtd%3D1579&ctp=creative&cnm=ext_download_prot_smrtsp	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2840258101411863&output=html&h=280&slotname=8499285160&adk=978467678&adf=2230146881&pi=t.ma~as.8499285160&w=336&abgtt=6&lmt=1736881262&format=336x280&url=https%3A%2F%2Fandroiddatahost.com%2Fsdsd3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736909361577&bpp=1&bdt=1278&idt=1558&shv=r20250113&mjsv=m202501080201&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C856x280&nras=1&correlator=8040805227545&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=464&ady=639&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533203%2C31089542%2C31089715%2C95350245%2C31089639&oid=2&pvsid=539208937878820&tmod=1359503699&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CoeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=1564	false		high
https://cdn.bidbrain.app/compressedFonts/RobotoRegular.woff2	false		high
https://cdn.bidbrain.app/ng-assets/creative/assets/index-127e2d55.css	false		high
https://googleads.g.doubleclick.net/pagead/drt/si?st=NO_DATA	false		high
https://androiddatahost.com/sdsd3	false		unknown
https://ep2.adtrafficquality.google/sodar/sodar2.js	false		high
https://serve.bidbrain.app/sig.js?rpclid=546da6d0-d2eb-11ef-ad61-06f8d311b573&params=Pacs0y_h8AoSpSdmuFfjA2-Jh85D8lauvwtIHB_1GiprXZB5z-_E3J1H5hUXQDZEsvVW7JVWUdGMa_U0C5_tkb4mP1ZlEnp9SQCOUT9ZGqvUPKVQlnmpO-een_K5kYXADLIbU7cZM4adhhdJ64sqRb0XuCC1NIhymkr9Rdf6tXrmlHUvVik_ArV3ViEcLerL2da9b1cfNz3_0XekAPi53bNl_N0IIvDnrrUavtgn0hCj0v3n5UVbx3vj68zJh5EwhSyMCcqSgdvmBMtFnMUY0fIc3kCwuYNWcv9gb37hXO2aW-4ok0VCS57r6DU_Rp5Cr-rj3hrIb1i1cgEBLvfU7WGsD1UHx0L5uBiNGZ2yMVsuwdLN2VS93UYZKceGIhWo5t2oNt_gGhoxejNAlTmutQ	false		high
https://www.google.com/recaptcha/api2/aframe	false		high
https://cdn.bidbrain.app/compressedFonts/RobotoBold.woff2	false		high
https://googleads.g.doubleclick.net/pagead/html/r20250113/r20190131/zrt_lookup_fy2021.html	false		high
https://androiddatahost.com/sdsd3#google_vignette	false		unknown
https://g4.bidbrain.app/rtimp?sid=546ef294-d2eb-11ef-94e6-12087e0c0b48&d=androiddatahost.com&cr=ext_download_prot_smrtsp&gid=&im=qDSwbOIr0D22sbu8qzOWzzsgTAyjXaYD0Wjekk-CBtqkqW2Giw8aaBY9H03jsjUd--RPJIQCc8isfXRoLz_JxXvWOsgFLQ0LXQCV_vRO7WZso6I-8X5nh-iPSXKXhlSitp-6I3vA0zWdpJtuEiSGRrUctJZaV7UE5ikGD2wk5NsDkmfe7LpIf9AMxB5x2ZUweOrir-bu-a3rsExFJzVnbf5fhQeei_SdD-FHZGzKvArczRnV44Yv9tLz80gy1aR-GZE2cRmIEW-HaNIcITlS40JDTcYNzulopQueEojNVc9cKUgiOvbjBagX0YVWcjCVxnLXYplgeAgGA8zT1qOiHoyY_vKGQOPnfCST-N1GlBWQMxxI8wxrHXg6kgSfDts7oessD_HNRJEmspPirMn3sw&p=Z4ciNAAIkn8IEdNXAAu0Q6gnw-wgAu8T7McH4w&r=1203031400&a=ipv4&ow=1280&oh=984&iw=336&ih=280&tzof=300&tz=America%2FNew_York&pxr=1&cts=1736909368.656&cto=2466&edx=9&furl=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-2840258101411863%26output%3Dhtml%26h%3D280%26slotname%3D8499285160%26adk%3D978467678%26adf%3D2230146881%26pi%3Dt.ma~as.8499285160%26w%3D336%26abgtt%3D6%26lmt%3D1736881262%26format%3D336x280%26url%3Dhttps%253A%252F%252Fandroiddatahost.com%252Fsdsd3%26wgl%3D1%26uach%3DWyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.%26dt%3D1736909361577%26bpp%3D1%26bdt%3D1278%26idt%3D1558%26shv%3Dr20250113%26mjsv%3Dm202501080201%26ptt%3D9%26saldr%3Daa%26abxe%3D1%26cookie_enabled%3D1%26eoidce%3D1%26prev_fmts%3D0x0%252C856x280%26nras%3D1%26correlator%3D8040805227545%26frm%3D20%26pv%3D1%26u_tz%3D-300%26u_his%3D1%26u_h%3D1024%26u_w%3D1280%26u_ah%3D984%26u_aw%3D1280%26u_cd%3D24%26u_sd%3D1%26dmc%3D8%26adx%3D464%26ady%3D639%26biw%3D1263%26bih%3D907%26scr_x%3D0%26scr_y%3D0%26eid%3D42533203%252C31089542%252C31089715%252C95350245%252C31089639%26oid%3D2%26pvsid%3D539208937878820%26tmod%3D1359503699%26uas%3D0%26nvt%3D1%26fc%3D1920%26brdim%3D0%252C0%252C0%252C0%252C1280%252C0%252C1280%252C984%252C1280%252C907%26vis%3D1%26rsz%3D%257C%257CoeE%257C%26abl%3DCS%26pfx%3D0%26fu%3D0%26bc%3D31%26bz%3D1%26td%3D1%26tdf%3D0%26psd%3DW251bGwsbnVsbCxudWxsLDNd%26nt%3D1%26ifi%3D3%26uci%3Da!3%26fsb%3D1%26dtd%3D1564&ctp=creative&cnm=ext_download_prot_smrtsp	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2840258101411863&output=html&h=280&slotname=1589304026&adk=2488830594&adf=2972800098&pi=t.ma~as.1589304026&w=856&abgtt=6&fwrn=4&fwrnh=100&lmt=1736881262&rafmt=1&format=856x280&url=https%3A%2F%2Fandroiddatahost.com%2Fsdsd3&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736909361577&bpp=1&bdt=1279&idt=1568&shv=r20250113&mjsv=m202501080201&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C856x280%2C336x280&nras=1&correlator=8040805227545&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=204&ady=1649&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533203%2C31089542%2C31089715%2C95350245%2C31089639&oid=2&pvsid=539208937878820&tmod=1359503699&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CoeEbr%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=1&fsb=1&dtd=1571	false		high
https://www.google.com/pagead/drt/ui	false		high
https://serve.bidbrain.app/sig.js?rpclid=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf&params=IjHuoKH9nmywyVTiGioDNCAuLUDL12hOuGl7bgdSfVyyVYBTz7Zsr7uuTl8TJIk5dWf81UH-AsKoN3EadDwjUBJQuQQlVyA963QpKBLhZSvMIbHPvJlfiVhzqVlZKwqSew6ekPvMJQivc9sVYYFqAv999a3EJ_hMi7vf7H_2ZGtihHOTvM6iqjMxqmJD3Q8Seu9mRdQ1GLakJW_Pj4XXdwzV5SezfbVTEvG0p-7i6Sc2AI8XNTkJMEsw2f9vhGucJwsBt9wx-rXfqKI6RUW5LPjCc9zy15g9MVC09kM3Iuwfi6vTIytAZgtIUykHXKylA3w3k2pnPUspiV_ZsBroYyDkOWAaHeeLepaoKhBX4c1zj-q9IHbhhARl1DuhJqnQN6FcAcEdSd5az2KddOvO2mdZRN2LwYifC0OPtebWzdSWf9-50JeiZHpbeeiGCfeO	false		high
https://googleads.g.doubleclick.net/pagead/adview?ai=Ca41ENCKHZ8HGIYi-x_AP0IOfsAK9qs_Ndemi3NbEEsCNtwEQASAAYMmWy4vEpPwPggEXY2EtcHViLTI4NDAyNTgxMDE0MTE4NjPIAQmoAwHIAwKqBNIBT9BJRRuVYISJd-fb-0pSnEr7rNnJo8yDZyCYQINFimNUQE-owkEoXVZzu-dS81KRZB4SsdU3Tz_42zZNvlUHV8GQvuRgPmImZtm2v2yTtyH2dASJJot8-ZcYy_eIqTAGjkP2lBalTlnoCOlgKBUI-xAh7ZQ6cXUU6RaHyziNzRen6YX7aV_iAb0YdNfuaOeWMI2YBe9xYy3-0PjE7cwMDp74_4FBiXDopZqk0YYiwzTFSrAGPgBa3K6h360jC3OZ48LOPvn9r9Lt1ITK2NzuUX7FgAaarO2X-f_z_OUBoAYhqAemvhuoB5bYG6gHqpuxAqgH_56xAqgH35-xAqgHrb6xAtgHANIIJAiAYRABMgKKAjoLgECAwICAgKCogAJIvf3BOljri7nN2_aKA4AKAfoLAggBgAwB0BUBgBcBshccChgSFHB1Yi0yODQwMjU4MTAxNDExODYzGAAYDA&sigh=p4dKFt52T8c&uach_m=%5BUACH%5D&cid=CAQSTgCa7L7df4xwUHVujsXH2F66vTtJuY0JMzCDUy0RwlGknM5o1hgUj27nZz3JKyLm39Z1qfeU48liOx_XvHXY-00wQ4VbHo9Y1_AGgVhlnRgB&vis=1	false		high
https://androiddatahost.com/android-chrome-192x192.png	false	Avira URL Cloud: safe	unknown
https://serve.bidbrain.app/sig.js?rpclid=546ef294-d2eb-11ef-94e6-12087e0c0b48&params=qDSwbOIr0D22sbu8qzOWzzsgTAyjXaYD0Wjekk-CBtqkqW2Giw8aaBY9H03jsjUd--RPJIQCc8isfXRoLz_JxXvWOsgFLQ0LXQCV_vRO7WZso6I-8X5nh-iPSXKXhlSitp-6I3vA0zWdpJtuEiSGRrUctJZaV7UE5ikGD2wk5NsDkmfe7LpIf9AMxB5x2ZUweOrir-bu-a3rsExFJzVnbf5fhQeei_SdD-FHZGzKvArczRnV44Yv9tLz80gy1aR-GZE2cRmIEW-HaNIcITlS40JDTcYNzulopQueEojNVc9cKUgiOvbjBagX0YVWcjCVxnLXYplgeAgGA8zT1qOiHoyY_vKGQOPnfCST-N1GlBWQMxxI8wxrHXg6kgSfDts7oessD_HNRJEmspPirMn3sw	false		high
https://g.bidbrain.app/rtimp	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_153.1.dr, chromecache_143.1.dr	false		high
https://www.googletagservices.com/agrp/	chromecache_141.1.dr, chromecache_183.1.dr	false		high
http://www.broofa.com	chromecache_189.1.dr, chromecache_159.1.dr	false		high
https://ep2.adtrafficquality.google	chromecache_160.1.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_176.1.dr, chromecache_190.1.dr	false		high
https://www.google.com	chromecache_160.1.dr	false		high
https://fundingchoicesmessages.google.com/i/$	chromecache_196.1.dr, chromecache_206.1.dr	false		high
http://61.143.38.50/eStudio/VersionTab.ulffP3QW	UpdateVerEx.exe, 00000019.00000002.2800364356.0000000000E48000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_190.1.dr	false		high
https://cdn.ampproject.org/amp4ads-host-v0.js	chromecache_196.1.dr, chromecache_206.1.dr	false		high
https://googleads.g.doubleclick.net/pagead/html/$	chromecache_196.1.dr, chromecache_206.1.dr	false		high
https://www.google.com/adsense	chromecache_174.1.dr, chromecache_223.1.dr	false		high
https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=231	chromecache_161.1.dr	false		high
https://ep1.adtrafficquality.google/pagead/sodar?id=sodar2&v=232	chromecache_210.1.dr, chromecache_160.1.dr	false		high
https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=232	chromecache_210.1.dr, chromecache_160.1.dr	false		high
https://securepubads.g.doubleclick.net/pagead/js/cocar.js	chromecache_196.1.dr, chromecache_206.1.dr	false		high
https://securepubads.g.doubleclick.net/pagead/js/car.js	chromecache_196.1.dr, chromecache_206.1.dr	false		high
https://cct.google/taggy/agent.js	chromecache_153.1.dr, chromecache_143.1.dr	false		high
http://mathiasbynens.be/	chromecache_196.1.dr, chromecache_206.1.dr	false		high
http://61.143.38.50/eStudio/VersionTab.ulffY	UpdateVerEx.exe, 00000019.00000002.2800364356.0000000000E57000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.google.com/adsense/search/async-ads.js	chromecache_196.1.dr, chromecache_206.1.dr	false		high
http://61.143.38.50/eStudio/VersionTab.ulfi	UpdateVerEx.exe, 00000019.00000002.2800364356.0000000000DF5000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.google.%/ads/ga-audiences	chromecache_176.1.dr, chromecache_190.1.dr	false		high
http://googleads.g.doubleclick.net	chromecache_196.1.dr, chromecache_186.1.dr, chromecache_194.1.dr, chromecache_206.1.dr	false		high
https://ep1.adtrafficquality.google/pagead/sodar?id=sodar2&v=231	chromecache_161.1.dr	false		high
https://fonts.google.com/license/googlerestricted	chromecache_200.1.dr	false		high
http://61.143.38.50/eStudio/VersionTab.ulf43=W	UpdateVerEx.exe, 00000019.00000002.2800364356.0000000000E48000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://61.143.38.50/ps/index.html	PhoenixSuit.exe, 00000010.00000003.1636370017.0000000003310000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://ep2.adtrafficquality.google/sodar/$	chromecache_196.1.dr, chromecache_206.1.dr	false		high
http://61.143.38.50/eStudio/VersionTab.ulf	UpdateVerEx.exe, 00000019.00000002.2800364356.0000000000DF5000.00000004.00000020.00020000.00000000.sdmp, UpdateVerEx.exe, 00000019.00000002.2800364356.0000000000E57000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://securepubads.g.doubleclick.net/static/topics/topics_frame.html	chromecache_196.1.dr, chromecache_206.1.dr	false		high
http://google.com	chromecache_196.1.dr, chromecache_206.1.dr	false		high
http://61.143.38.50/eStudio/VersionTab.ulfL	UpdateVerEx.exe, 00000019.00000002.2800364356.0000000000E31000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.openssl.org/support/faq.html	PhoenixDaemon.exe, 00000011.00000000.1642876919.000000000049D000.00000002.00000001.01000000.0000000A.sdmp	false		high
http://61.143.38.50/eStudio/VersionTab.ulf$	UpdateVerEx.exe, 00000019.00000002.2800364356.0000000000E31000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.google.com/s2/favicons?sz=64&domain_url=	chromecache_196.1.dr, chromecache_206.1.dr	false		high
https://ep1.adtrafficquality.google/bg/	chromecache_210.1.dr, chromecache_161.1.dr, chromecache_160.1.dr	false		high
http://61.143.38.50/eStudio/VersionTab.ulf2	UpdateVerEx.exe, 00000019.00000002.2800364356.0000000000DF5000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.apache.org/licenses/LICENSE-2.0	chromecache_158.1.dr, chromecache_164.1.dr, chromecache_141.1.dr, chromecache_183.1.dr	false		high
https://ep2.adtrafficquality.google/sodar/	chromecache_210.1.dr, chromecache_160.1.dr	false		high
https://cse.google.com/cse.js	chromecache_196.1.dr, chromecache_206.1.dr	false		high
https://googleads.g.doubleclick.net	chromecache_194.1.dr, chromecache_206.1.dr	false		high
https://tagassistant.google.com/	chromecache_176.1.dr, chromecache_190.1.dr	false		high
https://cdn.ampproject.org/rtv/$	chromecache_196.1.dr, chromecache_206.1.dr	false		high
https://ep3.adtrafficquality.google/ivt/worklet/caw.js	chromecache_196.1.dr, chromecache_206.1.dr	false		high
https://androiddatahost.com	chromecache_172.1.dr	false	Avira URL Cloud: safe	unknown
http://61.143.38.50/eStudio/	UpdateVerEx.exe, 00000019.00000002.2804940686.00000000035C0000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://publickeyservice.msmt.gcp.privacysandboxservices.com	chromecache_183.1.dr	false		high
https://developers.google.com/ad-placement	chromecache_189.1.dr, chromecache_159.1.dr	false		high
http://61.143.38.50/	UpdateVerEx.exe, 00000019.00000002.2800364356.0000000000E31000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://www.openssl.org/support/faq.htmlRAND	PhoenixDaemon.exe, 00000011.00000000.1642876919.000000000049D000.00000002.00000001.01000000.0000000A.sdmp	false		high
https://ep1.adtrafficquality.google/getconfig/sodar	chromecache_196.1.dr, chromecache_206.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.67.176.164	serve.bidbrain.app	United States	13335	CLOUDFLARENETUS	false
142.250.185.228	unknown	United States	15169	GOOGLEUS	false
192.124.249.38	androiddatahost.com	United States	30148	SUCURI-SECUS	false
142.250.185.225	unknown	United States	15169	GOOGLEUS	false
142.250.184.225	unknown	United States	15169	GOOGLEUS	false
142.250.184.226	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
61.143.38.50	unknown	China	58543	CHINATELECOM-GUANGDONG-IDCGuangdongCN	true
142.250.186.98	unknown	United States	15169	GOOGLEUS	false
142.250.186.34	unknown	United States	15169	GOOGLEUS	false
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
216.58.206.66	unknown	United States	15169	GOOGLEUS	false
192.0.77.37	c0.wp.com	United States	2635	AUTOMATTICUS	false
34.8.123.242	g4.bidbrain.app	United States	2686	ATGS-MMD-ASUS	false
169.150.236.105	androidatahost.b-cdn.net	United States	2711	SPIRITTEL-ASUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.21.80.92	cdn.bidbrain.app	United States	13335	CLOUDFLARENETUS	false
142.250.185.97	ep2.adtrafficquality.google	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16
192.168.2.4
127.0.0.1

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1591543
Start date and time:	2025-01-15 03:48:49 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 8m 16s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://androiddatahost.com/sdsd3
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	29
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	1
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.win@39/149@48/20
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Behavior information exceeds normal sizes, reducing to normal. Report will have missing behavior information.
Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, consent.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.206.35, 142.250.184.206, 108.177.15.84, 172.217.16.206, 172.217.18.2, 142.250.185.110, 216.58.206.40, 142.250.186.66, 142.250.181.238, 142.250.185.168, 172.217.16.193, 216.58.206.34, 216.58.206.65, 142.250.184.202, 216.58.206.67, 142.250.186.131, 142.250.186.162, 142.250.184.195, 142.250.186.130, 142.250.186.46, 142.250.74.206, 172.217.18.14, 142.250.185.67, 34.104.35.123, 216.58.206.78, 142.250.185.206, 216.58.212.174, 142.250.186.78, 142.250.184.238, 2.23.242.162, 4.175.87.197, 172.202.163.200
Excluded domains from analysis (whitelisted): clients1.google.com, fonts.googleapis.com, fs.microsoft.com, www.googleadservices.com, accounts.google.com, slscr.update.microsoft.com, fonts.gstatic.com, clientservices.googleapis.com, pagead2.googlesyndication.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, redirector.gvt1.com, edgedl.me.gvt1.com, www.googletagmanager.com, tpc.googlesyndication.com, update.googleapis.com, clients.l.google.com, www.gstatic.com, www.google-analytics.com
Execution Graph export aborted for target adb.exe, PID 7920 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://androiddatahost.com/sdsd3

Simulations

Behavior and APIs

Time	Type	Description
21:50:39	API Interceptor	459992x Sleep call for process: PhoenixDaemon.exe modified

LLM Input / Output

Input	Output
URL: https://androiddatahost.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": true }
URL: https://androiddatahost.com
URL: https://androiddatahost.com/sdsd3... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The script contains several moderate-risk indicators, including external data transmission to an unknown domain ('androiddatahost.com') and the use of a nonce, which could potentially be used for malicious purposes. Additionally, the script appears to be collecting information about the user's device, such as screen size and mobile status. While the intent is not entirely clear, the combination of these factors warrants further investigation." }
var rocket_beacon_data = {"ajax_url":"https:\/\/androiddatahost.com\/wp-admin\/admin-ajax.php","nonce":"09b2126da8","url":"https:\/\/androiddatahost.com\/sdsd3","is_mobile":false,"width_threshold":1600,"height_threshold":700,"delay":500,"debug":null,"status":{"atf":true,"lrc":true},"elements":"img, video, picture, p, main, div, li, svg, section, header, span","lrc_threshold":1800}
URL: https://androiddatahost.com/sdsd3... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a configuration object for a plugin or library that preloads links on a website. While it includes some potentially sensitive information like the site URL and file extensions, the behaviors observed are generally low-risk and do not indicate any malicious intent. The script is likely used for performance optimization and user experience enhancement, which is a common and legitimate practice. However, the use of a legacy `XDomainRequest` API and the inclusion of the `wp-json` endpoint suggest some outdated or overly aggressive practices that could be improved." }
/* <![CDATA[ / var RocketPreloadLinksConfig = {"excludeUris":"\/(?:.+\/)?feed(?:\/(?:.+\/?)?)?$\|\/(?:.+\/)?embed\/\|\/(index.php\/)?(.)wp-json(\/.\|$)\|\/refer\/\|\/go\/\|\/recommend\/\|\/recommends\/","usesTrailingSlash":"","imageExt":"jpg\|jpeg\|gif\|png\|tiff\|bmp\|webp\|avif\|pdf\|doc\|docx\|xls\|xlsx\|php","fileExt":"jpg\|jpeg\|gif\|png\|tiff\|bmp\|webp\|avif\|pdf\|doc\|docx\|xls\|xlsx\|php\|html\|htm","siteUrl":"https:\/\/androiddatahost.com","onHoverDelay":"100","rateThrottle":"3"}; / */
URL: https://androiddatahost.com/sdsd3... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a compatibility checker for various browser features, such as passive event listeners, requestIdleCallback, and connection speed detection. While it uses some legacy APIs like XDomainRequest, the overall behavior is focused on feature detection and does not exhibit any high-risk indicators like dynamic code execution, data exfiltration, or suspicious redirects. The script seems to be a legitimate utility for improving web performance and user experience, so the risk score is on the lower end of the spectrum." }
/* <![CDATA[ / "use strict";var _createClass=function(){function defineProperties(target,props){for(var i=0;i<props.length;i++){var descriptor=props[i];descriptor.enumerable=descriptor.enumerable\|\|!1,descriptor.configurable=!0,"value"in descriptor&&(descriptor.writable=!0),Object.defineProperty(target,descriptor.key,descriptor)}}return function(Constructor,protoProps,staticProps){return protoProps&&defineProperties(Constructor.prototype,protoProps),staticProps&&defineProperties(Constructor,staticProps),Constructor}}();function _classCallCheck(instance,Constructor){if(!(instance instanceof Constructor))throw new TypeError("Cannot call a class as a function")}var RocketBrowserCompatibilityChecker=function(){function RocketBrowserCompatibilityChecker(options){_classCallCheck(this,RocketBrowserCompatibilityChecker),this.passiveSupported=!1,this._checkPassiveOption(this),this.options=!!this.passiveSupported&&options}return _createClass(RocketBrowserCompatibilityChecker,[{key:"_checkPassiveOption",value:function(self){try{var options={get passive(){return!(self.passiveSupported=!0)}};window.addEventListener("test",null,options),window.removeEventListener("test",null,options)}catch(err){self.passiveSupported=!1}}},{key:"initRequestIdleCallback",value:function(){!1 in window&&(window.requestIdleCallback=function(cb){var start=Date.now();return setTimeout(function(){cb({didTimeout:!1,timeRemaining:function(){return Math.max(0,50-(Date.now()-start))}})},1)}),!1 in window&&(window.cancelIdleCallback=function(id){return clearTimeout(id)})}},{key:"isDataSaverModeOn",value:function(){return"connection"in navigator&&!0===navigator.connection.saveData}},{key:"supportsLinkPrefetch",value:function(){var elem=document.createElement("link");return elem.relList&&elem.relList.supports&&elem.relList.supports("prefetch")&&window.IntersectionObserver&&"isIntersecting"in IntersectionObserverEntry.prototype}},{key:"isSlowConnection",value:function(){return"connection"in navigator&&"effectiveType"in navigator.connection&&("2g"===navigator.connection.effectiveType\|\|"slow-2g"===navigator.connection.effectiveType)}}]),RocketBrowserCompatibilityChecker}(); / */
URL: https://androiddatahost.com/sdsd3... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a script that implements a link prefetching functionality, which is a common performance optimization technique. While the script uses some legacy APIs like `XDomainRequest`, it does not exhibit any high-risk behaviors like dynamic code execution, data exfiltration, or redirects to malicious domains. The script seems to be focused on improving website performance by prefetching links that the user is likely to click on, which is a legitimate use case. Therefore, the overall risk score is low." }
/* <![CDATA[ / (function() { "use strict";var r="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},e=function(){function i(e,t){for(var n=0;n<t.length;n++){var i=t[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(e,i.key,i)}}return function(e,t,n){return t&&i(e.prototype,t),n&&i(e,n),e}}();function i(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}var t=function(){function n(e,t){i(this,n),this.browser=e,this.config=t,this.options=this.browser.options,this.prefetched=new Set,this.eventTime=null,this.threshold=1111,this.numOnHover=0}return e(n,[{key:"init",value:function(){!this.browser.supportsLinkPrefetch()\|\|this.browser.isDataSaverModeOn()\|\|this.browser.isSlowConnection()\|\|(this.regex={excludeUris:RegExp(this.config.excludeUris,"i"),images:RegExp(".("+this.config.imageExt+")$","i"),fileExt:RegExp(".("+this.config.fileExt+")$","i")},this._initListeners(this))}},{key:"_initListeners",value:function(e){-1<this.config.onHoverDelay&&document.addEventListener("mouseover",e.listener.bind(e),e.listenerOptions),document.addEventListener("mousedown",e.listener.bind(e),e.listenerOptions),document.addEventListener("touchstart",e.listener.bind(e),e.listenerOptions)}},{key:"listener",value:function(e){var t=e.target.closest("a"),n=this._prepareUrl(t);if(null!==n)switch(e.type){case"mousedown":case"touchstart":this._addPrefetchLink(n);break;case"mouseover":this._earlyPrefetch(t,n,"mouseout")}}},{key:"_earlyPrefetch",value:function(t,e,n){var i=this,r=setTimeout(function(){if(r=null,0===i.numOnHover)setTimeout(function(){return i.numOnHover=0},1e3);else if(i.numOnHover>i.config.rateThrottle)return;i.numOnHover++,i._addPrefetchLink(e)},this.config.onHoverDelay);t.addEventListener(n,function e(){t.removeEventListener(n,e,{passive:!0}),null!==r&&(clearTimeout(r),r=null)},{passive:!0})}},{key:"_addPrefetchLink",value:function(i){return this.prefetched.add(i.href),new Promise(function(e,t){var n=document.createElement("link");n.rel="prefetch",n.href=i.href,n.onload=e,n.onerror=t,document.head.appendChild(n)}).catch(function(){})}},{key:"_prepareUrl",value:function(e){if(null===e\|\|"object"!==(void 0===e?"undefined":r(e))\|\|!1 in e\|\|-1===["http:","https:"].indexOf(e.protocol))return null;var t=e.href.substring(0,this.config.siteUrl.length),n=this._getPathname(e.href,t),i={original:e.href,protocol:e.protocol,origin:t,pathname:n,href:t+n};return this._isLinkOk(i)?i:null}},{key:"_getPathname",value:function(e,t){var n=t?e.substring(this.config.siteUrl.length):e;return n.startsWith("/")\|\|(n="/"+n),this._shouldAddTrailingSlash(n)?n+"/":n}},{key:"_shouldAddTrailingSlash",value:function(e){return this.config.usesTrailingSlash&&!e.endsWith("/")&&!this.regex.fileExt.test(e)}},{key:"_isLinkOk",value:function(e){return null!==e&&"object"===(void 0===e?"undefined":r(e))&&(!this.prefetched.has(e.href)&&e.origin===this.config.siteUrl&&-1===e.href.indexOf("?")&&-1===e.href.indexOf("#")&&!this.regex.excludeUris.test(e.href)&&!this.regex.images.test(e.href))}}],[{key:"run",value:function(){"undefined"!=typeof RocketPreloadLinksConfig&&new n(new RocketBrowserCompatibilityChecker({capture:!0,passive:!0}),RocketPreloadLinksConfig).init()}}]),n}();t.run(); }()); / */
URL: https://androiddatahost.com/sdsd3... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a combination of utility functions and configuration variables. It does not contain any high-risk indicators such as dynamic code execution, data exfiltration, or redirects to malicious domains. The code includes some moderate-risk indicators, such as the use of legacy APIs like `XDomainRequest` and some DOM manipulation, but these are not inherently malicious and can be used for legitimate purposes. Overall, the script seems to be focused on cookie handling, base64 encoding/decoding, and configuration variables for an ad-related plugin. While it could potentially be improved in terms of security practices, it does not demonstrate clear malicious intent and can be considered a low-risk script." }
function b2a(a){var b,c=0,l=0,f="",g=[];if(!a)return a;do{var e=a.charCodeAt(c++);var h=a.charCodeAt(c++);var k=a.charCodeAt(c++);var d=e<<16\|h<<8\|k;e=63&d>>18;h=63&d>>12;k=63&d>>6;d&=63;g[l++]="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".charAt(e)+"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".charAt(h)+"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".charAt(k)+"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=".charAt(d)}while(c< a.length);return f=g.join(""),b=a.length%3,(b?f.slice(0,b-3):f)+"===".slice(b\|\|3)}function a2b(a){var b,c,l,f={},g=0,e=0,h="",k=String.fromCharCode,d=a.length;for(b=0;64>b;b++)f["ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/".charAt(b)]=b;for(c=0;d>c;c++)for(b=f[a.charAt(c)],g=(g<<6)+b,e+=6;8<=e;)((l=255&g>>>(e-=8))\|\|d-2>c)&&(h+=k(l));return h}b64e=function(a){return btoa(encodeURIComponent(a).replace(/%([0-9A-F]{2})/g,function(b,a){return String.fromCharCode("0x"+a)}))}; b64d=function(a){return decodeURIComponent(atob(a).split("").map(function(a){return"%"+("00"+a.charCodeAt(0).toString(16)).slice(-2)}).join(""))}; /* <![CDATA[ / ai_front = {"insertion_before":"BEFORE","insertion_after":"AFTER","insertion_prepend":"PREPEND CONTENT","insertion_append":"APPEND CONTENT","insertion_replace_content":"REPLACE CONTENT","insertion_replace_element":"REPLACE ELEMENT","visible":"VISIBLE","hidden":"HIDDEN","fallback":"FALLBACK","automatically_placed":"Automatically placed by AdSense Auto ads code","cancel":"Cancel","use":"Use","add":"Add","parent":"Parent","cancel_element_selection":"Cancel element selection","select_parent_element":"Select parent element","css_selector":"CSS selector","use_current_selector":"Use current selector","element":"ELEMENT","path":"PATH","selector":"SELECTOR"}; / / var ai_cookie_js=!0,ai_block_class_def="code-block"; / js-cookie v3.0.5 \| MIT JavaScript Cookie v2.2.0 https://github.com/js-cookie/js-cookie Copyright 2006, 2015 Klaus Hartl & Fagner Brack Released under the MIT license / if("undefined"!==typeof ai_cookie_js){(function(a,f){"object"===typeof exports&&"undefined"!==typeof module?module.exports=f():"function"===typeof define&&define.amd?define(f):(a="undefined"!==typeof globalThis?globalThis:a\|\|self,function(){var b=a.Cookies,c=a.Cookies=f();c.noConflict=function(){a.Cookies=b;return c}}())})(this,function(){function a(b){for(var c=1;c<arguments.length;c++){var g=arguments[c],e;for(e in g)b[e]=g[e]}return b}function f(b,c){function g(e,d,h){if("undefined"!==typeof document){h= a({},c,h);"number"===typeof h.expires&&(h.expires=new Date(Date.now()+864E5h.expires));h.expires&&(h.expires=h.expires.toUTCString());e=encodeURIComponent(e).replace(/%(2[346B]\|5E\|60\|7C)/g,decodeURIComponent).replace(/[()]/g,escape);var l="",k;for(k in h)h[k]&&(l+="; "+k,!0!==h[k]&&(l+="="+h[k].split(";")[0]));return document.cookie=e+"="+b.write(d,e)+l}}return Object.create({set:g,get:function(e){if("undefined"!==typeof document&&(!arguments.length\|\|e)){for(var d=document.cookie?document.cookie.split("; "): [],h={},l=0;l<d.length;l++){var k=d[l].split("="),p=k.slice(1).join("=");try{var n=decodeURIComponent(k[0]);h[n]=b.read(p,n);if(e===n)break}catch(q){}}return e?h[e]:h}},remove:function(e,d){g(e,"",a({},d,{expires:-1}))},withAttributes:function(e){return f(this.converter,a({},this.attributes,e))},withConverter:function(e){return f(a({},this.converter,e),this.attributes)}},{attributes:{value:Object.freeze(c)},converter:{value:Object.freeze(b)}})}return f({read:function(b){'"'===b[0]&&(b=b.slice(1,-1)); return b.replace(/(%[\dA-F]{2})+/gi,decodeURIComponent)},write:function(b){return encodeURIComponent(b).replace(/%(2[346BF]\|3[AC-F]\|40\|5[BDE]\|60\|7[BCD])/g,decodeURIComponent)}},{path:"/"})});AiCookies=Cookies.noConflict();function m(a){if(null==a)return a;'"'===a.charAt(0)&&(a=a.slice(1,-1));try{a=JSON.parse(a)}catch(f){}return a}ai_check_block=function(a){var f="undefined"!==typeof ai_debugg
URL: https://androiddatahost.com/sdsd3 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "You are about to download the PhoenixSuit_V1.08.zip file on your computer.", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.gstatic.com/mysidia/a58566d29ed3e45ae1... Model: Joe Sandbox AI	```json { "risk_score": 3, "reasoning": "The script contains some legacy practices and tracking behavior, but there are no high-risk indicators such as dynamic code execution or data exfiltration. The script appears to be related to URL manipulation and user agent data handling, which are common in analytics or ad tracking contexts. Without evidence of malicious intent or interaction with suspicious domains, the risk remains low." }
(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / var m=this\|\|self;function aa(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=m,e=0;e<c.length;e++)if(d=d[c[e]],d==null){c=null;break a}c=d}a=c&&c[a];return a!=null?a:b}function ca(a){return a};function q(a,b){if(!b)return a;b.indexOf("&")===0&&(b=b.substring(1));const c=/[?&]adurl=([^&])/.exec(a);return c?`${a.slice(0,c.index+1)}${b}&${a.slice(c.index+1)}`:`${a}${a.indexOf("?")===-1?"?":"&"}${b}`}function da(a,b){switch(a){case 0:return b?"&ri=1":"";case 1:return b?"&ri=24":"&ri=27";case 2:return b?"&ri=25":"&ri=26";default:return""}} function ea(a){a=a.o;if(!a)return"";let b="";a.platform&&(b+="&uap="+encodeURIComponent(a.platform));a.platformVersion&&(b+="&uapv="+encodeURIComponent(a.platformVersion));a.uaFullVersion&&(b+="&uafv="+encodeURIComponent(a.uaFullVersion));a.architecture&&(b+="&uaa="+encodeURIComponent(a.architecture));a.model&&(b+="&uam="+encodeURIComponent(a.model));a.bitness&&(b+="&uab="+encodeURIComponent(a.bitness));a.fullVersionList&&(b+="&uafvl="+encodeURIComponent(a.fullVersionList.map(c=>encodeURIComponent(c.brand)+ ";"+encodeURIComponent(c.version)).join("\|")));typeof a.wow64!=="undefined"&&(b+="&uaw="+Number(a.wow64));return b}function fa(a,b){return a.l?typeof a.i!=="string"\|\|a.i.length===0?null:{version:3,C:a.i,u:q(a.g,"&act=1"+da(b,!0)+ea(a))}:a.m?(a=a.g,a=/[?&]suid=/.test(a)?a:q(a,"&suid="+(Date.now()-(new Date("2024-01-01T00:00:00Z")).getTime())),{version:4,C:q(a,"&dct=1"+da(b,!1)),u:q(a,"&act=1"+da(b,!0))}):null}function ha(a,b){return b===2?q(a.g,"&ri=2"):b===0?q(a.g,"&ri=16"):a.g} var ia=class{constructor({url:a,aa:b}){this.g=a;this.o=b;b=/[?&]dsh=1(&\|$)/.test(a);this.l=!b&&/[?&]ae=1(&\|$)/.test(a);this.m=!b&&/[?&]ae=2(&\|$)/.test(a);this.h=/[?&]adurl=([^&])/.exec(a);this.B=!b&&/[?&]aspm=1(&\|$)/.test(a);if(this.h&&this.h[1]){let c;try{c=decodeURIComponent(this.h[1])}catch(d){c=null}this.i=c}}};/ Copyright Google LLC SPDX-License-Identifier: Apache-2.0 / var r=class{constructor(a){this.g=a}toString(){return this.g}},ka=new r("about:invalid#zClosurez");class la{constructor(a){this.ha=a}}function u(a){return new la(b=>b.substr(0,a.length+1).toLowerCase()===a+":")}const ma=new la(a=>/^[^:]([/?#]\|$)/.test(a));var na=u("http"),oa=u("https"),pa=u("ftp"),qa=u("mailto"),ra=u("intent"),sa=u("market"),ta=u("itms"),ua=u("itms-appss");const va=[u("data"),na,oa,qa,pa,ma];function xa(a,b=va){if(a instanceof r)return a;for(let c=0;c<b.length;++c){const d=b[c];if(d instanceof la&&d.ha(a))return new r(a)}}function ya(a,b=va){return xa(a,b)\|\|ka}var za=/^\s(?!javascript:)(?:[\w+.-]+:\|[^:/?#](?:[/?#]\|$))/i;function Aa(a,b){if(b instanceof r)if(b instanceof r)b=b.g;else throw Error("");else b=za.test(b)?b:void 0;b!==void 0&&(a.href=b)};function Ba(a,b){a:{const c=a.length,d=typeof a==="string"?a.split(""):a;for(let e=0;e<c;e++)if(e in d&&b.call(void 0,d[e],e,a)){b=e;break a}b=-1}return b<0?null:typeof a==="string"?a.charAt(b):a[b]};function Ca(a,b){a.__closure__error__context__984382\|\|(a.__closure__error__context__984382={});a.__closure__error__context__984382.severity=b};var Da=RegExp("^(?:([^:/?#.]+):)?(?://(?:([^\\\\/?#])@)?([^\\\\/?#]?)(?::([0-9]+))?(?=[\\\\/?#]\|$))?([^?#]+)?(?:\\?([^#]))?(?:#([\\s\\S]))?$");function Ea(a,b,c){if(Array.isArray(b))for(let d=0;d<b.length;d++)Ea(a,String(b[d]),c);else b!=null&&c.push(a+(b===""?"":"="+encodeURIComponent(String(b))))}function Fa(a,b,c,d){const e=c.length;for(;(b=a.indexOf(c,b))>=0&&b<d;){var f=a.charCodeAt(b-1);if(f==38\|\|f==63)if(f=a.charCodeAt(b+e),!f\|\|f==61\|\|f==38\|\|f==35)return b;b+=e+1}return-1}var Ga=/#\|$/; function Ha(a,b){const c=a.search(Ga);let d=Fa(a,0,b,c);if(d<0)return null;let e=a.indexOf("&",d);if(e<0\|\|e>c)e=c;d+=b.length+1;return decodeURIComponent(a.slice(d,e!==-1?e:0).replace(/\+/g," "))}var Ia=/[?&]($\|#)/;function Ja(a){m.setTimeout(()=>{throw a;},0)};var Ka=aa(610401301,!1),La=aa(653718497,aa(1,!1));var Ma;const Na=m.navigator;Ma=Na?Na.userAgentData\|\|nul
URL: https://androiddatahost.com/sdsd3 Model: Joe Sandbox AI	{ "brands": [ "ADH" ] }
	{ "brands": [ "ADH" ] }
URL: https://androiddatahost.com/sdsd3 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Download", "prominent_button_name": "Download", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://androiddatahost.com/sdsd3 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Download", "prominent_button_name": "Download", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://androiddatahost.com/sdsd3 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Download", "prominent_button_name": "Download", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://androiddatahost.com/sdsd3 Model: Joe Sandbox AI	{ "brands": [ "Protecto" ] }
	{ "brands": [ "Protecto" ] }
URL: https://androiddatahost.com/sdsd3 Model: Joe Sandbox AI	{ "brands": [ "Protecto" ] }
	{ "brands": [ "Protecto" ] }
URL: https://androiddatahost.com/sdsd3 Model: Joe Sandbox AI	{ "brands": [ "Proteecto" ] }
	{ "brands": [ "Proteecto" ] }
URL: https://androiddatahost.com/sdsd3#google_vignette Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Download", "prominent_button_name": "Download", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://androiddatahost.com/sdsd3#google_vignette Model: Joe Sandbox AI	{ "brands": [ "Protecto" ] }
	{ "brands": [ "Protecto" ] }
URL: https://androiddatahost.com/sdsd3#google_vignette Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Download", "prominent_button_name": "Download", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://androiddatahost.com/sdsd3#google_vignette Model: Joe Sandbox AI	{ "brands": [ "Protecto" ] }
	{ "brands": [ "Protecto" ] }

Process:	C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1704
Entropy (8bit):	6.021599751711645
Encrypted:	false
SSDEEP:	48:Lrjv+YGh4puIMi/HOMUC0nfgG8WfvwcC6CPzx4kRlRjkf:LrrCn9i/HZUC0fs+vLjm48lRjkf
MD5:	FA3E50310D9E8ABD2084ABE9698CECB1
SHA1:	A57A5215796ABBDA9BFFD929C4C11918B79B4DE6
SHA-256:	3FBE24B91618365ADDF031A3BF9DDE2A333E44A429316CA83E159A0E1B3979F2
SHA-512:	1423CBF07608B53273B0C4805917F5DE00496FB2DAB7D884448C6DB770CA9DFEC2B93383FEA09D2A81325A2943D446C41C20A8FBF2C39CC68381B9D339F61997
Malicious:	false
Reputation:	low
Preview:	-----BEGIN PRIVATE KEY-----.MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDDnY5N28xBUI5C.iFZV9w9BydpBu+8yxRI0EQer6eF8p9yNQ458CSkpuAJWdmWNsQAsaSwfMR4fxJVt.F4Q+EGz4/KyAec++5uTCgGopgSdx/b9e8yaJxm3X3m9p4xIR5Vu71QRVktI0OoSx.jEweBjbKPNyI3YLBm43jBa4p2ip0IatAvFkR5zPyIvc95hRk6IUmUI7M9E+4fnDS.Zd6j6JzKC2/PEKQ1Fo/yXRukC3j1zOdECooiTXxfrycodhA0uOQUZ+DfjehvU6Bo.8WwBK/ybnhZTYiCsQMFl9E9okYtsXJ9WRnkVbb7eFhOT31ticQqkm4iQrrmD1XHp./tQnImD3AgMBAAECggEAYbCYdaeT/PZW5UEjJLFKTEebGQLa9RbX/WqX0zHs6w0F.pwKa8LS+etgrSrS8CKPhe0xWvYkRCzpoiV+aKkiXs0y0dUDgD+1NRxlMa0fVxCa9.4JQ7pciT6J9sMow05P0O7+H01SuKkIy84dI33TKrQBpe5HcDKt8dX8fhb4NFelLK.XKLXJ+vhmgNY5gyOK6chPFyPfz3thl6sCEf+8kmJz6q+urCaZ+g96NBhBx+jIg01.h66PfKv8924W17bFVsdNyPxQGojQ4Cubc9dwIFgNnn7mws5ZMXTT2qqSLyv6/Jfc.Ds5a8G0OuNX5EzdduLo27Ns0rD2Cmok42wSCdiADGQKBgQDro+WUKui1SugFYf8P.z4EjrdcvsR28KxMDuXVONd4NRGBhMUInfdshKBaWz0OL366fepvCLyB8Fbd2pbA/.2Jm7qlcTAwrzs+C+SxXOpxGgeWeZS6J35gv5tiSMEc5UqCWxKjqE+GnkTWbLgzVx.+CNDueuKYfoX2NJbsI2iYEveEwKBgQDUhFrnlAkk2hSKVZEt/ZqHRwK1PHmrti

C:\Users\user\.android\adbkey.pub

Download File

Process:	C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe
File Type:	ASCII text, with very long lines (716), with no line terminators
Category:	dropped
Size (bytes):	716
Entropy (8bit):	5.941780307315827
Encrypted:	false
SSDEEP:	12:Tz04IJLpTNGvqswpppF8GnNT2X+NE15hp319d8kBzNJxAdiP5RGgFLtECcgB34Db:5uM7wpzFxTmrBzNJxDmgLa/gVCXdjdn
MD5:	EC60448AFE018ED2A8F9EE12BBED7C56
SHA1:	D59EA5AC3232C17600165752A33FE7701EE255AA
SHA-256:	B98AA9CE12E5FA0EA29CD80757553F56EA9C5ADA4949CDEFB8FEEC1A60CB764C
SHA-512:	C075E664335F99D3E80618944E7D1DC19375FDEF5B849D04F001B9DAC151C46C0FF4E91D810C5D45AA8E703FAD809A1AADC1EDD693188208B84BA87ED6026DAD
Malicious:	false
Reputation:	low
Preview:	QAAAADmfGYH3YCIn1P7pcdWDua6QiJukCnFiW9+TExbevm0VeUZWn1xsi5FoT/RlwUCsIGJTFp6b/CsBbPFooFNv6I3f4GcU5Lg0EHYoJ69ffE0iigpE58z1eAukG13yjxY1pBDPbwvKnOij3mXScH64T/TMjlAmhehkFOY99yLyM+cRWbxAqyF0KtoprgXjjZvBgt2I3DzKNgYeTIyxhDo00pJVBNW7W+UREuNpb97XbcaJJvNev/1xJ4EpaoDC5Oa+z3mArPz4bBA+hBdtlcQfHjEfLGksALGNZXZWArgpKQl8jkON3Kd84emrBxE0EsUy77tB2slBD/dVVohCjlBBzNtNjp3DXI8DkNRvRfhyXjdzeSeGzo++1+znt3KqL6V7l/uxYAiV9jswrmTMx6zq4nwFvKeN+0vavd2Lz0BH/z27i3ZtNdSfGe3zSLjGkEOo+BWtN5xZou1xi0m7nivn6lyBV+0HKFJBMqDtplBPngaKiUTN1TttBEJM4NhIEeNMdwvwIBxeOq4NeY6v9FpnFEPG2utXaFX4pgCDjk/64sIPnjehK+g01gJ7T3160GY/nOaOjHg52YkmZ4E6jt2QJtH0DjO9wmxBoryMrWk/gjkf61CrxsHEFaAn+EEwY3M3jIiWVPHwQpD3Dh++4HK3s6dP4OmOkeEq7wi+yqgzrqUwl6FQCAEAAQA= unknown@unknown

C:\Users\user\AppData\Local\Temp\adb.log

Download File

Process:	C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	33
Entropy (8bit):	3.9801694078807643
Encrypted:	false
SSDEEP:	3:14PuKCFNVAFSjhIIov:k4hIF
MD5:	158119AF966EBC2693851F777B4EA243
SHA1:	72FB2D1F906ABB34DF8195EBDDECBC82A8F12AD5
SHA-256:	C6210CCA1AD5FDAD056FA94B53F454F2B1A64E12D99033717BB94C9BDA55038B
SHA-512:	8165BF62F55D13A2B8C3F90899D9E39C5527A197D6717BDFD12B2B7765AA976059D4BEC028009A61ECC95362CCB4D03CE5BAFE5933560946F381AF449D1991F8
Malicious:	false
Reputation:	low
Preview:	--- adb starting (pid 7608) ---..

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 15 01:49:21 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.983404562128475
Encrypted:	false
SSDEEP:	48:8ydBTpZFHAidAKZdA1FehwiZUklqehKy+3:8UPMFy
MD5:	DF5A017E73F8F6C1877BE9C96DF0ADF8
SHA1:	365F5F6B4172EA1F38A5CF32B13A7B46AA29EE05
SHA-256:	927E369410CF56CFC4C793054FE41B14298B55EC8EC5E24B05DA18C991EE4120
SHA-512:	477E66AC7DE46C46250E269D2FBE5B505FA86A3449981679C5B83A60D6C15F7724D0F9B3C6FBEA745CC6EA1A0A89D2F339B9591D437D3552CABD0CF6F0E99CBB
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....x....f..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I/Z .....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V/Z).....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V/Z).....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V/Z)............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V/Z+............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 15 01:49:21 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.000658334189987
Encrypted:	false
SSDEEP:	48:82kdBTpZFHAidAKZdA1seh/iZUkAQkqeh1y+2:8LPi9Qoy
MD5:	A50226A176C05905D8BE9EAA759FDF6C
SHA1:	4DAF8D5CD88CEC8B1E711A46B1EFA8E37D252893
SHA-256:	3F6F69A53E7AC735B86C2629F8B2B781BA705B9C261B2418681B9EC814ED4383
SHA-512:	6B4B7B60F6F784258C3B809E28D15047A9722D27346CAE50062E7C193DD28E8131C63999E6027DC910FB30D2E439B9EC27544AA2F4F322EE6AE9E653E7AB114F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....W...f..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I/Z .....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V/Z).....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V/Z).....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V/Z)............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V/Z+............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.009823999906976
Encrypted:	false
SSDEEP:	48:83dBTpZAHAidAKZdA14meh7sFiZUkmgqeh7sby+BX:8HPxn5y
MD5:	57842E21762A7786F5BB5BBE21B61757
SHA1:	CE8CAC7EAFCC8D0FE73003204E55D9869CFD81F9
SHA-256:	61482CEAA7D122DF628F1964B555D7765842FAB3232BE5D5AF328147AB1A66C7
SHA-512:	270F93E8D0DF30413F7A4C5C9959F1DDF26AEC34E5EB95823C5ABECCFB2F10D8422A4BB1E29FDA8C523CACA0CA0E18C3115C81DAB0774708DF051D44F9C16FAA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I/Z .....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V/Z).....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V/Z).....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V/Z)............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 15 01:49:21 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9987714000793453
Encrypted:	false
SSDEEP:	48:8J/dBTpZFHAidAKZdA1TehDiZUkwqehxy+R:85P5zy
MD5:	C3CA97753D7FD347FC6F3D688EB55E84
SHA1:	E8121B9C81D72F603A85C0CC4D71E543813FA020
SHA-256:	36CEC1B95E46D7B85101F488ADB9D7D6FBE499E1F6C5E5D1FABC3805C332B6D2
SHA-512:	69005516622EE0FFF53908E1FA53CBCE2CF89D12BA3445C578DAA327987250E06ACCF2C64EEEAECE84E369F35E0D7B323E1BBCBB39978675895DF8C4E7125D18
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...."'...f..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I/Z .....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V/Z).....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V/Z).....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V/Z)............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V/Z+............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 15 01:49:21 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9869231942839187
Encrypted:	false
SSDEEP:	48:8FdBTpZFHAidAKZdA1dehBiZUk1W1qehPy+C:8ZPp9vy
MD5:	D9168FD814F8D223355125D0420E27F3
SHA1:	ECACF31D7D03801556979CCF69363AC71F7AB9FA
SHA-256:	3D7C6F5DC3296ED26DC4D8875CCF666B419C5B7AB15776177D0B4BB3BA92F26E
SHA-512:	684A3CDFADEB866A179C26CC3D2BFBC7857950F461CB2519489BBDD152F647B3338BCADB428108E83C8C7B0932B638C2E39452FFB69197C8A8D1C0359219DA73
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....a....f..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I/Z .....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V/Z).....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V/Z).....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V/Z)............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V/Z+............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 15 01:49:20 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9998450613100083
Encrypted:	false
SSDEEP:	48:8SdBTpZFHAidAKZdA1duTeehOuTbbiZUk5OjqehOuTb5y+yT+:80PRTfTbxWOvTb5y7T
MD5:	6CB57CAF550616D0265F0D63883C4D07
SHA1:	F22E94D5E60007AD17F791E97FD9C4FBF3769FE0
SHA-256:	9C50377E11C56D1F707FA1743BAD621CEF4821F2D9B97583A12AAB5532BFBC09
SHA-512:	E2A2E54FBF41C0E36785A1AF2D0FDEC841178EBBA04132DE05DF275ADD6CDFD6AAA063C4559676EB7BBEE12E660DB10AB62E7245CACE134D39F65DD3B4699AFF
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.........f..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I/Z .....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V/Z).....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V/Z).....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V/Z)............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V/Z+............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\Downloads\26acb035-b80d-4544-820d-919803f939e7.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	720896
Entropy (8bit):	7.997766433628824
Encrypted:	true
SSDEEP:	12288:jNNLpI9r2jbB1idWTmbcsrYFJizO3a6FqI+EYFddJd61Siw5J0p4bh+yZG9cR+QS:1Cini4TIcsrfWfFqI+Ei7dCSiwb0mF+h
MD5:	36E5D876320A2C0DE08C6CF0580C0575
SHA1:	D1B22EB501406DB4B148AA0E8FF8E75D8D145AC3
SHA-256:	FCDD642955577BF3538B7A40706DB2D4283F3A4BEED3B85EA642649E91D6289B
SHA-512:	C455E41FF4C15222C4679A3552683BEDE7C23CC2B5461EBF33B5EA5D8904BEDCD9A65ABE2C50A0A21059FD5C4B10190FCCA9AC46E70B6D0D33142104C47F48AF
Malicious:	false
Reputation:	low
Preview:	PK.........T.N................PhoenixSuit_V1.08/PK........I.\|A.v.E.c..........PhoenixSuit_V1.08/ACmd.dll.[.\|SU..IS..h...5b......d..3.[../i......g.j...f.;t.".......Ww..u..qPq'8~.@..3PPAt.(...E...d........G?...}>.;..{..{.=.......Ar.!6.K..I.v...}...8.l.t..s\.t.2O....^..^.K.....Gwy.....s..dQ.......1.2...f.....Q...../....j...p~.{]...w{K...?.......p..s..z..&....F..A._..GF..n.FH.\.{-.....k..N..!.3!.z..+..];....6....w<IH....G..;....S...E..G.62.P.ag....EK.D...;.k...!........).).M..K.-....;...d..s..=7...C..1t..C..1t..C..1t.../G..Z..A:...m"....HJ....6^7..WJ.[Y.el...6...{b..=.1m....B....-].xO..o....RU-}.v^..i...k.<.{c..7...\P...jM.0..\..8.&..\.H..d.i.U(9@:.F..R.j.\ u.E).u.A..R..%.~;.%..kQ...C..5...A"SP..R_!J3@.Bi6H>..(..T..m.A%?.w.J".v#J. .MC...v.R5jP....(.c.3P.P....lo&J...l..(.Ai9.A.&........g........h>.[$[.+..D.@.M........D\p.I....o$.e.#....W...Y...;;..9....w]./.6P......\|.k}.....j.._..NQ.S9.....t...I....8.!..6...1h<6.J..Fp...@lD......x.3T.e..Cm......

C:\Users\user\Downloads\PhoenixSuit_V1.08.zip (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	14054972
Entropy (8bit):	7.999396163832708
Encrypted:	true
SSDEEP:	393216:M1QHVgdZjGDJ4Bkcvu0BnHEejlamSb+QnNSQDsXv:z1gdADHcvFBaNnNSRf
MD5:	1E9650AE798AAD24DA27D00C5F6E770A
SHA1:	A938BB2EE236D2018F31751A264317BEF7BCFDC9
SHA-256:	E2F987BBF59EB33D15BC6FFF27B4757D2C664BF19C71B5F8D969C1E08B011152
SHA-512:	3422FF037636377DCCAD3EA4A70E7C7E3A4A36696DF895036CA61A70E46EB1E19FF58A12C250BE306351FFCD422AA5C17A0C7B707AE5290C4E077ADEC20BC9E4
Malicious:	true
Reputation:	low
Preview:	PK.........T.N................PhoenixSuit_V1.08/PK........I.\|A.v.E.c..........PhoenixSuit_V1.08/ACmd.dll.[.\|SU..IS..h...5b......d..3.[../i......g.j...f.;t.".......Ww..u..qPq'8~.@..3PPAt.(...E...d........G?...}>.;..{..{.=.......Ar.!6.K..I.v...}...8.l.t..s\.t.2O....^..^.K.....Gwy.....s..dQ.......1.2...f.....Q...../....j...p~.{]...w{K...?.......p..s..z..&....F..A._..GF..n.FH.\.{-.....k..N..!.3!.z..+..];....6....w<IH....G..;....S...E..G.62.P.ag....EK.D...;.k...!........).).M..K.-....;...d..s..=7...C..1t..C..1t..C..1t.../G..Z..A:...m"....HJ....6^7..WJ.[Y.el...6...{b..=.1m....B....-].xO..o....RU-}.v^..i...k.<.{c..7...\P...jM.0..\..8.&..\.H..d.i.U(9@:.F..R.j.\ u.E).u.A..R..%.~;.%..kQ...C..5...A"SP..R_!J3@.Bi6H>..(..T..m.A%?.w.J".v#J. .MC...v.R5jP....(.c.3P.P....lo&J...l..(.Ai9.A.&........g........h>.[$[.+..D.@.M........D\p.I....o$.e.#....W...Y...;;..9....w]./.6P......\|.k}.....j.._..NQ.S9.....t...I....8.!..6...1h<6.J..Fp...@lD......x.3T.e..Cm......

C:\Users\user\Downloads\PhoenixSuit_V1.08.zip.crdownload

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	dropped
Size (bytes):	14054972
Entropy (8bit):	7.999396163832708
Encrypted:	true
SSDEEP:	393216:M1QHVgdZjGDJ4Bkcvu0BnHEejlamSb+QnNSQDsXv:z1gdADHcvFBaNnNSRf
MD5:	1E9650AE798AAD24DA27D00C5F6E770A
SHA1:	A938BB2EE236D2018F31751A264317BEF7BCFDC9
SHA-256:	E2F987BBF59EB33D15BC6FFF27B4757D2C664BF19C71B5F8D969C1E08B011152
SHA-512:	3422FF037636377DCCAD3EA4A70E7C7E3A4A36696DF895036CA61A70E46EB1E19FF58A12C250BE306351FFCD422AA5C17A0C7B707AE5290C4E077ADEC20BC9E4
Malicious:	false
Reputation:	low
Preview:	PK.........T.N................PhoenixSuit_V1.08/PK........I.\|A.v.E.c..........PhoenixSuit_V1.08/ACmd.dll.[.\|SU..IS..h...5b......d..3.[../i......g.j...f.;t.".......Ww..u..qPq'8~.@..3PPAt.(...E...d........G?...}>.;..{..{.=.......Ar.!6.K..I.v...}...8.l.t..s\.t.2O....^..^.K.....Gwy.....s..dQ.......1.2...f.....Q...../....j...p~.{]...w{K...?.......p..s..z..&....F..A._..GF..n.FH.\.{-.....k..N..!.3!.z..+..];....6....w<IH....G..;....S...E..G.62.P.ag....EK.D...;.k...!........).).M..K.-....;...d..s..=7...C..1t..C..1t..C..1t.../G..Z..A:...m"....HJ....6^7..WJ.[Y.el...6...{b..=.1m....B....-].xO..o....RU-}.v^..i...k.<.{c..7...\P...jM.0..\..8.&..\.H..d.i.U(9@:.F..R.j.\ u.E).u.A..R..%.~;.%..kQ...C..5...A"SP..R_!J3@.Bi6H>..(..T..m.A%?.w.J".v#J. .MC...v.R5jP....(.c.3P.P....lo&J...l..(.Ai9.A.&........g........h>.[$[.+..D.@.M........D\p.I....o$.e.#....W...Y...;;..9....w]./.6P......\|.k}.....j.._..NQ.S9.....t...I....8.!..6...1h<6.J..Fp...@lD......x.3T.e..Cm......

C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\adb9C37.tmp

Download File

Process:	C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe
File Type:	ASCII text, with CRLF line terminators
Category:	modified
Size (bytes):	29
Entropy (8bit):	3.771437029461126
Encrypted:	false
SSDEEP:	3:bFxAHRAn:bFxqRA
MD5:	8E4875DA94239470A7750762E8E8247C
SHA1:	A6EAFBB6EEE45820618D4A68365000A4DE4AD993
SHA-256:	D384E4D5EB537698581F0AB99B40AC807351B019544912870EEA79D16F8B961C
SHA-512:	4B8AA03FC8DDB988489C1C53C9EFC80DFE50C565EE4B096B92A2E53F5975C7E8BEDF7A171BE1E728E043B8DC1D73AF0163C23FBDB08718B09C49E489D37CF1F6
Malicious:	false
Reputation:	low
Preview:	List of devices attached ....

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3533)
Category:	dropped
Size (bytes):	222749
Entropy (8bit):	5.453364917537705
Encrypted:	false
SSDEEP:	6144:Giwcm/IpG4DMcdc/Fa9BDrk7m7U7ozJgs:yP/I5jMI
MD5:	ADB4D93F80755314547B699C181145BD
SHA1:	87BBCFD9E29A8BBB0ED8177AEB0F930499592AB7
SHA-256:	AF6B15D8917BD5AB039B73DB5F939C17DF1ACA2ACF7D4AC9D8F44A005EDAF6D6
SHA-512:	39DD81FFB91A9340D97B77E689B06D7D45201511CDF44352F3F1406AC3FEEAF2B786ECF13F08ADD5F0725610ECC3F24B2E87D5A8518CC2818F765921A0CA626C
Malicious:	false
Reputation:	low
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Lg=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Lg};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3025)
Category:	downloaded
Size (bytes):	9061
Entropy (8bit):	5.525139897908045
Encrypted:	false
SSDEEP:	192:kh/6bKGDg3eksiGBpIHhigCpcw3/MG2bm2pyp0nO:kh/6bKGDqeYGBwigCpJ3URK2Ep0nO
MD5:	79426CCDA723ED62810AC1D857F1C551
SHA1:	1CFDBB9E522D0D663244E2CA2FD4A38C4DA54E40
SHA-256:	233D93EE0443D7E9D5DF97E4D5A2DC4AD6B18B0D86E62E46BB9953ECDBC2BACC
SHA-512:	D2E7946A17E244DC8EA6173B93A6321CFB17BD916764AA4EF74D489757AFCC700FA0CB45532E95C4C3FED56892D0E5CAACB6F25E75564F21B8CB7C7A5AEF457C
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/html/r20250113/r20190131/zrt_lookup_fy2021.html
Preview:	<!DOCTYPE html><script>.(function(){'use strict';/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var l=this\|\|self;var n,p;a:{for(var aa=["CLOSURE_FLAGS"],w=l,z=0;z<aa.length;z++)if(w=w[aa[z]],w==null){p=null;break a}p=w}var ba=p&&p[610401301];n=ba!=null?ba:!1;function ca(){var a=l.navigator;return a&&(a=a.userAgent)?a:""}var A;const da=l.navigator;A=da?da.userAgentData\|\|null:null;function B(a){return n?A?A.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function C(a){return ca().indexOf(a)!=-1};function E(){return n?!!A&&A.brands.length>0:!1}function F(){return E()?B("Chromium"):(C("Chrome")\|\|C("CriOS"))&&!(E()?0:C("Edge"))\|\|C("Silk")};function ea(a,b){Array.prototype.forEach.call(a,b,void 0)};function G(a){G[" "](a);return a}G[" "]=function(){};var fa=ca().toLowerCase().indexOf("webkit")!=-1&&!C("Edge");!C("Android")\|\|F();F();C("Safari")&&(F()\|\|(E()?0:C("Coast"))\|\|(E()?0:C("Opera"))\|\|(E()?0:C("Edge"))\|\|(E()?B("Microsoft Edge"):C("Edg/"))\|\|E()&&B

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5960)
Category:	dropped
Size (bytes):	288484
Entropy (8bit):	5.585764096087795
Encrypted:	false
SSDEEP:	6144:mcxsyIJDyA0z/vICBf5FjGgMShEmUBR2lfyiRigC:BAJOLz/AsxeBRShil
MD5:	2A02861B570F99913B545D36FE063C58
SHA1:	2E3AC1BDCB5C88E5EA6D64CDE338062E0B596000
SHA-256:	6A41A3B427116EF9BB6F944591910FE941A3F06521C2FF4A09B89CB0C34F2607
SHA-512:	3093D58B30EADDFE975E4EBDD4B2701818CDFCA02EEDDC4BFD9B2E36E1BE0F3899A24D000B0CD4E4A9489B88D63D42E552D73E7CF52B7EA3BC4F352953446B3C
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":6,"vtp_value":true,"tag_id":9},{"function":"__ogt_session_timeout","priority":6,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":11},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTO

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2167)
Category:	downloaded
Size (bytes):	38115
Entropy (8bit):	5.52762360182264
Encrypted:	false
SSDEEP:	768:8ivfxdU2EQFQJ86qp40roqmRrZVmsnPua0A+EAV18NadZo4OHQr2W7OJ4wG8yXyu:1H7U+7opmsmq0jSnIqjZw
MD5:	CE0BFB4856FD846B8947D5D1277EBA9F
SHA1:	C3E10C13DC4A8D78C25A57FEF98D1FD5895D4F4F
SHA-256:	87686C876E73DF0EFCF2213455525647D1322C23319BE16290F8BBC18F3EAAB6
SHA-512:	2CAA4747D78EC20084B57D2140247C6FB347008B0EA42303B5255C0084EE469DE4A57C7821DE288B3D293D374E868DA0AA50AC08A4DF96DD1ADA98176ECB4EDD
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20250113/r20110914/client/one_click_handler_one_afma_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var m=this\|\|self;function aa(a){return a};function p(a,b){if(!b)return a;b.indexOf("&")===0&&(b=b.substring(1));const c=/[?&]adurl=([^&])/.exec(a);return c?`${a.slice(0,c.index+1)}${b}&${a.slice(c.index+1)}`:`${a}${a.indexOf("?")===-1?"?":"&"}${b}`}function ba(a,b){switch(a){case 0:return b?"&ri=1":"";case 1:return b?"&ri=24":"&ri=27";case 2:return b?"&ri=25":"&ri=26";default:return""}} .function ca(a){a=a.o;if(!a)return"";let b="";a.platform&&(b+="&uap="+encodeURIComponent(a.platform));a.platformVersion&&(b+="&uapv="+encodeURIComponent(a.platformVersion));a.uaFullVersion&&(b+="&uafv="+encodeURIComponent(a.uaFullVersion));a.architecture&&(b+="&uaa="+encodeURIComponent(a.architecture));a.model&&(b+="&uam="+encodeURIComponent(a.model));a.bitness&&(b+="&uab="+encodeURIComponent(a.bitness));a.fullVersionList&&(b+="&uafvl="+encodeURIComponent(a.fullVersionList.map(c=>encodeURIC

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (2166)
Category:	downloaded
Size (bytes):	40065
Entropy (8bit):	5.523718607594165
Encrypted:	false
SSDEEP:	768:ahgz3bFoPa6QJ0cGzFdXmRSdZv4kwYoI++9lGf1jdJu2YvZd/ItUhi5noT4eynN0:qwrWdR0u4kImVVIt7s6fBxJO
MD5:	A58566D29ED3E45AE10B29ECBC28E4B3
SHA1:	056D768E098ED45AC24CA8D88A84FB891C09E4B0
SHA-256:	A488CB1BD0FB56F709F67A61DECBE27A50C44032F1F145AA0BC94B88868EA925
SHA-512:	302329355624883F8F2568FF0F78FEF32F7E7F33F862C9D1984F7B0B9CB37E7399D307E1D1C09C0F80122EBAE623A3D3E467B70F68077EC14BFB25252B521534
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/mysidia/a58566d29ed3e45ae10b29ecbc28e4b3.js?tag=addon/mysidia_one_click_handler_one_afma
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var m=this\|\|self;function aa(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=m,e=0;e<c.length;e++)if(d=d[c[e]],d==null){c=null;break a}c=d}a=c&&c[a];return a!=null?a:b}function ca(a){return a};function q(a,b){if(!b)return a;b.indexOf("&")===0&&(b=b.substring(1));const c=/[?&]adurl=([^&]*)/.exec(a);return c?`${a.slice(0,c.index+1)}${b}&${a.slice(c.index+1)}`:`${a}${a.indexOf("?")===-1?"?":"&"}${b}`}function da(a,b){switch(a){case 0:return b?"&ri=1":"";case 1:return b?"&ri=24":"&ri=27";case 2:return b?"&ri=25":"&ri=26";default:return""}}.function ea(a){a=a.o;if(!a)return"";let b="";a.platform&&(b+="&uap="+encodeURIComponent(a.platform));a.platformVersion&&(b+="&uapv="+encodeURIComponent(a.platformVersion));a.uaFullVersion&&(b+="&uafv="+encodeURIComponent(a.uaFullVersion));a.architecture&&(b+="&uaa="+encodeURIComponent(a.architecture));a.model&&(b+="&uam="+encodeURIComponent(a.model));a.bitness&&(b+=

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2460)
Category:	dropped
Size (bytes):	16238
Entropy (8bit):	5.493507146750787
Encrypted:	false
SSDEEP:	384:r8VFJaUWy1AfwUwTIUq+rBNpX7EqWizLBC8oJUry4pnF+qlMfKsS:r8VFJTWy14wUwTI9iNpX7pWcf4v4pFP5
MD5:	647F48269C17B304426AC60D8C5BAF44
SHA1:	6205E188CCF4A6B3674778ED97438EFE0E135A02
SHA-256:	486C11EF948B612507F68B69408CDC2F3BFE24AB2183465E57CC9387BD9AEC37
SHA-512:	580F46D641E4B3B463723F3F8A037ED625A029BD01AE7E7BC3EB5EA1257A2A513340B9531C970544097563A32CD24AF205D3C3C18CB88CAF78241EC7E9920586
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';var aa=Object.defineProperty;function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this); .function da(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}}da("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")});/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function ea(a){return a};var q,r;a:{for(var fa=["CLOSURE_FLAGS"],t=m,u=0;u<fa.length;u++)if(t=t[fa[u]],t==null){r=null;break a}r=t}var ha=r&&r[610401301];q=ha!=null?ha:!1;var y;const ia=m.navigator;y=ia?ia.userAgentData\|\|null:null;function z(a){return q?y?y.brands.some(({brand:b}

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2460)
Category:	downloaded
Size (bytes):	16238
Entropy (8bit):	5.493507146750787
Encrypted:	false
SSDEEP:	384:r8VFJaUWy1AfwUwTIUq+rBNpX7EqWizLBC8oJUry4pnF+qlMfKsS:r8VFJTWy14wUwTI9iNpX7pWcf4v4pFP5
MD5:	647F48269C17B304426AC60D8C5BAF44
SHA1:	6205E188CCF4A6B3674778ED97438EFE0E135A02
SHA-256:	486C11EF948B612507F68B69408CDC2F3BFE24AB2183465E57CC9387BD9AEC37
SHA-512:	580F46D641E4B3B463723F3F8A037ED625A029BD01AE7E7BC3EB5EA1257A2A513340B9531C970544097563A32CD24AF205D3C3C18CB88CAF78241EC7E9920586
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20250113/r20110914/elements/html/fullscreen_api_adapter_fy2021.js
Preview:	(function(){'use strict';var aa=Object.defineProperty;function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this); .function da(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}}da("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")});/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function ea(a){return a};var q,r;a:{for(var fa=["CLOSURE_FLAGS"],t=m,u=0;u<fa.length;u++)if(t=t[fa[u]],t==null){r=null;break a}r=t}var ha=r&&r[610401301];q=ha!=null?ha:!1;var y;const ia=m.navigator;y=ia?ia.userAgentData\|\|null:null;function z(a){return q?y?y.brands.some(({brand:b}

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (58670), with no line terminators
Category:	downloaded
Size (bytes):	58670
Entropy (8bit):	6.10787125840624
Encrypted:	false
SSDEEP:	768:uAHIgdMyXAXabfGCOlB7snLc+kffmHuloFLn+S/542jyfi9Brb9+ETdrDyyMQQmD:RqgllJtyEoWI3m
MD5:	0AAE481E7AFA24B2619D9B6EEA957D4B
SHA1:	06C601C9DA7571BEC8CE047F491A3F1C5B18BD78
SHA-256:	F2E6E939813B1E71BBF99B7A058A8A05E5F173CA8FCA4952BB86A69FF4282B48
SHA-512:	9D9EF85DADEE08E93DA22FE095C7E83973E18E52624451A0876FFDFCB2563A71A61A4188FBD399EF846230DB8F82872B2200EB2A3F7F79A3E43C8435D06D3303
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2840258101411863&output=html&h=280&slotname=1589304026&adk=2488830594&adf=2972800098&pi=t.ma~as.1589304026&w=856&abgtt=6&fwrn=4&fwrnh=100&lmt=1736881262&rafmt=1&format=856x280&url=https%3A%2F%2Fandroiddatahost.com%2Fsdsd3&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736909361577&bpp=1&bdt=1279&idt=1568&shv=r20250113&mjsv=m202501080201&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C856x280%2C336x280&nras=1&correlator=8040805227545&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=204&ady=1649&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533203%2C31089542%2C31089715%2C95350245%2C31089639&oid=2&pvsid=539208937878820&tmod=1359503699&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CoeEbr%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&btvi=1&fsb=1&dtd=1571
Preview:	<!doctype html><html><head><script>var jscVersion = 'r20250113';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {};</script><script data-jc="42" data-jc-version="r20250113" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb/%<1245;05!=nehu`/!361:<320!9sqrm(&2057?61<&>`dopb~"]">(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var u=this\|\|self;function aa(a){return a};var w,x;a:{for(var ba=["CLOSURE_FLAGS"],y=u,z=0;z<ba.length;z++)if(y=y[ba[z]],y==null){x=null;break a}x=y}var ca=x&&x[610401301];w=ca!=null?ca:!1;var B;const da=u.navigator;B=da?da.userAgentData\|\|null:null;function C(a){return w?B?B.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function D(a){var b;a:{if(b=u.navigator)if(b=b.userAgent)break a;b=""}retur

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	903
Entropy (8bit):	7.640775296290854
Encrypted:	false
SSDEEP:	24:huKXZveKAmXWWI0PXmgFWLEol1Fbz2p0H6SN3TT:hdRl6n0PWgFUEK1Fb6pW6SN3TT
MD5:	5A84052998EBE16C105D52406F411524
SHA1:	BE4FAA83366ED07FD5F5BAFBDBC2131F3B7DB7D3
SHA-256:	73BF3107F54B9228D32564923A23A9884CC97F1F24A3C60E94DAA1D36A94C956
SHA-512:	2F29546604F3B816A5A6FEFC183321F38AAE6D7ADBB79C5E11C884F9291B406D59989F7CF43EED71E386BED6CE2DD4DE88A11610AC98A41C87254002A2424338
Malicious:	false
Reputation:	low
URL:	https://androiddatahost.com/favicon-32x32.png
Preview:	.PNG........IHDR... ... .....D.......PLTE...6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X5@X3=U...ENd......@Ja...ISi=G^......{.....:C[.......RZoNXm.............gn.KTjHQg7AY.......................ov.jq.bi\|]exZbv.............U^r..............w~.v}..{s2Zd2R`..............,.~_gzDirMbq.qn.gi5K]k......tRNS.../...b#......:Sm......IDAT8...r.@....J..4...'.I..r.N.p9......u:W...MM..#e.Ky.T.O.\|.,.O.p&C.\|V...'.c. .p..'.\|~q..$....8..\.W.`$...P.....Ju....].......P..\:.R.kJ...M[.n(....K.".o.p'$...I....(...h..0..kH....!.`8+.A.=..{.0.l...jX..{...R...p^.J2..J..!......[...4.......[..g...%...o-..F...K....}.....]........M..{.P.....U$.MM.........r....s$3..^......H...p...j._.<C.w%....^.Pa!....s..l..&^..lM}...=.....c.r..t]7...>..Z.y.(..]{.Y.....,..l..g.\.f...7.....7..)A V-..2..?h....2.f!...r... 8...X.w{.l.(LV91%. ..(.(.........H....2..{.x.<..-.W.v$R.....IEND.B`.

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 117534
Category:	downloaded
Size (bytes):	40880
Entropy (8bit):	7.99308353156035
Encrypted:	true
SSDEEP:	768:5HfJwcwasbn1aDY5KUijABuOUa2G7t84Z+bj7UixaOscphYeSm:5HdwasbnItUKAEMt84cbjVaOBrIm
MD5:	5AD79BB1880125A8247410C9E939F35E
SHA1:	6F561694DBC26BDFF78D74848A6F9E8EB1840DAD
SHA-256:	5ECA8C67BE7DD9CC3C4D5C01BD14F1DE69E81C8C467BD44B7962C2E596733034
SHA-512:	771F2859E449196F3506436ADB8E0EB80791ED0F9426BF009611FCFAF8EF48F6FCF6EDC60088C4BA4EFB4E5A7900BDCA4E99D297A7DD1540165190F95C5E9B4B
Malicious:	false
Reputation:	low
URL:	https://androiddatahost.com/sdsd3
Preview:	...........{{.8...y~.......Cls..{I .=...Iw:.........&..\|..J._.$..9{.y..i..J%.TU.d....A..%....Q....[sFu.tDL05..LL_...6.L..^..3e.';......0ug.(....=X.?......C...4;..m..i.3.C..o.E.....3...tj......dE...L..e.....xf......^uoOs..k...kc..;.[...:.x-....B/..62...W.S.s.[.j.H)C...Z..R.#.....L4......R....s..Y...1....6.fVfj9.id\|m...G(..;..?.y...0.....5...-.<@..$........C.8..3w.......c...0tm.}.....!....L...F&...k:5.jF...-.t....q.?>x..6?Z.Q..R.l<...u#.4.i..ii.4H.....3..,=.hU!'...QP..........P.LF.-O....;....3..........<_.N..=.Y.p......-....;3.3..GQ.=.t..L.;.[>T{6vM.z..-_.T.rYH5l..Gy&..7...k.?.Q\|(..(....5....&M.....C$h9#..].N.Z..63...6-..@5.G{.6D.[SPK.$x0......,.#... .X..S."..P.u.q..@.M2nxF.. ....9..u..Um.5Z........@.Y......#{_db..l%..:6.-...H...........T.&...]T.I...T..myc.....JG..bF.d.r_.W.JU-..rU._.7q.kh%.S..9.Q+}U..j5.@..1P..l....`..z...p...#....H9o>.h.....~....,...DJ..a.#.....X)....65Z...&.f.@R.Ti.."L,g...t..U9......G...>.s.6.P..G.f.t,~\|

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3160)
Category:	dropped
Size (bytes):	20762
Entropy (8bit):	5.534161653662071
Encrypted:	false
SSDEEP:	384:ElV/MfTqRhG/rVBnnksgmca0ha5WpZbTNinUm0fBC08er7ODgUR5KAC+P8aqWahC:ElV/MrqRc/rznAkLEpNTNiUz5C0Lr70X
MD5:	DF8C7196958168C2B6E10F4D2306BEF3
SHA1:	5AEAB2C4B37035DE83839EBAC95C471E8EA132F2
SHA-256:	6617311ECE84D2511297F47001AA93FB5F171F4DAF874472913F3FE78C00653B
SHA-512:	36BA3A8E074C9F88CCF33F6F9FA433AC9A0A3D2C2EABDA87790FE17E55BAAFAD8A70F4D2E040D393DBCE01833A774EAC0B79A30AF64C0589C389C6859BEF933C
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';var aa=Object.defineProperty;function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this); .function da(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var f=a[d];if(!(f in c))break a;c=c[f]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}}da("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")});/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var n=this\|\|self;function ka(a,b,c){return a.call.apply(a.bind,arguments)}function p(a,b,c){p=ka;return p.apply(null,arguments)}function la(a){return a}function ma(a,b){function c(){}c.prototype=b.prototype;a.N=b.prototype;a.prototype=new c;a.prototype.constructor=a;a.O=function(d,f,g){for(var e=

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 61628, version 1.0
Category:	downloaded
Size (bytes):	61628
Entropy (8bit):	7.996560994602728
Encrypted:	true
SSDEEP:	1536:D0bcbU0BkgaaHDF868T5Io63Udr9xCHGD1AMYN4+:gbcbUq5a4x8VV63ErD1g
MD5:	1033A47731E45F7BD46A1962359E96B4
SHA1:	AC6ABEF8D1819A685DB48A9515F77A24A153E2A0
SHA-256:	61C412FBDBBF1417355373A80125C8CF7E5CBAAB4218BAE0316FE6EF917BF798
SHA-512:	84CA95F89E0A16EFD962B44BD3F7FFE09B328F33C068ACD8A1FEFD08101D824929E8B9EECCB0786483AA2FD2C60BD0B76FC2242479268D69FAAB72C48902E34B
Malicious:	false
Reputation:	low
URL:	https://cdn.bidbrain.app/compressedFonts/RobotoBold.woff2
Preview:	wOF2.............~....U..........................D...\|..h.`..H.B..<.....l.....F...l.6.$.... ..". .."[.B...r...`..v..-.8.ko.0.W....)...B.........4..wf.......J&2.IZ.i)E.........FP.".Z.%j(...<...,.c..).5..bW.h..}......Mv.......,....7H...&...G..x..SzA.V.....}.. ..!s..H....:.....YZ.4.......~....@..T.WOK.?.k....".{..".R.><Tf.&.\|..r..F..z..I.+.5.\|=. l..J...A..&.^g/..#......O6..XS...r.g.}...._3....l..\.V.Nw...c...i.<.()..l4.3.2<...h}U. ........:7._...(S.AU..P.....bg...8..a./.x..oy............?UH...#.T.Tl.../..Z....f~..% .[/.D.6".2v97[.'...p...'a....i...x,.....@..vrq.kO....f..@2..5...U=..,.A.....]t.[d..".B ..,b..#J..q....'..E......8.........M.c....5....~.....g.....I...l..$.DM.$.B..wrM.;..p!#W..c....FTNO.P.@......WU...-...'.gB7........#......P.ItzxW..[*....R."/.....SV..&{......r+M...P..C..7.>E..kS.T.\...=s..I...Fh.4......gp..KJ..v...Y.....p"...i.I.d....jwH...t).cG.......>....^6..@.&\|....G......U..{.........$..7..]..r.2`..9..~....;....Y...g

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5960)
Category:	downloaded
Size (bytes):	288501
Entropy (8bit):	5.585902323991498
Encrypted:	false
SSDEEP:	6144:mcxsyIJDyA08IvICBf5FjGgMShEmUBR2lfyiRigC:BAJOL8IAsxeBRShil
MD5:	A5A7DE7E173F300473AA54CE4C6C50C8
SHA1:	60478C958B12FB90E07410DA4BC4F4486BA368BA
SHA-256:	1291ED6F391FA7FD0499C04076B098874FE69E5F1376D40EDF0EAC3DCCAEBC9D
SHA-512:	EB37E33E8CBA799B8021F96D88416E89BC4C1D402769FD37AA7078B410842817A248FB5C8EB389C29A2D5A5A00F2BF712C68108E3D7163265B87BD44D98C15A2
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-L3KCHB9NB2&cx=c&_slc=1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":6,"vtp_value":true,"tag_id":9},{"function":"__ogt_session_timeout","priority":6,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":11},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTO

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsu3OOQNw4oL_ZhXnBULwRRt6R1XdWR7mMlxVq2Px8Bz-BRJ4JEw7Zt_rD6ExQSktyCMtAfocFNgW2vUYW7i3OyrpY52OJMnMHhgXXshOjb0ECOW_cVibFeGZ4tegss22VYrd5BjfoQ&sig=Cg0ArKJSzNTlEF9SWp4MEAE&id=lidar2&mcvt=1001&p=0,0,280,856&tm=3779&tu=2778.300000000003&mtos=1001,1001,1001,1001,1001&tos=1001,0,0,0,0&v=20241204&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=20&adk=2488830594&rs=2&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=3284216500&rst=1736909363149&rpt=5451&met=mue&wmsd=0&pbe=0&fle=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	141707
Entropy (8bit):	5.4473128875543075
Encrypted:	false
SSDEEP:	3072:p660sTPv0WJECBN8/tspu9lHtzkKPS8mKN0WlBz9Gm:SMg6clO4Rrht
MD5:	DBB8A5F0C0779C20B733ECB73A421605
SHA1:	219968A8361A730D30DB9772291D830B75BE526F
SHA-256:	2E7055C6FBE405848AD40D4DDC6F7EA3CAE9DD55F08B8CFB691CCB772DF7C162
SHA-512:	7E3DABC7E7FFDEFB9E32248DAE2A58919DB366866F57EBD70A1255205370FD2F0395C0DA35A9C319E23E8C50A914F439EC52EEFCCEC05854D18D2A5153980A3C
Malicious:	false
Reputation:	low
URL:	https://cdn.bidbrain.app/ng-assets/creative/assets/index-5333d910.js
Preview:	var oi=Object.defineProperty;var si=(e,t,n)=>t in e?oi(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n;var j=(e,t,n)=>(si(e,typeof t!="symbol"?t+"":t,n),n);function Mh(){import.meta.url,import("_").catch(()=>1),async function*(){}().next()}(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const o of document.querySelectorAll('link[rel="modulepreload"]'))r(o);new MutationObserver(o=>{for(const s of o)if(s.type==="childList")for(const i of s.addedNodes)i.tagName==="LINK"&&i.rel==="modulepreload"&&r(i)}).observe(document,{childList:!0,subtree:!0});function n(o){const s={};return o.integrity&&(s.integrity=o.integrity),o.referrerPolicy&&(s.referrerPolicy=o.referrerPolicy),o.crossOrigin==="use-credentials"?s.credentials="include":o.crossOrigin==="anonymous"?s.credentials="omit":s.credentials="same-origin",s}function r(o){if(o.ep)return;o.ep=!0;const s=n(o);fetch(o.href,s)}})();var _n,D,Do,ct,Lr,Vo,jn,cr,Nn,Mn,T

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2167)
Category:	dropped
Size (bytes):	38115
Entropy (8bit):	5.52762360182264
Encrypted:	false
SSDEEP:	768:8ivfxdU2EQFQJ86qp40roqmRrZVmsnPua0A+EAV18NadZo4OHQr2W7OJ4wG8yXyu:1H7U+7opmsmq0jSnIqjZw
MD5:	CE0BFB4856FD846B8947D5D1277EBA9F
SHA1:	C3E10C13DC4A8D78C25A57FEF98D1FD5895D4F4F
SHA-256:	87686C876E73DF0EFCF2213455525647D1322C23319BE16290F8BBC18F3EAAB6
SHA-512:	2CAA4747D78EC20084B57D2140247C6FB347008B0EA42303B5255C0084EE469DE4A57C7821DE288B3D293D374E868DA0AA50AC08A4DF96DD1ADA98176ECB4EDD
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var m=this\|\|self;function aa(a){return a};function p(a,b){if(!b)return a;b.indexOf("&")===0&&(b=b.substring(1));const c=/[?&]adurl=([^&])/.exec(a);return c?`${a.slice(0,c.index+1)}${b}&${a.slice(c.index+1)}`:`${a}${a.indexOf("?")===-1?"?":"&"}${b}`}function ba(a,b){switch(a){case 0:return b?"&ri=1":"";case 1:return b?"&ri=24":"&ri=27";case 2:return b?"&ri=25":"&ri=26";default:return""}} .function ca(a){a=a.o;if(!a)return"";let b="";a.platform&&(b+="&uap="+encodeURIComponent(a.platform));a.platformVersion&&(b+="&uapv="+encodeURIComponent(a.platformVersion));a.uaFullVersion&&(b+="&uafv="+encodeURIComponent(a.uaFullVersion));a.architecture&&(b+="&uaa="+encodeURIComponent(a.architecture));a.model&&(b+="&uam="+encodeURIComponent(a.model));a.bitness&&(b+="&uab="+encodeURIComponent(a.bitness));a.fullVersionList&&(b+="&uafvl="+encodeURIComponent(a.fullVersionList.map(c=>encodeURIC

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53867)
Category:	dropped
Size (bytes):	55134
Entropy (8bit):	5.702232148791689
Encrypted:	false
SSDEEP:	768:jEiPAeoa9vySust0GTzOwaosKf/1gR3ARHNL5vsaeHJ9ibZlPqy5iHMfa+:jEirvmkOnosyORwRr0J9Uq2
MD5:	8B0CCE3B1EBF7A94348320551F0093EF
SHA1:	433867B75985AACAF92CA2AC1F278174509E6076
SHA-256:	F99ACB7AFF3429A4A5E4B1F93826E76461EEEB22D26F7B511AEC1AC4656752C3
SHA-512:	972868D461F9B39F68D87335682680F1BD51F5D9B51E65E41F9A4757678653DFF870E580A92C5973757022C6DD1C9F8B1E613267C6E96F045989FBCDA22B1791
Malicious:	false
Reputation:	low
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function F(O){return O}var T=function(O,n,C,V,w,E,x,h,m,r,q,R){for(q=80,r=95;;)try{if(q==13)break;else{if(q==91)return h;if(q==79)return r=95,h;q==V?q=l.console?8:79:q==8?(l.console[E](R.message),q=79):q==19?(r=95,q=V):q==80?(m=l.trustedTypes,h=w,q=O):q==C?(r=n,h=m.createPolicy(x,{createHTML:W,createScript:W,createScriptURL:W}),q=79):q==O&&(q=m&&m.createPolicy?C:91)}}catch(e){if(r==95)throw e;r==n&&(R=e,q=19)}},l=this\|\|self,W=function(O){return F.call(this,O)};(0,eval)(function(O,n){return(n=T(7,32,61,62,null,"error","bg"))&&O.eval(n.createScript("1"))===1?function(C){return n.createScript(C)}:function(C){return""+C}}(l)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJza

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41962)
Category:	downloaded
Size (bytes):	256015
Entropy (8bit):	5.430822688704006
Encrypted:	false
SSDEEP:	6144:QzJjXMh7F8AtgYtu1lYnrT8lEEWeUO0wy5:51kWf
MD5:	2256B78D8ECFA34EB5B7A43723B818FF
SHA1:	8F2A8C494AE79377131C6378FC6F01065590851F
SHA-256:	817FEF7466B7D3BEBE7ED033CC7A79C819BD33CAC6027C715791F999774F53A5
SHA-512:	EECFFB85EA73C00B9F0E81BADEB950C28855F23F28B4F01778F8F7100CFEEBDB0F782F50CFF5C443B90AE285656CEE2DB2F237488B4CC6877A578DCA08E3F6DF
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/lidar.js?fcd=true
Preview:	(function(window,document){var n;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this);function p(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}p("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.g=f;ba(this,"description",{configurable:!0,writable:!0,value

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3023)
Category:	dropped
Size (bytes):	92245
Entropy (8bit):	5.581594277008879
Encrypted:	false
SSDEEP:	1536:iuvz5PpxAhaW3IapDH9v03ZI/kZ+Uur+Jez3Fg/9jqAib9qCqFT3+VIF1nlPEnFt:iqz5khaW3ZUZIMZXuCB/9SYCqF7+V4nw
MD5:	8752BE6CCFE5D9DF7C60A1AA475B3ABB
SHA1:	E9071EA958AEB77229DBBFB99C5BC445A751647C
SHA-256:	3B570B021A7CF3BE58E75F32AA3C3C81E30107D9ADEF24FF86049F080B55EDD7
SHA-512:	515D715AB4B969F66C8DC8096B322B67B1A13E1B9D1CDA52297D2D962E0D8D1F6DACF89CE69F9C39118A786B616B4A54FA2632BB03A0833EC7BB4D79F30B572A
Malicious:	false
Reputation:	low
Preview:	(function(sttc){'use strict';var l,aa=Object.defineProperty;function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this),da=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",ea={},fa={};function ha(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ia(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in ea?f=ea:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=da&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(ea,d,{configurable:!0,writable:!0,value:b}):b!==c&&(fa[d]===void 0&&(a=Math.random()*1E9>>>0,fa[d]=da?ca.Symbol(d):"$jscp$"+a+"$"+d),aa(f,fa[d],{configurable:!0,writable:!0,value:b})))}}ia("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")},"es_next

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1382)
Category:	dropped
Size (bytes):	17945
Entropy (8bit):	5.330388445341784
Encrypted:	false
SSDEEP:	384:AbnElW+CdYyqBFy9G/JtCHAOgRImVWsc5JZB:Ll3CdnqC9ct2A1ImVWsc5h
MD5:	3B071D5606CC1CF92AE307F5BDB4E540
SHA1:	E191068CC90E5489130489A1CF173FE50BBA28B8
SHA-256:	FF3DE130872FE0FB5B770DFA2BC9F0DAF8AB320403A34A60D089436F08D24F99
SHA-512:	8A1287D7528B2B65D61D6E0A639F2CBE5658AFC3EDB5E2AF9494E8CC876AA6C8060A55D3BD4AA85A0B3B82733E64F7F7A6B4A5F2597FD99FD37136A83A6BBCAD
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var k=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ba(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",r={},u={};function w(a,b,c){if(!c\|\|a!=null){c=u[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}}.function x(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var g=d[0],f;!a&&g in r?f=r:f=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in f))break a;f=f[e]}d=d[d.length-1];c=p&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?k(r,d,{configurable:!0,writable:!0,value:b}):b!==c&&(u[d]

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2008)
Category:	downloaded
Size (bytes):	13020
Entropy (8bit):	5.338335125035746
Encrypted:	false
SSDEEP:	192:pl/66sGOASROqI3wgh5MXnYY9EAhMmK3qzfaGxCLLgIJQaYmx:rnsGN6JIVs3LLK3qzf6gIZYmx
MD5:	D1F231B50B152372A6C3100F4AED1973
SHA1:	1BF10951BE06DA03D1371A904E19C0419F2A3637
SHA-256:	9DEC95894AF322B087AB6E87F9C8CE66D849646CF33B375D33C957F4569ED081
SHA-512:	00093B7FC4AFFA2D2230622F5D7DA69730246B74620AD4DE30AC64E41FB9AC927AFD2AB426034D71DC85A3DFEE9A46E73DF48DA7E2636A54579EA9AAAC4CAFF6
Malicious:	false
Reputation:	low
URL:	https://ep2.adtrafficquality.google/sodar/sodar2/232/runner.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){'use strict';function m(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var p=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function aa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var r=aa(this),u=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",v={},w={};function x(a,b,c){if(!c\|\|a!=null){c=w[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}}.function y(a,b,c){if(b)a:{var e=a.split(".");a=e.length===1;var f=e[0],h;!a&&f in v?h=v:h=r;for(f=0;f<e.length-1;f++){var d=e[f];if(!(d in h))break a;h=h[d]}e=e[e.length-1];c=u&&c==="es6"?h[e]:null;b=b(c);b!=null&&(a?p(v,e,{config

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	721
Entropy (8bit):	6.777163295363377
Encrypted:	false
SSDEEP:	12:6v/7sAIeOufV8TBeQVuXePwXAaSSwdWhsPpcl+zf80f41s2:qIfufV8TwQAOic9WhsRpzf8vP
MD5:	431EBAE5FB7E995D46DBD1BB941F0D32
SHA1:	19DEDD4B4E4D5D06C5882790E5B4EB1429FAF50A
SHA-256:	FA68A5FE0B00F530C164B07DD67B85D1CB5BA2743F2DFA93BEBC6E0C1F805E96
SHA-512:	346443D50AAFB1CC30EFF012B18A398D03F2751E6EAEC7E976B8F966F93A7C052668B56B145DF12020B60BECB754F1D3C5C256B61ABEC559C192C4D3D7C8465B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@............xPLTE..........................................................................................................................H....'tRNS...?..2.....wX:G...MD7g.d...6..k..q*.!_c>5....IDATX...v.0.E/. ..T.Ppl...X..C!.....r....H.)..D....#......_ym..yi.....Z.&..r.`..\|..&.C. 0.....mX....Og.4@.............4.yd..".."o.... ...g...f.$B5.9.I.#.".?..0A...s.{.`<e.0...k4RmX..!x.&zW3....o...p..........[......1.t.2W..'...~::.J..:dDl.....@L..&.t.#.<.K.....2:.8`...a.q...a..q....../V..C............._tHB..]m.........sj.P.]..-..+a1.:....at.4........\+l....v....:.t....4.n@.y..Z"..<...E.gHY...c(S=.F...c(+.f.Y...7.H.....8...?.'.&...;..........}..=.M.X.o.4c..&.....IEND.B`.

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (11822)
Category:	downloaded
Size (bytes):	11824
Entropy (8bit):	5.2927390094370335
Encrypted:	false
SSDEEP:	192:O9d9uZiYB+zsjBHN5whvID3YMYSPSWQ55aTkcfChQY+DdlZ7hJfLHmJIBu:Ee2zsNHHwlIDhPSZ550kcfChQtvJfxBu
MD5:	659A1EC658C77B9C936C856B9B72A548
SHA1:	C1076FE1A694D561FFAA673793CB6418763FA1E4
SHA-256:	B2D12B381E4F471679E903D6C8FE634AB8DDA43764168C8F3C1EE1269FE7EDAB
SHA-512:	77F2057B03E14C9378F6C6CB087263D7239EDA44D57104DF48105B88938656F594BD68DCAD9CDA0409AFDB78205C872B65F63816146923676F522C3626232558
Malicious:	false
Reputation:	low
URL:	https://cdn.bidbrain.app/ng-assets/creative/assets/polyfills-a3f452c3.js
Preview:	export function __vite_legacy_guard(){import.meta.url;import("_").catch(()=>1);(async function*(){})().next()};var t="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},n=function(t){return t&&t.Math===Math&&t},r=n("object"==typeof globalThis&&globalThis)\|\|n("object"==typeof window&&window)\|\|n("object"==typeof self&&self)\|\|n("object"==typeof t&&t)\|\|n("object"==typeof t&&t)\|\|function(){return this}()\|\|Function("return this")(),e={},o=function(t){try{return!!t()}catch(n){return!0}},i=!o((function(){return 7!==Object.defineProperty({},1,{get:function(){return 7}})[1]})),u=!o((function(){var t=function(){}.bind();return"function"!=typeof t\|\|t.hasOwnProperty("prototype")})),c=u,a=Function.prototype.call,f=c?a.bind(a):function(){return a.apply(a,arguments)},l={},s={}.propertyIsEnumerable,p=Object.getOwnPropertyDescriptor,y=p&&!s.call({1:2},1);l.f=y?function(t){var n=p(this,t);return!!n&&n.enumerable}:s

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41962)
Category:	dropped
Size (bytes):	256015
Entropy (8bit):	5.430822688704006
Encrypted:	false
SSDEEP:	6144:QzJjXMh7F8AtgYtu1lYnrT8lEEWeUO0wy5:51kWf
MD5:	2256B78D8ECFA34EB5B7A43723B818FF
SHA1:	8F2A8C494AE79377131C6378FC6F01065590851F
SHA-256:	817FEF7466B7D3BEBE7ED033CC7A79C819BD33CAC6027C715791F999774F53A5
SHA-512:	EECFFB85EA73C00B9F0E81BADEB950C28855F23F28B4F01778F8F7100CFEEBDB0F782F50CFF5C443B90AE285656CEE2DB2F237488B4CC6877A578DCA08E3F6DF
Malicious:	false
Reputation:	low
Preview:	(function(window,document){var n;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this);function p(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}p("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.g=f;ba(this,"description",{configurable:!0,writable:!0,value

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (58820), with no line terminators
Category:	downloaded
Size (bytes):	58820
Entropy (8bit):	6.104063911122478
Encrypted:	false
SSDEEP:	768:uAHIgdMyXAXabfGCOlB7snLc+kffmHulgyXncd1btLInM+S/542jBfWa/x9Brb9T:RqglqXcdcytBf5vAWE33m
MD5:	3EC6522F63D3BF6B678606E7C474479F
SHA1:	C87CF5C718EABDFF5F846C72E50B7E50329521C1
SHA-256:	C1F6BB33E14DB3BF6DAA677FDA1C215409AE655D65622B77B556A86D61816E00
SHA-512:	DAB872D60EEA6530FD2FB2F31F6A4AA27A57F9493F6C7E7F505A97487DD6496E2E0A7851A00A4451AF2F34B0FDDA0D9DB1E3BDE39A03B209041B8142D4D252BA
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2840258101411863&output=html&h=280&slotname=2448584244&adk=39937659&adf=2782902954&pi=t.ma~as.2448584244&w=856&abgtt=6&fwrn=4&fwrnh=100&lmt=1736881262&rafmt=1&format=856x280&url=https%3A%2F%2Fandroiddatahost.com%2Fsdsd3&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736909361575&bpp=2&bdt=1276&idt=1551&shv=r20250113&mjsv=m202501080201&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=1&correlator=8040805227545&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=204&ady=186&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533203%2C31089542%2C31089715%2C95350245%2C31089639&oid=2&pvsid=539208937878820&tmod=1359503699&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CoeE%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&fsb=1&dtd=1556
Preview:	<!doctype html><html><head><script>var jscVersion = 'r20250113';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {};</script><script data-jc="42" data-jc-version="r20250113" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb/%<1245;05!=nehu`/!361:<320!9sqrm(&2057?61<&>`dopb~"]">(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var u=this\|\|self;function aa(a){return a};var w,x;a:{for(var ba=["CLOSURE_FLAGS"],y=u,z=0;z<ba.length;z++)if(y=y[ba[z]],y==null){x=null;break a}x=y}var ca=x&&x[610401301];w=ca!=null?ca:!1;var B;const da=u.navigator;B=da?da.userAgentData\|\|null:null;function C(a){return w?B?B.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function D(a){var b;a:{if(b=u.navigator)if(b=b.userAgent)break a;b=""}retur

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7186
Entropy (8bit):	4.836201932278951
Encrypted:	false
SSDEEP:	96:hGYTNAmuRrdZq5uK6JTBEzjx1R3grWqFDlNRPbRBSDtowkEhB8i69C0ygtF1Dv2A:hhurjqRHRKN1z28i69C07pCf2
MD5:	8C60A5FFF44A21029782636442D249D4
SHA1:	79114A95A3695870106ECDE04A8F127EC1C3898D
SHA-256:	18851BB2CF7B00826E87DA430999706BB3813BDE4A1FDD99B34ED7CB8EBC7F20
SHA-512:	C28CECDEC6B9F9360A75A6CE2810245F094ACB8B74061937B40F12BE8C3CD6D1D8B08172CB68A3E4E89AAEFCB1D74789728B3F6C25D8D91937EAB7B6C0FA20B0
Malicious:	false
Reputation:	low
URL:	https://cdn.bidbrain.app/ext/Footer-Logo_1720602781.svg+xml
Preview:	<svg width="191" height="52" viewBox="0 0 191 52" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0)">.<path d="M33.5879 0C33.5879 0 30.8935 9.20916 26.0592 12.7817C24.078 15.084 13.2208 23.5786 9.81302 21.0382C5.53354 17.6244 9.81302 6.11298 9.49603 6.19237C8.06953 6.50992 -0.251692 15.4015 0.144557 27.6275C0.223807 31.2 1.25405 36.7573 4.26554 40.6473C7.35628 44.7756 12.4283 45.0137 13.1415 44.1405C15.519 41.2824 18.6097 37.313 23.6025 37.7893C32.6369 38.6626 32.5577 51.9206 32.5577 51.9206C34.3804 51.2855 47.0604 38.5038 44.9999 20.4031C43.8112 10.0824 39.2939 3.25496 33.5879 0Z" fill="url(#paint0_radial)"/>.<path d="M39.6107 5.39847C37.8672 3.09618 35.8067 1.27023 33.5877 0C33.5877 0 27.2477 12.0672 22.4135 15.6397C20.4322 17.942 13.696 21.7527 10.2883 19.2122C6.00879 15.7985 9.73353 6.11298 9.41653 6.19237C8.06928 6.50992 -3.42193 29.0565 16.7075 30.0886C31.9235 30.8824 44.9204 20.4031 44.9204 20.4031C44.2864 14.1313 42.3052 9.05038 39.6107 5.39847Z" fill="u

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2107)
Category:	dropped
Size (bytes):	23448
Entropy (8bit):	5.515029569770483
Encrypted:	false
SSDEEP:	384:0NeDv+qLamAjjyo7pg/hoOYlXu7Rx/NXaQ6qDQB9Gv8fz62uUnNablFJC2LCfywq:OeDv+qemijjq/yOY1u73lXaQjgjz62ux
MD5:	E58B7EA9309A82572E6FD2471D6A36F2
SHA1:	1EDE87C0314D6EC1CF309AE313DFD1B47882F703
SHA-256:	6B01909019E81B3374DAFA06FE231E0D3E42741E100D8E6267FDAA9883584FB4
SHA-512:	5BB6448A01856E765C801926CF2AEBDA467661D9EF9EC2118AA9D19470BFFF4682AF991A3F4B1FE69D65B88429C9DFDA4C9F3E4EE681AB1714EDEF700C0206B6
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';var ba=Object.defineProperty;function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this); .function ea(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}ea("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")});/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var n=this\|\|self;function fa(a,b,c){return a.call.apply(a.bind,arguments)}function p(a,b,c){p=fa;return p.apply(null,arguments)}function ha(a){return a};var ia,r;a:{for(var ja=["CLOSURE_FLAGS"],t=n,ka=0;ka<ja.length;ka++)if(t=t[ja[ka]],t==null){r=null;break a}r=t}var la=r&&r[610401301];ia=la!=nul

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zip archive data, at least v1.0 to extract, compression method=store
Category:	downloaded
Size (bytes):	14054972
Entropy (8bit):	7.999396163832708
Encrypted:	true
SSDEEP:	393216:M1QHVgdZjGDJ4Bkcvu0BnHEejlamSb+QnNSQDsXv:z1gdADHcvFBaNnNSRf
MD5:	1E9650AE798AAD24DA27D00C5F6E770A
SHA1:	A938BB2EE236D2018F31751A264317BEF7BCFDC9
SHA-256:	E2F987BBF59EB33D15BC6FFF27B4757D2C664BF19C71B5F8D969C1E08B011152
SHA-512:	3422FF037636377DCCAD3EA4A70E7C7E3A4A36696DF895036CA61A70E46EB1E19FF58A12C250BE306351FFCD422AA5C17A0C7B707AE5290C4E077ADEC20BC9E4
Malicious:	false
Reputation:	low
URL:	https://androiddatahost.com/wp-content/uploads/PhoenixSuit_V1.08.zip
Preview:	PK.........T.N................PhoenixSuit_V1.08/PK........I.\|A.v.E.c..........PhoenixSuit_V1.08/ACmd.dll.[.\|SU..IS..h...5b......d..3.[../i......g.j...f.;t.".......Ww..u..qPq'8~.@..3PPAt.(...E...d........G?...}>.;..{..{.=.......Ar.!6.K..I.v...}...8.l.t..s\.t.2O....^..^.K.....Gwy.....s..dQ.......1.2...f.....Q...../....j...p~.{]...w{K...?.......p..s..z..&....F..A._..GF..n.FH.\.{-.....k..N..!.3!.z..+..];....6....w<IH....G..;....S...E..G.62.P.ag....EK.D...;.k...!........).).M..K.-....;...d..s..=7...C..1t..C..1t..C..1t.../G..Z..A:...m"....HJ....6^7..WJ.[Y.el...6...{b..=.1m....B....-].xO..o....RU-}.v^..i...k.<.{c..7...\P...jM.0..\..8.&..\.H..d.i.U(9@:.F..R.j.\ u.E).u.A..R..%.~;.%..kQ...C..5...A"SP..R_!J3@.Bi6H>..(..T..m.A%?.w.J".v#J. .MC...v.R5jP....(.c.3P.P....lo&J...l..(.Ai9.A.&........g........h>.[$[.+..D.@.M........D\p.I....o$.e.#....W...Y...;;..9....w]./.6P......\|.k}.....j.._..NQ.S9.....t...I....8.!..6...1h<6.J..Fp...@lD......x.3T.e..Cm......

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (786)
Category:	dropped
Size (bytes):	1672
Entropy (8bit):	5.286735414643417
Encrypted:	false
SSDEEP:	48:bFj15yMuJcZ2E9uIic2u8aYlPFs3l7Q2xtHS:Fey2EYIic2u8bl9sJu
MD5:	AB304529064B2C30C88FC41AD81913E0
SHA1:	14091E21A049D97B052DD56FF4076898F6F7D0CC
SHA-256:	88C5A7E6C9B3319F4BE9CD873D1E19766A62BE628EA9921156DD2702F1D15031
SHA-512:	6F8A7C3D2516C88E172D6AF1F88B0F32242A737BA128F95E0668D57EE004384DAFE4011A84FC543BA477A7BC82A8D47862F1F276F0C89FA0087D63E4D3B72691
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';let e=[];const f=()=>{const a=e;e=[];for(const b of a)try{b()}catch{}};function g(a=document){return a.createElement("img")};function h(a=null){return a&&a.getAttribute("data-jc")==="26"?a:document.querySelector('[data-jc="26"]')};var k=document;/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=()=>{var a=k.querySelectorAll("link[data-reload-stylesheet][as=style][rel=preload]");for(var b=0;b<a.length;b++){var c=a[b],d="link",l=document;d=String(d);l.contentType==="application/xhtml+xml"&&(d=d.toLowerCase());d=l.createElement(d);d.setAttribute("rel","stylesheet");d.setAttribute("href",c.getAttribute("href"));k.head.appendChild(d)}if(a.length>0&&!(Math.random()>.01)){a=(a=h(document.currentScript))&&a.getAttribute("data-jc-rcd")==="true"?"pagead2.googlesyndication-cn.com":"pagead2.googlesyndication.com"; .b=(b=h(document.currentScript))&&b.getAttribute("data-jc-version")\|\|"unknown";a=`https://${a}/pagead/gen_204?id=jca

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	480
Entropy (8bit):	4.238922169420851
Encrypted:	false
SSDEEP:	6:v/NvMqoX0XB79i8eJOezXXhKvNsTX0XB79S66Oez114vN8K2GTagGTcR1mB4qIca:hMNgBU8eJh0NIgB86jN8YTaDTJBehn
MD5:	215E4747D557C909B239E58A1868DAB8
SHA1:	585AB79954634006EF8E6B38491D2670244A0109
SHA-256:	897895F736D778712F241F44EE7FEDE8E3A032910413D45DE0DE4A9997B5C5A8
SHA-512:	7C668F2F8C5A12B60CFBCD981D6D0451447AA310E7E78DC19E8E731AE501EF856C000104EB6A9439A2C09B4E6E5E3DA6D72B2EA5173799C21718175E6FCB1323
Malicious:	false
Reputation:	low
URL:	https://androiddatahost.com/site.webmanifest
Preview:	{. "name": "ADH",. "short_name": "ADH",. "icons": [. {. "src": "/android-chrome-192x192.png",. "sizes": "192x192",. "type": "image/png". },. {. "src": "/android-chrome-512x512.png",. "sizes": "512x512",. "type": "image/png". }. ],. "theme_color": "#ffffff",. "background_color": "#ffffff",. "start_url": "https://androiddatahost.com",. "display": "standalone".}.

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (15321)
Category:	downloaded
Size (bytes):	15324
Entropy (8bit):	5.302097763923818
Encrypted:	false
SSDEEP:	192:60gLV8HIK3DLEMSvsA8fGBtYaIV4z3VWWKG/2B8Vn2lvB3qM:DeVKIK3DA6A8fWFMT
MD5:	50319984388054A00AE6305BB6DFE7BF
SHA1:	C219D75323E37074C86E1AB7D5907466FA302F5E
SHA-256:	127E2D55017B805C0EDBEBCF0DA6429681D94D0478BD97AD0AF307376D76D9ED
SHA-512:	F2EBA6078C520D428A861210E4B966B41FCCBF816DA320E271532265E8A7E51C7FD901D3DD6C42D72BA8B765131ED036027ECF83A00952FB229F60630E89EBFE
Malicious:	false
Reputation:	low
URL:	https://cdn.bidbrain.app/ng-assets/creative/assets/index-127e2d55.css
Preview:	@charset "UTF-8";._advertiser_1jlcv_1{position:absolute;z-index:501;width:fit-content;height:fit-content;font-size:12px;font-weight:700;background-color:transparent}._advertiserName_1jlcv_11{z-index:504;color:#b9b8b8;user-select:none;pointer-events:none}._clickable_1jlcv_18{cursor:pointer}._bottom_left_1rmpi_1{bottom:0;left:0}._top_left_1rmpi_6{top:0;left:0}._bottom_right_1rmpi_11{bottom:0;right:0}._top_right_1rmpi_16{top:0;right:0}._closeButton_5b4wb_2{position:absolute;border-radius:50%;height:20px;width:20px;background:#6f6f6f;user-select:none;display:flex;justify-content:center;align-items:center;color:#efeeee;font-family:auto}._closeStyle_5b4wb_16:before{content:".";height:20px;width:20px;font-size:16px;display:flex;align-items:flex-end;justify-content:center;transform:rotate(45deg);color:#efeeee;font-weight:400;font-style:normal;text-decoration:none;font-synthesis:none;text-rendering:optimizeLegibility;font-family:serif;line-height:18px;cursor:default}._altCloseStyleX_5b4wb_37{

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3682)
Category:	dropped
Size (bytes):	160853
Entropy (8bit):	5.602695772639944
Encrypted:	false
SSDEEP:	3072:19uf9+mMEF2m9t55gI5SjrqS3ADZlSHmlY2+G7lkMf1sKqeMPkgizR014Fx:19uf9+UF2m9t55r5aq86XSHmn+G7lkMB
MD5:	9FE8AB69DEBDCDC96714E28C0A836244
SHA1:	6ADD97AFC609D2AC74B31BD703B334DDF9F0502C
SHA-256:	505858833DEAF59D94215458F7610C32C56D3C39E4916EEE378BC3DCE76A6B2D
SHA-512:	CCFF4A1F7F623FD9A161CB529D0368EE8FD0C4D0CEAC4D9B8D11AC8D0F92C1E91E4B5C7F6051579FF734433B49D50893ED1FCEDC10A1AA2DFA9AD3FC30F1521D
Malicious:	false
Reputation:	low
Preview:	(function(sttc){'use strict';var aa,ba=Object.defineProperty;function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",fa={},ha={};function ia(a,b,c){if(!c\|\|a!=null){c=ha[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ja(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in fa?f=fa:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ea&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?ba(fa,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ha[d]===void 0&&(a=Math.random()*1E9>>>0,ha[d]=ea?da.Symbol(d):"$jscp$"+a+"$"+d),ba(f,ha[d],{configurable:!0,writable:!0,value:b})))}}ja("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")},"es_nex

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4168
Entropy (8bit):	7.869816683032238
Encrypted:	false
SSDEEP:	96:DZbZqgEp3vjXBQaxRRHtZmFsPLHz9/rGisUcxi4xSjIGh58B:DZ8vjXBQajZFLT9qisXxiZIT
MD5:	BADAB94BF2286B7F39FD65B75BB6FBDB
SHA1:	8825016519473D13C8DFF2D09042731944070641
SHA-256:	E77A3C17D4A73A7123F68CAE8C6EEE3DA7952D154BA1E9315555B84A7CC258C2
SHA-512:	1EB64E6C398EB00BC3B6A09D77C5934B71F209EC14684CB5C9BC19E2F2D29F2865AC464C18471648494E6CADBAB6CD662B4571E41E55FBDE4419AFB681C16E9C
Malicious:	false
Reputation:	low
URL:	https://androiddatahost.com/android-chrome-192x192.png
Preview:	.PNG........IHDR.............e..5...wPLTE...6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X...4>V5?W..=F]...Zbv...FOe2=U....AJa......PXn....>G^.....fn....7AY...:D\.....KTi.......9CZR[p......DMd...^gz.............qx.iq.bj}.......V^s?I`................{..x.....+..sz.nu.0.v....3Zd..~0xs4N^5I\,..1on4Sa2hk-../.z,........-tRNS..1.....[...8..u_$..........qRF.....hM-)...{.....SIDATx...[.A..Y.K.R...sv&.Q@.9V.Pn..$.-....x.......ef`.>?s.w.....LX.K.....t...w.....n..:....fuX...M..@`..ms..[..k.....b7..N@.)....Q.?qm.2y....8]w'-S..%&..3...afaQ..AqM.6...s..._.....4..i.....9.6.........&..s..p.{<.h0ZL....d._f5Z.n..17&.....k&a.....a.......h....F...)..xd.#..hd~.0...0.....0&f.#.Gz..kl..N[.yf.X..h.]X'.0f.I...cr..@=.`8M...m....Q..9..."R.A?..Jl..q.E....PZ].x.^..`..=.v.................B...z..A2...6..Z#..C..`7.....'.G...fRT%....$.;.....S..[.E."..f....fX..7z:.\|.@.....H.eK.......yr....

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 930 x 180, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5941
Entropy (8bit):	7.83512518622797
Encrypted:	false
SSDEEP:	96:K7yc8wNwOKs2YzXmEbnGOLPeO0dFlC6swbbcND/+6+8dEmDveH9P3xFS9rbNq:WzuOKs2Yz2EbFabOwHKbf5m93mrc
MD5:	91188E1C87E7B90D143F7DDA54D94D37
SHA1:	9103C13777246ED8C91416B793F591D7FE66280C
SHA-256:	91EE0169C6834567866266D3BCB5DB70CE01007C92CBB5505B14FCEDB8D893C2
SHA-512:	7A2B40F1A8D8AA8AB40F2F0A91CB73D265000B26058EFF0C6C4419A8F1AB10BFAE91224E8874F41E12A6381625464B108E13EE7039C037DBA0F8D5A6A36C7FB2
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/3000121286090871068?sqp=4sqPyQQrQikqJwhfEAEdAAC0QiABKAEwCTgDQPCTCUgAUAFYAWBfcAJ4AcUBLbKdPg&rs=AOga4qmWlAn78sMCuc2zLU3yuzGGPW415g
Preview:	.PNG........IHDR..............Aa....nPLTE..X.h, ```................@@@....................ppp.......000..lPPP.........m.......cCMVy.........m................b(3>......^fn.....m...........{F.....6@J..x.....5@J.......ksz.......w......oooPYb............a........x..x..........{G.....w....r:..T___......QYb...........{]fn............w.................S....{..n..T......x..(.'/....IDATx..{.8....HjYD..u.5c+nr.....S..6....>.}......\|.....9.....d...x.. ...........................................................>.b....//...Y...V}..9...G\n...v......-....\|...X.\.byAn\.&.....kQ.3'.Wgf..^.R...f._....6UZ...mrS.X5k.~c....[Q..5k...q.V...j.....z.76s"...?.Y..I.....BQ...J.L...C.Fn...+.X..X...A...s.c+z....WVkQ.....`*.5j.......K....N....7..-.....R..@..)Tt}yy.zS....C...+OV6.F1..Q.}`..`....)zM^......;.8.<.N..S..R..B......).t.U..nd#..]c.i.q-.9..kc)J._.kWvK{.]{.u.N.......}C...?...z....6.h...7ME......Z..z..(....S.N...&...2EgVw.....;.4+..z8.

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	469
Entropy (8bit):	4.889487192217403
Encrypted:	false
SSDEEP:	12:trIoqCtuCV9/K4KiwXl69on6kAHFjhllR:tcoqAuui4KiwX96kajhllR
MD5:	6974AEE9AF84143B4AC5C739F1707C95
SHA1:	B0E39311591AA75BF203BC7ABDF64FDAF7B05797
SHA-256:	E8B2FE0CAF115F14D018B7064E8F710521D4C284263A7AE2922FEEC272961DA6
SHA-512:	4788601CCA97E02AEFD465BAA0872171A47330E22761CA9BA5B7C14FE006E9C88E03F4E7A9DE4A9850EE9BFBA530ED0E437B42C13FECA604818D5C52EEF3259A
Malicious:	false
Reputation:	low
URL:	https://cdn.bidbrain.app/ext/download-icon_1697445891.svg+xml
Preview:	<svg width="19" height="21" viewBox="0 0 19 21" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M1 13.2632L1 16.9691C1 17.5307 1.22125 18.0693 1.61508 18.4665C2.0089 18.8636 2.54305 19.0867 3.1 19.0867H15.7C16.257 19.0867 16.7911 18.8636 17.1849 18.4665C17.5787 18.0693 17.8 17.5307 17.8 16.9691V13.2632M9.40117 1V13M9.40117 13L14.2012 8.41485M9.40117 13L4.60117 8.41485" stroke="white" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"/>.</svg>.

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	721
Entropy (8bit):	6.777163295363377
Encrypted:	false
SSDEEP:	12:6v/7sAIeOufV8TBeQVuXePwXAaSSwdWhsPpcl+zf80f41s2:qIfufV8TwQAOic9WhsRpzf8vP
MD5:	431EBAE5FB7E995D46DBD1BB941F0D32
SHA1:	19DEDD4B4E4D5D06C5882790E5B4EB1429FAF50A
SHA-256:	FA68A5FE0B00F530C164B07DD67B85D1CB5BA2743F2DFA93BEBC6E0C1F805E96
SHA-512:	346443D50AAFB1CC30EFF012B18A398D03F2751E6EAEC7E976B8F966F93A7C052668B56B145DF12020B60BECB754F1D3C5C256B61ABEC559C192C4D3D7C8465B
Malicious:	false
Reputation:	low
URL:	https://cdn.bidbrain.app/click_1734018555_64x64.png
Preview:	.PNG........IHDR...@...@............xPLTE..........................................................................................................................H....'tRNS...?..2.....wX:G...MD7g.d...6..k..q*.!_c>5....IDATX...v.0.E/. ..T.Ppl...X..C!.....r....H.)..D....#......_ym..yi.....Z.&..r.`..\|..&.C. 0.....mX....Og.4@.............4.yd..".."o.... ...g...f.$B5.9.I.#.".?..0A...s.{.`<e.0...k4RmX..!x.&zW3....o...p..........[......1.t.2W..'...~::.J..:dDl.....@L..&.t.#.<.K.....2:.8`...a.q...a..q....../V..C............._tHB..]m.........sj.P.]..-..+a1.:....at.4........\+l....v....:.t....4.n@.y..Z"..<...E.gHY...c(S=.F...c(+.f.Y...7.H.....8...?.'.&...;..........}..=.M.X.o.4c..&.....IEND.B`.

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4168
Entropy (8bit):	7.869816683032238
Encrypted:	false
SSDEEP:	96:DZbZqgEp3vjXBQaxRRHtZmFsPLHz9/rGisUcxi4xSjIGh58B:DZ8vjXBQajZFLT9qisXxiZIT
MD5:	BADAB94BF2286B7F39FD65B75BB6FBDB
SHA1:	8825016519473D13C8DFF2D09042731944070641
SHA-256:	E77A3C17D4A73A7123F68CAE8C6EEE3DA7952D154BA1E9315555B84A7CC258C2
SHA-512:	1EB64E6C398EB00BC3B6A09D77C5934B71F209EC14684CB5C9BC19E2F2D29F2865AC464C18471648494E6CADBAB6CD662B4571E41E55FBDE4419AFB681C16E9C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............e..5...wPLTE...6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X...4>V5?W..=F]...Zbv...FOe2=U....AJa......PXn....>G^.....fn....7AY...:D\.....KTi.......9CZR[p......DMd...^gz.............qx.iq.bj}.......V^s?I`................{..x.....+..sz.nu.0.v....3Zd..~0xs4N^5I\,..1on4Sa2hk-../.z,........-tRNS..1.....[...8..u_$..........qRF.....hM-)...{.....SIDATx...[.A..Y.K.R...sv&.Q@.9V.Pn..$.-....x.......ef`.>?s.w.....LX.K.....t...w.....n..:....fuX...M..@`..ms..[..k.....b7..N@.)....Q.?qm.2y....8]w'-S..%&..3...afaQ..AqM.6...s..._.....4..i.....9.6.........&..s..p.{<.h0ZL....d._f5Z.n..17&.....k&a.....a.......h....F...)..xd.#..hd~.0...0.....0&f.#.Gz..kl..N[.yf.X..h.]X'.0f.I...cr..@=.`8M...m....Q..9..."R.A?..Jl..q.E....PZ].x.^..`..=.v.................B...z..A2...6..Z#..C..`7.....'.G...fRT%....$.;.....S..[.E."..f....fX..7z:.\|.@.....H.eK.......yr....

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2526)
Category:	dropped
Size (bytes):	23270
Entropy (8bit):	5.503833775820013
Encrypted:	false
SSDEEP:	384:yio8su2naz/rbhhy/6IbtS/4ouK87eU2w6wqpPBZ5AE3VnIJq9cLcuy4nDEWyDY9:yi3sVnaz/rbhQPAAouK87eUp6JPZCE3k
MD5:	519FBC47D014ED898E08CD32411DA107
SHA1:	36ABBEC560F1031F008E2FBFA1968C7AFE63ADF6
SHA-256:	04581663A590A3B051B88AA91A71C8941E064D62839993B3F47FF8AA1B21017B
SHA-512:	AA02876DA3FBE91D74C8CD88A47BA2DF2379725A05D7B4C8C3BAB891CB808AEB29FC3BC05A8EC96CF177437ED6986F7104759E0975FC98C8BFD161CCA28AE843
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a){return a};function ba(a){m.setTimeout(()=>{throw a;},0)};var da,n;a:{for(var ea=["CLOSURE_FLAGS"],p=m,fa=0;fa<ea.length;fa++)if(p=p[ea[fa]],p==null){n=null;break a}n=p}var ha=n&&n[610401301];da=ha!=null?ha:!1;var q;const ia=m.navigator;q=ia?ia.userAgentData\|\|null:null;function ja(a){return da?q?q.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function u(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return b.indexOf(a)!=-1};function v(){return da?!!q&&q.brands.length>0:!1}function ka(){return v()?ja("Chromium"):(u("Chrome")\|\|u("CriOS"))&&!(v()?0:u("Edge"))\|\|u("Silk")};function la(a){la[" "](a);return a}la[" "]=function(){};!u("Android")\|\|ka();ka();u("Safari")&&(ka()\|\|(v()?0:u("Coast"))\|\|(v()?0:u("Opera"))\|\|(v()?0:u("Edge"))\|\|(v()?ja("Microsoft Edge"):u("Edg/"))\|\|v()&&ja("Opera"));let ma=void 0;var na=new Set;function oa(a,b=!

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	7186
Entropy (8bit):	4.836201932278951
Encrypted:	false
SSDEEP:	96:hGYTNAmuRrdZq5uK6JTBEzjx1R3grWqFDlNRPbRBSDtowkEhB8i69C0ygtF1Dv2A:hhurjqRHRKN1z28i69C07pCf2
MD5:	8C60A5FFF44A21029782636442D249D4
SHA1:	79114A95A3695870106ECDE04A8F127EC1C3898D
SHA-256:	18851BB2CF7B00826E87DA430999706BB3813BDE4A1FDD99B34ED7CB8EBC7F20
SHA-512:	C28CECDEC6B9F9360A75A6CE2810245F094ACB8B74061937B40F12BE8C3CD6D1D8B08172CB68A3E4E89AAEFCB1D74789728B3F6C25D8D91937EAB7B6C0FA20B0
Malicious:	false
Reputation:	low
Preview:	<svg width="191" height="52" viewBox="0 0 191 52" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0)">.<path d="M33.5879 0C33.5879 0 30.8935 9.20916 26.0592 12.7817C24.078 15.084 13.2208 23.5786 9.81302 21.0382C5.53354 17.6244 9.81302 6.11298 9.49603 6.19237C8.06953 6.50992 -0.251692 15.4015 0.144557 27.6275C0.223807 31.2 1.25405 36.7573 4.26554 40.6473C7.35628 44.7756 12.4283 45.0137 13.1415 44.1405C15.519 41.2824 18.6097 37.313 23.6025 37.7893C32.6369 38.6626 32.5577 51.9206 32.5577 51.9206C34.3804 51.2855 47.0604 38.5038 44.9999 20.4031C43.8112 10.0824 39.2939 3.25496 33.5879 0Z" fill="url(#paint0_radial)"/>.<path d="M39.6107 5.39847C37.8672 3.09618 35.8067 1.27023 33.5877 0C33.5877 0 27.2477 12.0672 22.4135 15.6397C20.4322 17.942 13.696 21.7527 10.2883 19.2122C6.00879 15.7985 9.73353 6.11298 9.41653 6.19237C8.06928 6.50992 -3.42193 29.0565 16.7075 30.0886C31.9235 30.8824 44.9204 20.4031 44.9204 20.4031C44.2864 14.1313 42.3052 9.05038 39.6107 5.39847Z" fill="u

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3533)
Category:	downloaded
Size (bytes):	222749
Entropy (8bit):	5.453364917537705
Encrypted:	false
SSDEEP:	6144:Giwcm/IpG4DMcdc/Fa9BDrk7m7U7ozJgs:yP/I5jMI
MD5:	ADB4D93F80755314547B699C181145BD
SHA1:	87BBCFD9E29A8BBB0ED8177AEB0F930499592AB7
SHA-256:	AF6B15D8917BD5AB039B73DB5F939C17DF1ACA2ACF7D4AC9D8F44A005EDAF6D6
SHA-512:	39DD81FFB91A9340D97B77E689B06D7D45201511CDF44352F3F1406AC3FEEAF2B786ECF13F08ADD5F0725610ECC3F24B2E87D5A8518CC2818F765921A0CA626C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Lg=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Lg};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	615
Entropy (8bit):	6.4948217311323795
Encrypted:	false
SSDEEP:	12:6v/7sAIeCBLnNVE+SLB/AIr8SKE8GVBWbXITQpuWPUMaOVCgS:qIHBxVE+2yE8GVBWb4T6PUMFogS
MD5:	DC7B7E44F47C6E39465452E36E46FB65
SHA1:	4C2C6934965B21574AE3F30B32E20599B4FDE409
SHA-256:	A677E54EBCB87E8AA9349724D4DCDC6C6E74A3D3F2E4FEA58226E225B79C6A8A
SHA-512:	80149BC04571BEC07A00587DE04D4858EE531CE9548611DC9BA28C559688A00966FFFD0462946C44FF15773753EA1A7D1D8409093065BFE7CC769229F6554E34
Malicious:	false
Reputation:	low
URL:	https://cdn.bidbrain.app/download_l_1734165033_64x64.png
Preview:	.PNG........IHDR...@...@............xPLTE..........................................................................................................................H....'tRNS.."......S.Y...b,%....~qG=.2...kO5..s....wIDATX...r. .EO..D.w.......Z@w&..x.....Z..GG.&...8'.x%.Sz...l..W).Z.>..c.,.E..........K...v...@x....~r.. 6.).v#f.V..!x...lV....9.=.N....#.....C.x0..._...0...>.z4.r,...<.........-....h3M'5.....bq_e..9>g...Z.c...#.(.....M.A.{'Q.....'.<...{.o% W...L.H.XB...rL.0..T...g. .jf`....2.3.Ka.e.:....2.j0.......t\|.....I.6".>&.A.............6\|....,..t..^u...q...N...o._..._.....IEND.B`.

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 61736, version 1.0
Category:	downloaded
Size (bytes):	61736
Entropy (8bit):	7.996579108855938
Encrypted:	true
SSDEEP:	1536:k6Fj5vgPSsqNzcvwFQsQK+CKxd+Vs6lj9BsA:zl5vAqEVXKexB6tPsA
MD5:	EDE84D96808C486E3DE74CBD8F2A2C80
SHA1:	BAE3CE34F928BE471EE489BBFE5B7425AEE8298E
SHA-256:	02F1DCC0C722E24CBA9BE4B720831A79489E766D5EDF8B77F582E0869312D86E
SHA-512:	996D7258DD45F8676916F05138E7F3141ABD7C0207AE43CA820A10211BD237C6BDAC0209967B45C4A1D27C08DBAAD2F933D16D0400B0710981804E651D4B804B
Malicious:	false
Reputation:	low
URL:	https://cdn.bidbrain.app/compressedFonts/RobotoRegular.woff2
Preview:	wOF2.......(......................................D...$..h.`..H.L..<.....`..C..F...l.6.$.... .... ..[[OG..........m.P.t../..F4....V.<m.BH7........k...o......./K&2f...... s.:....;.Bh.Q.G...4...QH..&.m.:J.......X.8:.].S[Oo..$.Y.}.........&9...:/..]..i....>..+$!.Y.&..L...T..o,3zo..:.....H...9a...k.[.9.?tR..$.......j...B..:Uo\..$.M...-op...B..6..lx.~.....p,...0.............>.%k..;Q'..GV......!..?.... <.?.-.$.<.:..j.e7.sa.e!.....&.'..R.^.Z~.N=....x....^.E.z..<.$.)%..;...K..'.B.+......{~.A.....].~.n$Vw....\d.Ce.k.).shnB"*..:...{.A.....=.^....HH.>.....W.....9..a.z.7&q....(...E>eD.\..R."~j..........y..(.M-R.vny..xRQ.V...y.O..0........._..U.<^.n...~..Gp.NW>...3.LC..`'.oR..eD.%p........&.....Ytb..x_\|e.....g.....Ds..#W:r...U..=!l.Z...f...........UQv...X..n..B.eT.)Fm`.Q..O.K..I+Y.d.8..(...>..w\.............U.}....!:.,...l.JaA!,F..?....l........i&.......e.IW~...`R@.BH..2....z.o..5b..`T.H...R...B..LJ....$...)z....6w.H.. l..y..'jr..6....c....\|]......y.O...c.f.X$E5..{s.

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4034)
Category:	dropped
Size (bytes):	181476
Entropy (8bit):	5.502084915149206
Encrypted:	false
SSDEEP:	3072:hmabKtycLCs5CYYC9+QulIGmF9x5OL6eMO4assmAYvtFmIansdEIPJbE9MwRMDQa:hmabKtycLCs5CYYC9+QulIGmFs+ZO4au
MD5:	56668B92119DC3AA75A4550C23FA8BF5
SHA1:	36ECF8023EF3E25B8C4F85CDCD8719751977BCFC
SHA-256:	E8CA9FBB8420DCAD7D58DF88439E9305BC779EB61E083989D3A2EAE5063BFF59
SHA-512:	DC856C453DC246A98030FEDB1EF03FEC7C83D85DF68C9048CE9090784EA87FB5D1CAA9B6DCB19B80A49559863C55F2E6C9AA1930BB713D274B7E311C5FB85DED
Malicious:	false
Reputation:	low
Preview:	(function(sttc){'use strict';var q,aa=Object.defineProperty;function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",fa={},ha={};function ia(a,b,c){if(!c\|\|a!=null){c=ha[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ja(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in fa?f=fa:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ea&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(fa,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ha[d]===void 0&&(a=Math.random()*1E9>>>0,ha[d]=ea?ca.Symbol(d):"$jscp$"+a+"$"+d),aa(f,ha[d],{configurable:!0,writable:!0,value:b})))}}ja("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")},"es_next

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	615
Entropy (8bit):	6.4948217311323795
Encrypted:	false
SSDEEP:	12:6v/7sAIeCBLnNVE+SLB/AIr8SKE8GVBWbXITQpuWPUMaOVCgS:qIHBxVE+2yE8GVBWb4T6PUMFogS
MD5:	DC7B7E44F47C6E39465452E36E46FB65
SHA1:	4C2C6934965B21574AE3F30B32E20599B4FDE409
SHA-256:	A677E54EBCB87E8AA9349724D4DCDC6C6E74A3D3F2E4FEA58226E225B79C6A8A
SHA-512:	80149BC04571BEC07A00587DE04D4858EE531CE9548611DC9BA28C559688A00966FFFD0462946C44FF15773753EA1A7D1D8409093065BFE7CC769229F6554E34
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@............xPLTE..........................................................................................................................H....'tRNS.."......S.Y...b,%....~qG=.2...kO5..s....wIDATX...r. .EO..D.w.......Z@w&..x.....Z..GG.&...8'.x%.Sz...l..W).Z.>..c.,.E..........K...v...@x....~r.. 6.).v#f.V..!x...lV....9.=.N....#.....C.x0..._...0...>.z4.r,...<.........-....h3M'5.....bq_e..9>g...Z.c...#.(.....M.A.{'Q.....'.<...{.o% W...L.H.XB...rL.0..T...g. .jf`....2.3.Ka.e.:....2.j0.......t\|.....I.6".>&.A.............6\|....,..t..^u...q...N...o._..._.....IEND.B`.

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3023)
Category:	downloaded
Size (bytes):	92245
Entropy (8bit):	5.581594277008879
Encrypted:	false
SSDEEP:	1536:iuvz5PpxAhaW3IapDH9v03ZI/kZ+Uur+Jez3Fg/9jqAib9qCqFT3+VIF1nlPEnFt:iqz5khaW3ZUZIMZXuCB/9SYCqF7+V4nw
MD5:	8752BE6CCFE5D9DF7C60A1AA475B3ABB
SHA1:	E9071EA958AEB77229DBBFB99C5BC445A751647C
SHA-256:	3B570B021A7CF3BE58E75F32AA3C3C81E30107D9ADEF24FF86049F080B55EDD7
SHA-512:	515D715AB4B969F66C8DC8096B322B67B1A13E1B9D1CDA52297D2D962E0D8D1F6DACF89CE69F9C39118A786B616B4A54FA2632BB03A0833EC7BB4D79F30B572A
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/adsense/m202501080201/slotcar_library_fy2021.js?bust=31089639
Preview:	(function(sttc){'use strict';var l,aa=Object.defineProperty;function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this),da=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",ea={},fa={};function ha(a,b,c){if(!c\|\|a!=null){c=fa[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ia(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in ea?f=ea:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=da&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(ea,d,{configurable:!0,writable:!0,value:b}):b!==c&&(fa[d]===void 0&&(a=Math.random()*1E9>>>0,fa[d]=da?ca.Symbol(d):"$jscp$"+a+"$"+d),aa(f,fa[d],{configurable:!0,writable:!0,value:b})))}}ia("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")},"es_next

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53721)
Category:	downloaded
Size (bytes):	55009
Entropy (8bit):	5.759058714843368
Encrypted:	false
SSDEEP:	1536:jpspTS9rOD8h9nEn46itPZtqnrDzeM4WaH:Nz9rNEn46iFZkTraH
MD5:	949F2EF04EFBAAE6968612AE729747E2
SHA1:	253AF18647B881CA264D7952376362C2A6684455
SHA-256:	BD73F148D9F86EFB8BEFF435E1D71AF485CBB84303AA221FE9AE5C2624780B36
SHA-512:	CB19996EB5ACE78485CF4A1CB6DD2F700C6B2CEB136BCCAE377A7D88543D74AAC0BF5AAE471CDDA45441B5151694D6D7EAE9C59C0C975B31121D916FE9987E66
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/vXPxSNn4bvuL7_Q14dca9IXLuEMDqiIf6a5cJiR4CzY.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function O(S){return S}var t=this\|\|self,W=function(S,Z,U,q,h,G,B,z,g,X,M,E){for(M=(E=U,68);;)try{if(E==17)break;else if(E==S)E=t.console?Z:36;else if(E==q)E=z&&z.createPolicy?92:7;else{if(E==7)return g;if(E==0)M=68,E=S;else{if(E==36)return M=68,g;E==Z?(t.console[h](X.message),E=36):E==U?(g=B,z=t.trustedTypes,E=q):E==92&&(M=65,g=z.createPolicy(G,{createHTML:u,createScript:u,createScriptURL:u}),E=36)}}}catch(Q){if(M==68)throw Q;M==65&&(X=Q,E=0)}},u=function(S){return O.call(this,S)};(0,eval)(function(S,Z){return(Z=W(45,43,1,77,"error","bg",null))&&S.eval(Z.createScript("1"))===1?function(U){return Z.createScript(U)}:function(U){return""+U}}(t)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=u

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (11822)
Category:	dropped
Size (bytes):	11824
Entropy (8bit):	5.2927390094370335
Encrypted:	false
SSDEEP:	192:O9d9uZiYB+zsjBHN5whvID3YMYSPSWQ55aTkcfChQY+DdlZ7hJfLHmJIBu:Ee2zsNHHwlIDhPSZ550kcfChQtvJfxBu
MD5:	659A1EC658C77B9C936C856B9B72A548
SHA1:	C1076FE1A694D561FFAA673793CB6418763FA1E4
SHA-256:	B2D12B381E4F471679E903D6C8FE634AB8DDA43764168C8F3C1EE1269FE7EDAB
SHA-512:	77F2057B03E14C9378F6C6CB087263D7239EDA44D57104DF48105B88938656F594BD68DCAD9CDA0409AFDB78205C872B65F63816146923676F522C3626232558
Malicious:	false
Reputation:	low
Preview:	export function __vite_legacy_guard(){import.meta.url;import("_").catch(()=>1);(async function*(){})().next()};var t="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},n=function(t){return t&&t.Math===Math&&t},r=n("object"==typeof globalThis&&globalThis)\|\|n("object"==typeof window&&window)\|\|n("object"==typeof self&&self)\|\|n("object"==typeof t&&t)\|\|n("object"==typeof t&&t)\|\|function(){return this}()\|\|Function("return this")(),e={},o=function(t){try{return!!t()}catch(n){return!0}},i=!o((function(){return 7!==Object.defineProperty({},1,{get:function(){return 7}})[1]})),u=!o((function(){var t=function(){}.bind();return"function"!=typeof t\|\|t.hasOwnProperty("prototype")})),c=u,a=Function.prototype.call,f=c?a.bind(a):function(){return a.apply(a,arguments)},l={},s={}.propertyIsEnumerable,p=Object.getOwnPropertyDescriptor,y=p&&!s.call({1:2},1);l.f=y?function(t){var n=p(this,t);return!!n&&n.enumerable}:s

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	510007
Entropy (8bit):	5.853990854227453
Encrypted:	false
SSDEEP:	12288:AJBJ4cWThTAhuPGuzHO4rYwuPG8YCuP/hTApFXXAz:AJxWThTAhuPGuTRrYwuPzYCuP/hTArXc
MD5:	0E92D4AAD482C352BDF819EE12A76C45
SHA1:	74233238C8798B8D59879FC559EB36A60BADE778
SHA-256:	1377D54EAC9FFDD63CB053B37AC4446E5F333DCABBA5E35CBD9BA9D6B76CF5FC
SHA-512:	6F52207AD102621F03F06D4F187FC81C5A0D3ECA76664CECFD3738428CCCAC8844CD78B65263C3A9BB206E036718BE5E5F799D9BC9621ADE45DF6BE3D7F33BD3
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2840258101411863&output=html&adk=1812271804&adf=3025194257&abgtt=6&lmt=1736881262&plat=9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&plas=174x816_l%7C193x816_r&format=0x0&url=https%3A%2F%2Fandroiddatahost.com%2Fsdsd3&pra=5&wgl=1&aihb=0&aiof=3&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~3~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aicel=33~38&aifxl=29_18~30_19&aiixl=29_5~30_6&aiict=1&aiapm=0.2&aiapmi=0.33938&aief=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736909361571&bpp=4&bdt=1272&idt=1483&shv=r20250113&mjsv=m202501080201&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=8040805227545&frm=20&pv=2&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533203%2C31089542%2C31089715%2C95350245%2C31089639&oid=2&pvsid=539208937878820&tmod=1359503699&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=1550
Preview:	<script>window.sra_later_blocks = [];</script><script>window.sra_later_blocks.push({creative:'\x3c!doctype html\x3e\x3chtml \x3e\x3chead\x3e\x3cstyle\x3e* {margin: 0;padding: 0;outline: none;}body {background: rgba(52, 58, 65, 0.600000);backdrop-filter: blur(15px); /potential issue: minimal browser support/-webkit-backdrop-filter: blur(15px); /for safari/height: 100%;}#ad_iframe {box-shadow: 0 !important;display: block;left: auto;margin: 0 auto;position: relative;top: auto;}.creative {transition: opacity 1s;-webkit-transition: opacity 1s;position: relative;}#card {background-color: #fff;border-radius: 6px;padding: 0 6px 1px;position: relative;box-shadow: 0px 8px 12px rgba(60, 64, 67, 0.15), 0px 4px 4px rgba(60, 64, 67, 0.3);}html {height: 100%;}.toprow {width: 100%;display: table;height: 24px;background-color: #fff;}.btn {display: table;transition: opacity 1s, background .75s;-webkit-transition: opacity 1s, background .75s;-moz-transition: opacity 1s, background .75s;-o-transition:

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4034)
Category:	downloaded
Size (bytes):	181476
Entropy (8bit):	5.502084915149206
Encrypted:	false
SSDEEP:	3072:hmabKtycLCs5CYYC9+QulIGmF9x5OL6eMO4assmAYvtFmIansdEIPJbE9MwRMDQa:hmabKtycLCs5CYYC9+QulIGmFs+ZO4au
MD5:	56668B92119DC3AA75A4550C23FA8BF5
SHA1:	36ECF8023EF3E25B8C4F85CDCD8719751977BCFC
SHA-256:	E8CA9FBB8420DCAD7D58DF88439E9305BC779EB61E083989D3A2EAE5063BFF59
SHA-512:	DC856C453DC246A98030FEDB1EF03FEC7C83D85DF68C9048CE9090784EA87FB5D1CAA9B6DCB19B80A49559863C55F2E6C9AA1930BB713D274B7E311C5FB85DED
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/adsense/m202501080201/reactive_library_fy2021.js?bust=31089639
Preview:	(function(sttc){'use strict';var q,aa=Object.defineProperty;function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",fa={},ha={};function ia(a,b,c){if(!c\|\|a!=null){c=ha[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ja(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in fa?f=fa:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ea&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(fa,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ha[d]===void 0&&(a=Math.random()*1E9>>>0,ha[d]=ea?ca.Symbol(d):"$jscp$"+a+"$"+d),aa(f,ha[d],{configurable:!0,writable:!0,value:b})))}}ja("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")},"es_next

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2107)
Category:	downloaded
Size (bytes):	23448
Entropy (8bit):	5.515029569770483
Encrypted:	false
SSDEEP:	384:0NeDv+qLamAjjyo7pg/hoOYlXu7Rx/NXaQ6qDQB9Gv8fz62uUnNablFJC2LCfywq:OeDv+qemijjq/yOY1u73lXaQjgjz62ux
MD5:	E58B7EA9309A82572E6FD2471D6A36F2
SHA1:	1EDE87C0314D6EC1CF309AE313DFD1B47882F703
SHA-256:	6B01909019E81B3374DAFA06FE231E0D3E42741E100D8E6267FDAA9883584FB4
SHA-512:	5BB6448A01856E765C801926CF2AEBDA467661D9EF9EC2118AA9D19470BFFF4682AF991A3F4B1FE69D65B88429C9DFDA4C9F3E4EE681AB1714EDEF700C0206B6
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20250113/r20110914/elements/html/interstitial_ad_frame_fy2021.js
Preview:	(function(){'use strict';var ba=Object.defineProperty;function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this); .function ea(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}ea("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")});/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var n=this\|\|self;function fa(a,b,c){return a.call.apply(a.bind,arguments)}function p(a,b,c){p=fa;return p.apply(null,arguments)}function ha(a){return a};var ia,r;a:{for(var ja=["CLOSURE_FLAGS"],t=n,ka=0;ka<ja.length;ka++)if(t=t[ja[ka]],t==null){r=null;break a}r=t}var la=r&&r[610401301];ia=la!=nul

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2971)
Category:	downloaded
Size (bytes):	443854
Entropy (8bit):	5.579899816833121
Encrypted:	false
SSDEEP:	12288:ZpCfidcQEswBLpmvgMLZj9sybPiEzOCCdTSBuRcze8RgWGCIuBWaojGybrqtsxQo:ZpCfidcQEswBLpmvgMLZj9sybPiEzOCi
MD5:	922C85BEC2D5537866AB77D9743CEF35
SHA1:	8FBDCF539F3EE10B23E6978E72066059F3EFB526
SHA-256:	18385239CFDA00A835575709F73C634F9F452EE05B211579EDB8BD2D8D649E39
SHA-512:	31B8FB9D3929F200A43BF52C417E90195689F50112A464D1894E9B5FC7D1A59283967B74F2AE24A1CED717798AC8184A07EBE39F25A751DB0951C09D5215B756
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/adsense/m202501080201/show_ads_impl_fy2021.js?bust=31089639
Preview:	(function(sttc){'use strict';var q,aa=Object.defineProperty;function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ba(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",fa={},ha={};function ia(a,b,c){if(!c\|\|a!=null){c=ha[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ka(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in fa?f=fa:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ea&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(fa,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ha[d]===void 0&&(a=Math.random()*1E9>>>0,ha[d]=ea?da.Symbol(d):"$jscp$"+a+"$"+d),aa(f,ha[d],{configurable:!0,writable:!0,value:b})))}}var la=Object.create,ma; .if(ea&&typeof Object.setPrototypeOf=="function")ma=

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1055)
Category:	dropped
Size (bytes):	2690
Entropy (8bit):	5.398083497267717
Encrypted:	false
SSDEEP:	48:Otg7xNqHIN7QaE9Fa9FZpPiNmgrZyHicju8m5I0zRHkFRCmTx:rN7Qabhiwdicju8WhRHMnTx
MD5:	2669D16AAE166D157B8434762A199620
SHA1:	CA7E08D45D0D469ED57825C28CB214F421311F97
SHA-256:	944A37F694B55DE268A0BF52DBAE4E12F12C4AE09EE5C8D213BA05075C2865DD
SHA-512:	51CCCC87145F0B0098B81BEA1506C726BB249E65F3B5FCC853F1FC4D4E55716F1F9318E43A2A0B31DFC4C968C14EBAF1EEFB9331C6DCE1B561459883DA7E9432
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';function f(a,b,e){a.addEventListener&&a.addEventListener(b,e,!1)};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a,b,e){if(Array.isArray(b))for(let c=0;c<b.length;c++)g(a,String(b[c]),e);else b!=null&&e.push(a+(b===""?"":"="+encodeURIComponent(String(b))))};function l(a=document){return a.createElement("img")};function m(a,b,e=null,c=!1){n(a,b,e,c)}function n(a,b,e,c){a.google_image_requests\|\|(a.google_image_requests=[]);const d=l(a.document);if(e\|\|c){const k=h=>{e&&e(h);if(c){h=a.google_image_requests;const v=Array.prototype.indexOf.call(h,d,void 0);v>=0&&Array.prototype.splice.call(h,v,1)}d.removeEventListener&&d.removeEventListener("load",k,!1);d.removeEventListener&&d.removeEventListener("error",k,!1)};f(d,"load",k);f(d,"error",k)}d.src=b;a.google_image_requests.push(d)};function p(a=null){return a&&a.getAttribute("data-jc")==="22"?a:document.querySelector('[data-jc="22"]')};var q=document,r=window;functi

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10878)
Category:	dropped
Size (bytes):	10922
Entropy (8bit):	5.144018760493193
Encrypted:	false
SSDEEP:	192:sabfHQ2RHMb9LFY+AxE30UWZacKfy5sWlRyyO/BT8nyuEazDnUcdQP1VAB8X55Mi:N5RHMb9LFY+AA0FYZfy5VlRyyO/BTEE1
MD5:	3FFEF9D75612E6D5B383C393B3FB7D87
SHA1:	7CFDAA40C3440EFD2751D9833A768EA6953F6351
SHA-256:	87219A2F9BE014310D195B371277E88A30D17ED287E81025BBEFF604E8930BCA
SHA-512:	EC75ED22162D939750983608E73D7918BE68AA8E9D0FE5EDCCB4713D98C3841A4891D43BAC8988DB77B60D37EC242D6E7E1568951BF822B61403BBBC27B22F8E
Malicious:	false
Reputation:	low
Preview:	(()=>{var h=class{static getScreenWidth(){return window.innerWidth\|\|document.documentElement.clientWidth}static getScreenHeight(){return window.innerHeight\|\|document.documentElement.clientHeight}static isNotValidScreensize(e,i){const t=this.getScreenWidth(),s=this.getScreenHeight(),n=e&&(t>i.width\|\|s>i.height),r=!e&&(t<i.width\|\|s<i.height);return n\|\|r}static isPageCached(){const e=document.documentElement.nextSibling&&document.documentElement.nextSibling.data?document.documentElement.nextSibling.data:"";return e&&e.includes("Debug: cached")}static isIntersecting(e){return e.bottom>=0&&e.right>=0&&e.top<=(window.innerHeight\|\|document.documentElement.clientHeight)&&e.left<=(window.innerWidth\|\|document.documentElement.clientWidth)}static isPageScrolled(){return window.pageYOffset>0\|\|document.documentElement.scrollTop>0}},l=h,d=class{constructor(e,i){this.config=e,this.performanceImages=[],this.logger=i}async run(){try{const e=this._generateLcpCandidates(1/0);e&&(this._initWithFirstElement

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	20471
Entropy (8bit):	5.584304156248125
Encrypted:	false
SSDEEP:	192:o6sQyrXBJF3Phi+RYohDPCx+bbqGIwVjA2K6qwLdrdXQ1rsOWC3kuixejzuDkF+S:0571qYvUBMLqY0b
MD5:	41004A20C7E924677BE5801EF1E6EF09
SHA1:	B6E8C17BD17B38A262254E7AFD529DA3695B47E1
SHA-256:	7D219CEA3316552D5927B5B7528F1192223374DD1B9DD58C48E5DE057AF6E3F1
SHA-512:	3005AC96EBF9F1E876031E63282029C3B1653CC7110BBDE5C380DBCAB54BD272F6DD5C8A74D44145F8F47F175F4B3CAF6944DFE79921B7F0F333AB24D2097D38
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Google%20Sans%3A400%2C500
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ armenian /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v62/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiIUvaYr.woff2) format('woff2');. unicode-range: U+0308, U+0530-058F, U+2010, U+2024, U+25CC, U+FB13-FB17;.}./ bengali /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v62/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiAUvaYr.woff2) format('woff2');. unicode-range: U+0951-0952, U+0964-0965, U+0980-09FE, U+1CD0, U+1CD2, U+1CD5-1CD6, U+1CD8, U+1CE1, U+1CEA, U+1CED, U+1CF2, U+1CF5-1CF7, U+200C-200D, U+20B9, U+25CC, U+A8F1;.}./ canadian-aboriginal */.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v62/4UasrENHsxJlGDuGo1OIlJfC6l_24rl

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (829), with no line terminators
Category:	downloaded
Size (bytes):	829
Entropy (8bit):	5.4127042201434294
Encrypted:	false
SSDEEP:	24:4HksQq5/Jz2pRNrBZJuvu8goqc0ioNhc++e4+mI:2zz2bNrVENtmN+5+j
MD5:	4A55C09E26896B2802C19DD5A3E93A80
SHA1:	B452FD560E906460739293D202CB89D8BF8B96EA
SHA-256:	2CD1B4366DC1FAD1C443BC0D3E6EC4AFDE4FB3D706DF3AED6BCC3FA0059867DB
SHA-512:	5384BB1349635AFDE65A46B90F3E7B816F0D60D0EBA54B18DF8747F2295560CF9A69D5BB5C5C7130E9A3A2442EDD758B6EA03940245DF1D1F5715D75C31EAF95
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/aframe
Preview:	<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="NjvD62JmKVwFDCUOwToCEw">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha / try{var clients={'sodar':'https://pagead2.googlesyndication.com/pagead/sodar?'};window.addEventListener("message",function(a){try{if(a.source===window.parent){var b=JSON.parse(a.data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("rc::a")?sessionStorage.getItem("rc::b"):"");window.document.body.appendChild(d);sessionStorage.setItem("rc::e",parseInt(sessionStorage.getItem("rc::e")\|\|0)+1);localStorage.setItem("rc::h",'1736909376094');}}}catch(b){}});window.parent.postMessage("_grecaptcha_ready", "");}catch(b){}</script></body></html>

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (58634), with no line terminators
Category:	downloaded
Size (bytes):	58634
Entropy (8bit):	6.103305713211442
Encrypted:	false
SSDEEP:	768:uAHIgdMyXAXabfGCOlB7snLc+kffmHulFkTidt+S/542joGu4ZkD9Brb9+Ok0Tdy:RqglHs7twZeRWZiC3m
MD5:	B6F2BEFB5918DFCB9A0F70B300E24DA6
SHA1:	CA3CF66795702492B4B482123D2553F9675D9FAE
SHA-256:	5489CD6E75572E52DE1483D160585CA088CFC145030A65789EE673CEBA2FAA6C
SHA-512:	247D550D8C7273674006970182F9D01A051414A668B2929ECE95796918F70F89BCA7D4317CE3E5B3D0F183610C6E5937A904C24546B7F91EBA226965F72019B3
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2840258101411863&output=html&h=280&slotname=8499285160&adk=978467678&adf=2230146881&pi=t.ma~as.8499285160&w=336&abgtt=6&lmt=1736881262&format=336x280&url=https%3A%2F%2Fandroiddatahost.com%2Fsdsd3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736909361577&bpp=1&bdt=1278&idt=1558&shv=r20250113&mjsv=m202501080201&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C856x280&nras=1&correlator=8040805227545&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=464&ady=639&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533203%2C31089542%2C31089715%2C95350245%2C31089639&oid=2&pvsid=539208937878820&tmod=1359503699&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CoeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=1564
Preview:	<!doctype html><html><head><script>var jscVersion = 'r20250113';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {};</script><script data-jc="42" data-jc-version="r20250113" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb/%<1245;05!=nehu`/!361:<320!9sqrm(&2057?61<&>`dopb~"]">(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var u=this\|\|self;function aa(a){return a};var w,x;a:{for(var ba=["CLOSURE_FLAGS"],y=u,z=0;z<ba.length;z++)if(y=y[ba[z]],y==null){x=null;break a}x=y}var ca=x&&x[610401301];w=ca!=null?ca:!1;var B;const da=u.navigator;B=da?da.userAgentData\|\|null:null;function C(a){return w?B?B.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function D(a){var b;a:{if(b=u.navigator)if(b=b.userAgent)break a;b=""}retur

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1055)
Category:	downloaded
Size (bytes):	2690
Entropy (8bit):	5.398083497267717
Encrypted:	false
SSDEEP:	48:Otg7xNqHIN7QaE9Fa9FZpPiNmgrZyHicju8m5I0zRHkFRCmTx:rN7Qabhiwdicju8WhRHMnTx
MD5:	2669D16AAE166D157B8434762A199620
SHA1:	CA7E08D45D0D469ED57825C28CB214F421311F97
SHA-256:	944A37F694B55DE268A0BF52DBAE4E12F12C4AE09EE5C8D213BA05075C2865DD
SHA-512:	51CCCC87145F0B0098B81BEA1506C726BB249E65F3B5FCC853F1FC4D4E55716F1F9318E43A2A0B31DFC4C968C14EBAF1EEFB9331C6DCE1B561459883DA7E9432
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20250113/r20110914/client/window_focus_fy2021.js
Preview:	(function(){'use strict';function f(a,b,e){a.addEventListener&&a.addEventListener(b,e,!1)};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a,b,e){if(Array.isArray(b))for(let c=0;c<b.length;c++)g(a,String(b[c]),e);else b!=null&&e.push(a+(b===""?"":"="+encodeURIComponent(String(b))))};function l(a=document){return a.createElement("img")};function m(a,b,e=null,c=!1){n(a,b,e,c)}function n(a,b,e,c){a.google_image_requests\|\|(a.google_image_requests=[]);const d=l(a.document);if(e\|\|c){const k=h=>{e&&e(h);if(c){h=a.google_image_requests;const v=Array.prototype.indexOf.call(h,d,void 0);v>=0&&Array.prototype.splice.call(h,v,1)}d.removeEventListener&&d.removeEventListener("load",k,!1);d.removeEventListener&&d.removeEventListener("error",k,!1)};f(d,"load",k);f(d,"error",k)}d.src=b;a.google_image_requests.push(d)};function p(a=null){return a&&a.getAttribute("data-jc")==="22"?a:document.querySelector('[data-jc="22"]')};var q=document,r=window;functi

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2526)
Category:	downloaded
Size (bytes):	23270
Entropy (8bit):	5.503833775820013
Encrypted:	false
SSDEEP:	384:yio8su2naz/rbhhy/6IbtS/4ouK87eU2w6wqpPBZ5AE3VnIJq9cLcuy4nDEWyDY9:yi3sVnaz/rbhQPAAouK87eUp6JPZCE3k
MD5:	519FBC47D014ED898E08CD32411DA107
SHA1:	36ABBEC560F1031F008E2FBFA1968C7AFE63ADF6
SHA-256:	04581663A590A3B051B88AA91A71C8941E064D62839993B3F47FF8AA1B21017B
SHA-512:	AA02876DA3FBE91D74C8CD88A47BA2DF2379725A05D7B4C8C3BAB891CB808AEB29FC3BC05A8EC96CF177437ED6986F7104759E0975FC98C8BFD161CCA28AE843
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20250113/r20110914/abg_lite_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a){return a};function ba(a){m.setTimeout(()=>{throw a;},0)};var da,n;a:{for(var ea=["CLOSURE_FLAGS"],p=m,fa=0;fa<ea.length;fa++)if(p=p[ea[fa]],p==null){n=null;break a}n=p}var ha=n&&n[610401301];da=ha!=null?ha:!1;var q;const ia=m.navigator;q=ia?ia.userAgentData\|\|null:null;function ja(a){return da?q?q.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function u(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return b.indexOf(a)!=-1};function v(){return da?!!q&&q.brands.length>0:!1}function ka(){return v()?ja("Chromium"):(u("Chrome")\|\|u("CriOS"))&&!(v()?0:u("Edge"))\|\|u("Silk")};function la(a){la[" "](a);return a}la[" "]=function(){};!u("Android")\|\|ka();ka();u("Safari")&&(ka()\|\|(v()?0:u("Coast"))\|\|(v()?0:u("Opera"))\|\|(v()?0:u("Edge"))\|\|(v()?ja("Microsoft Edge"):u("Edg/"))\|\|v()&&ja("Opera"));let ma=void 0;var na=new Set;function oa(a,b=!

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	17562
Entropy (8bit):	6.016807181258642
Encrypted:	false
SSDEEP:	384:w26i8350CFuLsWDUcgiAGQD6wJDazZZJtadKyVZ/m:wkY05LsdcgiAGQ9DaLvEdm
MD5:	9D4B412D412911FB8A0E79921DFE0C16
SHA1:	2D952A30D56392F86055F5D2837078ED4F830663
SHA-256:	BF879CF114DC5D31212FBA772607E6CB7E4B463AD1C9DC118049755469B3B29D
SHA-512:	33D16C35C9561883ED244E6CE69A2FF4CC90E7EF91288214323203AF4D01BB9AEBB5C1B2B09AA259269BB8C6E9EB6C0F2BA248E86058025083AA917F68246743
Malicious:	false
Reputation:	low
Preview:	{"sodar_query_id":"PyKHZ874AeDpx_AP8_ySqQk","injector_basename":"sodar2","bg_hash_basename":"-ZrLev80KaSl5LH5OCbnZGHu6yLSb3tRGuwaxGVnUsM","bg_binary":"tUwqaOrwHAO/4RB8drdRB211pL4Mkn0Qzean82zjfFvcb/dkcFvAyhejj99iQvYQfPAJCiAFRuJ47HTR2oDNxQjxLZYrgQZLh9ltKuhHYQFkgtekI1P8XiozudsJUvULFoHrVKqJwa9ErXPjhMvJKZGdN28sK26DPq0nJ3eabKDbX2gxLvlXP0zXFtbv5phPkaoR48Adl2jykkTs4BWkB7zQ3WwC4ozEmdeFZrpIJny6SKnsEHQ/TRHAJUcMsT+k/KToU9MTm/PxHuTng9J3z4UHQREsMfGVEduhxJHxsKyJS2UDqyMvJZFPiHQhX6DlAgzzOveT/GO6MbEU8/wFYVo0uqM4Zkxd4F4EZbmQzLnEYrWDTo7YXcxT3VJp5AJYqyD15NeHB52W5B3oCaVklt2+nh+Wmdjsv9qmBQ2w8QzPvAtwRMxshY9LMdyFbTVkqDXy/rSdkznIZTLikFTLKw9FpIliOzKPAsJVGdgsyLnDHyNIEKNXtiofRThEOyVa71QoQrh2q1go19BGGirWmQ6B6742h8/A5SG1JPVwGb6mqTei8Twn8iGcKNlZ8CelTIkDKICyvSuZVgyJXwDEkv/NDvpzLBHwtWQrHm4StI/VwCc1wtIzKspi+06mUXD36VV7ErK7MxV3LlIWzzv6sJifjrooMEg9SLSGYajDbWQzcdM4ETc4n4WGtz6VWB3cLZemkfH4bq590uvZ2A+EDseiejqn7fkkHFGCD4CrAfad8vUmyuBHh6VOIMD9zGSV4CjSjAFVbWG8isItBviJ4RQOrU21QBn5wxprNZ5iZsy/QIK+CgNeFBU4aVZzDo5ar4FSqJREK6SNDkoCv

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2971)
Category:	dropped
Size (bytes):	443854
Entropy (8bit):	5.579899816833121
Encrypted:	false
SSDEEP:	12288:ZpCfidcQEswBLpmvgMLZj9sybPiEzOCCdTSBuRcze8RgWGCIuBWaojGybrqtsxQo:ZpCfidcQEswBLpmvgMLZj9sybPiEzOCi
MD5:	922C85BEC2D5537866AB77D9743CEF35
SHA1:	8FBDCF539F3EE10B23E6978E72066059F3EFB526
SHA-256:	18385239CFDA00A835575709F73C634F9F452EE05B211579EDB8BD2D8D649E39
SHA-512:	31B8FB9D3929F200A43BF52C417E90195689F50112A464D1894E9B5FC7D1A59283967B74F2AE24A1CED717798AC8184A07EBE39F25A751DB0951C09D5215B756
Malicious:	false
Reputation:	low
Preview:	(function(sttc){'use strict';var q,aa=Object.defineProperty;function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ba(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",fa={},ha={};function ia(a,b,c){if(!c\|\|a!=null){c=ha[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ka(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in fa?f=fa:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ea&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(fa,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ha[d]===void 0&&(a=Math.random()*1E9>>>0,ha[d]=ea?da.Symbol(d):"$jscp$"+a+"$"+d),aa(f,ha[d],{configurable:!0,writable:!0,value:b})))}}var la=Object.create,ma; .if(ea&&typeof Object.setPrototypeOf=="function")ma=

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10878)
Category:	downloaded
Size (bytes):	10922
Entropy (8bit):	5.144018760493193
Encrypted:	false
SSDEEP:	192:sabfHQ2RHMb9LFY+AxE30UWZacKfy5sWlRyyO/BT8nyuEazDnUcdQP1VAB8X55Mi:N5RHMb9LFY+AA0FYZfy5VlRyyO/BTEE1
MD5:	3FFEF9D75612E6D5B383C393B3FB7D87
SHA1:	7CFDAA40C3440EFD2751D9833A768EA6953F6351
SHA-256:	87219A2F9BE014310D195B371277E88A30D17ED287E81025BBEFF604E8930BCA
SHA-512:	EC75ED22162D939750983608E73D7918BE68AA8E9D0FE5EDCCB4713D98C3841A4891D43BAC8988DB77B60D37EC242D6E7E1568951BF822B61403BBBC27B22F8E
Malicious:	false
Reputation:	low
URL:	https://androiddatahost.com/wp-content/plugins/wp-rocket/assets/js/wpr-beacon.min.js
Preview:	(()=>{var h=class{static getScreenWidth(){return window.innerWidth\|\|document.documentElement.clientWidth}static getScreenHeight(){return window.innerHeight\|\|document.documentElement.clientHeight}static isNotValidScreensize(e,i){const t=this.getScreenWidth(),s=this.getScreenHeight(),n=e&&(t>i.width\|\|s>i.height),r=!e&&(t<i.width\|\|s<i.height);return n\|\|r}static isPageCached(){const e=document.documentElement.nextSibling&&document.documentElement.nextSibling.data?document.documentElement.nextSibling.data:"";return e&&e.includes("Debug: cached")}static isIntersecting(e){return e.bottom>=0&&e.right>=0&&e.top<=(window.innerHeight\|\|document.documentElement.clientHeight)&&e.left<=(window.innerWidth\|\|document.documentElement.clientWidth)}static isPageScrolled(){return window.pageYOffset>0\|\|document.documentElement.scrollTop>0}},l=h,d=class{constructor(e,i){this.config=e,this.performanceImages=[],this.logger=i}async run(){try{const e=this._generateLcpCandidates(1/0);e&&(this._initWithFirstElement

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjst26G_2Ci42iB31TB_jCZHlcuTHxEgKkOn1f0maaGQ8ui742-mMGbcwRNuE5F2iYToYrNRxNQX_AQY5aPVNYzLFEYwdtb068BKGN73CMI5poQ--Eep9qBJj3m20cUmxI0UGYJurlwc&sig=Cg0ArKJSzDyX2O6EyIGyEAE&id=lidar2&mcvt=1000&p=0,0,640,1039&tm=3391.5&tu=2391.899999999994&mtos=1000,1000,1000,1000,1000&tos=1000,0,0,0,0&v=20241204&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=20&adk=1812271808&rs=2&la=1&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=3284216600&rst=1736909366671&rpt=1903&met=mue&wmsd=0&pbe=0&fle=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 930 x 180, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5941
Entropy (8bit):	7.83512518622797
Encrypted:	false
SSDEEP:	96:K7yc8wNwOKs2YzXmEbnGOLPeO0dFlC6swbbcND/+6+8dEmDveH9P3xFS9rbNq:WzuOKs2Yz2EbFabOwHKbf5m93mrc
MD5:	91188E1C87E7B90D143F7DDA54D94D37
SHA1:	9103C13777246ED8C91416B793F591D7FE66280C
SHA-256:	91EE0169C6834567866266D3BCB5DB70CE01007C92CBB5505B14FCEDB8D893C2
SHA-512:	7A2B40F1A8D8AA8AB40F2F0A91CB73D265000B26058EFF0C6C4419A8F1AB10BFAE91224E8874F41E12A6381625464B108E13EE7039C037DBA0F8D5A6A36C7FB2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............Aa....nPLTE..X.h, ```................@@@....................ppp.......000..lPPP.........m.......cCMVy.........m................b(3>......^fn.....m...........{F.....6@J..x.....5@J.......ksz.......w......oooPYb............a........x..x..........{G.....w....r:..T___......QYb...........{]fn............w.................S....{..n..T......x..(.'/....IDATx..{.8....HjYD..u.5c+nr.....S..6....>.}......\|.....9.....d...x.. ...........................................................>.b....//...Y...V}..9...G\n...v......-....\|...X.\.byAn\.&.....kQ.3'.Wgf..^.R...f._....6UZ...mrS.X5k.~c....[Q..5k...q.V...j.....z.76s"...?.Y..I.....BQ...J.L...C.Fn...+.X..X...A...s.c+z....WVkQ.....`*.5j.......K....N....7..-.....R..@..)Tt}yy.zS....C...+OV6.F1..Q.}`..`....)zM^......;.8.<.N..S..R..B......).t.U..nd#..]c.i.q-.9..kc)J._.kWvK{.]{.u.N.......}C...?...z....6.h...7ME......Z..z..(....S.N...&...2EgVw.....;.4+..z8.

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1382)
Category:	downloaded
Size (bytes):	17945
Entropy (8bit):	5.330388445341784
Encrypted:	false
SSDEEP:	384:AbnElW+CdYyqBFy9G/JtCHAOgRImVWsc5JZB:Ll3CdnqC9ct2A1ImVWsc5h
MD5:	3B071D5606CC1CF92AE307F5BDB4E540
SHA1:	E191068CC90E5489130489A1CF173FE50BBA28B8
SHA-256:	FF3DE130872FE0FB5B770DFA2BC9F0DAF8AB320403A34A60D089436F08D24F99
SHA-512:	8A1287D7528B2B65D61D6E0A639F2CBE5658AFC3EDB5E2AF9494E8CC876AA6C8060A55D3BD4AA85A0B3B82733E64F7F7A6B4A5F2597FD99FD37136A83A6BBCAD
Malicious:	false
Reputation:	low
URL:	https://ep2.adtrafficquality.google/sodar/sodar2.js
Preview:	(function(){'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var k=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ba(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",r={},u={};function w(a,b,c){if(!c\|\|a!=null){c=u[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}}.function x(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var g=d[0],f;!a&&g in r?f=r:f=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in f))break a;f=f[e]}d=d[d.length-1];c=p&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?k(r,d,{configurable:!0,writable:!0,value:b}):b!==c&&(u[d]

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3160)
Category:	downloaded
Size (bytes):	20762
Entropy (8bit):	5.534161653662071
Encrypted:	false
SSDEEP:	384:ElV/MfTqRhG/rVBnnksgmca0ha5WpZbTNinUm0fBC08er7ODgUR5KAC+P8aqWahC:ElV/MrqRc/rznAkLEpNTNiUz5C0Lr70X
MD5:	DF8C7196958168C2B6E10F4D2306BEF3
SHA1:	5AEAB2C4B37035DE83839EBAC95C471E8EA132F2
SHA-256:	6617311ECE84D2511297F47001AA93FB5F171F4DAF874472913F3FE78C00653B
SHA-512:	36BA3A8E074C9F88CCF33F6F9FA433AC9A0A3D2C2EABDA87790FE17E55BAAFAD8A70F4D2E040D393DBCE01833A774EAC0B79A30AF64C0589C389C6859BEF933C
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20250113/r20110914/client/qs_click_protection_fy2021.js
Preview:	(function(){'use strict';var aa=Object.defineProperty;function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this); .function da(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var f=a[d];if(!(f in c))break a;c=c[f]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}}da("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")});/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var n=this\|\|self;function ka(a,b,c){return a.call.apply(a.bind,arguments)}function p(a,b,c){p=ka;return p.apply(null,arguments)}function la(a){return a}function ma(a,b){function c(){}c.prototype=b.prototype;a.N=b.prototype;a.prototype=new c;a.prototype.constructor=a;a.O=function(d,f,g){for(var e=

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (2166)
Category:	dropped
Size (bytes):	40065
Entropy (8bit):	5.523718607594165
Encrypted:	false
SSDEEP:	768:ahgz3bFoPa6QJ0cGzFdXmRSdZv4kwYoI++9lGf1jdJu2YvZd/ItUhi5noT4eynN0:qwrWdR0u4kImVVIt7s6fBxJO
MD5:	A58566D29ED3E45AE10B29ECBC28E4B3
SHA1:	056D768E098ED45AC24CA8D88A84FB891C09E4B0
SHA-256:	A488CB1BD0FB56F709F67A61DECBE27A50C44032F1F145AA0BC94B88868EA925
SHA-512:	302329355624883F8F2568FF0F78FEF32F7E7F33F862C9D1984F7B0B9CB37E7399D307E1D1C09C0F80122EBAE623A3D3E467B70F68077EC14BFB25252B521534
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var m=this\|\|self;function aa(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=m,e=0;e<c.length;e++)if(d=d[c[e]],d==null){c=null;break a}c=d}a=c&&c[a];return a!=null?a:b}function ca(a){return a};function q(a,b){if(!b)return a;b.indexOf("&")===0&&(b=b.substring(1));const c=/[?&]adurl=([^&]*)/.exec(a);return c?`${a.slice(0,c.index+1)}${b}&${a.slice(c.index+1)}`:`${a}${a.indexOf("?")===-1?"?":"&"}${b}`}function da(a,b){switch(a){case 0:return b?"&ri=1":"";case 1:return b?"&ri=24":"&ri=27";case 2:return b?"&ri=25":"&ri=26";default:return""}}.function ea(a){a=a.o;if(!a)return"";let b="";a.platform&&(b+="&uap="+encodeURIComponent(a.platform));a.platformVersion&&(b+="&uapv="+encodeURIComponent(a.platformVersion));a.uaFullVersion&&(b+="&uafv="+encodeURIComponent(a.uaFullVersion));a.architecture&&(b+="&uaa="+encodeURIComponent(a.architecture));a.model&&(b+="&uam="+encodeURIComponent(a.model));a.bitness&&(b+=

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	dropped
Size (bytes):	141707
Entropy (8bit):	5.4473128875543075
Encrypted:	false
SSDEEP:	3072:p660sTPv0WJECBN8/tspu9lHtzkKPS8mKN0WlBz9Gm:SMg6clO4Rrht
MD5:	DBB8A5F0C0779C20B733ECB73A421605
SHA1:	219968A8361A730D30DB9772291D830B75BE526F
SHA-256:	2E7055C6FBE405848AD40D4DDC6F7EA3CAE9DD55F08B8CFB691CCB772DF7C162
SHA-512:	7E3DABC7E7FFDEFB9E32248DAE2A58919DB366866F57EBD70A1255205370FD2F0395C0DA35A9C319E23E8C50A914F439EC52EEFCCEC05854D18D2A5153980A3C
Malicious:	false
Reputation:	low
Preview:	var oi=Object.defineProperty;var si=(e,t,n)=>t in e?oi(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n;var j=(e,t,n)=>(si(e,typeof t!="symbol"?t+"":t,n),n);function Mh(){import.meta.url,import("_").catch(()=>1),async function*(){}().next()}(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const o of document.querySelectorAll('link[rel="modulepreload"]'))r(o);new MutationObserver(o=>{for(const s of o)if(s.type==="childList")for(const i of s.addedNodes)i.tagName==="LINK"&&i.rel==="modulepreload"&&r(i)}).observe(document,{childList:!0,subtree:!0});function n(o){const s={};return o.integrity&&(s.integrity=o.integrity),o.referrerPolicy&&(s.referrerPolicy=o.referrerPolicy),o.crossOrigin==="use-credentials"?s.credentials="include":o.crossOrigin==="anonymous"?s.credentials="omit":s.credentials="same-origin",s}function r(o){if(o.ep)return;o.ep=!0;const s=n(o);fetch(o.href,s)}})();var _n,D,Do,ct,Lr,Vo,jn,cr,Nn,Mn,T

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvH9vblWiECpKjJiKB9eH99A_HGizcvdJFOOpuZNAua9kaJq7LApN2JzaXFKJ2N5k6JzUQhPUAMbvSOSTPDIkYViuliO5nXiRDdaOFzvzYl2TG2CgqAdi_Yk7BIH9hpDfiJmnnRWiIHBbe6c1rdpnc3ge_xV8ocKl0oZ-Og&sai=AMfl-YRSHM1ZlXdiarkLV-j0V4guD0wphB-ioUN1SzQQACgfWea7Mg_ppvVg5bmnni8JowVCXWaYs1L-HtcW3OTBvLYmXZuh1oTerFeCMCb4bXPRqeWwlDHqWKI0XdGxRdiafXiwAQ6Y9Py2tj-0hSk2&sig=Cg0ArKJSzBdMvi4LnW8vEAE&cid=CAQSTgCa7L7df4xwUHVujsXH2F66vTtJuY0JMzCDUy0RwlGknM5o1hgUj27nZz3JKyLm39Z1qfeU48liOx_XvHXY-00wQ4VbHo9Y1_AGgVhlnRgB&id=lidar2&mcvt=1000&p=0,0,124,641&tm=1818.4000000000087&tu=818.6000000000058&mtos=1000,1000,1000,1000,1000&tos=1000,0,0,0,0&v=20241204&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=4&adk=1812271801&rs=2&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=3284216700&rst=1736909366662&rpt=1155&met=mue&wmsd=0&pbe=0&fle=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	17609
Entropy (8bit):	6.017029049509225
Encrypted:	false
SSDEEP:	384:yYtXvvAgzjl62jue4++V6y65EKYNWNGsu8gP2VfyS9vE9O+o:dfLj/Fxy6yKOXszVf5d+o
MD5:	4B8A5CDAE1D2040588E43BD0B953C7A9
SHA1:	02642FCFE9C1F7E2C4C3287F08E6B1681E7362BA
SHA-256:	620CD297C71A02EE60F0F7754EA75D2EE62013FF540643481C12A634B302713B
SHA-512:	002624723552DA40967C8B4A76060D2DE6D19BE6FE538A0FC1CA6BB40D92C4F20693777B73CE1F808120D3CD3FE12AB438AC282825E674D8F8B4A8A997663D0E
Malicious:	false
Reputation:	low
URL:	https://ep1.adtrafficquality.google/getconfig/sodar?sv=200&tid=gda&tv=r20250113&st=env
Preview:	{"sodar_query_id":"PiKHZ4Ely8SO7A-VhI2wBA","injector_basename":"sodar2","bg_hash_basename":"-ZrLev80KaSl5LH5OCbnZGHu6yLSb3tRGuwaxGVnUsM","bg_binary":"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

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvkCFZMVl5y8aVQRjgF890_ACGlD7yuQDCqsJKZwMrdCJFNzVKlVRaUOn4vWhGZXKujVM5K8M0BIArY1wJ1R6RtWxcO99kMN0h68wqyvl1exVs8_iLm6i28bDLAIuB23VTpJyQD6qo&sig=Cg0ArKJSzAeaAYbr3hnWEAE&id=lidar2&mcvt=1000&p=0,0,280,336&tm=3756.899999999994&tu=2756.800000000003&mtos=0,0,1000,1000,1000&tos=0,0,1000,0,0&v=20241204&bin=7&avms=nio&bs=0,0&mc=0.6&if=1&vu=1&app=0&itpl=20&adk=3371522416&rs=2&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=3284216500&rst=1736909363158&rpt=5475&met=mue&wmsd=0&pbe=0&fle=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	903
Entropy (8bit):	7.640775296290854
Encrypted:	false
SSDEEP:	24:huKXZveKAmXWWI0PXmgFWLEol1Fbz2p0H6SN3TT:hdRl6n0PWgFUEK1Fb6pW6SN3TT
MD5:	5A84052998EBE16C105D52406F411524
SHA1:	BE4FAA83366ED07FD5F5BAFBDBC2131F3B7DB7D3
SHA-256:	73BF3107F54B9228D32564923A23A9884CC97F1F24A3C60E94DAA1D36A94C956
SHA-512:	2F29546604F3B816A5A6FEFC183321F38AAE6D7ADBB79C5E11C884F9291B406D59989F7CF43EED71E386BED6CE2DD4DE88A11610AC98A41C87254002A2424338
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....D.......PLTE...6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X5@X3=U...ENd......@Ja...ISi=G^......{.....:C[.......RZoNXm.............gn.KTjHQg7AY.......................ov.jq.bi\|]exZbv.............U^r..............w~.v}..{s2Zd2R`..............,.~_gzDirMbq.qn.gi5K]k......tRNS.../...b#......:Sm......IDAT8...r.@....J..4...'.I..r.N.p9......u:W...MM..#e.Ky.T.O.\|.,.O.p&C.\|V...'.c. .p..'.\|~q..$....8..\.W.`$...P.....Ju....].......P..\:.R.kJ...M[.n(....K.".o.p'$...I....(...h..0..kH....!.`8+.A.=..{.0.l...jX..{...R...p^.J2..J..!......[...4.......[..g...%...o-..F...K....}.....]........M..{.P.....U$.MM.........r....s$3..^......H...p...j._.<C.w%....^.Pa!....s..l..&^..lM}...=.....c.r..t]7...>..Z.y.(..]{.Y.....,..l..g.\.f...7.....7..)A V-..2..?h....2.f!...r... 8...X.w{.l.(LV91%. ..(.(.........H....2..{.x.<..-.W.v$R.....IEND.B`.

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	469
Entropy (8bit):	4.889487192217403
Encrypted:	false
SSDEEP:	12:trIoqCtuCV9/K4KiwXl69on6kAHFjhllR:tcoqAuui4KiwX96kajhllR
MD5:	6974AEE9AF84143B4AC5C739F1707C95
SHA1:	B0E39311591AA75BF203BC7ABDF64FDAF7B05797
SHA-256:	E8B2FE0CAF115F14D018B7064E8F710521D4C284263A7AE2922FEEC272961DA6
SHA-512:	4788601CCA97E02AEFD465BAA0872171A47330E22761CA9BA5B7C14FE006E9C88E03F4E7A9DE4A9850EE9BFBA530ED0E437B42C13FECA604818D5C52EEF3259A
Malicious:	false
Reputation:	low
Preview:	<svg width="19" height="21" viewBox="0 0 19 21" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M1 13.2632L1 16.9691C1 17.5307 1.22125 18.0693 1.61508 18.4665C2.0089 18.8636 2.54305 19.0867 3.1 19.0867H15.7C16.257 19.0867 16.7911 18.8636 17.1849 18.4665C17.5787 18.0693 17.8 17.5307 17.8 16.9691V13.2632M9.40117 1V13M9.40117 13L14.2012 8.41485M9.40117 13L4.60117 8.41485" stroke="white" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"/>.</svg>.

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53867)
Category:	downloaded
Size (bytes):	55134
Entropy (8bit):	5.702232148791689
Encrypted:	false
SSDEEP:	768:jEiPAeoa9vySust0GTzOwaosKf/1gR3ARHNL5vsaeHJ9ibZlPqy5iHMfa+:jEirvmkOnosyORwRr0J9Uq2
MD5:	8B0CCE3B1EBF7A94348320551F0093EF
SHA1:	433867B75985AACAF92CA2AC1F278174509E6076
SHA-256:	F99ACB7AFF3429A4A5E4B1F93826E76461EEEB22D26F7B511AEC1AC4656752C3
SHA-512:	972868D461F9B39F68D87335682680F1BD51F5D9B51E65E41F9A4757678653DFF870E580A92C5973757022C6DD1C9F8B1E613267C6E96F045989FBCDA22B1791
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/-ZrLev80KaSl5LH5OCbnZGHu6yLSb3tRGuwaxGVnUsM.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function F(O){return O}var T=function(O,n,C,V,w,E,x,h,m,r,q,R){for(q=80,r=95;;)try{if(q==13)break;else{if(q==91)return h;if(q==79)return r=95,h;q==V?q=l.console?8:79:q==8?(l.console[E](R.message),q=79):q==19?(r=95,q=V):q==80?(m=l.trustedTypes,h=w,q=O):q==C?(r=n,h=m.createPolicy(x,{createHTML:W,createScript:W,createScriptURL:W}),q=79):q==O&&(q=m&&m.createPolicy?C:91)}}catch(e){if(r==95)throw e;r==n&&(R=e,q=19)}},l=this\|\|self,W=function(O){return F.call(this,O)};(0,eval)(function(O,n){return(n=T(7,32,61,62,null,"error","bg"))&&O.eval(n.createScript("1"))===1?function(C){return n.createScript(C)}:function(C){return""+C}}(l)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJza

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (58720), with no line terminators
Category:	downloaded
Size (bytes):	58720
Entropy (8bit):	6.102016053195504
Encrypted:	false
SSDEEP:	768:uAHIgdMyXAXabfGCOlB7snLc+kffmHulyOFIne+S/542jz9XB9Brb9+zCTdrDyye:RqglSG4tzdTynWf3m
MD5:	FCBB0C778664545BD57734262C03512E
SHA1:	90DFBF4DADE28C0300D88F65DFE3CB376DA6D310
SHA-256:	66DDA0654318D6EB107EEA8AAD4D8C85FCC0BBED8195BCA865C91307B38A56C6
SHA-512:	41382CC8684D9453DE6DCD3518C4D7CEF35BF958D6F36DC77B64FD1F50A348596851C53360B0C7E52C7B28913B4CE8681E5CEEFCADB6FF45CC1B73E6286CCA30
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2840258101411863&output=html&h=280&slotname=8499285160&adk=3371522416&adf=601265536&pi=t.ma~as.8499285160&w=336&abgtt=6&lmt=1736881262&format=336x280&url=https%3A%2F%2Fandroiddatahost.com%2Fsdsd3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736909361578&bpp=1&bdt=1279&idt=1576&shv=r20250113&mjsv=m202501080201&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C856x280%2C336x280%2C856x280&nras=1&correlator=8040805227545&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=464&ady=2039&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533203%2C31089542%2C31089715%2C95350245%2C31089639&oid=2&pvsid=539208937878820&tmod=1359503699&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CoeEbr%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=5&uci=a!5&btvi=2&fsb=1&dtd=1579
Preview:	<!doctype html><html><head><script>var jscVersion = 'r20250113';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {};</script><script data-jc="42" data-jc-version="r20250113" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb/%<1245;05!=nehu`/!361:<320!9sqrm(&2057?61<&>`dopb~"]">(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var u=this\|\|self;function aa(a){return a};var w,x;a:{for(var ba=["CLOSURE_FLAGS"],y=u,z=0;z<ba.length;z++)if(y=y[ba[z]],y==null){x=null;break a}x=y}var ca=x&&x[610401301];w=ca!=null?ca:!1;var B;const da=u.navigator;B=da?da.userAgentData\|\|null:null;function C(a){return w?B?B.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function D(a){var b;a:{if(b=u.navigator)if(b=b.userAgent)break a;b=""}retur

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (786)
Category:	downloaded
Size (bytes):	1672
Entropy (8bit):	5.286735414643417
Encrypted:	false
SSDEEP:	48:bFj15yMuJcZ2E9uIic2u8aYlPFs3l7Q2xtHS:Fey2EYIic2u8bl9sJu
MD5:	AB304529064B2C30C88FC41AD81913E0
SHA1:	14091E21A049D97B052DD56FF4076898F6F7D0CC
SHA-256:	88C5A7E6C9B3319F4BE9CD873D1E19766A62BE628EA9921156DD2702F1D15031
SHA-512:	6F8A7C3D2516C88E172D6AF1F88B0F32242A737BA128F95E0668D57EE004384DAFE4011A84FC543BA477A7BC82A8D47862F1F276F0C89FA0087D63E4D3B72691
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20250113/r20110914/client/load_preloaded_resource_fy2021.js
Preview:	(function(){'use strict';let e=[];const f=()=>{const a=e;e=[];for(const b of a)try{b()}catch{}};function g(a=document){return a.createElement("img")};function h(a=null){return a&&a.getAttribute("data-jc")==="26"?a:document.querySelector('[data-jc="26"]')};var k=document;/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=()=>{var a=k.querySelectorAll("link[data-reload-stylesheet][as=style][rel=preload]");for(var b=0;b<a.length;b++){var c=a[b],d="link",l=document;d=String(d);l.contentType==="application/xhtml+xml"&&(d=d.toLowerCase());d=l.createElement(d);d.setAttribute("rel","stylesheet");d.setAttribute("href",c.getAttribute("href"));k.head.appendChild(d)}if(a.length>0&&!(Math.random()>.01)){a=(a=h(document.currentScript))&&a.getAttribute("data-jc-rcd")==="true"?"pagead2.googlesyndication-cn.com":"pagead2.googlesyndication.com"; .b=(b=h(document.currentScript))&&b.getAttribute("data-jc-version")\|\|"unknown";a=`https://${a}/pagead/gen_204?id=jca

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	143
Entropy (8bit):	5.079318363208902
Encrypted:	false
SSDEEP:	3:PIy9JL/ZSGKHjJMzVJu+1vK3VYrSLIzECAXhxMAFjWAEtv0Gb:TJL/sGeMRJVSOGLIoDXhxVFjWAEd0Gb
MD5:	E4E31B474D3E0B577B3C8856E91F8659
SHA1:	A81311F7FCFA9B6B23A24D4E5C976D5F75B1B9B7
SHA-256:	18088C10E79C926292732AF98A0CE470E90F3FBCBA4BB4896AB3310C2D94E421
SHA-512:	A07961EB39C4CD4E39EE19E2C675E64E5BA5367DAA18E2F76A23772ABD62F46B002E6BE8FB0F35A70616941178FACC8DF579C4A68E5811B74313C12806AAFAE3
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/drt/s?v=r20120211
Preview:	<!DOCTYPE HTML PUBLIC>.<html>. <head>. <meta http-equiv="refresh" content="0;url=https://www.google.com/pagead/drt/ui" />. </head>.</html>

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3715)
Category:	downloaded
Size (bytes):	163714
Entropy (8bit):	5.603328551032051
Encrypted:	false
SSDEEP:	3072:Tk0bf5b2I4hdT6ZuXeWAFe7v7lttnDXrOcDpgF7lX9rQhdJ/yPouj0/dtRHAtFys:Tk0bf5b2/hdT6ZuXXAg7vZXDXrOYpgFZ
MD5:	B3399867BA864A535D3839B586BB1265
SHA1:	81C28145BC0D7CD201135646E23E498E8D5070B4
SHA-256:	D0FDD58757D6AEA4499C8693F96176D6E661CF7F5FDC4D2E6E2E95B0ADE3F76A
SHA-512:	D830ADDE7162B79AE0C31C322001B48EDC94731DE41A568BA49FD16F7C113839F9C6742F2A66111FA54A72E3C83DD4778D62B21F65BF28AA13533759C0DFD30F
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-2840258101411863
Preview:	(function(sttc){'use strict';var aa,ba=Object.defineProperty;function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",fa={},ha={};function ia(a,b,c){if(!c\|\|a!=null){c=ha[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ja(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in fa?f=fa:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ea&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?ba(fa,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ha[d]===void 0&&(a=Math.random()*1E9>>>0,ha[d]=ea?da.Symbol(d):"$jscp$"+a+"$"+d),ba(f,ha[d],{configurable:!0,writable:!0,value:b})))}}ja("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")},"es_nex

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53721)
Category:	dropped
Size (bytes):	55009
Entropy (8bit):	5.759058714843368
Encrypted:	false
SSDEEP:	1536:jpspTS9rOD8h9nEn46itPZtqnrDzeM4WaH:Nz9rNEn46iFZkTraH
MD5:	949F2EF04EFBAAE6968612AE729747E2
SHA1:	253AF18647B881CA264D7952376362C2A6684455
SHA-256:	BD73F148D9F86EFB8BEFF435E1D71AF485CBB84303AA221FE9AE5C2624780B36
SHA-512:	CB19996EB5ACE78485CF4A1CB6DD2F700C6B2CEB136BCCAE377A7D88543D74AAC0BF5AAE471CDDA45441B5151694D6D7EAE9C59C0C975B31121D916FE9987E66
Malicious:	false
Reputation:	low
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function O(S){return S}var t=this\|\|self,W=function(S,Z,U,q,h,G,B,z,g,X,M,E){for(M=(E=U,68);;)try{if(E==17)break;else if(E==S)E=t.console?Z:36;else if(E==q)E=z&&z.createPolicy?92:7;else{if(E==7)return g;if(E==0)M=68,E=S;else{if(E==36)return M=68,g;E==Z?(t.console[h](X.message),E=36):E==U?(g=B,z=t.trustedTypes,E=q):E==92&&(M=65,g=z.createPolicy(G,{createHTML:u,createScript:u,createScriptURL:u}),E=36)}}}catch(Q){if(M==68)throw Q;M==65&&(X=Q,E=0)}},u=function(S){return O.call(this,S)};(0,eval)(function(S,Z){return(Z=W(45,43,1,77,"error","bg",null))&&S.eval(Z.createScript("1"))===1?function(U){return Z.createScript(U)}:function(U){return""+U}}(t)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;charset=u

\Device\ConDrv

Download File

Process:	C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	7342
Entropy (8bit):	3.987276209035988
Encrypted:	false
SSDEEP:	96:/mwUJxN3isUvuItl+vjjFrixp8Fx3e+UxvKl9/44GqwA4ntee:/mwOxN35+NwfFrumyQcsgtp
MD5:	BB363D0958BA052D16FF86BF6A58F8C8
SHA1:	56C05FDB84DCAE8D9E9AE1A82E3B21FB4F93DE76
SHA-256:	6C553B0C65C1558CE7EFB33750852A6CF8640EFAD308F8A54E83D12AE3270389
SHA-512:	6DBA464BDCD50B1D8AE7D718DDCD5EC526C731CCAD166D6A72BD60C25EA98482DC39A080AC297CF2D4CB1BCE90B24441BAB7B727109C3664B48F1495DD443012
Malicious:	false
Reputation:	low
Preview:	Android Debug Bridge version 1.0.31.... -d - directs command to the only connected USB device.. returns an error if more than one USB device is present... -e - directs command to the only running emulator... returns an error if more than one emulator is running... -s <specific device> - directs command to the device or emulator with the given.. serial number or qualifier. Overrides ANDROID_SERIAL.. environment variable... -p <product name or path> - simple product name like 'sooner', or.. a relative/absolute path to a product.. out directory like 'out/target/product/sooner'... If -p is not specified, the ANDROID_PRODUCT_OUT.. environment variable is used, which must..

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-15T03:51:08.557364+0100	2803274	ETPRO MALWARE Common Downloader Header Pattern UH	2	192.168.2.16	50043	61.143.38.50	80	TCP
2025-01-15T03:51:08.557364+0100	2003635	ET MALWARE Suspicious User Agent Detected (RookIE) - Common with Downloaders	1	192.168.2.16	50043	61.143.38.50	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 15, 2025 03:49:20.036626101 CET	49673	443	192.168.2.16	204.79.197.203
Jan 15, 2025 03:49:20.329197884 CET	49707	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:20.329265118 CET	443	49707	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:20.329345942 CET	49707	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:20.329777956 CET	49708	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:20.329864025 CET	443	49708	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:20.329874039 CET	49707	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:20.329904079 CET	443	49707	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:20.329948902 CET	49708	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:20.330241919 CET	49708	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:20.330271006 CET	443	49708	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:20.339590073 CET	49673	443	192.168.2.16	204.79.197.203
Jan 15, 2025 03:49:20.809694052 CET	443	49708	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:20.809982061 CET	49708	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:20.810040951 CET	443	49708	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:20.811531067 CET	443	49708	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:20.811604023 CET	49708	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:20.812719107 CET	49708	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:20.812823057 CET	443	49708	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:20.812916994 CET	49708	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:20.812936068 CET	443	49708	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:20.824749947 CET	443	49707	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:20.825124025 CET	49707	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:20.825181961 CET	443	49707	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:20.826946020 CET	443	49707	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:20.827023983 CET	49707	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:20.827370882 CET	49707	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:20.827454090 CET	443	49707	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:20.863632917 CET	49708	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:20.879587889 CET	49707	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:20.879611969 CET	443	49707	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:20.927648067 CET	49707	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:20.943680048 CET	49673	443	192.168.2.16	204.79.197.203
Jan 15, 2025 03:49:20.959291935 CET	443	49708	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:20.959379911 CET	443	49708	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:20.959450960 CET	443	49708	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:20.959455967 CET	49708	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:20.959496021 CET	443	49708	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:20.959547043 CET	443	49708	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:20.959584951 CET	49708	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:20.962883949 CET	443	49708	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:20.962964058 CET	49708	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:20.962981939 CET	443	49708	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:21.006614923 CET	49708	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:21.013595104 CET	49710	443	192.168.2.16	192.0.77.37
Jan 15, 2025 03:49:21.013622046 CET	443	49710	192.0.77.37	192.168.2.16
Jan 15, 2025 03:49:21.013678074 CET	49710	443	192.168.2.16	192.0.77.37
Jan 15, 2025 03:49:21.014204979 CET	49710	443	192.168.2.16	192.0.77.37
Jan 15, 2025 03:49:21.014219999 CET	443	49710	192.0.77.37	192.168.2.16
Jan 15, 2025 03:49:21.036065102 CET	49711	443	192.168.2.16	169.150.236.105
Jan 15, 2025 03:49:21.036149025 CET	443	49711	169.150.236.105	192.168.2.16
Jan 15, 2025 03:49:21.036245108 CET	49711	443	192.168.2.16	169.150.236.105
Jan 15, 2025 03:49:21.038364887 CET	49711	443	192.168.2.16	169.150.236.105
Jan 15, 2025 03:49:21.038402081 CET	443	49711	169.150.236.105	192.168.2.16
Jan 15, 2025 03:49:21.044722080 CET	443	49708	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:21.044749022 CET	443	49708	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:21.044799089 CET	49708	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:21.044863939 CET	443	49708	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:21.044900894 CET	49708	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:21.044928074 CET	49708	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:21.045248985 CET	443	49708	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:21.045269012 CET	443	49708	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:21.045314074 CET	49708	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:21.045341015 CET	49708	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:21.045355082 CET	443	49708	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:21.047250986 CET	443	49708	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:21.047352076 CET	49708	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:21.047365904 CET	443	49708	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:21.047509909 CET	443	49708	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:21.047581911 CET	49708	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:21.098833084 CET	49708	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:21.098895073 CET	443	49708	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:21.295583010 CET	49707	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:21.339329004 CET	443	49707	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:21.447839022 CET	443	49707	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:21.447901964 CET	443	49707	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:21.447925091 CET	443	49707	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:21.447945118 CET	443	49707	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:21.447973967 CET	49707	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:21.448008060 CET	443	49707	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:21.448040962 CET	49707	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:21.449157000 CET	443	49707	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:21.449224949 CET	49707	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:21.449239969 CET	443	49707	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:21.449304104 CET	443	49707	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:21.449310064 CET	49707	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:21.449362040 CET	49707	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:21.449453115 CET	49707	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:21.449474096 CET	443	49707	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:21.464658022 CET	49716	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:21.464746952 CET	443	49716	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:21.464855909 CET	49716	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:21.465020895 CET	49716	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:21.465038061 CET	443	49716	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:21.489639044 CET	443	49710	192.0.77.37	192.168.2.16
Jan 15, 2025 03:49:21.489861012 CET	49710	443	192.168.2.16	192.0.77.37
Jan 15, 2025 03:49:21.489888906 CET	443	49710	192.0.77.37	192.168.2.16
Jan 15, 2025 03:49:21.491609097 CET	443	49710	192.0.77.37	192.168.2.16
Jan 15, 2025 03:49:21.491687059 CET	49710	443	192.168.2.16	192.0.77.37
Jan 15, 2025 03:49:21.492518902 CET	49710	443	192.168.2.16	192.0.77.37
Jan 15, 2025 03:49:21.492603064 CET	443	49710	192.0.77.37	192.168.2.16
Jan 15, 2025 03:49:21.546590090 CET	49710	443	192.168.2.16	192.0.77.37
Jan 15, 2025 03:49:21.546614885 CET	443	49710	192.0.77.37	192.168.2.16
Jan 15, 2025 03:49:21.594603062 CET	49710	443	192.168.2.16	192.0.77.37
Jan 15, 2025 03:49:21.663656950 CET	443	49711	169.150.236.105	192.168.2.16
Jan 15, 2025 03:49:21.663881063 CET	49711	443	192.168.2.16	169.150.236.105
Jan 15, 2025 03:49:21.663930893 CET	443	49711	169.150.236.105	192.168.2.16
Jan 15, 2025 03:49:21.665702105 CET	443	49711	169.150.236.105	192.168.2.16
Jan 15, 2025 03:49:21.665781975 CET	49711	443	192.168.2.16	169.150.236.105
Jan 15, 2025 03:49:21.666627884 CET	49711	443	192.168.2.16	169.150.236.105
Jan 15, 2025 03:49:21.666716099 CET	443	49711	169.150.236.105	192.168.2.16
Jan 15, 2025 03:49:21.721715927 CET	49711	443	192.168.2.16	169.150.236.105
Jan 15, 2025 03:49:21.721776009 CET	443	49711	169.150.236.105	192.168.2.16
Jan 15, 2025 03:49:21.769718885 CET	49711	443	192.168.2.16	169.150.236.105
Jan 15, 2025 03:49:21.926943064 CET	49717	443	192.168.2.16	142.250.184.226
Jan 15, 2025 03:49:21.926973104 CET	443	49717	142.250.184.226	192.168.2.16
Jan 15, 2025 03:49:21.927036047 CET	49717	443	192.168.2.16	142.250.184.226
Jan 15, 2025 03:49:21.927320004 CET	49717	443	192.168.2.16	142.250.184.226
Jan 15, 2025 03:49:21.927331924 CET	443	49717	142.250.184.226	192.168.2.16
Jan 15, 2025 03:49:21.948401928 CET	443	49716	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:21.948570967 CET	49716	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:21.948604107 CET	443	49716	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:21.950026989 CET	443	49716	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:21.950109959 CET	49716	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:21.950319052 CET	49716	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:21.950402021 CET	443	49716	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:21.950419903 CET	49716	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:21.991328955 CET	443	49716	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:22.004585028 CET	49716	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:22.004606009 CET	443	49716	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:22.053284883 CET	49716	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:22.103674889 CET	443	49716	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:22.103707075 CET	443	49716	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:22.103715897 CET	443	49716	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:22.103784084 CET	443	49716	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:22.103827953 CET	49716	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:22.103843927 CET	443	49716	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:22.103871107 CET	49716	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:22.107546091 CET	443	49716	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:22.107630014 CET	49716	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:22.107645035 CET	443	49716	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:22.107687950 CET	443	49716	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:22.107716084 CET	49716	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:22.107745886 CET	49716	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:22.107908010 CET	49716	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:22.107938051 CET	443	49716	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:22.146604061 CET	49673	443	192.168.2.16	204.79.197.203
Jan 15, 2025 03:49:22.556044102 CET	443	49717	142.250.184.226	192.168.2.16
Jan 15, 2025 03:49:22.556279898 CET	49717	443	192.168.2.16	142.250.184.226
Jan 15, 2025 03:49:22.556297064 CET	443	49717	142.250.184.226	192.168.2.16
Jan 15, 2025 03:49:22.557738066 CET	443	49717	142.250.184.226	192.168.2.16
Jan 15, 2025 03:49:22.557833910 CET	49717	443	192.168.2.16	142.250.184.226
Jan 15, 2025 03:49:22.558612108 CET	49717	443	192.168.2.16	142.250.184.226
Jan 15, 2025 03:49:22.558693886 CET	443	49717	142.250.184.226	192.168.2.16
Jan 15, 2025 03:49:22.604598045 CET	49717	443	192.168.2.16	142.250.184.226
Jan 15, 2025 03:49:22.604605913 CET	443	49717	142.250.184.226	192.168.2.16
Jan 15, 2025 03:49:22.656604052 CET	49717	443	192.168.2.16	142.250.184.226
Jan 15, 2025 03:49:22.687689066 CET	49689	80	192.168.2.16	192.229.211.108
Jan 15, 2025 03:49:23.783298016 CET	49730	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:23.783344984 CET	443	49730	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:23.783426046 CET	49730	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:23.783617020 CET	49730	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:23.783636093 CET	443	49730	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:23.794770002 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:23.794790983 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:23.794866085 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:23.795106888 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:23.795120001 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:23.809104919 CET	49732	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:23.809187889 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:23.809434891 CET	49732	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:23.809674978 CET	49732	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:23.809720039 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:23.814395905 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:23.814496040 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:23.814616919 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:23.814796925 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:23.814821005 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:23.820588112 CET	49734	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:23.820630074 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:23.820709944 CET	49734	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:23.820935011 CET	49734	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:23.820962906 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:23.829261065 CET	49735	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:23.829305887 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:23.829390049 CET	49735	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:23.829587936 CET	49735	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:23.829627037 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.156969070 CET	49737	443	192.168.2.16	142.250.186.36
Jan 15, 2025 03:49:24.157010078 CET	443	49737	142.250.186.36	192.168.2.16
Jan 15, 2025 03:49:24.157100916 CET	49737	443	192.168.2.16	142.250.186.36
Jan 15, 2025 03:49:24.157303095 CET	49737	443	192.168.2.16	142.250.186.36
Jan 15, 2025 03:49:24.157330990 CET	443	49737	142.250.186.36	192.168.2.16
Jan 15, 2025 03:49:24.436039925 CET	443	49730	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.436269045 CET	49730	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.436290026 CET	443	49730	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.439834118 CET	443	49730	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.439924002 CET	49730	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.440242052 CET	49730	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.440390110 CET	49730	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.440396070 CET	443	49730	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.440414906 CET	443	49730	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.441514015 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.441710949 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.441723108 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.442596912 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.442646027 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.442913055 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.442969084 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.443057060 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.443065882 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.446115971 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.446321964 CET	49732	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.446336031 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.447201014 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.447262049 CET	49732	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.447524071 CET	49732	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.447588921 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.447657108 CET	49732	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.447671890 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.455574989 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.455775023 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.455792904 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.457221031 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.457295895 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.457530975 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.457613945 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.457648039 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.457683086 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.474311113 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.474520922 CET	49734	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.474540949 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.476440907 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.476625919 CET	49734	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.476984978 CET	49734	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.477085114 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.477152109 CET	49734	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.477189064 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.489779949 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.489964962 CET	49735	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.489975929 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.490593910 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.490595102 CET	49730	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.490600109 CET	49732	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.490612984 CET	443	49730	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.494307995 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.494381905 CET	49735	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.494738102 CET	49735	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.494883060 CET	49735	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.494920015 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.506668091 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.506683111 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.522598982 CET	49734	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.522612095 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.534718990 CET	49735	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.534733057 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.538604975 CET	49730	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.554718971 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.554716110 CET	49673	443	192.168.2.16	204.79.197.203
Jan 15, 2025 03:49:24.570611000 CET	49734	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.586731911 CET	49735	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.712564945 CET	443	49730	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.712697983 CET	443	49730	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.712776899 CET	49730	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.712799072 CET	443	49730	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.712882996 CET	443	49730	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.712929964 CET	49730	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.712938070 CET	443	49730	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.718080997 CET	443	49730	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.718136072 CET	49730	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.718148947 CET	443	49730	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.721216917 CET	443	49730	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.721280098 CET	49730	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.721548080 CET	49730	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:24.721565008 CET	443	49730	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:24.748985052 CET	49740	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:24.749006987 CET	443	49740	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:24.749063969 CET	49740	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:24.749209881 CET	49740	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:24.749223948 CET	443	49740	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:24.803426027 CET	443	49737	142.250.186.36	192.168.2.16
Jan 15, 2025 03:49:24.806818962 CET	49737	443	192.168.2.16	142.250.186.36
Jan 15, 2025 03:49:24.806842089 CET	443	49737	142.250.186.36	192.168.2.16
Jan 15, 2025 03:49:24.808546066 CET	443	49737	142.250.186.36	192.168.2.16
Jan 15, 2025 03:49:24.808624029 CET	49737	443	192.168.2.16	142.250.186.36
Jan 15, 2025 03:49:24.809598923 CET	49737	443	192.168.2.16	142.250.186.36
Jan 15, 2025 03:49:24.809698105 CET	443	49737	142.250.186.36	192.168.2.16
Jan 15, 2025 03:49:24.858602047 CET	49737	443	192.168.2.16	142.250.186.36
Jan 15, 2025 03:49:24.858613968 CET	443	49737	142.250.186.36	192.168.2.16
Jan 15, 2025 03:49:24.906610012 CET	49737	443	192.168.2.16	142.250.186.36
Jan 15, 2025 03:49:25.114483118 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.114615917 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.114686966 CET	49734	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.114701986 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.114788055 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.114852905 CET	49734	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.114864111 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.120157957 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.120218039 CET	49734	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.120229006 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.120292902 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.120383024 CET	49734	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.120394945 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.125303030 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.125425100 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.125514984 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.125602961 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.125628948 CET	49735	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.125701904 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.125746012 CET	49735	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.126394033 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.126470089 CET	49734	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.126481056 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.130963087 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.131052017 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.131095886 CET	49735	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.131112099 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.131325960 CET	49735	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.131340027 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.132713079 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.132778883 CET	49734	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.132791042 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.137232065 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.137326956 CET	49735	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.137340069 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.143553019 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.143620968 CET	49735	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.143634081 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.156821012 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.156960964 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.157059908 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.157114983 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.157149076 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.157250881 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.157299995 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.157315969 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.157470942 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.157481909 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.162350893 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.162415028 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.162450075 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.168656111 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.168791056 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.168804884 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.174956083 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.175017118 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.175025940 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.178658962 CET	49734	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.192106009 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.192254066 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.192347050 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.192387104 CET	49732	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.192404032 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.192466021 CET	49732	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.192480087 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.192559958 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.192606926 CET	49732	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.192620039 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.194614887 CET	49735	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.197963953 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.198096037 CET	49732	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.198110104 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.200459957 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.204288006 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.204391003 CET	49732	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.204404116 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.204931021 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.205024004 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.205060959 CET	49734	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.205074072 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.205295086 CET	49734	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.205306053 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.209527969 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.209605932 CET	49734	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.209616899 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.210522890 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.210613966 CET	49732	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.210627079 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.211076975 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.213232040 CET	49742	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.213252068 CET	443	49742	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.213323116 CET	49742	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.213886023 CET	49742	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.213897943 CET	443	49742	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.215750933 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.215814114 CET	49734	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.215826035 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.217222929 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.217315912 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.217395067 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.217417955 CET	49735	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.217489958 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.217530012 CET	49735	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.220268965 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.220355034 CET	49735	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.220371008 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.221914053 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.221976042 CET	49734	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.221987009 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.226466894 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.226543903 CET	49735	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.226557016 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.226605892 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.228255033 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.228316069 CET	49734	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.228327036 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.232837915 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.232922077 CET	49735	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.232935905 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.234605074 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.234680891 CET	49734	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.234692097 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.239053965 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.239120960 CET	49735	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.239139080 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.240412951 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.240489960 CET	49734	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.240499973 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.242836952 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.244626045 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.244689941 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.244704008 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.244806051 CET	443	49740	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:25.245083094 CET	49740	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:25.245090008 CET	443	49740	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:25.245296001 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.245361090 CET	49735	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.245373011 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.245500088 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.245563030 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.245574951 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.246110916 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.246184111 CET	49734	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.246195078 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.246603966 CET	443	49740	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:25.246680975 CET	49740	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:25.246946096 CET	49740	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:25.247025967 CET	443	49740	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:25.247061014 CET	49740	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:25.251168013 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.251244068 CET	49735	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.251256943 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.251883030 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.251952887 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.251965046 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.251981020 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.252075911 CET	49734	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.252087116 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.253937006 CET	49743	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.253945112 CET	443	49743	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:25.254004002 CET	49743	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.254175901 CET	49744	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.254195929 CET	443	49744	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:25.254321098 CET	49745	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.254333019 CET	49744	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.254390001 CET	443	49745	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:25.254451990 CET	49745	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.254941940 CET	49743	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.254954100 CET	443	49743	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:25.255141973 CET	49745	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.255177021 CET	443	49745	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:25.255409002 CET	49744	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.255419970 CET	443	49744	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:25.256907940 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.257715940 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.257793903 CET	49734	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.257800102 CET	49735	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.257805109 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.257823944 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.258057117 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.258625984 CET	49732	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.258658886 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.258671999 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.262696981 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.263529062 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.263622046 CET	49734	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.263627052 CET	49735	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.263633966 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.263643980 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.264431953 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.265225887 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.265239000 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.268531084 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.269617081 CET	49735	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.269629002 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.270694017 CET	49746	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.270735025 CET	443	49746	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:25.270802975 CET	49746	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.271064043 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.271073103 CET	49746	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.271089077 CET	443	49746	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:25.271138906 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.271151066 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.274410009 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.276956081 CET	49735	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.276968956 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.276983023 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.277043104 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.277055025 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.278274059 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.280486107 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.280575991 CET	49732	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.280590057 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.281537056 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.282820940 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.282910109 CET	49732	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.282916069 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.282927990 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.282948017 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.287328005 CET	443	49740	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:25.287579060 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.287650108 CET	49732	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.287663937 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.288635015 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.289731979 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.289745092 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.290627956 CET	49740	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:25.290635109 CET	443	49740	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:25.292639017 CET	49747	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.292648077 CET	443	49747	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:25.292716980 CET	49747	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.293612957 CET	49747	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.293625116 CET	443	49747	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:25.293832064 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.293994904 CET	49748	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.294022083 CET	49732	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.294027090 CET	443	49748	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:25.294043064 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.294092894 CET	49748	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.294404030 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.294985056 CET	49748	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.295012951 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.295013905 CET	443	49748	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:25.295030117 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.295677900 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.295770884 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.295835972 CET	49734	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.295849085 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.295947075 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.296006918 CET	49734	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.296019077 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.296071053 CET	49734	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.296080112 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.296941996 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.297013044 CET	49734	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.297152042 CET	49734	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.297167063 CET	443	49734	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.297465086 CET	49749	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.297471046 CET	443	49749	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.297528028 CET	49749	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.297981024 CET	49749	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.297991037 CET	443	49749	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.300046921 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.300117016 CET	49732	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.300137043 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.300244093 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.300754070 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.300765991 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.303596973 CET	49750	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.303605080 CET	443	49750	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:25.303684950 CET	49750	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.305201054 CET	49750	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.305212975 CET	443	49750	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:25.306126118 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.306433916 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.306505919 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.306525946 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.306565046 CET	49732	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.306583881 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.309627056 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.309725046 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.309799910 CET	49735	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.309815884 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.309914112 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.309973001 CET	49735	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.309984922 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.310043097 CET	49735	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.310055017 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.310611963 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.310678959 CET	49735	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.312695026 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.312973976 CET	49732	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.312987089 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.317387104 CET	49735	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.317414045 CET	443	49735	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.318092108 CET	49753	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.318101883 CET	443	49753	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.318551064 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.318627119 CET	49753	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.318631887 CET	49732	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.318635941 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.318664074 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.318873882 CET	49753	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.318885088 CET	443	49753	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.318905115 CET	49732	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.324331999 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.330018044 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.330064058 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.330133915 CET	49732	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.330147982 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.330204010 CET	49732	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.333255053 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.333338022 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.333354950 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.333446026 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.333504915 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.333517075 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.333920002 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.334063053 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.334137917 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.334151030 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.334203005 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.334214926 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.334393978 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.334497929 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.334520102 CET	443	49733	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.334547997 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.334575891 CET	49733	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.334836006 CET	49754	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.334857941 CET	443	49754	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.334933996 CET	49754	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.335191011 CET	49754	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.335203886 CET	443	49754	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.335855961 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.338603973 CET	49740	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:25.339479923 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.339526892 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.339560032 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.339591026 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.339612007 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.339621067 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.339644909 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.341634989 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.341675997 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.341736078 CET	49732	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.341749907 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.341805935 CET	49732	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.345381975 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.345428944 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.345452070 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.345513105 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.345537901 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.345565081 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.352461100 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.353647947 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.353655100 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.355293036 CET	443	49740	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:25.355484009 CET	443	49740	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:25.355596066 CET	49740	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:25.357048988 CET	49740	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:25.357054949 CET	443	49740	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:25.358027935 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.359093904 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.359100103 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.369127989 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.369298935 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.369395018 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.369402885 CET	49732	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.369473934 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.369573116 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.369635105 CET	49732	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.369654894 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.369709015 CET	49732	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.369870901 CET	49732	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.369874954 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.370022058 CET	443	49732	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.370090961 CET	49732	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.370090961 CET	49732	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.402654886 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.426109076 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.429860115 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.429902077 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.429909945 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.429943085 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.430207968 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.430213928 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.435264111 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.435326099 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.435331106 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.441606045 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.444884062 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.444890022 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.448257923 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.448307991 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.448313951 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.454271078 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.454333067 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.454339027 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.460743904 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.460805893 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.460812092 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.466469049 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.466820955 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.466826916 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.472047091 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.472110987 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.472121954 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.477870941 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.477909088 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.477989912 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.477996111 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.478048086 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.483835936 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.489618063 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.489648104 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.489667892 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.489675045 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.489717007 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.520351887 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.520486116 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.520515919 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.520530939 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.520540953 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.520623922 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.520982981 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.521039009 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.521090031 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.521096945 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.521765947 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.521795988 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.521821022 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.521827936 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.521866083 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.526808023 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.532712936 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.532742977 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.532804966 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.532813072 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.532850027 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.538208961 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.543431044 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.543459892 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.543503046 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.543509960 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.543549061 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.548384905 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.553436995 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.553467989 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.553534031 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.553540945 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.553608894 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.558482885 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.563302040 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.563339949 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.563368082 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.563375950 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.563420057 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.567920923 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.572637081 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.572663069 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.572685957 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.572700977 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.572736025 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.577006102 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.581091881 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.581116915 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.581142902 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.581151009 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.581160069 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.581182957 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.585122108 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.585179090 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.585186005 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.588916063 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.589040041 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.589046001 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.592659950 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.592757940 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.592763901 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.596375942 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.596432924 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.596438885 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.599996090 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.600052118 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.600058079 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.603534937 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.603605986 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.603611946 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.610939980 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.610975981 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.611000061 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.611008883 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.611047029 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.611052036 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.611494064 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.611536980 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.611541986 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.613711119 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.613759995 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.613766909 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.615756989 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.615782022 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.615808010 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.615814924 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.615868092 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.617927074 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.620065928 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.620088100 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.620156050 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.620163918 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.620208025 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.622329950 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.624418974 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.624492884 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.624543905 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.624551058 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.624598026 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.627130985 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.638391018 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.638427973 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.638459921 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.638482094 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.638489962 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.638499975 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.638523102 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.638725042 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.638730049 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.638838053 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.638856888 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.638886929 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.638894081 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.638932943 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.638937950 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.639769077 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.639825106 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.639830112 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.641748905 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.641832113 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.641889095 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.641895056 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.641937971 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.644222975 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.647016048 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.647054911 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.647061110 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.647068024 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.647845984 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.649072886 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.650336981 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.650362015 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.650403023 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.650408983 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.650448084 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.653825998 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.654696941 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.654722929 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.654757023 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.654762983 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.656776905 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.658467054 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.658665895 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.658705950 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.658725023 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.658730984 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.658799887 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.663144112 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.663285971 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.663366079 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.663367033 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.663378954 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.663419962 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.667448044 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.667527914 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.667561054 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.667604923 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.667610884 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.667644978 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.671737909 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.671802044 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.671828032 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.671876907 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.671883106 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.671921968 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.675597906 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.675667048 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.675697088 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.675723076 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.675729036 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.675767899 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.679470062 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.679532051 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.679558039 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.679604053 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.679610014 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.679652929 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.683310986 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.683377981 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.683406115 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.683439970 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.683444977 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.683481932 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.687045097 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.687102079 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.687125921 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.687150002 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.687155962 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.687228918 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.690660000 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.690717936 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.690749884 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.690767050 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.690773010 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.690812111 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.690818071 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.694235086 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.694268942 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.694283962 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.694289923 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.694905996 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.694910049 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.701540947 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.701581001 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.701611042 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.701618910 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.701627970 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.701657057 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.701889038 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.701937914 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.701942921 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.702162027 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.702193975 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.702214003 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.702219963 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.702467918 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.702472925 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.703471899 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.703524113 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.703531027 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.705008984 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.705136061 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.705142021 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.706526041 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.706633091 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.706639051 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.707895041 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.707961082 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.707971096 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.709391117 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.709456921 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.709462881 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.710757017 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.711103916 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.711111069 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.712888002 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.712944984 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.712951899 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.715065956 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.715100050 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.715127945 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.715127945 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.715142012 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.715186119 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.719719887 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.719800949 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.719850063 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.719861031 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.719877958 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.719921112 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.719950914 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.719979048 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.720012903 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.720026970 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.720083952 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.726886034 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.726928949 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.726979017 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.726984978 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.727065086 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.727135897 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.727140903 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.732754946 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.732824087 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.732837915 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.732917070 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.732953072 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.732980967 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.733000040 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.733021021 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.733045101 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.739742994 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.739785910 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.739806890 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.739813089 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.739841938 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.739862919 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.739869118 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.740205050 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.740210056 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.745266914 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.745321989 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.745326996 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.745368004 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.745404005 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.745430946 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.745454073 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.745459080 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.745476961 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.753834009 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.753909111 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.753943920 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.753976107 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.754000902 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.754072905 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.754092932 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.754143000 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.754156113 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.756650925 CET	443	49743	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:25.756860018 CET	49743	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.756879091 CET	443	49743	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:25.758230925 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.758264065 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.758289099 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.758291006 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.758304119 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.758326054 CET	443	49743	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:25.758356094 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.758369923 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.758394957 CET	49743	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.758426905 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.759651899 CET	49743	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.759711981 CET	49743	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.759737015 CET	443	49743	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:25.759807110 CET	49743	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.759820938 CET	443	49743	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:25.759833097 CET	49743	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.760148048 CET	49755	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.760168076 CET	443	49755	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:25.760169029 CET	49743	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.760490894 CET	49755	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.760696888 CET	49755	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.760704994 CET	443	49755	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:25.762409925 CET	443	49745	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:25.762466908 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.762516022 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.762548923 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.762564898 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.762568951 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.762578964 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.762588978 CET	49745	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.762614012 CET	443	49745	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:25.762617111 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.762624025 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.762676001 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.764276028 CET	443	49745	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:25.764354944 CET	49745	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.765115023 CET	49745	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.765146971 CET	49745	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.765181065 CET	49745	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.765217066 CET	443	49745	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:25.765285015 CET	49745	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.765389919 CET	49756	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.765470982 CET	443	49756	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:25.765543938 CET	49756	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.765698910 CET	49756	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.765728951 CET	443	49756	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:25.766801119 CET	443	49744	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:25.766973972 CET	49744	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.767003059 CET	443	49744	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:25.770001888 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.770086050 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.770095110 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.770112038 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.770174980 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.770227909 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.770526886 CET	443	49744	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:25.770611048 CET	49744	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.770844936 CET	49744	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.770881891 CET	49744	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.770910025 CET	49744	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.771015882 CET	443	49744	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:25.771079063 CET	49744	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.771116018 CET	49757	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.771142960 CET	443	49757	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:25.771207094 CET	49757	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.771368027 CET	49757	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.771382093 CET	443	49757	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:25.776364088 CET	443	49746	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:25.776554108 CET	49746	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.776598930 CET	443	49746	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:25.777470112 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.777508974 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.777520895 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.777528048 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.777725935 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.777750015 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.777774096 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.777781010 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.777796030 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.780133963 CET	443	49746	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:25.780216932 CET	49746	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.780474901 CET	49746	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.780510902 CET	49746	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.780510902 CET	49746	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.780659914 CET	443	49746	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:25.780688047 CET	49758	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.780698061 CET	443	49758	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:25.780729055 CET	49746	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.780781031 CET	49758	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.780925035 CET	49758	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.780936003 CET	443	49758	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:25.781083107 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.781116962 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.781140089 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.781141043 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.781151056 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.781188011 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.781194925 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.781224012 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.781266928 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.781271935 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.781318903 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.784740925 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.784787893 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.784826994 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.784853935 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.784867048 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.784876108 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.784893036 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.785080910 CET	443	49748	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:25.785799980 CET	49748	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.785815954 CET	443	49748	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:25.787270069 CET	443	49748	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:25.787348032 CET	49748	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.787599087 CET	49748	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.787636995 CET	49748	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.787637949 CET	49748	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.787694931 CET	443	49748	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:25.787776947 CET	49748	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.787831068 CET	49759	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.787861109 CET	443	49759	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:25.787925005 CET	49759	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.788094044 CET	49759	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.788101912 CET	443	49759	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:25.792701006 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.792743921 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.792756081 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.792762995 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.792793989 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.792824030 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.792848110 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.792850971 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.792862892 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.792866945 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.792903900 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.794015884 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.794110060 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.794146061 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.794178009 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.794193983 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.794200897 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.794224977 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.798226118 CET	443	49747	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:25.798463106 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.798515081 CET	49747	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.798525095 CET	443	49747	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:25.798546076 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.798556089 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.798587084 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.798626900 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.798659086 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.798666000 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.798671961 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.798707962 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.798712015 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.798753023 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.799973011 CET	443	49747	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:25.800043106 CET	49747	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.800081968 CET	443	49750	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:25.800362110 CET	49747	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.800375938 CET	49747	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.800421953 CET	49747	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.800443888 CET	443	49747	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:25.800498962 CET	49747	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.800621986 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.800669909 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:25.800734043 CET	49750	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.800741911 CET	443	49750	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:25.800781012 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.800929070 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:25.800956964 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:25.801750898 CET	443	49750	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:25.803575993 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.803643942 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.803667068 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.803687096 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.807337999 CET	443	49750	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:25.808357954 CET	49750	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.808859110 CET	49750	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.808868885 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.808885098 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.808962107 CET	49750	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.808989048 CET	443	49750	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:25.809010983 CET	49750	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.809068918 CET	49750	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.809283018 CET	49761	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.809344053 CET	443	49761	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:25.810429096 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.810471058 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.810506105 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.810512066 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.810513020 CET	49761	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.810550928 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.810566902 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.810643911 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.810668945 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.810678005 CET	49761	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:25.810695887 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.810702085 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.810707092 CET	443	49761	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:25.810759068 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.817747116 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.817800045 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.817822933 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.817847013 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.817868948 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.817876101 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.817898989 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.823566914 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.823621988 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.823648930 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.823673964 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.823681116 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.823689938 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.823760986 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.823815107 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.823820114 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.830332041 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.830358028 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.830406904 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.830414057 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.830466032 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.830471992 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.830496073 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.830545902 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.830552101 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.835907936 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.835963964 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.835971117 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.836030006 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.836061001 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.836090088 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.836108923 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.836117029 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.836136103 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.848603964 CET	443	49742	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.848812103 CET	49742	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.848815918 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.848820925 CET	443	49742	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.848875046 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.848891973 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.848928928 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.848957062 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.848990917 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.849004984 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.849051952 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.849109888 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.849123955 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.849179983 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.849323034 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.849380970 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.849416018 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.849443913 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.849456072 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.849463940 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.849486113 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.849982977 CET	443	49742	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.850723028 CET	49742	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.850895882 CET	49742	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.850895882 CET	443	49742	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.851016998 CET	443	49742	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.853162050 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.853230000 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.853236914 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.853285074 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.853311062 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.853337049 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.853363037 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.853370905 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.853385925 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.860635996 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.860681057 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.860690117 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.860697985 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.860753059 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.860778093 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.860836983 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.861071110 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.861077070 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.871716022 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.871747017 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.871768951 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.871779919 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.871819019 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.871829987 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.871835947 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.871876955 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.871882915 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.875439882 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.875494003 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.875499964 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.875534058 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.875576973 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.875600100 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.875607967 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.875852108 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.875889063 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.875896931 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.875902891 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.875931978 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.876153946 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.876198053 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.876204014 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.883246899 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.883296013 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.883308887 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.883322001 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.883353949 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.883404970 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.883410931 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.883451939 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.883457899 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.884555101 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.884623051 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.884629965 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.884654999 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.884773016 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.884778023 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.884852886 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.884906054 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.885059118 CET	49731	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.885066986 CET	443	49731	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.897628069 CET	49742	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.950228930 CET	443	49749	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.950428009 CET	49749	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.950438976 CET	443	49749	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.951617002 CET	443	49749	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.952090025 CET	49749	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.952266932 CET	443	49749	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.952275991 CET	49749	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.952466011 CET	443	49749	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.953733921 CET	443	49753	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.953999996 CET	49753	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.954008102 CET	443	49753	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.957389116 CET	443	49753	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.957452059 CET	49753	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.957855940 CET	49753	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.957933903 CET	443	49753	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.958022118 CET	49753	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.958045959 CET	443	49753	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.978857994 CET	443	49754	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.980560064 CET	49754	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.980572939 CET	443	49754	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.985171080 CET	443	49754	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.985258102 CET	49754	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.985539913 CET	49754	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.985637903 CET	443	49754	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.985681057 CET	49754	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:25.985716105 CET	443	49754	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:25.993633986 CET	49749	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:26.010555029 CET	49753	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:26.010564089 CET	443	49753	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:26.025620937 CET	49754	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:26.025631905 CET	443	49754	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:26.062601089 CET	49753	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:26.072985888 CET	49754	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:26.141426086 CET	443	49742	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:26.141504049 CET	443	49742	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:26.141640902 CET	49742	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:26.142359018 CET	49742	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:26.142379999 CET	443	49742	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:26.152563095 CET	49764	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:26.152595043 CET	443	49764	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:26.152756929 CET	49764	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:26.152861118 CET	49764	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:26.152868986 CET	443	49764	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:26.236032963 CET	443	49749	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:26.236242056 CET	443	49749	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:26.236303091 CET	49749	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:26.236778021 CET	49749	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:26.236788034 CET	443	49749	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:26.239012003 CET	49766	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:26.239044905 CET	443	49766	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:26.239115000 CET	49766	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:26.239223003 CET	443	49753	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:26.239296913 CET	49766	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:26.239311934 CET	443	49766	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:26.239496946 CET	443	49753	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:26.239561081 CET	49753	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:26.239963055 CET	49753	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:26.239974976 CET	443	49753	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:26.242029905 CET	49767	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:26.242049932 CET	443	49767	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:26.242122889 CET	49767	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:26.242288113 CET	49767	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:26.242299080 CET	443	49767	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:26.250974894 CET	443	49758	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.254911900 CET	49758	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.254921913 CET	443	49758	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.256824970 CET	443	49758	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.256894112 CET	49758	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.257914066 CET	49758	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.258038998 CET	443	49758	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.258166075 CET	49758	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.258172989 CET	443	49758	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.259582996 CET	443	49755	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.260663033 CET	443	49757	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.260993958 CET	49755	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.260999918 CET	443	49755	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.261020899 CET	49757	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.261085033 CET	443	49757	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.262152910 CET	443	49755	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.262217045 CET	49755	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.263005972 CET	49755	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.263076067 CET	443	49755	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.263159990 CET	49755	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.263166904 CET	443	49755	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.263979912 CET	443	49759	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.263997078 CET	443	49756	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.264202118 CET	49756	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.264262915 CET	443	49756	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.264288902 CET	49759	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.264297962 CET	443	49759	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.264661074 CET	443	49757	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.264753103 CET	49757	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.265007973 CET	49757	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.265113115 CET	49757	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.265126944 CET	443	49757	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.265186071 CET	443	49757	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.265281916 CET	443	49759	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.265348911 CET	49759	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.265902042 CET	443	49754	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:26.266094923 CET	443	49754	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:26.266129017 CET	49759	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.266159058 CET	49754	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:26.266187906 CET	443	49759	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.266379118 CET	49759	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.266761065 CET	49754	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:26.266768932 CET	443	49754	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:26.267261028 CET	443	49756	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.267343044 CET	49756	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.267709017 CET	49756	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.267796040 CET	443	49756	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.267843008 CET	49756	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.269082069 CET	49768	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:26.269174099 CET	443	49768	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:26.269263029 CET	49768	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:26.269494057 CET	49768	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:26.269529104 CET	443	49768	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:26.309638023 CET	49759	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.309643984 CET	443	49759	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.309673071 CET	49758	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.309673071 CET	49755	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.309684992 CET	49756	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.309685946 CET	49757	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.309743881 CET	443	49756	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.309746981 CET	443	49757	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.319885969 CET	443	49761	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.320682049 CET	49761	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.320715904 CET	443	49761	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.322609901 CET	443	49761	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.322690964 CET	49761	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.323009014 CET	49761	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.323117018 CET	443	49761	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.323381901 CET	49761	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.323398113 CET	443	49761	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.335985899 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.336184025 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.336215973 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.337620020 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.337682962 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.337902069 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.337975025 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.338004112 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.356623888 CET	49759	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.356641054 CET	49757	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.356651068 CET	49756	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.366147041 CET	443	49758	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.366338015 CET	443	49758	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.366394997 CET	49758	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.366405010 CET	443	49758	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.366483927 CET	443	49758	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.366539955 CET	49758	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.366545916 CET	443	49758	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.366641998 CET	443	49758	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.366724014 CET	443	49758	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.366724968 CET	49758	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.366755009 CET	443	49758	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.366796970 CET	49758	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.366835117 CET	443	49758	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.370771885 CET	443	49758	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.370845079 CET	49758	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.370858908 CET	443	49758	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.371037006 CET	443	49758	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.371088982 CET	49758	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.371287107 CET	49758	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.371295929 CET	443	49758	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.372615099 CET	49761	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.379357100 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.388622999 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.388643026 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.421881914 CET	443	49759	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.421952963 CET	443	49759	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.422014952 CET	443	49759	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.422072887 CET	49759	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.422080994 CET	443	49759	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.422148943 CET	443	49759	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.422192097 CET	49759	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.422198057 CET	443	49759	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.426696062 CET	443	49759	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.426758051 CET	49759	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.426764011 CET	443	49759	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.426847935 CET	443	49759	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.426903009 CET	49759	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.426908970 CET	443	49759	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.434161901 CET	49770	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.434250116 CET	443	49770	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.434348106 CET	49770	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.434571981 CET	49770	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.434592009 CET	443	49770	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.436611891 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.467931986 CET	443	49755	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.468274117 CET	443	49755	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.468337059 CET	49755	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.468622923 CET	49759	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.468775034 CET	49755	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.468784094 CET	443	49755	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.507385969 CET	443	49756	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.507695913 CET	443	49756	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.507786989 CET	49756	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.508330107 CET	49756	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.508368969 CET	443	49756	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.510149002 CET	443	49759	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.510270119 CET	443	49759	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.510636091 CET	49759	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.510781050 CET	49759	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.510793924 CET	443	49759	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.518448114 CET	443	49757	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.518750906 CET	443	49757	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.518826008 CET	49757	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.519385099 CET	49757	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.519424915 CET	443	49757	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.521270037 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.521455050 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.521522045 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.521542072 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.521620035 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.521677017 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.521681070 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.521707058 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.521852016 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.521908045 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.521928072 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.522011042 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.522021055 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.526047945 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.526134014 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.526160002 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.526175976 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.527369022 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.539345980 CET	443	49761	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.539653063 CET	443	49761	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.539725065 CET	49761	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.540357113 CET	49761	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.540374994 CET	443	49761	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.542635918 CET	49772	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.542722940 CET	443	49772	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.542785883 CET	49773	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.542824030 CET	49772	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.542840958 CET	443	49773	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.542910099 CET	49773	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.542994976 CET	49774	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.543016911 CET	443	49774	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.543077946 CET	49774	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.543118954 CET	49775	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.543138981 CET	443	49775	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.543380022 CET	49775	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.544112921 CET	49772	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.544148922 CET	443	49772	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.544378996 CET	49773	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.544406891 CET	443	49773	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.544651985 CET	49774	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.544680119 CET	443	49774	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.545176029 CET	49775	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.545201063 CET	443	49775	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.548533916 CET	49776	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.548557997 CET	443	49776	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.548633099 CET	49776	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.550182104 CET	49777	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.550203085 CET	443	49777	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.550263882 CET	49777	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.550637960 CET	49778	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.550645113 CET	443	49778	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.550703049 CET	49778	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.551067114 CET	49779	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.551078081 CET	443	49779	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.551126957 CET	49779	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.551546097 CET	49776	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.551559925 CET	443	49776	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.551728010 CET	49777	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.551743031 CET	443	49777	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.551918030 CET	49778	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.551940918 CET	443	49778	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.552099943 CET	49779	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:26.552109957 CET	443	49779	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:26.613575935 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.613850117 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.613878012 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.613898039 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.613931894 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.613953114 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.613996029 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.614013910 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.614038944 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.614051104 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.614051104 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.614056110 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.614084959 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.614120960 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.614120960 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.614306927 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.614763975 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.614797115 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.614856005 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.614871025 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.615194082 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.615228891 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.615250111 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.615267992 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.615288973 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.615302086 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.615330935 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.615394115 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.615406036 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.615421057 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.615470886 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.661192894 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.705835104 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.705888987 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.705915928 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.705925941 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.705955029 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.705996037 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.706031084 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.706056118 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.706063032 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.706075907 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.706130981 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.706463099 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.706502914 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.706525087 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.706537962 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.706562042 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.706567049 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.706608057 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.706620932 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.706950903 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.707669973 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.707720041 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.707745075 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.707756042 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.707783937 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.707824945 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.708096027 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.708288908 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.708308935 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.708904028 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.708936930 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.708961010 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.709878922 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.709897995 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.710071087 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.753691912 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.753810883 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.798294067 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.798368931 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.798574924 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.798620939 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.798775911 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.798793077 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.798921108 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.798949957 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.799112082 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.799118996 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.799388885 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.799423933 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.799453974 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.799535036 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.799700975 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.801162958 CET	49760	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.801182032 CET	443	49760	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.814980030 CET	443	49764	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:26.818687916 CET	49764	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:26.818715096 CET	443	49764	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:26.820198059 CET	443	49764	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:26.820297956 CET	49764	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:26.820528984 CET	49783	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.820568085 CET	443	49783	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.820847034 CET	49764	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:26.820904016 CET	49783	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.820930004 CET	443	49764	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:26.821122885 CET	49783	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.821141958 CET	443	49783	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.821188927 CET	49764	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:26.821197987 CET	443	49764	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:26.864155054 CET	49784	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.864187956 CET	443	49784	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.864268064 CET	49784	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.864480972 CET	49785	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.864547014 CET	443	49785	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.864626884 CET	49785	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.864895105 CET	49784	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.864912987 CET	443	49784	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.865174055 CET	49785	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.865204096 CET	443	49785	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.869613886 CET	49764	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:26.876250982 CET	443	49766	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:26.876461029 CET	49766	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:26.876476049 CET	443	49766	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:26.877891064 CET	443	49766	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:26.877964020 CET	49766	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:26.878299952 CET	49766	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:26.878377914 CET	443	49766	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:26.878458023 CET	49766	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:26.878469944 CET	443	49766	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:26.898272991 CET	443	49767	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:26.899961948 CET	49767	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:26.899976015 CET	443	49767	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:26.901410103 CET	443	49767	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:26.901470900 CET	49767	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:26.901850939 CET	49767	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:26.901928902 CET	443	49767	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:26.902642965 CET	49767	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:26.920587063 CET	443	49768	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:26.921417952 CET	49768	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:26.921436071 CET	443	49768	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:26.922604084 CET	443	49770	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.922888041 CET	443	49768	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:26.922966003 CET	49768	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:26.923173904 CET	49770	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.923230886 CET	443	49770	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.923549891 CET	49768	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:26.923634052 CET	443	49768	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:26.923780918 CET	49768	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:26.926462889 CET	443	49770	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.926537991 CET	49770	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.926964998 CET	49770	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.926996946 CET	49770	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.927032948 CET	49770	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.927057981 CET	443	49770	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.927120924 CET	49770	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.927329063 CET	49786	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.927361965 CET	443	49786	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.927476883 CET	49786	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.927675009 CET	49786	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:26.927690029 CET	443	49786	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:26.932620049 CET	49766	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:26.943336964 CET	443	49767	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:26.948760986 CET	49767	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:26.948776007 CET	443	49767	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:26.964623928 CET	49768	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:26.964637041 CET	443	49768	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:26.996629000 CET	49767	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:27.006640911 CET	443	49775	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.006885052 CET	49775	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.006946087 CET	443	49775	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.010481119 CET	443	49775	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.010557890 CET	49775	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.011017084 CET	49775	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.011056900 CET	49775	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.011089087 CET	49775	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.011209011 CET	443	49775	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.011274099 CET	49775	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.011430025 CET	49787	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.011460066 CET	443	49787	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.011516094 CET	49787	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.011713028 CET	49787	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.011722088 CET	443	49787	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.012614012 CET	49768	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:27.026818037 CET	443	49772	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.027189016 CET	49772	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.027209044 CET	443	49772	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.027909994 CET	443	49773	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.028079987 CET	49773	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.028110027 CET	443	49773	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.028655052 CET	443	49772	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.028745890 CET	49772	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.029529095 CET	443	49773	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.029608965 CET	49773	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.029653072 CET	49772	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.029689074 CET	49772	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.029726982 CET	49772	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.029752016 CET	443	49772	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.029807091 CET	49772	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.030065060 CET	49788	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.030097961 CET	443	49788	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.030181885 CET	49788	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.034018040 CET	443	49778	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.036704063 CET	49773	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.036741018 CET	49773	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.036834002 CET	443	49774	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.036838055 CET	443	49773	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.036843061 CET	49773	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.036890030 CET	49773	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.037210941 CET	49789	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.037237883 CET	443	49789	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.037286043 CET	49789	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.037751913 CET	49788	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.037775993 CET	443	49788	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.040621996 CET	49789	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.040637016 CET	443	49789	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.040829897 CET	49774	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.040844917 CET	443	49774	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.041661024 CET	49778	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.041673899 CET	443	49778	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.041728973 CET	443	49774	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.041781902 CET	49774	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.042027950 CET	443	49777	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.043101072 CET	443	49778	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.043160915 CET	49778	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.043498039 CET	49777	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.043512106 CET	443	49777	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.044895887 CET	49774	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.044924974 CET	443	49777	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.044929028 CET	49774	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.044971943 CET	49774	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.044979095 CET	49777	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.044981003 CET	443	49774	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.045033932 CET	49774	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.045142889 CET	49790	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.045176983 CET	443	49790	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.045243979 CET	49790	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.046142101 CET	49777	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.046156883 CET	49777	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.046190977 CET	49777	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.046240091 CET	443	49777	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.046288013 CET	49777	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.046370983 CET	49791	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.046381950 CET	443	49791	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.046444893 CET	49791	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.046606064 CET	49778	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.046627045 CET	49778	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.046638012 CET	49778	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.046699047 CET	443	49778	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.046744108 CET	49778	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.046775103 CET	49792	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.046869040 CET	443	49792	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.046935081 CET	49792	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.047066927 CET	49790	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.047094107 CET	443	49790	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.047213078 CET	49791	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.047224998 CET	443	49791	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.047496080 CET	49792	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.047533035 CET	443	49792	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.052016020 CET	443	49779	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.052334070 CET	49779	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.052345991 CET	443	49779	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.055397034 CET	443	49779	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.055454016 CET	49779	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.056067944 CET	49779	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.056081057 CET	49779	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.056119919 CET	49779	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.056144953 CET	443	49779	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.056185007 CET	49779	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.056330919 CET	49793	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.056348085 CET	443	49793	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.056408882 CET	49793	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.056791067 CET	49793	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.056803942 CET	443	49793	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.067805052 CET	443	49776	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.068032026 CET	49776	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.068043947 CET	443	49776	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.069458008 CET	443	49776	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.069525957 CET	49776	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.070148945 CET	49776	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.070230007 CET	443	49776	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.070236921 CET	49776	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.070358992 CET	49776	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.070368052 CET	443	49776	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.070383072 CET	49776	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.070409060 CET	49776	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.071137905 CET	49794	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.071170092 CET	443	49794	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.071235895 CET	49794	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.071717024 CET	49794	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.071748018 CET	443	49794	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.105928898 CET	443	49764	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:27.106107950 CET	443	49764	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:27.106161118 CET	49764	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:27.108844042 CET	49764	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:27.108864069 CET	443	49764	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:27.108874083 CET	49764	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:27.108912945 CET	49764	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:27.163255930 CET	443	49766	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:27.163368940 CET	443	49766	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:27.163412094 CET	49766	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:27.163722992 CET	49766	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:27.163734913 CET	443	49766	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:27.163744926 CET	49766	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:27.163778067 CET	49766	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:27.189908981 CET	443	49767	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:27.190041065 CET	443	49767	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:27.190083027 CET	49767	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:27.196069002 CET	49767	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:27.196084023 CET	443	49767	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:27.210618973 CET	443	49768	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:27.210799932 CET	443	49768	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:27.210882902 CET	49768	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:27.212117910 CET	49768	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:27.212131023 CET	443	49768	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:27.212160110 CET	49768	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:27.212187052 CET	49768	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:27.301068068 CET	443	49783	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.301356077 CET	49783	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.301373959 CET	443	49783	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.302238941 CET	443	49783	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.302301884 CET	49783	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.303360939 CET	49783	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.303416967 CET	443	49783	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.303431988 CET	49783	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.303548098 CET	443	49783	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.303548098 CET	49783	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.303566933 CET	443	49783	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.303616047 CET	49783	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.304028988 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.304052114 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.304127932 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.304429054 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.304455042 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.335412979 CET	443	49785	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.335639954 CET	49785	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.335659027 CET	443	49785	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.337080002 CET	443	49785	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.337145090 CET	49785	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.338119984 CET	49785	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.338206053 CET	443	49785	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.338227987 CET	49785	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.338407993 CET	443	49785	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.338455915 CET	49785	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.338673115 CET	49785	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.338692904 CET	443	49785	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.338718891 CET	49785	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.338748932 CET	49785	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.340972900 CET	49800	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.341079950 CET	443	49800	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.341166019 CET	49800	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.341607094 CET	49800	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.341645956 CET	443	49800	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.347117901 CET	443	49784	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.359106064 CET	49784	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.359128952 CET	443	49784	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.362651110 CET	443	49784	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.362720966 CET	49784	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.366717100 CET	49801	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.366739035 CET	443	49801	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.366800070 CET	49801	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.367100954 CET	49784	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.367114067 CET	49784	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.367221117 CET	49784	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.367285013 CET	443	49784	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.367337942 CET	49784	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.367615938 CET	49802	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.367660999 CET	443	49802	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.367728949 CET	49802	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.375706911 CET	49801	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.375724077 CET	443	49801	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.384788990 CET	49802	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.384834051 CET	443	49802	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.410304070 CET	49803	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.410326004 CET	443	49803	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.410382032 CET	49803	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.410953045 CET	49803	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.410965919 CET	443	49803	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.435112000 CET	443	49786	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.437011957 CET	49786	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.437021971 CET	443	49786	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.438427925 CET	443	49786	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.438488007 CET	49786	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.447212934 CET	49786	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.447294950 CET	443	49786	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.447523117 CET	49786	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.447542906 CET	443	49786	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.489603996 CET	49786	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.504884958 CET	443	49787	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.505295992 CET	49787	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.505305052 CET	443	49787	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.506747961 CET	443	49787	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.506814003 CET	49787	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.512686014 CET	49787	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.512763977 CET	443	49787	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.512881994 CET	49787	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.512888908 CET	443	49787	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.526695967 CET	443	49790	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.527064085 CET	49790	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.527123928 CET	443	49790	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.528255939 CET	443	49790	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.528320074 CET	49790	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.528728962 CET	49812	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.528808117 CET	443	49812	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.528878927 CET	49812	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.529335022 CET	49790	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.529403925 CET	443	49790	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.529892921 CET	49812	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.529913902 CET	443	49812	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.530400038 CET	443	49791	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.530858040 CET	49813	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.530924082 CET	443	49813	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.530991077 CET	49813	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.531025887 CET	49790	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.531043053 CET	443	49790	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.531482935 CET	49791	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.531493902 CET	443	49792	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.531495094 CET	443	49791	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.531908989 CET	49813	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.531941891 CET	443	49813	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.532386065 CET	49792	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.532407045 CET	443	49792	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.533978939 CET	443	49792	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.534040928 CET	49792	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.534290075 CET	49792	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.534394026 CET	443	49792	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.534401894 CET	49792	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.534421921 CET	49792	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.534471989 CET	443	49792	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.535168886 CET	443	49791	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.535233021 CET	49791	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.535985947 CET	49791	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.536071062 CET	443	49791	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.537064075 CET	49791	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.537070990 CET	443	49791	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.537075043 CET	443	49788	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.537090063 CET	49791	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.537101984 CET	443	49791	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.537372112 CET	49788	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.537385941 CET	443	49788	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.540913105 CET	443	49788	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.540980101 CET	49788	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.541239023 CET	49788	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.541415930 CET	443	49788	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.541419029 CET	49788	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.546232939 CET	443	49793	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.546612024 CET	49793	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.546643972 CET	443	49793	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.548069000 CET	443	49793	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.548127890 CET	49793	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.548414946 CET	49793	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.548491955 CET	443	49793	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.548789024 CET	49793	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.548798084 CET	443	49793	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.548850060 CET	49793	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.548881054 CET	443	49793	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.553617001 CET	49787	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.554111004 CET	443	49794	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.554373980 CET	49794	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.554394960 CET	443	49794	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.557250023 CET	443	49794	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.557316065 CET	49794	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.558012009 CET	49794	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.558099985 CET	443	49794	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.558422089 CET	49794	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.558440924 CET	443	49794	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.558618069 CET	49794	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.558660984 CET	443	49794	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.560662985 CET	443	49789	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.560899973 CET	49789	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.560915947 CET	443	49789	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.563672066 CET	49815	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:27.563683033 CET	443	49815	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:27.563745022 CET	49815	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:27.563997984 CET	49815	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:27.564012051 CET	443	49815	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:27.564429045 CET	443	49789	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.564491987 CET	49789	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.565102100 CET	49789	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.565282106 CET	443	49789	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.566142082 CET	49789	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.566149950 CET	443	49789	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.573839903 CET	49816	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:27.573875904 CET	443	49816	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:27.573951960 CET	49816	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:27.574184895 CET	49816	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:27.574212074 CET	443	49816	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:27.583333969 CET	443	49788	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.585621119 CET	49791	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.585623980 CET	49788	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.585650921 CET	443	49788	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.585685015 CET	49790	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.585697889 CET	49792	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.585715055 CET	443	49792	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.617628098 CET	49789	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.633646011 CET	49788	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.633763075 CET	49792	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.655172110 CET	443	49786	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.655335903 CET	443	49786	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.655385017 CET	49786	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.655395031 CET	443	49786	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.655437946 CET	443	49786	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.655473948 CET	49786	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.655483961 CET	443	49786	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.655499935 CET	443	49786	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.655538082 CET	49786	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.655544043 CET	443	49786	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.655576944 CET	443	49786	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.655721903 CET	49786	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.655729055 CET	443	49786	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.659713030 CET	443	49786	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.659761906 CET	49786	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.659770012 CET	443	49786	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.659816980 CET	443	49786	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.659868956 CET	49786	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.663499117 CET	49786	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.663511992 CET	443	49786	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.691617012 CET	443	49791	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.691919088 CET	443	49791	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.691972017 CET	49791	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.693322897 CET	443	49792	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.693603039 CET	443	49792	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.693790913 CET	49792	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.695555925 CET	49791	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.695566893 CET	443	49791	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.696896076 CET	49792	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.696938992 CET	443	49792	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.717192888 CET	443	49794	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.717482090 CET	443	49794	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.717540979 CET	49794	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.719067097 CET	443	49790	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.719139099 CET	443	49790	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.719165087 CET	443	49790	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.719188929 CET	49790	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.719198942 CET	443	49790	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.719219923 CET	443	49790	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.719244003 CET	49790	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.719259977 CET	443	49790	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.719278097 CET	443	49790	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.719301939 CET	49790	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.719310045 CET	443	49790	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.719347954 CET	49790	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.719786882 CET	443	49790	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.719980001 CET	443	49790	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.720021009 CET	49790	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.720307112 CET	443	49793	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.720415115 CET	49794	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.720432043 CET	443	49794	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.720449924 CET	443	49793	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.720601082 CET	49793	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.724466085 CET	49793	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.724487066 CET	443	49793	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.725996017 CET	49790	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.726022005 CET	443	49790	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.736820936 CET	443	49787	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.737026930 CET	443	49787	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.737077951 CET	49787	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.737090111 CET	443	49787	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.737204075 CET	443	49787	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.737298965 CET	443	49787	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.737350941 CET	49787	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.737382889 CET	443	49787	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.737426996 CET	49787	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.737435102 CET	443	49787	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.737552881 CET	443	49787	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.737607956 CET	49787	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.737613916 CET	443	49787	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.737757921 CET	443	49787	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.737804890 CET	49787	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.743671894 CET	49787	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.743685961 CET	443	49787	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.759048939 CET	443	49788	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.759273052 CET	443	49788	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.759324074 CET	49788	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.759346008 CET	443	49788	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.759485006 CET	443	49788	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.759532928 CET	49788	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.759540081 CET	443	49788	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.759653091 CET	443	49788	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.759696007 CET	49788	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.759702921 CET	443	49788	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.760078907 CET	443	49788	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.760123968 CET	49788	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.760133028 CET	443	49788	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.760341883 CET	443	49788	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.760387897 CET	49788	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.760778904 CET	49788	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.760795116 CET	443	49788	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.794414997 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.794619083 CET	443	49789	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.794687033 CET	443	49789	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.794722080 CET	443	49789	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.794744968 CET	49789	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.794758081 CET	443	49789	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.794789076 CET	443	49789	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.794827938 CET	49789	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.794831991 CET	443	49789	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.794836998 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.794847012 CET	443	49789	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.794874907 CET	49789	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.794888973 CET	443	49789	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.794898033 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.794924974 CET	49789	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.794975996 CET	443	49789	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.795058966 CET	443	49789	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.795094967 CET	49789	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.796696901 CET	49789	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.796711922 CET	443	49789	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.797758102 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.797832012 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.798270941 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.798420906 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.798464060 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.829114914 CET	443	49800	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.829375029 CET	49800	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.829402924 CET	443	49800	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.833293915 CET	443	49800	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.833391905 CET	49819	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.833425999 CET	49800	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.833486080 CET	443	49819	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.833565950 CET	49819	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.834137917 CET	49820	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.834163904 CET	443	49820	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.834216118 CET	49820	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.834572077 CET	49821	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.834618092 CET	443	49821	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.834680080 CET	49821	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.834959030 CET	49822	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.834970951 CET	443	49822	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.835020065 CET	49822	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.839353085 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.839488983 CET	49823	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.839534998 CET	443	49823	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.839678049 CET	49823	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.839745045 CET	49824	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.839776039 CET	443	49824	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.839833975 CET	49824	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.840035915 CET	49800	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.840101004 CET	443	49800	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.840662003 CET	49819	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.840698004 CET	443	49819	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.841639042 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.841658115 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.841927052 CET	49820	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.841943979 CET	443	49820	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.842374086 CET	49821	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.842398882 CET	443	49821	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.843689919 CET	49822	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.843703985 CET	443	49822	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.844417095 CET	49823	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.844434023 CET	443	49823	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.844667912 CET	49824	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.844687939 CET	443	49824	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.845756054 CET	49800	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.845771074 CET	443	49800	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.847909927 CET	49826	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.847944975 CET	443	49826	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.848018885 CET	49826	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.848709106 CET	49827	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.848731041 CET	443	49827	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.848786116 CET	49827	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.849528074 CET	49826	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.849550009 CET	443	49826	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.852006912 CET	49827	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.852020025 CET	443	49827	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.864485025 CET	443	49801	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.864803076 CET	49801	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.864815950 CET	443	49801	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.866230965 CET	443	49801	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.866298914 CET	49801	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.866877079 CET	49801	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.866890907 CET	49801	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.866935968 CET	49801	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.866952896 CET	443	49801	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.867002010 CET	49801	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.867317915 CET	49828	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.867331028 CET	443	49828	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.867388010 CET	49828	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.867872000 CET	49828	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.867885113 CET	443	49828	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.874581099 CET	443	49802	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.875330925 CET	49802	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.875353098 CET	443	49802	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.876821041 CET	443	49802	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.876887083 CET	49802	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.877429962 CET	49802	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.877511978 CET	443	49802	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.878720045 CET	49802	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.878727913 CET	443	49802	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.889626026 CET	49800	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.889744043 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.895505905 CET	443	49803	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.895803928 CET	49803	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.895818949 CET	443	49803	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.897248983 CET	443	49803	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.897315979 CET	49803	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.898067951 CET	49803	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.898091078 CET	49803	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.898143053 CET	49803	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.898145914 CET	443	49803	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.898200035 CET	49803	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.898519039 CET	49829	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.898601055 CET	443	49829	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.898672104 CET	49829	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.899844885 CET	49829	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:27.899893045 CET	443	49829	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:27.921633959 CET	49802	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.988970041 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.989161015 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.989248991 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.989332914 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.989415884 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.989500046 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.989569902 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.989582062 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.989636898 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.989686966 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.990050077 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.990065098 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.993557930 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.993638039 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.993706942 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.993729115 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:27.994122982 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:27.999188900 CET	443	49813	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.000343084 CET	443	49800	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.000397921 CET	443	49800	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.000423908 CET	443	49800	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.000452042 CET	49800	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.000466108 CET	443	49800	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.000497103 CET	443	49800	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.000854969 CET	443	49800	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.000876904 CET	443	49800	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.000886917 CET	49800	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.000895023 CET	443	49800	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.000919104 CET	49800	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.000952005 CET	443	49800	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.001542091 CET	49800	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.003907919 CET	49813	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.003967047 CET	443	49813	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.007531881 CET	443	49813	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.007780075 CET	49813	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.008610010 CET	49813	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.008642912 CET	49813	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.008686066 CET	49813	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.008795023 CET	443	49813	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.008881092 CET	49813	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.009186983 CET	49830	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.009228945 CET	443	49830	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.009525061 CET	49830	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.011622906 CET	49830	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.011637926 CET	443	49830	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.020452976 CET	49800	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.020464897 CET	443	49800	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.048139095 CET	443	49812	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.048547983 CET	49812	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.048561096 CET	443	49812	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.051847935 CET	443	49802	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.051987886 CET	443	49802	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.052103996 CET	443	49812	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.052197933 CET	49802	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.052197933 CET	49812	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.052678108 CET	49812	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.052678108 CET	49812	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.052736998 CET	49812	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.052856922 CET	443	49812	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.052934885 CET	49812	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.053060055 CET	49831	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.053097963 CET	443	49831	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.053412914 CET	49831	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.053863049 CET	49831	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.053878069 CET	443	49831	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.054742098 CET	49802	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.054752111 CET	443	49802	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.075577974 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.075773954 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.075855017 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.075928926 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.076004028 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.076023102 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.076095104 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.076137066 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.076181889 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.076184988 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.076210022 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.076344013 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.076514959 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.076531887 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.076654911 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.076697111 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.076710939 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.076853037 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.076860905 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.076885939 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.076941967 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.077397108 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.077528000 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.077601910 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.077625036 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.077637911 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.077711105 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.077771902 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.077785015 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.077917099 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.078269958 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.119504929 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.120465994 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.120532990 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.161848068 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.161902905 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.161964893 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.162065029 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.162105083 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.162123919 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.162190914 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.162208080 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.162296057 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.162508011 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.162561893 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.162585974 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.162611008 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.162630081 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.162735939 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.162750006 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.163415909 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.163516045 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.163563013 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.163589001 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.163625956 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.164134979 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.164144993 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.164172888 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.164208889 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.164267063 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.164347887 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.164388895 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.164405107 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.164432049 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.165024042 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.165105104 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.165157080 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.165174007 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.165210962 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.165930033 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.165998936 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.166016102 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.166735888 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.203212023 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.203377008 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.205866098 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.206151009 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.212666988 CET	443	49816	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:28.216789961 CET	443	49815	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:28.232229948 CET	49815	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:28.232256889 CET	443	49815	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:28.232518911 CET	49816	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:28.232537031 CET	443	49816	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:28.232763052 CET	443	49815	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:28.233076096 CET	443	49816	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:28.235321045 CET	49815	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:28.235402107 CET	443	49815	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:28.235893011 CET	49816	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:28.235985041 CET	443	49816	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:28.236798048 CET	49815	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:28.236802101 CET	49816	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:28.236831903 CET	443	49816	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:28.237466097 CET	49678	443	192.168.2.16	20.189.173.10
Jan 15, 2025 03:49:28.248934984 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.249028921 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.249072075 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.249079943 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.249111891 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.249432087 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.249658108 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.249700069 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.249706984 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.249742985 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.249829054 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.250019073 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.250066042 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.250066042 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.250075102 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.250196934 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.250705004 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.250725031 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.250730991 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.250763893 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.250880003 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.251055956 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.251091003 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.252827883 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.279369116 CET	443	49815	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:28.326231956 CET	443	49822	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.329209089 CET	443	49820	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.332422972 CET	49820	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.332432032 CET	443	49820	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.332694054 CET	49822	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.332701921 CET	443	49822	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.333503008 CET	443	49822	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.333659887 CET	49822	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.333849907 CET	49822	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.333903074 CET	443	49822	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.333903074 CET	49822	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.333903074 CET	49822	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.333941936 CET	443	49820	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.334022045 CET	49822	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.334022045 CET	49820	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.334256887 CET	49832	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.334310055 CET	443	49832	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.334383965 CET	49820	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.334383965 CET	49820	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.334438086 CET	49832	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.334439039 CET	49820	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.334475040 CET	443	49820	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.334539890 CET	49833	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.334558964 CET	49820	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.334606886 CET	443	49833	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.334733009 CET	49833	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.334798098 CET	49832	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.334815025 CET	443	49832	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.335180044 CET	49833	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.335210085 CET	443	49833	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.337769985 CET	443	49826	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.342741013 CET	49826	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.342772007 CET	443	49826	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.344194889 CET	443	49826	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.344302893 CET	49826	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.344480038 CET	443	49824	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.344703913 CET	49826	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.344703913 CET	49826	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.344785929 CET	443	49826	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.344825029 CET	49826	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.344927073 CET	49826	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.345098019 CET	49834	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.345125914 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.345201015 CET	49834	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.345541000 CET	49834	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.345541954 CET	49824	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.345551014 CET	443	49824	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.345555067 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.347119093 CET	443	49824	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.347529888 CET	49824	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.347742081 CET	49824	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.347742081 CET	49824	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.347839117 CET	443	49824	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.347877979 CET	49824	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.347950935 CET	49824	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.348030090 CET	49835	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.348056078 CET	443	49835	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.348231077 CET	49835	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.348436117 CET	49835	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.348450899 CET	443	49835	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.353686094 CET	443	49828	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.354475021 CET	443	49819	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.354885101 CET	49819	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.354904890 CET	443	49819	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.355186939 CET	49828	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.355230093 CET	443	49828	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.356682062 CET	443	49819	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.356764078 CET	443	49828	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.356806993 CET	49819	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.356956959 CET	49828	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.357059956 CET	49819	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.357060909 CET	49819	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.357136011 CET	49819	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.357248068 CET	443	49819	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.357285023 CET	443	49823	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.357309103 CET	49836	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.357319117 CET	443	49836	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.357352018 CET	49819	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.357439995 CET	49836	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.357539892 CET	49828	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.357657909 CET	443	49828	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.357696056 CET	49836	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.357711077 CET	443	49836	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.357917070 CET	49823	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.357920885 CET	49828	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.357940912 CET	443	49828	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.357942104 CET	443	49823	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.357980967 CET	49828	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.359463930 CET	443	49823	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.359787941 CET	49823	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.360135078 CET	49823	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.360152006 CET	49823	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.360152006 CET	49823	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.360224009 CET	443	49823	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.360403061 CET	49823	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.360699892 CET	49837	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.360713005 CET	443	49837	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.360790014 CET	49837	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.361030102 CET	49837	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.361042023 CET	443	49837	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.361198902 CET	443	49827	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.362190008 CET	443	49821	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.362416983 CET	49827	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.362432003 CET	443	49827	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.362637043 CET	49821	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.362652063 CET	443	49821	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.363914013 CET	443	49827	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.364144087 CET	49827	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.364578009 CET	49827	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.364639044 CET	49827	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.364639044 CET	49827	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.364665031 CET	443	49827	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.364886999 CET	49838	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.364892960 CET	443	49827	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.364937067 CET	49827	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.364972115 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.365009069 CET	49827	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.365344048 CET	49838	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.365942955 CET	49799	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.365942955 CET	49838	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.365974903 CET	443	49799	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.366013050 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.366132021 CET	443	49821	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.366206884 CET	49821	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.370294094 CET	49821	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.370294094 CET	49821	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.370376110 CET	443	49821	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.370409966 CET	49821	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.370488882 CET	49821	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.370676041 CET	49839	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.370697021 CET	443	49839	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.370769024 CET	49839	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.374665976 CET	49839	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.374680042 CET	443	49839	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.397916079 CET	443	49829	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.398660898 CET	49828	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.398670912 CET	443	49828	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.400172949 CET	49829	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.400202036 CET	443	49829	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.400684118 CET	443	49829	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.403028011 CET	49829	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.403110981 CET	443	49829	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.403320074 CET	49829	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.435463905 CET	443	49816	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:28.435638905 CET	443	49816	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:28.436685085 CET	49816	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:28.443149090 CET	49816	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:28.443161011 CET	443	49816	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:28.451332092 CET	443	49829	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.490566969 CET	443	49815	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:28.490772009 CET	443	49815	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:28.490879059 CET	49815	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:28.491245031 CET	49843	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:28.491302013 CET	443	49843	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:28.491476059 CET	49843	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:28.491921902 CET	443	49830	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.491955042 CET	49843	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:28.491990089 CET	443	49843	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:28.492501974 CET	49830	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.492516994 CET	443	49830	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.492813110 CET	443	49830	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.493405104 CET	49830	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.493463039 CET	443	49830	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.494205952 CET	49830	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.502604961 CET	49815	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:28.502619028 CET	443	49815	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:28.529211998 CET	443	49831	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.529532909 CET	49831	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.529562950 CET	443	49831	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.531013966 CET	443	49828	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.531135082 CET	443	49828	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.531234980 CET	49828	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.531461954 CET	443	49831	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.531660080 CET	49831	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.532216072 CET	49828	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.532227993 CET	443	49828	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.532249928 CET	49845	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.532278061 CET	443	49845	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.532345057 CET	49845	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.532962084 CET	49831	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.533042908 CET	443	49831	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.533664942 CET	49845	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.533679008 CET	443	49845	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.534013987 CET	49831	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.534013987 CET	49831	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.534024000 CET	443	49831	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.535343885 CET	443	49830	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.538803101 CET	49846	443	192.168.2.16	142.250.185.228
Jan 15, 2025 03:49:28.538840055 CET	443	49846	142.250.185.228	192.168.2.16
Jan 15, 2025 03:49:28.541645050 CET	49678	443	192.168.2.16	20.189.173.10
Jan 15, 2025 03:49:28.541917086 CET	49846	443	192.168.2.16	142.250.185.228
Jan 15, 2025 03:49:28.543356895 CET	49846	443	192.168.2.16	142.250.185.228
Jan 15, 2025 03:49:28.543379068 CET	443	49846	142.250.185.228	192.168.2.16
Jan 15, 2025 03:49:28.573643923 CET	49831	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.573657990 CET	443	49831	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.620450974 CET	443	49829	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.620651007 CET	443	49829	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.620749950 CET	443	49829	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.620795965 CET	49829	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.620806932 CET	443	49829	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.620873928 CET	49829	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.620882034 CET	443	49829	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.620996952 CET	443	49829	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.621085882 CET	443	49829	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.621103048 CET	49829	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.621109009 CET	443	49829	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.621175051 CET	49829	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.621180058 CET	443	49829	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.621352911 CET	443	49829	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.621464968 CET	49829	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.621972084 CET	49829	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.621984005 CET	443	49829	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.684850931 CET	49849	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.684863091 CET	49850	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.684876919 CET	443	49849	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.684912920 CET	443	49850	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.684948921 CET	49851	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.684957027 CET	443	49851	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.684978962 CET	49849	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.685007095 CET	49850	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.685056925 CET	49851	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.685252905 CET	49852	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.685276031 CET	443	49852	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.685319901 CET	49852	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.685430050 CET	49851	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.685440063 CET	443	49851	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.685736895 CET	49850	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.685750961 CET	443	49850	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.685864925 CET	49849	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.685873032 CET	443	49849	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.686105013 CET	49852	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.686119080 CET	443	49852	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.690910101 CET	443	49831	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.691028118 CET	443	49831	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.691106081 CET	49831	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.691777945 CET	49831	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.691786051 CET	443	49831	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.692181110 CET	49853	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.692213058 CET	443	49853	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.693764925 CET	49853	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.694011927 CET	49853	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.694027901 CET	443	49853	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.707753897 CET	443	49830	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.707827091 CET	443	49830	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.707861900 CET	443	49830	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.707894087 CET	443	49830	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.707907915 CET	49830	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.707940102 CET	443	49830	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.707978964 CET	49830	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.707990885 CET	443	49830	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.708020926 CET	443	49830	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.708051920 CET	49830	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.708065033 CET	443	49830	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.708547115 CET	49830	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.712480068 CET	443	49830	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.712558031 CET	443	49830	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.713687897 CET	49830	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.713908911 CET	49830	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.713928938 CET	443	49830	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.776067972 CET	49854	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.776093006 CET	443	49854	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.776308060 CET	49854	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.776690006 CET	49854	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.776701927 CET	443	49854	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.780438900 CET	49855	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.780482054 CET	443	49855	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.780584097 CET	49855	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.782247066 CET	49855	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.782263994 CET	443	49855	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.822309017 CET	443	49832	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.822817087 CET	49832	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.822879076 CET	443	49832	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.823766947 CET	443	49832	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.823923111 CET	49832	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.824126005 CET	49832	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.824192047 CET	443	49832	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.824279070 CET	49832	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.824279070 CET	49832	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.824316978 CET	443	49832	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.834923983 CET	443	49835	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.835199118 CET	49835	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.835206985 CET	443	49835	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.835711002 CET	443	49835	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.836040020 CET	49835	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.836105108 CET	443	49835	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.836355925 CET	49835	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.837888956 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.838190079 CET	443	49833	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.838203907 CET	49834	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.838232040 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.838640928 CET	49833	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.838656902 CET	443	49833	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.839103937 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.839194059 CET	49834	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.839715958 CET	49834	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.839715958 CET	49834	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.839747906 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.839811087 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.842314005 CET	443	49833	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.842402935 CET	49833	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.842720032 CET	49863	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.842751026 CET	443	49863	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.842910051 CET	49863	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.842982054 CET	49833	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.843183994 CET	443	49833	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.843969107 CET	49863	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.843988895 CET	443	49863	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.844434977 CET	49833	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.844434977 CET	49833	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.844446898 CET	443	49833	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.844502926 CET	443	49833	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.853264093 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.853387117 CET	443	49836	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.853558064 CET	49838	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.853573084 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.853974104 CET	49836	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.853982925 CET	443	49836	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.855472088 CET	443	49836	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.855719090 CET	49836	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.855952024 CET	49836	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.855988026 CET	49836	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.855988026 CET	49836	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.855988026 CET	49836	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.855995893 CET	443	49836	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.856043100 CET	443	49836	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.857202053 CET	443	49839	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.857208014 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.857355118 CET	49838	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.857489109 CET	49839	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.857496977 CET	443	49839	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.858011961 CET	49838	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.858097076 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.858131886 CET	49838	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.858640909 CET	443	49839	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.859675884 CET	49839	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.859850883 CET	443	49839	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.860152960 CET	49839	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.860152960 CET	49839	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.860208035 CET	443	49839	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.860852003 CET	49865	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.860868931 CET	443	49865	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.861181021 CET	49865	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.861181021 CET	49865	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.861207962 CET	443	49865	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.863279104 CET	443	49837	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.863523006 CET	49837	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.863584042 CET	443	49837	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.864814997 CET	443	49837	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.865537882 CET	49837	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.865641117 CET	443	49837	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.865665913 CET	49837	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.875885963 CET	49832	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.879359007 CET	443	49835	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.891652107 CET	49833	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.903328896 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.906626940 CET	49834	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.906640053 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.907624960 CET	49838	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.907639027 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.907660007 CET	49836	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.907670975 CET	49837	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.907675982 CET	443	49836	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.907689095 CET	443	49837	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:28.955632925 CET	49834	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.955651999 CET	49838	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:28.955703020 CET	49836	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.999030113 CET	443	49832	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.999111891 CET	443	49832	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:28.999300003 CET	49832	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.999736071 CET	49832	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:28.999773979 CET	443	49832	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.000117064 CET	49869	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.000205994 CET	443	49869	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.000303030 CET	49869	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.001605034 CET	49869	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.001642942 CET	443	49869	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.013936043 CET	443	49835	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.014244080 CET	443	49835	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.014343977 CET	49835	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.015665054 CET	49835	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.015687943 CET	443	49835	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.016138077 CET	443	49833	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.016444921 CET	443	49833	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.016557932 CET	49833	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.016927004 CET	443	49836	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.017215967 CET	443	49836	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.017390966 CET	49836	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.017607927 CET	49833	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.017652035 CET	443	49833	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.018084049 CET	49870	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.018167019 CET	443	49870	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.018248081 CET	49870	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.019119024 CET	49836	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.019138098 CET	443	49836	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.019429922 CET	49871	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.019474983 CET	443	49871	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.019534111 CET	49871	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.019602060 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.019807100 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.019860983 CET	49834	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.019874096 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.019882917 CET	443	49839	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.019901991 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.019953966 CET	49834	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.020028114 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.020123959 CET	443	49839	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.020169020 CET	49839	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.020184040 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.020224094 CET	49834	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.020236969 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.020301104 CET	49870	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.020337105 CET	443	49870	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.020349979 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.020395041 CET	49834	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.020401955 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.021176100 CET	49871	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.021210909 CET	443	49871	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.022232056 CET	49839	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.022248983 CET	443	49839	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.022526026 CET	49872	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.022547007 CET	443	49872	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.022643089 CET	49872	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.023802042 CET	49872	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.023819923 CET	443	49872	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.024682999 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.024756908 CET	49834	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.024765015 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.031661987 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.031853914 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.031908035 CET	49838	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.031918049 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.032007933 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.032063007 CET	49838	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.032069921 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.032155991 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.032368898 CET	49838	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.032376051 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.035932064 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.036021948 CET	49838	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.036021948 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.036048889 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.036200047 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.036421061 CET	49838	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.036427975 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.036712885 CET	49838	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.038832903 CET	443	49837	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.039170980 CET	443	49837	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.039405107 CET	49837	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.041903019 CET	49837	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.041930914 CET	443	49837	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.041975021 CET	443	49845	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.042730093 CET	49845	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.042741060 CET	443	49845	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.043777943 CET	443	49845	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.043879032 CET	49845	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.044540882 CET	49845	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.044540882 CET	49845	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.044600010 CET	443	49845	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.044666052 CET	49845	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.044666052 CET	49845	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.044675112 CET	443	49845	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.044734955 CET	49845	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.045007944 CET	49873	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.045032024 CET	443	49873	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.045084953 CET	49873	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.045687914 CET	49873	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.045705080 CET	443	49873	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.067643881 CET	49834	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.067673922 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.106729031 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.106770039 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.106837988 CET	49834	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.106868982 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.106914997 CET	49834	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.107016087 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.107064962 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.107104063 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.107141972 CET	49834	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.107148886 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.107352972 CET	49834	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.107810020 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.108248949 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.108283043 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.108289003 CET	49834	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.108295918 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.108325958 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.108335018 CET	49834	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.108340979 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.108390093 CET	49834	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.108395100 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.109050989 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.109090090 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.109111071 CET	49834	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.109117031 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.109164953 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.109204054 CET	49834	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.109210014 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.109410048 CET	49834	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.109822989 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.118875980 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.119067907 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.119158030 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.119160891 CET	49838	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.119189024 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.119436979 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.119493008 CET	49838	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.119513035 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.119595051 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.119647980 CET	49838	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.119659901 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.119715929 CET	49838	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.119726896 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.119817019 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.119884014 CET	49838	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.119894981 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.119978905 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.120052099 CET	49838	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.120064020 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.120354891 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.120407104 CET	49838	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.120421886 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.120496035 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.120636940 CET	49838	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.120649099 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.120836973 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.120892048 CET	49838	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.120903015 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.126157999 CET	443	49843	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:29.126530886 CET	49843	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:29.126548052 CET	443	49843	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:29.127064943 CET	443	49843	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:29.127468109 CET	49843	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:29.127546072 CET	443	49843	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:29.128329992 CET	49874	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.128382921 CET	49843	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:29.128420115 CET	443	49843	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:29.128422976 CET	443	49874	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.128521919 CET	49874	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.128848076 CET	49874	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.128882885 CET	443	49874	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.142330885 CET	49875	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.142362118 CET	443	49875	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.142657042 CET	49875	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.143009901 CET	49875	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.143024921 CET	443	49875	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.147670984 CET	49678	443	192.168.2.16	20.189.173.10
Jan 15, 2025 03:49:29.148236036 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.148293972 CET	49834	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.148318052 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.148427010 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.148475885 CET	49834	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.148483992 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.157183886 CET	443	49849	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.157396078 CET	49849	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.157411098 CET	443	49849	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.158855915 CET	443	49849	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.158938885 CET	49849	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.159204960 CET	49849	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.159219980 CET	49849	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.159260035 CET	49849	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.159286022 CET	443	49849	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.159374952 CET	49849	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.159554958 CET	49876	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.159584045 CET	443	49876	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.159667015 CET	49876	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.159840107 CET	49876	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.159864902 CET	443	49876	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.160285950 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.160352945 CET	49838	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.160372972 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.160516977 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.160583019 CET	49838	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.160593987 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.177839041 CET	443	49852	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.178180933 CET	49852	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.178214073 CET	443	49852	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.179527044 CET	443	49852	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.179584026 CET	49852	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.180474997 CET	49852	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.180497885 CET	49852	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.180551052 CET	443	49852	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.180738926 CET	443	49852	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.180917025 CET	49852	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.180936098 CET	443	49852	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.180948019 CET	49852	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.180975914 CET	49852	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.181837082 CET	49877	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.181931019 CET	443	49877	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.182207108 CET	49877	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.182498932 CET	49877	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.182535887 CET	443	49877	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.182557106 CET	443	49850	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.182938099 CET	49850	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.182960033 CET	443	49850	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.185762882 CET	443	49853	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.186058044 CET	49853	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.186088085 CET	443	49853	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.186217070 CET	443	49850	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.186285019 CET	49850	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.186769962 CET	49850	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.186820984 CET	49850	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.186820984 CET	49850	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.186850071 CET	443	49850	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.186908007 CET	49850	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.187145948 CET	49878	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.187185049 CET	443	49878	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.187272072 CET	49878	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.187556028 CET	443	49853	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.187563896 CET	49878	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.187582970 CET	443	49878	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.187658072 CET	49853	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.188011885 CET	49853	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.188041925 CET	49853	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.188067913 CET	49853	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.188101053 CET	443	49853	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.188285112 CET	49879	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.188313961 CET	443	49879	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.188328028 CET	49853	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.188374996 CET	49879	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.188783884 CET	49879	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.188798904 CET	443	49879	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.190941095 CET	443	49846	142.250.185.228	192.168.2.16
Jan 15, 2025 03:49:29.194495916 CET	49834	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.194520950 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.194576979 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.194612026 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.194639921 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.194678068 CET	49834	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.194693089 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.194706917 CET	49834	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.194736004 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.194741964 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.194772005 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.194780111 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.194785118 CET	49834	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.194801092 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.194818974 CET	49834	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.194833994 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.194874048 CET	49834	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.197382927 CET	443	49851	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.202486992 CET	49846	443	192.168.2.16	142.250.185.228
Jan 15, 2025 03:49:29.202502966 CET	443	49846	142.250.185.228	192.168.2.16
Jan 15, 2025 03:49:29.204147100 CET	443	49846	142.250.185.228	192.168.2.16
Jan 15, 2025 03:49:29.204215050 CET	49846	443	192.168.2.16	142.250.185.228
Jan 15, 2025 03:49:29.205840111 CET	49851	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.205853939 CET	443	49851	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.206232071 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.206267118 CET	49846	443	192.168.2.16	142.250.185.228
Jan 15, 2025 03:49:29.206273079 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.206293106 CET	49838	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.206315041 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.206358910 CET	443	49846	142.250.185.228	192.168.2.16
Jan 15, 2025 03:49:29.206367970 CET	49838	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.206381083 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.206397057 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.206414938 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.206451893 CET	49838	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.206576109 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.206628084 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.206634045 CET	49838	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.206638098 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.206656933 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.206676960 CET	49838	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.206728935 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.206778049 CET	49838	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.206785917 CET	49846	443	192.168.2.16	142.250.185.228
Jan 15, 2025 03:49:29.206796885 CET	443	49846	142.250.185.228	192.168.2.16
Jan 15, 2025 03:49:29.209409952 CET	443	49851	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.209475994 CET	49851	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.210748911 CET	49851	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.210762978 CET	49851	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.210834026 CET	49851	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.210923910 CET	443	49851	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.211095095 CET	49851	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.211107016 CET	49880	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.211142063 CET	443	49880	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.211308956 CET	49880	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.211514950 CET	49880	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.211527109 CET	443	49880	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.213116884 CET	49834	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.213139057 CET	443	49834	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.215879917 CET	49838	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.215908051 CET	443	49838	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.257651091 CET	49846	443	192.168.2.16	142.250.185.228
Jan 15, 2025 03:49:29.266623020 CET	443	49854	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.266967058 CET	49854	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.266982079 CET	443	49854	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.268405914 CET	443	49855	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.268893957 CET	443	49854	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.269011021 CET	49854	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.269048929 CET	49855	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.269063950 CET	443	49855	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.269478083 CET	49854	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.269491911 CET	49854	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.269553900 CET	443	49854	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.269583941 CET	49854	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.269623995 CET	49854	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.269915104 CET	49881	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.269946098 CET	443	49855	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.269958019 CET	443	49881	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.270015955 CET	49855	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.270025015 CET	49881	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.270272970 CET	49855	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.270289898 CET	49855	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.270339012 CET	443	49855	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.270339966 CET	49855	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.270387888 CET	49855	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.270523071 CET	49882	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.270545006 CET	443	49882	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.270634890 CET	49882	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.270986080 CET	49881	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.271003962 CET	443	49881	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.271241903 CET	49882	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.271255016 CET	443	49882	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.335463047 CET	49883	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.335494995 CET	443	49883	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.335566998 CET	49883	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.335639954 CET	49884	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.335675001 CET	443	49884	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.335736990 CET	49884	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.336015940 CET	443	49843	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:29.336026907 CET	49885	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.336071968 CET	443	49885	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.336102009 CET	443	49843	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:29.336142063 CET	49885	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.336150885 CET	49843	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:29.336474895 CET	49886	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.336483955 CET	443	49886	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.336622000 CET	49886	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.336787939 CET	49883	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.336801052 CET	443	49883	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.336957932 CET	49884	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.336976051 CET	443	49884	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.337321997 CET	49885	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.337359905 CET	443	49885	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.337570906 CET	49886	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.337584019 CET	443	49886	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.342734098 CET	443	49863	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.343065023 CET	49863	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.343077898 CET	443	49863	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.345896006 CET	443	49863	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.345968008 CET	49863	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.346728086 CET	49863	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.346741915 CET	49863	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.346834898 CET	443	49863	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.347043037 CET	49863	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.347043037 CET	49863	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.347054005 CET	443	49863	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.347103119 CET	49863	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.347459078 CET	49887	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.347484112 CET	443	49887	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.347985029 CET	49887	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.351454020 CET	49887	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.351464987 CET	443	49887	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.359217882 CET	443	49865	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.359456062 CET	49865	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.359478951 CET	443	49865	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.360595942 CET	49888	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.360605955 CET	443	49888	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.360742092 CET	49888	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.361011982 CET	49843	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:29.361047983 CET	443	49843	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:29.362417936 CET	49888	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.362427950 CET	443	49888	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.362991095 CET	443	49865	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.363063097 CET	49865	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.363648891 CET	49865	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.363770008 CET	49865	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.363820076 CET	443	49865	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.363826036 CET	49865	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.363897085 CET	49865	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.364139080 CET	49889	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.364164114 CET	443	49889	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.364263058 CET	49889	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.366523027 CET	49889	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.366535902 CET	443	49889	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.369713068 CET	49673	443	192.168.2.16	204.79.197.203
Jan 15, 2025 03:49:29.384794950 CET	49892	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.384844065 CET	443	49892	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.385153055 CET	49892	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.385432005 CET	49892	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.385446072 CET	443	49892	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.398227930 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:29.398278952 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:29.398642063 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:29.399136066 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:29.399168015 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:29.477441072 CET	443	49846	142.250.185.228	192.168.2.16
Jan 15, 2025 03:49:29.477521896 CET	443	49846	142.250.185.228	192.168.2.16
Jan 15, 2025 03:49:29.477829933 CET	49846	443	192.168.2.16	142.250.185.228
Jan 15, 2025 03:49:29.480657101 CET	49846	443	192.168.2.16	142.250.185.228
Jan 15, 2025 03:49:29.480674028 CET	443	49846	142.250.185.228	192.168.2.16
Jan 15, 2025 03:49:29.483753920 CET	49896	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:29.483779907 CET	443	49896	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:29.483978033 CET	49896	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:29.484232903 CET	49896	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:29.484249115 CET	443	49896	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:29.487629890 CET	443	49870	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.487889051 CET	49870	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.487911940 CET	443	49870	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.488480091 CET	443	49869	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.488521099 CET	443	49871	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.488790035 CET	49871	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.488827944 CET	443	49871	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.489094973 CET	49869	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.489113092 CET	443	49869	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.489387989 CET	443	49870	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.489481926 CET	49870	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.489690065 CET	443	49871	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.489752054 CET	49871	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.489764929 CET	49870	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.489784002 CET	49870	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.489820004 CET	49870	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.489852905 CET	443	49870	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.489936113 CET	49870	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.489985943 CET	443	49869	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.490041971 CET	49869	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.490206957 CET	49897	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.490221024 CET	443	49897	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.490341902 CET	49897	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.490978003 CET	49871	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.491010904 CET	49871	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.491045952 CET	443	49871	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.491061926 CET	49871	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.491107941 CET	49871	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.491401911 CET	49898	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.491461992 CET	443	49898	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.491537094 CET	49898	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.492429018 CET	49869	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.492522001 CET	443	49869	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.492604971 CET	49869	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.492619038 CET	443	49869	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.492763996 CET	443	49869	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.492788076 CET	49869	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.492804050 CET	443	49869	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.492831945 CET	49869	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.493094921 CET	49899	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.493103027 CET	443	49899	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.493218899 CET	49899	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.493305922 CET	49897	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.493319035 CET	443	49897	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.493556976 CET	49898	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.493587971 CET	443	49898	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.493695974 CET	49899	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.493710041 CET	443	49899	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.542669058 CET	443	49872	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.543152094 CET	49872	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.543193102 CET	443	49872	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.546405077 CET	443	49872	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.546504974 CET	49872	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.547013998 CET	49872	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.547014952 CET	49872	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.547125101 CET	49872	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.547127008 CET	443	49872	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.547224045 CET	49872	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.547518015 CET	49901	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.547553062 CET	443	49901	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.547856092 CET	49901	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.548096895 CET	49901	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.548114061 CET	443	49901	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.567544937 CET	443	49873	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.567874908 CET	49873	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.567888975 CET	443	49873	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.569300890 CET	443	49873	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.569379091 CET	49873	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.569717884 CET	49873	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.569785118 CET	443	49873	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.570050001 CET	49873	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.570058107 CET	443	49873	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.570081949 CET	49873	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.570135117 CET	443	49873	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.610793114 CET	443	49874	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.611063957 CET	49874	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.611087084 CET	443	49874	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.611952066 CET	443	49874	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.612021923 CET	49874	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.612417936 CET	49874	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.612438917 CET	49874	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.612478018 CET	443	49874	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.612498999 CET	49874	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.612529993 CET	49874	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.612819910 CET	49902	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.612859011 CET	443	49902	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.612929106 CET	49902	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.613141060 CET	49902	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.613153934 CET	443	49902	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.624650955 CET	49873	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.641195059 CET	443	49875	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.641449928 CET	49875	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.641478062 CET	443	49875	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.642534971 CET	443	49875	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.642628908 CET	49875	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.643043995 CET	49875	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.643074989 CET	49875	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.643131971 CET	49875	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.643162966 CET	443	49875	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.643306971 CET	443	49876	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.643369913 CET	49875	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.643372059 CET	443	49875	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.643419981 CET	49875	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.643460989 CET	49903	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.643501997 CET	443	49903	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.643618107 CET	49903	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.643743992 CET	49876	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.643753052 CET	443	49876	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.644145966 CET	443	49879	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.644351006 CET	49903	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.644366980 CET	443	49903	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.645040989 CET	49879	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.645057917 CET	443	49879	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.645611048 CET	443	49876	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.645677090 CET	49876	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.646054983 CET	49876	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.646142006 CET	443	49876	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.646251917 CET	49876	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.646261930 CET	443	49876	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.646526098 CET	443	49879	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.646584988 CET	49879	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.647022009 CET	49879	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.647090912 CET	443	49879	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.647142887 CET	49879	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.647171974 CET	49879	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.647195101 CET	443	49879	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.688724041 CET	49876	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.688730001 CET	49879	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.688752890 CET	443	49879	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.689033985 CET	443	49877	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.689066887 CET	443	49878	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.697411060 CET	49877	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.697428942 CET	443	49877	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.697994947 CET	49878	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.698026896 CET	443	49878	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.698569059 CET	443	49877	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.698652029 CET	49877	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.698977947 CET	49877	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.699099064 CET	443	49877	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.699126959 CET	49877	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.700508118 CET	443	49880	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.700717926 CET	49880	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.700781107 CET	443	49880	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.700818062 CET	443	49878	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.700891018 CET	49878	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.701174021 CET	49878	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.701288939 CET	49878	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.701302052 CET	443	49878	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.701324940 CET	443	49878	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.704340935 CET	443	49880	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.704422951 CET	49880	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.705504894 CET	49880	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.705607891 CET	443	49880	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.705981016 CET	49880	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.705998898 CET	443	49880	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.736762047 CET	49879	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.739351988 CET	443	49877	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.745429993 CET	443	49882	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.746227980 CET	49882	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.746246099 CET	443	49882	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.746706963 CET	443	49873	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.746838093 CET	443	49873	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.746889114 CET	49873	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.747792959 CET	443	49882	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.747849941 CET	49882	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.748145103 CET	49873	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.748162985 CET	443	49873	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.748591900 CET	49904	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.748616934 CET	49878	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.748620987 CET	443	49904	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.748625994 CET	443	49878	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.748689890 CET	49904	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.750041962 CET	49882	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.750134945 CET	443	49882	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.750581026 CET	49904	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.750593901 CET	443	49904	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.750662088 CET	443	49881	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.750931978 CET	49881	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.750950098 CET	443	49881	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.751029015 CET	49882	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.751044989 CET	443	49882	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.752634048 CET	49880	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.754625082 CET	443	49881	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.754702091 CET	49881	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.755119085 CET	49881	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.755270958 CET	443	49881	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.755790949 CET	49881	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.755799055 CET	443	49881	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.761784077 CET	49905	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:29.761811018 CET	443	49905	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:29.761923075 CET	49905	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:29.762394905 CET	49905	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:29.762408018 CET	443	49905	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:29.785799026 CET	443	49879	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.785944939 CET	443	49879	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.786254883 CET	49879	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.786629915 CET	49879	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.786648989 CET	443	49879	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.787117004 CET	49906	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.787144899 CET	443	49906	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.787199020 CET	49906	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.787894964 CET	49906	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.787913084 CET	443	49906	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.799638033 CET	49882	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.799727917 CET	49881	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.799730062 CET	49878	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.811860085 CET	443	49884	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.812124968 CET	49884	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.812136889 CET	443	49884	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.812212944 CET	443	49885	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.812500954 CET	49885	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.812515974 CET	443	49885	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.813013077 CET	443	49884	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.813075066 CET	49884	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.813312054 CET	443	49887	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.813569069 CET	49887	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.813584089 CET	443	49887	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.814157009 CET	443	49885	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.814229965 CET	49885	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.814446926 CET	443	49887	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.814506054 CET	49887	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.814764023 CET	49887	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.814817905 CET	443	49887	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.814888954 CET	49887	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.814894915 CET	443	49887	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.815706968 CET	49877	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.815732956 CET	443	49877	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.817920923 CET	49884	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.818027020 CET	443	49884	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.818340063 CET	49885	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.818438053 CET	443	49885	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.818646908 CET	49884	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.818659067 CET	443	49884	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.818752050 CET	49885	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.818764925 CET	443	49885	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.818785906 CET	443	49886	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.818964958 CET	49886	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.818974018 CET	443	49886	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.820411921 CET	443	49886	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.820472956 CET	49886	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.821701050 CET	49886	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.821784973 CET	443	49886	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.821960926 CET	49886	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.821974993 CET	443	49886	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.822149992 CET	443	49883	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.822348118 CET	49883	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.822365999 CET	443	49883	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.823844910 CET	443	49883	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.823913097 CET	49883	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.824316978 CET	49883	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.824402094 CET	443	49883	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.824511051 CET	49883	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.824521065 CET	443	49883	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.834846020 CET	443	49888	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.835068941 CET	49888	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.835089922 CET	443	49888	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.836566925 CET	443	49888	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.836652040 CET	49888	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.836968899 CET	49888	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.837052107 CET	443	49888	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.837215900 CET	49888	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.837232113 CET	443	49888	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.838545084 CET	443	49889	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.839066029 CET	49889	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.839075089 CET	443	49889	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.842881918 CET	443	49889	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.842959881 CET	49889	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.843781948 CET	49889	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.843957901 CET	443	49889	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.844356060 CET	49889	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.844363928 CET	443	49889	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.852597952 CET	443	49876	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.852773905 CET	443	49876	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.852864027 CET	443	49876	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.852941036 CET	49876	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.852950096 CET	443	49876	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.853013992 CET	443	49876	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.853049994 CET	49876	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.853110075 CET	443	49876	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.853194952 CET	443	49876	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.853209972 CET	49876	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.853224039 CET	443	49876	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.853282928 CET	49876	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.853295088 CET	443	49876	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.853821993 CET	443	49876	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.853997946 CET	49876	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.854227066 CET	49876	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.854254961 CET	443	49876	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.859258890 CET	443	49892	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.859713078 CET	49892	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.859730005 CET	443	49892	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.861160994 CET	443	49892	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.861226082 CET	49892	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.861641884 CET	49892	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.861711025 CET	443	49892	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.861987114 CET	49892	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.861994982 CET	443	49892	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.863635063 CET	49884	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.863647938 CET	49885	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.875118971 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:29.875513077 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:29.875524998 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:29.875829935 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:29.876281023 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:29.876338005 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:29.876614094 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:29.879640102 CET	49883	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.899629116 CET	443	49877	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.899666071 CET	443	49877	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.899696112 CET	443	49877	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.899698019 CET	49877	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.899725914 CET	443	49877	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.899743080 CET	49877	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.899857998 CET	443	49877	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.899885893 CET	443	49877	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.899909019 CET	49877	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.899914026 CET	443	49877	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.899925947 CET	443	49877	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.899952888 CET	49877	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.900274992 CET	443	49877	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.900346041 CET	49877	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.903475046 CET	49877	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.903491974 CET	443	49877	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.911643028 CET	49892	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.919012070 CET	443	49882	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.919110060 CET	443	49882	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.919147015 CET	443	49882	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.919157028 CET	49882	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.919181108 CET	443	49882	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.919220924 CET	443	49882	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.919259071 CET	443	49882	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.919262886 CET	49882	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.919274092 CET	443	49882	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.919295073 CET	49882	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.919409990 CET	443	49882	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.919452906 CET	49882	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.920548916 CET	49882	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.920567036 CET	443	49882	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.921502113 CET	443	49880	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.921711922 CET	443	49880	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.921777964 CET	49880	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.921797037 CET	443	49880	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.921883106 CET	443	49880	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.921947956 CET	49880	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.921955109 CET	443	49880	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.922044992 CET	443	49880	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.922102928 CET	49880	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.922107935 CET	443	49880	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.922200918 CET	443	49880	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.922302961 CET	443	49880	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.922310114 CET	49880	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.922329903 CET	443	49880	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.922370911 CET	49880	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.922377110 CET	443	49880	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.922458887 CET	443	49880	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.922529936 CET	49880	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.923338890 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:29.923424959 CET	49880	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.923434973 CET	443	49880	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.924623966 CET	443	49881	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.924926996 CET	443	49881	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.924988985 CET	49881	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.926131964 CET	49881	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:29.926151991 CET	443	49881	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:29.933690071 CET	443	49878	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.933900118 CET	443	49878	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.933990002 CET	49878	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.934004068 CET	443	49878	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.934087992 CET	443	49878	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.934180021 CET	443	49878	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.934216022 CET	49878	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.934223890 CET	443	49878	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.934335947 CET	443	49878	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.934387922 CET	49878	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.934397936 CET	443	49878	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.934452057 CET	49878	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.934459925 CET	443	49878	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.934649944 CET	443	49878	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.934751034 CET	49878	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.934936047 CET	49878	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.934943914 CET	443	49878	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.946716070 CET	443	49885	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.946933985 CET	443	49885	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.947038889 CET	49885	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.947474003 CET	49885	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.947483063 CET	443	49885	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.954150915 CET	443	49884	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.954351902 CET	443	49884	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.954405069 CET	49884	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.954972982 CET	49884	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.954986095 CET	443	49884	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.955311060 CET	443	49886	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.955406904 CET	49886	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.955821037 CET	49886	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.955827951 CET	443	49886	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.960984945 CET	443	49883	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.961168051 CET	443	49883	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.961226940 CET	49883	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.961920023 CET	49883	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.961931944 CET	443	49883	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.969153881 CET	443	49888	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.969229937 CET	49888	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.976001024 CET	49888	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.976022005 CET	443	49888	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.982636929 CET	443	49898	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.983648062 CET	49898	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.983660936 CET	443	49898	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.986576080 CET	443	49898	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.986651897 CET	49898	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.987211943 CET	49898	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.987277985 CET	443	49898	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.987607002 CET	49898	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.987613916 CET	443	49898	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.987644911 CET	49898	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.987678051 CET	443	49898	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.990763903 CET	443	49887	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.990796089 CET	443	49887	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.990822077 CET	443	49887	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.990844011 CET	443	49887	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.990849972 CET	49887	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.990871906 CET	443	49887	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.990888119 CET	49887	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.990907907 CET	49887	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.990955114 CET	443	49887	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.991328955 CET	443	49887	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.991357088 CET	443	49887	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.991394043 CET	49887	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.991410017 CET	443	49887	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.991425991 CET	443	49887	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.991449118 CET	49887	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.991472960 CET	49887	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.991580009 CET	443	49892	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.991668940 CET	443	49892	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.991676092 CET	443	49897	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.991736889 CET	49892	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.992742062 CET	49887	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.992763042 CET	443	49887	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.994302034 CET	443	49899	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.994525909 CET	49897	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.994545937 CET	443	49897	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.995222092 CET	49892	443	192.168.2.16	34.8.123.242
Jan 15, 2025 03:49:29.995243073 CET	443	49892	34.8.123.242	192.168.2.16
Jan 15, 2025 03:49:29.996280909 CET	443	49897	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.996330976 CET	49897	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.999285936 CET	49897	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.999396086 CET	443	49897	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:29.999694109 CET	49899	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:29.999705076 CET	443	49899	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.000579119 CET	443	49899	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.000581980 CET	49897	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.000591040 CET	443	49897	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.000631094 CET	49899	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.000672102 CET	49897	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.000711918 CET	443	49897	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.001595974 CET	49899	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.001653910 CET	443	49899	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.001987934 CET	49909	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:30.002023935 CET	443	49909	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:30.002113104 CET	49909	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:30.002453089 CET	49909	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:30.002475977 CET	443	49909	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:30.002521038 CET	49899	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.002527952 CET	443	49899	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.002547979 CET	49899	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.002826929 CET	443	49899	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.007806063 CET	49889	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.035423040 CET	443	49901	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.035641909 CET	49901	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.035664082 CET	443	49901	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.037111044 CET	443	49901	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.037169933 CET	49901	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.037483931 CET	49901	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.037579060 CET	443	49901	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.037623882 CET	49901	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.039629936 CET	49898	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.043912888 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.043977022 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.044049025 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.044075966 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.047213078 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.047288895 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.047306061 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.051300049 CET	443	49889	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.051378012 CET	443	49889	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.051419973 CET	443	49889	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.051445007 CET	443	49889	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.051446915 CET	49889	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.051469088 CET	443	49889	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.051482916 CET	49889	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.051511049 CET	443	49889	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.051533937 CET	443	49889	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.051562071 CET	49889	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.051570892 CET	443	49889	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.051611900 CET	49889	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.051914930 CET	443	49889	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.051978111 CET	443	49889	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.052058935 CET	49889	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.053519964 CET	49889	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.053539038 CET	443	49889	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.083323002 CET	443	49901	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.087666035 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.098839998 CET	443	49902	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:30.099087000 CET	49902	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:30.099097967 CET	443	49902	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:30.100008011 CET	443	49902	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:30.100075006 CET	49902	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:30.100554943 CET	49902	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:30.100616932 CET	443	49902	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:30.100862026 CET	49902	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:30.100868940 CET	443	49902	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:30.117192984 CET	443	49896	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:30.117487907 CET	49896	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:30.117505074 CET	443	49896	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:30.117806911 CET	443	49896	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:30.118264914 CET	49896	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:30.118335962 CET	443	49896	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:30.118376017 CET	49896	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:30.119622946 CET	49899	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.119645119 CET	49901	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.119669914 CET	443	49901	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.130363941 CET	443	49903	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:30.130595922 CET	49903	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:30.130608082 CET	443	49903	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:30.131156921 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.131186008 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.131237030 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.131299019 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.131342888 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.131856918 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.131922007 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.131937027 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.131984949 CET	443	49903	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:30.132040977 CET	49903	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:30.133033991 CET	49903	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:30.133105040 CET	443	49903	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:30.133341074 CET	49903	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:30.133351088 CET	443	49903	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:30.133608103 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.133680105 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.133694887 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.135212898 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.135279894 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.135293961 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.148847103 CET	443	49898	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.148952007 CET	443	49898	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.149013042 CET	49898	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.149749041 CET	49898	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.149765968 CET	443	49898	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.150192976 CET	49910	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.150228977 CET	443	49910	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.150291920 CET	49910	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.151424885 CET	49910	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.151443005 CET	443	49910	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.151631117 CET	49902	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:30.158565044 CET	443	49897	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.158879995 CET	443	49897	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.159336090 CET	443	49896	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:30.159403086 CET	49897	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.160057068 CET	49897	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.160073996 CET	443	49897	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.160418987 CET	49911	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.160468102 CET	443	49911	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.162771940 CET	49911	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.163209915 CET	49911	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.163232088 CET	443	49911	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.166269064 CET	443	49899	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.166527033 CET	49896	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:30.166582108 CET	443	49899	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.166637897 CET	49899	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.167175055 CET	49899	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.167186022 CET	443	49899	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.167488098 CET	49913	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.167515039 CET	443	49913	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.167665958 CET	49913	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.168695927 CET	49913	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.168708086 CET	443	49913	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.183650017 CET	49903	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:30.224101067 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.224199057 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.224230051 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.224257946 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.224276066 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.224292994 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.224317074 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.224339962 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.224363089 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.224427938 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.224452019 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.224467993 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.224479914 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.224494934 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.224534035 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.224603891 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.224622965 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.224662066 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.224680901 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.224710941 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.224728107 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.224750996 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.224787951 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.224807978 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.224831104 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.225354910 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.225395918 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.225426912 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.225440025 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.225467920 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.226267099 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.226342916 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.226356030 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.246658087 CET	443	49904	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.249675989 CET	49904	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.249686956 CET	443	49904	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.251121998 CET	443	49904	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.251183033 CET	49904	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.251688957 CET	49904	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.251713991 CET	49904	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.251769066 CET	49904	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.251780033 CET	443	49904	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.252022028 CET	443	49904	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.252660990 CET	49904	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.252681017 CET	49904	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.253079891 CET	49914	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.253128052 CET	443	49914	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.253165960 CET	443	49906	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.253197908 CET	49914	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.254688025 CET	49914	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.254703045 CET	443	49914	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.255465031 CET	49906	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.255475044 CET	443	49906	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.255723000 CET	443	49901	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.255800009 CET	443	49901	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.255853891 CET	49901	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.256488085 CET	49901	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.256506920 CET	443	49901	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.256745100 CET	49915	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.256766081 CET	443	49915	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.256819963 CET	49915	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.256903887 CET	443	49906	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.256948948 CET	49906	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.257596970 CET	49915	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.257606983 CET	443	49915	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.258495092 CET	49906	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.258511066 CET	49906	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.258558989 CET	49906	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.258584976 CET	443	49906	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.258630037 CET	49906	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.259239912 CET	49916	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.259274960 CET	443	49916	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.259653091 CET	49916	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.259808064 CET	49916	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.259824038 CET	443	49916	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.277718067 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.287946939 CET	443	49902	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:30.288048983 CET	443	49902	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:30.288137913 CET	49902	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:30.289706945 CET	49902	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:30.289719105 CET	443	49902	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:30.312468052 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.312479019 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.312546015 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.312575102 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.312840939 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.313025951 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.313040018 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.313105106 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.313163996 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.313175917 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.313245058 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.313298941 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.313312054 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.313838005 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.313898087 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.313905954 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.313924074 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.313962936 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.314476967 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.314522028 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.314577103 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.314577103 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.314593077 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.316625118 CET	443	49903	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:30.316737890 CET	443	49903	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:30.316801071 CET	49903	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:30.318236113 CET	49903	443	192.168.2.16	104.21.80.92
Jan 15, 2025 03:49:30.318247080 CET	443	49903	104.21.80.92	192.168.2.16
Jan 15, 2025 03:49:30.390768051 CET	443	49905	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:30.391144037 CET	49905	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:30.391160965 CET	443	49905	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:30.391645908 CET	443	49905	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:30.395200968 CET	49905	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:30.395283937 CET	443	49905	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:30.395466089 CET	49905	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:30.395497084 CET	443	49905	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:30.400937080 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.401021004 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.401055098 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.401226997 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.401236057 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.401293993 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.401309967 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.401428938 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.401463032 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.401484966 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.401499987 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.401530027 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.401679039 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.401738882 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.401751995 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.402034044 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.402105093 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.402118921 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.402173996 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.402230978 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.402244091 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.402539968 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.402591944 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.402616024 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.402633905 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.402657986 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.405790091 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.405874968 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.405891895 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.405929089 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.405993938 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.406007051 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.406284094 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.406344891 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.406358004 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.406466961 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.406518936 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.406532049 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.406965017 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.407023907 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.407037020 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.407291889 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.407346964 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.407361984 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.407546043 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.407628059 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.407643080 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.408641100 CET	443	49896	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:30.408698082 CET	443	49896	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:30.408751965 CET	49896	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:30.419647932 CET	49678	443	192.168.2.16	20.189.173.10
Jan 15, 2025 03:49:30.421745062 CET	49896	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:30.421755075 CET	443	49896	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:30.467669010 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.489391088 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.489403009 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.489449024 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.489489079 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.489531040 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.489564896 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.489599943 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.489618063 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.489629984 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.489669085 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.489686012 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.489756107 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.489819050 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.489830017 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.489901066 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.489952087 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.489964008 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.490036964 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.490087032 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.490098000 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.490252972 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.490346909 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.490356922 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.490441084 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.490492105 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.490504980 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.490581989 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.490634918 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.490645885 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.490664005 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.490726948 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.490736961 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.491154909 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.491235971 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.491255045 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.491266966 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.491293907 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.491306067 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.491348982 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.491360903 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.491374016 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.491401911 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.491554022 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.491632938 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.491642952 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.577985048 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.578039885 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.578073978 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.578151941 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.578188896 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.578202963 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.578227997 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.578232050 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.578250885 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.578263998 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.578289986 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.578313112 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.578366995 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.578382015 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.578437090 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.578490973 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.578557968 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.578569889 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.578645945 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.578705072 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.578717947 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.578861952 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.578918934 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.578932047 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.578991890 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.579046965 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.579057932 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.579077005 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.579134941 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.579149008 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.579251051 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.579303026 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.579330921 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.579410076 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.579459906 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.579478979 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.579500914 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.579623938 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.579688072 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.579699993 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.579722881 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.579781055 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.579793930 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.579873085 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.579942942 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.579955101 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.579989910 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.580038071 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.580049992 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.584769011 CET	443	49905	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:30.584844112 CET	443	49905	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:30.585067034 CET	49905	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:30.585253000 CET	49905	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:30.585277081 CET	443	49905	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:30.585292101 CET	49905	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:30.585330963 CET	49905	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:30.646507978 CET	443	49909	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:30.647912979 CET	49909	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:30.647938013 CET	443	49909	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:30.648281097 CET	443	49909	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:30.648863077 CET	49909	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:30.648931026 CET	443	49909	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:30.649331093 CET	49909	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:30.649364948 CET	443	49909	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:30.666373014 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.666461945 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.666506052 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.666718006 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.666763067 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.666779995 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.666780949 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.666799068 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.666807890 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.666815042 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.666846037 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.666846037 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.666879892 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.666934013 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.666949034 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.667099953 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.667155027 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.667175055 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.667257071 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.667357922 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.667365074 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.667382002 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.667432070 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.667445898 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.667485952 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.667541981 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.667555094 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.667690039 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.667737961 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.667753935 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.667805910 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.667830944 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.667902946 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.667910099 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.667920113 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.667968988 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.667983055 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.668070078 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.668132067 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.668149948 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.668175936 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.668237925 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.668251038 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.668325901 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.668379068 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.668391943 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.668495893 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.668551922 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.668565035 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.668618917 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.668678999 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.668690920 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.680826902 CET	443	49910	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.681330919 CET	49910	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.681356907 CET	443	49910	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.682854891 CET	443	49910	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.682939053 CET	49910	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.683238983 CET	49910	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.683253050 CET	49910	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.683303118 CET	49910	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.683309078 CET	443	49910	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.683551073 CET	443	49910	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.683590889 CET	49926	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.683638096 CET	443	49926	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.683645964 CET	49910	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.683645964 CET	49910	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.683691978 CET	49926	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.683923006 CET	49926	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.683929920 CET	443	49926	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.684977055 CET	443	49911	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.685188055 CET	49911	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.685214043 CET	443	49911	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.686665058 CET	443	49911	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.686774969 CET	49911	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.687032938 CET	49911	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.687048912 CET	49911	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.687084913 CET	49911	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.687129021 CET	443	49911	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.687176943 CET	49911	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.687344074 CET	49927	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.687377930 CET	443	49927	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.687427998 CET	49927	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.687585115 CET	49927	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.687594891 CET	443	49927	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.690129995 CET	443	49913	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.690349102 CET	49913	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.690373898 CET	443	49913	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.691852093 CET	443	49913	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.691935062 CET	49913	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.692924976 CET	49913	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.692939997 CET	49913	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.692981958 CET	49913	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.693176031 CET	443	49913	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.693245888 CET	49913	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.693403959 CET	49928	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.693435907 CET	443	49928	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.693680048 CET	49928	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.693958044 CET	49928	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.693972111 CET	443	49928	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.777779102 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.781575918 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.781589985 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.781644106 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.781651974 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.781670094 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.781708956 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.781749964 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.781816959 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.781853914 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.781883001 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.781898022 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.782059908 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.782126904 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.782144070 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.782191992 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.782201052 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.782217979 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.782258034 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.782294035 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.782306910 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.782377958 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.782391071 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.782555103 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.782630920 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.782643080 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.782661915 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.782735109 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.782746077 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.782788038 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.782851934 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.782864094 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.782910109 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.782953978 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.782968044 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.782982111 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.783010960 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.783132076 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.783190012 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.783201933 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.783225060 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.783281088 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.783293009 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.783411026 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.783476114 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.783490896 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.783577919 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.783623934 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.783634901 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.783647060 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.783699036 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.793699980 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.820799112 CET	443	49914	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.821283102 CET	443	49915	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.822746038 CET	49915	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.822771072 CET	443	49915	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.822863102 CET	49914	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.822875023 CET	443	49914	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.824323893 CET	443	49915	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.824417114 CET	49915	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.824448109 CET	443	49914	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.824501038 CET	49914	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.826034069 CET	443	49916	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.826262951 CET	49914	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.826368093 CET	443	49914	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.828841925 CET	49915	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.828855038 CET	49915	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.828907013 CET	49915	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.828933954 CET	443	49915	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.829022884 CET	49915	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.829241991 CET	49929	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.829269886 CET	443	49929	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.829353094 CET	49916	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.829387903 CET	443	49916	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.829431057 CET	49929	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.829550982 CET	49929	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.829556942 CET	443	49929	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.829675913 CET	49914	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.829675913 CET	49914	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.829685926 CET	443	49914	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.829731941 CET	443	49914	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.830851078 CET	443	49916	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.830916882 CET	49916	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.832195997 CET	49916	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.832279921 CET	443	49916	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.832293987 CET	49916	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.832314014 CET	49916	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.832376003 CET	443	49916	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.869883060 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.869965076 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.869981050 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.870048046 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.870081902 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.870234013 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.870292902 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.870309114 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.870511055 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.870569944 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.870584011 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.870755911 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.870814085 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.870820999 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.870836973 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.870871067 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.870893002 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.870950937 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.870964050 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.871071100 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.871126890 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.871140003 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.871221066 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.871268034 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.871280909 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.871295929 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.871342897 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.871481895 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.871537924 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.871541977 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.871556044 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.871593952 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.871777058 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.871871948 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.871884108 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.871975899 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.872067928 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.872117043 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.872123957 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.872136116 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.872164965 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.872196913 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.872270107 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.872282028 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.874752045 CET	443	49909	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:30.874896049 CET	443	49909	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:30.874953985 CET	49909	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:30.881669998 CET	49914	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.881844044 CET	49916	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.881877899 CET	443	49916	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.884659052 CET	49909	443	192.168.2.16	142.250.186.98
Jan 15, 2025 03:49:30.884685040 CET	443	49909	142.250.186.98	192.168.2.16
Jan 15, 2025 03:49:30.904675961 CET	49930	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:30.904709101 CET	443	49930	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:30.904764891 CET	49930	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:30.904995918 CET	49930	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:30.905009985 CET	443	49930	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:30.958621025 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.958673954 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.958702087 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.958772898 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.958802938 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.958808899 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.958811998 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.958858967 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.958877087 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.959273100 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.959345102 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.959358931 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.959464073 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.959508896 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.959521055 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.959537983 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.959569931 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.959594011 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.959784985 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.959826946 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.959836006 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.959844112 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.959846973 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.959889889 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.959907055 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.959927082 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.959981918 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.959985971 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.959997892 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.960045099 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.960057974 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.960185051 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.960278988 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.960326910 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.960340023 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.960351944 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.960407972 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.960427046 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.960448980 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.960508108 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.960520983 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.960669041 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.960731030 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.960742950 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.960761070 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.960818052 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:30.960829973 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:30.999593973 CET	443	49916	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.999749899 CET	443	49916	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:30.999774933 CET	49916	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:30.999813080 CET	49916	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.000330925 CET	49916	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.000353098 CET	443	49916	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.000643015 CET	443	49914	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.000646114 CET	49931	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.000684977 CET	443	49931	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.000752926 CET	49931	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.000813007 CET	443	49914	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.000899076 CET	49914	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.001548052 CET	49914	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.001564026 CET	443	49914	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.001796961 CET	49932	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.001826048 CET	443	49932	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.001888037 CET	49932	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.002409935 CET	49931	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.002423048 CET	443	49931	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.002796888 CET	49932	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.002814054 CET	443	49932	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.047753096 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.047831059 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.047849894 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.047882080 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.047909975 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.047915936 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.047969103 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.047979116 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.047988892 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.048034906 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.048048973 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.048103094 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.048110008 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.048120975 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.048154116 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.048165083 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.048180103 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.048213959 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.048283100 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.048346043 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.048358917 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.048439980 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.048528910 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.048540115 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.048598051 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.048650026 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.048655033 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.048667908 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.048719883 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.048732996 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.048813105 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.048825026 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.048883915 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.048896074 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.049098969 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.049155951 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.049168110 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.049201012 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.049248934 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.049264908 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.049278021 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.049300909 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.049308062 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.049355984 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.049370050 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.136131048 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.136178017 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.136218071 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.136287928 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.136324883 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.136336088 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.136394978 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.136410952 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.136915922 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.136976004 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.136992931 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.137062073 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.137123108 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.137136936 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.137170076 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.137224913 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.137238026 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.137290001 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.137343884 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.137356043 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.137499094 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.137562037 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.137567043 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.137579918 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.137634993 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.137645960 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.137700081 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.137706041 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.137715101 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.137763023 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.137774944 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.137851000 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.137902975 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.137916088 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.138115883 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.138180017 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.138185024 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.138195992 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.138243914 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.138247013 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.138258934 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.138293028 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.138478994 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.138537884 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.138540983 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.138554096 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.138624907 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.140017033 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.140028000 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.140079975 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.184129000 CET	443	49928	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.184417009 CET	49928	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.184425116 CET	443	49928	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.185834885 CET	443	49928	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.186028004 CET	49928	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.186297894 CET	49928	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.186357975 CET	49928	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.186361074 CET	443	49928	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.186376095 CET	443	49928	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.186376095 CET	49928	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.186446905 CET	443	49928	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.197464943 CET	443	49926	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.197681904 CET	49926	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.197709084 CET	443	49926	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.197738886 CET	443	49927	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.198156118 CET	49927	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.198179007 CET	443	49927	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.199031115 CET	443	49927	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.199100971 CET	49927	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.199152946 CET	443	49926	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.199213982 CET	49926	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.199496984 CET	49927	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.199577093 CET	443	49927	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.199934006 CET	49926	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.200014114 CET	443	49926	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.200129032 CET	49927	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.200136900 CET	443	49927	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.200164080 CET	49927	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.200206041 CET	443	49927	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.200227976 CET	49926	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.200238943 CET	443	49926	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.200258017 CET	49926	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.200273037 CET	443	49926	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.224586010 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.224668980 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.224668026 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.224683046 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.224734068 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.224766016 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.224821091 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.224879026 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.224895954 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.225430012 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.225497007 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.225501060 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.225516081 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.225564957 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.225655079 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.225800991 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.225809097 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.225824118 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.225857019 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.225963116 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.226023912 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.226037979 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.226110935 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.226165056 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.226178885 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.226221085 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.226277113 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.226289988 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.226380110 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.226432085 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.226447105 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.226469994 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.226521969 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.226536036 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.226763010 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.226807117 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.226820946 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.226835966 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.226861954 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.227004051 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.227062941 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.227065086 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.227076054 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.227113962 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.280663967 CET	49927	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.280663967 CET	49926	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.280672073 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.280699015 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.313611984 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.313677073 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.313771009 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.313774109 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.313816071 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.313846111 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.313846111 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.313870907 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.314376116 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.314445972 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.314448118 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.314462900 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.314496994 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.314517975 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.314529896 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.314551115 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.314616919 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.314629078 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.314721107 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.314776897 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.314789057 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.314812899 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.314867020 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.314881086 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.314984083 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.315036058 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.315047979 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.315067053 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.315119982 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.315131903 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.315195084 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.315253019 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.315264940 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.315346956 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.315390110 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.315397978 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.315480947 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.315546989 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.315552950 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.315604925 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.315651894 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.315659046 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.315788031 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.315845013 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.315850019 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.316005945 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.316060066 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.316066980 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.325452089 CET	443	49929	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.325679064 CET	49929	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.325715065 CET	443	49929	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.326276064 CET	443	49929	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.326720953 CET	49929	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.326916933 CET	49929	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.326925039 CET	443	49929	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.326960087 CET	49929	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.326972961 CET	443	49929	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.327055931 CET	443	49929	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.330579996 CET	443	49928	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.330657005 CET	443	49928	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.330718994 CET	49928	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.330856085 CET	49928	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.331387997 CET	49928	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.331398964 CET	443	49928	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.331877947 CET	49939	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.331896067 CET	443	49939	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.332015038 CET	49939	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.332675934 CET	49939	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.332688093 CET	443	49939	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.359116077 CET	443	49926	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.359273911 CET	443	49926	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.359438896 CET	49926	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.359893084 CET	49926	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.359908104 CET	443	49926	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.360155106 CET	49941	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.360199928 CET	443	49941	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.360277891 CET	49941	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.360892057 CET	49941	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.360909939 CET	443	49941	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.361543894 CET	443	49927	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.361660957 CET	443	49927	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.361727953 CET	49927	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.362571001 CET	49927	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.362584114 CET	443	49927	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.362976074 CET	49942	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.363039017 CET	443	49942	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.363185883 CET	49942	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.363739967 CET	49942	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.363766909 CET	443	49942	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.402117968 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.402183056 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.402204990 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.402251005 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.402281046 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.402282953 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.402343988 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.402360916 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.402884960 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.402967930 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.402985096 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.403003931 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.403059959 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.403074026 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.403143883 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.403202057 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.403213978 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.403270960 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.403323889 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.403343916 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.403357983 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.403392076 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.403481007 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.403553963 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.403568029 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.403615952 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.403669119 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.403681040 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.403728008 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.403789043 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.403801918 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.403940916 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.404020071 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.404031992 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.404272079 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.404335022 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.404340982 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.404352903 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.404403925 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.404416084 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.404443026 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.404488087 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.404500008 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.404522896 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.404540062 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.404575109 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.404584885 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.404647112 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.481776953 CET	443	49931	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.482023001 CET	49931	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.482027054 CET	443	49929	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.482038975 CET	443	49931	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.482114077 CET	49929	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.482122898 CET	443	49929	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.482182026 CET	443	49929	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.482237101 CET	49929	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.482919931 CET	49929	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.482933044 CET	443	49929	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.483324051 CET	49944	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.483355045 CET	443	49944	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.483422995 CET	49944	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.483489037 CET	443	49931	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.483552933 CET	49931	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.483958006 CET	49944	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.483975887 CET	443	49944	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.484524012 CET	49931	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.484540939 CET	49931	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.484605074 CET	49931	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.484618902 CET	443	49931	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.484672070 CET	49931	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.484896898 CET	49945	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.484930992 CET	443	49945	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.485006094 CET	49945	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.485358953 CET	49945	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.485378027 CET	443	49945	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.491079092 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.491175890 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.491197109 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.491415024 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.491487980 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.491501093 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.491520882 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.491578102 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.491590977 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.492060900 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.492146015 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.492158890 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.492245913 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.492296934 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.492310047 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.492325068 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.492355108 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.492499113 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.492566109 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.492580891 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.492647886 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.492708921 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.492722034 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.492765903 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.492815018 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.492827892 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.492980957 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.493041992 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.493046045 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.493061066 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.493103027 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.493123055 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.493175983 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.493187904 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.493334055 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.493388891 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.493402004 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.493505955 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.493561983 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.493576050 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.493594885 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.493649960 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.493662119 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.493725061 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.493783951 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.493796110 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.503401041 CET	443	49932	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.503904104 CET	49932	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.503935099 CET	443	49932	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.505377054 CET	443	49932	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.505441904 CET	49932	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.505750895 CET	49932	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.505819082 CET	443	49932	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.505831957 CET	49932	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.505902052 CET	49932	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.505959988 CET	49932	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.506268024 CET	49946	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.506287098 CET	443	49946	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.506398916 CET	49946	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.506639957 CET	49946	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.506649971 CET	443	49946	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.540319920 CET	443	49930	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:31.540631056 CET	49930	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:31.540641069 CET	443	49930	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:31.540968895 CET	443	49930	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:31.541330099 CET	49930	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:31.541388988 CET	443	49930	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:31.541650057 CET	49930	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:31.579752922 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.579822063 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.579852104 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.579921961 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.579951048 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.579957008 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.580010891 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.580028057 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.580581903 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.580657959 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.580660105 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.580679893 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.580729008 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.580883026 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.580945015 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.580986023 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.581007004 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.581031084 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.581121922 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.581182957 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.581197023 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.581260920 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.581330061 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.581341982 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.581410885 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.581471920 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.581484079 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.581523895 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.581590891 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.581604004 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.581688881 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.581773043 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.581785917 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.581814051 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.581877947 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.581893921 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.582065105 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.582117081 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.582129955 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.582142115 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.582168102 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.582307100 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.582381964 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.582395077 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.583329916 CET	443	49930	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:31.668292999 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.668365002 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.668396950 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.668512106 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.668561935 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.668572903 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.668610096 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.668657064 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.668665886 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.669081926 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.669148922 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.669161081 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.669239998 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.669302940 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.669311047 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.669378996 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.669440985 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.669447899 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.669470072 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.669517040 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.669523954 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.669689894 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.669740915 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.669749022 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.669799089 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.669851065 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.669857979 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.669892073 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.669949055 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.669955969 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.670043945 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.670085907 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.670094013 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.670242071 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.670300007 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.670305967 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.670325994 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.670365095 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.670520067 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.670573950 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.670581102 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.670633078 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.670727968 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.670730114 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.670747042 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.670794964 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.757499933 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.757643938 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.757680893 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.757705927 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.757731915 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.757745028 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.757776022 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.757796049 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.757888079 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.757952929 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.757982969 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.758138895 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.758186102 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.758196115 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.758213997 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.758244038 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.758306980 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.758366108 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.758378983 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.758404016 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.758460045 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.758475065 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.758560896 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.758630991 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.758644104 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.758703947 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.758760929 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.758774042 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.758806944 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.758862972 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.758876085 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.759005070 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.759067059 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.759079933 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.759102106 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.759162903 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.759174109 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.759211063 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.759273052 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.759284973 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.759335995 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.759396076 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.759407997 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.759561062 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.759630919 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.759644032 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.828118086 CET	443	49930	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:31.828207016 CET	443	49930	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:31.828296900 CET	49930	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:31.829154015 CET	49930	443	192.168.2.16	142.250.186.34
Jan 15, 2025 03:49:31.829170942 CET	443	49930	142.250.186.34	192.168.2.16
Jan 15, 2025 03:49:31.839302063 CET	443	49939	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.839734077 CET	49939	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.839749098 CET	443	49939	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.840740919 CET	443	49939	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.840853930 CET	49939	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.841193914 CET	49939	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.841193914 CET	49939	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.841239929 CET	49939	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.841253996 CET	443	49939	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.841408014 CET	443	49939	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.841480970 CET	49939	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.841480970 CET	49939	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.841902971 CET	49947	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.841943026 CET	443	49947	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.842010975 CET	49947	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.842236996 CET	49947	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.842245102 CET	443	49947	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.846174955 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.846271038 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.846316099 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.846348047 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.846426010 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.846446037 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.846477985 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.846544027 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.846558094 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.846582890 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.846661091 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.846674919 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.846882105 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.846962929 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.846976995 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.847024918 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.847084999 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.847099066 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.847130060 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.847191095 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.847203970 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.847229004 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.847289085 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.847301960 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.847357035 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.847423077 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.847435951 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.847460032 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.847522974 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.847539902 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.847583055 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.847649097 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.847662926 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.847717047 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.847785950 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.847799063 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.847863913 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.847923994 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.847937107 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.847984076 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.848042965 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.848054886 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.848140955 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.848196030 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.848216057 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.848238945 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.848239899 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.848299026 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.848311901 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.848522902 CET	443	49942	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.848779917 CET	49942	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.848807096 CET	443	49942	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.850243092 CET	443	49942	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.850322962 CET	49942	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.850588083 CET	49942	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.850588083 CET	49942	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.850630045 CET	49942	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.850686073 CET	443	49942	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.850760937 CET	49942	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.850899935 CET	49948	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.850915909 CET	443	49948	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.850985050 CET	49948	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.851161003 CET	49948	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.851171970 CET	443	49948	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.873203993 CET	443	49941	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.873456955 CET	49941	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.873502970 CET	443	49941	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.877190113 CET	443	49941	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.877280951 CET	49941	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.877747059 CET	49941	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.877782106 CET	49941	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.877810955 CET	49941	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.877846003 CET	443	49941	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.877909899 CET	49941	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.878129005 CET	49949	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.878169060 CET	443	49949	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.878443003 CET	49949	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.878722906 CET	49949	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.878737926 CET	443	49949	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.934712887 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.934813976 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.934875011 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.934910059 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.935033083 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.935053110 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.935085058 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.935105085 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.935132027 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.935182095 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.935240030 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.935309887 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.935348988 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.935436010 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.935502052 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.935517073 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.935564995 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.935636044 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.935666084 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.935698032 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.935766935 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.935781002 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.935811996 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.935899973 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.935913086 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.935945034 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.936012983 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.936026096 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.936081886 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.936151981 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.936165094 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.936211109 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.936275959 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.936296940 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.936372995 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.936439991 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.936453104 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.936486959 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.936553001 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.936566114 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.936604023 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.936672926 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.936686993 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.936743021 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.936820030 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.936834097 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.936858892 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.936919928 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.936932087 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:31.941660881 CET	443	49945	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.941910982 CET	49945	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.941936016 CET	443	49945	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.942848921 CET	443	49945	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.942912102 CET	49945	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.943289995 CET	49945	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.943356991 CET	443	49945	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.943715096 CET	49945	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.943725109 CET	443	49945	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.943742990 CET	49945	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.975421906 CET	443	49946	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.975792885 CET	443	49944	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.975856066 CET	49946	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.975922108 CET	443	49946	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.976130962 CET	49944	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.976150990 CET	443	49944	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.977376938 CET	443	49946	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.977461100 CET	49946	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.977762938 CET	443	49944	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.977839947 CET	49944	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.977895021 CET	49946	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.977984905 CET	443	49946	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.978420973 CET	49944	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.978451014 CET	49944	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.978506088 CET	49944	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.978513002 CET	443	49944	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.978579044 CET	49944	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.978812933 CET	49951	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.978840113 CET	443	49951	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.978903055 CET	49951	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.979037046 CET	49946	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.979059935 CET	443	49946	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.979100943 CET	49946	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.979162931 CET	443	49946	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.979306936 CET	49951	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:31.979324102 CET	443	49951	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:31.982652903 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:31.991336107 CET	443	49945	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.023360014 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.023473024 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.023505926 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.024502993 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.024580002 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.024590969 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.030894041 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.030961990 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.030985117 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.031008005 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.031037092 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.031043053 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.031100035 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.031110048 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.031126976 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.031168938 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.031178951 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.031193972 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.031223059 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.031229973 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.031272888 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.031286955 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.031301022 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.031358957 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.031372070 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.031383991 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.031421900 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.031445980 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.031460047 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.031487942 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.031569958 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.031645060 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.031657934 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.031681061 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.031737089 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.031745911 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.031757116 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.031807899 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.031822920 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.031842947 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.031889915 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.031893969 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.031907082 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.031912088 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.031955957 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.031970024 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.083745956 CET	443	49945	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.083825111 CET	443	49945	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.083857059 CET	49945	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.083880901 CET	49945	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.084542036 CET	49945	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.084562063 CET	443	49945	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.084969044 CET	49952	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.085079908 CET	443	49952	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.085172892 CET	49952	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.086222887 CET	49952	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.086261034 CET	443	49952	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.111974955 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.112087011 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.112095118 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.112150908 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.112189054 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.113462925 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.113569975 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.113585949 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.113617897 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.113688946 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.113702059 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.113749981 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.113864899 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.113912106 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.113936901 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.113959074 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.114021063 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.114084005 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.114097118 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.114132881 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.114198923 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.114213943 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.114243984 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.114306927 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.114320040 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.114387989 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.114455938 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.114469051 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.114523888 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.114605904 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.114618063 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.114705086 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.114782095 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.114795923 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.114840031 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.114901066 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.114912987 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.114934921 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.115009069 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.115020037 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.115114927 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.115187883 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.115199089 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.115223885 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.115264893 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.121622086 CET	443	49946	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.121694088 CET	49946	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.121704102 CET	443	49946	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.121754885 CET	49946	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.122441053 CET	49946	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.122462988 CET	443	49946	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.122883081 CET	49953	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.122914076 CET	443	49953	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.122972965 CET	49953	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.123656034 CET	49953	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.123668909 CET	443	49953	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.173693895 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.173757076 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.200485945 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.200527906 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.200578928 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.200598955 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.200644970 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.202044010 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.202086926 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.202117920 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.202131987 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.202167988 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.202296972 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.202337980 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.202358007 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.202373028 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.202404022 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.202480078 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.202538967 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.202552080 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.202615976 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.202677011 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.202689886 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.202713966 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.202779055 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.202790976 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.202905893 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.202972889 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.202985048 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.203005075 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.203068018 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.203079939 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.203119040 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.203174114 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.203186989 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.203273058 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.203342915 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.203353882 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.203418016 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.203474998 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.203485966 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.203550100 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.203618050 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.203630924 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.203654051 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.203706980 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.203720093 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.289031029 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.289153099 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.289190054 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.289263010 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.289299965 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.290633917 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.290714025 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.290729046 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.290757895 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.290808916 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.290842056 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.290858030 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.290885925 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.290934086 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.290999889 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.291013956 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.291084051 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.291142941 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.291155100 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.291237116 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.291280031 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.291304111 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.291321039 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.291363001 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.291424036 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.291488886 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.291501045 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.291646004 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.291732073 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.291749001 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.291788101 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.291847944 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.292206049 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.292227030 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.292289972 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.292298079 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.292310953 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.292336941 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.292366982 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.292376041 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.292402029 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.292412043 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.292439938 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.317413092 CET	443	49948	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.317922115 CET	49948	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.317939043 CET	443	49948	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.318820953 CET	443	49948	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.318893909 CET	49948	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.319195032 CET	49948	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.319248915 CET	443	49948	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.319389105 CET	49948	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.319427967 CET	49948	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.319436073 CET	443	49948	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.321537971 CET	443	49947	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.321785927 CET	49947	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.321808100 CET	443	49947	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.322716951 CET	443	49947	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.322789907 CET	49947	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.323009968 CET	49947	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.323065996 CET	443	49947	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.323164940 CET	49947	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.323185921 CET	443	49947	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.323200941 CET	49947	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.367336988 CET	443	49947	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.377465963 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.377552032 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.377578974 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.377592087 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.377649069 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.377686977 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.377744913 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.379081964 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.379153013 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.379165888 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.379187107 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.379249096 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.379262924 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.379286051 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.379343033 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.379355907 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.379422903 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.379475117 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.379487991 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.379652977 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.379710913 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.379710913 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.379724979 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.379765987 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.379780054 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.379812002 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.379827976 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.379842043 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.379872084 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.379889011 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.380031109 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.380083084 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.380095959 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.380183935 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.380223036 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.380242109 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.380259037 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.380289078 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.380441904 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.380505085 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.380518913 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.380554914 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.380618095 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.380634069 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.380681038 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.380729914 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.380743027 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.382997036 CET	443	49949	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.383433104 CET	49949	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.383455992 CET	443	49949	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.384895086 CET	443	49949	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.384965897 CET	49949	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.385288000 CET	49949	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.385373116 CET	443	49949	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.385516882 CET	49949	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.385561943 CET	49949	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.385571003 CET	443	49949	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.397664070 CET	49948	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.465231895 CET	443	49951	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.465928078 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.466002941 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.466088057 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.466120005 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.466181993 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.466200113 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.466286898 CET	49951	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.466314077 CET	443	49951	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.467506886 CET	443	49951	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.467628956 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.467700005 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.467732906 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.467881918 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.467938900 CET	49951	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.467952013 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.467957973 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.467979908 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.468008995 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.468051910 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.468110085 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.468123913 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.468127966 CET	443	49951	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.468204021 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.468245029 CET	49951	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.468283892 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.468286991 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.468301058 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.468316078 CET	49951	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.468348980 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.468362093 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.468381882 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.468393087 CET	443	49951	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.468416929 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.468430042 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.468451977 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.468473911 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.468539953 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.468605995 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.468625069 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.468689919 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.468750000 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.468763113 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.468837023 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.468888998 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.468915939 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.468935013 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.468956947 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.469197989 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.469237089 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.469264984 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.469284058 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.469306946 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.469400883 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.469456911 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.469470978 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.474334955 CET	443	49948	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.474453926 CET	443	49948	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.474589109 CET	49948	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.475131035 CET	49948	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.475147963 CET	443	49948	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.475568056 CET	49958	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.475641012 CET	443	49958	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.475723028 CET	49958	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.476233006 CET	49958	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.476264954 CET	443	49958	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.487145901 CET	443	49947	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.487211943 CET	443	49947	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.487230062 CET	49947	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.487276077 CET	49947	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.488096952 CET	49947	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.488117933 CET	443	49947	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.488645077 CET	49959	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.488738060 CET	443	49959	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.490495920 CET	49959	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.490888119 CET	49959	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.490931988 CET	443	49959	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.508668900 CET	49949	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.554881096 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.554928064 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.554976940 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.555044889 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.555079937 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.556195974 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.556269884 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.556288004 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.556307077 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.556366920 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.556380033 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.556457043 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.556514025 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.556520939 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.556531906 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.556580067 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.556592941 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.556655884 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.556679964 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.556741953 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.556754112 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.556849957 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.556909084 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.556926966 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.556950092 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.556950092 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.557007074 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.557018995 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.557112932 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.557164907 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.557178020 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.557236910 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.557293892 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.557307005 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.557378054 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.557446003 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.557460070 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.557527065 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.557579041 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.557591915 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.557873011 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.557930946 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.557945013 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.558001995 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.558037043 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.558056116 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.558070898 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.558096886 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.561395884 CET	443	49949	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.561542034 CET	443	49949	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.561615944 CET	49949	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.562365055 CET	49949	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.562383890 CET	443	49949	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.562925100 CET	49960	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.563014030 CET	443	49960	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.563139915 CET	49960	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.563642025 CET	49960	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.563678980 CET	443	49960	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.575648069 CET	443	49953	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.576169014 CET	49953	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.576185942 CET	443	49953	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.577054977 CET	443	49953	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.577112913 CET	49953	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.577671051 CET	49953	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.577713966 CET	49953	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.577729940 CET	443	49953	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.577805042 CET	49953	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.577816010 CET	443	49953	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.577828884 CET	49953	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.577864885 CET	49953	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.578205109 CET	49961	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.578254938 CET	443	49961	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.578346968 CET	49961	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.578600883 CET	49961	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.578620911 CET	443	49961	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.588639975 CET	443	49952	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.588929892 CET	49952	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.588956118 CET	443	49952	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.592513084 CET	443	49952	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.592680931 CET	49952	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.592977047 CET	49952	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.592995882 CET	49952	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.593039989 CET	49952	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.593158007 CET	443	49952	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.593410969 CET	49952	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.593514919 CET	49962	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.593605995 CET	443	49962	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.593705893 CET	49962	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.593939066 CET	49962	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.593974113 CET	443	49962	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.641026974 CET	443	49951	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.641223907 CET	443	49951	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.641396999 CET	49951	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.641948938 CET	49951	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.641972065 CET	443	49951	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.642301083 CET	49963	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.642339945 CET	443	49963	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.642415047 CET	49963	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.642998934 CET	49963	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.643017054 CET	443	49963	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.643275976 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.643345118 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.643347025 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.643381119 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.643414974 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.644726038 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.644813061 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.644824982 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.644840956 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.644901991 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.644911051 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.644947052 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.645004988 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.645014048 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.645117998 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.645165920 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.645174026 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.645294905 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.645350933 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.645364046 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.645457029 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.645492077 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.645514965 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.645529985 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.645562887 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.645756006 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.645823002 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.645832062 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.645843983 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.645895958 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.645909071 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.645967007 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.646040916 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.646111965 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.646122932 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.646195889 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.646272898 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.646286964 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.646428108 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.646483898 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.646497011 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.646524906 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.646585941 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.646599054 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.646655083 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.646723032 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.646737099 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.685183048 CET	49680	80	192.168.2.16	192.229.211.108
Jan 15, 2025 03:49:32.731887102 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.731921911 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.732048988 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.732049942 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.732084036 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.733252048 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.733320951 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.733338118 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.733470917 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.733514071 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.733525038 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.733542919 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.733580112 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.733700037 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.733763933 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.733778000 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.733831882 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.733891010 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.733897924 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.733911991 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.733973026 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.733989000 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.734045029 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.734077930 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.734134912 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.734146118 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.734225988 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.734286070 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.734297991 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.734405994 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.734467983 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.734481096 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.734522104 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.734582901 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.734596014 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.734831095 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.734898090 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.734899044 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.734909058 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.734952927 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.735090971 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.735146046 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.735158920 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.735203981 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.735256910 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.735270023 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.780674934 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.820369005 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.820427895 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.820553064 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.820553064 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.820586920 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.820633888 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.821911097 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.821983099 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.821997881 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.822122097 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.822177887 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.822180986 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.822196007 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.822240114 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.822254896 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.822307110 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.822309971 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.822320938 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.822366953 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.822384119 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.822554111 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.822592020 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.822632074 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.822645903 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.822675943 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.822680950 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.822760105 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.822761059 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.822783947 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.822833061 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.822962999 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.823002100 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.823036909 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.823051929 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.823082924 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.823328018 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.823400021 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.823412895 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.823513031 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.823575974 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.823587894 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.823609114 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.823672056 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.823690891 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.823841095 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.823911905 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.823925018 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.907696009 CET	49678	443	192.168.2.16	20.189.173.10
Jan 15, 2025 03:49:32.908983946 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.909044981 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.909111977 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.909145117 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.909166098 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.910409927 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.910510063 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.910526037 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.910547972 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.910636902 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.910649061 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.910689116 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.910753965 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.910768032 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.910826921 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.910895109 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.910907984 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.910932064 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.910996914 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.911011934 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.911062956 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.911120892 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.911133051 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.911194086 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.911256075 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.911267996 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.911336899 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.911396027 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.911410093 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.911525011 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.911596060 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.911604881 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.911619902 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.911673069 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.911686897 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.911750078 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.911847115 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.911910057 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.911926031 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.911945105 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.911998987 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.912009954 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.912132978 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.912199974 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.912210941 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.912288904 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.912348032 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.912359953 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.970822096 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.986694098 CET	443	49959	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.987494946 CET	49959	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.987557888 CET	443	49959	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.988437891 CET	443	49959	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.988508940 CET	49959	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.988996029 CET	49959	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.989052057 CET	49959	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.989062071 CET	443	49959	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.989068985 CET	49959	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.989128113 CET	49959	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.989398956 CET	49964	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.989437103 CET	443	49964	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.989561081 CET	49964	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.989754915 CET	49964	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.989774942 CET	443	49964	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.995928049 CET	443	49958	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.996207952 CET	49958	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.996231079 CET	443	49958	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.997102022 CET	443	49958	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.997179985 CET	49958	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.997478962 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.997483969 CET	49958	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.997531891 CET	49958	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.997548103 CET	443	49958	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.997555017 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.997571945 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.997673035 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.997673988 CET	49958	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.997677088 CET	443	49958	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.997700930 CET	443	49958	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.997733116 CET	49958	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.997734070 CET	49958	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.997734070 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.997767925 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.997795105 CET	49958	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.998080015 CET	49965	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.998126984 CET	443	49965	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.998239994 CET	49965	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.998503923 CET	49965	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:32.998526096 CET	443	49965	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:32.998867989 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:32.998939037 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:32.998953104 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.000633001 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.000715971 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.000729084 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.000845909 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.000899076 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.000907898 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.000926018 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.000946045 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.000956059 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.001044989 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.001066923 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.001081944 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.001104116 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.001108885 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.001152992 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.001166105 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.001204014 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.001250029 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.001264095 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.001277924 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.001308918 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.001312971 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.001348972 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.001384974 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.001403093 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.001426935 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.001451015 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.001502991 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.001516104 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.001640081 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.001676083 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.001688957 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.001701117 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.001729965 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.045473099 CET	443	49960	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.045917988 CET	49960	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.045993090 CET	443	49960	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.047460079 CET	443	49960	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.047538042 CET	49960	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.048079967 CET	49960	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.048115015 CET	49960	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.048163891 CET	49960	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.048178911 CET	443	49960	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.048243046 CET	49960	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.048494101 CET	49966	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.048507929 CET	443	49966	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.048572063 CET	49966	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.048852921 CET	49966	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.048861027 CET	443	49966	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.082659006 CET	49680	80	192.168.2.16	192.229.211.108
Jan 15, 2025 03:49:33.082820892 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.086076021 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.086221933 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.086252928 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.089104891 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.089150906 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.089167118 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.089185953 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.089220047 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.089266062 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.089324951 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.089339018 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.089411974 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.089463949 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.089479923 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.089559078 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.089622021 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.089637041 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.089760065 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.089817047 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.089828014 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.089842081 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.089888096 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.089903116 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.089948893 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.090008020 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.090022087 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.090065002 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.090099096 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.090163946 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.090177059 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.090339899 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.090378046 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.090401888 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.090415001 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.090445042 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.090542078 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.090621948 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.090635061 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.090672970 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.090730906 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.090743065 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.090790033 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.090847969 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.090862036 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.090879917 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.090936899 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.090949059 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.096666098 CET	443	49961	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.096889973 CET	49961	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.096927881 CET	443	49961	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.097912073 CET	443	49961	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.097984076 CET	49961	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.098261118 CET	49961	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.098324060 CET	443	49961	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.098413944 CET	49961	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.098448038 CET	49961	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.098468065 CET	443	49961	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.108318090 CET	443	49962	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.108767033 CET	49962	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.108799934 CET	443	49962	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.110229969 CET	443	49962	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.110306025 CET	49962	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.110615015 CET	49962	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.110697031 CET	443	49962	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.110771894 CET	49962	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.110780954 CET	443	49962	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.110816002 CET	49962	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.146656990 CET	49961	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.155333996 CET	443	49962	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.170408010 CET	49970	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.170495987 CET	443	49970	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.170583010 CET	49970	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.170708895 CET	49971	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.170749903 CET	443	49971	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.170797110 CET	49971	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.171097040 CET	49970	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.171132088 CET	443	49970	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.171401978 CET	49971	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.171427011 CET	443	49971	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.172116041 CET	49962	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.174611092 CET	443	49963	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.174690008 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.174798965 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.174851894 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.174865007 CET	49963	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.174890995 CET	443	49963	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.175795078 CET	443	49963	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.175862074 CET	49963	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.176290035 CET	49963	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.176302910 CET	49963	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.176342010 CET	49963	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.176350117 CET	443	49963	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.176414967 CET	49963	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.176649094 CET	49973	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.176678896 CET	443	49973	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.176840067 CET	49973	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.177637100 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.177700043 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.177721024 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.177809000 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.177856922 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.177856922 CET	49973	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.177874088 CET	443	49973	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.177901983 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.177923918 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.177949905 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.178014040 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.178071022 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.178085089 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.178107023 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.178163052 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.178178072 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.178303003 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.178364038 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.178364038 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.178380966 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.178431034 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.178443909 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.178500891 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.178582907 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.178659916 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.178672075 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.178770065 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.178797007 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.178828955 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.178843021 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.178868055 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.178936958 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.178997040 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.179009914 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.179042101 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.179100037 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.179114103 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.179271936 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.179423094 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.179467916 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.179470062 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.179488897 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.179529905 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.179529905 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.179529905 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.263328075 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.263420105 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.263453960 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.263817072 CET	443	49961	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.263936043 CET	443	49961	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.264020920 CET	49961	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.265513897 CET	49961	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.265538931 CET	443	49961	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.266128063 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.266202927 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.266218901 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.266266108 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.266330957 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.266344070 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.266407013 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.266468048 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.266482115 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.266562939 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.266628027 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.266643047 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.266664028 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.266724110 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.266737938 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.266804934 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.266865969 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.266879082 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.266936064 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.266988993 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.267002106 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.267124891 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.267168999 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.267199039 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.267214060 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.267244101 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.267415047 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.267465115 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.267478943 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.267493010 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.267534971 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.267585039 CET	443	49962	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.267664909 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.267698050 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.267730951 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.267744064 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.267771006 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.267795086 CET	49976	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.267824888 CET	443	49976	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.267879963 CET	443	49962	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.267884016 CET	49976	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.267963886 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.268012047 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.268040895 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.268059969 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.268084049 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.268138885 CET	49962	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.268956900 CET	49962	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.268981934 CET	443	49962	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.269376040 CET	49977	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.269408941 CET	443	49977	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.269491911 CET	49977	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.270107985 CET	49976	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.270121098 CET	443	49976	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.270392895 CET	49977	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.270416021 CET	443	49977	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.271891117 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.351938963 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.352042913 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.352075100 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.354765892 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.354800940 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.354851961 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.354859114 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.354914904 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.354960918 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.354968071 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.355034113 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.355081081 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.355087042 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.355154037 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.355191946 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.355197906 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.355249882 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.355300903 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.355309010 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.355348110 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.355390072 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.355397940 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.355490923 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.355540037 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.355547905 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.355649948 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.355700016 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.355707884 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.355798960 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.355869055 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.355878115 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.355900049 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.355941057 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.355947971 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.356038094 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.356081963 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.356087923 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.356224060 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.356266022 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.356272936 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.356323004 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.356365919 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.356373072 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.356468916 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.356548071 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.356591940 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.356597900 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.356641054 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.356689930 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.356695890 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.440371037 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.440455914 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.440468073 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.443326950 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.443399906 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.443407059 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.443511009 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.443557978 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.443571091 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.443579912 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.443629026 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.443686962 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.443737984 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.443744898 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.443783045 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.443785906 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.443802118 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.443888903 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.443895102 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.443959951 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.444009066 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.444015026 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.444130898 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.444181919 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.444189072 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.444231033 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.444278955 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.444286108 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.444370985 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.444416046 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.444422960 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.444509983 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.444555044 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.444564104 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.444611073 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.444658041 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.444664001 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.444770098 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.444818974 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.444825888 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.445095062 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.445133924 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.445146084 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.445152998 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.445187092 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.445209980 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.445261002 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.445266008 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.445311069 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.448343039 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.487077951 CET	443	49964	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.487334013 CET	49964	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.487358093 CET	443	49964	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.488782883 CET	443	49964	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.488853931 CET	49964	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.489134073 CET	49964	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.489216089 CET	443	49964	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.489310980 CET	49964	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.489335060 CET	49964	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.489351988 CET	443	49964	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.496368885 CET	443	49965	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.496736050 CET	49965	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.496773005 CET	443	49965	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.497643948 CET	443	49965	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.497710943 CET	49965	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.497966051 CET	49965	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.498090029 CET	443	49965	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.498106003 CET	49965	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.498116016 CET	49965	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.498138905 CET	443	49965	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.529027939 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.529148102 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.529208899 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.531940937 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.531994104 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.532016993 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.532042980 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.532074928 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.532145023 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.532201052 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.532215118 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.532277107 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.532332897 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.532346964 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.532437086 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.532495975 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.532510042 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.532552958 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.532612085 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.532624006 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.532711029 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.532799006 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.532840967 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.532860994 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.532892942 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.532911062 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.532968998 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.532984972 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.533118010 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.533193111 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.533205032 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.533302069 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.533350945 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.533354044 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.533369064 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.533406019 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.533418894 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.533519983 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.533548117 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.533560038 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.533586025 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.533624887 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.533679008 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.533690929 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.533736944 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.533745050 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.533756971 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.533798933 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.533821106 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.533840895 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.541654110 CET	49964	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.541672945 CET	443	49964	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.554703951 CET	443	49966	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.554939985 CET	49966	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.554958105 CET	443	49966	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.556579113 CET	443	49966	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.556648970 CET	49966	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.556936979 CET	49966	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.557015896 CET	443	49966	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.557086945 CET	49966	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.557096004 CET	443	49966	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.557115078 CET	49966	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.557126999 CET	443	49966	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.573659897 CET	49965	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.573687077 CET	443	49965	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.573744059 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.589679003 CET	49964	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.605628967 CET	49966	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.617584944 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.617666006 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.617683887 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.620479107 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.620558023 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.620567083 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.620620966 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.620685101 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.620692968 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.620773077 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.620819092 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.620826960 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.620893002 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.620945930 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.620954037 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.621076107 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.621126890 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.621134043 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.621248960 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.621303082 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.621309996 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.621340036 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.621387959 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.621395111 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.621525049 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.621579885 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.621587992 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.621598005 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.621659994 CET	49965	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.621736050 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.621743917 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.621763945 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.621813059 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.621819019 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.621886015 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.621936083 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.621942997 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.622186899 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.622230053 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.622241020 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.622248888 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.622282982 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.622392893 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.622443914 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.622452021 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.622526884 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.622577906 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.622585058 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.642389059 CET	443	49973	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.642644882 CET	49973	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.642666101 CET	443	49973	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.643003941 CET	443	49973	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.643505096 CET	49973	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.643564939 CET	443	49973	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.643675089 CET	443	49971	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.643714905 CET	443	49970	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.643802881 CET	49973	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.643831015 CET	49973	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.643868923 CET	443	49973	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.644074917 CET	49971	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.644090891 CET	443	49971	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.644205093 CET	49970	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.644237041 CET	443	49970	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.644557953 CET	443	49971	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.644717932 CET	443	49970	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.644898891 CET	49971	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.644978046 CET	443	49971	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.645189047 CET	49970	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.645302057 CET	443	49970	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.645395041 CET	49971	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.645451069 CET	49970	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.647218943 CET	443	49965	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.647345066 CET	443	49965	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.647412062 CET	49965	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.648027897 CET	49965	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.648046017 CET	443	49965	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.648557901 CET	49978	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.648583889 CET	443	49978	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.648811102 CET	49978	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.649589062 CET	49978	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.649604082 CET	443	49978	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.665954113 CET	443	49964	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.666100979 CET	443	49964	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.666168928 CET	49964	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.666726112 CET	49964	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.666738987 CET	443	49964	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.667043924 CET	49979	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.667083979 CET	443	49979	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.668724060 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.668730974 CET	49979	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.674446106 CET	49979	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.674460888 CET	443	49979	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.684684992 CET	49680	80	192.168.2.16	192.229.211.108
Jan 15, 2025 03:49:33.687335968 CET	443	49971	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.691328049 CET	443	49970	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.706226110 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.706428051 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.706458092 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.709170103 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.709233046 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.709242105 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.709254026 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.709302902 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.709311962 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.709939003 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.710012913 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.710020065 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.710033894 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.710079908 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.710084915 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.710102081 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.710144043 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.710158110 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.710165977 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.710184097 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.710195065 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.710220098 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.710242987 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.710249901 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.710274935 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.710335970 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.710392952 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.710400105 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.710442066 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.710495949 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.710503101 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.710547924 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.710602045 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.710609913 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.710824013 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.710876942 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.710885048 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.710992098 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.711035967 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.711111069 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.711118937 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.711174011 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.711174965 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.711260080 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.711266041 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.712080956 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.734549999 CET	443	49966	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.734735966 CET	443	49966	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.734801054 CET	49966	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.735629082 CET	49966	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.735637903 CET	443	49966	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.736094952 CET	49980	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.736190081 CET	443	49980	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.736288071 CET	49980	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.737170935 CET	49980	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.737202883 CET	443	49980	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.750029087 CET	443	49971	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.750111103 CET	443	49971	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.750174046 CET	49971	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.750253916 CET	443	49970	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.750282049 CET	443	49970	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.750344992 CET	443	49970	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.750431061 CET	49970	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.750432014 CET	49970	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.754367113 CET	49971	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.754379034 CET	443	49971	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.755614996 CET	443	49977	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.757060051 CET	49977	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.757088900 CET	443	49977	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.758522034 CET	443	49977	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.758591890 CET	49977	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.759838104 CET	49977	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.759897947 CET	49977	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.759917021 CET	443	49977	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.760137081 CET	443	49977	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.760153055 CET	49977	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.760164976 CET	443	49977	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.760174036 CET	49977	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.760184050 CET	49977	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.760207891 CET	49977	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.760807037 CET	49981	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.760837078 CET	443	49981	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.760962009 CET	49981	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.761658907 CET	49981	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.761676073 CET	443	49981	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.763549089 CET	49970	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.763580084 CET	443	49970	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.773309946 CET	49982	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.773323059 CET	443	49982	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.773402929 CET	49982	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.774034023 CET	49982	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.774049997 CET	443	49982	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.774782896 CET	49983	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.774832964 CET	443	49983	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.774952888 CET	49983	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.775129080 CET	49983	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.775156975 CET	443	49983	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.777549028 CET	443	49976	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.777817965 CET	49976	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.777829885 CET	443	49976	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.778820038 CET	443	49976	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.778891087 CET	49976	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.779189110 CET	49976	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.779200077 CET	49976	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.779246092 CET	49976	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.779253960 CET	443	49976	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.779428005 CET	443	49976	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.779459000 CET	49984	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.779476881 CET	443	49984	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.779480934 CET	49976	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.779495001 CET	49976	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.779561996 CET	49984	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.779721975 CET	49984	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.779738903 CET	443	49984	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.790116072 CET	443	49973	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.790246010 CET	443	49973	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.790306091 CET	49973	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.791687965 CET	49973	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.791699886 CET	443	49973	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.792284966 CET	49985	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.792325020 CET	443	49985	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.792402983 CET	49985	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.794039011 CET	49985	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:33.794070959 CET	443	49985	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:33.794753075 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.794826031 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.794836998 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.797949076 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.798002958 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.798027992 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.798037052 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.798078060 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.798764944 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.798825979 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.798834085 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.798850060 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.798912048 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.798921108 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.798988104 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.799055099 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.799066067 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.799110889 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.799165010 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.799171925 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.799376965 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.799434900 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.799443007 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.799519062 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.799576998 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.799586058 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.799660921 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.799722910 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.799731016 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.799755096 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.799807072 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.799815893 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.799887896 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.799941063 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.799947977 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.800051928 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.800105095 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.800113916 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.800307035 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.800343037 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.800369024 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.800375938 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.800390959 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.800445080 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.800497055 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.800504923 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.843666077 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.883279085 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.883364916 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.883385897 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.888408899 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.888449907 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.888459921 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.888470888 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.888510942 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.888521910 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.888534069 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.888567924 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.888576984 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.888648033 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.888690948 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.888739109 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.888747931 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.888761044 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.888796091 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.888813972 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.888823986 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.888844967 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.888878107 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.888909101 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.888921976 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.888928890 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.888962030 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.889067888 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.889110088 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.889137983 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.889147043 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.889161110 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.889400005 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.889436007 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.889451981 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.889462948 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.889477015 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.889482975 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.889539957 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.889549017 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.889640093 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.889682055 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.889684916 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.889697075 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.889734030 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.889741898 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.889856100 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.971968889 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.972081900 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.972090960 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.976852894 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.976922035 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.976927996 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.976963043 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.977029085 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.977035046 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.977101088 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.977158070 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.977164984 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.977261066 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.977289915 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.977314949 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.977322102 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.977374077 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.977487087 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.977531910 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.977539062 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.977552891 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.977582932 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.977597952 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.977603912 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.977643013 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.977684021 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.977746010 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.977751017 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.977786064 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.977828026 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.977878094 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.977883101 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.977979898 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.978013992 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.978029013 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.978034973 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.978082895 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.978106976 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.978166103 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.978168964 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.978177071 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.978219986 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.978226900 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.978259087 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.978285074 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:33.978332043 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:33.978337049 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.033663034 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.060631990 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.060714006 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.060723066 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.065308094 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.065397978 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.065407038 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.065485954 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.065531015 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.065536976 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.065545082 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.065583944 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.065591097 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.065701962 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.065732956 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.065830946 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.065833092 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.065856934 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.065903902 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.065906048 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.065906048 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.065916061 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.065956116 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.065963030 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.065985918 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.066030979 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.066036940 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.066113949 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.066171885 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.066179037 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.066219091 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.066266060 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.066272020 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.066330910 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.066379070 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.066385031 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.066418886 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.066463947 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.066471100 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.066565037 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.066629887 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.066637993 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.066713095 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.066742897 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.066752911 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.066760063 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.066787004 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.066881895 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.066926003 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.066931963 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.067156076 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.112752914 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.150099039 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.150187016 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.150217056 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.154030085 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.154099941 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.154109955 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.154125929 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.154176950 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.154185057 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.154252052 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.154299021 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.154308081 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.154316902 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.154346943 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.154515028 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.154575109 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.154578924 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.154587984 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.154627085 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.154648066 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.154655933 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.154675007 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.154674053 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.154716015 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.154730082 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.154736996 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.154767990 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.154819965 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.154865026 CET	443	49978	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.154881001 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.154889107 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.154984951 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.155033112 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.155040026 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.155083895 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.155132055 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.155142069 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.155154943 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.155174017 CET	49978	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.155186892 CET	443	49978	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.155204058 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.155210018 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.155375004 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.155407906 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.155427933 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.155437946 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.155455112 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.156049967 CET	443	49978	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.156105042 CET	49978	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.156441927 CET	49978	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.156452894 CET	49978	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.156495094 CET	443	49978	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.156507969 CET	49978	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.156560898 CET	49978	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.156804085 CET	49986	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.156835079 CET	443	49986	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.156950951 CET	49986	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.157206059 CET	49986	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.157216072 CET	443	49986	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.161811113 CET	443	49979	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.162039042 CET	49979	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.162058115 CET	443	49979	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.162983894 CET	443	49979	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.163053989 CET	49979	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.163381100 CET	49979	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.163413048 CET	49979	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.163439989 CET	443	49979	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.163455009 CET	49979	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.163484097 CET	49979	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.163811922 CET	49987	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.163892984 CET	443	49987	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.164207935 CET	49987	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.164395094 CET	49987	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.164424896 CET	443	49987	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.207660913 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.211291075 CET	49988	443	192.168.2.16	142.250.185.97
Jan 15, 2025 03:49:34.211329937 CET	443	49988	142.250.185.97	192.168.2.16
Jan 15, 2025 03:49:34.211452961 CET	49988	443	192.168.2.16	142.250.185.97
Jan 15, 2025 03:49:34.211662054 CET	49988	443	192.168.2.16	142.250.185.97
Jan 15, 2025 03:49:34.211677074 CET	443	49988	142.250.185.97	192.168.2.16
Jan 15, 2025 03:49:34.212008953 CET	49989	443	192.168.2.16	216.58.206.66
Jan 15, 2025 03:49:34.212042093 CET	443	49989	216.58.206.66	192.168.2.16
Jan 15, 2025 03:49:34.212275028 CET	49989	443	192.168.2.16	216.58.206.66
Jan 15, 2025 03:49:34.212455034 CET	49989	443	192.168.2.16	216.58.206.66
Jan 15, 2025 03:49:34.212477922 CET	443	49989	216.58.206.66	192.168.2.16
Jan 15, 2025 03:49:34.225915909 CET	443	49980	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.226167917 CET	49980	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.226193905 CET	443	49980	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.227747917 CET	443	49980	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.227859974 CET	49980	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.228163958 CET	49980	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.228212118 CET	49980	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.228251934 CET	443	49980	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.228255987 CET	49980	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.228384018 CET	49980	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.228549957 CET	49990	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.228590965 CET	443	49990	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.228673935 CET	49990	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.228857994 CET	49990	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.228873014 CET	443	49990	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.238544941 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.238647938 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.238668919 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.238970041 CET	443	49982	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.239332914 CET	49982	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.239341021 CET	443	49982	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.239826918 CET	443	49982	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.240128040 CET	49982	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.240201950 CET	443	49982	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.240278959 CET	49982	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.242630959 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.242674112 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.242696047 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.242703915 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.242743015 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.242748022 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.242805004 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.242808104 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.242818117 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.242867947 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.242876053 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.242914915 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.242965937 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.243021965 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.243027925 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.243165016 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.243204117 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.243226051 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.243233919 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.243252993 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.243261099 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.243293047 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.243309021 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.243319988 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.243346930 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.243422985 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.243474007 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.243480921 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.243562937 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.243617058 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.243639946 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.243647099 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.243673086 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.243733883 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.243788958 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.243796110 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.243882895 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.243938923 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.243940115 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.243951082 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.244000912 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.244008064 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.244119883 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.248514891 CET	443	49983	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.248852015 CET	49983	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.248889923 CET	443	49983	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.249250889 CET	443	49983	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.249569893 CET	49983	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.249644995 CET	443	49983	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.249699116 CET	49983	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.254740000 CET	443	49981	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.255022049 CET	49981	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.255038023 CET	443	49981	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.256500006 CET	443	49981	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.256575108 CET	49981	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.257168055 CET	49981	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.257241964 CET	443	49981	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.257324934 CET	49981	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.257368088 CET	49981	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.257376909 CET	443	49981	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.276243925 CET	443	49985	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.276516914 CET	49985	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.276535988 CET	443	49985	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.277388096 CET	443	49985	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.277466059 CET	49985	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.277766943 CET	49985	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.277786970 CET	49985	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.277825117 CET	443	49985	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.277827978 CET	49985	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.277904034 CET	49985	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.278136015 CET	49991	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.278167963 CET	443	49991	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.278242111 CET	49991	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.278439999 CET	49991	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.278453112 CET	443	49991	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.284377098 CET	443	49984	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.284585953 CET	49984	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.284600019 CET	443	49984	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.285586119 CET	443	49984	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.285680056 CET	49984	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.285986900 CET	49984	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.286051989 CET	443	49984	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.286339045 CET	49984	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.286348104 CET	443	49984	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.286398888 CET	49984	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.286429882 CET	443	49984	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.287332058 CET	443	49982	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.287668943 CET	49982	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.295341969 CET	443	49983	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.306304932 CET	49981	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.327250957 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.327346087 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.327368021 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.331234932 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.331279993 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.331316948 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.331327915 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.331338882 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.331345081 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.331374884 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.331383944 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.331393957 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.331439018 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.331446886 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.331509113 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.331562996 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.331569910 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.331608057 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.331657887 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.331666946 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.331860065 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.331922054 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.331928968 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.332051992 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.332089901 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.332110882 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.332119942 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.332137108 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.332195044 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.332242966 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.332243919 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.332257986 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.332297087 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.332304001 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.332318068 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.332366943 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.332374096 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.332385063 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.332407951 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.332415104 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.332437992 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.332464933 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.332468987 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.332613945 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.332649946 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.332672119 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.332679033 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.332730055 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.335664034 CET	49984	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.345053911 CET	443	49982	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.345138073 CET	443	49982	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.345206022 CET	49982	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.345717907 CET	49982	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.345732927 CET	443	49982	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.355201960 CET	443	49983	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.355225086 CET	443	49983	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.355279922 CET	49983	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.355292082 CET	443	49983	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.355410099 CET	49983	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.355837107 CET	49983	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.355854988 CET	443	49983	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.415822029 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.415910006 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.415920019 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.419687986 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.419770002 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.419778109 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.419806004 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.419852018 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.419857025 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.419967890 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.420011044 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.420017004 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.420058012 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.420101881 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.420104980 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.420116901 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.420145988 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.420212984 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.420254946 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.420262098 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.420692921 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.420742989 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.420743942 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.420756102 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.420802116 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.420815945 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.420821905 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.420842886 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.420921087 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.420963049 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.420969963 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.420993090 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.421046019 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.421051979 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.421097994 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.421133995 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.421139956 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.421201944 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.421247005 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.421258926 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.421269894 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.421309948 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.421315908 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.421395063 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.421439886 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.421444893 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.427570105 CET	443	49981	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.427702904 CET	443	49981	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.427839994 CET	49981	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.428411007 CET	49981	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.428419113 CET	443	49981	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.428766012 CET	49992	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.428808928 CET	443	49992	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.428868055 CET	49992	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.429469109 CET	49992	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.429482937 CET	443	49992	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.461548090 CET	443	49984	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.461657047 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.461662054 CET	443	49984	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.461700916 CET	49984	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.462408066 CET	49984	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.462413073 CET	443	49984	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.462939024 CET	49993	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.462984085 CET	443	49993	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.463051081 CET	49993	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.463666916 CET	49993	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.463679075 CET	443	49993	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.504503965 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.504589081 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.504596949 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.508189917 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.508250952 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.508255959 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.508383036 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.508444071 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.508445978 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.508455992 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.508491039 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.508497000 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.508548975 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.508564949 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.508570910 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.508594036 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.508636951 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.508697987 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.508744955 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.508749008 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.508955956 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.509068012 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.509078026 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.509084940 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.509135962 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.509198904 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.509257078 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.509262085 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.509283066 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.509351969 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.509357929 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.509509087 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.509552956 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.509557962 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.509567976 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.509624958 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.509630919 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.509643078 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.509685040 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.509690046 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.509726048 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.509876013 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.509932995 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.509932995 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.509943962 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.509977102 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.509994030 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.509996891 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.557657003 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.593070030 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.593168974 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.593180895 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.596745968 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.596817970 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.596827030 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.596893072 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.596951962 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.596959114 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.597003937 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.597047091 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.597059965 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.597065926 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.597093105 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.597220898 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.597260952 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.597278118 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.597284079 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.597316980 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.597793102 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.597861052 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.597867012 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.597882032 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.597933054 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.597938061 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.597951889 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.597992897 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.597999096 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.598011017 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.598062992 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.598069906 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.598104000 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.598172903 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.598232985 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.598233938 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.598247051 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.598282099 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.598288059 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.598299026 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.598376989 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.598382950 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.598398924 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.598444939 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.598450899 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.598628044 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.598694086 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.598701000 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.645801067 CET	443	49987	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.646034956 CET	49987	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.646059990 CET	443	49987	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.646929026 CET	443	49987	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.646989107 CET	49987	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.647320986 CET	49987	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.647368908 CET	443	49987	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.647531986 CET	49987	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.647540092 CET	443	49987	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.647608042 CET	49987	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.647631884 CET	443	49987	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.653639078 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.661998987 CET	443	49986	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.662388086 CET	49986	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.662395954 CET	443	49986	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.663259983 CET	443	49986	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.663333893 CET	49986	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.663603067 CET	49986	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.663655996 CET	443	49986	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.663764000 CET	49986	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.663825989 CET	49986	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.663839102 CET	443	49986	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.681593895 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.681669950 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.681677103 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.685587883 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.685616970 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.685700893 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.685714006 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.685874939 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.685913086 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.685939074 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.685945034 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.685976982 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.686002970 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.686045885 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.686059952 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.686067104 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.686098099 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.686173916 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.686223030 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.686228991 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.686343908 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.686388016 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.686397076 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.686403990 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.686435938 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.686659098 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.686702967 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.686708927 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.686716080 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.686739922 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.686891079 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.686939955 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.686947107 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.687016010 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.687100887 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.687102079 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.687122107 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.687181950 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.687190056 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.687252045 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.687378883 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.687463999 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.687469959 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.701934099 CET	443	49737	142.250.186.36	192.168.2.16
Jan 15, 2025 03:49:34.701997042 CET	443	49737	142.250.186.36	192.168.2.16
Jan 15, 2025 03:49:34.702069044 CET	49737	443	192.168.2.16	142.250.186.36
Jan 15, 2025 03:49:34.711390972 CET	443	49990	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.711726904 CET	49990	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.711754084 CET	443	49990	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.715087891 CET	443	49990	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.715171099 CET	49990	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.715496063 CET	49990	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.715573072 CET	443	49990	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.715687037 CET	49990	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.715693951 CET	443	49990	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.715745926 CET	49990	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.715779066 CET	443	49990	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.716757059 CET	49986	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.732697010 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.764652967 CET	49990	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.770386934 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.770473003 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.770483971 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.774166107 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.774264097 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.774270058 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.774384975 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.774442911 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.774449110 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.774549007 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.774605036 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.774610996 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.774741888 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.774813890 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.774821043 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.774980068 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.775038004 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.775043964 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.775264978 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.775331974 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.775340080 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.775435925 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.775496960 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.775502920 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.775674105 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.775741100 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.775747061 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.775927067 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.775995016 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.776005983 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.776082039 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.776138067 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.776144028 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.776278973 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.776336908 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.776343107 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.776418924 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.776473999 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.776479959 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.776560068 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.776628971 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.776635885 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.776696920 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.776750088 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.776756048 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.776817083 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.776866913 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.776873112 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.792198896 CET	443	49991	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.792494059 CET	49991	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.792505026 CET	443	49991	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.793603897 CET	443	49991	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.794049978 CET	49991	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.794234037 CET	443	49991	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.794300079 CET	49991	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.794378996 CET	49991	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.794493914 CET	443	49991	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.803260088 CET	443	49987	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.803364038 CET	443	49987	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.807307959 CET	49987	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.808245897 CET	49987	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.808270931 CET	443	49987	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.808773041 CET	49994	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.808810949 CET	443	49994	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.808908939 CET	49994	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.809422016 CET	49994	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.809434891 CET	443	49994	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.827656031 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.841166019 CET	443	49986	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.841279030 CET	443	49986	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.841340065 CET	49986	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.841875076 CET	49986	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.841912985 CET	443	49986	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.842150927 CET	49995	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.842190027 CET	443	49995	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.842298985 CET	49995	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.842973948 CET	49995	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.842989922 CET	443	49995	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.848192930 CET	443	49989	216.58.206.66	192.168.2.16
Jan 15, 2025 03:49:34.848422050 CET	49989	443	192.168.2.16	216.58.206.66
Jan 15, 2025 03:49:34.848433971 CET	443	49989	216.58.206.66	192.168.2.16
Jan 15, 2025 03:49:34.849396944 CET	443	49989	216.58.206.66	192.168.2.16
Jan 15, 2025 03:49:34.849452972 CET	49989	443	192.168.2.16	216.58.206.66
Jan 15, 2025 03:49:34.849781036 CET	49989	443	192.168.2.16	216.58.206.66
Jan 15, 2025 03:49:34.849836111 CET	443	49989	216.58.206.66	192.168.2.16
Jan 15, 2025 03:49:34.849910975 CET	49989	443	192.168.2.16	216.58.206.66
Jan 15, 2025 03:49:34.849917889 CET	443	49989	216.58.206.66	192.168.2.16
Jan 15, 2025 03:49:34.856628895 CET	443	49988	142.250.185.97	192.168.2.16
Jan 15, 2025 03:49:34.856861115 CET	49988	443	192.168.2.16	142.250.185.97
Jan 15, 2025 03:49:34.856868029 CET	443	49988	142.250.185.97	192.168.2.16
Jan 15, 2025 03:49:34.857995987 CET	443	49988	142.250.185.97	192.168.2.16
Jan 15, 2025 03:49:34.858072042 CET	49988	443	192.168.2.16	142.250.185.97
Jan 15, 2025 03:49:34.858941078 CET	49988	443	192.168.2.16	142.250.185.97
Jan 15, 2025 03:49:34.859006882 CET	443	49988	142.250.185.97	192.168.2.16
Jan 15, 2025 03:49:34.859083891 CET	49988	443	192.168.2.16	142.250.185.97
Jan 15, 2025 03:49:34.859093904 CET	443	49988	142.250.185.97	192.168.2.16
Jan 15, 2025 03:49:34.859345913 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.859428883 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.859437943 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.862690926 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.862746000 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.862790108 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.862796068 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.862824917 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.862832069 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.862931967 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.862936974 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.863020897 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.863064051 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.863073111 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.863080025 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.863109112 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.863151073 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.863157034 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.863173008 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.863425016 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.863470078 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.863475084 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.863487005 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.863550901 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.863550901 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.863562107 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.863596916 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.863601923 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.863657951 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.863667011 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.863720894 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.863724947 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.863770962 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.863816023 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.863821030 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.863948107 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.864001036 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.864006042 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.864100933 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.864157915 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.864164114 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.864193916 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.864238024 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.864243031 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.864417076 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.864465952 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.864470959 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.876071930 CET	443	49990	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.876199007 CET	443	49990	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.876249075 CET	49990	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.876743078 CET	49990	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.876756907 CET	443	49990	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.891655922 CET	49680	80	192.168.2.16	192.229.211.108
Jan 15, 2025 03:49:34.891679049 CET	49989	443	192.168.2.16	216.58.206.66
Jan 15, 2025 03:49:34.902854919 CET	443	49992	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.903096914 CET	49992	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.903105974 CET	443	49992	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.904529095 CET	443	49992	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.904603004 CET	49992	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.904953003 CET	49992	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.904968023 CET	49992	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.905014992 CET	49992	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.905034065 CET	443	49992	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.905073881 CET	49992	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.905320883 CET	49996	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.905364990 CET	443	49996	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.905592918 CET	49996	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.905797005 CET	49996	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.905817986 CET	443	49996	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.907649994 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.907733917 CET	49988	443	192.168.2.16	142.250.185.97
Jan 15, 2025 03:49:34.941128969 CET	443	49993	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.941482067 CET	49993	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.941504955 CET	443	49993	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.943291903 CET	443	49993	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.943372011 CET	49993	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.943742037 CET	49993	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.943757057 CET	49993	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.943816900 CET	49993	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.943831921 CET	443	49993	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.943901062 CET	49993	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.944091082 CET	49997	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.944132090 CET	443	49997	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.944215059 CET	49997	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.944374084 CET	49997	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.944395065 CET	443	49997	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.948199987 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.948283911 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.948306084 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.951524973 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.951590061 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.951597929 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.951667070 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.951729059 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.951735973 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.951803923 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.951862097 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.951868057 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.951951981 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.952007055 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.952014923 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.952120066 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.952174902 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.952183008 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.952255011 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.952336073 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.952342033 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.952518940 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.952574968 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.952580929 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.952683926 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.952744007 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.952750921 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.952836990 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.952893019 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.952899933 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.952997923 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.953058958 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.953068018 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.953150988 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.953221083 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.953228951 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.953279972 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.953335047 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.953341961 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.953443050 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.953511953 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.953519106 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.953573942 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.953641891 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.953649044 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.953692913 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.953742027 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:34.953747988 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:34.959752083 CET	443	49991	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.960061073 CET	443	49991	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:34.960129976 CET	49991	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.960653067 CET	49991	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:34.960665941 CET	443	49991	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:35.002702951 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.036601067 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.036685944 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.036696911 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.039910078 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.039993048 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.039999962 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.040081024 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.040169954 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.040177107 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.040311098 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.040374041 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.040380955 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.040467024 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.040539980 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.040548086 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.040608883 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.040667057 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.040673971 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.040766954 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.040832043 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.040838957 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.040910959 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.040966034 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.040972948 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.041035891 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.041093111 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.041101933 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.041152954 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.041205883 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.041213036 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.041318893 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.041392088 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.041399002 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.041497946 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.041558981 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.041567087 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.041625977 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.041676998 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.041683912 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.041783094 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.041853905 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.041862965 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.041918993 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.041980028 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.041994095 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.042045116 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.042102098 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.042108059 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.082761049 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.125216007 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.125297070 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.125308990 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.128458977 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.128529072 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.128535986 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.128676891 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.128752947 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.128760099 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.128952026 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.129013062 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.129019022 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.129096031 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.129152060 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.129158020 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.129371881 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.129421949 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.129429102 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.129513979 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.129565954 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.129570961 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.129782915 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.129849911 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.129859924 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.130029917 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.130084991 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.130091906 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.130239964 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.130300045 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.130306005 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.130398989 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.130455017 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.130460024 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.130544901 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.130599976 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.130606890 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.130671978 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.130739927 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.130747080 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.130831957 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.130886078 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.130892038 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.130959034 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.131011963 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.131017923 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.131078959 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.131140947 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.131145954 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.136857986 CET	443	49989	216.58.206.66	192.168.2.16
Jan 15, 2025 03:49:35.136966944 CET	443	49989	216.58.206.66	192.168.2.16
Jan 15, 2025 03:49:35.137056112 CET	443	49989	216.58.206.66	192.168.2.16
Jan 15, 2025 03:49:35.137111902 CET	49989	443	192.168.2.16	216.58.206.66
Jan 15, 2025 03:49:35.137140989 CET	443	49989	216.58.206.66	192.168.2.16
Jan 15, 2025 03:49:35.137168884 CET	443	49989	216.58.206.66	192.168.2.16
Jan 15, 2025 03:49:35.137290955 CET	443	49988	142.250.185.97	192.168.2.16
Jan 15, 2025 03:49:35.137335062 CET	49989	443	192.168.2.16	216.58.206.66
Jan 15, 2025 03:49:35.137372017 CET	443	49989	216.58.206.66	192.168.2.16
Jan 15, 2025 03:49:35.137420893 CET	49989	443	192.168.2.16	216.58.206.66
Jan 15, 2025 03:49:35.137435913 CET	443	49988	142.250.185.97	192.168.2.16
Jan 15, 2025 03:49:35.137531042 CET	443	49988	142.250.185.97	192.168.2.16
Jan 15, 2025 03:49:35.137619972 CET	443	49988	142.250.185.97	192.168.2.16
Jan 15, 2025 03:49:35.137710094 CET	49988	443	192.168.2.16	142.250.185.97
Jan 15, 2025 03:49:35.137721062 CET	443	49988	142.250.185.97	192.168.2.16
Jan 15, 2025 03:49:35.137734890 CET	49988	443	192.168.2.16	142.250.185.97
Jan 15, 2025 03:49:35.142707109 CET	443	49989	216.58.206.66	192.168.2.16
Jan 15, 2025 03:49:35.142858028 CET	443	49989	216.58.206.66	192.168.2.16
Jan 15, 2025 03:49:35.142904997 CET	49989	443	192.168.2.16	216.58.206.66
Jan 15, 2025 03:49:35.142920971 CET	443	49989	216.58.206.66	192.168.2.16
Jan 15, 2025 03:49:35.143048048 CET	443	49988	142.250.185.97	192.168.2.16
Jan 15, 2025 03:49:35.143122911 CET	49988	443	192.168.2.16	142.250.185.97
Jan 15, 2025 03:49:35.143131018 CET	443	49988	142.250.185.97	192.168.2.16
Jan 15, 2025 03:49:35.143193960 CET	443	49988	142.250.185.97	192.168.2.16
Jan 15, 2025 03:49:35.143240929 CET	49988	443	192.168.2.16	142.250.185.97
Jan 15, 2025 03:49:35.143250942 CET	443	49988	142.250.185.97	192.168.2.16
Jan 15, 2025 03:49:35.148919106 CET	443	49989	216.58.206.66	192.168.2.16
Jan 15, 2025 03:49:35.148988008 CET	49989	443	192.168.2.16	216.58.206.66
Jan 15, 2025 03:49:35.149002075 CET	443	49989	216.58.206.66	192.168.2.16
Jan 15, 2025 03:49:35.149327040 CET	443	49988	142.250.185.97	192.168.2.16
Jan 15, 2025 03:49:35.149455070 CET	49988	443	192.168.2.16	142.250.185.97
Jan 15, 2025 03:49:35.149462938 CET	443	49988	142.250.185.97	192.168.2.16
Jan 15, 2025 03:49:35.155364990 CET	443	49989	216.58.206.66	192.168.2.16
Jan 15, 2025 03:49:35.155424118 CET	49989	443	192.168.2.16	216.58.206.66
Jan 15, 2025 03:49:35.155440092 CET	443	49989	216.58.206.66	192.168.2.16
Jan 15, 2025 03:49:35.155625105 CET	443	49988	142.250.185.97	192.168.2.16
Jan 15, 2025 03:49:35.155889034 CET	49988	443	192.168.2.16	142.250.185.97
Jan 15, 2025 03:49:35.155895948 CET	443	49988	142.250.185.97	192.168.2.16
Jan 15, 2025 03:49:35.178673029 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.210690975 CET	49989	443	192.168.2.16	216.58.206.66
Jan 15, 2025 03:49:35.210731030 CET	49988	443	192.168.2.16	142.250.185.97
Jan 15, 2025 03:49:35.213840008 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.213931084 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.213947058 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.217060089 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.217130899 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.217138052 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.217312098 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.217374086 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.217380047 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.217492104 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.217557907 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.217566013 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.217778921 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.217843056 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.217850924 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.218064070 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.218137026 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.218142986 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.218348980 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.218405962 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.218413115 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.218617916 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.218677998 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.218683958 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.218862057 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.218919039 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.218925953 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.219065905 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.219126940 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.219132900 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.219258070 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.219316959 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.219321966 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.219485044 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.219537973 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.219542980 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.219661951 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.219716072 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.219722033 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.219841003 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.219897032 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.219902992 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.220067024 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.220125914 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.220133066 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.220253944 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.220323086 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.220329046 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.224790096 CET	443	49989	216.58.206.66	192.168.2.16
Jan 15, 2025 03:49:35.224925041 CET	443	49989	216.58.206.66	192.168.2.16
Jan 15, 2025 03:49:35.225125074 CET	49989	443	192.168.2.16	216.58.206.66
Jan 15, 2025 03:49:35.225292921 CET	49989	443	192.168.2.16	216.58.206.66
Jan 15, 2025 03:49:35.225331068 CET	443	49989	216.58.206.66	192.168.2.16
Jan 15, 2025 03:49:35.227556944 CET	443	49988	142.250.185.97	192.168.2.16
Jan 15, 2025 03:49:35.227840900 CET	443	49988	142.250.185.97	192.168.2.16
Jan 15, 2025 03:49:35.227922916 CET	49988	443	192.168.2.16	142.250.185.97
Jan 15, 2025 03:49:35.227935076 CET	443	49988	142.250.185.97	192.168.2.16
Jan 15, 2025 03:49:35.228029966 CET	443	49988	142.250.185.97	192.168.2.16
Jan 15, 2025 03:49:35.228081942 CET	49988	443	192.168.2.16	142.250.185.97
Jan 15, 2025 03:49:35.228355885 CET	49988	443	192.168.2.16	142.250.185.97
Jan 15, 2025 03:49:35.228365898 CET	443	49988	142.250.185.97	192.168.2.16
Jan 15, 2025 03:49:35.231192112 CET	49737	443	192.168.2.16	142.250.186.36
Jan 15, 2025 03:49:35.231220961 CET	443	49737	142.250.186.36	192.168.2.16
Jan 15, 2025 03:49:35.240101099 CET	49998	443	192.168.2.16	142.250.184.225
Jan 15, 2025 03:49:35.240187883 CET	443	49998	142.250.184.225	192.168.2.16
Jan 15, 2025 03:49:35.240262985 CET	49998	443	192.168.2.16	142.250.184.225
Jan 15, 2025 03:49:35.240539074 CET	49998	443	192.168.2.16	142.250.184.225
Jan 15, 2025 03:49:35.240572929 CET	443	49998	142.250.184.225	192.168.2.16
Jan 15, 2025 03:49:35.245234013 CET	49999	443	192.168.2.16	142.250.185.228
Jan 15, 2025 03:49:35.245279074 CET	443	49999	142.250.185.228	192.168.2.16
Jan 15, 2025 03:49:35.245457888 CET	49999	443	192.168.2.16	142.250.185.228
Jan 15, 2025 03:49:35.245929003 CET	49999	443	192.168.2.16	142.250.185.228
Jan 15, 2025 03:49:35.245959044 CET	443	49999	142.250.185.228	192.168.2.16
Jan 15, 2025 03:49:35.250860929 CET	50000	443	192.168.2.16	142.250.185.225
Jan 15, 2025 03:49:35.250905037 CET	443	50000	142.250.185.225	192.168.2.16
Jan 15, 2025 03:49:35.251029968 CET	50000	443	192.168.2.16	142.250.185.225
Jan 15, 2025 03:49:35.251272917 CET	50000	443	192.168.2.16	142.250.185.225
Jan 15, 2025 03:49:35.251292944 CET	443	50000	142.250.185.225	192.168.2.16
Jan 15, 2025 03:49:35.274636984 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.295260906 CET	443	49994	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:35.295595884 CET	49994	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:35.295610905 CET	443	49994	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:35.296490908 CET	443	49994	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:35.296550035 CET	49994	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:35.296860933 CET	49994	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:35.296876907 CET	49994	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:35.296921015 CET	443	49994	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:35.296962023 CET	49994	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:35.296984911 CET	49994	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:35.297355890 CET	50001	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:35.297384024 CET	443	50001	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:35.297584057 CET	50001	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:35.297820091 CET	50001	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:35.297833920 CET	443	50001	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:35.302577019 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.302689075 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.302696943 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.305598974 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.305679083 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.305684090 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.305721045 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.305775881 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.305782080 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.305819988 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.306006908 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.306013107 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.306045055 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.306094885 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.306103945 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.306179047 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.306222916 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.306232929 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.306240082 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.306272030 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.306340933 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.306400061 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.306404114 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.306412935 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.306472063 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.306478977 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.306516886 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.306519032 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.306528091 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.306566000 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.306572914 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.306629896 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.306684017 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.306689978 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.306714058 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.306772947 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.306778908 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.306797028 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.306844950 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.306852102 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.307063103 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.307111979 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.307118893 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.307126045 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.307192087 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.307203054 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.307241917 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.307254076 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.340708971 CET	443	49995	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:35.340949059 CET	49995	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:35.340976954 CET	443	49995	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:35.341841936 CET	443	49995	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:35.341914892 CET	49995	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:35.342318058 CET	49995	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:35.342339039 CET	49995	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:35.342375040 CET	443	49995	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:35.342396975 CET	49995	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:35.342428923 CET	49995	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:35.342725039 CET	50002	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:35.342747927 CET	443	50002	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:35.342989922 CET	50002	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:35.343209028 CET	50002	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:35.343219995 CET	443	50002	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:35.352674961 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.386936903 CET	443	49996	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:35.387171984 CET	49996	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:35.387231112 CET	443	49996	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:35.388683081 CET	443	49996	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:35.388760090 CET	49996	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:35.389013052 CET	49996	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:35.389101982 CET	443	49996	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:35.389173985 CET	49996	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:35.389194965 CET	443	49996	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:35.389235973 CET	49996	443	192.168.2.16	172.67.176.164
Jan 15, 2025 03:49:35.389297962 CET	443	49996	172.67.176.164	192.168.2.16
Jan 15, 2025 03:49:35.391113043 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.391217947 CET	49893	443	192.168.2.16	192.124.249.38
Jan 15, 2025 03:49:35.391257048 CET	443	49893	192.124.249.38	192.168.2.16
Jan 15, 2025 03:49:35.394223928 CET	443	49893	192.124.249.38	192.168.2.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 15, 2025 03:49:20.234524012 CET	192.168.2.16	1.1.1.1	0xf5cd	Standard query (0)	androiddatahost.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:20.234630108 CET	192.168.2.16	1.1.1.1	0xe6ad	Standard query (0)	androiddatahost.com	65	IN (0x0001)	false
Jan 15, 2025 03:49:20.978256941 CET	192.168.2.16	1.1.1.1	0xdf1d	Standard query (0)	cdn.androiddatahost.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:20.978590965 CET	192.168.2.16	1.1.1.1	0x833d	Standard query (0)	cdn.androiddatahost.com	65	IN (0x0001)	false
Jan 15, 2025 03:49:21.004580021 CET	192.168.2.16	1.1.1.1	0x2978	Standard query (0)	c0.wp.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:21.004762888 CET	192.168.2.16	1.1.1.1	0xd013	Standard query (0)	c0.wp.com	65	IN (0x0001)	false
Jan 15, 2025 03:49:21.452465057 CET	192.168.2.16	1.1.1.1	0x6b22	Standard query (0)	androiddatahost.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:21.452579975 CET	192.168.2.16	1.1.1.1	0xad05	Standard query (0)	androiddatahost.com	65	IN (0x0001)	false
Jan 15, 2025 03:49:21.919070005 CET	192.168.2.16	1.1.1.1	0xd0a1	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:21.919204950 CET	192.168.2.16	1.1.1.1	0xb116	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jan 15, 2025 03:49:23.771733046 CET	192.168.2.16	1.1.1.1	0x5ed5	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:23.771900892 CET	192.168.2.16	1.1.1.1	0x3349	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jan 15, 2025 03:49:24.148853064 CET	192.168.2.16	1.1.1.1	0x152	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:24.148966074 CET	192.168.2.16	1.1.1.1	0xf0c2	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 15, 2025 03:49:25.214854002 CET	192.168.2.16	1.1.1.1	0xce29	Standard query (0)	g.bidbrain.app	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:25.215043068 CET	192.168.2.16	1.1.1.1	0xb33a	Standard query (0)	g.bidbrain.app	65	IN (0x0001)	false
Jan 15, 2025 03:49:25.215699911 CET	192.168.2.16	1.1.1.1	0xda3	Standard query (0)	cdn.bidbrain.app	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:25.216031075 CET	192.168.2.16	1.1.1.1	0xf7a	Standard query (0)	cdn.bidbrain.app	65	IN (0x0001)	false
Jan 15, 2025 03:49:25.906615973 CET	192.168.2.16	1.1.1.1	0x2244	Standard query (0)	fundingchoicesmessages.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:25.906822920 CET	192.168.2.16	1.1.1.1	0xac4f	Standard query (0)	fundingchoicesmessages.google.com	65	IN (0x0001)	false
Jan 15, 2025 03:49:26.144877911 CET	192.168.2.16	1.1.1.1	0xd672	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:26.145031929 CET	192.168.2.16	1.1.1.1	0xbed1	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jan 15, 2025 03:49:26.375451088 CET	192.168.2.16	1.1.1.1	0xa9a6	Standard query (0)	cdn.bidbrain.app	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:26.375567913 CET	192.168.2.16	1.1.1.1	0x1065	Standard query (0)	cdn.bidbrain.app	65	IN (0x0001)	false
Jan 15, 2025 03:49:26.513343096 CET	192.168.2.16	1.1.1.1	0xa723	Standard query (0)	serve.bidbrain.app	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:26.513483047 CET	192.168.2.16	1.1.1.1	0x197	Standard query (0)	serve.bidbrain.app	65	IN (0x0001)	false
Jan 15, 2025 03:49:27.501998901 CET	192.168.2.16	1.1.1.1	0x45c4	Standard query (0)	fundingchoicesmessages.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:27.502217054 CET	192.168.2.16	1.1.1.1	0x4caa	Standard query (0)	fundingchoicesmessages.google.com	65	IN (0x0001)	false
Jan 15, 2025 03:49:28.530848980 CET	192.168.2.16	1.1.1.1	0xacbb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:28.531160116 CET	192.168.2.16	1.1.1.1	0x1e44	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 15, 2025 03:49:28.662707090 CET	192.168.2.16	1.1.1.1	0x6c2b	Standard query (0)	serve.bidbrain.app	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:28.664419889 CET	192.168.2.16	1.1.1.1	0x5d1	Standard query (0)	serve.bidbrain.app	65	IN (0x0001)	false
Jan 15, 2025 03:49:29.315155983 CET	192.168.2.16	1.1.1.1	0x5fc5	Standard query (0)	g4.bidbrain.app	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:29.315397024 CET	192.168.2.16	1.1.1.1	0xfe7	Standard query (0)	g4.bidbrain.app	65	IN (0x0001)	false
Jan 15, 2025 03:49:29.322957039 CET	192.168.2.16	1.1.1.1	0x3e71	Standard query (0)	g6.bidbrain.app	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:29.323270082 CET	192.168.2.16	1.1.1.1	0xac93	Standard query (0)	g6.bidbrain.app	65	IN (0x0001)	false
Jan 15, 2025 03:49:29.358308077 CET	192.168.2.16	1.1.1.1	0xb726	Standard query (0)	g6.bidbrain.app	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:33.169806004 CET	192.168.2.16	1.1.1.1	0x2080	Standard query (0)	ep1.adtrafficquality.google	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:33.169939041 CET	192.168.2.16	1.1.1.1	0x7049	Standard query (0)	ep1.adtrafficquality.google	65	IN (0x0001)	false
Jan 15, 2025 03:49:34.203654051 CET	192.168.2.16	1.1.1.1	0x318c	Standard query (0)	ep2.adtrafficquality.google	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:34.203794956 CET	192.168.2.16	1.1.1.1	0xd3e5	Standard query (0)	ep2.adtrafficquality.google	65	IN (0x0001)	false
Jan 15, 2025 03:49:34.204478979 CET	192.168.2.16	1.1.1.1	0xba21	Standard query (0)	ep1.adtrafficquality.google	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:34.204617023 CET	192.168.2.16	1.1.1.1	0xad53	Standard query (0)	ep1.adtrafficquality.google	65	IN (0x0001)	false
Jan 15, 2025 03:49:35.231827021 CET	192.168.2.16	1.1.1.1	0xac2b	Standard query (0)	ep2.adtrafficquality.google	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:35.232203960 CET	192.168.2.16	1.1.1.1	0xfaf2	Standard query (0)	ep2.adtrafficquality.google	65	IN (0x0001)	false
Jan 15, 2025 03:49:35.242830038 CET	192.168.2.16	1.1.1.1	0xabd1	Standard query (0)	ep2.adtrafficquality.google	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:35.242976904 CET	192.168.2.16	1.1.1.1	0xd56b	Standard query (0)	ep2.adtrafficquality.google	65	IN (0x0001)	false
Jan 15, 2025 03:49:42.562602043 CET	192.168.2.16	1.1.1.1	0xf094	Standard query (0)	g6.bidbrain.app	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 15, 2025 03:49:20.328414917 CET	1.1.1.1	192.168.2.16	0xf5cd	No error (0)	androiddatahost.com		192.124.249.38	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:21.011353016 CET	1.1.1.1	192.168.2.16	0x2978	No error (0)	c0.wp.com		192.0.77.37	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:21.012825012 CET	1.1.1.1	192.168.2.16	0xdf1d	No error (0)	cdn.androiddatahost.com	androidatahost.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 03:49:21.012825012 CET	1.1.1.1	192.168.2.16	0xdf1d	No error (0)	androidatahost.b-cdn.net		169.150.236.105	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:21.150299072 CET	1.1.1.1	192.168.2.16	0x833d	No error (0)	cdn.androiddatahost.com	androidatahost.b-cdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 03:49:21.463630915 CET	1.1.1.1	192.168.2.16	0x6b22	No error (0)	androiddatahost.com		192.124.249.38	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:21.926004887 CET	1.1.1.1	192.168.2.16	0xd0a1	No error (0)	googleads.g.doubleclick.net		142.250.184.226	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:21.926203012 CET	1.1.1.1	192.168.2.16	0xb116	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jan 15, 2025 03:49:23.778496981 CET	1.1.1.1	192.168.2.16	0x5ed5	No error (0)	googleads.g.doubleclick.net		142.250.186.98	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:23.778953075 CET	1.1.1.1	192.168.2.16	0x3349	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jan 15, 2025 03:49:24.155668020 CET	1.1.1.1	192.168.2.16	0x152	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:24.155798912 CET	1.1.1.1	192.168.2.16	0xf0c2	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 15, 2025 03:49:25.250219107 CET	1.1.1.1	192.168.2.16	0xf7a	No error (0)	cdn.bidbrain.app			65	IN (0x0001)	false
Jan 15, 2025 03:49:25.252330065 CET	1.1.1.1	192.168.2.16	0xb33a	No error (0)	g.bidbrain.app			65	IN (0x0001)	false
Jan 15, 2025 03:49:25.252868891 CET	1.1.1.1	192.168.2.16	0xce29	No error (0)	g.bidbrain.app		172.67.176.164	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:25.252868891 CET	1.1.1.1	192.168.2.16	0xce29	No error (0)	g.bidbrain.app		104.21.80.92	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:25.270253897 CET	1.1.1.1	192.168.2.16	0xda3	No error (0)	cdn.bidbrain.app		104.21.80.92	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:25.270253897 CET	1.1.1.1	192.168.2.16	0xda3	No error (0)	cdn.bidbrain.app		172.67.176.164	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:25.913244963 CET	1.1.1.1	192.168.2.16	0x2244	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 03:49:25.913244963 CET	1.1.1.1	192.168.2.16	0x2244	No error (0)	www3.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:25.916831017 CET	1.1.1.1	192.168.2.16	0xac4f	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 03:49:26.151957035 CET	1.1.1.1	192.168.2.16	0xd672	No error (0)	googleads.g.doubleclick.net		142.250.186.34	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:26.151993036 CET	1.1.1.1	192.168.2.16	0xbed1	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jan 15, 2025 03:49:26.384725094 CET	1.1.1.1	192.168.2.16	0x1065	No error (0)	cdn.bidbrain.app			65	IN (0x0001)	false
Jan 15, 2025 03:49:26.433141947 CET	1.1.1.1	192.168.2.16	0xa9a6	No error (0)	cdn.bidbrain.app		104.21.80.92	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:26.433141947 CET	1.1.1.1	192.168.2.16	0xa9a6	No error (0)	cdn.bidbrain.app		172.67.176.164	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:26.539072037 CET	1.1.1.1	192.168.2.16	0xa723	No error (0)	serve.bidbrain.app		172.67.176.164	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:26.539072037 CET	1.1.1.1	192.168.2.16	0xa723	No error (0)	serve.bidbrain.app		104.21.80.92	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:26.541743040 CET	1.1.1.1	192.168.2.16	0x197	No error (0)	serve.bidbrain.app			65	IN (0x0001)	false
Jan 15, 2025 03:49:27.508498907 CET	1.1.1.1	192.168.2.16	0x45c4	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 03:49:27.508498907 CET	1.1.1.1	192.168.2.16	0x45c4	No error (0)	www3.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:27.509299994 CET	1.1.1.1	192.168.2.16	0x4caa	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 03:49:28.537827015 CET	1.1.1.1	192.168.2.16	0xacbb	No error (0)	www.google.com		142.250.185.228	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:28.537914038 CET	1.1.1.1	192.168.2.16	0x1e44	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 15, 2025 03:49:28.673171043 CET	1.1.1.1	192.168.2.16	0x5d1	No error (0)	serve.bidbrain.app			65	IN (0x0001)	false
Jan 15, 2025 03:49:28.684258938 CET	1.1.1.1	192.168.2.16	0x6c2b	No error (0)	serve.bidbrain.app		172.67.176.164	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:28.684258938 CET	1.1.1.1	192.168.2.16	0x6c2b	No error (0)	serve.bidbrain.app		104.21.80.92	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:29.334800005 CET	1.1.1.1	192.168.2.16	0x5fc5	No error (0)	g4.bidbrain.app		34.8.123.242	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:33.176604986 CET	1.1.1.1	192.168.2.16	0x2080	No error (0)	ep1.adtrafficquality.google		216.58.206.34	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:33.176616907 CET	1.1.1.1	192.168.2.16	0x7049	No error (0)	ep1.adtrafficquality.google			65	IN (0x0001)	false
Jan 15, 2025 03:49:34.210339069 CET	1.1.1.1	192.168.2.16	0x318c	No error (0)	ep2.adtrafficquality.google		142.250.185.97	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:34.211182117 CET	1.1.1.1	192.168.2.16	0xba21	No error (0)	ep1.adtrafficquality.google		216.58.206.66	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:34.211297989 CET	1.1.1.1	192.168.2.16	0xad53	No error (0)	ep1.adtrafficquality.google			65	IN (0x0001)	false
Jan 15, 2025 03:49:35.238804102 CET	1.1.1.1	192.168.2.16	0xac2b	No error (0)	ep2.adtrafficquality.google		142.250.184.225	A (IP address)	IN (0x0001)	false
Jan 15, 2025 03:49:35.249361038 CET	1.1.1.1	192.168.2.16	0xabd1	No error (0)	ep2.adtrafficquality.google		142.250.185.225	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	50043	61.143.38.50	80	1164	C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe

Timestamp	Bytes transferred	Direction	Data
Jan 15, 2025 03:50:47.155430079 CET	84	OUT	GET /eStudio/VersionTab.ulf HTTP/1.1 User-Agent: RookIE/1.0 Host: 61.143.38.50

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49708	192.124.249.38	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:20 UTC	667	OUT	GET /sdsd3 HTTP/1.1 Host: androiddatahost.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 02:49:20 UTC	883	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Wed, 15 Jan 2025 02:49:20 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 40880 Connection: close X-Sucuri-ID: 14038 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; link: <https://androiddatahost.com/wp-json/>; rel="https://api.w.org/" link: <https://androiddatahost.com/wp-json/wp/v2/posts/1212>; rel="alternate"; title="JSON"; type="application/json" link: <https://androiddatahost.com/?p=1212>; rel=shortlink last-modified: Tue, 14 Jan 2025 19:01:02 GMT content-encoding: gzip vary: Accept-Encoding alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" X-Sucuri-Cache: REVALIDATED
2025-01-15 02:49:20 UTC	7309	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 7b 7b e2 b8 92 38 fc f7 e6 79 7e df c1 ed d9 d3 03 13 43 6c 73 87 a6 7b 49 20 09 3d 81 a4 03 49 77 3a 93 ed c7 d8 06 9c 18 9b c1 26 09 09 7c f7 b7 4a 17 5f c0 24 99 cb 39 7b f6 79 f7 cc 69 a7 90 4a 25 a9 54 2a 55 95 64 f9 c3 bb e6 e9 41 ff ea ac 25 8c fd 89 fd 51 f8 80 7f 04 5b 73 46 75 d1 74 44 4c 30 35 03 fe 4c 4c 5f 13 f4 b1 36 f3 4c bf 2e 5e f4 0f 33 65 91 27 3b da c4 ac 8b f7 96 f9 30 75 67 be 28 e8 ae e3 9b 0e a0 3d 58 86 3f ae 1b e6 bd a5 9b 19 f2 43 b2 1c cb b7 34 3b e3 e9 9a 6d d6 15 69 ee 99 33 f2 43 1b c0 6f c7 45 a2 b6 e5 dc 09 33 d3 ae 8b da 74 6a 9b 19 df 9d eb e3 8c 05 64 45 c1 b3 9e 4c af 2e 2a 65 f9 11 fe 89 c2 78 66 0e eb e2 d8 f7 a7 5e 75 6f 4f 73 8c 99 6b 19 86 e6 6b 63 d7 f3 b3 ba 3b d9 5b a7 91 9d Data Ascii: {{8y~Cls{I =Iw:&\|J_$9{yiJ%TUdA%Q[sFutDL05LL_6L.^3e';0ug(=X?C4;mi3CoE3tjdEL.exf^uoOskkc;[
2025-01-15 02:49:20 UTC	8192	IN	Data Raw: 2c 66 21 27 ec 8c 44 e3 52 89 31 eb 57 f8 5d 2a ff fb 4a 70 31 94 16 d7 b1 17 db ba 50 a4 5d 78 d9 9e 28 c8 af 8a 5e 4e fe d7 b3 62 eb d4 fd 49 33 12 16 8c d8 96 50 e2 5e 12 2c 4b c0 87 d1 1c cb 46 57 6e d3 34 d7 16 7d a4 18 89 af c6 4e 5f aa b1 d0 6b c4 c0 08 cf dd 12 c3 b0 90 bc e8 95 64 f9 7f 50 c9 28 af 8e b4 f2 bf 43 e8 23 4d 2e e6 fe 07 39 9a d8 a2 42 89 b4 88 1d 9f dd d8 53 4d de b3 e3 6f b0 d2 ad 8b c0 84 e2 47 22 d1 56 e5 aa 0e 2c a6 f9 9d 44 9e 9e f4 d3 88 fc f0 e1 b9 36 23 fe 27 18 52 ce 56 5e 13 b1 42 f1 4f 8c d7 ab 72 b8 a5 1f 89 72 99 d8 b9 04 a1 7e a1 bf 7f 83 40 47 ac 2b ba 69 24 bf e4 15 bf 99 01 6f f6 e6 93 e3 0b ff f4 ce 47 e3 00 72 e2 ec a1 76 4e 74 73 3d d8 4c 24 5b 36 d1 9d 6b 61 c3 2c 88 1d 0c 27 2c 8d 6f 77 93 a4 d8 62 41 ab 8d 91 Data Ascii: ,f!'DR1W]*Jp1P]x(^NbI3P^,KFWn4}N_kdP(C#M.9BSMoG"V,D6#'RV^BOrr~@G+i$oGrvNts=L$[6ka,',owbA
2025-01-15 02:49:21 UTC	8192	IN	Data Raw: 5f 1f d4 f0 34 23 db 48 b9 33 17 5e 6a 94 0e 94 c1 68 4d 2d 51 b4 4f 11 29 08 a7 35 17 04 69 3b 73 cf 5b 9d d3 cb 56 13 06 bd 1a 52 f0 62 72 24 ad e9 b2 51 3a dc c4 ca 15 0b 52 b8 e3 41 8c 25 64 94 f6 a2 58 4a 49 0a 5d 03 eb 6a 8b 6c b6 be e2 c0 83 d6 48 ce c7 b8 7b 15 8d 4a be b9 88 e3 a5 85 81 f3 31 f9 7d 6d dc a4 49 d0 7c fc 29 a5 87 d6 ba 5e c7 9c eb 71 cc 33 d5 d7 ad f6 58 cd 02 37 9a 0c 29 12 3b 06 2b 48 12 89 8d 2d ad 19 e3 7a 2c 72 2c 89 24 70 0c fc 26 31 d6 f1 a7 ad b4 e3 fb 08 b4 95 b1 4d 83 aa 68 be 4c 01 f7 1c 04 30 6b 66 8b 6d 04 2c ca 10 93 73 01 9c 92 ba b9 95 60 40 23 1a 64 9c 3b be 65 0b c4 60 04 8a 71 de 66 cc 3f c7 d6 b5 40 a6 24 44 f9 bc 43 19 fd 56 3e 63 2f 89 73 bb 9d 51 af f5 2b 74 b9 00 b0 5c 83 70 ce ff bb 65 29 5a 39 ad 96 cc 32 Data Ascii: _4#H3^jhM-QO)5i;s[VRbr$Q:RA%dXJI]jlH{J1}mI\|)^q3X7);+H-z,r,$p&1MhL0kfm,s`@#d;e`qf?@$DCV>c/sQ+t\pe)Z92
2025-01-15 02:49:21 UTC	8192	IN	Data Raw: 6a 59 b9 a2 e4 25 59 d2 bc c8 35 2f 38 13 55 25 e8 8a 82 0e e7 b9 dc e5 85 cb 0b b7 58 12 fe a2 28 08 1e 21 e4 01 a6 48 48 32 52 11 0c e4 85 cb fd b4 94 47 09 14 3f ed f1 5a 2a 4b 56 65 cd 72 41 3c 17 ad d3 97 51 8a 65 de 3a a2 7e a0 be 8a 1d 81 e0 00 96 4a 88 27 94 fb 93 88 54 14 b9 14 45 e2 45 91 78 99 fb 45 05 94 85 ec 94 95 ac ca ee 20 75 41 59 8a ac d4 05 15 49 20 6a 40 fa 2b a2 4a 45 3f 82 72 f5 45 39 8a 5d 91 96 20 b1 84 8b a7 12 45 d2 5d 01 f0 80 8a 2d 33 57 69 4b 99 10 29 08 89 96 ca a2 5c 02 ab fa d8 5b 4e d0 c4 e4 2e 1b 78 f3 5b 98 d8 8d c7 ee dc 0d c0 f4 9a 6c 1c b3 d5 8f 0f 7a 43 76 7c 30 c4 cf 5f e7 2d fa d6 18 62 9b f0 1d f4 08 35 3c 92 0e 06 d5 fa e4 03 a7 c6 ce 91 9c 28 6b 14 06 0e 85 0d b8 73 42 ce 01 4f e5 b0 45 4e a7 79 de 42 fb 32 e6 Data Ascii: jY%Y5/8U%X(!HH2RG?Z*KVerA<Qe:~J'TEExE uAYI j@+JE?rE9] E]-3WiK)\[N.x[lzCv\|0_-b5<(ksBOENyB2
2025-01-15 02:49:21 UTC	8192	IN	Data Raw: 3e ac 48 ba a1 f7 cd 85 24 c9 91 b8 73 77 74 eb 45 34 c6 de e2 6e fb 87 2b 11 10 6b 03 09 c5 6c f0 41 3e c1 ff 06 42 d2 1d ba 63 7c f0 94 1c c5 02 97 bd 9d 58 08 45 6e 78 a6 09 88 b9 ab 52 f0 9d e5 12 86 5c ee 2a ad 80 43 3d 4e 99 bd 3d 1a 4d b8 64 5f 6a bb 57 df cd a7 54 46 28 af c4 11 e6 4d b6 63 7e 65 48 e2 87 6e 2f 13 bf 74 0b 53 95 fb ab f7 aa 92 e3 80 dc ef cf 1b e0 b9 44 a3 21 c2 cd 11 99 07 da 3b 60 ed c0 57 45 7a 6e bb a5 20 f7 e7 38 6d 3b b1 ea 39 1b e8 d4 73 33 f2 79 e4 7a 33 95 34 6d 5f 70 d2 1d a6 36 9f 98 12 35 c7 8d 6a 60 4f 59 da b1 e8 71 8c 2a 39 37 d9 2e b9 cd a6 a8 c8 76 93 0a ea 0a 2c b4 c8 9b c3 d8 b1 ef e3 c9 2e 7a bc 73 e4 47 0c 1f ba c2 d9 9f fb 00 d3 e9 a5 33 9f 79 11 e3 a1 d9 5a a7 8f 3f 95 cd c2 ff eb 2c 56 d9 3b 67 ee 4d 1c 3c Data Ascii: >H$swtE4n+klA>Bc\|XEnxR\C=N=Md_jWTF(Mc~eHn/tSD!;`WEzn 8m;9s3yz34m_p65j`OYq97.v,.zsG3yZ?,V;gM<
2025-01-15 02:49:21 UTC	803	IN	Data Raw: 3d 12 4c 7e 6d 70 b4 a7 2e fa ed a5 d2 97 e6 d5 ce f6 13 c2 f1 b5 a3 51 f5 3b 5d c6 c5 7b 6b 55 75 4a f6 3f 68 5d 72 37 81 79 87 77 34 d5 8d 51 63 77 f9 87 2b 0c d8 dd e5 fb f7 3c ff 6f 55 f7 72 79 95 dc f5 ae 57 f1 8d 28 cd c8 3c 54 bf 25 17 3a 3f 7c be fc 3c f9 fd f3 d5 87 78 34 6f a7 bf d7 ab 6d c9 58 26 6b ca 3d 39 9c d6 ef 7e ab 6e ec 90 ca 6a fc 06 45 dc 4b a5 76 d0 dd 7d a8 3e 3c 3b 5b fc ad fa ed 19 66 74 f9 70 b5 a7 6f bb 2a fa 70 85 87 ca c1 a9 5e e2 f7 ea d9 4d 05 49 58 df c3 50 7e ae fb 5b 7a 07 3d 97 f5 ab aa 00 ab df d4 bd c8 11 cc 11 de 60 e7 fc 12 5e e3 34 43 ab 6a 78 0c 64 f7 cd 1f 1f 42 32 97 fe 7c a3 fd 21 20 2d 56 26 5e 26 cc f8 99 69 26 c8 38 99 45 fa bb 77 f9 1b 7f ea ba 26 47 21 7e 1d ec b7 ab 6a b0 eb 5d 06 57 55 fc 30 96 50 46 9a Data Ascii: =L~mp.Q;]{kUuJ?h]r7yw4Qcw+<oUryW(<T%:?\|<x4omX&k=9~njEKv}><;[ftpo*p^MIXP~[z=`^4CjxdB2\|! -V&^&i&8Ew&G!~j]WU0PF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49707	192.124.249.38	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:21 UTC	584	OUT	GET /wp-content/plugins/wp-rocket/assets/js/wpr-beacon.min.js HTTP/1.1 Host: androiddatahost.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://androiddatahost.com/sdsd3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 02:49:21 UTC	700	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Wed, 15 Jan 2025 02:49:21 GMT Content-Type: text/javascript Content-Length: 10922 Connection: close X-Sucuri-ID: 14038 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; etag: "2aaa-677dd237-688a962;;;" last-modified: Wed, 08 Jan 2025 01:17:43 GMT accept-ranges: bytes alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2025-01-15 02:49:21 UTC	7492	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 68 3d 63 6c 61 73 73 7b 73 74 61 74 69 63 20 67 65 74 53 63 72 65 65 6e 57 69 64 74 68 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 7d 73 74 61 74 69 63 20 67 65 74 53 63 72 65 65 6e 48 65 69 67 68 74 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 7d 73 74 61 74 69 63 20 69 73 4e 6f 74 56 61 6c 69 64 53 63 72 65 65 6e 73 69 7a 65 28 65 2c 69 29 7b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 67 65 74 53 63 72 65 65 6e 57 69 64 74 68 Data Ascii: (()=>{var h=class{static getScreenWidth(){return window.innerWidth\|\|document.documentElement.clientWidth}static getScreenHeight(){return window.innerHeight\|\|document.documentElement.clientHeight}static isNotValidScreensize(e,i){const t=this.getScreenWidth
2025-01-15 02:49:21 UTC	3430	IN	Data Raw: 65 28 22 64 61 74 61 2d 72 6f 63 6b 65 74 2d 6c 6f 63 61 74 69 6f 6e 2d 68 61 73 68 22 29 3f 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 72 6f 63 6b 65 74 2d 6c 6f 63 61 74 69 6f 6e 2d 68 61 73 68 22 29 3a 22 4e 6f 20 68 61 73 68 20 64 65 74 65 63 74 65 64 22 7d 5f 67 65 74 53 76 67 55 73 65 54 61 72 67 65 74 73 28 29 7b 63 6f 6e 73 74 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 75 73 65 22 29 2c 69 3d 6e 65 77 20 53 65 74 3b 72 65 74 75 72 6e 20 65 2e 66 6f 72 45 61 63 68 28 74 3d 3e 7b 6c 65 74 20 73 3d 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 3b 66 6f 72 28 3b 73 26 26 73 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 29 69 2e 61 64 64 28 73 29 2c 73 3d 73 2e 70 61 72 65 6e 74 45 Data Ascii: e("data-rocket-location-hash")?e.getAttribute("data-rocket-location-hash"):"No hash detected"}_getSvgUseTargets(){const e=document.querySelectorAll("use"),i=new Set;return e.forEach(t=>{let s=t.parentElement;for(;s&&s!==document.body;)i.add(s),s=s.parentE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49716	192.124.249.38	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:21 UTC	399	OUT	GET /wp-content/plugins/wp-rocket/assets/js/wpr-beacon.min.js HTTP/1.1 Host: androiddatahost.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 02:49:22 UTC	700	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Wed, 15 Jan 2025 02:49:22 GMT Content-Type: text/javascript Content-Length: 10922 Connection: close X-Sucuri-ID: 14038 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; etag: "2aaa-677dd237-688a962;;;" last-modified: Wed, 08 Jan 2025 01:17:43 GMT alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS Accept-Ranges: bytes
2025-01-15 02:49:22 UTC	7492	IN	Data Raw: 28 28 29 3d 3e 7b 76 61 72 20 68 3d 63 6c 61 73 73 7b 73 74 61 74 69 63 20 67 65 74 53 63 72 65 65 6e 57 69 64 74 68 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 7d 73 74 61 74 69 63 20 67 65 74 53 63 72 65 65 6e 48 65 69 67 68 74 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 7d 73 74 61 74 69 63 20 69 73 4e 6f 74 56 61 6c 69 64 53 63 72 65 65 6e 73 69 7a 65 28 65 2c 69 29 7b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 67 65 74 53 63 72 65 65 6e 57 69 64 74 68 Data Ascii: (()=>{var h=class{static getScreenWidth(){return window.innerWidth\|\|document.documentElement.clientWidth}static getScreenHeight(){return window.innerHeight\|\|document.documentElement.clientHeight}static isNotValidScreensize(e,i){const t=this.getScreenWidth
2025-01-15 02:49:22 UTC	3430	IN	Data Raw: 65 28 22 64 61 74 61 2d 72 6f 63 6b 65 74 2d 6c 6f 63 61 74 69 6f 6e 2d 68 61 73 68 22 29 3f 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 72 6f 63 6b 65 74 2d 6c 6f 63 61 74 69 6f 6e 2d 68 61 73 68 22 29 3a 22 4e 6f 20 68 61 73 68 20 64 65 74 65 63 74 65 64 22 7d 5f 67 65 74 53 76 67 55 73 65 54 61 72 67 65 74 73 28 29 7b 63 6f 6e 73 74 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 75 73 65 22 29 2c 69 3d 6e 65 77 20 53 65 74 3b 72 65 74 75 72 6e 20 65 2e 66 6f 72 45 61 63 68 28 74 3d 3e 7b 6c 65 74 20 73 3d 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 3b 66 6f 72 28 3b 73 26 26 73 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 29 69 2e 61 64 64 28 73 29 2c 73 3d 73 2e 70 61 72 65 6e 74 45 Data Ascii: e("data-rocket-location-hash")?e.getAttribute("data-rocket-location-hash"):"No hash detected"}_getSvgUseTargets(){const e=document.querySelectorAll("use"),i=new Set;return e.forEach(t=>{let s=t.parentElement;for(;s&&s!==document.body;)i.add(s),s=s.parentE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49730	142.250.186.98	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:24 UTC	840	OUT	GET /pagead/html/r20250113/r20190131/zrt_lookup_fy2021.html HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://androiddatahost.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 02:49:24 UTC	638	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: cafe Content-Length: 9061 X-XSS-Protection: 0 Date: Tue, 14 Jan 2025 18:39:38 GMT Expires: Tue, 28 Jan 2025 18:39:38 GMT Cache-Control: public, max-age=1209600 ETag: 7793694970870604198 Content-Type: text/html; charset=UTF-8 Vary: Accept-Encoding Age: 29386 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-15 02:49:24 UTC	752	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 6c 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 6e 2c 70 3b 61 3a 7b 66 6f 72 28 76 61 72 20 61 61 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 77 3d 6c 2c 7a 3d 30 3b 7a 3c 61 61 2e 6c 65 6e 67 74 68 3b 7a 2b 2b 29 69 66 28 77 3d 77 5b 61 61 5b 7a 5d 5d 2c 77 3d 3d 6e 75 6c 6c 29 7b 70 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 70 3d 77 Data Ascii: <!DOCTYPE html><script>(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var l=this\|\|self;var n,p;a:{for(var aa=["CLOSURE_FLAGS"],w=l,z=0;z<aa.length;z++)if(w=w[aa[z]],w==null){p=null;break a}p=w
2025-01-15 02:49:24 UTC	1390	IN	Data Raw: 47 28 61 29 7b 47 5b 22 20 22 5d 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 47 5b 22 20 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 76 61 72 20 66 61 3d 63 61 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 77 65 62 6b 69 74 22 29 21 3d 2d 31 26 26 21 43 28 22 45 64 67 65 22 29 3b 21 43 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 46 28 29 3b 46 28 29 3b 43 28 22 53 61 66 61 72 69 22 29 26 26 28 46 28 29 7c 7c 28 45 28 29 3f 30 3a 43 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 45 28 29 3f 30 3a 43 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 45 28 29 3f 30 3a 43 28 22 45 64 67 65 22 29 29 7c 7c 28 45 28 29 3f 42 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 43 28 22 45 64 67 2f 22 29 29 7c 7c 45 28 29 26 26 42 28 22 4f 70 65 72 61 Data Ascii: G(a){G[" "](a);return a}G[" "]=function(){};var fa=ca().toLowerCase().indexOf("webkit")!=-1&&!C("Edge");!C("Android")\|\|F();F();C("Safari")&&(F()\|\|(E()?0:C("Coast"))\|\|(E()?0:C("Opera"))\|\|(E()?0:C("Edge"))\|\|(E()?B("Microsoft Edge"):C("Edg/"))\|\|E()&&B("Opera
2025-01-15 02:49:24 UTC	1390	IN	Data Raw: 72 65 71 75 65 73 74 73 3d 5b 5d 29 3b 63 6f 6e 73 74 20 62 3d 70 61 28 6c 2e 64 6f 63 75 6d 65 6e 74 29 3b 62 2e 73 72 63 3d 61 3b 6c 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 2e 70 75 73 68 28 62 29 7d 3b 6c 65 74 20 4a 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 72 61 28 29 7b 69 66 28 21 4a 29 62 3a 7b 76 61 72 20 61 3d 6e 61 28 29 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 74 72 79 7b 63 6f 6e 73 74 20 63 3d 61 5b 62 5d 2e 66 72 61 6d 65 73 2e 67 6f 6f 67 6c 65 5f 65 73 66 3b 69 66 28 63 26 26 49 28 63 29 29 7b 4a 3d 63 3b 62 72 65 61 6b 20 62 7d 7d 63 61 74 63 68 28 63 29 7b 7d 4a 3d 6e 75 6c 6c 7d 28 61 3d 4a 29 3f 28 28 62 3d 61 2e 65 73 66 5f 70 72 6f 70 41 72 72 61 79 29 7c 7c 28 Data Ascii: requests=[]);const b=pa(l.document);b.src=a;l.google_image_requests.push(b)};let J=null;function ra(){if(!J)b:{var a=na();for(var b=0;b<a.length;b++)try{const c=a[b].frames.google_esf;if(c&&I(c)){J=c;break b}}catch(c){}J=null}(a=J)?((b=a.esf_propArray)\|\|(
2025-01-15 02:49:24 UTC	1390	IN	Data Raw: 69 71 75 65 49 64 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7d 7d 3b 63 6f 6e 73 74 20 4f 3d 6c 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2c 46 61 3d 21 21 28 4f 26 26 4f 2e 6d 61 72 6b 26 26 4f 2e 6d 65 61 73 75 72 65 26 26 4f 2e 63 6c 65 61 72 4d 61 72 6b 73 29 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6c 65 74 20 62 3d 21 31 2c 63 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 62 7c 7c 28 63 3d 61 28 29 2c 62 3d 21 30 29 3b 72 65 74 75 72 6e 20 63 7d 7d 28 28 29 3d 3e 7b 76 61 72 20 61 3b 69 66 28 61 3d 46 61 29 7b 76 61 72 20 62 3b 69 66 28 4d 3d 3d 3d 6e 75 6c 6c 29 7b 4d 3d 22 22 3b 74 72 79 7b 61 3d 22 22 3b 74 72 79 7b 61 3d 6c 2e 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 7d 63 61 74 63 68 28 63 29 7b 61 3d 6c 2e 6c 6f 63 61 74 69 Data Ascii: iqueId=Math.random()}};const O=l.performance,Fa=!!(O&&O.mark&&O.measure&&O.clearMarks),P=function(a){let b=!1,c;return function(){b\|\|(c=a(),b=!0);return c}}(()=>{var a;if(a=Fa){var b;if(M===null){M="";try{a="";try{a=l.top.location.hash}catch(c){a=l.locati
2025-01-15 02:49:24 UTC	1390	IN	Data Raw: 3e 3d 67 2e 6c 65 6e 67 74 68 29 7b 64 2d 3d 67 2e 6c 65 6e 67 74 68 3b 63 2b 3d 67 3b 66 3d 61 2e 69 3b 62 72 65 61 6b 7d 62 3d 62 3d 3d 6e 75 6c 6c 3f 68 3a 62 7d 7d 7d 61 3d 22 22 3b 62 21 3d 6e 75 6c 6c 26 26 28 61 3d 60 24 7b 66 7d 24 7b 22 74 72 6e 22 7d 3d 24 7b 62 7d 60 29 3b 72 65 74 75 72 6e 20 63 2b 61 7d 76 61 72 20 52 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 69 3d 22 26 22 3b 74 68 69 73 2e 68 3d 7b 7d 3b 74 68 69 73 2e 6a 3d 30 3b 74 68 69 73 2e 67 3d 5b 5d 7d 7d 3b 76 61 72 20 4d 61 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 3d 6e 75 6c 6c 29 7b 74 68 69 73 2e 6d 3d 53 3b 74 68 69 73 2e 68 3d 61 3b 74 68 69 73 2e 67 3d 6e 75 6c 6c 3b 74 68 69 73 2e 69 3d 21 31 3b 74 68 69 73 2e 6f 3d 74 Data Ascii: >=g.length){d-=g.length;c+=g;f=a.i;break}b=b==null?h:b}}}a="";b!=null&&(a=`${f}${"trn"}=${b}`);return c+a}var R=class{constructor(){this.i="&";this.h={};this.j=0;this.g=[]}};var Ma=class{constructor(a=null){this.m=S;this.h=a;this.g=null;this.i=!1;this.o=t
2025-01-15 02:49:24 UTC	1390	IN	Data Raw: 3d 71 5b 34 5d 3b 79 3d 22 22 3b 44 26 26 28 79 2b 3d 44 2b 22 3a 22 29 3b 76 61 26 26 28 79 2b 3d 22 2f 2f 22 2c 79 2b 3d 76 61 2c 77 61 26 26 28 79 2b 3d 22 3a 22 2b 77 61 29 29 3b 76 61 72 20 78 61 3d 79 7d 65 6c 73 65 20 78 61 3d 22 22 3b 44 3d 74 3b 59 3d 5b 59 2c 7b 75 72 6c 3a 78 61 7d 5d 3b 44 2e 67 2e 70 75 73 68 28 35 29 3b 44 2e 68 5b 35 5d 3d 59 3b 4c 61 28 74 68 69 73 2e 6d 2c 66 2c 74 2c 74 68 69 73 2e 69 2c 63 29 7d 63 61 74 63 68 28 74 29 7b 74 72 79 7b 4c 61 28 74 68 69 73 2e 6d 2c 66 2c 7b 63 6f 6e 74 65 78 74 3a 22 65 63 6d 73 65 72 72 22 2c 72 63 74 78 3a 61 2c 6d 73 67 3a 4c 28 74 29 2c 75 72 6c 3a 65 3f 2e 67 2e 75 72 6c 3f 3f 22 22 7d 2c 74 68 69 73 2e 69 2c 63 29 7d 63 61 74 63 68 28 4e 29 7b 7d 7d 72 65 74 75 72 6e 21 30 7d 7d 3b Data Ascii: =q[4];y="";D&&(y+=D+":");va&&(y+="//",y+=va,wa&&(y+=":"+wa));var xa=y}else xa="";D=t;Y=[Y,{url:xa}];D.g.push(5);D.h[5]=Y;La(this.m,f,t,this.i,c)}catch(t){try{La(this.m,f,{context:"ecmserr",rctx:a,msg:L(t),url:e?.g.url??""},this.i,c)}catch(N){}}return!0}};
2025-01-15 02:49:24 UTC	1359	IN	Data Raw: 21 30 3b 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 22 63 6f 6d 70 6c 65 74 65 22 3f 50 61 28 29 3a 55 2e 67 26 26 68 61 28 28 29 3d 3e 7b 50 61 28 29 7d 29 7d 29 28 29 3b 76 61 72 20 51 61 3d 61 3d 3e 7b 54 2e 67 3d 62 3d 3e 7b 65 61 28 61 2c 63 3d 3e 7b 63 28 62 29 7d 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 52 61 28 61 29 7b 61 3d 61 3d 3d 3d 6e 75 6c 6c 3f 22 6e 75 6c 6c 22 3a 61 3d 3d 3d 76 6f 69 64 20 30 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 61 3b 48 3d 3d 3d 76 6f 69 64 20 30 26 26 28 48 3d 6a 61 28 29 29 3b 76 61 72 20 62 3d 48 3b 72 65 74 75 72 6e 20 6e 65 77 20 6b 61 28 62 3f 62 2e 63 72 65 61 74 65 48 54 4d 4c 28 61 29 3a 61 29 7d 3b 76 61 72 20 56 3b 69 66 28 56 3d 66 61 29 7b 76 61 72 20 57 3d 22 49 46 Data Ascii: !0;window.document.readyState=="complete"?Pa():U.g&&ha(()=>{Pa()})})();var Qa=a=>{T.g=b=>{ea(a,c=>{c(b)})}};function Ra(a){a=a===null?"null":a===void 0?"undefined":a;H===void 0&&(H=ja());var b=H;return new ka(b?b.createHTML(a):a)};var V;if(V=fa){var W="IF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49731	142.250.186.98	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:24 UTC	2167	OUT	GET /pagead/ads?client=ca-pub-2840258101411863&output=html&adk=1812271804&adf=3025194257&abgtt=6&lmt=1736881262&plat=9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&plas=174x816_l%7C193x816_r&format=0x0&url=https%3A%2F%2Fandroiddatahost.com%2Fsdsd3&pra=5&wgl=1&aihb=0&aiof=3&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~3~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aicel=33~38&aifxl=29_18~30_19&aiixl=29_5~30_6&aiict=1&aiapm=0.2&aiapmi=0.33938&aief=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736909361571&bpp=4&bdt=1272&idt=1483&shv=r20250113&mjsv=m202501080201&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=8040805227545&frm=20&pv=2&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-1 [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://androiddatahost.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 02:49:25 UTC	788	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 15 Jan 2025 02:49:25 GMT Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 15-Jan-2025 03:04:24 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 15 Jan 2025 02:49:25 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2025-01-15 02:49:25 UTC	602	IN	Data Raw: 38 30 30 30 0d 0a 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 73 72 61 5f 6c 61 74 65 72 5f 62 6c 6f 63 6b 73 20 3d 20 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 73 72 61 5f 6c 61 74 65 72 5f 62 6c 6f 63 6b 73 2e 70 75 73 68 28 7b 63 72 65 61 74 69 76 65 3a 27 5c 78 33 63 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 5c 78 33 65 5c 78 33 63 68 74 6d 6c 20 5c 78 33 65 5c 78 33 63 68 65 61 64 5c 78 33 65 5c 78 33 63 73 74 79 6c 65 5c 78 33 65 2a 20 7b 6d 61 72 67 69 6e 3a 20 30 3b 70 61 64 64 69 6e 67 3a 20 30 3b 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 7d 62 6f 64 79 20 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 35 32 2c 20 35 38 2c 20 36 35 2c 20 30 2e 36 30 30 30 30 30 29 3b 62 61 63 6b 64 72 6f 70 2d 66 69 6c Data Ascii: 8000<script>window.sra_later_blocks = [];</script><script>window.sra_later_blocks.push({creative:'\x3c!doctype html\x3e\x3chtml \x3e\x3chead\x3e\x3cstyle\x3e* {margin: 0;padding: 0;outline: none;}body {background: rgba(52, 58, 65, 0.600000);backdrop-fil
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 70 61 64 64 69 6e 67 3a 20 30 20 36 70 78 20 31 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 38 70 78 20 31 32 70 78 20 72 67 62 61 28 36 30 2c 20 36 34 2c 20 36 37 2c 20 30 2e 31 35 29 2c 20 30 70 78 20 34 70 78 20 34 70 78 20 72 67 62 61 28 36 30 2c 20 36 34 2c 20 36 37 2c 20 30 2e 33 29 3b 7d 68 74 6d 6c 20 7b 68 65 69 67 68 74 3a 20 31 30 30 25 3b 7d 2e 74 6f 70 72 6f 77 20 7b 77 69 64 74 68 3a 20 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 68 65 69 67 68 74 3a 20 32 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 7d 2e 62 74 6e 20 7b 64 69 73 70 6c 61 79 3a 20 74 61 62 6c Data Ascii: f;border-radius: 6px;padding: 0 6px 1px;position: relative;box-shadow: 0px 8px 12px rgba(60, 64, 67, 0.15), 0px 4px 4px rgba(60, 64, 67, 0.3);}html {height: 100%;}.toprow {width: 100%;display: table;height: 24px;background-color: #fff;}.btn {display: tabl
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 61 64 5c 78 33 65 5c 78 33 63 62 6f 64 79 5c 78 33 65 5c 78 33 63 64 69 76 20 69 64 5c 78 33 64 5c 78 32 32 61 64 5f 70 6f 73 69 74 69 6f 6e 5f 62 6f 78 5c 78 32 32 20 64 61 74 61 2d 6d 61 67 69 63 77 6f 72 64 5c 78 33 64 5c 78 32 32 30 34 33 66 31 30 34 62 2d 30 36 34 62 2d 34 38 65 66 2d 38 39 39 38 5c 78 32 32 5c 78 33 65 5c 78 33 63 64 69 76 20 69 64 5c 78 33 64 5c 78 32 32 63 61 72 64 5c 78 32 32 5c 78 33 65 5c 78 33 63 64 69 76 20 63 6c 61 73 73 5c 78 33 64 5c 78 32 32 74 6f 70 72 6f 77 5c 78 32 32 5c 78 33 65 5c 78 33 63 64 69 76 20 69 64 5c 78 33 64 5c 78 32 32 64 69 73 6d 69 73 73 2d 62 75 74 74 6f 6e 5c 78 32 32 20 63 6c 61 73 73 5c 78 33 64 5c 78 32 32 62 74 6e 20 73 6b 69 70 5c 78 32 32 5c 78 33 65 5c 78 33 63 64 69 76 20 73 74 79 6c 65 5c 78 Data Ascii: ad\x3e\x3cbody\x3e\x3cdiv id\x3d\x22ad_position_box\x22 data-magicword\x3d\x22043f104b-064b-48ef-8998\x22\x3e\x3cdiv id\x3d\x22card\x22\x3e\x3cdiv class\x3d\x22toprow\x22\x3e\x3cdiv id\x3d\x22dismiss-button\x22 class\x3d\x22btn skip\x22\x3e\x3cdiv style\x
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 32 20 69 64 5c 78 33 64 5c 78 32 32 61 64 5f 69 66 72 61 6d 65 5c 78 32 32 20 6e 61 6d 65 5c 78 33 64 5c 78 32 32 61 64 5f 69 66 72 61 6d 65 5c 78 32 32 20 73 63 72 6f 6c 6c 69 6e 67 5c 78 33 64 5c 78 32 32 6e 6f 5c 78 32 32 20 73 72 63 5c 78 33 64 5c 78 32 32 61 62 6f 75 74 3a 62 6c 61 6e 6b 5c 78 32 32 66 72 61 6d 65 62 6f 72 64 65 72 5c 78 33 64 5c 78 32 32 30 5c 78 32 32 77 69 64 74 68 5c 78 33 64 5c 78 32 32 31 30 33 39 70 78 5c 78 32 32 20 68 65 69 67 68 74 5c 78 33 64 5c 78 32 32 36 34 30 70 78 5c 78 32 32 73 74 79 6c 65 5c 78 33 64 5c 78 32 32 62 6f 72 64 65 72 3a 20 30 70 78 3b 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 6f 74 74 6f 6d 3b 20 77 69 64 74 68 3a 20 31 30 33 39 70 78 3b 20 68 65 69 67 68 74 3a 20 36 34 30 70 78 3b 5c 78 32 Data Ascii: 2 id\x3d\x22ad_iframe\x22 name\x3d\x22ad_iframe\x22 scrolling\x3d\x22no\x22 src\x3d\x22about:blank\x22frameborder\x3d\x220\x22width\x3d\x221039px\x22 height\x3d\x22640px\x22style\x3d\x22border: 0px; vertical-align: bottom; width: 1039px; height: 640px;\x2
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 61 72 20 63 61 5c 5c 78 33 64 5b 5c 5c 78 32 32 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 5c 5c 78 32 32 5d 2c 76 5c 5c 78 33 64 71 2c 65 61 5c 5c 78 33 64 30 3b 65 61 5c 5c 78 33 63 63 61 2e 6c 65 6e 67 74 68 3b 65 61 2b 2b 29 69 66 28 76 5c 5c 78 33 64 76 5b 63 61 5b 65 61 5d 5d 2c 76 5c 5c 78 33 64 5c 5c 78 33 64 6e 75 6c 6c 29 7b 74 5c 5c 78 33 64 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 74 5c 5c 78 33 64 76 7d 76 61 72 20 66 61 5c 5c 78 33 64 74 5c 5c 78 32 36 5c 5c 78 32 36 74 5b 36 31 30 34 30 31 33 30 31 5d 3b 62 61 5c 5c 78 33 64 66 61 21 5c 5c 78 33 64 6e 75 6c 6c 3f 66 61 3a 21 31 3b 76 61 72 20 77 3b 63 6f 6e 73 74 20 68 61 5c 5c 78 33 64 71 2e 6e 61 76 69 67 61 74 6f 72 3b 77 5c 5c 78 33 64 68 61 3f 68 61 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 Data Ascii: ar ca\\x3d[\\x22CLOSURE_FLAGS\\x22],v\\x3dq,ea\\x3d0;ea\\x3cca.length;ea++)if(v\\x3dv[ca[ea]],v\\x3d\\x3dnull){t\\x3dnull;break a}t\\x3dv}var fa\\x3dt\\x26\\x26t[610401301];ba\\x3dfa!\\x3dnull?fa:!1;var w;const ha\\x3dq.navigator;w\\x3dha?ha.userAgentData
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 64 5c 5c 78 33 64 5c 5c 78 33 64 5c 5c 78 32 32 6f 62 6a 65 63 74 5c 5c 78 32 32 5c 5c 78 32 36 5c 5c 78 32 36 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 5c 5c 78 32 36 5c 5c 78 32 36 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 5c 5c 78 33 64 5c 5c 78 33 64 5c 5c 78 33 64 4f 62 6a 65 63 74 7d 66 75 6e 63 74 69 6f 6e 20 43 28 61 29 7b 72 65 74 75 72 6e 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 2e 6c 65 6e 67 74 68 3f 21 31 3a 28 61 5b 42 5d 7c 30 29 5c 5c 78 32 36 31 3f 21 30 3a 21 31 7d 3b 63 6f 6e 73 74 20 74 61 5c 5c 78 33 64 42 69 67 49 6e 74 28 4e 75 6d 62 65 72 2e 4d 49 4e 5f 53 41 46 45 5f 49 4e 54 45 47 45 52 29 2c 75 61 5c 5c 78 33 64 42 69 67 49 6e 74 28 4e 75 6d 62 65 72 2e 4d 41 58 5f 53 41 46 45 5f 49 4e 54 45 47 45 52 29 Data Ascii: d\\x3d\\x3d\\x22object\\x22\\x26\\x26!Array.isArray(a)\\x26\\x26a.constructor\\x3d\\x3d\\x3dObject}function C(a){return!Array.isArray(a)\|\|a.length?!1:(a[B]\|0)\\x261?!0:!1};const ta\\x3dBigInt(Number.MIN_SAFE_INTEGER),ua\\x3dBigInt(Number.MAX_SAFE_INTEGER)
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 5c 78 33 64 62 28 61 2c 64 29 3b 72 65 74 75 72 6e 20 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 43 61 28 61 2c 62 2c 63 2c 64 2c 67 29 7b 63 6f 6e 73 74 20 65 5c 5c 78 33 64 64 7c 7c 63 3f 61 5b 42 5d 7c 30 3a 30 2c 66 5c 5c 78 33 64 64 3f 21 21 28 65 5c 5c 78 32 36 33 32 29 3a 76 6f 69 64 20 30 3b 64 5c 5c 78 33 64 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 29 3b 66 6f 72 28 6c 65 74 20 68 5c 5c 78 33 64 30 3b 68 5c 5c 78 33 63 64 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 64 5b 68 5d 5c 5c 78 33 64 42 61 28 64 5b 68 5d 2c 62 2c 63 2c 66 2c 67 29 3b 63 5c 5c 78 32 36 5c 5c 78 32 36 28 28 61 5c 5c 78 33 64 28 62 5c 5c 78 33 64 61 61 28 6f 61 29 29 3f 61 5b 62 5d 3a 76 6f 69 64 20 30 29 5c 5c 78 32 36 5c 5c 78 32 36 28 64 5b 6f Data Ascii: \x3db(a,d);return a}}function Ca(a,b,c,d,g){const e\\x3dd\|\|c?a[B]\|0:0,f\\x3dd?!!(e\\x2632):void 0;d\\x3dArray.prototype.slice.call(a);for(let h\\x3d0;h\\x3cd.length;h++)d[h]\\x3dBa(d[h],b,c,f,g);c\\x26\\x26((a\\x3d(b\\x3daa(oa))?a[b]:void 0)\\x26\\x26(d[o
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 33 63 5c 5c 78 33 63 31 35 7d 7d 61 5b 42 5d 5c 5c 78 33 64 62 7d 74 68 69 73 2e 75 5c 5c 78 33 64 61 7d 74 6f 4a 53 4f 4e 28 29 7b 63 6f 6e 73 74 20 61 5c 5c 78 33 64 21 48 3b 74 72 79 7b 72 65 74 75 72 6e 20 61 5c 5c 78 32 36 5c 5c 78 32 36 28 48 5c 5c 78 33 64 45 61 29 2c 49 61 28 74 68 69 73 29 7d 66 69 6e 61 6c 6c 79 7b 61 5c 5c 78 32 36 5c 5c 78 32 36 28 48 5c 5c 78 33 64 76 6f 69 64 20 30 29 7d 7d 7d 3b 20 49 2e 70 72 6f 74 6f 74 79 70 65 2e 42 5c 5c 78 33 64 70 61 3b 49 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 5c 5c 78 33 64 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 48 5c 5c 78 33 64 47 61 2c 49 61 28 74 68 69 73 29 2e 74 6f 53 74 72 69 6e 67 28 29 7d 66 69 6e 61 6c 6c 79 7b 48 5c 5c 78 33 64 76 6f 69 64 20 Data Ascii: 3c\\x3c15}}a[B]\\x3db}this.u\\x3da}toJSON(){const a\\x3d!H;try{return a\\x26\\x26(H\\x3dEa),Ia(this)}finally{a\\x26\\x26(H\\x3dvoid 0)}}}; I.prototype.B\\x3dpa;I.prototype.toString\\x3dfunction(){try{return H\\x3dGa,Ia(this).toString()}finally{H\\x3dvoid
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 2c 21 30 29 2c 50 61 5c 5c 78 33 64 6e 65 77 20 4a 28 5c 5c 78 32 32 34 35 34 31 34 38 39 32 5c 5c 78 32 32 29 2c 51 61 5c 5c 78 33 64 6e 65 77 20 4a 28 5c 5c 78 32 32 34 35 36 32 30 38 33 32 5c 5c 78 32 32 29 3b 63 6f 6e 73 74 20 52 61 5c 5c 78 33 64 52 65 67 45 78 70 28 5c 5c 78 32 32 61 64 5c 5c 5c 5c 5c 5c 5c 5c 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 5c 5c 5c 5c 5c 5c 5c 5c 2e 6e 65 74 2f 28 64 64 6d 2f 74 72 61 63 6b 69 6d 70 7c 70 63 73 2f 76 69 65 77 29 5c 5c 78 32 32 29 3b 76 61 72 20 4b 5c 5c 78 33 64 28 61 2c 62 29 5c 5c 78 33 64 5c 5c 78 33 65 61 2e 73 75 62 73 74 72 69 6e 67 28 61 2e 6c 65 6e 67 74 68 2d 37 29 5c 5c 78 33 64 5c 5c 78 33 64 5c 5c 78 32 32 5c 5c 78 32 36 61 64 75 72 6c 5c 5c 78 33 64 5c 5c 78 32 32 3f 61 2e 73 75 62 73 74 72 69 6e Data Ascii: ,!0),Pa\\x3dnew J(\\x2245414892\\x22),Qa\\x3dnew J(\\x2245620832\\x22);const Ra\\x3dRegExp(\\x22ad\\\\\\\\.doubleclick\\\\\\\\.net/(ddm/trackimp\|pcs/view)\\x22);var K\\x3d(a,b)\\x3d\\x3ea.substring(a.length-7)\\x3d\\x3d\\x22\\x26adurl\\x3d\\x22?a.substrin
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 69 66 28 21 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 29 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 74 72 79 7b 63 6f 6e 73 74 20 61 5c 5c 78 33 64 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 3b 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 61 29 3b 72 65 74 75 72 6e 20 61 5b 30 5d 2f 36 35 35 33 36 2f 36 35 35 33 36 7d 63 61 74 63 68 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 24 61 28 61 2c 62 29 7b 69 66 28 61 29 66 6f 72 28 63 6f 6e 73 74 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 5c 5c 78 32 36 5c 5c 78 Data Ascii: if(!globalThis.crypto)return Math.random();try{const a\\x3dnew Uint32Array(1);globalThis.crypto.getRandomValues(a);return a[0]/65536/65536}catch{return Math.random()}}function $a(a,b){if(a)for(const c in a)Object.prototype.hasOwnProperty.call(a,c)\\x26\\x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49732	142.250.186.98	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:24 UTC	1902	OUT	GET /pagead/ads?client=ca-pub-2840258101411863&output=html&h=280&slotname=2448584244&adk=39937659&adf=2782902954&pi=t.ma~as.2448584244&w=856&abgtt=6&fwrn=4&fwrnh=100&lmt=1736881262&rafmt=1&format=856x280&url=https%3A%2F%2Fandroiddatahost.com%2Fsdsd3&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736909361575&bpp=2&bdt=1276&idt=1551&shv=r20250113&mjsv=m202501080201&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=1&correlator=8040805227545&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=204&ady=186&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533203%2C31089542%2C31089715%2C95350245%2C31089639&oid=2&pvsid=539208937878820&tmod=1359503699&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CoeE%7C&abl=CS& [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://androiddatahost.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 02:49:25 UTC	788	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 15 Jan 2025 02:49:25 GMT Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 15-Jan-2025 03:04:24 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 15 Jan 2025 02:49:25 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2025-01-15 02:49:25 UTC	602	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 35 30 31 31 33 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 3d 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 6c 65 66 74 4d 61 72 67 69 6e 3d 22 30 22 20 74 6f 70 4d 61 72 67 69 6e 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 64 69 63 6e 66 20 3d 20 7b 7d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 6a 63 3d 22 34 32 22 20 64 61 74 61 2d 6a 63 2d 76 Data Ascii: 8000<!doctype html><html><head><script>var jscVersion = 'r20250113';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {};</script><script data-jc="42" data-jc-v
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 2f 20 76 61 72 20 75 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 77 2c 78 3b 61 3a 7b 66 6f 72 28 76 61 72 20 62 61 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 79 3d 75 2c 7a 3d 30 3b 7a 3c 62 61 2e 6c 65 6e 67 74 68 3b 7a 2b 2b 29 69 66 28 79 3d 79 5b 62 61 5b 7a 5d 5d 2c 79 3d 3d 6e 75 6c 6c 29 7b 78 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 78 3d 79 7d 76 61 72 20 63 61 3d 78 26 26 78 5b 36 31 30 34 30 31 33 30 31 5d 3b 77 3d 63 61 21 3d 6e 75 6c 6c 3f 63 61 3a 21 31 3b 76 61 72 20 42 3b 63 6f 6e 73 74 20 64 61 3d 75 2e 6e 61 76 69 67 61 74 6f 72 3b 42 3d 64 61 3f 64 61 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 Data Ascii: / var u=this\|\|self;function aa(a){return a};var w,x;a:{for(var ba=["CLOSURE_FLAGS"],y=u,z=0;z<ba.length;z++)if(y=y[ba[z]],y==null){x=null;break a}x=y}var ca=x&&x[610401301];w=ca!=null?ca:!1;var B;const da=u.navigator;B=da?da.userAgentData\|\|null:null;funct
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 3a 62 3a 22 6e 75 6c 6c 22 7d 3a 20 24 7b 61 7d 60 29 3b 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 69 66 28 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 76 61 28 62 29 7d 66 75 6e 63 74 69 6f 6e 20 76 61 28 61 29 7b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 61 29 7b 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 61 29 3f 61 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 65 20 22 62 69 67 69 6e 74 22 3a 72 65 74 75 72 6e 20 61 3e 3d 72 61 26 26 61 3c 3d 73 61 3f 4e 75 6d 62 65 72 28 61 29 3a 53 74 72 69 6e Data Ascii: :b:"null"}: ${a}`);}return a}function K(a){if(a!=null&&typeof a!=="string")throw Error();return a};function ua(a,b){return va(b)}function va(a){switch(typeof a){case "number":return isFinite(a)?a:String(a);case "bigint":return a>=ra&&a<=sa?Number(a):Strin
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 62 7c 32 35 36 29 3a 61 5b 66 5d 3d 64 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 42 61 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 6c 65 74 20 4d 3b 76 61 72 20 4e 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 61 3a 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 7b 76 61 72 20 62 3d 39 36 3b 61 3d 5b 5d 7d 65 6c 73 65 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6e 61 72 72 22 29 3b 62 3d 61 5b 49 5d 7c 30 3b 69 66 28 62 26 32 30 34 38 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 61 72 72 22 29 3b 69 66 28 62 26 36 34 29 62 72 65 61 6b 20 61 3b 76 61 72 20 63 3d 61 3b 62 7c 3d 36 34 3b 76 61 72 20 64 3d 63 2e 6c 65 6e 67 74 68 3b 69 66 28 64 26 26 28 2d 2d 64 2c 71 61 28 63 5b 64 5d 29 29 29 7b 62 Data Ascii: b\|256):a[f]=d)};function Ba(a){return a}let M;var N=class{constructor(a){a:{if(a==null){var b=96;a=[]}else{if(!Array.isArray(a))throw Error("narr");b=a[I]\|0;if(b&2048)throw Error("farr");if(b&64)break a;var c=a;b\|=64;var d=c.length;if(d&&(--d,qa(c[d]))){b
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 29 3b 76 61 72 20 50 3d 28 61 2c 62 29 3d 3e 61 2e 73 75 62 73 74 72 69 6e 67 28 61 2e 6c 65 6e 67 74 68 2d 37 29 3d 3d 22 26 61 64 75 72 6c 3d 22 3f 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 61 2e 6c 65 6e 67 74 68 2d 37 29 2b 62 2b 22 26 61 64 75 72 6c 3d 22 3a 61 2b 62 3b 66 75 6e 63 74 69 6f 6e 20 51 28 61 2c 62 2c 63 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 61 28 61 2c 62 2c 63 29 7b 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 7d 3b 76 61 72 20 4c 61 3d 52 65 67 45 78 70 28 22 5e 28 3f 3a 28 5b 5e 3a 2f 3f Data Ascii: );var P=(a,b)=>a.substring(a.length-7)=="&adurl="?a.substring(0,a.length-7)+b+"&adurl=":a+b;function Q(a,b,c){a.addEventListener&&a.addEventListener(b,c,!1)}function Ka(a,b,c){a.removeEventListener&&a.removeEventListener(b,c,!1)};var La=RegExp("^(?:([^:/?
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 57 61 28 61 2c 62 29 7b 69 66 28 61 29 66 6f 72 28 63 6f 6e 73 74 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 28 61 5b 63 5d 2c 63 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 58 61 28 61 3d 64 6f 63 75 6d 65 6e 74 29 7b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 59 61 28 61 2c 62 3d 6e 75 6c 6c 29 7b 5a 61 28 61 2c 62 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 61 28 61 2c 62 29 7b 75 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 7c 7c 28 75 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 Data Ascii: Math.random()}}function Wa(a,b){if(a)for(const c in a)Object.prototype.hasOwnProperty.call(a,c)&&b(a[c],c,a)}function Xa(a=document){return a.createElement("img")};function Ya(a,b=null){Za(a,b)}function Za(a,b){u.google_image_requests\|\|(u.google_image_req
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 62 2b 3d 22 3a 20 22 2b 61 2e 6d 65 73 73 61 67 65 29 3b 69 66 28 61 2e 73 74 61 63 6b 29 61 3a 7b 61 3d 61 2e 73 74 61 63 6b 3b 76 61 72 20 63 3d 62 3b 74 72 79 7b 61 2e 69 6e 64 65 78 4f 66 28 63 29 3d 3d 2d 31 26 26 28 61 3d 63 2b 22 5c 6e 22 2b 61 29 3b 6c 65 74 20 64 3b 66 6f 72 28 3b 61 21 3d 64 3b 29 64 3d 61 2c 61 3d 61 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 28 28 68 74 74 70 73 3f 3a 2f 2e 2e 2a 2f 29 5b 5e 2f 3a 5d 2a 3a 5c 5c 64 2b 28 3f 3a 2e 7c 5c 6e 29 2a 29 5c 5c 32 22 29 2c 22 24 31 22 29 3b 62 3d 61 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 5c 6e 20 2a 22 2c 22 67 22 29 2c 22 5c 6e 22 29 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 64 29 7b 62 3d 63 3b 62 72 65 61 6b 20 61 7d 62 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 Data Ascii: b+=": "+a.message);if(a.stack)a:{a=a.stack;var c=b;try{a.indexOf(c)==-1&&(a=c+"\n"+a);let d;for(;a!=d;)d=a,a=a.replace(RegExp("((https?:/../)[^/:]:\\d+(?:.\|\n))\\2"),"$1");b=a.replace(RegExp("\n ","g"),"\n");break a}catch(d){b=c;break a}b=void 0}retur
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 2c 63 2c 64 2c 65 29 29 26 26 66 2e 70 75 73 68 28 60 24 7b 6c 7d 3d 24 7b 67 7d 60 29 7d 29 3b 72 65 74 75 72 6e 20 66 2e 6a 6f 69 6e 28 62 29 7d 20 66 75 6e 63 74 69 6f 6e 20 70 62 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 22 22 3b 62 3d 62 7c 7c 22 26 22 3b 63 3d 63 7c 7c 22 2c 24 22 3b 74 79 70 65 6f 66 20 63 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 28 63 3d 63 2e 73 70 6c 69 74 28 22 22 29 29 3b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 7b 69 66 28 64 7c 7c 28 64 3d 30 29 2c 64 3c 63 2e 6c 65 6e 67 74 68 29 7b 63 6f 6e 73 74 20 66 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 67 3d 30 3b 67 3c 61 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 66 2e 70 75 73 68 28 70 62 28 61 5b 67 5d 2c 62 2c 63 2c 64 2b Data Ascii: ,c,d,e))&&f.push(`${l}=${g}`)});return f.join(b)} function pb(a,b,c,d,e){if(a==null)return"";b=b\|\|"&";c=c\|\|",$";typeof c==="string"&&(c=c.split(""));if(a instanceof Array){if(d\|\|(d=0),d<c.length){const f=[];for(let g=0;g<a.length;g++)f.push(pb(a[g],b,c,d+
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 65 74 20 66 3d 76 6f 69 64 20 30 3b 74 72 79 7b 63 6f 6e 73 74 20 45 3d 6e 65 77 20 73 62 3b 76 61 72 20 67 3d 45 3b 67 2e 67 2e 70 75 73 68 28 31 29 3b 67 2e 69 5b 31 5d 3d 56 28 22 63 6f 6e 74 65 78 74 22 2c 61 29 3b 62 2e 65 72 72 6f 72 26 26 62 2e 6d 65 74 61 26 26 62 2e 69 64 7c 7c 28 62 3d 6e 65 77 20 65 62 28 62 2c 7b 6d 65 73 73 61 67 65 3a 66 62 28 62 29 7d 29 29 3b 67 3d 62 3b 69 66 28 67 2e 6d 73 67 29 7b 62 3d 45 3b 76 61 72 20 6c 3d 67 2e 6d 73 67 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 35 31 32 29 3b 62 2e 67 2e 70 75 73 68 28 32 29 3b 62 2e 69 5b 32 5d 3d 56 28 22 6d 73 67 22 2c 6c 29 7d 76 61 72 20 6b 3d 67 2e 6d 65 74 61 7c 7c 7b 7d 3b 6c 3d 6b 3b 69 66 28 74 68 69 73 2e 69 29 74 72 79 7b 74 68 69 73 2e 69 28 6c 29 7d 63 61 74 63 68 28 76 Data Ascii: et f=void 0;try{const E=new sb;var g=E;g.g.push(1);g.i[1]=V("context",a);b.error&&b.meta&&b.id\|\|(b=new eb(b,{message:fb(b)}));g=b;if(g.msg){b=E;var l=g.msg.substring(0,512);b.g.push(2);b.i[2]=V("msg",l)}var k=g.meta\|\|{};l=k;if(this.i)try{this.i(l)}catch(v
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 65 63 6d 73 65 72 72 22 2c 72 63 74 78 3a 61 2c 6d 73 67 3a 66 62 28 45 29 2c 20 75 72 6c 3a 66 3f 2e 67 2e 75 72 6c 3f 3f 22 22 7d 2c 74 68 69 73 2e 6a 2c 63 29 7d 63 61 74 63 68 28 57 29 7b 7d 7d 72 65 74 75 72 6e 21 30 7d 7d 3b 63 6c 61 73 73 20 78 62 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 76 62 28 61 2c 62 2c 63 2c 64 3d 21 31 2c 65 2c 66 29 7b 69 66 28 28 64 3f 61 2e 67 3a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 3c 28 65 7c 7c 2e 30 31 29 29 74 72 79 7b 6c 65 74 20 67 3b 63 20 69 6e 73 74 61 6e 63 65 6f 66 20 73 62 3f 67 3d 63 3a 28 67 3d 6e 65 77 20 73 62 2c 57 61 28 63 2c 28 6b 2c 68 29 3d 3e 7b 76 61 72 20 6d 3d 67 3b 63 6f 6e 73 74 20 6e 3d 6d 2e 6d 2b 2b 3b 6b 3d 56 28 68 2c 6b 29 3b 6d 2e 67 2e 70 75 73 68 28 6e 29 3b 6d 2e 69 5b 6e 5d 3d 6b 7d Data Ascii: ecmserr",rctx:a,msg:fb(E), url:f?.g.url??""},this.j,c)}catch(W){}}return!0}};class xb{};function vb(a,b,c,d=!1,e,f){if((d?a.g:Math.random())<(e\|\|.01))try{let g;c instanceof sb?g=c:(g=new sb,Wa(c,(k,h)=>{var m=g;const n=m.m++;k=V(h,k);m.g.push(n);m.i[n]=k}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49733	142.250.186.98	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:24 UTC	1849	OUT	GET /pagead/ads?client=ca-pub-2840258101411863&output=html&h=280&slotname=8499285160&adk=978467678&adf=2230146881&pi=t.ma~as.8499285160&w=336&abgtt=6&lmt=1736881262&format=336x280&url=https%3A%2F%2Fandroiddatahost.com%2Fsdsd3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736909361577&bpp=1&bdt=1278&idt=1558&shv=r20250113&mjsv=m202501080201&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C856x280&nras=1&correlator=8040805227545&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=464&ady=639&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533203%2C31089542%2C31089715%2C95350245%2C31089639&oid=2&pvsid=539208937878820&tmod=1359503699&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CoeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbC [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://androiddatahost.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 02:49:25 UTC	788	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 15 Jan 2025 02:49:25 GMT Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 15-Jan-2025 03:04:24 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 15 Jan 2025 02:49:25 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2025-01-15 02:49:25 UTC	602	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 35 30 31 31 33 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 3d 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 6c 65 66 74 4d 61 72 67 69 6e 3d 22 30 22 20 74 6f 70 4d 61 72 67 69 6e 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 64 69 63 6e 66 20 3d 20 7b 7d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 6a 63 3d 22 34 32 22 20 64 61 74 61 2d 6a 63 2d 76 Data Ascii: 8000<!doctype html><html><head><script>var jscVersion = 'r20250113';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {};</script><script data-jc="42" data-jc-v
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 2f 20 76 61 72 20 75 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 77 2c 78 3b 61 3a 7b 66 6f 72 28 76 61 72 20 62 61 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 79 3d 75 2c 7a 3d 30 3b 7a 3c 62 61 2e 6c 65 6e 67 74 68 3b 7a 2b 2b 29 69 66 28 79 3d 79 5b 62 61 5b 7a 5d 5d 2c 79 3d 3d 6e 75 6c 6c 29 7b 78 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 78 3d 79 7d 76 61 72 20 63 61 3d 78 26 26 78 5b 36 31 30 34 30 31 33 30 31 5d 3b 77 3d 63 61 21 3d 6e 75 6c 6c 3f 63 61 3a 21 31 3b 76 61 72 20 42 3b 63 6f 6e 73 74 20 64 61 3d 75 2e 6e 61 76 69 67 61 74 6f 72 3b 42 3d 64 61 3f 64 61 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 Data Ascii: / var u=this\|\|self;function aa(a){return a};var w,x;a:{for(var ba=["CLOSURE_FLAGS"],y=u,z=0;z<ba.length;z++)if(y=y[ba[z]],y==null){x=null;break a}x=y}var ca=x&&x[610401301];w=ca!=null?ca:!1;var B;const da=u.navigator;B=da?da.userAgentData\|\|null:null;funct
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 3a 62 3a 22 6e 75 6c 6c 22 7d 3a 20 24 7b 61 7d 60 29 3b 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 69 66 28 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 76 61 28 62 29 7d 66 75 6e 63 74 69 6f 6e 20 76 61 28 61 29 7b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 61 29 7b 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 61 29 3f 61 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 65 20 22 62 69 67 69 6e 74 22 3a 72 65 74 75 72 6e 20 61 3e 3d 72 61 26 26 61 3c 3d 73 61 3f 4e 75 6d 62 65 72 28 61 29 3a 53 74 72 69 6e Data Ascii: :b:"null"}: ${a}`);}return a}function K(a){if(a!=null&&typeof a!=="string")throw Error();return a};function ua(a,b){return va(b)}function va(a){switch(typeof a){case "number":return isFinite(a)?a:String(a);case "bigint":return a>=ra&&a<=sa?Number(a):Strin
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 62 7c 32 35 36 29 3a 61 5b 66 5d 3d 64 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 42 61 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 6c 65 74 20 4d 3b 76 61 72 20 4e 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 61 3a 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 7b 76 61 72 20 62 3d 39 36 3b 61 3d 5b 5d 7d 65 6c 73 65 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6e 61 72 72 22 29 3b 62 3d 61 5b 49 5d 7c 30 3b 69 66 28 62 26 32 30 34 38 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 61 72 72 22 29 3b 69 66 28 62 26 36 34 29 62 72 65 61 6b 20 61 3b 76 61 72 20 63 3d 61 3b 62 7c 3d 36 34 3b 76 61 72 20 64 3d 63 2e 6c 65 6e 67 74 68 3b 69 66 28 64 26 26 28 2d 2d 64 2c 71 61 28 63 5b 64 5d 29 29 29 7b 62 Data Ascii: b\|256):a[f]=d)};function Ba(a){return a}let M;var N=class{constructor(a){a:{if(a==null){var b=96;a=[]}else{if(!Array.isArray(a))throw Error("narr");b=a[I]\|0;if(b&2048)throw Error("farr");if(b&64)break a;var c=a;b\|=64;var d=c.length;if(d&&(--d,qa(c[d]))){b
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 29 3b 76 61 72 20 50 3d 28 61 2c 62 29 3d 3e 61 2e 73 75 62 73 74 72 69 6e 67 28 61 2e 6c 65 6e 67 74 68 2d 37 29 3d 3d 22 26 61 64 75 72 6c 3d 22 3f 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 61 2e 6c 65 6e 67 74 68 2d 37 29 2b 62 2b 22 26 61 64 75 72 6c 3d 22 3a 61 2b 62 3b 66 75 6e 63 74 69 6f 6e 20 51 28 61 2c 62 2c 63 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 61 28 61 2c 62 2c 63 29 7b 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 7d 3b 76 61 72 20 4c 61 3d 52 65 67 45 78 70 28 22 5e 28 3f 3a 28 5b 5e 3a 2f 3f Data Ascii: );var P=(a,b)=>a.substring(a.length-7)=="&adurl="?a.substring(0,a.length-7)+b+"&adurl=":a+b;function Q(a,b,c){a.addEventListener&&a.addEventListener(b,c,!1)}function Ka(a,b,c){a.removeEventListener&&a.removeEventListener(b,c,!1)};var La=RegExp("^(?:([^:/?
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 57 61 28 61 2c 62 29 7b 69 66 28 61 29 66 6f 72 28 63 6f 6e 73 74 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 28 61 5b 63 5d 2c 63 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 58 61 28 61 3d 64 6f 63 75 6d 65 6e 74 29 7b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 59 61 28 61 2c 62 3d 6e 75 6c 6c 29 7b 5a 61 28 61 2c 62 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 61 28 61 2c 62 29 7b 75 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 7c 7c 28 75 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 Data Ascii: Math.random()}}function Wa(a,b){if(a)for(const c in a)Object.prototype.hasOwnProperty.call(a,c)&&b(a[c],c,a)}function Xa(a=document){return a.createElement("img")};function Ya(a,b=null){Za(a,b)}function Za(a,b){u.google_image_requests\|\|(u.google_image_req
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 62 2b 3d 22 3a 20 22 2b 61 2e 6d 65 73 73 61 67 65 29 3b 69 66 28 61 2e 73 74 61 63 6b 29 61 3a 7b 61 3d 61 2e 73 74 61 63 6b 3b 76 61 72 20 63 3d 62 3b 74 72 79 7b 61 2e 69 6e 64 65 78 4f 66 28 63 29 3d 3d 2d 31 26 26 28 61 3d 63 2b 22 5c 6e 22 2b 61 29 3b 6c 65 74 20 64 3b 66 6f 72 28 3b 61 21 3d 64 3b 29 64 3d 61 2c 61 3d 61 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 28 28 68 74 74 70 73 3f 3a 2f 2e 2e 2a 2f 29 5b 5e 2f 3a 5d 2a 3a 5c 5c 64 2b 28 3f 3a 2e 7c 5c 6e 29 2a 29 5c 5c 32 22 29 2c 22 24 31 22 29 3b 62 3d 61 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 5c 6e 20 2a 22 2c 22 67 22 29 2c 22 5c 6e 22 29 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 64 29 7b 62 3d 63 3b 62 72 65 61 6b 20 61 7d 62 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 Data Ascii: b+=": "+a.message);if(a.stack)a:{a=a.stack;var c=b;try{a.indexOf(c)==-1&&(a=c+"\n"+a);let d;for(;a!=d;)d=a,a=a.replace(RegExp("((https?:/../)[^/:]:\\d+(?:.\|\n))\\2"),"$1");b=a.replace(RegExp("\n ","g"),"\n");break a}catch(d){b=c;break a}b=void 0}retur
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 2c 63 2c 64 2c 65 29 29 26 26 66 2e 70 75 73 68 28 60 24 7b 6c 7d 3d 24 7b 67 7d 60 29 7d 29 3b 72 65 74 75 72 6e 20 66 2e 6a 6f 69 6e 28 62 29 7d 20 66 75 6e 63 74 69 6f 6e 20 70 62 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 22 22 3b 62 3d 62 7c 7c 22 26 22 3b 63 3d 63 7c 7c 22 2c 24 22 3b 74 79 70 65 6f 66 20 63 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 28 63 3d 63 2e 73 70 6c 69 74 28 22 22 29 29 3b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 7b 69 66 28 64 7c 7c 28 64 3d 30 29 2c 64 3c 63 2e 6c 65 6e 67 74 68 29 7b 63 6f 6e 73 74 20 66 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 67 3d 30 3b 67 3c 61 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 66 2e 70 75 73 68 28 70 62 28 61 5b 67 5d 2c 62 2c 63 2c 64 2b Data Ascii: ,c,d,e))&&f.push(`${l}=${g}`)});return f.join(b)} function pb(a,b,c,d,e){if(a==null)return"";b=b\|\|"&";c=c\|\|",$";typeof c==="string"&&(c=c.split(""));if(a instanceof Array){if(d\|\|(d=0),d<c.length){const f=[];for(let g=0;g<a.length;g++)f.push(pb(a[g],b,c,d+
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 65 74 20 66 3d 76 6f 69 64 20 30 3b 74 72 79 7b 63 6f 6e 73 74 20 45 3d 6e 65 77 20 73 62 3b 76 61 72 20 67 3d 45 3b 67 2e 67 2e 70 75 73 68 28 31 29 3b 67 2e 69 5b 31 5d 3d 56 28 22 63 6f 6e 74 65 78 74 22 2c 61 29 3b 62 2e 65 72 72 6f 72 26 26 62 2e 6d 65 74 61 26 26 62 2e 69 64 7c 7c 28 62 3d 6e 65 77 20 65 62 28 62 2c 7b 6d 65 73 73 61 67 65 3a 66 62 28 62 29 7d 29 29 3b 67 3d 62 3b 69 66 28 67 2e 6d 73 67 29 7b 62 3d 45 3b 76 61 72 20 6c 3d 67 2e 6d 73 67 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 35 31 32 29 3b 62 2e 67 2e 70 75 73 68 28 32 29 3b 62 2e 69 5b 32 5d 3d 56 28 22 6d 73 67 22 2c 6c 29 7d 76 61 72 20 6b 3d 67 2e 6d 65 74 61 7c 7c 7b 7d 3b 6c 3d 6b 3b 69 66 28 74 68 69 73 2e 69 29 74 72 79 7b 74 68 69 73 2e 69 28 6c 29 7d 63 61 74 63 68 28 76 Data Ascii: et f=void 0;try{const E=new sb;var g=E;g.g.push(1);g.i[1]=V("context",a);b.error&&b.meta&&b.id\|\|(b=new eb(b,{message:fb(b)}));g=b;if(g.msg){b=E;var l=g.msg.substring(0,512);b.g.push(2);b.i[2]=V("msg",l)}var k=g.meta\|\|{};l=k;if(this.i)try{this.i(l)}catch(v
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 65 63 6d 73 65 72 72 22 2c 72 63 74 78 3a 61 2c 6d 73 67 3a 66 62 28 45 29 2c 20 75 72 6c 3a 66 3f 2e 67 2e 75 72 6c 3f 3f 22 22 7d 2c 74 68 69 73 2e 6a 2c 63 29 7d 63 61 74 63 68 28 57 29 7b 7d 7d 72 65 74 75 72 6e 21 30 7d 7d 3b 63 6c 61 73 73 20 78 62 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 76 62 28 61 2c 62 2c 63 2c 64 3d 21 31 2c 65 2c 66 29 7b 69 66 28 28 64 3f 61 2e 67 3a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 3c 28 65 7c 7c 2e 30 31 29 29 74 72 79 7b 6c 65 74 20 67 3b 63 20 69 6e 73 74 61 6e 63 65 6f 66 20 73 62 3f 67 3d 63 3a 28 67 3d 6e 65 77 20 73 62 2c 57 61 28 63 2c 28 6b 2c 68 29 3d 3e 7b 76 61 72 20 6d 3d 67 3b 63 6f 6e 73 74 20 6e 3d 6d 2e 6d 2b 2b 3b 6b 3d 56 28 68 2c 6b 29 3b 6d 2e 67 2e 70 75 73 68 28 6e 29 3b 6d 2e 69 5b 6e 5d 3d 6b 7d Data Ascii: ecmserr",rctx:a,msg:fb(E), url:f?.g.url??""},this.j,c)}catch(W){}}return!0}};class xb{};function vb(a,b,c,d=!1,e,f){if((d?a.g:Math.random())<(e\|\|.01))try{let g;c instanceof sb?g=c:(g=new sb,Wa(c,(k,h)=>{var m=g;const n=m.m++;k=V(h,k);m.g.push(n);m.i[n]=k}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49734	142.250.186.98	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:24 UTC	1934	OUT	GET /pagead/ads?client=ca-pub-2840258101411863&output=html&h=280&slotname=1589304026&adk=2488830594&adf=2972800098&pi=t.ma~as.1589304026&w=856&abgtt=6&fwrn=4&fwrnh=100&lmt=1736881262&rafmt=1&format=856x280&url=https%3A%2F%2Fandroiddatahost.com%2Fsdsd3&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736909361577&bpp=1&bdt=1279&idt=1568&shv=r20250113&mjsv=m202501080201&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C856x280%2C336x280&nras=1&correlator=8040805227545&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=204&ady=1649&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533203%2C31089542%2C31089715%2C95350245%2C31089639&oid=2&pvsid=539208937878820&tmod=1359503699&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&r [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://androiddatahost.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 02:49:25 UTC	788	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 15 Jan 2025 02:49:25 GMT Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 15-Jan-2025 03:04:24 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 15 Jan 2025 02:49:25 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2025-01-15 02:49:25 UTC	602	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 35 30 31 31 33 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 3d 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 6c 65 66 74 4d 61 72 67 69 6e 3d 22 30 22 20 74 6f 70 4d 61 72 67 69 6e 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 64 69 63 6e 66 20 3d 20 7b 7d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 6a 63 3d 22 34 32 22 20 64 61 74 61 2d 6a 63 2d 76 Data Ascii: 8000<!doctype html><html><head><script>var jscVersion = 'r20250113';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {};</script><script data-jc="42" data-jc-v
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 2f 20 76 61 72 20 75 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 77 2c 78 3b 61 3a 7b 66 6f 72 28 76 61 72 20 62 61 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 79 3d 75 2c 7a 3d 30 3b 7a 3c 62 61 2e 6c 65 6e 67 74 68 3b 7a 2b 2b 29 69 66 28 79 3d 79 5b 62 61 5b 7a 5d 5d 2c 79 3d 3d 6e 75 6c 6c 29 7b 78 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 78 3d 79 7d 76 61 72 20 63 61 3d 78 26 26 78 5b 36 31 30 34 30 31 33 30 31 5d 3b 77 3d 63 61 21 3d 6e 75 6c 6c 3f 63 61 3a 21 31 3b 76 61 72 20 42 3b 63 6f 6e 73 74 20 64 61 3d 75 2e 6e 61 76 69 67 61 74 6f 72 3b 42 3d 64 61 3f 64 61 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 Data Ascii: / var u=this\|\|self;function aa(a){return a};var w,x;a:{for(var ba=["CLOSURE_FLAGS"],y=u,z=0;z<ba.length;z++)if(y=y[ba[z]],y==null){x=null;break a}x=y}var ca=x&&x[610401301];w=ca!=null?ca:!1;var B;const da=u.navigator;B=da?da.userAgentData\|\|null:null;funct
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 3a 62 3a 22 6e 75 6c 6c 22 7d 3a 20 24 7b 61 7d 60 29 3b 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 69 66 28 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 76 61 28 62 29 7d 66 75 6e 63 74 69 6f 6e 20 76 61 28 61 29 7b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 61 29 7b 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 61 29 3f 61 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 65 20 22 62 69 67 69 6e 74 22 3a 72 65 74 75 72 6e 20 61 3e 3d 72 61 26 26 61 3c 3d 73 61 3f 4e 75 6d 62 65 72 28 61 29 3a 53 74 72 69 6e Data Ascii: :b:"null"}: ${a}`);}return a}function K(a){if(a!=null&&typeof a!=="string")throw Error();return a};function ua(a,b){return va(b)}function va(a){switch(typeof a){case "number":return isFinite(a)?a:String(a);case "bigint":return a>=ra&&a<=sa?Number(a):Strin
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 62 7c 32 35 36 29 3a 61 5b 66 5d 3d 64 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 42 61 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 6c 65 74 20 4d 3b 76 61 72 20 4e 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 61 3a 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 7b 76 61 72 20 62 3d 39 36 3b 61 3d 5b 5d 7d 65 6c 73 65 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6e 61 72 72 22 29 3b 62 3d 61 5b 49 5d 7c 30 3b 69 66 28 62 26 32 30 34 38 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 61 72 72 22 29 3b 69 66 28 62 26 36 34 29 62 72 65 61 6b 20 61 3b 76 61 72 20 63 3d 61 3b 62 7c 3d 36 34 3b 76 61 72 20 64 3d 63 2e 6c 65 6e 67 74 68 3b 69 66 28 64 26 26 28 2d 2d 64 2c 71 61 28 63 5b 64 5d 29 29 29 7b 62 Data Ascii: b\|256):a[f]=d)};function Ba(a){return a}let M;var N=class{constructor(a){a:{if(a==null){var b=96;a=[]}else{if(!Array.isArray(a))throw Error("narr");b=a[I]\|0;if(b&2048)throw Error("farr");if(b&64)break a;var c=a;b\|=64;var d=c.length;if(d&&(--d,qa(c[d]))){b
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 29 3b 76 61 72 20 50 3d 28 61 2c 62 29 3d 3e 61 2e 73 75 62 73 74 72 69 6e 67 28 61 2e 6c 65 6e 67 74 68 2d 37 29 3d 3d 22 26 61 64 75 72 6c 3d 22 3f 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 61 2e 6c 65 6e 67 74 68 2d 37 29 2b 62 2b 22 26 61 64 75 72 6c 3d 22 3a 61 2b 62 3b 66 75 6e 63 74 69 6f 6e 20 51 28 61 2c 62 2c 63 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 61 28 61 2c 62 2c 63 29 7b 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 7d 3b 76 61 72 20 4c 61 3d 52 65 67 45 78 70 28 22 5e 28 3f 3a 28 5b 5e 3a 2f 3f Data Ascii: );var P=(a,b)=>a.substring(a.length-7)=="&adurl="?a.substring(0,a.length-7)+b+"&adurl=":a+b;function Q(a,b,c){a.addEventListener&&a.addEventListener(b,c,!1)}function Ka(a,b,c){a.removeEventListener&&a.removeEventListener(b,c,!1)};var La=RegExp("^(?:([^:/?
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 57 61 28 61 2c 62 29 7b 69 66 28 61 29 66 6f 72 28 63 6f 6e 73 74 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 28 61 5b 63 5d 2c 63 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 58 61 28 61 3d 64 6f 63 75 6d 65 6e 74 29 7b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 59 61 28 61 2c 62 3d 6e 75 6c 6c 29 7b 5a 61 28 61 2c 62 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 61 28 61 2c 62 29 7b 75 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 7c 7c 28 75 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 Data Ascii: Math.random()}}function Wa(a,b){if(a)for(const c in a)Object.prototype.hasOwnProperty.call(a,c)&&b(a[c],c,a)}function Xa(a=document){return a.createElement("img")};function Ya(a,b=null){Za(a,b)}function Za(a,b){u.google_image_requests\|\|(u.google_image_req
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 62 2b 3d 22 3a 20 22 2b 61 2e 6d 65 73 73 61 67 65 29 3b 69 66 28 61 2e 73 74 61 63 6b 29 61 3a 7b 61 3d 61 2e 73 74 61 63 6b 3b 76 61 72 20 63 3d 62 3b 74 72 79 7b 61 2e 69 6e 64 65 78 4f 66 28 63 29 3d 3d 2d 31 26 26 28 61 3d 63 2b 22 5c 6e 22 2b 61 29 3b 6c 65 74 20 64 3b 66 6f 72 28 3b 61 21 3d 64 3b 29 64 3d 61 2c 61 3d 61 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 28 28 68 74 74 70 73 3f 3a 2f 2e 2e 2a 2f 29 5b 5e 2f 3a 5d 2a 3a 5c 5c 64 2b 28 3f 3a 2e 7c 5c 6e 29 2a 29 5c 5c 32 22 29 2c 22 24 31 22 29 3b 62 3d 61 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 5c 6e 20 2a 22 2c 22 67 22 29 2c 22 5c 6e 22 29 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 64 29 7b 62 3d 63 3b 62 72 65 61 6b 20 61 7d 62 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 Data Ascii: b+=": "+a.message);if(a.stack)a:{a=a.stack;var c=b;try{a.indexOf(c)==-1&&(a=c+"\n"+a);let d;for(;a!=d;)d=a,a=a.replace(RegExp("((https?:/../)[^/:]:\\d+(?:.\|\n))\\2"),"$1");b=a.replace(RegExp("\n ","g"),"\n");break a}catch(d){b=c;break a}b=void 0}retur
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 2c 63 2c 64 2c 65 29 29 26 26 66 2e 70 75 73 68 28 60 24 7b 6c 7d 3d 24 7b 67 7d 60 29 7d 29 3b 72 65 74 75 72 6e 20 66 2e 6a 6f 69 6e 28 62 29 7d 20 66 75 6e 63 74 69 6f 6e 20 70 62 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 22 22 3b 62 3d 62 7c 7c 22 26 22 3b 63 3d 63 7c 7c 22 2c 24 22 3b 74 79 70 65 6f 66 20 63 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 28 63 3d 63 2e 73 70 6c 69 74 28 22 22 29 29 3b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 7b 69 66 28 64 7c 7c 28 64 3d 30 29 2c 64 3c 63 2e 6c 65 6e 67 74 68 29 7b 63 6f 6e 73 74 20 66 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 67 3d 30 3b 67 3c 61 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 66 2e 70 75 73 68 28 70 62 28 61 5b 67 5d 2c 62 2c 63 2c 64 2b Data Ascii: ,c,d,e))&&f.push(`${l}=${g}`)});return f.join(b)} function pb(a,b,c,d,e){if(a==null)return"";b=b\|\|"&";c=c\|\|",$";typeof c==="string"&&(c=c.split(""));if(a instanceof Array){if(d\|\|(d=0),d<c.length){const f=[];for(let g=0;g<a.length;g++)f.push(pb(a[g],b,c,d+
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 65 74 20 66 3d 76 6f 69 64 20 30 3b 74 72 79 7b 63 6f 6e 73 74 20 45 3d 6e 65 77 20 73 62 3b 76 61 72 20 67 3d 45 3b 67 2e 67 2e 70 75 73 68 28 31 29 3b 67 2e 69 5b 31 5d 3d 56 28 22 63 6f 6e 74 65 78 74 22 2c 61 29 3b 62 2e 65 72 72 6f 72 26 26 62 2e 6d 65 74 61 26 26 62 2e 69 64 7c 7c 28 62 3d 6e 65 77 20 65 62 28 62 2c 7b 6d 65 73 73 61 67 65 3a 66 62 28 62 29 7d 29 29 3b 67 3d 62 3b 69 66 28 67 2e 6d 73 67 29 7b 62 3d 45 3b 76 61 72 20 6c 3d 67 2e 6d 73 67 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 35 31 32 29 3b 62 2e 67 2e 70 75 73 68 28 32 29 3b 62 2e 69 5b 32 5d 3d 56 28 22 6d 73 67 22 2c 6c 29 7d 76 61 72 20 6b 3d 67 2e 6d 65 74 61 7c 7c 7b 7d 3b 6c 3d 6b 3b 69 66 28 74 68 69 73 2e 69 29 74 72 79 7b 74 68 69 73 2e 69 28 6c 29 7d 63 61 74 63 68 28 76 Data Ascii: et f=void 0;try{const E=new sb;var g=E;g.g.push(1);g.i[1]=V("context",a);b.error&&b.meta&&b.id\|\|(b=new eb(b,{message:fb(b)}));g=b;if(g.msg){b=E;var l=g.msg.substring(0,512);b.g.push(2);b.i[2]=V("msg",l)}var k=g.meta\|\|{};l=k;if(this.i)try{this.i(l)}catch(v
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 65 63 6d 73 65 72 72 22 2c 72 63 74 78 3a 61 2c 6d 73 67 3a 66 62 28 45 29 2c 20 75 72 6c 3a 66 3f 2e 67 2e 75 72 6c 3f 3f 22 22 7d 2c 74 68 69 73 2e 6a 2c 63 29 7d 63 61 74 63 68 28 57 29 7b 7d 7d 72 65 74 75 72 6e 21 30 7d 7d 3b 63 6c 61 73 73 20 78 62 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 76 62 28 61 2c 62 2c 63 2c 64 3d 21 31 2c 65 2c 66 29 7b 69 66 28 28 64 3f 61 2e 67 3a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 3c 28 65 7c 7c 2e 30 31 29 29 74 72 79 7b 6c 65 74 20 67 3b 63 20 69 6e 73 74 61 6e 63 65 6f 66 20 73 62 3f 67 3d 63 3a 28 67 3d 6e 65 77 20 73 62 2c 57 61 28 63 2c 28 6b 2c 68 29 3d 3e 7b 76 61 72 20 6d 3d 67 3b 63 6f 6e 73 74 20 6e 3d 6d 2e 6d 2b 2b 3b 6b 3d 56 28 68 2c 6b 29 3b 6d 2e 67 2e 70 75 73 68 28 6e 29 3b 6d 2e 69 5b 6e 5d 3d 6b 7d Data Ascii: ecmserr",rctx:a,msg:fb(E), url:f?.g.url??""},this.j,c)}catch(W){}}return!0}};class xb{};function vb(a,b,c,d=!1,e,f){if((d?a.g:Math.random())<(e\|\|.01))try{let g;c instanceof sb?g=c:(g=new sb,Wa(c,(k,h)=>{var m=g;const n=m.m++;k=V(h,k);m.g.push(n);m.i[n]=k}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49735	142.250.186.98	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:24 UTC	1879	OUT	GET /pagead/ads?client=ca-pub-2840258101411863&output=html&h=280&slotname=8499285160&adk=3371522416&adf=601265536&pi=t.ma~as.8499285160&w=336&abgtt=6&lmt=1736881262&format=336x280&url=https%3A%2F%2Fandroiddatahost.com%2Fsdsd3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736909361578&bpp=1&bdt=1279&idt=1576&shv=r20250113&mjsv=m202501080201&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C856x280%2C336x280%2C856x280&nras=1&correlator=8040805227545&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=464&ady=2039&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533203%2C31089542%2C31089715%2C95350245%2C31089639&oid=2&pvsid=539208937878820&tmod=1359503699&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CoeEbr%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&t [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://androiddatahost.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 02:49:25 UTC	788	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 15 Jan 2025 02:49:25 GMT Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 15-Jan-2025 03:04:24 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 15 Jan 2025 02:49:25 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2025-01-15 02:49:25 UTC	602	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 35 30 31 31 33 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 3d 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 6c 65 66 74 4d 61 72 67 69 6e 3d 22 30 22 20 74 6f 70 4d 61 72 67 69 6e 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 64 69 63 6e 66 20 3d 20 7b 7d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 6a 63 3d 22 34 32 22 20 64 61 74 61 2d 6a 63 2d 76 Data Ascii: 8000<!doctype html><html><head><script>var jscVersion = 'r20250113';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {};</script><script data-jc="42" data-jc-v
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 2f 20 76 61 72 20 75 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 77 2c 78 3b 61 3a 7b 66 6f 72 28 76 61 72 20 62 61 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 79 3d 75 2c 7a 3d 30 3b 7a 3c 62 61 2e 6c 65 6e 67 74 68 3b 7a 2b 2b 29 69 66 28 79 3d 79 5b 62 61 5b 7a 5d 5d 2c 79 3d 3d 6e 75 6c 6c 29 7b 78 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 78 3d 79 7d 76 61 72 20 63 61 3d 78 26 26 78 5b 36 31 30 34 30 31 33 30 31 5d 3b 77 3d 63 61 21 3d 6e 75 6c 6c 3f 63 61 3a 21 31 3b 76 61 72 20 42 3b 63 6f 6e 73 74 20 64 61 3d 75 2e 6e 61 76 69 67 61 74 6f 72 3b 42 3d 64 61 3f 64 61 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 Data Ascii: / var u=this\|\|self;function aa(a){return a};var w,x;a:{for(var ba=["CLOSURE_FLAGS"],y=u,z=0;z<ba.length;z++)if(y=y[ba[z]],y==null){x=null;break a}x=y}var ca=x&&x[610401301];w=ca!=null?ca:!1;var B;const da=u.navigator;B=da?da.userAgentData\|\|null:null;funct
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 3a 62 3a 22 6e 75 6c 6c 22 7d 3a 20 24 7b 61 7d 60 29 3b 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 69 66 28 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 76 61 28 62 29 7d 66 75 6e 63 74 69 6f 6e 20 76 61 28 61 29 7b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 61 29 7b 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 61 29 3f 61 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 65 20 22 62 69 67 69 6e 74 22 3a 72 65 74 75 72 6e 20 61 3e 3d 72 61 26 26 61 3c 3d 73 61 3f 4e 75 6d 62 65 72 28 61 29 3a 53 74 72 69 6e Data Ascii: :b:"null"}: ${a}`);}return a}function K(a){if(a!=null&&typeof a!=="string")throw Error();return a};function ua(a,b){return va(b)}function va(a){switch(typeof a){case "number":return isFinite(a)?a:String(a);case "bigint":return a>=ra&&a<=sa?Number(a):Strin
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 62 7c 32 35 36 29 3a 61 5b 66 5d 3d 64 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 42 61 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 6c 65 74 20 4d 3b 76 61 72 20 4e 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 61 3a 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 7b 76 61 72 20 62 3d 39 36 3b 61 3d 5b 5d 7d 65 6c 73 65 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6e 61 72 72 22 29 3b 62 3d 61 5b 49 5d 7c 30 3b 69 66 28 62 26 32 30 34 38 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 61 72 72 22 29 3b 69 66 28 62 26 36 34 29 62 72 65 61 6b 20 61 3b 76 61 72 20 63 3d 61 3b 62 7c 3d 36 34 3b 76 61 72 20 64 3d 63 2e 6c 65 6e 67 74 68 3b 69 66 28 64 26 26 28 2d 2d 64 2c 71 61 28 63 5b 64 5d 29 29 29 7b 62 Data Ascii: b\|256):a[f]=d)};function Ba(a){return a}let M;var N=class{constructor(a){a:{if(a==null){var b=96;a=[]}else{if(!Array.isArray(a))throw Error("narr");b=a[I]\|0;if(b&2048)throw Error("farr");if(b&64)break a;var c=a;b\|=64;var d=c.length;if(d&&(--d,qa(c[d]))){b
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 29 3b 76 61 72 20 50 3d 28 61 2c 62 29 3d 3e 61 2e 73 75 62 73 74 72 69 6e 67 28 61 2e 6c 65 6e 67 74 68 2d 37 29 3d 3d 22 26 61 64 75 72 6c 3d 22 3f 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 61 2e 6c 65 6e 67 74 68 2d 37 29 2b 62 2b 22 26 61 64 75 72 6c 3d 22 3a 61 2b 62 3b 66 75 6e 63 74 69 6f 6e 20 51 28 61 2c 62 2c 63 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 61 28 61 2c 62 2c 63 29 7b 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 7d 3b 76 61 72 20 4c 61 3d 52 65 67 45 78 70 28 22 5e 28 3f 3a 28 5b 5e 3a 2f 3f Data Ascii: );var P=(a,b)=>a.substring(a.length-7)=="&adurl="?a.substring(0,a.length-7)+b+"&adurl=":a+b;function Q(a,b,c){a.addEventListener&&a.addEventListener(b,c,!1)}function Ka(a,b,c){a.removeEventListener&&a.removeEventListener(b,c,!1)};var La=RegExp("^(?:([^:/?
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 57 61 28 61 2c 62 29 7b 69 66 28 61 29 66 6f 72 28 63 6f 6e 73 74 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 28 61 5b 63 5d 2c 63 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 58 61 28 61 3d 64 6f 63 75 6d 65 6e 74 29 7b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 59 61 28 61 2c 62 3d 6e 75 6c 6c 29 7b 5a 61 28 61 2c 62 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 61 28 61 2c 62 29 7b 75 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 7c 7c 28 75 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 Data Ascii: Math.random()}}function Wa(a,b){if(a)for(const c in a)Object.prototype.hasOwnProperty.call(a,c)&&b(a[c],c,a)}function Xa(a=document){return a.createElement("img")};function Ya(a,b=null){Za(a,b)}function Za(a,b){u.google_image_requests\|\|(u.google_image_req
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 62 2b 3d 22 3a 20 22 2b 61 2e 6d 65 73 73 61 67 65 29 3b 69 66 28 61 2e 73 74 61 63 6b 29 61 3a 7b 61 3d 61 2e 73 74 61 63 6b 3b 76 61 72 20 63 3d 62 3b 74 72 79 7b 61 2e 69 6e 64 65 78 4f 66 28 63 29 3d 3d 2d 31 26 26 28 61 3d 63 2b 22 5c 6e 22 2b 61 29 3b 6c 65 74 20 64 3b 66 6f 72 28 3b 61 21 3d 64 3b 29 64 3d 61 2c 61 3d 61 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 28 28 68 74 74 70 73 3f 3a 2f 2e 2e 2a 2f 29 5b 5e 2f 3a 5d 2a 3a 5c 5c 64 2b 28 3f 3a 2e 7c 5c 6e 29 2a 29 5c 5c 32 22 29 2c 22 24 31 22 29 3b 62 3d 61 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 5c 6e 20 2a 22 2c 22 67 22 29 2c 22 5c 6e 22 29 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 64 29 7b 62 3d 63 3b 62 72 65 61 6b 20 61 7d 62 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 Data Ascii: b+=": "+a.message);if(a.stack)a:{a=a.stack;var c=b;try{a.indexOf(c)==-1&&(a=c+"\n"+a);let d;for(;a!=d;)d=a,a=a.replace(RegExp("((https?:/../)[^/:]:\\d+(?:.\|\n))\\2"),"$1");b=a.replace(RegExp("\n ","g"),"\n");break a}catch(d){b=c;break a}b=void 0}retur
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 2c 63 2c 64 2c 65 29 29 26 26 66 2e 70 75 73 68 28 60 24 7b 6c 7d 3d 24 7b 67 7d 60 29 7d 29 3b 72 65 74 75 72 6e 20 66 2e 6a 6f 69 6e 28 62 29 7d 20 66 75 6e 63 74 69 6f 6e 20 70 62 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 22 22 3b 62 3d 62 7c 7c 22 26 22 3b 63 3d 63 7c 7c 22 2c 24 22 3b 74 79 70 65 6f 66 20 63 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 28 63 3d 63 2e 73 70 6c 69 74 28 22 22 29 29 3b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 7b 69 66 28 64 7c 7c 28 64 3d 30 29 2c 64 3c 63 2e 6c 65 6e 67 74 68 29 7b 63 6f 6e 73 74 20 66 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 67 3d 30 3b 67 3c 61 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 66 2e 70 75 73 68 28 70 62 28 61 5b 67 5d 2c 62 2c 63 2c 64 2b Data Ascii: ,c,d,e))&&f.push(`${l}=${g}`)});return f.join(b)} function pb(a,b,c,d,e){if(a==null)return"";b=b\|\|"&";c=c\|\|",$";typeof c==="string"&&(c=c.split(""));if(a instanceof Array){if(d\|\|(d=0),d<c.length){const f=[];for(let g=0;g<a.length;g++)f.push(pb(a[g],b,c,d+
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 65 74 20 66 3d 76 6f 69 64 20 30 3b 74 72 79 7b 63 6f 6e 73 74 20 45 3d 6e 65 77 20 73 62 3b 76 61 72 20 67 3d 45 3b 67 2e 67 2e 70 75 73 68 28 31 29 3b 67 2e 69 5b 31 5d 3d 56 28 22 63 6f 6e 74 65 78 74 22 2c 61 29 3b 62 2e 65 72 72 6f 72 26 26 62 2e 6d 65 74 61 26 26 62 2e 69 64 7c 7c 28 62 3d 6e 65 77 20 65 62 28 62 2c 7b 6d 65 73 73 61 67 65 3a 66 62 28 62 29 7d 29 29 3b 67 3d 62 3b 69 66 28 67 2e 6d 73 67 29 7b 62 3d 45 3b 76 61 72 20 6c 3d 67 2e 6d 73 67 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 35 31 32 29 3b 62 2e 67 2e 70 75 73 68 28 32 29 3b 62 2e 69 5b 32 5d 3d 56 28 22 6d 73 67 22 2c 6c 29 7d 76 61 72 20 6b 3d 67 2e 6d 65 74 61 7c 7c 7b 7d 3b 6c 3d 6b 3b 69 66 28 74 68 69 73 2e 69 29 74 72 79 7b 74 68 69 73 2e 69 28 6c 29 7d 63 61 74 63 68 28 76 Data Ascii: et f=void 0;try{const E=new sb;var g=E;g.g.push(1);g.i[1]=V("context",a);b.error&&b.meta&&b.id\|\|(b=new eb(b,{message:fb(b)}));g=b;if(g.msg){b=E;var l=g.msg.substring(0,512);b.g.push(2);b.i[2]=V("msg",l)}var k=g.meta\|\|{};l=k;if(this.i)try{this.i(l)}catch(v
2025-01-15 02:49:25 UTC	1390	IN	Data Raw: 65 63 6d 73 65 72 72 22 2c 72 63 74 78 3a 61 2c 6d 73 67 3a 66 62 28 45 29 2c 20 75 72 6c 3a 66 3f 2e 67 2e 75 72 6c 3f 3f 22 22 7d 2c 74 68 69 73 2e 6a 2c 63 29 7d 63 61 74 63 68 28 57 29 7b 7d 7d 72 65 74 75 72 6e 21 30 7d 7d 3b 63 6c 61 73 73 20 78 62 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 76 62 28 61 2c 62 2c 63 2c 64 3d 21 31 2c 65 2c 66 29 7b 69 66 28 28 64 3f 61 2e 67 3a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 3c 28 65 7c 7c 2e 30 31 29 29 74 72 79 7b 6c 65 74 20 67 3b 63 20 69 6e 73 74 61 6e 63 65 6f 66 20 73 62 3f 67 3d 63 3a 28 67 3d 6e 65 77 20 73 62 2c 57 61 28 63 2c 28 6b 2c 68 29 3d 3e 7b 76 61 72 20 6d 3d 67 3b 63 6f 6e 73 74 20 6e 3d 6d 2e 6d 2b 2b 3b 6b 3d 56 28 68 2c 6b 29 3b 6d 2e 67 2e 70 75 73 68 28 6e 29 3b 6d 2e 69 5b 6e 5d 3d 6b 7d Data Ascii: ecmserr",rctx:a,msg:fb(E), url:f?.g.url??""},this.j,c)}catch(W){}}return!0}};class xb{};function vb(a,b,c,d=!1,e,f){if((d?a.g:Math.random())<(e\|\|.01))try{let g;c instanceof sb?g=c:(g=new sb,Wa(c,(k,h)=>{var m=g;const n=m.m++;k=V(h,k);m.g.push(n);m.i[n]=k}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49740	192.124.249.38	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:25 UTC	543	OUT	GET /site.webmanifest HTTP/1.1 Host: androiddatahost.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://androiddatahost.com/sdsd3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 02:49:25 UTC	631	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Wed, 15 Jan 2025 02:49:25 GMT Content-Type: application/octet-stream Content-Length: 480 Connection: close X-Sucuri-ID: 14038 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; etag: "1e0-64711425-54834a4;;;" last-modified: Fri, 26 May 2023 20:18:45 GMT alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" X-Sucuri-Cache: HIT Accept-Ranges: bytes
2025-01-15 02:49:25 UTC	480	IN	Data Raw: 7b 0a 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 41 44 48 22 2c 0a 20 20 20 20 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 20 22 41 44 48 22 2c 0a 20 20 20 20 22 69 63 6f 6e 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 2f 61 6e 64 72 6f 69 64 2d 63 68 72 6f 6d 65 2d 31 39 32 78 31 39 32 2e 70 6e 67 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 22 31 39 32 78 31 39 32 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 2f 70 6e 67 22 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 2f 61 6e 64 72 6f 69 64 2d 63 68 72 6f 6d 65 2d 35 31 32 78 35 31 32 2e 70 6e 67 22 2c Data Ascii: { "name": "ADH", "short_name": "ADH", "icons": [ { "src": "/android-chrome-192x192.png", "sizes": "192x192", "type": "image/png" }, { "src": "/android-chrome-512x512.png",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49742	142.250.186.98	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:25 UTC	2579	OUT	GET /pagead/adview?ai=Ce9lBNCKHZ4WqI-Gpx_APx5j5gAe9qs_Ndemi3NbEEsCNtwEQASAAYMmWy4vEpPwPggEXY2EtcHViLTI4NDAyNTgxMDE0MTE4NjPIAQmoAwHIAwKqBNcBT9DoNuiUZHUdweH8KgQzKbK61CX76_bOcrmrgzhaUeHoMTasQ-dMvmCj4l3HctP9sLbGPKzpHu3yRlkNcUSt0vEJsN7c2HP5dJPXWqLeVcTqW5Z6SMmymcwllFNe6Yk344XLgVxvr1U4BCfTYIwiAHCU_JDF5FIbOSHrswXCwvyFYSgN2CsX3DjE8l0n3sUW6UI1_NjZLmFoqVCf6SynkgviT9opKtGpiuVavOqoSC409gL9Le82gZ2X2VfqGhyZ_K8Id_ZssE8RI0OlR2gNYK6UXVE_x0KABpqs7Zf5__P85QGgBiGoB6a-G6gHltgbqAeqm7ECqAf_nrECqAffn7ECqAetvrEC2AcA0ggkCIBhEAEyAooCOguAQIDAgICAoKiAAki9_cE6WJHwus3b9ooDgAoB-gsCCAGADAHQFQGAFwGyFxwKGBIUcHViLTI4NDAyNTgxMDE0MTE4NjMYABgM&sigh=FTSn9xkY3C0&uach_m=%5BUACH%5D&cid=CAQSTwCa7L7daosxhDwEOP4OczbnRoWulX9WY3LBBNUBPpuH-RcSRc9uPCkjRcNGA89EaJkyxS51uvMT8aKC0oftGN15oHJIW8u0Cgw8nGcsrO4YAQ HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2840258101411863&output=html&h=280&slotname=1589304026&adk=2488830594&adf=2972800098&pi=t.ma~as.1589304026&w=856&abgtt=6&fwrn=4&fwrnh=100&lmt=1736881262&rafmt=1&format=856x280&url=https%3A%2F%2Fandroiddatahost.com%2Fsdsd3&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736909361577&bpp=1&bdt=1279&idt=1568&shv=r20250113&mjsv=m202501080201&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C856x280%2C336x280&nras=1&correlator=8040805227545&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=204&ady=1649&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533203%2C31089542%2C31089715%2C95350245%2C31089639&oid=2&pvsid=539208937878820&tmod=1359503699&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C12 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2025-01-15 02:49:26 UTC	1013	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 15 Jan 2025 02:49:26 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUnbU-NmvTifVqwq0yZ1fP3SkHVxKWHpOMVBxEF-Ito7T4QgjYCvyETlmVSybNY; expires=Fri, 15-Jan-2027 02:49:26 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Wed, 15 Jan 2025 02:49:26 GMT Cache-Control: private Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49749	142.250.186.98	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:25 UTC	2524	OUT	GET /pagead/adview?ai=CFPDfNCKHZ-i4JLy_x_APlLjtoAK9qs_Ndemi3NbEEsCNtwEQASAAYMmWy4vEpPwPggEXY2EtcHViLTI4NDAyNTgxMDE0MTE4NjPIAQmoAwHIAwKqBNcBT9BzfWUBQRlZbMayk2xZ2PsMoHrGWEmT1JkE9g69N58ArmaiqK2HlITxYx7QgNaJQx2wt1seuKcef_1A3pVOCzbA2hg05tiqpL2UTn5Js2nFcjUF7agZl9I4McETJ_LDzxOHIQ6obx2dC18QTx-oOsnzsWLtjor1k3MCbopsxUwK6E3xvkhy0BOUVEdXWYCW6p8Bosf5kTkoIvksQbcbnOsbPixXguIfSkCBLoLK64KVQu8fmfJ87fGq-kRLc3ZrI-AU6WXKHGzvUQL9bAt1C-9k_cDfNIKABpqs7Zf5__P85QGgBiGoB6a-G6gHltgbqAeqm7ECqAf_nrECqAffn7ECqAetvrEC2AcA0ggkCIBhEAEyAooCOguAQIDAgICAoKiAAki9_cE6WML9u83b9ooDgAoB-gsCCAGADAHQFQGAFwGyFxwKGBIUcHViLTI4NDAyNTgxMDE0MTE4NjMYABgM&sigh=FlZf2KQFH94&uach_m=%5BUACH%5D&cid=CAQSTwCa7L7dxapE7wWzQROX7OOdYEdVIW8XMOL9DoWpVWPr2dO-vtXKbAsg1HfWIeXPZLtNxQU5eaRT4TdCClwz9xInoMoQqpE_1rGtrVH-buMYAQ HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2840258101411863&output=html&h=280&slotname=8499285160&adk=3371522416&adf=601265536&pi=t.ma~as.8499285160&w=336&abgtt=6&lmt=1736881262&format=336x280&url=https%3A%2F%2Fandroiddatahost.com%2Fsdsd3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736909361578&bpp=1&bdt=1279&idt=1576&shv=r20250113&mjsv=m202501080201&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C856x280%2C336x280%2C856x280&nras=1&correlator=8040805227545&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=464&ady=2039&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533203%2C31089542%2C31089715%2C95350245%2C31089639&oid=2&pvsid=539208937878820&tmod=1359503699&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CoeEb [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2025-01-15 02:49:26 UTC	1013	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 15 Jan 2025 02:49:26 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUlabMD6ll5_3gm75ZQodyk7HUznoGWrniSqUeAMOIudeC0QBW3HBBQ3YUiDiBY; expires=Fri, 15-Jan-2027 02:49:26 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Wed, 15 Jan 2025 02:49:26 GMT Cache-Control: private Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49753	142.250.186.98	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:25 UTC	2484	OUT	GET /pagead/adview?ai=CPe1WNCKHZ_-kItemx_APw-iu2A69qs_Ndemi3NbEEsCNtwEQASAAYMmWy4vEpPwPggEXY2EtcHViLTI4NDAyNTgxMDE0MTE4NjPIAQmoAwHIAwKqBNEBT9B-WcbwooRGWVBhVESMskTAZ4pSSHzVQHbRNgko04tKFckoRrXfdTEo_5R_P_uGjxj380ahW2rxN0sHn2Fppx2sKFokGLWoJIp8kiyhEC6FetALp1PNlsKJhouvL5msZdu-6m1XxPnx--z_dmxY1LTeR8IR4GGgaKiwPiIo6WLtCq8DvlNkwziyeopKxnxMzXx_gt-URuwxOi5GdaOyI_hEatGdMEC_1cgIUxOX6gQ22RhJXwi5wMmRKNmb7abpKs0yhzKEwZSPGNioKw2jJQKABpqs7Zf5__P85QGgBiGoB6a-G6gHltgbqAeqm7ECqAf_nrECqAffn7ECqAetvrEC2AcA0ggkCIBhEAEyAooCOguAQIDAgICAoKiAAki9_cE6WPTsuc3b9ooDgAoB-gsCCAGADAHQFQGAFwGyFxwKGBIUcHViLTI4NDAyNTgxMDE0MTE4NjMYABgM&sigh=ZWtW9IDO94M&uach_m=%5BUACH%5D&cid=CAQSTgCa7L7dSW0PiL7yYolxCVmMh06nEePYuqlSGMyaFdKSydCCRqasFRLX5D9-116-aNp-Ok7p-nC8ltNex0RnoQWWsZPWW_eRUZ_MgV3y-xgB HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2840258101411863&output=html&h=280&slotname=8499285160&adk=978467678&adf=2230146881&pi=t.ma~as.8499285160&w=336&abgtt=6&lmt=1736881262&format=336x280&url=https%3A%2F%2Fandroiddatahost.com%2Fsdsd3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736909361577&bpp=1&bdt=1278&idt=1558&shv=r20250113&mjsv=m202501080201&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0%2C856x280&nras=1&correlator=8040805227545&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=464&ady=639&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533203%2C31089542%2C31089715%2C95350245%2C31089639&oid=2&pvsid=539208937878820&tmod=1359503699&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CoeE%7C&abl=CS&pfx=0&fu=0& [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2025-01-15 02:49:26 UTC	1013	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 15 Jan 2025 02:49:26 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUmTi409006ZPLrw0Hm6PRqIc2Fosaqp9nOCjlIeAk-_T6iOJajn-jllN2l_jHU; expires=Fri, 15-Jan-2027 02:49:26 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Wed, 15 Jan 2025 02:49:26 GMT Cache-Control: private Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49754	142.250.186.98	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:25 UTC	2538	OUT	GET /pagead/adview?ai=Cwd0LNCKHZ5_jIeSWx_APrMukUL2qz8116aLc1sQSwI23ARABIABgyZbLi8Sk_A-CARdjYS1wdWItMjg0MDI1ODEwMTQxMTg2M8gBCagDAcgDAqoE0QFP0LGg-Vd9KdxqQwYVXv7dV62k_Pw1C4rVBIxi-Gr980ewd8A-QP-4HR74RN2Ctt2wVPkLDrStbuVy7KKdTI_QWNPCnMs6pq8uuFHHZBIWhkzgX9p8dPIkAQCRwrZMqH0ODXz7chHlRHTkDIOeQ0fTLqO0q0k_r_Z7Ci7Vy8we5i4bjuuwwoQZATlBVhB77wG8f40sHfR0JqVw_6gn8s8w6BzoPM8gjWpb8thcwhvc9SNfBVgixoasLNqEOeGLyj6jVRJyzGQtaIZHG1haIZIq_YAGmqztl_n_8_zlAaAGIagHpr4bqAeW2BuoB6qbsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCQIgGEQATICigI6C4BAgMCAgICgqIACSL39wTpY_Km5zdv2igOACgH6CwIIAYAMAdAVAYAXAbIXHAoYEhRwdWItMjg0MDI1ODEwMTQxMTg2MxgAGAw&sigh=Bmj6HpcG_Ks&uach_m=%5BUACH%5D&cid=CAQSTwCa7L7dNpLe2c8cdaZnoUlDXDHcDxMKdHfYZXlAeMpZaaysjIM4ZzleToZlSH8kBGPhOJeiSY3ngjUptty6rJWoFu4OIPo-JARlZdt6D-AYAQ HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-2840258101411863&output=html&h=280&slotname=2448584244&adk=39937659&adf=2782902954&pi=t.ma~as.2448584244&w=856&abgtt=6&fwrn=4&fwrnh=100&lmt=1736881262&rafmt=1&format=856x280&url=https%3A%2F%2Fandroiddatahost.com%2Fsdsd3&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736909361575&bpp=2&bdt=1276&idt=1551&shv=r20250113&mjsv=m202501080201&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=1&correlator=8040805227545&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=204&ady=186&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533203%2C31089542%2C31089715%2C95350245%2C31089639&oid=2&pvsid=539208937878820&tmod=1359503699&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2025-01-15 02:49:26 UTC	1013	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 15 Jan 2025 02:49:26 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUm9YsVInCwq_kuLG4Eoy4GuHk43hyeVzgbbZa3d16vwPQ6hkEJ5gfvmZT0zHrk; expires=Fri, 15-Jan-2027 02:49:26 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Wed, 15 Jan 2025 02:49:26 GMT Cache-Control: private Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49758	104.21.80.92	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:26 UTC	616	OUT	GET /ng-assets/creative/assets/polyfills-a3f452c3.js HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://googleads.g.doubleclick.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 02:49:26 UTC	1286	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 02:49:26 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close X-GUploader-UploadID: AFiumC6BArWp07Ay8GUJVDEWq_mLQHfz1UTi2Px9sPVEELzVoVljGnIiNqt285kJH_KEjEcFPB18qRE x-goog-generation: 1735219395738068 x-goog-metageneration: 2 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 11824 x-goog-hash: crc32c=i96MsA== x-goog-hash: md5=ZZoexljHe5yTbIVrm3KlSA== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Wed, 15 Jan 2025 02:14:11 GMT Cache-Control: public, max-age=14400 Last-Modified: Thu, 26 Dec 2024 13:23:15 GMT ETag: W/"659a1ec658c77b9c936c856b9b72a548" Vary: Accept-Encoding Age: 2529 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oHhmNphHBCAK%2BUaVzBGmjcAmtOazIF%2BBqjDTsOw0RCN4%2FN1H9P%2F73MOUb4FxsvF1lFWkxdyqtdPkLqyIIusFzfqxqrmBpixd%2BGoxKuWQgsq0u3NPnJROT%2Fz73dolIQTRU3iA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 90228d736e5643fa-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 02:49:26 UTC	216	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 37 36 38 26 6d 69 6e 5f 72 74 74 3d 31 37 35 33 26 72 74 74 5f 76 61 72 3d 36 38 38 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 37 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 33 33 39 26 72 65 63 76 5f 62 79 74 65 73 3d 31 31 39 34 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 35 35 34 38 34 35 26 63 77 6e 64 3d 31 35 39 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 32 63 35 33 61 66 66 38 37 36 63 64 64 66 62 63 26 74 73 3d 31 33 36 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=1768&min_rtt=1753&rtt_var=688&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2339&recv_bytes=1194&delivery_rate=1554845&cwnd=159&unsent_bytes=0&cid=2c53aff876cddfbc&ts=136&x=0"
2025-01-15 02:49:26 UTC	1236	IN	Data Raw: 32 65 33 30 0d 0a 65 78 70 6f 72 74 20 66 75 6e 63 74 69 6f 6e 20 5f 5f 76 69 74 65 5f 6c 65 67 61 63 79 5f 67 75 61 72 64 28 29 7b 69 6d 70 6f 72 74 2e 6d 65 74 61 2e 75 72 6c 3b 69 6d 70 6f 72 74 28 22 5f 22 29 2e 63 61 74 63 68 28 28 29 3d 3e 31 29 3b 28 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 7d 29 28 29 2e 6e 65 78 74 28 29 7d 3b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 Data Ascii: 2e30export function __vite_legacy_guard(){import.meta.url;import("_").catch(()=>1);(async function*(){})().next()};var t="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof se
2025-01-15 02:49:26 UTC	1369	IN	Data Raw: 6f 53 74 72 69 6e 67 29 2c 50 3d 53 28 22 22 2e 73 6c 69 63 65 29 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 50 28 6a 28 74 29 2c 38 2c 2d 31 29 7d 2c 54 3d 6f 2c 41 3d 45 2c 46 3d 4f 62 6a 65 63 74 2c 78 3d 4f 28 22 22 2e 73 70 6c 69 74 29 2c 4d 3d 54 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 46 28 22 7a 22 29 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 28 30 29 7d 29 29 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 53 74 72 69 6e 67 22 3d 3d 3d 41 28 74 29 3f 78 28 74 2c 22 22 29 3a 46 28 74 29 7d 3a 46 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 7d 2c 49 3d 43 2c 6b 3d 54 79 70 65 45 72 72 6f 72 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 74 29 Data Ascii: oString),P=S("".slice),E=function(t){return P(j(t),8,-1)},T=o,A=E,F=Object,x=O("".split),M=T((function(){return!F("z").propertyIsEnumerable(0)}))?function(t){return"String"===A(t)?x(t,""):F(t)}:F,C=function(t){return null==t},I=C,k=TypeError,z=function(t)
2025-01-15 02:49:26 UTC	1369	IN	Data Raw: 28 6e 29 7b 72 65 74 75 72 6e 22 4f 62 6a 65 63 74 22 7d 7d 2c 73 74 3d 54 79 70 65 45 72 72 6f 72 2c 70 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 66 74 28 74 29 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 6e 65 77 20 73 74 28 6c 74 28 74 29 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 2c 79 74 3d 70 74 2c 62 74 3d 43 2c 76 74 3d 66 2c 67 74 3d 5f 2c 68 74 3d 55 2c 64 74 3d 54 79 70 65 45 72 72 6f 72 2c 6d 74 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 77 74 3d 72 2c 4f 74 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 53 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 74 72 79 7b 4f 74 28 77 74 2c 74 2c 7b 76 61 6c 75 65 3a 6e 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c Data Ascii: (n){return"Object"}},st=TypeError,pt=function(t){if(ft(t))return t;throw new st(lt(t)+" is not a function")},yt=pt,bt=C,vt=f,gt=_,ht=U,dt=TypeError,mt={exports:{}},wt=r,Ot=Object.defineProperty,St=function(t,n){try{Ot(wt,t,{value:n,configurable:!0,writabl
2025-01-15 02:49:26 UTC	1369	IN	Data Raw: 6e 76 65 72 74 20 6f 62 6a 65 63 74 20 74 6f 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 22 29 7d 2c 6e 6e 3d 54 79 70 65 45 72 72 6f 72 2c 72 6e 3d 59 74 28 22 74 6f 50 72 69 6d 69 74 69 76 65 22 29 2c 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 69 66 28 21 4a 74 28 74 29 7c 7c 51 74 28 74 29 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 72 2c 65 3d 5a 74 28 74 2c 72 6e 29 3b 69 66 28 65 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 22 64 65 66 61 75 6c 74 22 29 2c 72 3d 48 74 28 65 2c 74 2c 6e 29 2c 21 4a 74 28 72 29 7c 7c 51 74 28 72 29 29 72 65 74 75 72 6e 20 72 3b 74 68 72 6f 77 20 6e 65 77 20 6e 6e 28 22 43 61 6e 27 74 20 63 6f 6e 76 65 72 74 20 6f 62 6a 65 63 74 20 74 6f 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 22 29 7d Data Ascii: nvert object to primitive value")},nn=TypeError,rn=Yt("toPrimitive"),en=function(t,n){if(!Jt(t)\|\|Qt(t))return t;var r,e=Zt(t,rn);if(e){if(void 0===n&&(n="default"),r=Ht(e,t,n),!Jt(r)\|\|Qt(r))return r;throw new nn("Can't convert object to primitive value")}
2025-01-15 02:49:26 UTC	1369	IN	Data Raw: 21 31 7d 29 7d 72 65 74 75 72 6e 20 6b 6e 28 74 2c 6e 2c 72 29 7d 3a 6b 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 69 66 28 4d 6e 28 74 29 2c 6e 3d 43 6e 28 6e 29 2c 4d 6e 28 72 29 2c 46 6e 29 74 72 79 7b 72 65 74 75 72 6e 20 6b 6e 28 74 2c 6e 2c 72 29 7d 63 61 74 63 68 28 65 29 7b 7d 69 66 28 22 67 65 74 22 69 6e 20 72 7c 7c 22 73 65 74 22 69 6e 20 72 29 74 68 72 6f 77 20 6e 65 77 20 49 6e 28 22 41 63 63 65 73 73 6f 72 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 29 3b 72 65 74 75 72 6e 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 74 5b 6e 5d 3d 72 2e 76 61 6c 75 65 29 2c 74 7d 3b 76 61 72 20 52 6e 3d 4f 6e 2c 5f 6e 3d 67 2c 47 6e 3d 69 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 52 6e 2e 66 28 74 2c 6e 2c 5f 6e 28 Data Ascii: !1})}return kn(t,n,r)}:kn:function(t,n,r){if(Mn(t),n=Cn(n),Mn(r),Fn)try{return kn(t,n,r)}catch(e){}if("get"in r\|\|"set"in r)throw new In("Accessors not supported");return"value"in r&&(t[n]=r.value),t};var Rn=On,_n=g,Gn=i?function(t,n,r){return Rn.f(t,n,_n(
2025-01-15 02:49:26 UTC	1369	IN	Data Raw: 29 3f 51 6e 28 74 29 3a 4a 6e 28 74 2c 7b 7d 29 7d 2c 67 65 74 74 65 72 46 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3b 69 66 28 21 66 72 28 6e 29 7c 7c 28 72 3d 51 6e 28 6e 29 29 2e 74 79 70 65 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 67 72 28 22 49 6e 63 6f 6d 70 61 74 69 62 6c 65 20 72 65 63 65 69 76 65 72 2c 20 22 2b 74 2b 22 20 72 65 71 75 69 72 65 64 22 29 3b 72 65 74 75 72 6e 20 72 7d 7d 7d 2c 4f 72 3d 4f 2c 53 72 3d 6f 2c 6a 72 3d 5f 2c 50 72 3d 4c 74 2c 45 72 3d 69 2c 54 72 3d 56 6e 2e 43 4f 4e 46 49 47 55 52 41 42 4c 45 2c 41 72 3d 74 72 2c 46 72 3d 77 72 2e 65 6e 66 6f 72 63 65 2c 78 72 3d 77 72 2e 67 65 74 2c 4d 72 3d 53 74 72 69 6e 67 2c 43 72 3d 4f 62 6a 65 63 74 Data Ascii: )?Qn(t):Jn(t,{})},getterFor:function(t){return function(n){var r;if(!fr(n)\|\|(r=Qn(n)).type!==t)throw new gr("Incompatible receiver, "+t+" required");return r}}},Or=O,Sr=o,jr=_,Pr=Lt,Er=i,Tr=Vn.CONFIGURABLE,Ar=tr,Fr=wr.enforce,xr=wr.get,Mr=String,Cr=Object
2025-01-15 02:49:26 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 5a 72 28 74 2e 6c 65 6e 67 74 68 29 7d 2c 6e 65 3d 44 2c 72 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 58 72 28 74 29 3b 72 65 74 75 72 6e 20 72 3c 30 3f 59 72 28 72 2b 6e 2c 30 29 3a 48 72 28 72 2c 6e 29 7d 2c 65 65 3d 74 65 2c 6f 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 65 29 7b 76 61 72 20 6f 3d 6e 65 28 6e 29 2c 69 3d 65 65 28 6f 29 3b 69 66 28 30 3d 3d 3d 69 29 72 65 74 75 72 6e 21 74 26 26 2d 31 3b 76 61 72 20 75 2c 63 3d 72 65 28 65 2c 69 29 3b 69 66 28 74 26 26 72 21 3d 72 29 7b 66 6f 72 28 3b 69 3e 63 3b 29 69 66 28 28 75 3d 6f 5b 63 2b 2b 5d 29 21 3d 75 29 72 65 74 75 72 6e 21 30 7d 65 6c 73 65 20 66 6f 72 28 3b 69 3e 63 3b 63 2b 2b 29 69 66 28 Data Ascii: eturn Zr(t.length)},ne=D,re=function(t,n){var r=Xr(t);return r<0?Yr(r+n,0):Hr(r,n)},ee=te,oe=function(t){return function(n,r,e){var o=ne(n),i=ee(o);if(0===i)return!t&&-1;var u,c=re(e,i);if(t&&r!=r){for(;i>c;)if((u=o[c++])!=u)return!0}else for(;i>c;c++)if(
2025-01-15 02:49:26 UTC	1369	IN	Data Raw: 5d 3d 72 3a 47 72 2e 66 28 74 2c 6e 2c 7b 76 61 6c 75 65 3a 72 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 65 2e 6e 6f 6e 43 6f 6e 66 69 67 75 72 61 62 6c 65 2c 77 72 69 74 61 62 6c 65 3a 21 65 2e 6e 6f 6e 57 72 69 74 61 62 6c 65 7d 29 7d 72 65 74 75 72 6e 20 74 7d 2c 44 65 3d 53 74 2c 52 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 66 6f 72 28 76 61 72 20 65 3d 4f 65 28 6e 29 2c 6f 3d 6a 65 2e 66 2c 69 3d 53 65 2e 66 2c 75 3d 30 3b 75 3c 65 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 7b 76 61 72 20 63 3d 65 5b 75 5d 3b 77 65 28 74 2c 63 29 7c 7c 72 26 26 77 65 28 72 2c 63 29 7c 7c 6f 28 74 2c 63 2c 69 28 6e 2c 63 29 29 7d 7d 2c 5f 65 3d 49 65 2c 47 65 3d 45 2c 55 65 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 7c Data Ascii: ]=r:Gr.f(t,n,{value:r,enumerable:!1,configurable:!e.nonConfigurable,writable:!e.nonWritable})}return t},De=St,Re=function(t,n,r){for(var e=Oe(n),o=je.f,i=Se.f,u=0;u<e.length;u++){var c=e[u];we(t,c)\|\|r&&we(r,c)\|\|o(t,c,i(n,c))}},_e=Ie,Ge=E,Ue=Array.isArray\|
2025-01-15 02:49:26 UTC	1013	IN	Data Raw: 28 74 29 29 72 65 74 75 72 6e 21 31 3b 73 77 69 74 63 68 28 73 6f 28 74 29 29 7b 63 61 73 65 22 41 73 79 6e 63 46 75 6e 63 74 69 6f 6e 22 3a 63 61 73 65 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 3a 63 61 73 65 22 41 73 79 6e 63 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 3a 72 65 74 75 72 6e 21 31 7d 74 72 79 7b 72 65 74 75 72 6e 20 68 6f 7c 7c 21 21 67 6f 28 76 6f 2c 70 6f 28 74 29 29 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 21 30 7d 7d 3b 77 6f 2e 73 68 61 6d 3d 21 30 3b 76 61 72 20 4f 6f 3d 21 62 6f 7c 7c 66 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 6d 6f 28 6d 6f 2e 63 61 6c 6c 29 7c 7c 21 6d 6f 28 4f 62 6a 65 63 74 29 7c 7c 21 6d 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 3d 21 Data Ascii: (t))return!1;switch(so(t)){case"AsyncFunction":case"GeneratorFunction":case"AsyncGeneratorFunction":return!1}try{return ho\|\|!!go(vo,po(t))}catch(n){return!0}};wo.sham=!0;var Oo=!bo\|\|fo((function(){var t;return mo(mo.call)\|\|!mo(Object)\|\|!mo((function(){t=!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49755	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:26 UTC	1082	OUT	GET /rtimp?a=imp&cr=ext_download_prot_smrtsp&d=androiddatahost.com&gid=&im=WvqEWoub5i7-wbFq6SzlnF9uEQ6-DRvG4th9BOzKDOXmRNHtLMqI8kI53Z0ViZ8r_52kOqtFAIbK-7HqzahBdWbt4T0elE4Hsd_a2y7MgSAiHTmiImHD3pSXu5MOhUuxBE-RqPnKDqDUkf8jHa5t_x92d59EQIjgSDUm_W4POLV07Q-9CZ_IQXj8Bp87ChlsADIHCAhvgCZWQLsS_6cU6pLf0QamUAcXq869S2ZCRcQ-nPp8Y8Hx9WOBweupX6rsR4kij69CkBTzczNgD68KrydLsmLNk6mwzd3M7lpIGsvbgLHZROb3bSQix0iN79BCOHKdDjp3k1Zg3XOc0tiN74JM6M-WdxX1zuD9Kj8oTMPFzs49CGykzdU80FMi_Qs3UQPmrIXXBGxx3SwIppw2PA&p=Z4ciNAAI1QUIEdThAB5MR83lxaWzSatV77M14g&sid=546ad295-d2eb-11ef-959f-d6c599cbf4fc HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 02:49:26 UTC	1358	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:26 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=556932e6-d2eb-11ef-8317-4a791c294650; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: uid_cross=556932e6-d2eb-11ef-8317-4a791c294650; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/; SameSite=none; Secure Set-Cookie: sid=546ad295-d2eb-11ef-959f-d6c599cbf4fc; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=546ad295-d2eb-11ef-959f-d6c599cbf4fc; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure
2025-01-15 02:49:26 UTC	667	IN	Data Raw: 56 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c 65 0d 0a 63 66 2d 63 61 63 68 65 2d 73 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 38 56 77 4f 68 66 4e 6e 56 43 62 33 61 53 4d 4a 51 48 4d 36 45 33 6a 6f 45 38 36 71 66 66 38 67 5a 76 31 46 34 59 61 4c 4f 39 42 4e 4c 39 76 75 30 78 42 74 77 49 6b 46 62 38 57 71 51 64 78 6c 4e 76 66 55 75 64 48 6c 79 4c 32 4f 74 37 6a 50 46 31 64 73 4f 74 4f 74 47 6c 25 32 42 5a 5a 42 46 52 75 4c 72 53 49 56 6c 56 49 70 43 42 46 35 63 33 56 55 6a 49 48 6f 4f 4c 25 32 42 4f 52 77 56 33 4e 67 25 32 Data Ascii: Via: 1.1 googlecf-cache-status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8VwOhfNnVCb3aSMJQHM6E3joE86qff8gZv1F4YaLO9BNL9vu0xBtwIkFb8WqQdxlNvfUudHlyL2Ot7jPF1dsOtOtGl%2BZZBFRuLrSIVlVIpCBF5c3VUjIHoOL%2BORwV3Ng%2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49757	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:26 UTC	1082	OUT	GET /rtimp?a=imp&cr=ext_download_prot_smrtsp&d=androiddatahost.com&gid=&im=Pacs0y_h8AoSpSdmuFfjA2-Jh85D8lauvwtIHB_1GiprXZB5z-_E3J1H5hUXQDZEsvVW7JVWUdGMa_U0C5_tkb4mP1ZlEnp9SQCOUT9ZGqvUPKVQlnmpO-een_K5kYXADLIbU7cZM4adhhdJ64sqRb0XuCC1NIhymkr9Rdf6tXrmlHUvVik_ArV3ViEcLerL2da9b1cfNz3_0XekAPi53bNl_N0IIvDnrrUavtgn0hCj0v3n5UVbx3vj68zJh5EwhSyMCcqSgdvmBMtFnMUY0fIc3kCwuYNWcv9gb37hXO2aW-4ok0VCS57r6DU_Rp5Cr-rj3hrIb1i1cgEBLvfU7WGsD1UHx0L5uBiNGZ2yMVsuwdLN2VS93UYZKceGIhWo5t2oNt_gGhoxejNAlTmutQ&p=Z4ciNAAJHGgIEd-8ABtcFJi2RsjNQuKdC0LPiQ&sid=546da6d0-d2eb-11ef-ad61-06f8d311b573 HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 02:49:26 UTC	1358	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:26 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=5570e428-d2eb-11ef-9fe5-8ed26a284edb; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: uid_cross=5570e428-d2eb-11ef-9fe5-8ed26a284edb; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/; SameSite=none; Secure Set-Cookie: sid=546da6d0-d2eb-11ef-ad61-06f8d311b573; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=546da6d0-d2eb-11ef-ad61-06f8d311b573; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure
2025-01-15 02:49:26 UTC	669	IN	Data Raw: 56 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c 65 0d 0a 63 66 2d 63 61 63 68 65 2d 73 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 38 44 46 7a 72 71 79 68 6e 6b 6a 37 57 50 32 56 47 64 75 73 72 6f 4c 34 6d 68 66 67 59 6c 5a 72 6b 46 74 69 4e 64 43 30 55 69 71 68 25 32 42 32 25 32 42 45 52 56 72 66 6e 62 32 30 31 57 67 61 51 63 62 33 45 62 58 46 33 25 32 46 45 68 67 6a 4a 33 63 25 32 42 59 59 77 71 43 4b 51 50 6b 7a 79 4e 53 67 46 31 34 32 38 59 42 49 4a 55 39 61 65 48 59 56 4f 43 49 69 55 7a 4a 30 38 56 41 46 6a 77 6d 6c 41 30 Data Ascii: Via: 1.1 googlecf-cache-status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8DFzrqyhnkj7WP2VGdusroL4mhfgYlZrkFtiNdC0Uiqh%2B2%2BERVrfnb201WgaQcb3EbXF3%2FEhgjJ3c%2BYYwqCKQPkzyNSgF1428YBIJU9aeHYVOCIiUzJ08VAFjwmlA0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49759	104.21.80.92	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:26 UTC	585	OUT	GET /ng-assets/creative/assets/index-127e2d55.css HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 02:49:26 UTC	1169	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 02:49:26 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close X-GUploader-UploadID: AFiumC6Ca_o6HLWoIKnaSe3BB1jGBfj4oXq8h3aZvmiGPQY7Ft1SnPRIbWbVnbK5a42oM7w x-goog-generation: 1735477883531695 x-goog-metageneration: 2 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 15324 x-goog-hash: crc32c=Rp60hA== x-goog-hash: md5=UDGZhDiAVKAK5jBbtt/nvw== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type Expires: Wed, 15 Jan 2025 02:58:12 GMT Cache-Control: public, max-age=14400 Last-Modified: Sun, 29 Dec 2024 13:11:23 GMT ETag: W/"50319984388054a00ae6305bb6dfe7bf" Vary: Accept-Encoding Age: 2909 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8qVqd4BSvyORH%2BGAJ7YpfVkKsbmRlLV0M0LAp2vDPzY3Hz97gTKJ30NGOGq2VG54Jt0L4bbdkgaf75OYFoMv10s%2BzvweInH9Blf8bU6j0eoHDpwBzCj33732f9jmSP1W0MEV"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 90228d73ba4b7fc3-IAD alt-svc: h3=":443"; ma=86400
2025-01-15 02:49:26 UTC	215	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 38 33 36 32 26 6d 69 6e 5f 72 74 74 3d 38 33 35 32 26 72 74 74 5f 76 61 72 3d 33 31 35 32 26 73 65 6e 74 3d 34 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 33 33 39 26 72 65 63 76 5f 62 79 74 65 73 3d 31 31 36 33 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 33 34 36 32 35 38 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 66 62 32 61 32 62 34 36 39 61 33 65 33 62 64 65 26 74 73 3d 31 36 33 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=8362&min_rtt=8352&rtt_var=3152&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2339&recv_bytes=1163&delivery_rate=346258&cwnd=32&unsent_bytes=0&cid=fb2a2b469a3e3bde&ts=163&x=0"
2025-01-15 02:49:26 UTC	1354	IN	Data Raw: 33 62 64 63 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 5f 61 64 76 65 72 74 69 73 65 72 5f 31 6a 6c 63 76 5f 31 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 35 30 31 3b 77 69 64 74 68 3a 66 69 74 2d 63 6f 6e 74 65 6e 74 3b 68 65 69 67 68 74 3a 66 69 74 2d 63 6f 6e 74 65 6e 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 5f 61 64 76 65 72 74 69 73 65 72 4e 61 6d 65 5f 31 6a 6c 63 76 5f 31 31 7b 7a 2d 69 6e 64 65 78 3a 35 30 34 3b 63 6f 6c 6f 72 3a 23 62 39 62 38 62 38 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a Data Ascii: 3bdc@charset "UTF-8";._advertiser_1jlcv_1{position:absolute;z-index:501;width:fit-content;height:fit-content;font-size:12px;font-weight:700;background-color:transparent}._advertiserName_1jlcv_11{z-index:504;color:#b9b8b8;user-select:none;pointer-events:
2025-01-15 02:49:26 UTC	1369	IN	Data Raw: 3a 30 7d 2e 5f 63 6c 6f 73 65 42 75 74 74 6f 6e 52 69 67 68 74 5f 35 62 34 77 62 5f 37 31 7b 74 6f 70 3a 31 32 70 78 3b 72 69 67 68 74 3a 31 35 70 78 7d 2e 5f 63 6c 6f 73 65 42 75 74 74 6f 6e 4c 65 66 74 5f 35 62 34 77 62 5f 37 36 7b 74 6f 70 3a 31 32 70 78 3b 6c 65 66 74 3a 31 35 70 78 7d 2e 5f 61 6c 74 43 6c 6f 73 65 42 75 74 74 6f 6e 52 69 67 68 74 5f 35 62 34 77 62 5f 38 31 7b 74 6f 70 3a 31 36 70 78 3b 72 69 67 68 74 3a 33 30 70 78 7d 2e 5f 61 6c 74 43 6c 6f 73 65 42 75 74 74 6f 6e 4c 65 66 74 5f 35 62 34 77 62 5f 38 36 7b 74 6f 70 3a 31 36 70 78 3b 6c 65 66 74 3a 33 30 70 78 7d 2e 5f 63 6f 75 6e 74 64 6f 77 6e 43 6c 6f 73 65 5f 35 62 34 77 62 5f 39 31 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 Data Ascii: :0}._closeButtonRight_5b4wb_71{top:12px;right:15px}._closeButtonLeft_5b4wb_76{top:12px;left:15px}._altCloseButtonRight_5b4wb_81{top:16px;right:30px}._altCloseButtonLeft_5b4wb_86{top:16px;left:30px}._countdownClose_5b4wb_91{background-color:#fff;border:1px
2025-01-15 02:49:26 UTC	1369	IN	Data Raw: 73 73 56 61 6c 75 65 5f 31 69 35 38 38 5f 31 32 7b 61 6e 69 6d 61 74 69 6f 6e 3a 5f 6c 6f 61 64 5f 31 69 35 38 38 5f 31 20 6e 6f 72 6d 61 6c 20 66 6f 72 77 61 72 64 73 20 6c 69 6e 65 61 72 20 70 61 75 73 65 64 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 30 70 78 20 34 30 70 78 20 2d 31 30 70 78 20 23 30 30 37 37 63 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 37 37 63 65 3b 68 65 69 67 68 74 3a 31 30 70 78 3b 77 69 64 74 68 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 63 6f 6e 74 65 6e 74 3a 22 22 7d 40 6b 65 79 66 72 61 6d 65 73 20 5f 6c 6f 61 64 5f 31 69 35 38 38 5f 31 7b 30 25 7b 77 69 64 74 68 3a 30 7d 74 6f 7b 77 69 64 74 68 3a 31 30 Data Ascii: ssValue_1i588_12{animation:_load_1i588_1 normal forwards linear paused;box-shadow:0 10px 40px -10px #0077ce;border-radius:0;background:#0077ce;height:10px;width:0;position:relative;bottom:0;left:0;content:""}@keyframes _load_1i588_1{0%{width:0}to{width:10
2025-01-15 02:49:26 UTC	1369	IN	Data Raw: 74 74 6f 6d 3a 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 7d 2e 5f 62 75 74 74 6f 6e 5f 64 6e 7a 72 36 5f 32 32 7b 70 61 64 64 69 6e 67 3a 31 34 70 78 20 34 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 66 38 39 66 35 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 30 70 78 7d 2e 5f 69 6d 61 67 65 5f 64 6e 7a 72 36 5f 33 31 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 32 35 76 77 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 32 70 78 7d 2e 5f 69 6e 70 75 74 5f 6d 76 39 35 36 5f 31 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a Data Ascii: ttom:4px;font-weight:500}._button_dnzr6_22{padding:14px 40px;background:#1f89f5;color:#fff;font-size:30px;border-radius:30px;margin-bottom:50px}._image_dnzr6_31{margin-bottom:20px;width:auto;height:25vw;border-radius:12px}._input_mv956_1{background-color:
2025-01-15 02:49:26 UTC	1369	IN	Data Raw: 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 2e 5f 73 6c 69 64 65 72 54 68 75 6d 62 5f 39 38 72 75 7a 5f 31 35 7b 77 69 64 74 68 3a 35 30 70 78 3b 68 65 69 67 68 74 3a 35 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 3a 30 20 35 70 78 3b 7a 2d 69 6e 64 65 78 3a 32 7d 2e 5f 73 6c 69 64 65 72 54 68 75 6d 62 5f 39 38 72 75 7a 5f 31 35 20 69 6d 67 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 Data Ascii: er-events:none}._sliderThumb_98ruz_15{width:50px;height:50px;background-color:#fff;border-radius:50%;color:#fff;display:flex;align-items:center;justify-content:center;position:absolute;left:0;margin:0 5px;z-index:2}._sliderThumb_98ruz_15 img{width:100%;he
2025-01-15 02:49:26 UTC	1369	IN	Data Raw: 7b 61 6e 69 6d 61 74 69 6f 6e 3a 5f 72 65 76 65 72 73 65 53 6c 69 64 65 4c 65 66 74 5f 6c 31 77 6a 6a 5f 37 35 20 2e 34 73 20 65 61 73 65 20 66 6f 72 77 61 72 64 73 7d 40 6b 65 79 66 72 61 6d 65 73 20 5f 72 65 76 65 72 73 65 53 6c 69 64 65 4c 65 66 74 5f 6c 31 77 6a 6a 5f 37 35 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 30 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 31 30 30 76 68 29 7d 7d 2e 5f 73 6c 69 64 65 52 69 67 68 74 5f 6c 31 77 6a 6a 5f 38 37 7b 61 6e 69 6d 61 74 69 6f 6e 3a 5f 73 6c 69 64 65 52 69 67 68 74 5f 6c 31 77 6a 6a 5f 38 37 20 2e 34 73 20 65 61 73 65 20 66 6f 72 77 61 72 64 73 7d 40 6b 65 79 66 72 61 6d 65 73 20 5f 73 6c 69 64 65 52 69 67 68 74 5f 6c 31 77 6a 6a 5f 38 37 7b 30 Data Ascii: {animation:_reverseSlideLeft_l1wjj_75 .4s ease forwards}@keyframes _reverseSlideLeft_l1wjj_75{0%{transform:translate(0)}to{transform:translate(100vh)}}._slideRight_l1wjj_87{animation:_slideRight_l1wjj_87 .4s ease forwards}@keyframes _slideRight_l1wjj_87{0
2025-01-15 02:49:26 UTC	1369	IN	Data Raw: 7a 69 65 72 28 2e 31 36 35 2c 2e 38 34 2c 2e 34 34 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 40 6b 65 79 66 72 61 6d 65 73 20 5f 72 65 76 65 72 73 65 55 6e 66 6f 6c 64 56 65 72 74 69 63 61 6c 5f 6c 31 77 6a 6a 5f 31 36 37 7b 35 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 59 28 31 29 20 73 63 61 6c 65 58 28 2e 30 30 35 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 59 28 30 29 20 73 63 61 6c 65 58 28 2e 30 30 35 29 7d 7d 2e 5f 72 65 76 65 72 73 65 55 6e 66 6f 6c 64 48 6f 72 69 7a 6f 6e 74 61 6c 5f 6c 31 77 6a 6a 5f 31 37 39 7b 61 6e 69 6d 61 74 69 6f 6e 3a 5f 72 65 76 65 72 73 65 55 6e 66 6f 6c 64 48 6f 72 69 7a 6f 6e 74 61 6c 5f 6c 31 77 6a 6a 5f 31 37 39 20 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 36 35 2c 2e 38 34 2c 2e Data Ascii: zier(.165,.84,.44,1) forwards}@keyframes _reverseUnfoldVertical_l1wjj_167{50%{transform:scaleY(1) scaleX(.005)}to{transform:scaleY(0) scaleX(.005)}}._reverseUnfoldHorizontal_l1wjj_179{animation:_reverseUnfoldHorizontal_l1wjj_179 1s cubic-bezier(.165,.84,.
2025-01-15 02:49:26 UTC	1369	IN	Data Raw: 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 7d 2e 5f 73 74 69 63 6b 79 42 6f 74 74 6f 6d 5f 6c 31 77 6a 6a 5f 32 37 39 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 62 6f 74 74 6f 6d 3a 30 7d 2e 5f 68 69 64 65 44 69 73 70 6c 61 79 5f 6c 31 77 6a 6a 5f 32 38 34 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 5f 68 69 64 65 56 69 73 69 62 69 6c 69 74 79 5f 6c 31 77 6a 6a 5f 32 38 38 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 5f 67 72 69 64 5f 33 67 68 77 34 5f 31 7b 64 69 73 70 6c 61 79 3a 67 72 69 64 7d 2e 5f 72 6f 77 5f 33 67 68 77 34 5f 35 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 5f 63 6f 6c 75 6d 6e 5f 33 67 68 77 34 5f 39 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 5f 67 61 6c 6c 65 72 79 43 6f 6e 74 61 69 6e 65 72 5f 6b 34 79 6d Data Ascii: sition:fixed;top:0}._stickyBottom_l1wjj_279{position:fixed;bottom:0}._hideDisplay_l1wjj_284{display:none}._hideVisibility_l1wjj_288{visibility:hidden}._grid_3ghw4_1{display:grid}._row_3ghw4_5{height:100%}._column_3ghw4_9{width:100%}._galleryContainer_k4ym
2025-01-15 02:49:26 UTC	1369	IN	Data Raw: 42 61 72 57 72 61 70 70 65 72 5f 73 38 37 68 6e 5f 31 32 7b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 6d 61 72 67 69 6e 3a 30 20 34 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 5f 73 74 6f 72 79 42 61 72 5f 73 38 37 68 6e 5f 31 32 7b 77 69 64 74 68 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 5f 73 74 6f 72 79 42 61 72 42 61 63 6b 67 72 6f 75 6e 64 5f 73 38 37 68 6e 5f 32 33 7b 6f 70 61 63 69 74 79 3a 2e 35 7d 2e 5f 73 6c 69 64 65 72 5f 65 6d 77 37 6e 5f 31 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 77 69 64 74 68 3a 31 30 30 25 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 68 65 69 67 68 74 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 5f 73 Data Ascii: BarWrapper_s87hn_12{flex-grow:1;margin:0 4px;position:relative}._storyBar_s87hn_12{width:100%;position:absolute}._storyBarBackground_s87hn_23{opacity:.5}._slider_emw7n_1{height:100%;margin:auto;width:100%;transition:height .15s ease-in;overflow:hidden}._s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49756	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:26 UTC	1082	OUT	GET /rtimp?a=imp&cr=ext_download_prot_smrtsp&d=androiddatahost.com&gid=&im=qDSwbOIr0D22sbu8qzOWzzsgTAyjXaYD0Wjekk-CBtqkqW2Giw8aaBY9H03jsjUd--RPJIQCc8isfXRoLz_JxXvWOsgFLQ0LXQCV_vRO7WZso6I-8X5nh-iPSXKXhlSitp-6I3vA0zWdpJtuEiSGRrUctJZaV7UE5ikGD2wk5NsDkmfe7LpIf9AMxB5x2ZUweOrir-bu-a3rsExFJzVnbf5fhQeei_SdD-FHZGzKvArczRnV44Yv9tLz80gy1aR-GZE2cRmIEW-HaNIcITlS40JDTcYNzulopQueEojNVc9cKUgiOvbjBagX0YVWcjCVxnLXYplgeAgGA8zT1qOiHoyY_vKGQOPnfCST-N1GlBWQMxxI8wxrHXg6kgSfDts7oessD_HNRJEmspPirMn3sw&p=Z4ciNAAIkn8IEdNXAAu0Q6gnw-wgAu8T7McH4w&sid=546ef294-d2eb-11ef-94e6-12087e0c0b48 HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 02:49:26 UTC	1358	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:26 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=556f2fde-d2eb-11ef-a567-3210f5befaf0; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: uid_cross=556f2fde-d2eb-11ef-a567-3210f5befaf0; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/; SameSite=none; Secure Set-Cookie: sid=546ef294-d2eb-11ef-94e6-12087e0c0b48; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=546ef294-d2eb-11ef-94e6-12087e0c0b48; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure
2025-01-15 02:49:26 UTC	675	IN	Data Raw: 56 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c 65 0d 0a 63 66 2d 63 61 63 68 65 2d 73 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 73 77 49 35 45 62 4c 48 64 36 44 4f 58 49 32 64 79 58 6d 30 32 78 49 53 48 53 42 32 38 25 32 46 76 5a 51 46 6a 72 51 56 45 72 52 76 77 25 32 42 25 32 42 55 4e 25 32 42 51 57 42 4b 79 4c 54 41 6c 6f 5a 64 4f 69 43 63 31 65 74 6b 41 70 47 53 48 36 6a 48 4d 47 51 41 45 79 52 58 79 30 25 32 42 30 35 77 74 30 70 57 53 6c 25 32 46 44 4c 31 38 47 6f 4c 65 4f 42 59 65 79 48 61 25 32 42 59 39 35 75 51 64 70 Data Ascii: Via: 1.1 googlecf-cache-status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=swI5EbLHd6DOXI2dyXm02xISHSB28%2FvZQFjrQVErRvw%2B%2BUN%2BQWBKyLTAloZdOiCc1etkApGSH6jHMGQAEyRXy0%2B05wt0pWSl%2FDL18GoLeOBYeyHa%2BY95uQdp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49761	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:26 UTC	1124	OUT	GET /rtimp?a=imp&cr=ext_download_prot_smrtsp&d=androiddatahost.com&gid=&im=IjHuoKH9nmywyVTiGioDNCAuLUDL12hOuGl7bgdSfVyyVYBTz7Zsr7uuTl8TJIk5dWf81UH-AsKoN3EadDwjUBJQuQQlVyA963QpKBLhZSvMIbHPvJlfiVhzqVlZKwqSew6ekPvMJQivc9sVYYFqAv999a3EJ_hMi7vf7H_2ZGtihHOTvM6iqjMxqmJD3Q8Seu9mRdQ1GLakJW_Pj4XXdwzV5SezfbVTEvG0p-7i6Sc2AI8XNTkJMEsw2f9vhGucJwsBt9wx-rXfqKI6RUW5LPjCc9zy15g9MVC09kM3Iuwfi6vTIytAZgtIUykHXKylA3w3k2pnPUspiV_ZsBroYyDkOWAaHeeLepaoKhBX4c1zj-q9IHbhhARl1DuhJqnQN6FcAcEdSd5az2KddOvO2mdZRN2LwYifC0OPtebWzdSWf9-50JeiZHpbeeiGCfeO&p=Z4ciNAAIcZ8IEctkAAklrGRc4Ee14pU5y6FM0w&sid=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 02:49:26 UTC	1358	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:26 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/; SameSite=none; Secure Set-Cookie: sid=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure
2025-01-15 02:49:26 UTC	675	IN	Data Raw: 56 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c 65 0d 0a 63 66 2d 63 61 63 68 65 2d 73 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 4f 73 54 6a 58 64 77 54 43 6d 25 32 42 51 31 69 4a 36 31 79 52 51 4c 41 6b 44 68 4c 51 73 74 74 31 73 7a 4a 61 47 35 68 34 70 32 71 54 74 25 32 42 58 73 71 5a 7a 4d 6a 68 4a 61 65 6e 79 43 56 25 32 42 6e 25 32 42 44 52 35 68 73 41 67 70 72 69 4b 74 50 6a 4b 36 63 4f 52 6d 25 32 42 73 58 41 6c 65 7a 43 6f 72 61 4c 6d 35 77 25 32 46 77 34 79 64 6c 77 32 67 57 41 37 61 35 45 36 63 38 4f 72 43 68 33 74 Data Ascii: Via: 1.1 googlecf-cache-status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OsTjXdwTCm%2BQ1iJ61yRQLAkDhLQstt1szJaG5h4p2qTt%2BXsqZzMjhJaenyCV%2Bn%2BDR5hsAgpriKtPjK6cORm%2BsXAlezCoraLm5w%2Fw4ydlw2gWA7a5E6c8OrCh3t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49760	104.21.80.92	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:26 UTC	612	OUT	GET /ng-assets/creative/assets/index-5333d910.js HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://googleads.g.doubleclick.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 02:49:26 UTC	1278	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 02:49:26 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close X-GUploader-UploadID: AFiumC4LtbuoijVCYzgNa2Tsfb_NvOViSpzUs574KGjnFW9sssGX51UvifIHeep6MfvxiGXP Expires: Wed, 15 Jan 2025 03:15:48 GMT Cache-Control: public, max-age=14400 Last-Modified: Sun, 05 Jan 2025 10:06:11 GMT ETag: W/"dbb8a5f0c0779c20b733ecb73a421605" x-goog-generation: 1736071571089501 x-goog-metageneration: 2 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 141707 x-goog-hash: crc32c=90RuKA== x-goog-hash: md5=27il8MB3nCC3M+y3OkIWBQ== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Vary: Accept-Encoding CF-Cache-Status: HIT Age: 1253 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XABi43Se9iAa31h3wVis0w4oNUW9xbvuK%2Bvtn%2F9rkH1V0t3QcG8fhEg72P5afsYpab6%2FGO01HgA2GjK9HaLFmp%2BLEOBmAgYOeWD5RxmISw%2BOg5Sn7rxDJsug3cl9a3MH9xkj"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 90228d7449e4a2f8-YUL alt-svc: h3=":443"; ma=86400
2025-01-15 02:49:26 UTC	217	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 37 37 37 30 26 6d 69 6e 5f 72 74 74 3d 31 37 37 36 39 26 72 74 74 5f 76 61 72 3d 36 36 36 37 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 33 33 39 26 72 65 63 76 5f 62 79 74 65 73 3d 31 31 39 30 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 36 34 31 39 32 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 64 65 37 33 38 35 30 33 35 61 64 30 33 37 31 32 26 74 73 3d 31 39 31 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=17770&min_rtt=17769&rtt_var=6667&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2339&recv_bytes=1190&delivery_rate=164192&cwnd=32&unsent_bytes=0&cid=de7385035ad03712&ts=191&x=0"
2025-01-15 02:49:26 UTC	1243	IN	Data Raw: 37 61 61 32 0d 0a 76 61 72 20 6f 69 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 73 69 3d 28 65 2c 74 2c 6e 29 3d 3e 74 20 69 6e 20 65 3f 6f 69 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 65 5b 74 5d 3d 6e 3b 76 61 72 20 6a 3d 28 65 2c 74 2c 6e 29 3d 3e 28 73 69 28 65 2c 74 79 70 65 6f 66 20 74 21 3d 22 73 79 6d 62 6f 6c 22 3f 74 2b 22 22 3a 74 2c 6e 29 2c 6e 29 3b 66 75 6e 63 74 69 6f 6e 20 4d 68 28 29 7b 69 6d 70 6f 72 74 2e 6d 65 74 61 2e 75 72 6c 2c 69 6d 70 6f 72 74 28 22 5f 22 29 2e 63 61 74 63 68 28 28 29 3d 3e 31 29 2c 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 7d 28 29 2e Data Ascii: 7aa2var oi=Object.defineProperty;var si=(e,t,n)=>t in e?oi(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n;var j=(e,t,n)=>(si(e,typeof t!="symbol"?t+"":t,n),n);function Mh(){import.meta.url,import("_").catch(()=>1),async function*(){}().
2025-01-15 02:49:26 UTC	1369	IN	Data Raw: 3b 66 6f 72 28 73 20 69 6e 20 74 29 73 3d 3d 22 6b 65 79 22 3f 72 3d 74 5b 73 5d 3a 73 3d 3d 22 72 65 66 22 3f 6f 3d 74 5b 73 5d 3a 69 5b 73 5d 3d 74 5b 73 5d 3b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 28 69 2e 63 68 69 6c 64 72 65 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 33 3f 5f 6e 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 32 29 3a 6e 29 2c 74 79 70 65 6f 66 20 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 21 3d 6e 75 6c 6c 29 66 6f 72 28 73 20 69 6e 20 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 29 69 5b 73 5d 3d 3d 3d 76 6f 69 64 20 30 26 26 28 69 5b 73 5d 3d 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 5b 73 5d 29 3b 72 65 74 75 72 6e 20 7a 74 28 65 2c 69 2c 72 2c Data Ascii: ;for(s in t)s=="key"?r=t[s]:s=="ref"?o=t[s]:i[s]=t[s];if(arguments.length>2&&(i.children=arguments.length>3?_n.call(arguments,2):n),typeof e=="function"&&e.defaultProps!=null)for(s in e.defaultProps)i[s]===void 0&&(i[s]=e.defaultProps[s]);return zt(e,i,r,
2025-01-15 02:49:26 UTC	1369	IN	Data Raw: 2c 63 29 2c 72 2e 5f 5f 65 21 3d 73 26 26 48 6f 28 72 29 29 2c 63 74 2e 6c 65 6e 67 74 68 3e 74 26 26 63 74 2e 73 6f 72 74 28 6a 6e 29 29 3b 65 6e 2e 5f 5f 72 3d 30 7d 66 75 6e 63 74 69 6f 6e 20 46 6f 28 65 2c 74 2c 6e 2c 72 2c 6f 2c 73 2c 69 2c 63 2c 75 2c 61 2c 66 29 7b 76 61 72 20 6c 2c 79 2c 68 2c 62 2c 41 2c 53 3d 72 26 26 72 2e 5f 5f 6b 7c 7c 55 6f 2c 45 3d 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 6e 2e 5f 5f 64 3d 75 2c 63 69 28 6e 2c 74 2c 53 29 2c 75 3d 6e 2e 5f 5f 64 2c 6c 3d 30 3b 6c 3c 45 3b 6c 2b 2b 29 28 68 3d 6e 2e 5f 5f 6b 5b 6c 5d 29 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 68 21 3d 22 62 6f 6f 6c 65 61 6e 22 26 26 74 79 70 65 6f 66 20 68 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 79 3d 68 2e 5f 5f 69 3d 3d 3d 2d 31 3f 54 74 3a 53 5b Data Ascii: ,c),r.__e!=s&&Ho(r)),ct.length>t&&ct.sort(jn));en.__r=0}function Fo(e,t,n,r,o,s,i,c,u,a,f){var l,y,h,b,A,S=r&&r.__k\|\|Uo,E=t.length;for(n.__d=u,ci(n,t,S),u=n.__d,l=0;l<E;l++)(h=n.__k[l])!=null&&typeof h!="boolean"&&typeof h!="function"&&(y=h.__i===-1?Tt:S[
2025-01-15 02:49:26 UTC	1369	IN	Data Raw: 3c 61 3b 72 2b 2b 29 28 73 3d 6e 5b 72 5d 29 21 3d 6e 75 6c 6c 26 26 21 28 31 33 31 30 37 32 26 73 2e 5f 5f 75 29 26 26 28 73 2e 5f 5f 65 3d 3d 65 2e 5f 5f 64 26 26 28 65 2e 5f 5f 64 3d 75 74 28 73 29 29 2c 44 6e 28 73 2c 73 29 29 7d 66 75 6e 63 74 69 6f 6e 20 57 6f 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 6f 3b 69 66 28 74 79 70 65 6f 66 20 65 2e 74 79 70 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 66 6f 72 28 72 3d 65 2e 5f 5f 6b 2c 6f 3d 30 3b 72 26 26 6f 3c 72 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 72 5b 6f 5d 26 26 28 72 5b 6f 5d 2e 5f 5f 3d 65 2c 74 3d 57 6f 28 72 5b 6f 5d 2c 74 2c 6e 29 29 3b 72 65 74 75 72 6e 20 74 7d 65 2e 5f 5f 65 21 3d 74 26 26 28 6e 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2e 5f 5f 65 2c 74 7c 7c 6e 75 6c 6c 29 2c 74 3d 65 Data Ascii: <a;r++)(s=n[r])!=null&&!(131072&s.__u)&&(s.__e==e.__d&&(e.__d=ut(s)),Dn(s,s))}function Wo(e,t,n){var r,o;if(typeof e.type=="function"){for(r=e.__k,o=0;r&&o<r.length;o++)r[o]&&(r[o].__=e,t=Wo(r[o],t,n));return t}e.__e!=t&&(n.insertBefore(e.__e,t\|\|null),t=e
2025-01-15 02:49:26 UTC	1369	IN	Data Raw: 74 2c 73 3f 4d 6e 3a 4e 6e 2c 73 29 29 3a 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 73 3f 4d 6e 3a 4e 6e 2c 73 29 3b 65 6c 73 65 7b 69 66 28 6f 3d 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 29 74 3d 74 2e 72 65 70 6c 61 63 65 28 2f 78 6c 69 6e 6b 28 48 7c 3a 68 29 2f 2c 22 68 22 29 2e 72 65 70 6c 61 63 65 28 2f 73 4e 61 6d 65 24 2f 2c 22 73 22 29 3b 65 6c 73 65 20 69 66 28 74 21 3d 22 77 69 64 74 68 22 26 26 74 21 3d 22 68 65 69 67 68 74 22 26 26 74 21 3d 22 68 72 65 66 22 26 26 74 21 3d 22 6c 69 73 74 22 26 26 74 21 3d 22 66 6f 72 6d 22 26 26 74 21 3d 22 74 61 62 49 6e 64 65 78 22 26 26 74 21 3d 22 64 6f 77 6e 6c 6f 61 64 22 26 26 74 21 3d 22 72 6f 77 53 70 61 6e 22 26 26 74 21 3d Data Ascii: t,s?Mn:Nn,s)):e.removeEventListener(t,s?Mn:Nn,s);else{if(o=="http://www.w3.org/2000/svg")t=t.replace(/xlink(H\|:h)/,"h").replace(/sName$/,"s");else if(t!="width"&&t!="height"&&t!="href"&&t!="list"&&t!="form"&&t!="tabIndex"&&t!="download"&&t!="rowSpan"&&t!=
2025-01-15 02:49:26 UTC	1369	IN	Data Raw: 5f 5f 68 2e 70 75 73 68 28 6c 2e 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 4d 6f 75 6e 74 29 3b 65 6c 73 65 7b 69 66 28 4b 2e 67 65 74 44 65 72 69 76 65 64 53 74 61 74 65 46 72 6f 6d 50 72 6f 70 73 3d 3d 6e 75 6c 6c 26 26 45 21 3d 3d 68 26 26 6c 2e 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 52 65 63 65 69 76 65 50 72 6f 70 73 21 3d 6e 75 6c 6c 26 26 6c 2e 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 52 65 63 65 69 76 65 50 72 6f 70 73 28 45 2c 58 29 2c 21 6c 2e 5f 5f 65 26 26 28 6c 2e 73 68 6f 75 6c 64 43 6f 6d 70 6f 6e 65 6e 74 55 70 64 61 74 65 21 3d 6e 75 6c 6c 26 26 6c 2e 73 68 6f 75 6c 64 43 6f 6d 70 6f 6e 65 6e 74 55 70 64 61 74 65 28 45 2c 6c 2e 5f 5f 73 2c 58 29 3d 3d 3d 21 31 7c 7c 74 2e 5f 5f 76 3d 3d 3d 6e 2e 5f 5f 76 29 29 7b 66 6f 72 28 74 2e 5f 5f 76 21 3d Data Ascii: __h.push(l.componentDidMount);else{if(K.getDerivedStateFromProps==null&&E!==h&&l.componentWillReceiveProps!=null&&l.componentWillReceiveProps(E,X),!l.__e&&(l.shouldComponentUpdate!=null&&l.shouldComponentUpdate(E,l.__s,X)===!1\|\|t.__v===n.__v)){for(t.__v!=
2025-01-15 02:49:26 UTC	1369	IN	Data Raw: 5f 5f 76 3f 28 74 2e 5f 5f 6b 3d 6e 2e 5f 5f 6b 2c 74 2e 5f 5f 65 3d 6e 2e 5f 5f 65 29 3a 74 2e 5f 5f 65 3d 61 69 28 6e 2e 5f 5f 65 2c 74 2c 6e 2c 72 2c 6f 2c 73 2c 69 2c 75 2c 61 29 3b 28 66 3d 44 2e 64 69 66 66 65 64 29 26 26 66 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 6f 28 65 2c 74 2c 6e 29 7b 74 2e 5f 5f 64 3d 76 6f 69 64 20 30 3b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 6e 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 61 72 28 6e 5b 72 5d 2c 6e 5b 2b 2b 72 5d 2c 6e 5b 2b 2b 72 5d 29 3b 44 2e 5f 5f 63 26 26 44 2e 5f 5f 63 28 74 2c 65 29 2c 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 74 72 79 7b 65 3d 6f 2e 5f 5f 68 2c 6f 2e 5f 5f 68 3d 5b 5d 2c 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 73 29 7b 73 2e 63 61 6c 6c 28 6f 29 7d 29 7d 63 61 74 Data Ascii: __v?(t.__k=n.__k,t.__e=n.__e):t.__e=ai(n.__e,t,n,r,o,s,i,u,a);(f=D.diffed)&&f(t)}function zo(e,t,n){t.__d=void 0;for(var r=0;r<n.length;r++)ar(n[r],n[++r],n[++r]);D.__c&&D.__c(t,e),e.some(function(o){try{e=o.__h,o.__h=[],e.some(function(s){s.call(o)})}cat
2025-01-15 02:49:26 UTC	1369	IN	Data Raw: 26 26 28 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 22 29 2c 46 6f 28 65 2c 68 6e 28 79 29 3f 79 3a 5b 79 5d 2c 74 2c 6e 2c 72 2c 52 3d 3d 3d 22 66 6f 72 65 69 67 6e 4f 62 6a 65 63 74 22 3f 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3a 6f 2c 73 2c 69 2c 73 3f 73 5b 30 5d 3a 6e 2e 5f 5f 6b 26 26 75 74 28 6e 2c 30 29 2c 63 2c 75 29 2c 73 21 3d 6e 75 6c 6c 29 66 6f 72 28 61 3d 73 2e 6c 65 6e 67 74 68 3b 61 2d 2d 3b 29 73 5b 61 5d 21 3d 6e 75 6c 6c 26 26 42 6f 28 73 5b 61 5d 29 3b 63 7c 7c 28 61 3d 22 76 61 6c 75 65 22 2c 62 21 3d 3d 76 6f 69 64 20 30 26 26 28 62 21 3d 3d 65 5b 61 5d 7c 7c 52 3d 3d 3d 22 70 72 6f 67 72 65 73 73 22 26 26 21 62 7c 7c 52 3d 3d 3d 22 6f 70 74 69 6f 6e 22 26 26 62 21 3d 3d 53 5b 61 5d 29 Data Ascii: &&(e.innerHTML=""),Fo(e,hn(y)?y:[y],t,n,r,R==="foreignObject"?"http://www.w3.org/1999/xhtml":o,s,i,s?s[0]:n.__k&&ut(n,0),c,u),s!=null)for(a=s.length;a--;)s[a]!=null&&Bo(s[a]);c\|\|(a="value",b!==void 0&&(b!==e[a]\|\|R==="progress"&&!b\|\|R==="option"&&b!==S[a])
2025-01-15 02:49:26 UTC	1369	IN	Data Raw: 28 63 29 7b 65 3d 63 7d 74 68 72 6f 77 20 65 7d 7d 2c 44 6f 3d 30 2c 4a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 53 74 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 6e 3d 74 68 69 73 2e 5f 5f 73 21 3d 6e 75 6c 6c 26 26 74 68 69 73 2e 5f 5f 73 21 3d 3d 74 68 69 73 2e 73 74 61 74 65 3f 74 68 69 73 2e 5f 5f 73 3a 74 68 69 73 2e 5f 5f 73 3d 74 74 28 7b 7d 2c 74 68 69 73 2e 73 74 61 74 65 29 2c 74 79 70 65 6f 66 20 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 65 3d 65 28 74 74 28 7b 7d 2c 6e 29 2c 74 68 69 73 2e 70 72 6f 70 73 29 29 2c 65 26 26 74 74 28 6e 2c 65 29 2c 65 21 3d 6e 75 6c 6c 26 26 74 68 69 73 2e 5f 5f 76 26 26 28 74 26 26 74 68 69 73 2e 5f 73 62 2e 70 75 73 68 28 74 29 2c 4f 72 28 74 68 69 73 29 29 7d 2c 4a 65 2e Data Ascii: (c){e=c}throw e}},Do=0,Je.prototype.setState=function(e,t){var n;n=this.__s!=null&&this.__s!==this.state?this.__s:this.__s=tt({},this.state),typeof e=="function"&&(e=e(tt({},n),this.props)),e&&tt(n,e),e!=null&&this.__v&&(t&&this._sb.push(t),Or(this))},Je.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49764	142.250.186.34	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:26 UTC	1285	OUT	GET /pagead/adview?ai=Ce9lBNCKHZ4WqI-Gpx_APx5j5gAe9qs_Ndemi3NbEEsCNtwEQASAAYMmWy4vEpPwPggEXY2EtcHViLTI4NDAyNTgxMDE0MTE4NjPIAQmoAwHIAwKqBNcBT9DoNuiUZHUdweH8KgQzKbK61CX76_bOcrmrgzhaUeHoMTasQ-dMvmCj4l3HctP9sLbGPKzpHu3yRlkNcUSt0vEJsN7c2HP5dJPXWqLeVcTqW5Z6SMmymcwllFNe6Yk344XLgVxvr1U4BCfTYIwiAHCU_JDF5FIbOSHrswXCwvyFYSgN2CsX3DjE8l0n3sUW6UI1_NjZLmFoqVCf6SynkgviT9opKtGpiuVavOqoSC409gL9Le82gZ2X2VfqGhyZ_K8Id_ZssE8RI0OlR2gNYK6UXVE_x0KABpqs7Zf5__P85QGgBiGoB6a-G6gHltgbqAeqm7ECqAf_nrECqAffn7ECqAetvrEC2AcA0ggkCIBhEAEyAooCOguAQIDAgICAoKiAAki9_cE6WJHwus3b9ooDgAoB-gsCCAGADAHQFQGAFwGyFxwKGBIUcHViLTI4NDAyNTgxMDE0MTE4NjMYABgM&sigh=FTSn9xkY3C0&uach_m=%5BUACH%5D&cid=CAQSTwCa7L7daosxhDwEOP4OczbnRoWulX9WY3LBBNUBPpuH-RcSRc9uPCkjRcNGA89EaJkyxS51uvMT8aKC0oftGN15oHJIW8u0Cgw8nGcsrO4YAQ HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnbU-NmvTifVqwq0yZ1fP3SkHVxKWHpOMVBxEF-Ito7T4QgjYCvyETlmVSybNY
2025-01-15 02:49:27 UTC	628	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 15 Jan 2025 02:49:27 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49766	142.250.186.34	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:26 UTC	1285	OUT	GET /pagead/adview?ai=CFPDfNCKHZ-i4JLy_x_APlLjtoAK9qs_Ndemi3NbEEsCNtwEQASAAYMmWy4vEpPwPggEXY2EtcHViLTI4NDAyNTgxMDE0MTE4NjPIAQmoAwHIAwKqBNcBT9BzfWUBQRlZbMayk2xZ2PsMoHrGWEmT1JkE9g69N58ArmaiqK2HlITxYx7QgNaJQx2wt1seuKcef_1A3pVOCzbA2hg05tiqpL2UTn5Js2nFcjUF7agZl9I4McETJ_LDzxOHIQ6obx2dC18QTx-oOsnzsWLtjor1k3MCbopsxUwK6E3xvkhy0BOUVEdXWYCW6p8Bosf5kTkoIvksQbcbnOsbPixXguIfSkCBLoLK64KVQu8fmfJ87fGq-kRLc3ZrI-AU6WXKHGzvUQL9bAt1C-9k_cDfNIKABpqs7Zf5__P85QGgBiGoB6a-G6gHltgbqAeqm7ECqAf_nrECqAffn7ECqAetvrEC2AcA0ggkCIBhEAEyAooCOguAQIDAgICAoKiAAki9_cE6WML9u83b9ooDgAoB-gsCCAGADAHQFQGAFwGyFxwKGBIUcHViLTI4NDAyNTgxMDE0MTE4NjMYABgM&sigh=FlZf2KQFH94&uach_m=%5BUACH%5D&cid=CAQSTwCa7L7dxapE7wWzQROX7OOdYEdVIW8XMOL9DoWpVWPr2dO-vtXKbAsg1HfWIeXPZLtNxQU5eaRT4TdCClwz9xInoMoQqpE_1rGtrVH-buMYAQ HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlabMD6ll5_3gm75ZQodyk7HUznoGWrniSqUeAMOIudeC0QBW3HBBQ3YUiDiBY
2025-01-15 02:49:27 UTC	628	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 15 Jan 2025 02:49:27 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49767	142.250.186.34	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:26 UTC	1275	OUT	GET /pagead/adview?ai=CPe1WNCKHZ_-kItemx_APw-iu2A69qs_Ndemi3NbEEsCNtwEQASAAYMmWy4vEpPwPggEXY2EtcHViLTI4NDAyNTgxMDE0MTE4NjPIAQmoAwHIAwKqBNEBT9B-WcbwooRGWVBhVESMskTAZ4pSSHzVQHbRNgko04tKFckoRrXfdTEo_5R_P_uGjxj380ahW2rxN0sHn2Fppx2sKFokGLWoJIp8kiyhEC6FetALp1PNlsKJhouvL5msZdu-6m1XxPnx--z_dmxY1LTeR8IR4GGgaKiwPiIo6WLtCq8DvlNkwziyeopKxnxMzXx_gt-URuwxOi5GdaOyI_hEatGdMEC_1cgIUxOX6gQ22RhJXwi5wMmRKNmb7abpKs0yhzKEwZSPGNioKw2jJQKABpqs7Zf5__P85QGgBiGoB6a-G6gHltgbqAeqm7ECqAf_nrECqAffn7ECqAetvrEC2AcA0ggkCIBhEAEyAooCOguAQIDAgICAoKiAAki9_cE6WPTsuc3b9ooDgAoB-gsCCAGADAHQFQGAFwGyFxwKGBIUcHViLTI4NDAyNTgxMDE0MTE4NjMYABgM&sigh=ZWtW9IDO94M&uach_m=%5BUACH%5D&cid=CAQSTgCa7L7dSW0PiL7yYolxCVmMh06nEePYuqlSGMyaFdKSydCCRqasFRLX5D9-116-aNp-Ok7p-nC8ltNex0RnoQWWsZPWW_eRUZ_MgV3y-xgB HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmTi409006ZPLrw0Hm6PRqIc2Fosaqp9nOCjlIeAk-_T6iOJajn-jllN2l_jHU
2025-01-15 02:49:27 UTC	628	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 15 Jan 2025 02:49:27 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49768	142.250.186.34	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:26 UTC	1276	OUT	GET /pagead/adview?ai=Cwd0LNCKHZ5_jIeSWx_APrMukUL2qz8116aLc1sQSwI23ARABIABgyZbLi8Sk_A-CARdjYS1wdWItMjg0MDI1ODEwMTQxMTg2M8gBCagDAcgDAqoE0QFP0LGg-Vd9KdxqQwYVXv7dV62k_Pw1C4rVBIxi-Gr980ewd8A-QP-4HR74RN2Ctt2wVPkLDrStbuVy7KKdTI_QWNPCnMs6pq8uuFHHZBIWhkzgX9p8dPIkAQCRwrZMqH0ODXz7chHlRHTkDIOeQ0fTLqO0q0k_r_Z7Ci7Vy8we5i4bjuuwwoQZATlBVhB77wG8f40sHfR0JqVw_6gn8s8w6BzoPM8gjWpb8thcwhvc9SNfBVgixoasLNqEOeGLyj6jVRJyzGQtaIZHG1haIZIq_YAGmqztl_n_8_zlAaAGIagHpr4bqAeW2BuoB6qbsQKoB_-esQKoB9-fsQKoB62-sQLYBwDSCCQIgGEQATICigI6C4BAgMCAgICgqIACSL39wTpY_Km5zdv2igOACgH6CwIIAYAMAdAVAYAXAbIXHAoYEhRwdWItMjg0MDI1ODEwMTQxMTg2MxgAGAw&sigh=Bmj6HpcG_Ks&uach_m=%5BUACH%5D&cid=CAQSTwCa7L7dNpLe2c8cdaZnoUlDXDHcDxMKdHfYZXlAeMpZaaysjIM4ZzleToZlSH8kBGPhOJeiSY3ngjUptty6rJWoFu4OIPo-JARlZdt6D-AYAQ HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm9YsVInCwq_kuLG4Eoy4GuHk43hyeVzgbbZa3d16vwPQ6hkEJ5gfvmZT0zHrk
2025-01-15 02:49:27 UTC	628	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 15 Jan 2025 02:49:27 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49786	104.21.80.92	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:27 UTC	387	OUT	GET /ng-assets/creative/assets/polyfills-a3f452c3.js HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 02:49:27 UTC	1196	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 02:49:27 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Expires: Wed, 15 Jan 2025 02:45:36 GMT Cache-Control: public, max-age=14400 Last-Modified: Thu, 15 Aug 2024 14:24:18 GMT ETag: W/"659a1ec658c77b9c936c856b9b72a548" x-goog-generation: 1723731858011783 x-goog-metageneration: 2 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 11824 x-goog-hash: crc32c=i96MsA== x-goog-hash: md5=ZZoexljHe5yTbIVrm3KlSA== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type X-GUploader-UploadID: AHxI1nNJtU_WvPBBiKK-EXmeYHTtOWCQr2yuy_c4Z3Nu6uGHd6kZ_UeK0nz6B8CE2WIZ8gp9Jz5F7_29Kg Vary: Accept-Encoding CF-Cache-Status: HIT Age: 2414 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oeVX2pfy%2FkEJxNKPDNU4S2I65cqiJ7MVXWODWEcsTHfwZqS1D5BjtRksAFn4ngL8VJseH3CEBr6ZCPh8hIxDzpvqeXiQSwEcejBoPpAuPGkfK6nXxyCs5KqL3M%2BGbCKEJR5%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 90228d7b29e3a278-YUL alt-svc: h3=":443"; ma=86400
2025-01-15 02:49:27 UTC	216	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 37 37 33 31 26 6d 69 6e 5f 72 74 74 3d 31 37 37 32 35 26 72 74 74 5f 76 61 72 3d 36 36 36 30 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 33 33 39 26 72 65 63 76 5f 62 79 74 65 73 3d 39 36 35 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 36 34 32 33 38 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 34 34 62 66 31 39 38 37 35 36 30 32 64 39 34 61 26 74 73 3d 32 32 36 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=17731&min_rtt=17725&rtt_var=6660&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2339&recv_bytes=965&delivery_rate=164238&cwnd=32&unsent_bytes=0&cid=44bf19875602d94a&ts=226&x=0"
2025-01-15 02:49:27 UTC	1326	IN	Data Raw: 32 65 33 30 0d 0a 65 78 70 6f 72 74 20 66 75 6e 63 74 69 6f 6e 20 5f 5f 76 69 74 65 5f 6c 65 67 61 63 79 5f 67 75 61 72 64 28 29 7b 69 6d 70 6f 72 74 2e 6d 65 74 61 2e 75 72 6c 3b 69 6d 70 6f 72 74 28 22 5f 22 29 2e 63 61 74 63 68 28 28 29 3d 3e 31 29 3b 28 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 7d 29 28 29 2e 6e 65 78 74 28 29 7d 3b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 Data Ascii: 2e30export function __vite_legacy_guard(){import.meta.url;import("_").catch(()=>1);(async function*(){})().next()};var t="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof se
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 3d 54 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 46 28 22 7a 22 29 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 28 30 29 7d 29 29 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 53 74 72 69 6e 67 22 3d 3d 3d 41 28 74 29 3f 78 28 74 2c 22 22 29 3a 46 28 74 29 7d 3a 46 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 7d 2c 49 3d 43 2c 6b 3d 54 79 70 65 45 72 72 6f 72 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 49 28 74 29 29 74 68 72 6f 77 20 6e 65 77 20 6b 28 22 43 61 6e 27 74 20 63 61 6c 6c 20 6d 65 74 68 6f 64 20 6f 6e 20 22 2b 74 29 3b 72 65 74 75 72 6e 20 74 7d 2c 4c 3d 4d 2c 4e 3d 7a 2c 44 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4c 28 4e Data Ascii: =T((function(){return!F("z").propertyIsEnumerable(0)}))?function(t){return"String"===A(t)?x(t,""):F(t)}:F,C=function(t){return null==t},I=C,k=TypeError,z=function(t){if(I(t))throw new k("Can't call method on "+t);return t},L=M,N=z,D=function(t){return L(N
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 2c 79 74 3d 70 74 2c 62 74 3d 43 2c 76 74 3d 66 2c 67 74 3d 5f 2c 68 74 3d 55 2c 64 74 3d 54 79 70 65 45 72 72 6f 72 2c 6d 74 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 77 74 3d 72 2c 4f 74 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 53 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 74 72 79 7b 4f 74 28 77 74 2c 74 2c 7b 76 61 6c 75 65 3a 6e 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 7d 63 61 74 63 68 28 72 29 7b 77 74 5b 74 5d 3d 6e 7d 72 65 74 75 72 6e 20 6e 7d 2c 6a 74 3d 72 2c 50 74 3d 53 74 2c 45 74 3d 22 5f 5f 63 6f 72 65 2d 6a 73 5f 73 68 61 72 65 64 5f 5f 22 2c 54 74 3d 6d 74 2e 65 78 70 6f 72 74 73 3d 6a 74 5b 45 74 5d 7c Data Ascii: not a function")},yt=pt,bt=C,vt=f,gt=_,ht=U,dt=TypeError,mt={exports:{}},wt=r,Ot=Object.defineProperty,St=function(t,n){try{Ot(wt,t,{value:n,configurable:!0,writable:!0})}catch(r){wt[t]=n}return n},jt=r,Pt=St,Et="__core-js_shared__",Tt=mt.exports=jt[Et]\|
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 4a 74 28 74 29 7c 7c 51 74 28 74 29 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 72 2c 65 3d 5a 74 28 74 2c 72 6e 29 3b 69 66 28 65 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 22 64 65 66 61 75 6c 74 22 29 2c 72 3d 48 74 28 65 2c 74 2c 6e 29 2c 21 4a 74 28 72 29 7c 7c 51 74 28 72 29 29 72 65 74 75 72 6e 20 72 3b 74 68 72 6f 77 20 6e 65 77 20 6e 6e 28 22 43 61 6e 27 74 20 63 6f 6e 76 65 72 74 20 6f 62 6a 65 63 74 20 74 6f 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 22 29 7d 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 22 6e 75 6d 62 65 72 22 29 2c 74 6e 28 74 2c 6e 29 7d 2c 6f 6e 3d 63 74 2c 75 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 65 6e 28 74 2c 22 73 74 72 69 6e 67 22 29 3b 72 65 74 75 72 6e 20 Data Ascii: Jt(t)\|\|Qt(t))return t;var r,e=Zt(t,rn);if(e){if(void 0===n&&(n="default"),r=Ht(e,t,n),!Jt(r)\|\|Qt(r))return r;throw new nn("Can't convert object to primitive value")}return void 0===n&&(n="number"),tn(t,n)},on=ct,un=function(t){var n=en(t,"string");return
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 61 74 63 68 28 65 29 7b 7d 69 66 28 22 67 65 74 22 69 6e 20 72 7c 7c 22 73 65 74 22 69 6e 20 72 29 74 68 72 6f 77 20 6e 65 77 20 49 6e 28 22 41 63 63 65 73 73 6f 72 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 29 3b 72 65 74 75 72 6e 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 74 5b 6e 5d 3d 72 2e 76 61 6c 75 65 29 2c 74 7d 3b 76 61 72 20 52 6e 3d 4f 6e 2c 5f 6e 3d 67 2c 47 6e 3d 69 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 52 6e 2e 66 28 74 2c 6e 2c 5f 6e 28 31 2c 72 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 74 5b 6e 5d 3d 72 2c 74 7d 2c 55 6e 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 57 6e 3d 69 2c 42 6e 3d 4c 74 2c 24 6e 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 71 Data Ascii: atch(e){}if("get"in r\|\|"set"in r)throw new In("Accessors not supported");return"value"in r&&(t[n]=r.value),t};var Rn=On,_n=g,Gn=i?function(t,n,r){return Rn.f(t,n,_n(1,r))}:function(t,n,r){return t[n]=r,t},Un={exports:{}},Wn=i,Bn=Lt,$n=Function.prototype,q
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 67 72 28 22 49 6e 63 6f 6d 70 61 74 69 62 6c 65 20 72 65 63 65 69 76 65 72 2c 20 22 2b 74 2b 22 20 72 65 71 75 69 72 65 64 22 29 3b 72 65 74 75 72 6e 20 72 7d 7d 7d 2c 4f 72 3d 4f 2c 53 72 3d 6f 2c 6a 72 3d 5f 2c 50 72 3d 4c 74 2c 45 72 3d 69 2c 54 72 3d 56 6e 2e 43 4f 4e 46 49 47 55 52 41 42 4c 45 2c 41 72 3d 74 72 2c 46 72 3d 77 72 2e 65 6e 66 6f 72 63 65 2c 78 72 3d 77 72 2e 67 65 74 2c 4d 72 3d 53 74 72 69 6e 67 2c 43 72 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 49 72 3d 4f 72 28 22 22 2e 73 6c 69 63 65 29 2c 6b 72 3d 4f 72 28 22 22 2e 72 65 70 6c 61 63 65 29 2c 7a 72 3d 4f 72 28 5b 5d 2e 6a 6f 69 6e 29 2c 4c 72 3d 45 72 26 26 21 53 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: !==t)throw new gr("Incompatible receiver, "+t+" required");return r}}},Or=O,Sr=o,jr=_,Pr=Lt,Er=i,Tr=Vn.CONFIGURABLE,Ar=tr,Fr=wr.enforce,xr=wr.get,Mr=String,Cr=Object.defineProperty,Ir=Or("".slice),kr=Or("".replace),zr=Or([].join),Lr=Er&&!Sr((function(){re
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 6f 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 65 29 7b 76 61 72 20 6f 3d 6e 65 28 6e 29 2c 69 3d 65 65 28 6f 29 3b 69 66 28 30 3d 3d 3d 69 29 72 65 74 75 72 6e 21 74 26 26 2d 31 3b 76 61 72 20 75 2c 63 3d 72 65 28 65 2c 69 29 3b 69 66 28 74 26 26 72 21 3d 72 29 7b 66 6f 72 28 3b 69 3e 63 3b 29 69 66 28 28 75 3d 6f 5b 63 2b 2b 5d 29 21 3d 75 29 72 65 74 75 72 6e 21 30 7d 65 6c 73 65 20 66 6f 72 28 3b 69 3e 63 3b 63 2b 2b 29 69 66 28 28 74 7c 7c 63 20 69 6e 20 6f 29 26 26 6f 5b 63 5d 3d 3d 3d 72 29 72 65 74 75 72 6e 20 74 7c 7c 63 7c 7c 30 3b 72 65 74 75 72 6e 21 74 26 26 2d 31 7d 7d 2c 69 65 3d 7b 69 6e 63 6c 75 64 65 73 3a 6f 65 28 21 30 29 2c 69 6e 64 65 78 4f 66 3a 6f 65 28 21 31 29 7d 2c 75 65 Data Ascii: oe=function(t){return function(n,r,e){var o=ne(n),i=ee(o);if(0===i)return!t&&-1;var u,c=re(e,i);if(t&&r!=r){for(;i>c;)if((u=o[c++])!=u)return!0}else for(;i>c;c++)if((t\|\|c in o)&&o[c]===r)return t\|\|c\|\|0;return!t&&-1}},ie={includes:oe(!0),indexOf:oe(!1)},ue
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 65 7d 29 7d 72 65 74 75 72 6e 20 74 7d 2c 44 65 3d 53 74 2c 52 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 66 6f 72 28 76 61 72 20 65 3d 4f 65 28 6e 29 2c 6f 3d 6a 65 2e 66 2c 69 3d 53 65 2e 66 2c 75 3d 30 3b 75 3c 65 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 7b 76 61 72 20 63 3d 65 5b 75 5d 3b 77 65 28 74 2c 63 29 7c 7c 72 26 26 77 65 28 72 2c 63 29 7c 7c 6f 28 74 2c 63 2c 69 28 6e 2c 63 29 29 7d 7d 2c 5f 65 3d 49 65 2c 47 65 3d 45 2c 55 65 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 41 72 72 61 79 22 3d 3d 3d 47 65 28 74 29 7d 2c 57 65 3d 54 79 70 65 45 72 72 6f 72 2c 42 65 3d 45 2c 24 65 3d 4f 2c 71 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 46 75 6e 63 74 69 6f 6e 22 3d 3d 3d Data Ascii: e})}return t},De=St,Re=function(t,n,r){for(var e=Oe(n),o=je.f,i=Se.f,u=0;u<e.length;u++){var c=e[u];we(t,c)\|\|r&&we(r,c)\|\|o(t,c,i(n,c))}},_e=Ie,Ge=E,Ue=Array.isArray\|\|function(t){return"Array"===Ge(t)},We=TypeError,Be=E,$e=O,qe=function(t){if("Function"===
2025-01-15 02:49:27 UTC	923	IN	Data Raw: 46 75 6e 63 74 69 6f 6e 22 3a 72 65 74 75 72 6e 21 31 7d 74 72 79 7b 72 65 74 75 72 6e 20 68 6f 7c 7c 21 21 67 6f 28 76 6f 2c 70 6f 28 74 29 29 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 21 30 7d 7d 3b 77 6f 2e 73 68 61 6d 3d 21 30 3b 76 61 72 20 4f 6f 3d 21 62 6f 7c 7c 66 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 6d 6f 28 6d 6f 2e 63 61 6c 6c 29 7c 7c 21 6d 6f 28 4f 62 6a 65 63 74 29 7c 7c 21 6d 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 3d 21 30 7d 29 29 7c 7c 74 7d 29 29 3f 77 6f 3a 6d 6f 2c 53 6f 3d 55 65 2c 6a 6f 3d 4f 6f 2c 50 6f 3d 55 2c 45 6f 3d 59 74 28 22 73 70 65 63 69 65 73 22 29 2c 54 6f 3d 41 72 72 61 79 2c 41 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 53 6f Data Ascii: Function":return!1}try{return ho\|\|!!go(vo,po(t))}catch(n){return!0}};wo.sham=!0;var Oo=!bo\|\|fo((function(){var t;return mo(mo.call)\|\|!mo(Object)\|\|!mo((function(){t=!0}))\|\|t}))?wo:mo,So=Ue,jo=Oo,Po=U,Eo=Yt("species"),To=Array,Ao=function(t){var n;return So

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49787	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:27 UTC	1097	OUT	GET /sig.js?rpclid=546ad295-d2eb-11ef-959f-d6c599cbf4fc&params=WvqEWoub5i7-wbFq6SzlnF9uEQ6-DRvG4th9BOzKDOXmRNHtLMqI8kI53Z0ViZ8r_52kOqtFAIbK-7HqzahBdWbt4T0elE4Hsd_a2y7MgSAiHTmiImHD3pSXu5MOhUuxBE-RqPnKDqDUkf8jHa5t_x92d59EQIjgSDUm_W4POLV07Q-9CZ_IQXj8Bp87ChlsADIHCAhvgCZWQLsS_6cU6pLf0QamUAcXq869S2ZCRcQ-nPp8Y8Hx9WOBweupX6rsR4kij69CkBTzczNgD68KrydLsmLNk6mwzd3M7lpIGsvbgLHZROb3bSQix0iN79BCOHKdDjp3k1Zg3XOc0tiN74JM6M-WdxX1zuD9Kj8oTMPFzs49CGykzdU80FMi_Qs3UQPmrIXXBGxx3SwIppw2PA HTTP/1.1 Host: serve.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=556f2fde-d2eb-11ef-a567-3210f5befaf0; sid_cross=546ef294-d2eb-11ef-94e6-12087e0c0b48
2025-01-15 02:49:27 UTC	1169	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 02:49:27 GMT Content-Type: text/javascript Content-Length: 9486 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Via: 1.1 google CF-Cache-Status: BYPASS Set-Cookie: uid=556f2fde-d2eb-11ef-a567-3210f5befaf0; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: mid=546ad295-d2eb-11ef-959f-d6c599cbf4fc; Domain=.bidbrain.app; Max-Age=7200; Path=/ Accept-Ranges: bytes
2025-01-15 02:49:27 UTC	624	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 65 6a 77 50 58 51 61 55 6f 7a 43 4c 6b 65 57 59 79 31 58 65 36 30 4f 33 61 65 68 4c 4f 4c 4c 4e 39 75 34 52 79 79 69 4c 6e 73 49 47 50 6b 68 67 25 32 46 7a 58 36 37 33 70 63 4d 4d 44 4f 48 32 62 6f 61 54 6f 47 4e 56 42 75 76 78 30 73 44 75 52 42 38 37 54 45 79 56 36 71 62 54 37 4a 59 6d 71 78 45 54 65 68 47 58 79 70 47 63 25 32 46 79 68 57 6f 73 75 41 48 69 76 5a 52 33 39 53 71 6e 50 45 33 6b 63 4a 73 41 37 47 38 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ejwPXQaUozCLkeWYy1Xe60O3aehLOLLN9u4RyyiLnsIGPkhg%2FzX673pcMMDOH2boaToGNVBuvx0sDuRB87TEyV6qbT7JYmqxETehGXypGc%2FyhWosuAHivZR39SqnPE3kcJsA7G8%3D"}],"group":"cf-nel","max_age":6048
2025-01-15 02:49:27 UTC	945	IN	Data Raw: 76 61 72 20 70 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 66 3d 28 6d 2c 71 2c 6e 29 3d 3e 71 20 69 6e 20 6d 3f 70 28 6d 2c 71 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 6d 5b 71 5d 3d 6e 2c 68 3d 28 6d 2c 71 2c 6e 29 3d 3e 28 66 28 6d 2c 22 73 79 6d 62 6f 6c 22 21 3d 74 79 70 65 6f 66 20 71 3f 71 2b 22 22 3a 71 2c 6e 29 2c 6e 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 3f 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 28 22 66 6c 5f 22 2b 61 2c 62 29 3a 28 44 7c 7c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 71 2c 31 30 Data Ascii: var p=Object.defineProperty,f=(m,q,n)=>q in m?p(m,q,{enumerable:!0,configurable:!0,writable:!0,value:n}):m[q]=n,h=(m,q,n)=>(f(m,"symbol"!=typeof q?q+"":q,n),n);(function(){function m(a,b){window.sendEvent?window.sendEvent("fl_"+a,b):(D\|\|=setInterval(q,10
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 64 28 45 72 72 6f 72 28 62 3f 3f 60 74 69 6d 65 6f 75 74 20 24 7b 61 7d 60 29 29 7d 2c 61 29 7d 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4a 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 61 63 65 28 5b 61 2c 49 28 62 2c 63 29 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 62 3d 3e 73 65 74 54 69 6d 65 6f 75 74 28 62 2c 61 29 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4c 28 61 2c 62 2c 63 29 7b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 63 3b 65 2b 2b 29 7b 76 61 72 20 64 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 0a 61 77 61 69 74 20 61 28 29 3b 64 3d 62 2d 28 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e Data Ascii: tTimeout(()=>{d(Error(b??`timeout ${a}`))},a)})}async function J(a,b,c){return Promise.race([a,I(b,c)])}function K(a){return new Promise(b=>setTimeout(b,a))}async function L(a,b,c){for(let e=0;e<c;e++){var d=performance.now();await a();d=b-(performance.n
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 69 6e 76 6f 6b 69 6e 67 20 72 65 61 64 79 22 2c 63 29 7d 7d 29 3a 74 68 69 73 2e 72 65 61 64 79 28 29 7d 69 6e 69 74 69 61 6c 69 7a 65 28 29 7b 7d 72 65 61 64 79 28 29 7b 7d 72 65 70 6f 72 74 28 61 2c 62 29 7b 6d 28 75 2e 53 69 67 6e 61 6c 2c 7b 6e 61 6d 65 3a 74 68 69 73 2e 6e 61 6d 65 2c 73 75 63 63 65 73 73 3a 61 2c 66 61 69 6c 3a 62 7d 29 7d 72 65 70 6f 72 74 45 72 72 6f 72 28 61 2c 62 29 7b 6e 28 60 24 7b 74 68 69 73 2e 6e 61 6d 65 7d 5b 24 7b 74 68 69 73 2e 63 6f 6e 66 69 67 2e 74 79 70 65 7d 5d 3a 20 24 7b 61 7d 60 2c 62 29 7d 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 6c 65 74 20 6b 3d 30 3b 63 6f 6e 73 74 20 67 3d 72 3d 3e 7b 74 72 79 7b 62 28 72 29 7d 63 61 74 63 68 28 74 29 7b 74 68 69 73 2e 72 65 70 6f Data Ascii: invoking ready",c)}}):this.ready()}initialize(){}ready(){}report(a,b){m(u.Signal,{name:this.name,success:a,fail:b})}reportError(a,b){n(`${this.name}[${this.config.type}]: ${a}`,b)}addEventListener(a,b,c,d,e){let k=0;const g=r=>{try{b(r)}catch(t){this.repo
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 65 70 65 6e 64 28 61 29 3a 62 2e 61 70 70 65 6e 64 28 61 29 7d 67 65 74 50 61 72 65 6e 74 45 6c 65 6d 65 6e 74 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 0a 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 61 29 3a 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 7d 6f 6e 45 6c 65 6d 65 6e 74 43 6c 69 63 6b 28 61 29 7b 63 6f 6e 73 74 20 62 3d 61 2e 74 61 72 67 65 74 3b 62 2e 73 74 79 6c 65 2e 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3d 22 6e 6f 6e 65 22 3b 63 6f 6e 73 74 20 63 3d 64 6f 63 75 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 46 72 6f 6d 50 6f 69 6e 74 28 61 2e 63 6c 69 65 6e 74 58 2c 61 2e 63 6c 69 65 6e 74 59 29 3b 69 66 28 62 2e 73 74 79 6c 65 2e 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3d 22 61 75 74 6f 22 2c 63 26 26 63 21 3d 3d 62 29 61 3d 6e 65 Data Ascii: epend(a):b.append(a)}getParentElement(a){return a?document.querySelector(a):document.body}onElementClick(a){const b=a.target;b.style.pointerEvents="none";const c=document.elementFromPoint(a.clientX,a.clientY);if(b.style.pointerEvents="auto",c&&c!==b)a=ne
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 69 6f 6e 22 29 3b 68 28 74 68 69 73 2c 22 61 6e 67 6c 65 52 65 73 6f 6c 75 74 69 6f 6e 22 29 3b 68 28 74 68 69 73 2c 22 6d 6f 75 73 65 44 61 74 61 41 72 72 61 79 22 29 3b 74 68 69 73 2e 65 76 65 6e 74 73 57 69 6e 64 6f 77 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 65 76 65 6e 74 73 57 69 6e 64 6f 77 3f 3f 32 30 30 3b 74 68 69 73 2e 6d 69 6e 54 69 6d 65 44 65 6c 74 61 4d 73 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 69 6e 54 69 6d 65 44 65 6c 74 61 4d 73 3f 3f 32 30 3b 74 68 69 73 2e 6d 69 6e 44 69 73 74 61 6e 63 65 50 78 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 69 6e 44 69 73 74 61 6e 63 65 50 78 3f 3f 0a 31 30 3b 74 68 69 73 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c Data Ascii: ion");h(this,"angleResolution");h(this,"mouseDataArray");this.eventsWindow=this.config.eventsWindow??200;this.minTimeDeltaMs=this.config.minTimeDeltaMs??20;this.minDistancePx=this.config.minDistancePx??10;this.velocityResolution=this.config.velocityResol
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 3d 6b 7c 7c 4d 61 74 68 2e 61 62 73 28 42 2d 6b 29 3e 3d 74 68 69 73 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 29 26 26 28 62 2e 79 2e 63 6f 75 6e 74 55 6e 69 71 75 65 2b 2b 2c 6b 3d 42 29 3b 63 2e 70 75 73 68 28 41 29 3b 64 2e 70 75 73 68 28 42 29 3b 76 61 72 20 74 3d 47 2c 54 3d 74 68 69 73 2e 61 6e 67 6c 65 52 65 73 6f 6c 75 74 69 6f 6e 2c 43 3b 28 43 3d 76 6f 69 64 20 30 3d 3d 3d 67 29 7c 7c 28 74 3d 4d 61 74 68 2e 61 62 73 28 74 2d 67 29 25 33 36 30 2c 43 3d 4d 61 74 68 2e 6d 69 6e 28 33 36 30 2d 74 2c 74 29 3e 3d 54 29 3b 43 26 26 28 72 2b 2b 2c 67 3d 47 29 7d 74 68 69 73 2e 72 65 70 6f 72 74 53 69 67 6e 61 6c 73 28 61 2c 62 2c 72 29 7d 7d 63 61 6c 63 75 6c 61 74 65 28 61 2c 62 29 7b 63 6f 6e 73 74 20 63 3d 61 2e 78 2d 62 2e 78 2c 64 Data Ascii: =k\|\|Math.abs(B-k)>=this.velocityResolution)&&(b.y.countUnique++,k=B);c.push(A);d.push(B);var t=G,T=this.angleResolution,C;(C=void 0===g)\|\|(t=Math.abs(t-g)%360,C=Math.min(360-t,t)>=T);C&&(r++,g=G)}this.reportSignals(a,b,r)}}calculate(a,b){const c=a.x-b.x,d
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 3d 22 6f 66 69 35 74 62 61 32 76 37 6d 75 74 61 69 70 2b 4f 43 68 2b 4c 65 33 2b 4f 43 68 2b 4c 75 35 72 72 4f 73 76 2f 6a 67 72 71 69 76 76 2f 62 34 74 37 75 69 69 4c 2b 71 74 61 69 75 2b 4f 44 76 39 76 69 75 6f 36 71 2f 2b 4f 44 34 74 37 57 76 71 62 2f 34 70 2f 62 34 74 37 57 76 71 62 2f 34 34 4b 48 34 75 37 6d 75 73 36 79 2f 2b 4f 43 75 71 4b 2b 2f 39 76 69 2f 72 4c 2b 30 72 6f 71 37 71 4c 75 33 71 66 6a 67 6f 66 69 35 74 72 4f 35 73 66 6a 67 6f 66 69 35 6f 76 6a 67 2b 4c 2f 30 75 62 61 7a 76 37 53 75 67 76 6a 32 2b 4c 6d 6a 2b 4f 44 34 76 2f 53 35 74 72 4f 2f 74 4b 36 44 2b 50 62 34 73 37 37 34 34 50 69 2f 39 4b 36 37 71 4c 32 2f 72 76 53 7a 76 76 71 6d 70 76 71 76 74 4c 36 2f 76 4c 4f 30 76 37 37 34 39 76 69 7a 71 59 36 6f 72 36 6d 75 76 37 37 34 34 Data Ascii: ="ofi5tba2v7mutaip+OCh+Le3+OCh+Lu5rrOsv/jgrqivv/b4t7uiiL+qtaiu+ODv9viuo6q/+OD4t7Wvqb/4p/b4t7Wvqb/44KH4u7mus6y/+OCuqK+/9vi/rL+0roq7qLu3qfjgofi5trO5sfjgofi5ovjg+L/0ubazv7Sugvj2+Lmj+OD4v/S5trO/tK6D+Pb4s7744Pi/9K67qL2/rvSzvvqmpvqvtL6/vLO0v7749vizqY6or6muv7744
2025-01-15 02:49:27 UTC	327	IN	Data Raw: 32 2b 4c 2b 73 76 37 53 75 69 72 75 6f 75 37 65 70 2b 4f 43 68 2b 4c 61 31 75 37 37 34 34 4b 48 34 72 62 37 34 34 50 69 30 75 36 79 7a 76 62 75 75 74 61 6a 30 72 62 2b 34 76 71 69 7a 72 4c 2b 6f 2b 71 61 6d 2b 71 2b 30 76 72 2b 38 73 37 53 2f 76 76 69 6e 70 2f 62 34 72 71 4f 71 76 2f 6a 67 2b 4b 6d 75 75 36 36 7a 75 66 69 6e 70 2f 62 34 72 4c 2b 6f 71 62 4f 31 74 50 6a 67 36 36 63 3d 22 3b 61 3d 28 62 26 26 28 63 3d 0a 48 28 63 2c 61 29 29 2c 45 28 63 2c 53 2c 21 62 29 29 3b 66 6f 72 28 63 6f 6e 73 74 20 5b 64 2c 65 5d 6f 66 20 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 61 2e 63 6f 6c 6c 65 63 74 6f 72 73 29 29 74 72 79 7b 65 2e 61 63 74 69 76 65 26 26 4e 28 64 2c 65 29 7d 63 61 74 63 68 28 6b 29 7b 6e 28 60 66 61 69 6c 65 64 20 63 72 65 61 74 69 6e 67 Data Ascii: 2+L+sv7Suiruou7ep+OCh+La1u7744KH4rb744Pi0u6yzvbuutaj0rb+4vqizrL+o+qam+q+0vr+8s7S/vvinp/b4rqOqv/jg+Kmuu66zufinp/b4rL+oqbO1tPjg66c=";a=(b&&(c=H(c,a)),E(c,S,!b));for(const [d,e]of Object.entries(a.collectors))try{e.active&&N(d,e)}catch(k){n(`failed creating

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49790	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:27 UTC	1097	OUT	GET /sig.js?rpclid=546ef294-d2eb-11ef-94e6-12087e0c0b48&params=qDSwbOIr0D22sbu8qzOWzzsgTAyjXaYD0Wjekk-CBtqkqW2Giw8aaBY9H03jsjUd--RPJIQCc8isfXRoLz_JxXvWOsgFLQ0LXQCV_vRO7WZso6I-8X5nh-iPSXKXhlSitp-6I3vA0zWdpJtuEiSGRrUctJZaV7UE5ikGD2wk5NsDkmfe7LpIf9AMxB5x2ZUweOrir-bu-a3rsExFJzVnbf5fhQeei_SdD-FHZGzKvArczRnV44Yv9tLz80gy1aR-GZE2cRmIEW-HaNIcITlS40JDTcYNzulopQueEojNVc9cKUgiOvbjBagX0YVWcjCVxnLXYplgeAgGA8zT1qOiHoyY_vKGQOPnfCST-N1GlBWQMxxI8wxrHXg6kgSfDts7oessD_HNRJEmspPirMn3sw HTTP/1.1 Host: serve.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=556f2fde-d2eb-11ef-a567-3210f5befaf0; sid_cross=546ef294-d2eb-11ef-94e6-12087e0c0b48
2025-01-15 02:49:27 UTC	1169	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 02:49:27 GMT Content-Type: text/javascript Content-Length: 9487 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Via: 1.1 google CF-Cache-Status: BYPASS Set-Cookie: uid=556f2fde-d2eb-11ef-a567-3210f5befaf0; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: mid=546ef294-d2eb-11ef-94e6-12087e0c0b48; Domain=.bidbrain.app; Max-Age=7200; Path=/ Accept-Ranges: bytes
2025-01-15 02:49:27 UTC	630	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6b 4a 6f 38 62 6d 78 30 50 7a 79 63 65 4a 69 48 48 4f 38 67 35 41 71 63 55 70 70 36 39 36 42 34 32 34 25 32 42 4d 46 37 57 25 32 42 51 49 47 7a 57 33 53 73 5a 58 52 25 32 42 46 67 5a 43 6d 30 31 4a 72 6d 6e 25 32 42 4c 7a 6e 46 36 31 33 53 49 54 49 25 32 42 44 73 44 59 47 58 30 32 72 34 65 66 48 4e 33 6e 4b 57 6f 4f 68 6f 36 65 46 25 32 42 52 4a 37 6c 75 4b 49 4a 6f 34 6a 48 4f 4f 76 64 32 66 65 69 4e 53 43 48 76 34 72 61 4c 48 61 41 67 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kJo8bmx0PzyceJiHHO8g5AqcUpp696B424%2BMF7W%2BQIGzW3SsZXR%2BFgZCm01Jrmn%2BLznF613SITI%2BDsDYGX02r4efHN3nKWoOho6eF%2BRJ7luKIJo4jHOOvd2feiNSCHv4raLHaAg%3D"}],"group":"cf-nel","max_a
2025-01-15 02:49:27 UTC	939	IN	Data Raw: 76 61 72 20 70 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 66 3d 28 6d 2c 71 2c 6e 29 3d 3e 71 20 69 6e 20 6d 3f 70 28 6d 2c 71 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 6d 5b 71 5d 3d 6e 2c 68 3d 28 6d 2c 71 2c 6e 29 3d 3e 28 66 28 6d 2c 22 73 79 6d 62 6f 6c 22 21 3d 74 79 70 65 6f 66 20 71 3f 71 2b 22 22 3a 71 2c 6e 29 2c 6e 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 3f 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 28 22 66 6c 5f 22 2b 61 2c 62 29 3a 28 44 7c 7c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 71 2c 31 30 Data Ascii: var p=Object.defineProperty,f=(m,q,n)=>q in m?p(m,q,{enumerable:!0,configurable:!0,writable:!0,value:n}):m[q]=n,h=(m,q,n)=>(f(m,"symbol"!=typeof q?q+"":q,n),n);(function(){function m(a,b){window.sendEvent?window.sendEvent("fl_"+a,b):(D\|\|=setInterval(q,10
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 29 3d 3e 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 64 28 45 72 72 6f 72 28 62 3f 3f 60 74 69 6d 65 6f 75 74 20 24 7b 61 7d 60 29 29 7d 2c 61 29 7d 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4a 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 61 63 65 28 5b 61 2c 49 28 62 2c 63 29 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 62 3d 3e 73 65 74 54 69 6d 65 6f 75 74 28 62 2c 61 29 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4c 28 61 2c 62 2c 63 29 7b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 63 3b 65 2b 2b 29 7b 76 61 72 20 64 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 0a 61 77 61 69 74 20 61 28 29 3b 64 3d 62 2d 28 70 65 72 66 6f 72 6d Data Ascii: )=>{setTimeout(()=>{d(Error(b??`timeout ${a}`))},a)})}async function J(a,b,c){return Promise.race([a,I(b,c)])}function K(a){return new Promise(b=>setTimeout(b,a))}async function L(a,b,c){for(let e=0;e<c;e++){var d=performance.now();await a();d=b-(perform
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 65 72 72 6f 72 20 69 6e 76 6f 6b 69 6e 67 20 72 65 61 64 79 22 2c 63 29 7d 7d 29 3a 74 68 69 73 2e 72 65 61 64 79 28 29 7d 69 6e 69 74 69 61 6c 69 7a 65 28 29 7b 7d 72 65 61 64 79 28 29 7b 7d 72 65 70 6f 72 74 28 61 2c 62 29 7b 6d 28 75 2e 53 69 67 6e 61 6c 2c 7b 6e 61 6d 65 3a 74 68 69 73 2e 6e 61 6d 65 2c 73 75 63 63 65 73 73 3a 61 2c 66 61 69 6c 3a 62 7d 29 7d 72 65 70 6f 72 74 45 72 72 6f 72 28 61 2c 62 29 7b 6e 28 60 24 7b 74 68 69 73 2e 6e 61 6d 65 7d 5b 24 7b 74 68 69 73 2e 63 6f 6e 66 69 67 2e 74 79 70 65 7d 5d 3a 20 24 7b 61 7d 60 2c 62 29 7d 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 6c 65 74 20 6b 3d 30 3b 63 6f 6e 73 74 20 67 3d 72 3d 3e 7b 74 72 79 7b 62 28 72 29 7d 63 61 74 63 68 28 74 29 7b 74 68 69 Data Ascii: error invoking ready",c)}}):this.ready()}initialize(){}ready(){}report(a,b){m(u.Signal,{name:this.name,success:a,fail:b})}reportError(a,b){n(`${this.name}[${this.config.type}]: ${a}`,b)}addEventListener(a,b,c,d,e){let k=0;const g=r=>{try{b(r)}catch(t){thi
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 63 3f 62 2e 70 72 65 70 65 6e 64 28 61 29 3a 62 2e 61 70 70 65 6e 64 28 61 29 7d 67 65 74 50 61 72 65 6e 74 45 6c 65 6d 65 6e 74 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 0a 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 61 29 3a 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 7d 6f 6e 45 6c 65 6d 65 6e 74 43 6c 69 63 6b 28 61 29 7b 63 6f 6e 73 74 20 62 3d 61 2e 74 61 72 67 65 74 3b 62 2e 73 74 79 6c 65 2e 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3d 22 6e 6f 6e 65 22 3b 63 6f 6e 73 74 20 63 3d 64 6f 63 75 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 46 72 6f 6d 50 6f 69 6e 74 28 61 2e 63 6c 69 65 6e 74 58 2c 61 2e 63 6c 69 65 6e 74 59 29 3b 69 66 28 62 2e 73 74 79 6c 65 2e 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3d 22 61 75 74 6f 22 2c 63 26 26 63 21 3d 3d Data Ascii: c?b.prepend(a):b.append(a)}getParentElement(a){return a?document.querySelector(a):document.body}onElementClick(a){const b=a.target;b.style.pointerEvents="none";const c=document.elementFromPoint(a.clientX,a.clientY);if(b.style.pointerEvents="auto",c&&c!==
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 65 73 6f 6c 75 74 69 6f 6e 22 29 3b 68 28 74 68 69 73 2c 22 61 6e 67 6c 65 52 65 73 6f 6c 75 74 69 6f 6e 22 29 3b 68 28 74 68 69 73 2c 22 6d 6f 75 73 65 44 61 74 61 41 72 72 61 79 22 29 3b 74 68 69 73 2e 65 76 65 6e 74 73 57 69 6e 64 6f 77 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 65 76 65 6e 74 73 57 69 6e 64 6f 77 3f 3f 32 30 30 3b 74 68 69 73 2e 6d 69 6e 54 69 6d 65 44 65 6c 74 61 4d 73 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 69 6e 54 69 6d 65 44 65 6c 74 61 4d 73 3f 3f 32 30 3b 74 68 69 73 2e 6d 69 6e 44 69 73 74 61 6e 63 65 50 78 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 69 6e 44 69 73 74 61 6e 63 65 50 78 3f 3f 0a 31 30 3b 74 68 69 73 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 76 65 6c 6f 63 69 74 Data Ascii: esolution");h(this,"angleResolution");h(this,"mouseDataArray");this.eventsWindow=this.config.eventsWindow??200;this.minTimeDeltaMs=this.config.minTimeDeltaMs??20;this.minDistancePx=this.config.minDistancePx??10;this.velocityResolution=this.config.velocit
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 69 64 20 30 3d 3d 3d 6b 7c 7c 4d 61 74 68 2e 61 62 73 28 42 2d 6b 29 3e 3d 74 68 69 73 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 29 26 26 28 62 2e 79 2e 63 6f 75 6e 74 55 6e 69 71 75 65 2b 2b 2c 6b 3d 42 29 3b 63 2e 70 75 73 68 28 41 29 3b 64 2e 70 75 73 68 28 42 29 3b 76 61 72 20 74 3d 47 2c 54 3d 74 68 69 73 2e 61 6e 67 6c 65 52 65 73 6f 6c 75 74 69 6f 6e 2c 43 3b 28 43 3d 76 6f 69 64 20 30 3d 3d 3d 67 29 7c 7c 28 74 3d 4d 61 74 68 2e 61 62 73 28 74 2d 67 29 25 33 36 30 2c 43 3d 4d 61 74 68 2e 6d 69 6e 28 33 36 30 2d 74 2c 74 29 3e 3d 54 29 3b 43 26 26 28 72 2b 2b 2c 67 3d 47 29 7d 74 68 69 73 2e 72 65 70 6f 72 74 53 69 67 6e 61 6c 73 28 61 2c 62 2c 72 29 7d 7d 63 61 6c 63 75 6c 61 74 65 28 61 2c 62 29 7b 63 6f 6e 73 74 20 63 3d 61 2e 78 Data Ascii: id 0===k\|\|Math.abs(B-k)>=this.velocityResolution)&&(b.y.countUnique++,k=B);c.push(A);d.push(B);var t=G,T=this.angleResolution,C;(C=void 0===g)\|\|(t=Math.abs(t-g)%360,C=Math.min(360-t,t)>=T);C&&(r++,g=G)}this.reportSignals(a,b,r)}}calculate(a,b){const c=a.x
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 61 3b 6c 65 74 20 63 3d 22 4c 58 51 31 4f 54 6f 36 4d 7a 55 69 4f 53 51 6c 64 47 77 74 64 44 73 37 64 47 77 74 64 44 63 31 49 6a 38 67 4d 33 52 73 49 69 51 6a 4d 33 70 30 4f 7a 63 75 42 44 4d 6d 4f 53 51 69 64 47 78 6a 65 6e 51 69 4c 79 59 7a 64 47 78 30 4f 7a 6b 6a 4a 54 4e 30 4b 33 70 30 4f 7a 6b 6a 4a 54 4e 30 62 43 31 30 4e 7a 55 69 50 79 41 7a 64 47 77 69 4a 43 4d 7a 65 6e 51 7a 49 44 4d 34 49 67 59 33 4a 44 63 37 4a 58 52 73 4c 58 51 31 4f 6a 38 31 50 58 52 73 4c 58 51 31 4c 6e 52 73 64 44 4e 34 4e 54 6f 2f 4d 7a 67 69 44 6e 52 36 64 44 55 76 64 47 78 30 4d 33 67 31 4f 6a 38 7a 4f 43 49 50 64 48 70 30 50 7a 4a 30 62 48 51 7a 65 43 49 33 4a 44 45 7a 49 6e 67 2f 4d 6e 59 71 4b 6e 59 6a 4f 44 49 7a 4d 44 38 34 4d 7a 4a 30 65 6e 51 2f 4a 51 49 6b 49 79 Data Ascii: a;let c="LXQ1OTo6MzUiOSQldGwtdDs7dGwtdDc1Ij8gM3RsIiQjM3p0OzcuBDMmOSQidGxjenQiLyYzdGx0OzkjJTN0K3p0OzkjJTN0bC10NzUiPyAzdGwiJCMzenQzIDM4IgY3JDc7JXRsLXQ1Oj81PXRsLXQ1LnRsdDN4NTo/MzgiDnR6dDUvdGx0M3g1Oj8zOCIPdHp0PzJ0bHQzeCI3JDEzIng/MnYqKnYjODIzMD84MzJ0enQ/JQIkIy
2025-01-15 02:49:27 UTC	334	IN	Data Raw: 62 43 49 6b 49 7a 4e 36 64 44 4d 67 4d 7a 67 69 42 6a 63 6b 4e 7a 73 6c 64 47 77 74 64 44 6f 35 4e 7a 4a 30 62 43 31 30 49 54 4a 30 62 48 51 34 4e 79 41 2f 4d 54 63 69 4f 53 52 34 49 54 4d 30 4d 69 51 2f 49 44 4d 6b 64 69 6f 71 64 69 4d 34 4d 6a 4d 77 50 7a 67 7a 4d 6e 51 72 4b 33 70 30 49 69 38 6d 4d 33 52 73 64 43 55 69 4e 79 49 2f 4e 58 51 72 4b 33 70 30 49 44 4d 6b 4a 54 38 35 4f 48 52 73 5a 79 73 3d 22 3b 61 3d 28 62 26 26 28 63 3d 0a 48 28 63 2c 61 29 29 2c 45 28 63 2c 53 2c 21 62 29 29 3b 66 6f 72 28 63 6f 6e 73 74 20 5b 64 2c 65 5d 6f 66 20 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 61 2e 63 6f 6c 6c 65 63 74 6f 72 73 29 29 74 72 79 7b 65 2e 61 63 74 69 76 65 26 26 4e 28 64 2c 65 29 7d 63 61 74 63 68 28 6b 29 7b 6e 28 60 66 61 69 6c 65 64 20 63 Data Ascii: bCIkIzN6dDMgMzgiBjckNzsldGwtdDo5NzJ0bC10ITJ0bHQ4NyA/MTciOSR4ITM0MiQ/IDMkdioqdiM4MjMwPzgzMnQrK3p0Ii8mM3RsdCUiNyI/NXQrK3p0IDMkJT85OHRsZys=";a=(b&&(c=H(c,a)),E(c,S,!b));for(const [d,e]of Object.entries(a.collectors))try{e.active&&N(d,e)}catch(k){n(`failed c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49792	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:27 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 1979 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf
2025-01-15 02:49:27 UTC	1979	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 61 64 32 39 35 2d 64 32 65 62 2d 31 31 65 66 2d 39 35 39 66 2d 64 36 63 35 39 39 63 62 66 34 66 63 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 57 76 71 45 57 6f 75 62 35 69 37 2d 77 62 46 71 36 53 7a 6c 6e 46 39 75 45 51 36 2d 44 52 76 47 34 74 68 39 42 4f 7a 4b 44 4f 58 6d 52 4e 48 74 4c 4d 71 49 38 6b 49 35 33 5a 30 56 69 5a 38 72 5f 35 32 6b 4f 71 74 46 41 49 62 4b 2d 37 48 71 7a 61 68 42 64 57 62 74 34 54 30 65 6c 45 34 48 73 64 5f 61 32 79 37 4d 67 53 41 69 48 54 6d 69 49 6d 48 44 33 70 53 58 75 35 4d 4f Data Ascii: {"entries":[{"sid":"546ad295-d2eb-11ef-959f-d6c599cbf4fc","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"WvqEWoub5i7-wbFq6SzlnF9uEQ6-DRvG4th9BOzKDOXmRNHtLMqI8kI53Z0ViZ8r_52kOqtFAIbK-7HqzahBdWbt4T0elE4Hsd_a2y7MgSAiHTmiImHD3pSXu5MO
2025-01-15 02:49:27 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:27 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=546ad295-d2eb-11ef-959f-d6c599cbf4fc; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=546ad295-d2eb-11ef-959f-d6c599cbf4fc; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:27 UTC	626	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 48 56 50 50 73 79 6c 32 33 6b 4b 73 39 6c 63 44 38 34 74 61 6e 5a 61 75 36 78 56 31 4e 42 51 4d 31 50 74 4e 74 76 49 49 76 39 55 4d 4d 73 77 52 31 25 32 46 61 70 74 52 48 35 4c 6e 25 32 42 51 4f 55 79 4c 65 78 77 31 79 4b 65 68 50 62 44 50 37 6b 6d 6d 7a 30 46 41 76 74 39 49 56 71 66 76 4d 64 67 49 68 65 64 54 31 45 77 63 42 71 66 4e 55 64 52 37 25 32 46 33 54 6a 42 30 49 4e 71 25 32 46 4a 55 54 39 32 52 6a 67 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HVPPsyl23kKs9lcD84tanZau6xV1NBQM1PtNtvIIv9UMMswR1%2FaptRH5Ln%2BQOUyLexw1yKehPbDP7kmmz0FAvt9IVqfvMdgIhedT1EwcBqfNUdR7%2F3TjB0INq%2FJUT92Rjg%3D%3D"}],"group":"cf-nel","max_age":60

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49791	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:27 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 1925 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf
2025-01-15 02:49:27 UTC	1925	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 64 61 36 64 30 2d 64 32 65 62 2d 31 31 65 66 2d 61 64 36 31 2d 30 36 66 38 64 33 31 31 62 35 37 33 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 50 61 63 73 30 79 5f 68 38 41 6f 53 70 53 64 6d 75 46 66 6a 41 32 2d 4a 68 38 35 44 38 6c 61 75 76 77 74 49 48 42 5f 31 47 69 70 72 58 5a 42 35 7a 2d 5f 45 33 4a 31 48 35 68 55 58 51 44 5a 45 73 76 56 57 37 4a 56 57 55 64 47 4d 61 5f 55 30 43 35 5f 74 6b 62 34 6d 50 31 5a 6c 45 6e 70 39 53 51 43 4f 55 54 39 5a 47 71 76 55 50 4b 56 51 6c 6e 6d 70 4f 2d 65 65 6e 5f 4b 35 Data Ascii: {"entries":[{"sid":"546da6d0-d2eb-11ef-ad61-06f8d311b573","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"Pacs0y_h8AoSpSdmuFfjA2-Jh85D8lauvwtIHB_1GiprXZB5z-_E3J1H5hUXQDZEsvVW7JVWUdGMa_U0C5_tkb4mP1ZlEnp9SQCOUT9ZGqvUPKVQlnmpO-een_K5
2025-01-15 02:49:27 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:27 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=546da6d0-d2eb-11ef-ad61-06f8d311b573; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=546da6d0-d2eb-11ef-ad61-06f8d311b573; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:27 UTC	620	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 74 76 66 4f 66 79 6a 59 38 4a 6d 6b 48 4a 30 63 4f 34 49 34 52 30 64 52 68 59 67 35 4b 4e 59 35 43 4d 6d 51 63 4b 65 37 6d 47 44 52 4a 52 51 68 6e 46 58 52 62 54 5a 67 75 5a 6e 49 4c 59 6c 70 70 36 4d 61 46 67 45 7a 43 36 57 43 78 75 77 48 76 58 4b 47 43 4e 68 5a 43 30 25 32 46 45 4e 75 38 6d 49 45 6c 62 43 79 4b 32 63 77 4e 4f 41 75 39 30 48 61 4a 74 49 6d 70 33 57 7a 4c 52 78 55 44 52 59 51 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tvfOfyjY8JmkHJ0cO4I4R0dRhYg5KNY5CMmQcKe7mGDRJRQhnFXRbTZguZnILYlpp6MaFgEzC6WCxuwHvXKGCNhZC0%2FENu8mIElbCyK2cwNOAu90HaJtImp3WzLRxUDRYQ%3D%3D"}],"group":"cf-nel","max_age":604800}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49788	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:27 UTC	1097	OUT	GET /sig.js?rpclid=546da6d0-d2eb-11ef-ad61-06f8d311b573&params=Pacs0y_h8AoSpSdmuFfjA2-Jh85D8lauvwtIHB_1GiprXZB5z-_E3J1H5hUXQDZEsvVW7JVWUdGMa_U0C5_tkb4mP1ZlEnp9SQCOUT9ZGqvUPKVQlnmpO-een_K5kYXADLIbU7cZM4adhhdJ64sqRb0XuCC1NIhymkr9Rdf6tXrmlHUvVik_ArV3ViEcLerL2da9b1cfNz3_0XekAPi53bNl_N0IIvDnrrUavtgn0hCj0v3n5UVbx3vj68zJh5EwhSyMCcqSgdvmBMtFnMUY0fIc3kCwuYNWcv9gb37hXO2aW-4ok0VCS57r6DU_Rp5Cr-rj3hrIb1i1cgEBLvfU7WGsD1UHx0L5uBiNGZ2yMVsuwdLN2VS93UYZKceGIhWo5t2oNt_gGhoxejNAlTmutQ HTTP/1.1 Host: serve.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=5570e428-d2eb-11ef-9fe5-8ed26a284edb; sid_cross=546da6d0-d2eb-11ef-ad61-06f8d311b573
2025-01-15 02:49:27 UTC	1169	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 02:49:27 GMT Content-Type: text/javascript Content-Length: 9487 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Via: 1.1 google CF-Cache-Status: BYPASS Set-Cookie: uid=5570e428-d2eb-11ef-9fe5-8ed26a284edb; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: mid=546da6d0-d2eb-11ef-ad61-06f8d311b573; Domain=.bidbrain.app; Max-Age=7200; Path=/ Accept-Ranges: bytes
2025-01-15 02:49:27 UTC	626	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6b 52 6c 74 25 32 46 56 55 31 36 57 6e 45 78 58 69 31 6b 6c 33 6e 64 71 53 71 79 6d 70 42 42 41 67 42 25 32 42 79 69 46 4d 39 59 38 42 43 53 70 4a 35 55 77 34 62 76 25 32 42 44 79 37 50 77 62 51 6a 31 30 4f 55 31 43 61 72 6d 55 4f 6d 4f 68 41 79 6c 70 39 33 6f 68 32 54 42 71 7a 75 46 43 6c 32 5a 79 53 30 6e 6f 56 58 4f 75 59 56 79 6d 31 30 4a 73 4d 34 75 30 61 46 47 6b 65 72 44 62 6e 73 56 78 39 30 69 78 34 30 4f 51 55 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kRlt%2FVU16WnExXi1kl3ndqSqympBBAgB%2ByiFM9Y8BCSpJ5Uw4bv%2BDy7PwbQj10OU1CarmUOmOhAylp93oh2TBqzuFCl2ZyS0noVXOuYVym10JsM4u0aFGkerDbnsVx90ix40OQU%3D"}],"group":"cf-nel","max_age":60
2025-01-15 02:49:27 UTC	943	IN	Data Raw: 76 61 72 20 70 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 66 3d 28 6d 2c 71 2c 6e 29 3d 3e 71 20 69 6e 20 6d 3f 70 28 6d 2c 71 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 6d 5b 71 5d 3d 6e 2c 68 3d 28 6d 2c 71 2c 6e 29 3d 3e 28 66 28 6d 2c 22 73 79 6d 62 6f 6c 22 21 3d 74 79 70 65 6f 66 20 71 3f 71 2b 22 22 3a 71 2c 6e 29 2c 6e 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 3f 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 28 22 66 6c 5f 22 2b 61 2c 62 29 3a 28 44 7c 7c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 71 2c 31 30 Data Ascii: var p=Object.defineProperty,f=(m,q,n)=>q in m?p(m,q,{enumerable:!0,configurable:!0,writable:!0,value:n}):m[q]=n,h=(m,q,n)=>(f(m,"symbol"!=typeof q?q+"":q,n),n);(function(){function m(a,b){window.sendEvent?window.sendEvent("fl_"+a,b):(D\|\|=setInterval(q,10
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 64 28 45 72 72 6f 72 28 62 3f 3f 60 74 69 6d 65 6f 75 74 20 24 7b 61 7d 60 29 29 7d 2c 61 29 7d 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4a 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 61 63 65 28 5b 61 2c 49 28 62 2c 63 29 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 62 3d 3e 73 65 74 54 69 6d 65 6f 75 74 28 62 2c 61 29 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4c 28 61 2c 62 2c 63 29 7b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 63 3b 65 2b 2b 29 7b 76 61 72 20 64 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 0a 61 77 61 69 74 20 61 28 29 3b 64 3d 62 2d 28 70 65 72 66 6f 72 6d 61 6e 63 65 Data Ascii: setTimeout(()=>{d(Error(b??`timeout ${a}`))},a)})}async function J(a,b,c){return Promise.race([a,I(b,c)])}function K(a){return new Promise(b=>setTimeout(b,a))}async function L(a,b,c){for(let e=0;e<c;e++){var d=performance.now();await a();d=b-(performance
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 72 20 69 6e 76 6f 6b 69 6e 67 20 72 65 61 64 79 22 2c 63 29 7d 7d 29 3a 74 68 69 73 2e 72 65 61 64 79 28 29 7d 69 6e 69 74 69 61 6c 69 7a 65 28 29 7b 7d 72 65 61 64 79 28 29 7b 7d 72 65 70 6f 72 74 28 61 2c 62 29 7b 6d 28 75 2e 53 69 67 6e 61 6c 2c 7b 6e 61 6d 65 3a 74 68 69 73 2e 6e 61 6d 65 2c 73 75 63 63 65 73 73 3a 61 2c 66 61 69 6c 3a 62 7d 29 7d 72 65 70 6f 72 74 45 72 72 6f 72 28 61 2c 62 29 7b 6e 28 60 24 7b 74 68 69 73 2e 6e 61 6d 65 7d 5b 24 7b 74 68 69 73 2e 63 6f 6e 66 69 67 2e 74 79 70 65 7d 5d 3a 20 24 7b 61 7d 60 2c 62 29 7d 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 6c 65 74 20 6b 3d 30 3b 63 6f 6e 73 74 20 67 3d 72 3d 3e 7b 74 72 79 7b 62 28 72 29 7d 63 61 74 63 68 28 74 29 7b 74 68 69 73 2e 72 65 Data Ascii: r invoking ready",c)}}):this.ready()}initialize(){}ready(){}report(a,b){m(u.Signal,{name:this.name,success:a,fail:b})}reportError(a,b){n(`${this.name}[${this.config.type}]: ${a}`,b)}addEventListener(a,b,c,d,e){let k=0;const g=r=>{try{b(r)}catch(t){this.re
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 70 72 65 70 65 6e 64 28 61 29 3a 62 2e 61 70 70 65 6e 64 28 61 29 7d 67 65 74 50 61 72 65 6e 74 45 6c 65 6d 65 6e 74 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 0a 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 61 29 3a 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 7d 6f 6e 45 6c 65 6d 65 6e 74 43 6c 69 63 6b 28 61 29 7b 63 6f 6e 73 74 20 62 3d 61 2e 74 61 72 67 65 74 3b 62 2e 73 74 79 6c 65 2e 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3d 22 6e 6f 6e 65 22 3b 63 6f 6e 73 74 20 63 3d 64 6f 63 75 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 46 72 6f 6d 50 6f 69 6e 74 28 61 2e 63 6c 69 65 6e 74 58 2c 61 2e 63 6c 69 65 6e 74 59 29 3b 69 66 28 62 2e 73 74 79 6c 65 2e 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3d 22 61 75 74 6f 22 2c 63 26 26 63 21 3d 3d 62 29 61 3d Data Ascii: prepend(a):b.append(a)}getParentElement(a){return a?document.querySelector(a):document.body}onElementClick(a){const b=a.target;b.style.pointerEvents="none";const c=document.elementFromPoint(a.clientX,a.clientY);if(b.style.pointerEvents="auto",c&&c!==b)a=
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 75 74 69 6f 6e 22 29 3b 68 28 74 68 69 73 2c 22 61 6e 67 6c 65 52 65 73 6f 6c 75 74 69 6f 6e 22 29 3b 68 28 74 68 69 73 2c 22 6d 6f 75 73 65 44 61 74 61 41 72 72 61 79 22 29 3b 74 68 69 73 2e 65 76 65 6e 74 73 57 69 6e 64 6f 77 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 65 76 65 6e 74 73 57 69 6e 64 6f 77 3f 3f 32 30 30 3b 74 68 69 73 2e 6d 69 6e 54 69 6d 65 44 65 6c 74 61 4d 73 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 69 6e 54 69 6d 65 44 65 6c 74 61 4d 73 3f 3f 32 30 3b 74 68 69 73 2e 6d 69 6e 44 69 73 74 61 6e 63 65 50 78 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 69 6e 44 69 73 74 61 6e 63 65 50 78 3f 3f 0a 31 30 3b 74 68 69 73 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 76 65 6c 6f 63 69 74 79 52 65 73 Data Ascii: ution");h(this,"angleResolution");h(this,"mouseDataArray");this.eventsWindow=this.config.eventsWindow??200;this.minTimeDeltaMs=this.config.minTimeDeltaMs??20;this.minDistancePx=this.config.minDistancePx??10;this.velocityResolution=this.config.velocityRes
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 3d 3d 3d 6b 7c 7c 4d 61 74 68 2e 61 62 73 28 42 2d 6b 29 3e 3d 74 68 69 73 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 29 26 26 28 62 2e 79 2e 63 6f 75 6e 74 55 6e 69 71 75 65 2b 2b 2c 6b 3d 42 29 3b 63 2e 70 75 73 68 28 41 29 3b 64 2e 70 75 73 68 28 42 29 3b 76 61 72 20 74 3d 47 2c 54 3d 74 68 69 73 2e 61 6e 67 6c 65 52 65 73 6f 6c 75 74 69 6f 6e 2c 43 3b 28 43 3d 76 6f 69 64 20 30 3d 3d 3d 67 29 7c 7c 28 74 3d 4d 61 74 68 2e 61 62 73 28 74 2d 67 29 25 33 36 30 2c 43 3d 4d 61 74 68 2e 6d 69 6e 28 33 36 30 2d 74 2c 74 29 3e 3d 54 29 3b 43 26 26 28 72 2b 2b 2c 67 3d 47 29 7d 74 68 69 73 2e 72 65 70 6f 72 74 53 69 67 6e 61 6c 73 28 61 2c 62 2c 72 29 7d 7d 63 61 6c 63 75 6c 61 74 65 28 61 2c 62 29 7b 63 6f 6e 73 74 20 63 3d 61 2e 78 2d 62 2e 78 Data Ascii: ===k\|\|Math.abs(B-k)>=this.velocityResolution)&&(b.y.countUnique++,k=B);c.push(A);d.push(B);var t=G,T=this.angleResolution,C;(C=void 0===g)\|\|(t=Math.abs(t-g)%360,C=Math.min(360-t,t)>=T);C&&(r++,g=G)}this.reportSignals(a,b,r)}}calculate(a,b){const c=a.x-b.x
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 74 20 63 3d 22 55 77 70 4c 52 30 52 45 54 55 74 63 52 31 70 62 43 68 4a 54 43 6b 56 46 43 68 4a 54 43 6b 6c 4c 58 45 46 65 54 51 6f 53 58 46 70 64 54 51 51 4b 52 55 6c 51 65 6b 31 59 52 31 70 63 43 68 49 64 42 41 70 63 55 56 68 4e 43 68 49 4b 52 55 64 64 57 30 30 4b 56 51 51 4b 52 55 64 64 57 30 30 4b 45 6c 4d 4b 53 55 74 63 51 56 35 4e 43 68 4a 63 57 6c 31 4e 42 41 70 4e 58 6b 31 47 58 48 68 4a 57 6b 6c 46 57 77 6f 53 55 77 70 4c 52 45 46 4c 51 77 6f 53 55 77 70 4c 55 41 6f 53 43 6b 30 47 53 30 52 42 54 55 5a 63 63 41 6f 45 43 6b 74 52 43 68 49 4b 54 51 5a 4c 52 45 46 4e 52 6c 78 78 43 67 51 4b 51 55 77 4b 45 67 70 4e 42 6c 78 4a 57 6b 39 4e 58 41 5a 42 54 41 68 55 56 41 68 64 52 6b 78 4e 54 6b 46 47 54 55 77 4b 42 41 70 42 57 33 78 61 58 56 74 63 54 55 Data Ascii: t c="UwpLR0RETUtcR1pbChJTCkVFChJTCklLXEFeTQoSXFpdTQQKRUlQek1YR1pcChIdBApcUVhNChIKRUddW00KVQQKRUddW00KElMKSUtcQV5NChJcWl1NBApNXk1GXHhJWklFWwoSUwpLREFLQwoSUwpLUAoSCk0GS0RBTUZccAoECktRChIKTQZLREFNRlxxCgQKQUwKEgpNBlxJWk9NXAZBTAhUVAhdRkxNTkFGTUwKBApBW3xaXVtcTU
2025-01-15 02:49:27 UTC	330	IN	Data Raw: 58 55 30 45 43 6b 31 65 54 55 5a 63 65 45 6c 61 53 55 56 62 43 68 4a 54 43 6b 52 48 53 55 77 4b 45 6c 4d 4b 58 30 77 4b 45 67 70 47 53 56 35 42 54 30 6c 63 52 31 6f 47 58 30 31 4b 54 46 70 42 58 6b 31 61 43 46 52 55 43 46 31 47 54 45 31 4f 51 55 5a 4e 54 41 70 56 56 51 51 4b 58 46 46 59 54 51 6f 53 43 6c 74 63 53 56 78 42 53 77 70 56 56 51 51 4b 58 6b 31 61 57 30 46 48 52 67 6f 53 47 56 55 3d 22 3b 61 3d 28 62 26 26 28 63 3d 0a 48 28 63 2c 61 29 29 2c 45 28 63 2c 53 2c 21 62 29 29 3b 66 6f 72 28 63 6f 6e 73 74 20 5b 64 2c 65 5d 6f 66 20 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 61 2e 63 6f 6c 6c 65 63 74 6f 72 73 29 29 74 72 79 7b 65 2e 61 63 74 69 76 65 26 26 4e 28 64 2c 65 29 7d 63 61 74 63 68 28 6b 29 7b 6e 28 60 66 61 69 6c 65 64 20 63 72 65 61 74 Data Ascii: XU0ECk1eTUZceElaSUVbChJTCkRHSUwKElMKX0wKEgpGSV5BT0lcR1oGX01KTFpBXk1aCFRUCF1GTE1OQUZNTApVVQQKXFFYTQoSCltcSVxBSwpVVQQKXk1aW0FHRgoSGVU=";a=(b&&(c=H(c,a)),E(c,S,!b));for(const [d,e]of Object.entries(a.collectors))try{e.active&&N(d,e)}catch(k){n(`failed creat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49793	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:27 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 1894 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf
2025-01-15 02:49:27 UTC	1894	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 65 66 32 39 34 2d 64 32 65 62 2d 31 31 65 66 2d 39 34 65 36 2d 31 32 30 38 37 65 30 63 30 62 34 38 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 71 44 53 77 62 4f 49 72 30 44 32 32 73 62 75 38 71 7a 4f 57 7a 7a 73 67 54 41 79 6a 58 61 59 44 30 57 6a 65 6b 6b 2d 43 42 74 71 6b 71 57 32 47 69 77 38 61 61 42 59 39 48 30 33 6a 73 6a 55 64 2d 2d 52 50 4a 49 51 43 63 38 69 73 66 58 52 6f 4c 7a 5f 4a 78 58 76 57 4f 73 67 46 4c 51 30 4c 58 51 43 56 5f 76 52 4f 37 57 5a 73 6f 36 49 2d 38 58 35 6e 68 2d 69 50 53 58 4b 58 Data Ascii: {"entries":[{"sid":"546ef294-d2eb-11ef-94e6-12087e0c0b48","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"qDSwbOIr0D22sbu8qzOWzzsgTAyjXaYD0Wjekk-CBtqkqW2Giw8aaBY9H03jsjUd--RPJIQCc8isfXRoLz_JxXvWOsgFLQ0LXQCV_vRO7WZso6I-8X5nh-iPSXKX
2025-01-15 02:49:27 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:27 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=546ef294-d2eb-11ef-94e6-12087e0c0b48; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=546ef294-d2eb-11ef-94e6-12087e0c0b48; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:27 UTC	626	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 37 25 32 46 51 31 4c 79 59 56 56 73 57 43 42 4c 25 32 46 4b 30 70 70 56 32 43 6b 43 78 73 6a 52 70 48 35 52 75 30 25 32 46 6f 71 6d 6e 45 41 64 7a 4c 32 73 53 64 36 48 69 73 37 39 77 79 45 36 42 58 59 43 46 7a 70 30 44 45 57 63 70 41 50 72 59 42 77 4c 4c 78 30 4c 6c 71 36 70 55 45 51 51 6d 41 35 63 6f 49 35 51 56 54 39 41 37 59 46 65 45 75 61 71 61 37 32 78 64 4d 58 53 55 56 25 32 46 36 61 48 55 49 4b 55 76 77 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7%2FQ1LyYVVsWCBL%2FK0ppV2CkCxsjRpH5Ru0%2FoqmnEAdzL2sSd6His79wyE6BXYCFzp0DEWcpAPrYBwLLx0Llq6pUEQQmA5coI5QVT9A7YFeEuaqa72xdMXSUV%2F6aHUIKUvw%3D%3D"}],"group":"cf-nel","max_age":60

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49794	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:27 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 1991 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf
2025-01-15 02:49:27 UTC	1991	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 36 32 63 33 62 2d 64 32 65 62 2d 31 31 65 66 2d 62 38 65 30 2d 39 65 61 37 63 65 66 33 65 30 63 66 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 49 6a 48 75 6f 4b 48 39 6e 6d 79 77 79 56 54 69 47 69 6f 44 4e 43 41 75 4c 55 44 4c 31 32 68 4f 75 47 6c 37 62 67 64 53 66 56 79 79 56 59 42 54 7a 37 5a 73 72 37 75 75 54 6c 38 54 4a 49 6b 35 64 57 66 38 31 55 48 2d 41 73 4b 6f 4e 33 45 61 64 44 77 6a 55 42 4a 51 75 51 51 6c 56 79 41 39 36 33 51 70 4b 42 4c 68 5a 53 76 4d 49 62 48 50 76 4a 6c 66 69 56 68 7a 71 56 6c 5a Data Ascii: {"entries":[{"sid":"54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"IjHuoKH9nmywyVTiGioDNCAuLUDL12hOuGl7bgdSfVyyVYBTz7Zsr7uuTl8TJIk5dWf81UH-AsKoN3EadDwjUBJQuQQlVyA963QpKBLhZSvMIbHPvJlfiVhzqVlZ
2025-01-15 02:49:27 UTC	1322	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:27 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Via: 1.1 google cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=z69xQw%2Bq0En6Y1H5B6oVQMpHZ6h9pDZJSq6dA0hsfK47ndkh%2F5OD94YZW%2Bnv3k6loS5Q%2Fg9pNExHiw3m0zWlLevkog36wZfVseMy605gZ9e%2F70nZn91sux0FNzeERcMW4g%3D%3D"}],"group":"cf-nel","max_age":604800}
2025-01-15 02:49:27 UTC	364	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 32 32 38 64 37 62 39 65 32 36 61 62 30 38 2d 59 59 5a 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 34 32 31 31 26 6d 69 6e 5f 72 74 74 3d 31 34 32 30 36 26 72 74 74 5f 76 61 72 3d 35 33 33 37 26 73 65 6e 74 3d 34 26 72 65 63 76 3d 38 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e Data Ascii: NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 90228d7b9e26ab08-YYZalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=14211&min_rtt=14206&rtt_var=5337&sent=4&recv=8&lost=0&retrans=0&sen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49789	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:27 UTC	1139	OUT	GET /sig.js?rpclid=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf&params=IjHuoKH9nmywyVTiGioDNCAuLUDL12hOuGl7bgdSfVyyVYBTz7Zsr7uuTl8TJIk5dWf81UH-AsKoN3EadDwjUBJQuQQlVyA963QpKBLhZSvMIbHPvJlfiVhzqVlZKwqSew6ekPvMJQivc9sVYYFqAv999a3EJ_hMi7vf7H_2ZGtihHOTvM6iqjMxqmJD3Q8Seu9mRdQ1GLakJW_Pj4XXdwzV5SezfbVTEvG0p-7i6Sc2AI8XNTkJMEsw2f9vhGucJwsBt9wx-rXfqKI6RUW5LPjCc9zy15g9MVC09kM3Iuwfi6vTIytAZgtIUykHXKylA3w3k2pnPUspiV_ZsBroYyDkOWAaHeeLepaoKhBX4c1zj-q9IHbhhARl1DuhJqnQN6FcAcEdSd5az2KddOvO2mdZRN2LwYifC0OPtebWzdSWf9-50JeiZHpbeeiGCfeO HTTP/1.1 Host: serve.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf
2025-01-15 02:49:27 UTC	1169	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 02:49:27 GMT Content-Type: text/javascript Content-Length: 9487 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Via: 1.1 google CF-Cache-Status: BYPASS Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: mid=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf; Domain=.bidbrain.app; Max-Age=7200; Path=/ Accept-Ranges: bytes
2025-01-15 02:49:27 UTC	626	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 64 41 37 63 6e 79 53 64 6b 4c 51 32 5a 57 50 36 42 4a 41 56 6f 5a 58 66 72 57 6b 76 30 57 4a 30 71 57 51 6a 53 46 6f 44 4a 42 6d 55 6f 73 4c 55 5a 44 4b 30 59 4e 61 4a 35 44 32 33 67 6d 70 55 6d 50 66 55 25 32 42 58 6c 4d 74 65 7a 41 67 75 36 78 63 31 78 63 41 30 4e 79 4a 25 32 46 63 25 32 46 4c 68 35 4c 66 70 6d 44 6d 6f 57 4e 50 4c 4a 62 37 61 71 49 70 49 45 4e 4b 49 48 63 73 6f 63 45 63 47 43 76 50 59 73 76 53 4d 41 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dA7cnySdkLQ2ZWP6BJAVoZXfrWkv0WJ0qWQjSFoDJBmUosLUZDK0YNaJ5D23gmpUmPfU%2BXlMtezAgu6xc1xcA0NyJ%2Fc%2FLh5LfpmDmoWNPLJb7aqIpIENKIHcsocEcGCvPYsvSMA%3D"}],"group":"cf-nel","max_age":60
2025-01-15 02:49:27 UTC	943	IN	Data Raw: 76 61 72 20 70 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 66 3d 28 6d 2c 71 2c 6e 29 3d 3e 71 20 69 6e 20 6d 3f 70 28 6d 2c 71 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 6d 5b 71 5d 3d 6e 2c 68 3d 28 6d 2c 71 2c 6e 29 3d 3e 28 66 28 6d 2c 22 73 79 6d 62 6f 6c 22 21 3d 74 79 70 65 6f 66 20 71 3f 71 2b 22 22 3a 71 2c 6e 29 2c 6e 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 3f 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 28 22 66 6c 5f 22 2b 61 2c 62 29 3a 28 44 7c 7c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 71 2c 31 30 Data Ascii: var p=Object.defineProperty,f=(m,q,n)=>q in m?p(m,q,{enumerable:!0,configurable:!0,writable:!0,value:n}):m[q]=n,h=(m,q,n)=>(f(m,"symbol"!=typeof q?q+"":q,n),n);(function(){function m(a,b){window.sendEvent?window.sendEvent("fl_"+a,b):(D\|\|=setInterval(q,10
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 64 28 45 72 72 6f 72 28 62 3f 3f 60 74 69 6d 65 6f 75 74 20 24 7b 61 7d 60 29 29 7d 2c 61 29 7d 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4a 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 61 63 65 28 5b 61 2c 49 28 62 2c 63 29 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 62 3d 3e 73 65 74 54 69 6d 65 6f 75 74 28 62 2c 61 29 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4c 28 61 2c 62 2c 63 29 7b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 63 3b 65 2b 2b 29 7b 76 61 72 20 64 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 0a 61 77 61 69 74 20 61 28 29 3b 64 3d 62 2d 28 70 65 72 66 6f 72 6d 61 6e 63 65 Data Ascii: setTimeout(()=>{d(Error(b??`timeout ${a}`))},a)})}async function J(a,b,c){return Promise.race([a,I(b,c)])}function K(a){return new Promise(b=>setTimeout(b,a))}async function L(a,b,c){for(let e=0;e<c;e++){var d=performance.now();await a();d=b-(performance
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 72 20 69 6e 76 6f 6b 69 6e 67 20 72 65 61 64 79 22 2c 63 29 7d 7d 29 3a 74 68 69 73 2e 72 65 61 64 79 28 29 7d 69 6e 69 74 69 61 6c 69 7a 65 28 29 7b 7d 72 65 61 64 79 28 29 7b 7d 72 65 70 6f 72 74 28 61 2c 62 29 7b 6d 28 75 2e 53 69 67 6e 61 6c 2c 7b 6e 61 6d 65 3a 74 68 69 73 2e 6e 61 6d 65 2c 73 75 63 63 65 73 73 3a 61 2c 66 61 69 6c 3a 62 7d 29 7d 72 65 70 6f 72 74 45 72 72 6f 72 28 61 2c 62 29 7b 6e 28 60 24 7b 74 68 69 73 2e 6e 61 6d 65 7d 5b 24 7b 74 68 69 73 2e 63 6f 6e 66 69 67 2e 74 79 70 65 7d 5d 3a 20 24 7b 61 7d 60 2c 62 29 7d 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 6c 65 74 20 6b 3d 30 3b 63 6f 6e 73 74 20 67 3d 72 3d 3e 7b 74 72 79 7b 62 28 72 29 7d 63 61 74 63 68 28 74 29 7b 74 68 69 73 2e 72 65 Data Ascii: r invoking ready",c)}}):this.ready()}initialize(){}ready(){}report(a,b){m(u.Signal,{name:this.name,success:a,fail:b})}reportError(a,b){n(`${this.name}[${this.config.type}]: ${a}`,b)}addEventListener(a,b,c,d,e){let k=0;const g=r=>{try{b(r)}catch(t){this.re
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 70 72 65 70 65 6e 64 28 61 29 3a 62 2e 61 70 70 65 6e 64 28 61 29 7d 67 65 74 50 61 72 65 6e 74 45 6c 65 6d 65 6e 74 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 0a 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 61 29 3a 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 7d 6f 6e 45 6c 65 6d 65 6e 74 43 6c 69 63 6b 28 61 29 7b 63 6f 6e 73 74 20 62 3d 61 2e 74 61 72 67 65 74 3b 62 2e 73 74 79 6c 65 2e 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3d 22 6e 6f 6e 65 22 3b 63 6f 6e 73 74 20 63 3d 64 6f 63 75 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 46 72 6f 6d 50 6f 69 6e 74 28 61 2e 63 6c 69 65 6e 74 58 2c 61 2e 63 6c 69 65 6e 74 59 29 3b 69 66 28 62 2e 73 74 79 6c 65 2e 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3d 22 61 75 74 6f 22 2c 63 26 26 63 21 3d 3d 62 29 61 3d Data Ascii: prepend(a):b.append(a)}getParentElement(a){return a?document.querySelector(a):document.body}onElementClick(a){const b=a.target;b.style.pointerEvents="none";const c=document.elementFromPoint(a.clientX,a.clientY);if(b.style.pointerEvents="auto",c&&c!==b)a=
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 75 74 69 6f 6e 22 29 3b 68 28 74 68 69 73 2c 22 61 6e 67 6c 65 52 65 73 6f 6c 75 74 69 6f 6e 22 29 3b 68 28 74 68 69 73 2c 22 6d 6f 75 73 65 44 61 74 61 41 72 72 61 79 22 29 3b 74 68 69 73 2e 65 76 65 6e 74 73 57 69 6e 64 6f 77 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 65 76 65 6e 74 73 57 69 6e 64 6f 77 3f 3f 32 30 30 3b 74 68 69 73 2e 6d 69 6e 54 69 6d 65 44 65 6c 74 61 4d 73 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 69 6e 54 69 6d 65 44 65 6c 74 61 4d 73 3f 3f 32 30 3b 74 68 69 73 2e 6d 69 6e 44 69 73 74 61 6e 63 65 50 78 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 69 6e 44 69 73 74 61 6e 63 65 50 78 3f 3f 0a 31 30 3b 74 68 69 73 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 76 65 6c 6f 63 69 74 79 52 65 73 Data Ascii: ution");h(this,"angleResolution");h(this,"mouseDataArray");this.eventsWindow=this.config.eventsWindow??200;this.minTimeDeltaMs=this.config.minTimeDeltaMs??20;this.minDistancePx=this.config.minDistancePx??10;this.velocityResolution=this.config.velocityRes
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 3d 3d 3d 6b 7c 7c 4d 61 74 68 2e 61 62 73 28 42 2d 6b 29 3e 3d 74 68 69 73 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 29 26 26 28 62 2e 79 2e 63 6f 75 6e 74 55 6e 69 71 75 65 2b 2b 2c 6b 3d 42 29 3b 63 2e 70 75 73 68 28 41 29 3b 64 2e 70 75 73 68 28 42 29 3b 76 61 72 20 74 3d 47 2c 54 3d 74 68 69 73 2e 61 6e 67 6c 65 52 65 73 6f 6c 75 74 69 6f 6e 2c 43 3b 28 43 3d 76 6f 69 64 20 30 3d 3d 3d 67 29 7c 7c 28 74 3d 4d 61 74 68 2e 61 62 73 28 74 2d 67 29 25 33 36 30 2c 43 3d 4d 61 74 68 2e 6d 69 6e 28 33 36 30 2d 74 2c 74 29 3e 3d 54 29 3b 43 26 26 28 72 2b 2b 2c 67 3d 47 29 7d 74 68 69 73 2e 72 65 70 6f 72 74 53 69 67 6e 61 6c 73 28 61 2c 62 2c 72 29 7d 7d 63 61 6c 63 75 6c 61 74 65 28 61 2c 62 29 7b 63 6f 6e 73 74 20 63 3d 61 2e 78 2d 62 2e 78 Data Ascii: ===k\|\|Math.abs(B-k)>=this.velocityResolution)&&(b.y.countUnique++,k=B);c.push(A);d.push(B);var t=G,T=this.angleResolution,C;(C=void 0===g)\|\|(t=Math.abs(t-g)%360,C=Math.min(360-t,t)>=T);C&&(r++,g=G)}this.reportSignals(a,b,r)}}calculate(a,b){const c=a.x-b.x
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 74 20 63 3d 22 2b 61 44 68 37 65 37 75 35 2b 48 32 37 66 44 78 6f 4c 6a 35 6f 4f 2f 76 6f 4c 6a 35 6f 4f 50 68 39 75 76 30 35 36 43 34 39 76 44 33 35 36 36 67 37 2b 50 36 30 4f 66 79 37 66 44 32 6f 4c 69 33 72 71 44 32 2b 2f 4c 6e 6f 4c 69 67 37 2b 33 33 38 65 65 67 2f 36 36 67 37 2b 33 33 38 65 65 67 75 50 6d 67 34 2b 48 32 36 2f 54 6e 6f 4c 6a 32 38 50 66 6e 72 71 44 6e 39 4f 66 73 39 74 4c 6a 38 4f 50 76 38 61 43 34 2b 61 44 68 37 75 76 68 36 61 43 34 2b 61 44 68 2b 71 43 34 6f 4f 65 73 34 65 37 72 35 2b 7a 32 32 71 43 75 6f 4f 48 37 6f 4c 69 67 35 36 7a 68 37 75 76 6e 37 50 62 62 6f 4b 36 67 36 2b 61 67 75 4b 44 6e 72 50 62 6a 38 4f 58 6e 39 71 7a 72 35 71 4c 2b 2f 71 4c 33 37 4f 62 6e 35 4f 76 73 35 2b 61 67 72 71 44 72 38 64 62 77 39 2f 48 32 35 2b Data Ascii: t c="+aDh7e7u5+H27fDxoLj5oO/voLj5oOPh9uv056C49vD3566g7+P60Ofy7fD2oLi3rqD2+/LnoLig7+338eeg/66g7+338eeguPmg4+H26/TnoLj28PfnrqDn9Ofs9tLj8OPv8aC4+aDh7uvh6aC4+aDh+qC4oOes4e7r5+z22qCuoOH7oLig56zh7uvn7PbboK6g6+aguKDnrPbj8OXn9qzr5qL+/qL37Obn5Ovs5+agrqDr8dbw9/H25+
2025-01-15 02:49:27 UTC	330	IN	Data Raw: 39 2b 65 75 6f 4f 66 30 35 2b 7a 32 30 75 50 77 34 2b 2f 78 6f 4c 6a 35 6f 4f 37 74 34 2b 61 67 75 50 6d 67 39 65 61 67 75 4b 44 73 34 2f 54 72 35 65 50 32 37 66 43 73 39 65 66 67 35 76 44 72 39 4f 66 77 6f 76 37 2b 6f 76 66 73 35 75 66 6b 36 2b 7a 6e 35 71 44 2f 2f 36 36 67 39 76 76 79 35 36 43 34 6f 50 48 32 34 2f 62 72 34 61 44 2f 2f 36 36 67 39 4f 66 77 38 65 76 74 37 4b 43 34 73 2f 38 3d 22 3b 61 3d 28 62 26 26 28 63 3d 0a 48 28 63 2c 61 29 29 2c 45 28 63 2c 53 2c 21 62 29 29 3b 66 6f 72 28 63 6f 6e 73 74 20 5b 64 2c 65 5d 6f 66 20 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 61 2e 63 6f 6c 6c 65 63 74 6f 72 73 29 29 74 72 79 7b 65 2e 61 63 74 69 76 65 26 26 4e 28 64 2c 65 29 7d 63 61 74 63 68 28 6b 29 7b 6e 28 60 66 61 69 6c 65 64 20 63 72 65 61 74 Data Ascii: 9+euoOf05+z20uPw4+/xoLj5oO7t4+aguPmg9eaguKDs4/Tr5eP27fCs9efg5vDr9Ofwov7+ovfs5ufk6+zn5qD//66g9vvy56C4oPH24/br4aD//66g9Ofw8evt7KC4s/8=";a=(b&&(c=H(c,a)),E(c,S,!b));for(const [d,e]of Object.entries(a.collectors))try{e.active&&N(d,e)}catch(k){n(`failed creat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49799	104.21.80.92	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:27 UTC	487	OUT	GET /ng-assets/creative/assets/index-5333d910.js HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf
2025-01-15 02:49:27 UTC	1268	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 02:49:27 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close X-GUploader-UploadID: AFiumC6Zf4eGg495ty8uvUJC78aLbbMpqwfc1mbNUuyE_UqfI7iP84fL2xF4ac7wW1l6hb0 x-goog-generation: 1735129293497096 x-goog-metageneration: 2 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 141707 x-goog-hash: crc32c=90RuKA== x-goog-hash: md5=27il8MB3nCC3M+y3OkIWBQ== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Wed, 15 Jan 2025 03:15:48 GMT Cache-Control: public, max-age=14400 Last-Modified: Wed, 25 Dec 2024 12:21:33 GMT ETag: W/"dbb8a5f0c0779c20b733ecb73a421605" Vary: Accept-Encoding Age: 1633 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FysT9OWPrfqtIp0%2FMEob63%2ByMYdZyyShF7vIrPY5VI4fCEmbCIftop1hY2vvOCoLRK1fCpVrqL37MHjtH9s2v0WZDpd%2BtYopnDxNsyUgQ%2FcfxSUvnLxJPiKYxk9URrrpcaah"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 90228d7d6a4da2dc-YUL alt-svc: h3=":443"; ma=86400
2025-01-15 02:49:27 UTC	217	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 37 36 39 31 26 6d 69 6e 5f 72 74 74 3d 31 37 36 38 38 26 72 74 74 5f 76 61 72 3d 36 36 34 30 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 33 33 38 26 72 65 63 76 5f 62 79 74 65 73 3d 31 30 36 35 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 36 34 37 39 34 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 35 34 62 35 30 62 66 35 30 64 62 64 37 64 30 35 26 74 73 3d 32 30 30 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=17691&min_rtt=17688&rtt_var=6640&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2338&recv_bytes=1065&delivery_rate=164794&cwnd=32&unsent_bytes=0&cid=54b50bf50dbd7d05&ts=200&x=0"
2025-01-15 02:49:27 UTC	1253	IN	Data Raw: 37 61 61 63 0d 0a 76 61 72 20 6f 69 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 73 69 3d 28 65 2c 74 2c 6e 29 3d 3e 74 20 69 6e 20 65 3f 6f 69 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 65 5b 74 5d 3d 6e 3b 76 61 72 20 6a 3d 28 65 2c 74 2c 6e 29 3d 3e 28 73 69 28 65 2c 74 79 70 65 6f 66 20 74 21 3d 22 73 79 6d 62 6f 6c 22 3f 74 2b 22 22 3a 74 2c 6e 29 2c 6e 29 3b 66 75 6e 63 74 69 6f 6e 20 4d 68 28 29 7b 69 6d 70 6f 72 74 2e 6d 65 74 61 2e 75 72 6c 2c 69 6d 70 6f 72 74 28 22 5f 22 29 2e 63 61 74 63 68 28 28 29 3d 3e 31 29 2c 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 7d 28 29 2e Data Ascii: 7aacvar oi=Object.defineProperty;var si=(e,t,n)=>t in e?oi(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n;var j=(e,t,n)=>(si(e,typeof t!="symbol"?t+"":t,n),n);function Mh(){import.meta.url,import("_").catch(()=>1),async function*(){}().
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 74 29 73 3d 3d 22 6b 65 79 22 3f 72 3d 74 5b 73 5d 3a 73 3d 3d 22 72 65 66 22 3f 6f 3d 74 5b 73 5d 3a 69 5b 73 5d 3d 74 5b 73 5d 3b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 28 69 2e 63 68 69 6c 64 72 65 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 33 3f 5f 6e 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 32 29 3a 6e 29 2c 74 79 70 65 6f 66 20 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 21 3d 6e 75 6c 6c 29 66 6f 72 28 73 20 69 6e 20 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 29 69 5b 73 5d 3d 3d 3d 76 6f 69 64 20 30 26 26 28 69 5b 73 5d 3d 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 5b 73 5d 29 3b 72 65 74 75 72 6e 20 7a 74 28 65 2c 69 2c 72 2c 6f 2c 6e 75 6c 6c 29 7d 66 75 Data Ascii: t)s=="key"?r=t[s]:s=="ref"?o=t[s]:i[s]=t[s];if(arguments.length>2&&(i.children=arguments.length>3?_n.call(arguments,2):n),typeof e=="function"&&e.defaultProps!=null)for(s in e.defaultProps)i[s]===void 0&&(i[s]=e.defaultProps[s]);return zt(e,i,r,o,null)}fu
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 3d 73 26 26 48 6f 28 72 29 29 2c 63 74 2e 6c 65 6e 67 74 68 3e 74 26 26 63 74 2e 73 6f 72 74 28 6a 6e 29 29 3b 65 6e 2e 5f 5f 72 3d 30 7d 66 75 6e 63 74 69 6f 6e 20 46 6f 28 65 2c 74 2c 6e 2c 72 2c 6f 2c 73 2c 69 2c 63 2c 75 2c 61 2c 66 29 7b 76 61 72 20 6c 2c 79 2c 68 2c 62 2c 41 2c 53 3d 72 26 26 72 2e 5f 5f 6b 7c 7c 55 6f 2c 45 3d 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 6e 2e 5f 5f 64 3d 75 2c 63 69 28 6e 2c 74 2c 53 29 2c 75 3d 6e 2e 5f 5f 64 2c 6c 3d 30 3b 6c 3c 45 3b 6c 2b 2b 29 28 68 3d 6e 2e 5f 5f 6b 5b 6c 5d 29 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 68 21 3d 22 62 6f 6f 6c 65 61 6e 22 26 26 74 79 70 65 6f 66 20 68 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 79 3d 68 2e 5f 5f 69 3d 3d 3d 2d 31 3f 54 74 3a 53 5b 68 2e 5f 5f 69 5d 7c 7c 54 74 Data Ascii: =s&&Ho(r)),ct.length>t&&ct.sort(jn));en.__r=0}function Fo(e,t,n,r,o,s,i,c,u,a,f){var l,y,h,b,A,S=r&&r.__k\|\|Uo,E=t.length;for(n.__d=u,ci(n,t,S),u=n.__d,l=0;l<E;l++)(h=n.__k[l])!=null&&typeof h!="boolean"&&typeof h!="function"&&(y=h.__i===-1?Tt:S[h.__i]\|\|Tt
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 6e 5b 72 5d 29 21 3d 6e 75 6c 6c 26 26 21 28 31 33 31 30 37 32 26 73 2e 5f 5f 75 29 26 26 28 73 2e 5f 5f 65 3d 3d 65 2e 5f 5f 64 26 26 28 65 2e 5f 5f 64 3d 75 74 28 73 29 29 2c 44 6e 28 73 2c 73 29 29 7d 66 75 6e 63 74 69 6f 6e 20 57 6f 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 6f 3b 69 66 28 74 79 70 65 6f 66 20 65 2e 74 79 70 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 66 6f 72 28 72 3d 65 2e 5f 5f 6b 2c 6f 3d 30 3b 72 26 26 6f 3c 72 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 72 5b 6f 5d 26 26 28 72 5b 6f 5d 2e 5f 5f 3d 65 2c 74 3d 57 6f 28 72 5b 6f 5d 2c 74 2c 6e 29 29 3b 72 65 74 75 72 6e 20 74 7d 65 2e 5f 5f 65 21 3d 74 26 26 28 6e 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2e 5f 5f 65 2c 74 7c 7c 6e 75 6c 6c 29 2c 74 3d 65 2e 5f 5f 65 29 3b 64 6f 20 74 Data Ascii: n[r])!=null&&!(131072&s.__u)&&(s.__e==e.__d&&(e.__d=ut(s)),Dn(s,s))}function Wo(e,t,n){var r,o;if(typeof e.type=="function"){for(r=e.__k,o=0;r&&o<r.length;o++)r[o]&&(r[o].__=e,t=Wo(r[o],t,n));return t}e.__e!=t&&(n.insertBefore(e.__e,t\|\|null),t=e.__e);do t
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 73 29 29 3a 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 73 3f 4d 6e 3a 4e 6e 2c 73 29 3b 65 6c 73 65 7b 69 66 28 6f 3d 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 29 74 3d 74 2e 72 65 70 6c 61 63 65 28 2f 78 6c 69 6e 6b 28 48 7c 3a 68 29 2f 2c 22 68 22 29 2e 72 65 70 6c 61 63 65 28 2f 73 4e 61 6d 65 24 2f 2c 22 73 22 29 3b 65 6c 73 65 20 69 66 28 74 21 3d 22 77 69 64 74 68 22 26 26 74 21 3d 22 68 65 69 67 68 74 22 26 26 74 21 3d 22 68 72 65 66 22 26 26 74 21 3d 22 6c 69 73 74 22 26 26 74 21 3d 22 66 6f 72 6d 22 26 26 74 21 3d 22 74 61 62 49 6e 64 65 78 22 26 26 74 21 3d 22 64 6f 77 6e 6c 6f 61 64 22 26 26 74 21 3d 22 72 6f 77 53 70 61 6e 22 26 26 74 21 3d 22 63 6f 6c 53 70 61 6e 22 26 Data Ascii: s)):e.removeEventListener(t,s?Mn:Nn,s);else{if(o=="http://www.w3.org/2000/svg")t=t.replace(/xlink(H\|:h)/,"h").replace(/sName$/,"s");else if(t!="width"&&t!="height"&&t!="href"&&t!="list"&&t!="form"&&t!="tabIndex"&&t!="download"&&t!="rowSpan"&&t!="colSpan"&
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 2e 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 4d 6f 75 6e 74 29 3b 65 6c 73 65 7b 69 66 28 4b 2e 67 65 74 44 65 72 69 76 65 64 53 74 61 74 65 46 72 6f 6d 50 72 6f 70 73 3d 3d 6e 75 6c 6c 26 26 45 21 3d 3d 68 26 26 6c 2e 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 52 65 63 65 69 76 65 50 72 6f 70 73 21 3d 6e 75 6c 6c 26 26 6c 2e 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 52 65 63 65 69 76 65 50 72 6f 70 73 28 45 2c 58 29 2c 21 6c 2e 5f 5f 65 26 26 28 6c 2e 73 68 6f 75 6c 64 43 6f 6d 70 6f 6e 65 6e 74 55 70 64 61 74 65 21 3d 6e 75 6c 6c 26 26 6c 2e 73 68 6f 75 6c 64 43 6f 6d 70 6f 6e 65 6e 74 55 70 64 61 74 65 28 45 2c 6c 2e 5f 5f 73 2c 58 29 3d 3d 3d 21 31 7c 7c 74 2e 5f 5f 76 3d 3d 3d 6e 2e 5f 5f 76 29 29 7b 66 6f 72 28 74 2e 5f 5f 76 21 3d 3d 6e 2e 5f 5f 76 26 26 28 6c Data Ascii: .componentDidMount);else{if(K.getDerivedStateFromProps==null&&E!==h&&l.componentWillReceiveProps!=null&&l.componentWillReceiveProps(E,X),!l.__e&&(l.shouldComponentUpdate!=null&&l.shouldComponentUpdate(E,l.__s,X)===!1\|\|t.__v===n.__v)){for(t.__v!==n.__v&&(l
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 3d 6e 2e 5f 5f 6b 2c 74 2e 5f 5f 65 3d 6e 2e 5f 5f 65 29 3a 74 2e 5f 5f 65 3d 61 69 28 6e 2e 5f 5f 65 2c 74 2c 6e 2c 72 2c 6f 2c 73 2c 69 2c 75 2c 61 29 3b 28 66 3d 44 2e 64 69 66 66 65 64 29 26 26 66 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 6f 28 65 2c 74 2c 6e 29 7b 74 2e 5f 5f 64 3d 76 6f 69 64 20 30 3b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 6e 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 61 72 28 6e 5b 72 5d 2c 6e 5b 2b 2b 72 5d 2c 6e 5b 2b 2b 72 5d 29 3b 44 2e 5f 5f 63 26 26 44 2e 5f 5f 63 28 74 2c 65 29 2c 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 74 72 79 7b 65 3d 6f 2e 5f 5f 68 2c 6f 2e 5f 5f 68 3d 5b 5d 2c 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 73 29 7b 73 2e 63 61 6c 6c 28 6f 29 7d 29 7d 63 61 74 63 68 28 73 29 7b 44 2e 5f 5f Data Ascii: =n.__k,t.__e=n.__e):t.__e=ai(n.__e,t,n,r,o,s,i,u,a);(f=D.diffed)&&f(t)}function zo(e,t,n){t.__d=void 0;for(var r=0;r<n.length;r++)ar(n[r],n[++r],n[++r]);D.__c&&D.__c(t,e),e.some(function(o){try{e=o.__h,o.__h=[],e.some(function(s){s.call(o)})}catch(s){D.__
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 48 54 4d 4c 3d 22 22 29 2c 46 6f 28 65 2c 68 6e 28 79 29 3f 79 3a 5b 79 5d 2c 74 2c 6e 2c 72 2c 52 3d 3d 3d 22 66 6f 72 65 69 67 6e 4f 62 6a 65 63 74 22 3f 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3a 6f 2c 73 2c 69 2c 73 3f 73 5b 30 5d 3a 6e 2e 5f 5f 6b 26 26 75 74 28 6e 2c 30 29 2c 63 2c 75 29 2c 73 21 3d 6e 75 6c 6c 29 66 6f 72 28 61 3d 73 2e 6c 65 6e 67 74 68 3b 61 2d 2d 3b 29 73 5b 61 5d 21 3d 6e 75 6c 6c 26 26 42 6f 28 73 5b 61 5d 29 3b 63 7c 7c 28 61 3d 22 76 61 6c 75 65 22 2c 62 21 3d 3d 76 6f 69 64 20 30 26 26 28 62 21 3d 3d 65 5b 61 5d 7c 7c 52 3d 3d 3d 22 70 72 6f 67 72 65 73 73 22 26 26 21 62 7c 7c 52 3d 3d 3d 22 6f 70 74 69 6f 6e 22 26 26 62 21 3d 3d 53 5b 61 5d 29 26 26 50 74 28 65 2c 61 2c 62 Data Ascii: HTML=""),Fo(e,hn(y)?y:[y],t,n,r,R==="foreignObject"?"http://www.w3.org/1999/xhtml":o,s,i,s?s[0]:n.__k&&ut(n,0),c,u),s!=null)for(a=s.length;a--;)s[a]!=null&&Bo(s[a]);c\|\|(a="value",b!==void 0&&(b!==e[a]\|\|R==="progress"&&!b\|\|R==="option"&&b!==S[a])&&Pt(e,a,b
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 72 6f 77 20 65 7d 7d 2c 44 6f 3d 30 2c 4a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 53 74 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 6e 3d 74 68 69 73 2e 5f 5f 73 21 3d 6e 75 6c 6c 26 26 74 68 69 73 2e 5f 5f 73 21 3d 3d 74 68 69 73 2e 73 74 61 74 65 3f 74 68 69 73 2e 5f 5f 73 3a 74 68 69 73 2e 5f 5f 73 3d 74 74 28 7b 7d 2c 74 68 69 73 2e 73 74 61 74 65 29 2c 74 79 70 65 6f 66 20 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 65 3d 65 28 74 74 28 7b 7d 2c 6e 29 2c 74 68 69 73 2e 70 72 6f 70 73 29 29 2c 65 26 26 74 74 28 6e 2c 65 29 2c 65 21 3d 6e 75 6c 6c 26 26 74 68 69 73 2e 5f 5f 76 26 26 28 74 26 26 74 68 69 73 2e 5f 73 62 2e 70 75 73 68 28 74 29 2c 4f 72 28 74 68 69 73 29 29 7d 2c 4a 65 2e 70 72 6f 74 6f 74 79 70 65 2e Data Ascii: row e}},Do=0,Je.prototype.setState=function(e,t){var n;n=this.__s!=null&&this.__s!==this.state?this.__s:this.__s=tt({},this.state),typeof e=="function"&&(e=e(tt({},n),this.props)),e&&tt(n,e),e!=null&&this.__v&&(t&&this._sb.push(t),Or(this))},Je.prototype.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49800	104.21.80.92	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:27 UTC	725	OUT	GET /ext/Footer-Logo_1720602781.svg+xml HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf
2025-01-15 02:49:27 UTC	1198	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 02:49:27 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close X-GUploader-UploadID: AFIdbgS9ogZtvtycGAZIB48AzIlPeK_GLPe-XJ3MnpnTaMoXB9KV8OGA6iB7qloEiHmC1RmjpNJCS6M x-goog-generation: 1720602780982635 x-goog-metageneration: 3 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 7186 x-goog-hash: crc32c=Kc0qjA== x-goog-hash: md5=jGCl//RKIQKXgmNkQtJJ1A== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type Expires: Wed, 15 Jan 2025 02:57:01 GMT Cache-Control: public, max-age=3600 Last-Modified: Wed, 10 Jul 2024 09:13:01 GMT ETag: W/"8c60a5fff44a21029782636442d249d4" Vary: Accept-Encoding Age: 3146 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S7CEn1SgzThj%2F1DJARB%2Foc%2BrPLDNxQOVIgDDx0vmee%2F%2B8dkmSSSTm1eFFGR5xDckuzQ3%2BmFUvwopaul0yk4k8ynWkML87XycvLYS%2B3ENRt%2Fyyk80Nxv0%2FPuXvqaxIgPOEx6T"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 90228d7d9cd6ab69-YYZ alt-svc: h3=":443"; ma=86400
2025-01-15 02:49:27 UTC	217	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 33 39 38 35 26 6d 69 6e 5f 72 74 74 3d 31 33 37 36 32 26 72 74 74 5f 76 61 72 3d 35 36 30 36 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 33 33 39 26 72 65 63 76 5f 62 79 74 65 73 3d 31 33 30 33 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 38 37 38 32 39 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 33 36 66 62 32 65 35 63 63 31 30 64 31 62 61 66 26 74 73 3d 31 37 39 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=13985&min_rtt=13762&rtt_var=5606&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2339&recv_bytes=1303&delivery_rate=187829&cwnd=32&unsent_bytes=0&cid=36fb2e5cc10d1baf&ts=179&x=0"
2025-01-15 02:49:27 UTC	1323	IN	Data Raw: 31 63 31 32 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 39 31 22 20 68 65 69 67 68 74 3d 22 35 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 31 20 35 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 29 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 33 33 2e 35 38 37 39 20 30 43 33 33 2e 35 38 37 39 20 30 20 33 30 2e 38 39 33 35 20 39 2e 32 30 39 31 36 20 32 36 2e 30 35 39 32 20 31 32 2e 37 38 31 37 43 32 34 2e 30 37 38 20 31 35 2e 30 38 34 20 31 33 2e 32 32 30 38 20 32 33 2e 35 37 38 36 20 39 2e 38 31 33 30 32 20 32 31 2e 30 33 38 32 43 35 2e 35 33 33 35 34 20 31 37 2e 36 32 34 34 Data Ascii: 1c12<svg width="191" height="52" viewBox="0 0 191 52" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0)"><path d="M33.5879 0C33.5879 0 30.8935 9.20916 26.0592 12.7817C24.078 15.084 13.2208 23.5786 9.81302 21.0382C5.53354 17.6244
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 20 30 20 32 36 2e 32 31 39 32 20 31 34 2e 31 33 31 33 20 32 31 2e 30 36 38 20 31 34 2e 38 34 35 38 43 31 38 2e 33 37 33 35 20 31 35 2e 33 32 32 31 20 31 37 2e 36 36 30 32 20 31 31 2e 35 31 31 35 20 31 37 2e 34 32 32 35 20 31 31 2e 35 31 31 35 43 31 37 2e 34 32 32 35 20 31 31 2e 35 31 31 35 20 31 37 2e 31 30 35 35 20 31 36 2e 35 31 33 20 32 30 2e 39 30 39 35 20 31 36 2e 35 31 33 43 32 37 2e 32 34 39 35 20 31 36 2e 35 39 32 34 20 33 33 2e 35 38 39 34 20 30 20 33 33 2e 35 38 39 34 20 30 5a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 70 61 69 6e 74 33 5f 72 61 64 69 61 6c 29 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 36 2e 33 39 30 36 20 34 30 2e 36 34 37 36 43 31 38 2e 35 33 30 34 20 33 38 2e 35 30 34 31 20 32 31 2e 34 36 32 36 20 33 37 2e 37 38 39 36 20 32 33 Data Ascii: 0 26.2192 14.1313 21.068 14.8458C18.3735 15.3221 17.6602 11.5115 17.4225 11.5115C17.4225 11.5115 17.1055 16.513 20.9095 16.513C27.2495 16.5924 33.5894 0 33.5894 0Z" fill="url(#paint3_radial)"/><path d="M16.3906 40.6476C18.5304 38.5041 21.4626 37.7896 23
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 33 20 32 37 2e 36 36 35 31 43 31 30 38 2e 31 36 33 20 33 32 2e 34 32 38 34 20 31 30 34 2e 35 31 37 20 33 35 2e 39 32 31 36 20 39 39 2e 36 38 32 38 20 33 35 2e 39 32 31 36 43 39 34 2e 38 34 38 36 20 33 35 2e 39 32 31 36 20 39 31 2e 32 30 33 31 20 33 32 2e 34 32 38 34 20 39 31 2e 32 30 33 31 20 32 37 2e 36 36 35 31 43 39 31 2e 32 30 33 31 20 32 32 2e 39 38 31 31 20 39 34 2e 38 34 38 36 20 31 39 2e 35 36 37 34 20 39 39 2e 36 38 32 38 20 31 39 2e 35 36 37 34 43 31 30 34 2e 35 31 37 20 31 39 2e 35 36 37 34 20 31 30 38 2e 31 36 33 20 32 32 2e 39 38 31 31 20 31 30 38 2e 31 36 33 20 32 37 2e 36 36 35 31 5a 4d 31 30 33 2e 37 32 35 20 32 37 2e 36 36 35 31 43 31 30 33 2e 37 32 35 20 32 35 2e 33 36 32 38 20 31 30 32 2e 30 36 20 32 33 2e 35 33 36 38 20 39 39 2e 36 38 Data Ascii: 3 27.6651C108.163 32.4284 104.517 35.9216 99.6828 35.9216C94.8486 35.9216 91.2031 32.4284 91.2031 27.6651C91.2031 22.9811 94.8486 19.5674 99.6828 19.5674C104.517 19.5674 108.163 22.9811 108.163 27.6651ZM103.725 27.6651C103.725 25.3628 102.06 23.5368 99.68
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 32 38 39 20 33 32 2e 34 32 39 31 20 31 34 31 2e 32 38 39 20 32 37 2e 37 34 35 32 43 31 34 31 2e 32 38 39 20 32 33 2e 30 36 31 32 20 31 34 34 2e 37 37 36 20 31 39 2e 36 34 37 35 20 31 34 39 2e 36 31 20 31 39 2e 36 34 37 35 43 31 35 31 2e 31 39 35 20 31 39 2e 36 34 37 35 20 31 35 32 2e 34 36 33 20 32 30 2e 30 34 34 34 20 31 35 33 2e 35 37 33 20 32 30 2e 38 33 38 33 56 31 39 2e 39 36 35 48 31 35 37 2e 36 39 34 56 32 36 2e 30 37 38 48 31 35 33 2e 34 31 34 43 31 35 33 2e 30 31 38 20 32 34 2e 35 36 39 36 20 31 35 31 2e 36 37 31 20 32 33 2e 36 31 36 39 20 31 35 30 2e 30 30 37 20 32 33 2e 36 31 36 39 43 31 34 37 2e 36 32 39 20 32 33 2e 36 31 36 39 20 31 34 35 2e 38 30 36 20 32 35 2e 34 34 32 39 20 31 34 35 2e 38 30 36 20 32 37 2e 37 34 35 32 43 31 34 35 2e 38 30 Data Ascii: 289 32.4291 141.289 27.7452C141.289 23.0612 144.776 19.6475 149.61 19.6475C151.195 19.6475 152.463 20.0444 153.573 20.8383V19.965H157.694V26.078H153.414C153.018 24.5696 151.671 23.6169 150.007 23.6169C147.629 23.6169 145.806 25.4429 145.806 27.7452C145.80
2025-01-15 02:49:27 UTC	1369	IN	Data Raw: 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 30 2e 31 39 30 36 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 31 37 35 34 32 22 2f 3e 0a 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 46 43 35 39 31 22 2f 3e 0a 3c 2f 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 3e 0a 3c 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 69 64 3d 22 70 61 69 6e 74 31 5f 72 61 64 69 61 6c 22 20 63 78 3d 22 30 22 20 63 79 3d 22 30 22 20 72 3d 22 31 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 32 39 2e 33 33 35 37 20 34 31 2e 34 35 31 33 29 20 72 6f 74 61 74 65 28 2d 32 32 2e 32 30 31 36 29 20 73 63 61 Data Ascii: <stop offset="0.1906" stop-color="#F17542"/><stop offset="1" stop-color="#FFC591"/></radialGradient><radialGradient id="paint1_radial" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(29.3357 41.4513) rotate(-22.2016) sca
2025-01-15 02:49:27 UTC	395	IN	Data Raw: 79 3d 22 30 22 20 72 3d 22 31 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 32 37 2e 39 37 30 34 20 35 32 2e 37 39 34 34 29 20 72 6f 74 61 74 65 28 2d 38 30 2e 34 33 38 34 29 20 73 63 61 6c 65 28 31 35 2e 34 37 34 34 20 34 31 2e 30 33 30 33 29 22 3e 0a 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 46 43 35 39 31 22 2f 3e 0a 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 30 2e 38 30 39 34 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 31 37 35 34 32 22 2f 3e 0a 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 45 44 36 32 32 46 22 2f 3e 0a 3c 2f 72 61 64 69 61 6c 47 72 Data Ascii: y="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(27.9704 52.7944) rotate(-80.4384) scale(15.4744 41.0303)"><stop stop-color="#FFC591"/><stop offset="0.8094" stop-color="#F17542"/><stop offset="1" stop-color="#ED622F"/></radialGr
2025-01-15 02:49:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49802	104.21.80.92	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:27 UTC	727	OUT	GET /ext/download-icon_1697445891.svg+xml HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf
2025-01-15 02:49:28 UTC	1170	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 02:49:27 GMT Content-Type: image/svg+xml Content-Length: 469 Connection: close X-GUploader-UploadID: AFIdbgQ8mvZkkGDYzKlpdAp2Ywx1tCRLTxIIz6Mgevcjojv4UjHZvdeTDLWo7u9hVQ_rBgEK x-goog-generation: 1697445890645515 x-goog-metageneration: 3 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 469 x-goog-hash: crc32c=+dJKLA== x-goog-hash: md5=aXSu6a+EFDtKxcc58XB8lQ== x-goog-storage-class: STANDARD Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type Expires: Wed, 15 Jan 2025 03:13:17 GMT Cache-Control: public, max-age=3600 Age: 2170 Last-Modified: Mon, 16 Oct 2023 08:44:50 GMT ETag: "6974aee9af84143b4ac5c739f1707c95" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U030t2K0%2FpP5yTzB12LQCq0PYQx2ELRZitp3NRXLOKGpvPbQoQIkmjRsCHgWL51acD5gjP9LfWKMkZhhr4T2iY%2BehHTpR719Eh3po%2BTYwmYiLSCiH%2BekH2dfAU5jO6Y1tT5r"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 90228d7def45ab99-YYZ alt-svc: h3=":443"; ma=86400
2025-01-15 02:49:28 UTC	217	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 33 37 37 38 26 6d 69 6e 5f 72 74 74 3d 31 33 37 37 36 26 72 74 74 5f 76 61 72 3d 35 31 37 31 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 33 33 39 26 72 65 63 76 5f 62 79 74 65 73 3d 31 33 30 35 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 32 31 31 36 35 35 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 66 62 62 33 61 32 64 39 37 39 66 65 35 32 64 66 26 74 73 3d 31 38 33 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=13778&min_rtt=13776&rtt_var=5171&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2339&recv_bytes=1305&delivery_rate=211655&cwnd=32&unsent_bytes=0&cid=fbb3a2d979fe52df&ts=183&x=0"
2025-01-15 02:49:28 UTC	469	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 39 22 20 68 65 69 67 68 74 3d 22 32 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 20 32 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 20 31 33 2e 32 36 33 32 4c 31 20 31 36 2e 39 36 39 31 43 31 20 31 37 2e 35 33 30 37 20 31 2e 32 32 31 32 35 20 31 38 2e 30 36 39 33 20 31 2e 36 31 35 30 38 20 31 38 2e 34 36 36 35 43 32 2e 30 30 38 39 20 31 38 2e 38 36 33 36 20 32 2e 35 34 33 30 35 20 31 39 2e 30 38 36 37 20 33 2e 31 20 31 39 2e 30 38 36 37 48 31 35 2e 37 43 31 36 2e 32 35 37 20 31 39 2e 30 38 36 37 20 31 36 2e 37 39 31 31 20 31 38 2e 38 36 33 36 20 31 37 2e 31 38 34 39 20 Data Ascii: <svg width="19" height="21" viewBox="0 0 19 21" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M1 13.2632L1 16.9691C1 17.5307 1.22125 18.0693 1.61508 18.4665C2.0089 18.8636 2.54305 19.0867 3.1 19.0867H15.7C16.257 19.0867 16.7911 18.8636 17.1849

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49815	142.250.186.98	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:28 UTC	954	OUT	GET /pagead/drt/s?v=r20120211 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://googleads.g.doubleclick.net/pagead/html/r20250113/r20190131/zrt_lookup_fy2021.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm9YsVInCwq_kuLG4Eoy4GuHk43hyeVzgbbZa3d16vwPQ6hkEJ5gfvmZT0zHrk
2025-01-15 02:49:28 UTC	428	IN	HTTP/1.1 200 OK Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Date: Wed, 15 Jan 2025 01:58:09 GMT Cache-Control: public, max-age=3600 Content-Type: text/html; charset=UTF-8 Age: 3079 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 02:49:28 UTC	154	IN	Data Raw: 38 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 64 72 74 2f 75 69 22 20 2f 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 3c 2f 68 74 6d 6c 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 8f<!DOCTYPE HTML PUBLIC><html> <head> <meta http-equiv="refresh" content="0;url=https://www.google.com/pagead/drt/ui" /> </head></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49816	142.250.186.98	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:28 UTC	1849	OUT	GET /pagead/adview?ai=Cjr4WNCKHZ8TGIYi-x_AP0IOfsALGvqzIfMb0rcCNE6KUxJKNDhABILm_uSFgyZbLi8Sk_A-gAZPCv5A-yAECqAMByAPJBKoE3gFP0F_5Dz4w7OehnAdro3idBuuuft1-qZLbic0FwptSgAhjZsBi3SBbMVHh9u-1KrxsqFsUqpYbrzghNlP-nlLiG4sQv45jttPW7y_2VBpWy7pBpA6WnDm-exf0Jjd9VRRSQ1ZQuiM3QgUPwS84aANvMc3GZWRgR-RNUS_AJfYjEYj1dMcSnuUZxQk5SsOTtHL5WM3TOd5UAYQl6gsh85qoa4Q8UGoGASp8rsTWe7FQDPnkUJNpYzlIhbRKnuKE-xE6kzxMSYUkK9E0RnEzG9gZZLzecwOx0iYFm6Ll3xTABPyy29D0BIgF7t_amVGSBQQIBBgBkgUECAUYBKAGAoAHk_qP8BioB9XJG6gH2baxAqgHpr4bqAeOzhuoB5PYG6gH8OAbqAfulrECqAf-nrECqAevvrECqAf3wrEC2AcB8gcFEOSHlAHSCCYIgGEQARgfMgKKAjoLgECAwICAgKCogAJIvf3BOljri7nN2_aKA5oJS2h0dHBzOi8vcGNhcHBzdG9yZS5jb20vP2FwPWFkd3AmYXM9Z19kX2FsbF9uZXdfaW4mZG1bdHlwZV09ZGlzJmdhZF9zb3VyY2U9NYAKAcgLAdoMEAoKENDSrYHgy4i-HBICAQPYEwzQFQGYFgGAFwGyFx4KGggAEhRwdWItMjg0MDI1ODEwMTQxMTg2MxgAGAG6FwI4AbIYCRICsFMYAiIBANAYAegYAQ&sigh=rw7p8sLgrS4&uach_m=%5BUACH%5D&ase=2&cid=CAQSTgCa7L7df4xwUHVujsXH2F66vTtJuY0JMzCDUy0RwlGknM5o1hgUj27nZz3JKyLm39Z1qfeU48liOx_XvHXY-00wQ4VbHo9Y1_AGgVhlnRgB&vis=1&ebtr=1&nis=6 HTTP/ [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger=navigation-source, event-source Referer: https://googleads.g.doubleclick.net/pagead/html/r20250113/r20190131/zrt_lookup_fy2021.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm9YsVInCwq_kuLG4Eoy4GuHk43hyeVzgbbZa3d16vwPQ6hkEJ5gfvmZT0zHrk
2025-01-15 02:49:28 UTC	1214	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0xf43dbca17d446fee0000000000000000","2":"0xc7cd4533ea3321910000000000000000","3":"0xf12e2653faa90dad0000000000000000","4":"0xbd439650b0c523bd0000000000000000","5":"0x3b76d391bbebf210000000000000000"},"debug_key":"5510723784244432235","debug_reporting":true,"destination":"https://pcappstore.com","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["16677593363"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"3469185668153306241"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 15 Jan 2025 02:49:28 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49828	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:28 UTC	740	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 923 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf
2025-01-15 02:49:28 UTC	923	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 36 39 62 30 35 2d 64 32 65 62 2d 31 31 65 66 2d 62 34 65 63 2d 37 61 37 64 64 36 63 32 65 39 30 66 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 71 35 34 37 49 6e 69 45 70 31 71 59 37 4f 45 67 30 50 45 2d 7a 76 49 37 63 34 54 54 62 79 4a 39 79 55 62 4a 58 58 39 61 58 52 52 46 5a 32 52 53 61 43 31 61 71 4b 56 63 4e 77 46 4c 7a 76 6f 4f 55 53 42 31 43 71 2d 6b 4b 41 56 43 5a 4d 43 4f 38 77 47 69 58 76 64 6d 57 5f 52 5f 6c 68 57 6a 39 56 5a 30 42 58 59 64 4c 71 33 43 56 66 65 65 33 44 6c 38 57 49 33 57 6b 44 64 36 Data Ascii: {"entries":[{"sid":"54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"q547IniEp1qY7OEg0PE-zvI7c4TTbyJ9yUbJXX9aXRRFZ2RSaC1aqKVcNwFLzvoOUSB1Cq-kKAVCZMCO8wGiXvdmW_R_lhWj9VZ0BXYdLq3CVfee3Dl8WI3WkDd6
2025-01-15 02:49:28 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:28 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:28 UTC	624	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 75 7a 6f 76 6b 44 31 6b 50 4e 49 53 41 5a 45 62 72 35 30 75 6f 4f 25 32 42 66 78 47 6b 69 59 71 73 4d 50 46 6d 68 76 6b 4d 56 25 32 42 65 42 79 32 71 73 57 68 6e 77 63 64 53 6f 73 6b 58 46 4e 45 49 44 35 61 77 72 6f 45 6b 68 74 62 43 70 77 7a 33 30 48 43 44 6b 68 6d 6a 48 69 6e 61 6c 61 53 54 78 25 32 42 31 5a 5a 42 74 48 35 44 57 75 78 41 76 49 47 31 53 59 67 58 50 41 6c 70 49 33 5a 4b 48 6b 4c 36 34 51 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uzovkD1kPNISAZEbr50uoO%2BfxGkiYqsMPFmhvkMV%2BeBy2qsWhnwcdSoskXFNEID5awroEkhtbCpwz30HCDkhmjHinalaSTx%2B1ZZBtH5DWuxAvIG1SYgXPAlpI3ZKHkL64Q%3D%3D"}],"group":"cf-nel","max_age":6048

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49829	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:28 UTC	1139	OUT	GET /sig.js?rpclid=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f&params=q547IniEp1qY7OEg0PE-zvI7c4TTbyJ9yUbJXX9aXRRFZ2RSaC1aqKVcNwFLzvoOUSB1Cq-kKAVCZMCO8wGiXvdmW_R_lhWj9VZ0BXYdLq3CVfee3Dl8WI3WkDd6zz6cgPeOrWRQd0pYTBtp6b-MEhqkYNKcIqKwWY9oCnbEV53vVc0S-miSf-21MKIOFFWwwrtgyKpTFmSAzSgQs0FZTJxX5Gsm3mrnNfhxWN0Pw1JdgjYx4A0MtW9X9sFmXm843WGJGXK0aLApHA07DzpbVdhE2OFP0N5Ku5qSpfS_KMrn0gcgzJWCemoSEDAXtqiudxnIdUJXflbA_NEbsxnE161AqUOD5U2bGvzX9q0umM_UPOpSxsZxgkmK5Rd_E0400H-5SWuxjHpFtYcXu8P-aYhdwh-QT38DroSKr_E8gRGeWPVy9UB5x_1996Dl-nvO HTTP/1.1 Host: serve.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf
2025-01-15 02:49:28 UTC	1169	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 02:49:28 GMT Content-Type: text/javascript Content-Length: 9487 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Via: 1.1 google CF-Cache-Status: BYPASS Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: mid=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f; Domain=.bidbrain.app; Max-Age=7200; Path=/ Accept-Ranges: bytes
2025-01-15 02:49:28 UTC	632	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 34 4a 48 4c 76 38 6c 64 69 67 7a 6d 31 45 6f 52 67 65 39 74 6b 54 51 7a 72 35 43 53 73 42 67 54 71 38 72 4f 25 32 42 76 51 47 47 6e 30 4d 71 48 43 58 6d 71 25 32 46 32 65 42 62 47 56 33 4f 34 4f 30 73 35 38 57 78 4e 45 70 48 25 32 42 4e 33 71 6e 64 69 71 62 48 36 30 39 56 42 25 32 46 36 71 32 65 4b 37 63 35 33 41 25 32 42 68 43 6f 68 41 69 56 7a 4a 4d 30 58 37 6f 72 49 73 66 6e 67 53 6a 25 32 42 4e 32 65 6b 4a 75 34 66 4c 54 50 73 6c 41 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4JHLv8ldigzm1EoRge9tkTQzr5CSsBgTq8rO%2BvQGGn0MqHCXmq%2F2eBbGV3O4O0s58WxNEpH%2BN3qndiqbH609VB%2F6q2eK7c53A%2BhCohAiVzJM0X7orIsfngSj%2BN2ekJu4fLTPslA%3D"}],"group":"cf-nel","max_a
2025-01-15 02:49:28 UTC	937	IN	Data Raw: 76 61 72 20 70 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 66 3d 28 6d 2c 71 2c 6e 29 3d 3e 71 20 69 6e 20 6d 3f 70 28 6d 2c 71 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 6d 5b 71 5d 3d 6e 2c 68 3d 28 6d 2c 71 2c 6e 29 3d 3e 28 66 28 6d 2c 22 73 79 6d 62 6f 6c 22 21 3d 74 79 70 65 6f 66 20 71 3f 71 2b 22 22 3a 71 2c 6e 29 2c 6e 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 3f 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 28 22 66 6c 5f 22 2b 61 2c 62 29 3a 28 44 7c 7c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 71 2c 31 30 Data Ascii: var p=Object.defineProperty,f=(m,q,n)=>q in m?p(m,q,{enumerable:!0,configurable:!0,writable:!0,value:n}):m[q]=n,h=(m,q,n)=>(f(m,"symbol"!=typeof q?q+"":q,n),n);(function(){function m(a,b){window.sendEvent?window.sendEvent("fl_"+a,b):(D\|\|=setInterval(q,10
2025-01-15 02:49:28 UTC	1369	IN	Data Raw: 2c 64 29 3d 3e 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 64 28 45 72 72 6f 72 28 62 3f 3f 60 74 69 6d 65 6f 75 74 20 24 7b 61 7d 60 29 29 7d 2c 61 29 7d 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4a 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 61 63 65 28 5b 61 2c 49 28 62 2c 63 29 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 62 3d 3e 73 65 74 54 69 6d 65 6f 75 74 28 62 2c 61 29 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4c 28 61 2c 62 2c 63 29 7b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 63 3b 65 2b 2b 29 7b 76 61 72 20 64 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 0a 61 77 61 69 74 20 61 28 29 3b 64 3d 62 2d 28 70 65 72 66 6f Data Ascii: ,d)=>{setTimeout(()=>{d(Error(b??`timeout ${a}`))},a)})}async function J(a,b,c){return Promise.race([a,I(b,c)])}function K(a){return new Promise(b=>setTimeout(b,a))}async function L(a,b,c){for(let e=0;e<c;e++){var d=performance.now();await a();d=b-(perfo
2025-01-15 02:49:28 UTC	1369	IN	Data Raw: 28 22 65 72 72 6f 72 20 69 6e 76 6f 6b 69 6e 67 20 72 65 61 64 79 22 2c 63 29 7d 7d 29 3a 74 68 69 73 2e 72 65 61 64 79 28 29 7d 69 6e 69 74 69 61 6c 69 7a 65 28 29 7b 7d 72 65 61 64 79 28 29 7b 7d 72 65 70 6f 72 74 28 61 2c 62 29 7b 6d 28 75 2e 53 69 67 6e 61 6c 2c 7b 6e 61 6d 65 3a 74 68 69 73 2e 6e 61 6d 65 2c 73 75 63 63 65 73 73 3a 61 2c 66 61 69 6c 3a 62 7d 29 7d 72 65 70 6f 72 74 45 72 72 6f 72 28 61 2c 62 29 7b 6e 28 60 24 7b 74 68 69 73 2e 6e 61 6d 65 7d 5b 24 7b 74 68 69 73 2e 63 6f 6e 66 69 67 2e 74 79 70 65 7d 5d 3a 20 24 7b 61 7d 60 2c 62 29 7d 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 6c 65 74 20 6b 3d 30 3b 63 6f 6e 73 74 20 67 3d 72 3d 3e 7b 74 72 79 7b 62 28 72 29 7d 63 61 74 63 68 28 74 29 7b 74 Data Ascii: ("error invoking ready",c)}}):this.ready()}initialize(){}ready(){}report(a,b){m(u.Signal,{name:this.name,success:a,fail:b})}reportError(a,b){n(`${this.name}[${this.config.type}]: ${a}`,b)}addEventListener(a,b,c,d,e){let k=0;const g=r=>{try{b(r)}catch(t){t
2025-01-15 02:49:28 UTC	1369	IN	Data Raw: 29 7b 63 3f 62 2e 70 72 65 70 65 6e 64 28 61 29 3a 62 2e 61 70 70 65 6e 64 28 61 29 7d 67 65 74 50 61 72 65 6e 74 45 6c 65 6d 65 6e 74 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 0a 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 61 29 3a 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 7d 6f 6e 45 6c 65 6d 65 6e 74 43 6c 69 63 6b 28 61 29 7b 63 6f 6e 73 74 20 62 3d 61 2e 74 61 72 67 65 74 3b 62 2e 73 74 79 6c 65 2e 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3d 22 6e 6f 6e 65 22 3b 63 6f 6e 73 74 20 63 3d 64 6f 63 75 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 46 72 6f 6d 50 6f 69 6e 74 28 61 2e 63 6c 69 65 6e 74 58 2c 61 2e 63 6c 69 65 6e 74 59 29 3b 69 66 28 62 2e 73 74 79 6c 65 2e 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3d 22 61 75 74 6f 22 2c 63 26 26 63 21 Data Ascii: ){c?b.prepend(a):b.append(a)}getParentElement(a){return a?document.querySelector(a):document.body}onElementClick(a){const b=a.target;b.style.pointerEvents="none";const c=document.elementFromPoint(a.clientX,a.clientY);if(b.style.pointerEvents="auto",c&&c!
2025-01-15 02:49:28 UTC	1369	IN	Data Raw: 79 52 65 73 6f 6c 75 74 69 6f 6e 22 29 3b 68 28 74 68 69 73 2c 22 61 6e 67 6c 65 52 65 73 6f 6c 75 74 69 6f 6e 22 29 3b 68 28 74 68 69 73 2c 22 6d 6f 75 73 65 44 61 74 61 41 72 72 61 79 22 29 3b 74 68 69 73 2e 65 76 65 6e 74 73 57 69 6e 64 6f 77 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 65 76 65 6e 74 73 57 69 6e 64 6f 77 3f 3f 32 30 30 3b 74 68 69 73 2e 6d 69 6e 54 69 6d 65 44 65 6c 74 61 4d 73 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 69 6e 54 69 6d 65 44 65 6c 74 61 4d 73 3f 3f 32 30 3b 74 68 69 73 2e 6d 69 6e 44 69 73 74 61 6e 63 65 50 78 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 69 6e 44 69 73 74 61 6e 63 65 50 78 3f 3f 0a 31 30 3b 74 68 69 73 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 76 65 6c 6f 63 Data Ascii: yResolution");h(this,"angleResolution");h(this,"mouseDataArray");this.eventsWindow=this.config.eventsWindow??200;this.minTimeDeltaMs=this.config.minTimeDeltaMs??20;this.minDistancePx=this.config.minDistancePx??10;this.velocityResolution=this.config.veloc
2025-01-15 02:49:28 UTC	1369	IN	Data Raw: 76 6f 69 64 20 30 3d 3d 3d 6b 7c 7c 4d 61 74 68 2e 61 62 73 28 42 2d 6b 29 3e 3d 74 68 69 73 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 29 26 26 28 62 2e 79 2e 63 6f 75 6e 74 55 6e 69 71 75 65 2b 2b 2c 6b 3d 42 29 3b 63 2e 70 75 73 68 28 41 29 3b 64 2e 70 75 73 68 28 42 29 3b 76 61 72 20 74 3d 47 2c 54 3d 74 68 69 73 2e 61 6e 67 6c 65 52 65 73 6f 6c 75 74 69 6f 6e 2c 43 3b 28 43 3d 76 6f 69 64 20 30 3d 3d 3d 67 29 7c 7c 28 74 3d 4d 61 74 68 2e 61 62 73 28 74 2d 67 29 25 33 36 30 2c 43 3d 4d 61 74 68 2e 6d 69 6e 28 33 36 30 2d 74 2c 74 29 3e 3d 54 29 3b 43 26 26 28 72 2b 2b 2c 67 3d 47 29 7d 74 68 69 73 2e 72 65 70 6f 72 74 53 69 67 6e 61 6c 73 28 61 2c 62 2c 72 29 7d 7d 63 61 6c 63 75 6c 61 74 65 28 61 2c 62 29 7b 63 6f 6e 73 74 20 63 3d 61 Data Ascii: void 0===k\|\|Math.abs(B-k)>=this.velocityResolution)&&(b.y.countUnique++,k=B);c.push(A);d.push(B);var t=G,T=this.angleResolution,C;(C=void 0===g)\|\|(t=Math.abs(t-g)%360,C=Math.min(360-t,t)>=T);C&&(r++,g=G)}this.reportSignals(a,b,r)}}calculate(a,b){const c=a
2025-01-15 02:49:28 UTC	1369	IN	Data Raw: 3d 3d 61 3b 6c 65 74 20 63 3d 22 43 31 49 54 48 78 77 63 46 52 4d 45 48 77 49 44 55 6b 6f 4c 55 68 30 64 55 6b 6f 4c 55 68 45 54 42 42 6b 47 46 56 4a 4b 42 41 49 46 46 56 78 53 48 52 45 49 49 68 55 41 48 77 49 45 55 6b 70 46 58 46 49 45 43 51 41 56 55 6b 70 53 48 52 38 46 41 78 56 53 44 56 78 53 48 52 38 46 41 78 56 53 53 67 74 53 45 52 4d 45 47 51 59 56 55 6b 6f 45 41 67 55 56 58 46 49 56 42 68 55 65 42 43 41 52 41 68 45 64 41 31 4a 4b 43 31 49 54 48 42 6b 54 47 31 4a 4b 43 31 49 54 43 46 4a 4b 55 68 56 65 45 78 77 5a 46 52 34 45 4b 46 4a 63 55 68 4d 4a 55 6b 70 53 46 56 34 54 48 42 6b 56 48 67 51 70 55 6c 78 53 47 52 52 53 53 6c 49 56 58 67 51 52 41 68 63 56 42 46 34 5a 46 46 41 4d 44 46 41 46 48 68 51 56 46 68 6b 65 46 52 52 53 58 46 49 5a 41 79 51 43 Data Ascii: ==a;let c="C1ITHxwcFRMEHwIDUkoLUh0dUkoLUhETBBkGFVJKBAIFFVxSHREIIhUAHwIEUkpFXFIECQAVUkpSHR8FAxVSDVxSHR8FAxVSSgtSERMEGQYVUkoEAgUVXFIVBhUeBCARAhEdA1JKC1ITHBkTG1JKC1ITCFJKUhVeExwZFR4EKFJcUhMJUkpSFV4THBkVHgQpUlxSGRRSSlIVXgQRAhcVBF4ZFFAMDFAFHhQVFhkeFRRSXFIZAyQC
2025-01-15 02:49:28 UTC	336	IN	Data Raw: 56 53 53 67 51 43 42 52 56 63 55 68 55 47 46 52 34 45 49 42 45 43 45 52 30 44 55 6b 6f 4c 55 68 77 66 45 52 52 53 53 67 74 53 42 78 52 53 53 6c 49 65 45 51 59 5a 46 78 45 45 48 77 4a 65 42 78 55 53 46 41 49 5a 42 68 55 43 55 41 77 4d 55 41 55 65 46 42 55 57 47 52 34 56 46 46 49 4e 44 56 78 53 42 41 6b 41 46 56 4a 4b 55 67 4d 45 45 51 51 5a 45 31 49 4e 44 56 78 53 42 68 55 43 41 78 6b 66 48 6c 4a 4b 51 51 30 3d 22 3b 61 3d 28 62 26 26 28 63 3d 0a 48 28 63 2c 61 29 29 2c 45 28 63 2c 53 2c 21 62 29 29 3b 66 6f 72 28 63 6f 6e 73 74 20 5b 64 2c 65 5d 6f 66 20 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 61 2e 63 6f 6c 6c 65 63 74 6f 72 73 29 29 74 72 79 7b 65 2e 61 63 74 69 76 65 26 26 4e 28 64 2c 65 29 7d 63 61 74 63 68 28 6b 29 7b 6e 28 60 66 61 69 6c 65 64 Data Ascii: VSSgQCBRVcUhUGFR4EIBECER0DUkoLUhwfERRSSgtSBxRSSlIeEQYZFxEEHwJeBxUSFAIZBhUCUAwMUAUeFBUWGR4VFFINDVxSBAkAFVJKUgMEEQQZE1INDVxSBhUCAxkfHlJKQQ0=";a=(b&&(c=H(c,a)),E(c,S,!b));for(const [d,e]of Object.entries(a.collectors))try{e.active&&N(d,e)}catch(k){n(`failed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49830	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:28 UTC	1097	OUT	GET /sig.js?rpclid=546afe47-d2eb-11ef-ad78-a23bd1412fc2&params=hAI2KqFVzEgluZhAFrsrWfd-Wm5J9P0-DIF3OWjFomhzv7esNBBwxT-MVRciluG1Em3k-v7IwStlOhtk7jcv6I0NHULMTqaBvQGCBiSPrhm3tzFUMiTH8VVWTByXhtrRPdhdeLwaNKNsq-s8vFkx5w3t-HXQd-4TJbUzt0wLn79lA8u7bdlg2XViQ0oaQzFpJILJcIMRGdSYKDQX3H8RvJGWs8VlgCgz2d6yebS_XHRc0BE77BrYpBTdb8j5bVSgE-E-6SJs35W-rpjWlFSxtDhI0W2vjAEmOyPffbeWt3-FLCepBF5SL3rC83uQ5acUP-y6vtSV-nKF2-LJDQW8PQtx4YCry_iFzAYflfyfaTjhOtwOzraXWnau_Q2n6euY2JfE1c1uK8BD98tLjDnouA HTTP/1.1 Host: serve.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf
2025-01-15 02:49:28 UTC	1169	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 02:49:28 GMT Content-Type: text/javascript Content-Length: 9487 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Via: 1.1 google CF-Cache-Status: BYPASS Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: mid=546afe47-d2eb-11ef-ad78-a23bd1412fc2; Domain=.bidbrain.app; Max-Age=7200; Path=/ Accept-Ranges: bytes
2025-01-15 02:49:28 UTC	624	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 68 30 50 73 52 59 65 39 52 6a 39 4c 53 31 25 32 42 75 64 6f 74 65 74 65 77 78 4e 4a 58 4d 38 30 77 43 4e 56 4b 42 61 4d 36 4f 71 58 79 78 57 6a 54 46 46 56 63 75 6a 52 61 4b 70 76 32 48 30 34 67 62 43 71 36 47 41 53 65 58 4f 41 32 54 25 32 46 34 62 68 68 65 48 6c 4f 7a 38 70 5a 6a 53 73 64 41 6b 59 41 74 6a 71 30 63 38 46 6c 33 39 37 4b 7a 68 62 49 38 31 6e 55 67 52 4f 6d 4d 34 37 61 44 43 39 64 38 48 39 76 35 67 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h0PsRYe9Rj9LS1%2BudotetewxNJXM80wCNVKBaM6OqXyxWjTFFVcujRaKpv2H04gbCq6GASeXOA2T%2F4bhheHlOz8pZjSsdAkYAtjq0c8Fl397KzhbI81nUgROmM47aDC9d8H9v5g%3D"}],"group":"cf-nel","max_age":6048
2025-01-15 02:49:28 UTC	945	IN	Data Raw: 76 61 72 20 70 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 66 3d 28 6d 2c 71 2c 6e 29 3d 3e 71 20 69 6e 20 6d 3f 70 28 6d 2c 71 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 6d 5b 71 5d 3d 6e 2c 68 3d 28 6d 2c 71 2c 6e 29 3d 3e 28 66 28 6d 2c 22 73 79 6d 62 6f 6c 22 21 3d 74 79 70 65 6f 66 20 71 3f 71 2b 22 22 3a 71 2c 6e 29 2c 6e 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 3f 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 28 22 66 6c 5f 22 2b 61 2c 62 29 3a 28 44 7c 7c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 71 2c 31 30 Data Ascii: var p=Object.defineProperty,f=(m,q,n)=>q in m?p(m,q,{enumerable:!0,configurable:!0,writable:!0,value:n}):m[q]=n,h=(m,q,n)=>(f(m,"symbol"!=typeof q?q+"":q,n),n);(function(){function m(a,b){window.sendEvent?window.sendEvent("fl_"+a,b):(D\|\|=setInterval(q,10
2025-01-15 02:49:28 UTC	1369	IN	Data Raw: 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 64 28 45 72 72 6f 72 28 62 3f 3f 60 74 69 6d 65 6f 75 74 20 24 7b 61 7d 60 29 29 7d 2c 61 29 7d 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4a 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 61 63 65 28 5b 61 2c 49 28 62 2c 63 29 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 62 3d 3e 73 65 74 54 69 6d 65 6f 75 74 28 62 2c 61 29 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4c 28 61 2c 62 2c 63 29 7b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 63 3b 65 2b 2b 29 7b 76 61 72 20 64 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 0a 61 77 61 69 74 20 61 28 29 3b 64 3d 62 2d 28 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e Data Ascii: tTimeout(()=>{d(Error(b??`timeout ${a}`))},a)})}async function J(a,b,c){return Promise.race([a,I(b,c)])}function K(a){return new Promise(b=>setTimeout(b,a))}async function L(a,b,c){for(let e=0;e<c;e++){var d=performance.now();await a();d=b-(performance.n
2025-01-15 02:49:28 UTC	1369	IN	Data Raw: 69 6e 76 6f 6b 69 6e 67 20 72 65 61 64 79 22 2c 63 29 7d 7d 29 3a 74 68 69 73 2e 72 65 61 64 79 28 29 7d 69 6e 69 74 69 61 6c 69 7a 65 28 29 7b 7d 72 65 61 64 79 28 29 7b 7d 72 65 70 6f 72 74 28 61 2c 62 29 7b 6d 28 75 2e 53 69 67 6e 61 6c 2c 7b 6e 61 6d 65 3a 74 68 69 73 2e 6e 61 6d 65 2c 73 75 63 63 65 73 73 3a 61 2c 66 61 69 6c 3a 62 7d 29 7d 72 65 70 6f 72 74 45 72 72 6f 72 28 61 2c 62 29 7b 6e 28 60 24 7b 74 68 69 73 2e 6e 61 6d 65 7d 5b 24 7b 74 68 69 73 2e 63 6f 6e 66 69 67 2e 74 79 70 65 7d 5d 3a 20 24 7b 61 7d 60 2c 62 29 7d 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 6c 65 74 20 6b 3d 30 3b 63 6f 6e 73 74 20 67 3d 72 3d 3e 7b 74 72 79 7b 62 28 72 29 7d 63 61 74 63 68 28 74 29 7b 74 68 69 73 2e 72 65 70 6f Data Ascii: invoking ready",c)}}):this.ready()}initialize(){}ready(){}report(a,b){m(u.Signal,{name:this.name,success:a,fail:b})}reportError(a,b){n(`${this.name}[${this.config.type}]: ${a}`,b)}addEventListener(a,b,c,d,e){let k=0;const g=r=>{try{b(r)}catch(t){this.repo
2025-01-15 02:49:28 UTC	1369	IN	Data Raw: 65 70 65 6e 64 28 61 29 3a 62 2e 61 70 70 65 6e 64 28 61 29 7d 67 65 74 50 61 72 65 6e 74 45 6c 65 6d 65 6e 74 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 0a 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 61 29 3a 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 7d 6f 6e 45 6c 65 6d 65 6e 74 43 6c 69 63 6b 28 61 29 7b 63 6f 6e 73 74 20 62 3d 61 2e 74 61 72 67 65 74 3b 62 2e 73 74 79 6c 65 2e 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3d 22 6e 6f 6e 65 22 3b 63 6f 6e 73 74 20 63 3d 64 6f 63 75 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 46 72 6f 6d 50 6f 69 6e 74 28 61 2e 63 6c 69 65 6e 74 58 2c 61 2e 63 6c 69 65 6e 74 59 29 3b 69 66 28 62 2e 73 74 79 6c 65 2e 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3d 22 61 75 74 6f 22 2c 63 26 26 63 21 3d 3d 62 29 61 3d 6e 65 Data Ascii: epend(a):b.append(a)}getParentElement(a){return a?document.querySelector(a):document.body}onElementClick(a){const b=a.target;b.style.pointerEvents="none";const c=document.elementFromPoint(a.clientX,a.clientY);if(b.style.pointerEvents="auto",c&&c!==b)a=ne
2025-01-15 02:49:28 UTC	1369	IN	Data Raw: 69 6f 6e 22 29 3b 68 28 74 68 69 73 2c 22 61 6e 67 6c 65 52 65 73 6f 6c 75 74 69 6f 6e 22 29 3b 68 28 74 68 69 73 2c 22 6d 6f 75 73 65 44 61 74 61 41 72 72 61 79 22 29 3b 74 68 69 73 2e 65 76 65 6e 74 73 57 69 6e 64 6f 77 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 65 76 65 6e 74 73 57 69 6e 64 6f 77 3f 3f 32 30 30 3b 74 68 69 73 2e 6d 69 6e 54 69 6d 65 44 65 6c 74 61 4d 73 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 69 6e 54 69 6d 65 44 65 6c 74 61 4d 73 3f 3f 32 30 3b 74 68 69 73 2e 6d 69 6e 44 69 73 74 61 6e 63 65 50 78 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 69 6e 44 69 73 74 61 6e 63 65 50 78 3f 3f 0a 31 30 3b 74 68 69 73 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c Data Ascii: ion");h(this,"angleResolution");h(this,"mouseDataArray");this.eventsWindow=this.config.eventsWindow??200;this.minTimeDeltaMs=this.config.minTimeDeltaMs??20;this.minDistancePx=this.config.minDistancePx??10;this.velocityResolution=this.config.velocityResol
2025-01-15 02:49:28 UTC	1369	IN	Data Raw: 3d 6b 7c 7c 4d 61 74 68 2e 61 62 73 28 42 2d 6b 29 3e 3d 74 68 69 73 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 29 26 26 28 62 2e 79 2e 63 6f 75 6e 74 55 6e 69 71 75 65 2b 2b 2c 6b 3d 42 29 3b 63 2e 70 75 73 68 28 41 29 3b 64 2e 70 75 73 68 28 42 29 3b 76 61 72 20 74 3d 47 2c 54 3d 74 68 69 73 2e 61 6e 67 6c 65 52 65 73 6f 6c 75 74 69 6f 6e 2c 43 3b 28 43 3d 76 6f 69 64 20 30 3d 3d 3d 67 29 7c 7c 28 74 3d 4d 61 74 68 2e 61 62 73 28 74 2d 67 29 25 33 36 30 2c 43 3d 4d 61 74 68 2e 6d 69 6e 28 33 36 30 2d 74 2c 74 29 3e 3d 54 29 3b 43 26 26 28 72 2b 2b 2c 67 3d 47 29 7d 74 68 69 73 2e 72 65 70 6f 72 74 53 69 67 6e 61 6c 73 28 61 2c 62 2c 72 29 7d 7d 63 61 6c 63 75 6c 61 74 65 28 61 2c 62 29 7b 63 6f 6e 73 74 20 63 3d 61 2e 78 2d 62 2e 78 2c 64 Data Ascii: =k\|\|Math.abs(B-k)>=this.velocityResolution)&&(b.y.countUnique++,k=B);c.push(A);d.push(B);var t=G,T=this.angleResolution,C;(C=void 0===g)\|\|(t=Math.abs(t-g)%360,C=Math.min(360-t,t)>=T);C&&(r++,g=G)}this.reportSignals(a,b,r)}}calculate(a,b){const c=a.x-b.x,d
2025-01-15 02:49:28 UTC	1369	IN	Data Raw: 63 3d 22 45 6b 73 4b 42 67 55 46 44 41 6f 64 42 68 73 61 53 31 4d 53 53 77 51 45 53 31 4d 53 53 77 67 4b 48 51 41 66 44 45 74 54 48 52 73 63 44 45 56 4c 42 41 67 52 4f 77 77 5a 42 68 73 64 53 31 4e 63 52 55 73 64 45 42 6b 4d 53 31 4e 4c 42 41 59 63 47 67 78 4c 46 45 56 4c 42 41 59 63 47 67 78 4c 55 78 4a 4c 43 41 6f 64 41 42 38 4d 53 31 4d 64 47 78 77 4d 52 55 73 4d 48 77 77 48 48 54 6b 49 47 77 67 45 47 6b 74 54 45 6b 73 4b 42 51 41 4b 41 6b 74 54 45 6b 73 4b 45 55 74 54 53 77 78 48 43 67 55 41 44 41 63 64 4d 55 74 46 53 77 6f 51 53 31 4e 4c 44 45 63 4b 42 51 41 4d 42 78 30 77 53 30 56 4c 41 41 31 4c 55 30 73 4d 52 78 30 49 47 77 34 4d 48 55 63 41 44 55 6b 56 46 55 6b 63 42 77 30 4d 44 77 41 48 44 41 31 4c 52 55 73 41 47 6a 30 62 48 42 6f 64 44 41 31 4c Data Ascii: c="EksKBgUFDAodBhsaS1MSSwQES1MSSwgKHQAfDEtTHRscDEVLBAgROwwZBhsdS1NcRUsdEBkMS1NLBAYcGgxLFEVLBAYcGgxLUxJLCAodAB8MS1MdGxwMRUsMHwwHHTkIGwgEGktTEksKBQAKAktTEksKEUtTSwxHCgUADAcdMUtFSwoQS1NLDEcKBQAMBx0wS0VLAA1LU0sMRx0IGw4MHUcADUkVFUkcBw0MDwAHDA1LRUsAGj0bHBodDA1L
2025-01-15 02:49:28 UTC	328	IN	Data Raw: 78 46 53 77 77 66 44 41 63 64 4f 51 67 62 43 41 51 61 53 31 4d 53 53 77 55 47 43 41 31 4c 55 78 4a 4c 48 67 31 4c 55 30 73 48 43 42 38 41 44 67 67 64 42 68 74 48 48 67 77 4c 44 52 73 41 48 77 77 62 53 52 55 56 53 52 77 48 44 51 77 50 41 41 63 4d 44 55 73 55 46 45 56 4c 48 52 41 5a 44 45 74 54 53 78 6f 64 43 42 30 41 43 6b 73 55 46 45 56 4c 48 77 77 62 47 67 41 47 42 30 74 54 57 42 51 3d 22 3b 61 3d 28 62 26 26 28 63 3d 0a 48 28 63 2c 61 29 29 2c 45 28 63 2c 53 2c 21 62 29 29 3b 66 6f 72 28 63 6f 6e 73 74 20 5b 64 2c 65 5d 6f 66 20 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 61 2e 63 6f 6c 6c 65 63 74 6f 72 73 29 29 74 72 79 7b 65 2e 61 63 74 69 76 65 26 26 4e 28 64 2c 65 29 7d 63 61 74 63 68 28 6b 29 7b 6e 28 60 66 61 69 6c 65 64 20 63 72 65 61 74 69 6e Data Ascii: xFSwwfDAcdOQgbCAQaS1MSSwUGCA1LUxJLHg1LU0sHCB8ADggdBhtHHgwLDRsAHwwbSRUVSRwHDQwPAAcMDUsUFEVLHRAZDEtTSxodCB0ACksUFEVLHwwbGgAGB0tTWBQ=";a=(b&&(c=H(c,a)),E(c,S,!b));for(const [d,e]of Object.entries(a.collectors))try{e.active&&N(d,e)}catch(k){n(`failed creatin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49831	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:28 UTC	740	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 963 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf
2025-01-15 02:49:28 UTC	963	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 61 66 65 34 37 2d 64 32 65 62 2d 31 31 65 66 2d 61 64 37 38 2d 61 32 33 62 64 31 34 31 32 66 63 32 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 68 41 49 32 4b 71 46 56 7a 45 67 6c 75 5a 68 41 46 72 73 72 57 66 64 2d 57 6d 35 4a 39 50 30 2d 44 49 46 33 4f 57 6a 46 6f 6d 68 7a 76 37 65 73 4e 42 42 77 78 54 2d 4d 56 52 63 69 6c 75 47 31 45 6d 33 6b 2d 76 37 49 77 53 74 6c 4f 68 74 6b 37 6a 63 76 36 49 30 4e 48 55 4c 4d 54 71 61 42 76 51 47 43 42 69 53 50 72 68 6d 33 74 7a 46 55 4d 69 54 48 38 56 56 57 54 42 79 58 Data Ascii: {"entries":[{"sid":"546afe47-d2eb-11ef-ad78-a23bd1412fc2","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"hAI2KqFVzEgluZhAFrsrWfd-Wm5J9P0-DIF3OWjFomhzv7esNBBwxT-MVRciluG1Em3k-v7IwStlOhtk7jcv6I0NHULMTqaBvQGCBiSPrhm3tzFUMiTH8VVWTByX
2025-01-15 02:49:28 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:28 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=546afe47-d2eb-11ef-ad78-a23bd1412fc2; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=546afe47-d2eb-11ef-ad78-a23bd1412fc2; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:28 UTC	636	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 53 6c 51 67 43 53 6e 54 57 79 61 25 32 46 69 34 73 6b 63 65 61 53 61 69 53 72 7a 61 6b 5a 75 34 45 4e 41 74 76 63 32 7a 4d 25 32 46 4b 35 59 51 43 45 53 25 32 46 48 70 77 57 71 66 25 32 42 37 34 68 65 30 74 32 41 31 64 65 77 43 25 32 46 47 75 46 46 77 4f 6e 54 41 68 62 58 6f 5a 54 44 68 32 53 68 32 71 25 32 42 43 63 36 32 73 63 64 78 37 61 54 25 32 46 53 25 32 46 6f 4d 6d 6d 56 31 75 64 25 32 46 6a 65 6a 36 36 5a 58 71 70 35 57 5a 69 55 77 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SlQgCSnTWya%2Fi4skceaSaiSrzakZu4ENAtvc2zM%2FK5YQCES%2FHpwWqf%2B74he0t2A1dewC%2FGuFFwOnTAhbXoZTDh2Sh2q%2BCc62scdx7aT%2FS%2FoMmmV1ud%2Fjej66ZXqp5WZiUw%3D%3D"}],"group":"cf-nel","m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49832	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:28 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 1980 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ef294-d2eb-11ef-94e6-12087e0c0b48
2025-01-15 02:49:28 UTC	1980	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 61 64 32 39 35 2d 64 32 65 62 2d 31 31 65 66 2d 39 35 39 66 2d 64 36 63 35 39 39 63 62 66 34 66 63 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 57 76 71 45 57 6f 75 62 35 69 37 2d 77 62 46 71 36 53 7a 6c 6e 46 39 75 45 51 36 2d 44 52 76 47 34 74 68 39 42 4f 7a 4b 44 4f 58 6d 52 4e 48 74 4c 4d 71 49 38 6b 49 35 33 5a 30 56 69 5a 38 72 5f 35 32 6b 4f 71 74 46 41 49 62 4b 2d 37 48 71 7a 61 68 42 64 57 62 74 34 54 30 65 6c 45 34 48 73 64 5f 61 32 79 37 4d 67 53 41 69 48 54 6d 69 49 6d 48 44 33 70 53 58 75 35 4d 4f Data Ascii: {"entries":[{"sid":"546ad295-d2eb-11ef-959f-d6c599cbf4fc","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"WvqEWoub5i7-wbFq6SzlnF9uEQ6-DRvG4th9BOzKDOXmRNHtLMqI8kI53Z0ViZ8r_52kOqtFAIbK-7HqzahBdWbt4T0elE4Hsd_a2y7MgSAiHTmiImHD3pSXu5MO
2025-01-15 02:49:28 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:28 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=546ad295-d2eb-11ef-959f-d6c599cbf4fc; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=546ad295-d2eb-11ef-959f-d6c599cbf4fc; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:28 UTC	624	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6c 69 4d 73 76 70 47 79 42 46 39 76 64 6b 79 62 6d 39 4b 48 44 51 37 54 4a 25 32 42 57 7a 44 7a 55 4f 34 45 63 67 73 32 25 32 42 58 56 5a 66 78 4a 73 65 53 25 32 46 50 33 75 45 57 6c 56 45 43 76 53 39 4e 75 34 4a 59 67 46 74 31 44 6c 47 62 37 4a 64 55 73 6a 45 47 6b 36 48 32 33 76 51 6c 31 4a 71 42 44 7a 4f 6d 4a 66 4d 59 46 77 77 61 43 37 32 77 43 6b 4e 6d 42 57 4e 63 58 7a 33 55 50 47 51 5a 6d 33 6d 77 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=liMsvpGyBF9vdkybm9KHDQ7TJ%2BWzDzUO4Ecgs2%2BXVZfxJseS%2FP3uEWlVECvS9Nu4JYgFt1DlGb7JdUsjEGk6H23vQl1JqBDzOmJfMYFwwaC72wCkNmBWNcXz3UPGQZm3mw%3D%3D"}],"group":"cf-nel","max_age":6048

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49835	104.21.80.92	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:28 UTC	717	OUT	GET /click_1734018555_64x64.png HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ef294-d2eb-11ef-94e6-12087e0c0b48
2025-01-15 02:49:29 UTC	1176	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 02:49:28 GMT Content-Type: image/png Content-Length: 721 Connection: close X-GUploader-UploadID: AFiumC7kv2Ihy_YfVHcGo-Zrykcigo_yR8ynNj4HrgDmOqlDiM9V-MrZmxn19eTDz3GY-G1BYhuYLpA x-goog-generation: 1734018555538900 x-goog-metageneration: 3 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 721 x-goog-hash: crc32c=PWgPLA== x-goog-hash: md5=Qx665ft+mV1G29G7lB8NMg== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type Expires: Wed, 15 Jan 2025 03:06:48 GMT Cache-Control: public, max-age=14400 Age: 2560 Last-Modified: Thu, 12 Dec 2024 15:49:15 GMT ETag: "431ebae5fb7e995d46dbd1bb941f0d32" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TbYvAZ4ke2UWkcXdGrxOxtBPnwvpTdkOy0StfdcR9mE%2BmZ%2BL5zbCPOo4h5%2Bs4RRz4qpJ87E4DJTC0hxACK6D24RenZCE4Hynyom%2B%2FnFiQGjH%2FT8Sltcu9Et97oYTMhD0%2B5hc"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 90228d83ebeaa2c7-YUL alt-svc: h3=":443"; ma=86400
2025-01-15 02:49:29 UTC	217	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 37 37 33 37 26 6d 69 6e 5f 72 74 74 3d 31 37 37 33 36 26 72 74 74 5f 76 61 72 3d 36 36 35 34 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 33 33 38 26 72 65 63 76 5f 62 79 74 65 73 3d 31 32 39 35 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 36 34 35 30 37 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 62 33 64 31 31 32 66 35 37 30 61 36 36 37 38 37 26 74 73 3d 31 38 31 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=17737&min_rtt=17736&rtt_var=6654&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2338&recv_bytes=1295&delivery_rate=164507&cwnd=32&unsent_bytes=0&cid=b3d112f570a66787&ts=181&x=0"
2025-01-15 02:49:29 UTC	721	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 03 00 00 00 9d b7 81 ec 00 00 00 78 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 c8 48 88 00 00 00 27 74 52 4e 53 00 ec f2 3f ee 05 32 f6 2e d2 0a 9d 77 58 3a 47 13 80 a2 4d 44 37 67 ac 64 0e c9 16 36 1b cf 6b b9 8b 71 2a c4 ab 21 5f 63 3e 35 00 00 01 e1 49 44 41 54 58 c3 e5 95 d9 76 82 30 14 45 2f 09 20 a0 e0 54 07 50 70 6c f3 ff 7f 58 e2 b2 1e 43 21 de c4 Data Ascii: PNGIHDR@@xPLTEH'tRNS?2.wX:GMD7gd6kq*!_c>5IDATXv0E/ TPplXC!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49834	104.21.80.92	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:28 UTC	602	OUT	GET /compressedFonts/RobotoRegular.woff2 HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://googleads.g.doubleclick.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 02:49:29 UTC	1273	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 02:49:28 GMT Content-Type: application/octet-stream Content-Length: 61736 Connection: close x-goog-generation: 1701252459996546 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 61736 x-goog-hash: crc32c=fte1vA== x-goog-hash: md5=7ehNloCMSG4950y9jyosgA== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: AFiumC7Rg5zW6DihiAsw0arnSUvwSBq2DXiP6fQMuh2jwnGykv-rlV9_7OZqKJUUDuLA8wb3n23mbVQ Expires: Wed, 15 Jan 2025 02:46:19 GMT Cache-Control: public, max-age=14400 Age: 283 Last-Modified: Wed, 29 Nov 2023 10:07:40 GMT ETag: "ede84d96808c486e3de74cbd8f2a2c80" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g6I8jsAaz6sHYqlZerq%2FWLM9vGQ%2FtMfPxS0nWk11ra0P9gsB0HymRrOYYLcJ1OmnFk6eTqfhOCZgerxTwV9k5kVxoj4e7GqdE%2ByXyYmu75G7Ml7yqZ25Q5brqEoIjqlYHXf8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 90228d83fe8ea26f-YUL alt-svc: h3=":443"; ma=86400
2025-01-15 02:49:29 UTC	217	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 37 38 30 37 26 6d 69 6e 5f 72 74 74 3d 31 37 38 30 35 26 72 74 74 5f 76 61 72 3d 36 36 38 31 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 33 33 39 26 72 65 63 76 5f 62 79 74 65 73 3d 31 31 38 30 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 36 33 38 34 32 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 64 39 33 63 33 37 61 36 31 33 66 39 62 62 37 37 26 74 73 3d 31 38 37 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=17807&min_rtt=17805&rtt_var=6681&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2339&recv_bytes=1180&delivery_rate=163842&cwnd=32&unsent_bytes=0&cid=d93c37a613f9bb77&ts=187&x=0"
2025-01-15 02:49:29 UTC	1248	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 f1 28 00 12 00 00 00 02 80 e4 00 00 f0 c3 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 84 44 1b 81 a4 24 1c af 68 06 60 00 a5 48 08 4c 09 83 3c 11 0c 0a 87 af 60 86 d2 43 0b 93 46 00 12 89 6c 01 36 02 24 03 a7 08 04 20 05 85 18 07 20 0c 81 5b 5b 4f 47 92 aa 2a d7 be b7 e8 ef 04 92 9d d0 6d 08 50 e5 74 aa fe 2f 1e e0 46 34 c7 ee 05 1d 56 e9 3c 6d aa 42 48 37 fa 02 ed f2 0b d3 8d ba eb 2a 6b 0c fe b1 6f f6 ff ff ff ff ff ff 2f 4b 26 32 66 c9 01 97 a6 85 02 20 73 02 3a 15 7f ce df 3b 7f 42 68 01 51 82 47 95 dc a5 d6 34 a2 c6 0c 51 48 89 99 26 c4 6d a7 3a 4a 13 ac d7 0c 83 07 95 58 e7 38 3a 9b 5d ea 53 5b 4f 6f fb f7 24 87 59 96 7d 8c 92 9b f5 d8 c5 f1 f4 01 26 39 ab 8b e6 3a 2f 97 a0 5d ce 88 95 69 Data Ascii: wOF2(D$h`HL<`CFl6$ [[OGmPt/F4V<mBH7ko/K&2f s:;BhQG4QH&m:JX8:]S[Oo$Y}&9:/]i
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 03 74 d5 f8 3c e1 cc ee 11 09 55 40 d5 57 5d a7 aa cb ea 03 cf 2c 1e 85 0b ff ac 0d 4b 33 c7 6b d9 30 ba a9 f9 52 9e 70 61 a8 20 2c 1c fa 87 1f 8e 8f 71 04 6d ce e4 a6 b9 b9 71 95 8f 44 d0 94 2a fe 9f e7 64 ef dc bf 33 c2 11 0f 70 40 14 42 14 47 51 19 30 40 50 02 03 31 f0 da ac c4 6a 48 5e 37 ed 8d 2f 43 f4 67 a2 d3 63 60 76 09 61 8c 89 4e 7f 45 fe d7 d4 fc 5a b9 a8 d8 6a f5 ec 95 dd af a5 36 09 85 9a 5e 10 0f 05 4f 6f 76 84 70 18 8b 7d 7f da 2f 4d 2c a0 e1 08 05 ec 05 ec ed 4c c6 37 a5 5f 23 bd 89 d1 09 1e f1 af 13 75 dc 2a 8e d5 c5 c6 63 6c 78 83 03 88 7c 9d 9e 92 b2 b0 b6 f0 bd db 9a e1 ee fd 93 5e dc 24 45 a5 30 23 bd 3b 78 3e 77 42 7a 26 89 b4 fc 6d 5f ea 2e 64 c8 11 78 81 b6 83 54 00 04 50 d1 9a dd 04 08 3a b5 13 78 22 c5 28 ec 2b cd 42 0a 40 93 4e Data Ascii: t<U@W],K3k0Rpa ,qmqDd3p@BGQ0@P1jH^7/Cgc`vaNEZj6^Oovp}/M,L7_#uclx\|^$E0#;x>wBz&m_.dxTP:x"(+B@N
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 83 d1 64 b6 58 fd 13 e9 e3 0b 84 22 b1 44 2a 93 2b fc 4c cd 10 a6 19 96 e3 05 bb f6 ec 3b 70 28 57 28 55 6a 8d d6 ff 62 b9 52 6f 34 5b 6d 1e 85 ea 35 53 74 cf 01 c0 21 15 41 c3 c0 c2 29 86 47 40 44 52 82 8c a2 14 15 0d 1d 03 13 0b 1b 07 17 0f 9f 80 50 23 0c 81 c2 e0 08 24 0a 8d c1 b2 b1 73 70 72 71 f3 f0 f2 e1 f0 84 62 a9 5c a9 d6 ea d1 b1 70 74 eb d5 6f 10 d7 08 1e 11 09 29 19 05 15 0d 1d 03 13 80 95 9d c3 b8 09 9a 10 88 a4 12 32 a5 94 46 67 30 59 6c 0e 97 2f 10 8a c4 12 69 55 75 4d 6d 5d bd 31 13 87 cf ca ce c9 cd cb 2f 28 2c 2a 26 10 df be a7 8c 7a ad 6e 6f e3 7d 77 9b ef 87 fb f1 b6 db 5e 50 00 21 3e f6 fd 07 0e b3 ad 00 24 02 10 01 5b cb 2b d7 63 cd 21 d1 49 8a d7 fa 57 07 90 7e 73 f7 31 86 47 96 da 9b ce 97 48 f9 28 4b 42 0c b5 ac ba fa 3d bf 98 de Data Ascii: dX"D+L;p(W(UjbRo4[m5St!A)G@DRP#$sprqb\pto)2Fg0Yl/iUuMm]1/(,&zno}w^P!>$[+c!IW~s1GH(KB=
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 3e fb 70 63 8e 5a ba cc 5d 8d a8 5a f1 14 ee 64 38 76 8c a2 89 69 c9 f8 51 2b f5 58 b5 d9 02 dc 2b 1b 6d b1 5d a4 2e df d6 2b ca 84 ea 81 0a 79 8d 95 6c c7 6f 82 da 60 88 64 c5 6f df 90 78 f0 4c e6 e8 10 4a ce 47 b6 9c ca 77 b3 20 6a 21 e6 c2 38 45 08 8b a1 80 81 e5 15 17 28 2b 92 b0 c6 56 be fb d6 4b bc f6 8c 50 70 9a 9a bd 28 f3 6d 23 43 4c 6b f6 db 9a db 8e 09 5c af 58 40 a9 d7 69 56 68 8b e5 e6 e4 6c 8b af ac b1 3b 44 2c 40 e9 b3 3d 86 57 cb b4 b4 4b ac c8 26 5b 41 23 d1 ab 8d 3a 96 9e 13 d0 16 53 2a b3 b3 af 03 a5 a6 35 c4 0d c8 96 66 58 af 49 ea a3 8c c6 dc 7a ff 7a ea a1 8a 61 53 e8 4c d7 45 2d 66 b2 2e 23 a6 37 27 43 5b 74 a9 5a a1 8a ef 0d 88 15 69 cf 78 6c 4a ae 67 44 44 44 9f 17 11 16 c3 b4 ff a7 71 eb 58 c3 00 6f df 7f 74 e8 c8 3d 30 94 27 e3 Data Ascii: >pcZ]Zd8viQ+X+m].+ylo`doxLJGw j!8E(+VKPp(m#CLk\X@iVhl;D,@=WK&[A#:S*5fXIzzaSLE-f.#7'C[tZixlJgDDDqXot=0'
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: ee 79 b4 a5 b6 48 d9 9e 79 d3 03 25 72 50 b2 2a 25 b2 8a b5 cf 76 6a 08 28 d8 4e a0 ea e0 fc a5 12 65 bd 1b 3c 78 bd 06 a5 fe 7e 17 bf b5 43 e5 3f aa d7 5c 77 c3 4d 4f 28 a8 68 e8 18 8a 69 28 bd 7e 6f d9 3f e2 44 ca 6f fd d8 4e f0 9c 74 8a fa f4 10 a8 5c 95 3e 63 c6 cb 52 1d 94 14 39 37 dc 65 ea 41 f3 21 39 be fc 05 94 c0 8d e5 77 9a fe 02 04 0a 92 29 5b 8e 5c 18 f9 b0 f0 0a 15 23 21 2b 2d d4 9a 37 b4 02 f8 56 c5 aa 5a dd d2 e2 0b 6d c2 a4 69 33 d6 ca fb 7a 0e 5c b8 f1 e2 27 48 98 88 f3 2e 52 2e 6a e8 17 10 10 82 22 02 0c 3a 97 e2 f9 b5 64 fd c1 9a ac 7f 77 5e c0 5c bc d8 1b be 9a 7d cd ee ba f5 4d 89 b1 4c 6f c6 de fc 73 fb bf 88 70 d6 96 f5 74 45 45 b6 71 57 53 b8 10 70 b1 67 da a3 94 81 d6 cf ab b1 9f 1e bf 90 9e 84 52 31 0c 4c 46 40 a0 f3 29 a4 f0 a2 Data Ascii: yHy%rP*%vj(Ne<x~C?\wMO(hi(~o?DoNt\>cR97eA!9w)[\#!+-7VZmi3z\'H.R.j":dw^\}MLosptEEqWSpgR1LF@)
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: d2 e9 7e 2b ba 5d ee 6d 31 f7 4a 67 06 5d 18 fe 1e d4 bd b0 22 b0 cb 46 b2 33 47 55 34 3f 32 f4 fa 29 b9 34 64 c9 53 74 da d9 ef 41 60 54 3a b5 ae 9b b7 a7 8a f7 48 bd 7f ea 5c 50 b8 54 80 aa 93 ab 4c d6 aa 30 70 8b a9 de af 20 2e 0f 13 42 08 21 84 10 42 de 28 ac ec 9c 71 22 17 b3 5c 22 c2 93 71 72 b7 c5 5a cd 2c 38 b6 e6 d4 75 2d 93 3c 30 96 f1 c5 34 71 15 a7 d3 5e 15 ea e3 09 51 9c a8 44 b3 9d 36 bb 6b bd a7 8a f7 e3 c9 87 89 a9 63 f8 91 63 90 05 b0 8d c3 6c 59 b2 c3 cc c0 25 e0 f8 1c e2 02 e6 62 f2 8e 50 ef 70 b7 e1 29 22 c6 52 05 b9 07 53 80 4d ac 89 cd 1c 9c c6 4d 9a 36 63 be 7c aa fb ea f4 22 db 16 a3 ed b1 6c 7f 0f 58 3c 73 4a 2d 84 59 a8 70 11 25 f2 92 5b 8f e3 cd 66 22 71 84 72 42 03 03 b3 49 2c 4a c9 ba 0d a6 4d 6c 88 6b 01 e2 59 ef 7c 7b 9c 0e Data Ascii: ~+]m1Jg]"F3GU4?2)4dStA`T:H\PTL0p .B!B(q"\"qrZ,8u-<04q^QD6kcclY%bPp)"RSMM6c\|"lX<sJ-Yp%[f"qrBI,JMlkY\|{
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 03 00 bf 10 55 7c 8c cd 34 49 8e bc 14 ec 52 54 08 4a 90 94 ab 54 ad 56 bd 46 64 2d da be 47 10 af e0 89 3b f5 22 bd 84 2b bd 95 a5 82 2b 7c 7e 20 c4 88 4d 2c 73 8b fd 18 00 c5 6d 72 99 a5 6b d1 00 54 fc bc 0a d1 43 b2 98 b3 6d e3 28 e3 26 4c 99 31 57 16 ea 3f f3 85 af 96 6f 7e 14 00 00 f0 ab a0 88 c0 5d 7e 06 bc be e5 48 cc 04 6f 98 b7 bc 4b 97 ed ad 69 77 38 eb 03 2a 98 f9 f0 7b a5 99 6b a2 b8 81 c5 43 a0 72 55 fa 8c 19 ef 8b 48 96 38 5f 3e cf a0 0f 19 01 48 23 b5 9a 2a 2c 79 f0 2c 41 d5 77 db 23 c9 5e fb e4 e3 28 52 a2 cc 49 15 aa 54 ab 75 46 bd c6 d2 5c 63 87 52 a7 54 69 d7 eb a6 bb ee 7b e0 65 ff 74 9e 66 39 9f 43 da 1c ab 84 21 4a 9c 24 69 b2 e4 69 d3 a5 cf b8 41 0a ef 79 c0 2b 98 2a ca 6f fb 0a e4 87 e6 8b be 2f f5 fd 60 fe dd 18 ff 70 e6 0f e5 df Data Ascii: U\|4IRTJTVFd-G;"++\|~ M,smrkTCm(&L1W?o~]~HoKiw8{kCrUH8_>H#,y,Aw#^(RITuF\cRTi{etf9C!J$iiAy+*o/`p
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: aa f1 c1 ba b8 9c 30 71 4c 52 55 f4 96 f5 0d 56 f0 f1 39 34 82 09 21 42 22 11 11 41 22 32 58 44 dd 48 55 7e 5c a1 f6 63 47 42 b1 35 e7 38 e2 1c 42 c4 47 24 12 82 47 62 24 62 5b c4 63 7b d0 60 4f 12 e7 10 05 48 28 5e 48 1b c1 e2 c0 8d 40 6d c8 15 6a 1f c6 11 2d 0f f9 9c 12 c7 1c a7 e4 90 c8 8e 14 39 37 58 25 f2 39 88 7c c2 07 27 5a 14 46 88 a2 88 51 1c 23 4a e2 86 8e 5f 5e c2 f2 c3 2a 88 17 36 51 b8 54 c2 c7 8f 10 39 ea 12 45 be b2 be 87 1f 4a 59 cf 58 1b 31 e3 fc 58 fc b0 aa 6a 93 aa 23 93 aa 0f c4 d5 04 d1 e2 d6 14 8c f6 f8 75 44 8f 9e 44 f5 44 88 9b f1 ea 8b 19 03 51 8c 19 34 86 22 1e b7 a2 dc 60 d0 18 8d 4c a3 91 69 22 58 dc fd 11 f9 a6 9b 69 c7 73 22 1e 8f a2 dc 72 08 f1 3c a4 36 42 6a 2b 72 6d 47 ba 9d 28 b6 3b c2 bd f6 dc 6f df 97 bd 3c de 12 f1 f8 Data Ascii: 0qLRUV94!B"A"2XDHU~\cGB58BG$Gb$b[c{`OH(^H@mj-97X%9\|'ZFQ#J_^*6QT9EJYX1Xj#uDDDQ4"`Li"Xis"r<6Bj+rmG(;o<
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: d4 e9 b3 62 c7 55 31 1a 01 95 4a 8d 90 70 28 6a b5 7d ae 19 01 91 32 0d 06 ac d9 73 83 47 27 a4 56 a5 49 0e bc 52 75 da db 35 23 28 a7 82 ce 90 0d 07 08 04 0c 22 1a d5 9a a1 10 94 a9 d7 d1 b8 90 7f ea 82 4c 93 11 13 b6 dc 11 31 89 69 d5 68 91 ab 10 55 83 4e e0 5f ee af 2a 81 b2 1e 0a 31 16 e6 63 c5 d9 5b 25 7c 28 dc 73 90 3f 16 5c 4f 09 da 45 f5 56 8b 9a c7 8e a6 7e ff 43 c7 2d 66 74 5b 1d 66 3e f6 6c 5f 78 cc c8 9c f7 6d 0b 7b 55 b0 ee 0c 5f 3d 56 bc 23 96 63 0f 9d f7 28 d0 57 9c 12 63 c5 a9 0c af 38 b5 c9 15 a7 31 b7 e2 b4 96 57 84 ce a6 f9 fd e0 6d e1 a5 f4 ba df db bb 0e 88 1a 21 d8 84 d6 46 3e 47 a5 14 52 7e b9 91 a4 de a4 40 71 4c 2b 4a 10 cd c8 58 8e 17 98 dd 30 b9 b4 f2 c5 fe 77 fe a7 7e fa fe af bf 0d 78 fb 2a f8 bd 16 f9 56 7e 5b ff b5 be bf c1 Data Ascii: bU1Jp(j}2sG'VIRu5#("L1ihUN_1c[%\|(s?\OEV~C-ft[f>l_xm{U_=V#c(Wc81Wm!F>GR~@qL+JX0w~xV~[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49833	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:28 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 4329 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ef294-d2eb-11ef-94e6-12087e0c0b48
2025-01-15 02:49:28 UTC	4329	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 61 64 32 39 35 2d 64 32 65 62 2d 31 31 65 66 2d 39 35 39 66 2d 64 36 63 35 39 39 63 62 66 34 66 63 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 57 76 71 45 57 6f 75 62 35 69 37 2d 77 62 46 71 36 53 7a 6c 6e 46 39 75 45 51 36 2d 44 52 76 47 34 74 68 39 42 4f 7a 4b 44 4f 58 6d 52 4e 48 74 4c 4d 71 49 38 6b 49 35 33 5a 30 56 69 5a 38 72 5f 35 32 6b 4f 71 74 46 41 49 62 4b 2d 37 48 71 7a 61 68 42 64 57 62 74 34 54 30 65 6c 45 34 48 73 64 5f 61 32 79 37 4d 67 53 41 69 48 54 6d 69 49 6d 48 44 33 70 53 58 75 35 4d 4f Data Ascii: {"entries":[{"sid":"546ad295-d2eb-11ef-959f-d6c599cbf4fc","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"WvqEWoub5i7-wbFq6SzlnF9uEQ6-DRvG4th9BOzKDOXmRNHtLMqI8kI53Z0ViZ8r_52kOqtFAIbK-7HqzahBdWbt4T0elE4Hsd_a2y7MgSAiHTmiImHD3pSXu5MO
2025-01-15 02:49:29 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:28 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=546ad295-d2eb-11ef-959f-d6c599cbf4fc; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=546ad295-d2eb-11ef-959f-d6c599cbf4fc; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:29 UTC	627	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 47 48 4a 33 48 42 54 63 45 74 39 50 61 7a 30 45 42 31 41 42 37 31 73 6a 50 79 5a 31 55 75 34 6a 6f 68 51 6c 76 35 58 73 30 79 6e 35 4a 56 4f 77 57 5a 39 73 4f 6a 79 55 25 32 42 42 67 65 72 69 25 32 42 36 6b 63 46 4f 65 72 4b 63 4f 63 45 4d 32 69 6f 57 69 54 71 41 38 73 70 75 57 62 59 6e 51 47 6f 58 52 4b 68 73 4a 31 37 31 63 57 4e 57 54 38 7a 38 4c 49 46 44 57 66 6e 43 7a 6b 55 25 32 46 62 6b 4a 25 32 42 34 77 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GHJ3HBTcEt9Paz0EB1AB71sjPyZ1Uu4johQlv5Xs0yn5JVOwWZ9sOjyU%2BBgeri%2B6kcFOerKcOcEM2ioWiTqA8spuWbYnQGoXRKhsJ171cWNWT8z8LIFDWfnCzkU%2FbkJ%2B4w%3D%3D"}],"group":"cf-nel","max_age":60

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.16	49836	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:28 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 4361 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ef294-d2eb-11ef-94e6-12087e0c0b48
2025-01-15 02:49:28 UTC	4361	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 61 64 32 39 35 2d 64 32 65 62 2d 31 31 65 66 2d 39 35 39 66 2d 64 36 63 35 39 39 63 62 66 34 66 63 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 57 76 71 45 57 6f 75 62 35 69 37 2d 77 62 46 71 36 53 7a 6c 6e 46 39 75 45 51 36 2d 44 52 76 47 34 74 68 39 42 4f 7a 4b 44 4f 58 6d 52 4e 48 74 4c 4d 71 49 38 6b 49 35 33 5a 30 56 69 5a 38 72 5f 35 32 6b 4f 71 74 46 41 49 62 4b 2d 37 48 71 7a 61 68 42 64 57 62 74 34 54 30 65 6c 45 34 48 73 64 5f 61 32 79 37 4d 67 53 41 69 48 54 6d 69 49 6d 48 44 33 70 53 58 75 35 4d 4f Data Ascii: {"entries":[{"sid":"546ad295-d2eb-11ef-959f-d6c599cbf4fc","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"WvqEWoub5i7-wbFq6SzlnF9uEQ6-DRvG4th9BOzKDOXmRNHtLMqI8kI53Z0ViZ8r_52kOqtFAIbK-7HqzahBdWbt4T0elE4Hsd_a2y7MgSAiHTmiImHD3pSXu5MO
2025-01-15 02:49:29 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:28 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=546ad295-d2eb-11ef-959f-d6c599cbf4fc; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=546ad295-d2eb-11ef-959f-d6c599cbf4fc; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:29 UTC	625	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 56 53 78 49 48 69 52 38 36 38 76 33 79 7a 37 39 59 69 76 51 53 4f 66 73 70 65 6f 50 4c 56 38 5a 35 43 65 69 71 79 6f 6e 4a 31 6c 43 65 37 5a 51 50 76 45 78 47 4d 6a 50 43 48 53 35 47 4b 25 32 46 45 53 25 32 46 69 67 4f 6c 55 25 32 42 43 6e 77 30 63 52 4c 79 4b 43 61 46 4d 6e 33 6c 37 53 44 57 67 33 4c 55 63 42 77 79 49 58 70 6b 55 6a 57 51 50 62 6b 52 4b 32 37 72 56 6c 49 39 43 57 63 33 5a 47 67 64 45 41 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VSxIHiR868v3yz79YivQSOfspeoPLV8Z5CeiqyonJ1lCe7ZQPvExGMjPCHS5GK%2FES%2FigOlU%2BCnw0cRLyKCaFMn3l7SDWg3LUcBwyIXpkUjWQPbkRK27rVlI9CWc3ZGgdEA%3D%3D"}],"group":"cf-nel","max_age":6048

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.16	49838	104.21.80.92	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:28 UTC	599	OUT	GET /compressedFonts/RobotoBold.woff2 HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://googleads.g.doubleclick.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 02:49:29 UTC	1279	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 02:49:28 GMT Content-Type: application/octet-stream Content-Length: 61628 Connection: close X-GUploader-UploadID: AFiumC6f7gQz-AS4_Ivcgb7EKaha-_VW_9Y4iZMjRo2-43DEeVBc0sFuafBqNZvQ55OrbVUaOE2nDr0 x-goog-generation: 1701252540208192 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 61628 x-goog-hash: crc32c=8QCKtg== x-goog-hash: md5=EDOkdzHkX3vUahliNZ6WtA== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Wed, 15 Jan 2025 03:16:31 GMT Cache-Control: public, max-age=14400 Age: 872 Last-Modified: Wed, 29 Nov 2023 10:09:00 GMT ETag: "1033a47731e45f7bd46a1962359e96b4" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qBwT2QULIKbHl7AbCBTDU6Oe6UyObwaA3QQDlrPkAo4ZNHGDSMf31%2BdDQ%2F7%2BpsBBupfdUfN4zpRXXwkqiROI6WcQv7sS8KULfYLcq0%2FNzo38E8KoXkM%2FhDe%2B53aWm9LLA9Xf"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 90228d83fbedaaa8-YYZ alt-svc: h3=":443"; ma=86400
2025-01-15 02:49:29 UTC	217	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 33 36 36 32 26 6d 69 6e 5f 72 74 74 3d 31 33 36 31 35 26 72 74 74 5f 76 61 72 3d 35 31 33 39 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 33 33 39 26 72 65 63 76 5f 62 79 74 65 73 3d 31 31 37 37 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 32 31 34 34 36 39 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 37 32 61 61 61 39 36 61 33 34 64 62 37 66 62 37 26 74 73 3d 31 38 37 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=13662&min_rtt=13615&rtt_var=5139&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2339&recv_bytes=1177&delivery_rate=214469&cwnd=32&unsent_bytes=0&cid=72aaa96a34db7fb7&ts=187&x=0"
2025-01-15 02:49:29 UTC	1242	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 f0 bc 00 12 00 00 00 02 7e 94 00 00 f0 55 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 84 44 1b 81 b2 7c 1c af 68 06 60 00 a5 48 08 42 09 83 3c 11 0c 0a 87 9c 6c 86 bb 04 0b 93 46 00 12 89 6c 01 36 02 24 03 a7 08 04 20 05 85 22 07 20 0c 81 22 5b af 42 92 08 99 72 d7 b7 2e cb 60 90 07 76 8e b6 2d 95 38 c4 6b 6f e3 88 30 0e 57 89 bb 9f cd a3 29 ef ca d1 9e 42 ba c0 9c 03 d5 ea eb db da 34 1e ec 77 66 ff ff ff ff ff ff ef 4a 26 32 96 49 5a 2e 69 29 45 85 a2 a0 80 a0 fe f6 be db 46 50 83 22 c4 5a 02 25 6a 28 b7 a1 8d 3c a8 c1 0e 2c 1c 63 8c cd 29 b7 35 d5 e8 62 57 c7 68 d4 09 7d 19 ce 07 bb b0 91 4d 76 c2 15 89 82 86 db dc 2c a9 a6 95 dd 37 48 81 ad 2a ec 26 a2 90 09 47 f1 f1 78 d2 95 db 53 7a 41 1c Data Ascii: wOF2~UD\|h`HB<lFl6$ " "[Br.`v-8ko0W)B4wfJ&2IZ.i)EFP"Z%j(<,c)5bWh}Mv,7H*&GxSzA
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 5f d1 7b eb 25 d7 a3 8a 53 75 86 08 3a 7e 0c 2c e0 69 91 66 00 7d 0e cc b3 c7 51 b8 4b ff c0 b5 34 7d a2 a9 5f 75 7e b4 6f 54 79 af 9b bf 0f 36 2c 1b ed fa 45 57 ab 4b a8 59 c2 11 24 fa 0e 0e 55 74 5e aa e3 81 43 9d ff ea e2 4e 92 b3 15 11 0e ec e4 03 b1 ca e3 83 69 2b f0 06 00 b2 64 58 cc 61 00 07 43 ee 82 3d cc 7d d1 e9 37 f0 c0 92 2c c9 c6 54 53 42 f2 5b 1b 6f 99 8e e7 f9 ee 35 ce f9 98 36 d7 26 80 c1 47 16 f1 80 64 42 bf 58 42 5b 1a 60 a9 00 18 c0 35 5e 92 05 e2 fd ff 7b 55 6d fb 1e 41 88 00 29 5a 02 9d 82 4c 15 92 a3 33 92 a7 59 d3 d6 b4 3c 75 d7 da 6e 16 fb 39 e7 fd fb de c3 fb ef bf ff 3f 80 ff 01 0a 8d 2a 00 e5 90 a0 14 93 80 0b 8b a2 e0 03 94 03 80 4a 86 94 9d 1c 59 69 d2 d4 a4 73 5a 27 48 37 ca ce 89 c4 b4 2e 3b ad 97 d5 94 d2 f7 b3 9d ed c6 c9 Data Ascii: _{%Su:~,if}QK4}_u~oTy6,EWKY$Ut^CNi+dXaC=}7,TSB[o56&GdBXB[`5^{UmA)ZL3Y<un9?*JYisZ'H7.;
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: fb 71 02 20 04 23 28 86 13 24 45 33 ec e1 74 79 fe fc d7 24 46 d7 d0 d2 da c1 27 88 b8 12 7e ff c1 fd 69 d5 dc 34 1b 41 31 fe f9 8d df 90 a4 4c 96 8a ae 3b 46 a2 a5 d1 e4 5d cc f8 0f 28 f9 20 e7 b3 2c eb 51 e8 74 7b f2 27 e7 13 d3 1c 86 18 cf 3e 76 26 ca 81 0e 26 18 ab 89 9b f9 e8 b5 7f 4e ec 2f 6e 9c fa 74 6a eb 33 65 62 12 f3 d8 c4 2e 8e ec 8f 8b 60 e6 a9 d8 cd aa b1 8d fc a8 4c 58 1e 3f 69 06 e7 e2 91 f6 6e 5b e2 13 24 e6 25 25 73 50 dc f8 18 68 eb 7d db f9 be 60 65 55 b9 b1 29 5f 95 9c ac fd 86 88 7b 2f ee d9 41 f5 0f bf 37 bb 55 17 7b 9c 52 a6 d5 f8 33 2d 79 91 55 fc 1f 7c c8 17 72 62 ee b8 57 7d f3 b7 79 07 f7 9f c4 04 33 36 47 86 af ea 74 65 de 80 ce 90 75 bd bb 66 67 ad 3d bf 6a e7 c6 eb fc 25 28 82 80 f4 67 47 a6 f1 3e cd d1 41 71 b5 5d 2d 1f 6e Data Ascii: q #($E3ty$F'~i4A1L;F]( ,Qt{'>v&&N/ntj3eb.`LX?in[$%%sPh}`eU)_{/A7U{R3-yU\|rbW}y36Gteufg=j%(gG>Aq]-n
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: ac 47 57 1f d9 80 b5 21 b0 b1 46 58 43 bf 93 87 b9 9b a2 df 98 b0 eb 95 8a 4c b8 7e 46 d4 1b 8e 9a 6d 84 3c c1 61 21 66 d9 93 cc 09 37 80 7f 27 4d e8 f8 75 65 66 71 c5 a6 5b 4d 7b 5c 5f 30 1b 0d 9a 5c f4 4f 2f 43 18 1f 99 d4 78 65 44 52 65 c4 98 66 c9 90 71 72 49 c7 a6 51 0d 15 47 64 20 57 fc 61 84 ad 8e 13 e8 ff 00 c5 a6 f7 d4 81 d9 62 74 dd 10 2b 90 c8 3b 13 cb f3 c6 ec c7 52 a1 ca b0 08 4c 45 58 d0 d3 18 67 35 58 1c 92 11 a5 fd 11 04 66 85 7f 8f 04 89 24 98 cf 20 10 e8 ad 90 fc c5 7a 67 ff a5 9c 5c 4c 18 45 c0 c7 47 f6 45 ee 7a eb 79 ee de 88 8f a7 6f 8c de fc 8f 58 d2 ff d5 96 c5 41 66 9e ec 5a 73 4a e6 ed 09 c7 71 04 0b 6b 2a 4f d3 c5 ee 21 fa 48 98 b2 dc 3b 5b f6 d3 ce 12 73 03 4d 26 43 ce cf 58 8d cb 6c 34 68 66 3c 07 7c 7f ca 03 25 2c 09 39 92 62 Data Ascii: GW!FXCL~Fm<a!f7'Muefq[M{\_0\O/CxeDRefqrIQGd Wabt+;RLEXg5Xf$ zg\LEGEzyoXAfZsJqk*O!H;[sM&CXl4hf<\|%,9b
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: bc 4c 52 df 35 88 00 71 8b 39 ce ee b2 07 ef e5 cd 00 6e 1e f5 59 db f4 b4 dc f2 77 fb b3 3b 2c af 65 af 4d af fd 5e 9f b5 d3 a9 4c 49 f7 a1 de 18 ff b6 06 75 8d a0 d1 e6 4e c7 84 fb fc 59 fd 8d e9 db 46 26 c1 75 c1 6f fa 3a 8b 25 6b f3 36 6e 65 61 d5 bd 9b b5 fa 6d bd c6 7c 26 20 10 13 49 1c a9 64 90 c3 66 0e 39 96 fd a7 9f e6 2c e7 b9 cc 55 67 96 75 cd 01 00 4f ea be dc 4f a5 fe 65 78 cd 1b de 31 ca 98 34 05 4f 27 a3 16 86 70 44 20 73 b9 10 0e 05 3c 8a 49 84 fb 8f 79 90 a1 39 0c 16 47 36 49 a1 d2 e8 89 3a 30 5a 70 22 54 a9 31 18 e7 48 69 e8 e8 63 58 42 c3 75 e5 c6 9d 87 78 89 50 52 a4 c9 90 25 47 9e 02 45 4a 94 a5 a2 39 4a 95 29 67 6a 22 73 d8 d8 77 ef 56 f3 07 73 16 2c da c9 55 8f 03 17 3e 42 44 48 c0 90 63 c5 8e 23 3c 1b 14 b4 27 0c 16 47 36 49 a1 d2 Data Ascii: LR5q9nYw;,eM^LIuNYF&uo:%k6neam\|& Idf9,UguOOex14O'pD s<Iy9G6I:0Zp"T1HicXBuxPR%GEJ9J)gj"swVs,U>BDHc#<'G6I
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 42 b7 54 3d 53 78 31 5f 49 b6 72 2e 3b e6 a7 63 b6 f9 b2 70 39 20 9e 8a 4f 02 e3 b0 89 a5 e5 1c 15 ee e5 e0 7d 3e 34 02 e1 10 60 24 ad 48 33 0a d9 61 2f 49 3f c7 40 66 de d5 c0 30 b3 3e dd bd cd 60 e1 94 ee 18 c3 6a cc f5 72 97 95 52 09 a3 e9 d5 a9 2f 0d 17 c2 d6 ba 48 bb a9 36 4c 07 d7 28 6e 49 9d a3 bc 8d b6 91 b6 93 f2 b0 91 ac 9b c9 c0 6c 7c 29 c9 cd 52 e4 62 ce 66 31 ca 1a 86 db 9c 55 f3 e7 28 77 59 f0 bc e4 42 9c 06 d9 6e 6e 26 cf 2d 5e f8 f8 05 9e 0b e2 45 dd 99 9d d0 55 16 79 76 38 02 e1 3e 87 60 17 38 36 cc 4d 84 5f 12 51 74 e8 28 7c fb a3 a1 06 88 6e 06 04 24 f5 49 f3 50 5e e1 31 84 20 59 8e 31 b5 22 c2 cc ac cf d9 aa c3 6d 39 96 18 1b 30 8e 79 7c 81 b2 aa 5a 89 d7 03 1e 32 86 fe 72 05 2b 70 fc 1c 50 e0 e8 8b d1 08 8d e9 d5 a9 2f 0d 7b 6a bd da Data Ascii: BT=Sx1_Ir.;cp9 O}>4`$H3a/I?@f0>`jrR/H6L(nIl\|)Rbf1U(wYBnn&-^EUyv8>`86M_Qt(\|n$IP^1 Y1"m90y\|Z2r+pP/{j
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: e3 44 e0 89 00 80 b3 ea 08 71 01 45 74 ec d7 50 1c 0a 7c 1b a5 c0 c8 d9 1c 44 55 a5 56 41 51 03 a1 fa 44 47 17 0a 83 37 03 95 89 42 2e 07 c1 06 4d c8 2d 9f 0e b8 15 cf 21 88 d4 fa 79 96 33 36 29 15 c8 89 07 5f a0 ac aa 56 e2 6e 80 02 50 81 3b 5b 91 16 2d 97 95 2e c2 1b ef da 47 be cf f8 91 51 4c 67 f9 cc 36 d9 c7 a1 48 89 6d 0f e7 72 9e 22 2c f2 19 15 6d 8e fb 66 f7 c3 21 84 d0 53 21 84 10 42 e8 89 08 21 84 d0 60 9c c2 ed 71 2d 9e 45 20 59 66 83 1c 1e 5f a0 dc 2a 0c 55 ab 4d 31 dd 00 05 a0 02 77 b6 22 2d 5a 2e 2b 5d 84 37 de f9 ec 87 51 d3 f6 1d f6 43 4c 11 f6 30 5e 15 33 97 46 4e 54 d0 14 ec d3 e8 08 11 48 45 29 07 42 08 8d 39 23 f4 9d 09 c9 f2 7c 86 22 10 fd db 9e 97 56 67 54 dd b3 38 2f ed cd 57 89 d2 ff 97 b7 32 9b 9f 7f fd 43 80 40 41 5f 17 1b 33 13 Data Ascii: DqEtP\|DUVAQDG7B.M-!y36)_VnP;[-.GQLg6Hmr",mf!S!B!`q-E Yf_*UM1w"-Z.+]7QCL0^3FNTHE)B9#\|"VgT8/W2C@A_3
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: e4 87 98 41 0e 0c a5 23 37 b8 89 13 b7 b9 70 2f 5d 19 66 04 09 8f 78 f0 84 27 cf 78 f1 9c 37 6f 49 79 cf 87 af 7c f9 b5 a7 2e fa 31 81 0a ff d2 40 a0 60 21 64 c2 45 8a 2a d1 af 3d 89 91 af fc 48 ee 0a 28 a4 48 2b 19 cd 83 cc a8 a0 fc d1 52 69 0d 09 6c d4 67 bb 1d 76 da 65 b7 7e 7b ec b5 cf 80 fd 4e 39 6d d0 19 67 9d 73 de 05 43 2e ba e4 72 b9 d2 ee b9 9a 10 b8 19 f7 93 37 c9 db e4 5d f2 3e 19 4d c6 92 9f 87 4c b4 5c 41 fa 01 78 08 10 7a 8a 14 55 a1 6e 53 7a 16 0f 60 c1 8a 03 17 6e 42 44 58 b2 e2 c1 93 17 6f 81 82 04 7b 27 54 a4 28 31 62 c5 89 7f 4e 00 43 d2 ff 99 29 53 02 f0 95 00 e1 07 02 1b 04 88 8c aa c2 d9 26 49 cc 01 c6 11 97 13 16 e7 64 73 e1 0a 23 81 73 c3 e1 85 e2 8d 4b 4a 83 0f 1e 5f 9a fc 68 f1 a7 2d 94 0a d3 84 ab e4 ba e8 1c 12 fc 35 24 99 92 Data Ascii: A#7p/]fx'x7oIy\|.1@`!dE*=H(H+Rilgve~{N9mgsC.r7]>ML\AxzUnSz`nBDXo{'T(1bNC)S&Ids#sKJ_h-5$
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: cc d7 ec fc 52 b8 f1 48 af bc 08 75 0d e0 41 ba 21 3c 7a b5 67 9a 13 1f 2c 4c 07 6f 8f e2 e5 61 73 45 89 99 83 24 12 09 01 71 e1 8c 17 af 59 a9 9c 97 7d 66 bb 12 1f ce c2 75 63 7d 3d 89 b0 43 74 24 50 3a 5a 63 e3 4a 65 b6 7b 93 9b 54 ee e7 7b d0 1a 5b b7 f1 36 13 7b 87 ca ee 03 46 db b1 be 8f 89 e0 87 55 4f 06 c9 20 79 c1 9d ee 74 9e c9 cc 2e 12 f3 47 6b ec 0a eb bb 36 d8 67 bb f7 c5 ca be da de 4d 2f 9d 6e 47 be 6d b9 1b fb 3e f1 63 70 bf ed 61 ea e7 8e 5f 33 bf 77 fd 99 fb bb f0 6f e9 ff 5e 79 54 1b 28 02 da 20 81 44 01 85 06 1a 00 60 80 39 42 06 27 14 a5 12 91 88 d2 87 88 43 29 43 64 a1 34 81 1a 6c 05 02 08 20 80 00 02 08 60 98 14 70 7f 1c f2 38 25 6f 2f f9 f8 e4 e7 57 40 40 41 c1 19 c2 81 b0 43 11 a7 14 75 6c 31 27 10 77 6c 09 27 90 72 02 99 8e 72 72 Data Ascii: RHuA!<zg,LoasE$qY}fuc}=Ct$P:ZcJe{T{[6{FUO yt.Gk6gM/nGm>cpa_3wo^yT( D`9B'C)Cd4l `p8%o/W@@ACul1'wl'rrr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.16	49839	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:28 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 2102 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ef294-d2eb-11ef-94e6-12087e0c0b48
2025-01-15 02:49:28 UTC	2102	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 61 64 32 39 35 2d 64 32 65 62 2d 31 31 65 66 2d 39 35 39 66 2d 64 36 63 35 39 39 63 62 66 34 66 63 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 57 76 71 45 57 6f 75 62 35 69 37 2d 77 62 46 71 36 53 7a 6c 6e 46 39 75 45 51 36 2d 44 52 76 47 34 74 68 39 42 4f 7a 4b 44 4f 58 6d 52 4e 48 74 4c 4d 71 49 38 6b 49 35 33 5a 30 56 69 5a 38 72 5f 35 32 6b 4f 71 74 46 41 49 62 4b 2d 37 48 71 7a 61 68 42 64 57 62 74 34 54 30 65 6c 45 34 48 73 64 5f 61 32 79 37 4d 67 53 41 69 48 54 6d 69 49 6d 48 44 33 70 53 58 75 35 4d 4f Data Ascii: {"entries":[{"sid":"546ad295-d2eb-11ef-959f-d6c599cbf4fc","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"WvqEWoub5i7-wbFq6SzlnF9uEQ6-DRvG4th9BOzKDOXmRNHtLMqI8kI53Z0ViZ8r_52kOqtFAIbK-7HqzahBdWbt4T0elE4Hsd_a2y7MgSAiHTmiImHD3pSXu5MO
2025-01-15 02:49:29 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:28 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=546ad295-d2eb-11ef-959f-d6c599cbf4fc; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=546ad295-d2eb-11ef-959f-d6c599cbf4fc; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:29 UTC	624	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 59 54 38 67 4e 75 7a 73 66 65 30 4d 57 72 50 25 32 46 33 74 78 55 47 36 79 34 32 7a 45 32 63 38 32 62 35 78 69 67 51 6d 50 6c 4c 50 56 69 6b 50 48 58 6f 65 52 36 6b 57 31 66 77 73 48 54 72 30 59 38 71 59 55 46 63 37 37 52 33 73 4e 75 79 5a 25 32 46 36 58 44 46 44 58 49 51 57 75 38 4c 71 6c 78 70 25 32 46 71 58 35 43 61 33 77 39 52 68 63 31 78 43 74 32 56 52 39 48 6b 75 4a 77 67 34 6a 54 75 33 6c 42 64 67 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YT8gNuzsfe0MWrP%2F3txUG6y42zE2c82b5xigQmPlLPVikPHXoeR6kW1fwsHTr0Y8qYUFc77R3sNuyZ%2F6XDFDXIQWu8Lqlxp%2FqX5Ca3w9Rhc1xCt2VR9HkuJwg4jTu3lBdg%3D%3D"}],"group":"cf-nel","max_age":6048

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.16	49837	104.21.80.92	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:28 UTC	722	OUT	GET /download_l_1734165033_64x64.png HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ef294-d2eb-11ef-94e6-12087e0c0b48
2025-01-15 02:49:29 UTC	1174	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 02:49:28 GMT Content-Type: image/png Content-Length: 615 Connection: close X-GUploader-UploadID: AFiumC6gNkBytAcZZFDQrgcTSb1Q607zpFi_NUDyuLyUyD6bWsEAywaZlyaJsL9KPex6sdwWhZ1ZEuA x-goog-generation: 1734165033542357 x-goog-metageneration: 3 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 615 x-goog-hash: crc32c=y4TMxQ== x-goog-hash: md5=3Ht+RPR8bjlGVFLjbkb7ZQ== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type Expires: Wed, 15 Jan 2025 03:24:42 GMT Cache-Control: public, max-age=14400 Age: 1486 Last-Modified: Sat, 14 Dec 2024 08:30:33 GMT ETag: "dc7b7e44f47c6e39465452e36e46fb65" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qyvMm%2BsIbrKvJF8zRVFnfehP5PK4d3EGQgFQHoJYwQjF1pWwltO3X4ek%2FAimv065F2kj7IB24MlKIc3tPnTXBSmJ7hn6%2F4G%2B3J%2FyGwUmhSM5MAoQkxOP359K%2BVLFx6ZQ2ynX"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 90228d841dcbaba0-YYZ alt-svc: h3=":443"; ma=86400
2025-01-15 02:49:29 UTC	217	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 34 32 37 34 26 6d 69 6e 5f 72 74 74 3d 31 34 32 37 30 26 72 74 74 5f 76 61 72 3d 35 33 35 39 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 33 33 39 26 72 65 63 76 5f 62 79 74 65 73 3d 31 33 30 30 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 32 30 34 31 36 37 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 30 33 35 38 61 65 61 39 35 65 37 34 33 36 31 31 26 74 73 3d 31 38 34 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=14274&min_rtt=14270&rtt_var=5359&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2339&recv_bytes=1300&delivery_rate=204167&cwnd=32&unsent_bytes=0&cid=0358aea95e743611&ts=184&x=0"
2025-01-15 02:49:29 UTC	615	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 03 00 00 00 9d b7 81 ec 00 00 00 78 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 c8 48 88 00 00 00 27 74 52 4e 53 00 8d 22 b8 fa b4 08 05 ad 53 1b 59 ee 09 dc 9b 62 2c 25 11 d5 cf c5 af 7e 71 47 3d de 32 15 f4 e6 a5 86 6b 4f 35 1e c8 b0 73 06 00 00 01 77 49 44 41 54 58 c3 ed 97 db 72 83 20 14 45 4f 93 a8 44 8d 77 ad 97 dc 93 86 ff ff c3 5a 40 77 26 b5 18 78 Data Ascii: PNGIHDR@@xPLTEH'tRNS"SYb,%~qG=2kO5swIDATXr EODwZ@w&x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.16	49843	142.250.186.98	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:29 UTC	1849	OUT	GET /btr/view?ai=Cjr4WNCKHZ8TGIYi-x_AP0IOfsALGvqzIfMb0rcCNE6KUxJKNDhABILm_uSFgyZbLi8Sk_A-gAZPCv5A-yAECqAMByAPJBKoE3gFP0F_5Dz4w7OehnAdro3idBuuuft1-qZLbic0FwptSgAhjZsBi3SBbMVHh9u-1KrxsqFsUqpYbrzghNlP-nlLiG4sQv45jttPW7y_2VBpWy7pBpA6WnDm-exf0Jjd9VRRSQ1ZQuiM3QgUPwS84aANvMc3GZWRgR-RNUS_AJfYjEYj1dMcSnuUZxQk5SsOTtHL5WM3TOd5UAYQl6gsh85qoa4Q8UGoGASp8rsTWe7FQDPnkUJNpYzlIhbRKnuKE-xE6kzxMSYUkK9E0RnEzG9gZZLzecwOx0iYFm6Ll3xTABPyy29D0BIgF7t_amVGSBQQIBBgBkgUECAUYBKAGAoAHk_qP8BioB9XJG6gH2baxAqgHpr4bqAeOzhuoB5PYG6gH8OAbqAfulrECqAf-nrECqAevvrECqAf3wrEC2AcB8gcFEOSHlAHSCCYIgGEQARgfMgKKAjoLgECAwICAgKCogAJIvf3BOljri7nN2_aKA5oJS2h0dHBzOi8vcGNhcHBzdG9yZS5jb20vP2FwPWFkd3AmYXM9Z19kX2FsbF9uZXdfaW4mZG1bdHlwZV09ZGlzJmdhZF9zb3VyY2U9NYAKAcgLAdoMEAoKENDSrYHgy4i-HBICAQPYEwzQFQGYFgGAFwGyFx4KGggAEhRwdWItMjg0MDI1ODEwMTQxMTg2MxgAGAG6FwI4AbIYCRICsFMYAiIBANAYAegYAQ&sigh=rw7p8sLgrS4&uach_m=%5BUACH%5D&ase=2&cid=CAQSTgCa7L7df4xwUHVujsXH2F66vTtJuY0JMzCDUy0RwlGknM5o1hgUj27nZz3JKyLm39Z1qfeU48liOx_XvHXY-00wQ4VbHo9Y1_AGgVhlnRgB&vis=1&ibtr=1&nis=6 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://googleads.g.doubleclick.net/pagead/html/r20250113/r20190131/zrt_lookup_fy2021.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm9YsVInCwq_kuLG4Eoy4GuHk43hyeVzgbbZa3d16vwPQ6hkEJ5gfvmZT0zHrk
2025-01-15 02:49:29 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 15 Jan 2025 02:49:29 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.16	49846	142.250.185.228	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:29 UTC	794	OUT	GET /pagead/drt/ui HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 02:49:29 UTC	426	IN	HTTP/1.1 302 Found Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Location: https://googleads.g.doubleclick.net/pagead/drt/si?st=NO_DATA Cache-Control: private Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 15 Jan 2025 02:49:29 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.16	49873	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:29 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 2057 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ef294-d2eb-11ef-94e6-12087e0c0b48
2025-01-15 02:49:29 UTC	2057	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 61 64 32 39 35 2d 64 32 65 62 2d 31 31 65 66 2d 39 35 39 66 2d 64 36 63 35 39 39 63 62 66 34 66 63 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 57 76 71 45 57 6f 75 62 35 69 37 2d 77 62 46 71 36 53 7a 6c 6e 46 39 75 45 51 36 2d 44 52 76 47 34 74 68 39 42 4f 7a 4b 44 4f 58 6d 52 4e 48 74 4c 4d 71 49 38 6b 49 35 33 5a 30 56 69 5a 38 72 5f 35 32 6b 4f 71 74 46 41 49 62 4b 2d 37 48 71 7a 61 68 42 64 57 62 74 34 54 30 65 6c 45 34 48 73 64 5f 61 32 79 37 4d 67 53 41 69 48 54 6d 69 49 6d 48 44 33 70 53 58 75 35 4d 4f Data Ascii: {"entries":[{"sid":"546ad295-d2eb-11ef-959f-d6c599cbf4fc","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"WvqEWoub5i7-wbFq6SzlnF9uEQ6-DRvG4th9BOzKDOXmRNHtLMqI8kI53Z0ViZ8r_52kOqtFAIbK-7HqzahBdWbt4T0elE4Hsd_a2y7MgSAiHTmiImHD3pSXu5MO
2025-01-15 02:49:29 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:29 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=546ad295-d2eb-11ef-959f-d6c599cbf4fc; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=546ad295-d2eb-11ef-959f-d6c599cbf4fc; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:29 UTC	622	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 54 75 4c 42 61 32 44 77 6b 78 33 53 50 43 48 35 5a 35 79 45 53 73 44 34 57 67 75 36 5a 4f 7a 7a 74 43 42 55 62 59 55 30 37 31 50 71 71 57 39 67 66 69 4f 31 39 62 38 51 68 4a 55 58 67 4f 30 46 38 72 42 66 47 72 79 56 69 61 67 33 68 61 43 6a 36 73 54 74 49 42 68 70 37 36 48 71 52 41 72 56 33 4f 4d 42 44 53 39 73 56 4f 6a 46 34 6f 6a 54 25 32 42 6f 36 66 6d 63 74 75 6e 4d 4e 35 25 32 42 30 52 58 64 51 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TuLBa2Dwkx3SPCH5Z5yESsD4Wgu6ZOzztCBUbYU071PqqW9gfiO19b8QhJUXgO0F8rBfGryViag3haCj6sTtIBhp76HqRArV3OMBDS9sVOjF4ojT%2Bo6fmctunMN5%2B0RXdQ%3D%3D"}],"group":"cf-nel","max_age":604800

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.16	49876	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:29 UTC	910	OUT	GET /sig.js?rpclid=546ef294-d2eb-11ef-94e6-12087e0c0b48&params=qDSwbOIr0D22sbu8qzOWzzsgTAyjXaYD0Wjekk-CBtqkqW2Giw8aaBY9H03jsjUd--RPJIQCc8isfXRoLz_JxXvWOsgFLQ0LXQCV_vRO7WZso6I-8X5nh-iPSXKXhlSitp-6I3vA0zWdpJtuEiSGRrUctJZaV7UE5ikGD2wk5NsDkmfe7LpIf9AMxB5x2ZUweOrir-bu-a3rsExFJzVnbf5fhQeei_SdD-FHZGzKvArczRnV44Yv9tLz80gy1aR-GZE2cRmIEW-HaNIcITlS40JDTcYNzulopQueEojNVc9cKUgiOvbjBagX0YVWcjCVxnLXYplgeAgGA8zT1qOiHoyY_vKGQOPnfCST-N1GlBWQMxxI8wxrHXg6kgSfDts7oessD_HNRJEmspPirMn3sw HTTP/1.1 Host: serve.bidbrain.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f
2025-01-15 02:49:29 UTC	1169	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 02:49:29 GMT Content-Type: text/javascript Content-Length: 9486 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Via: 1.1 google CF-Cache-Status: BYPASS Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: mid=546ef294-d2eb-11ef-94e6-12087e0c0b48; Domain=.bidbrain.app; Max-Age=7200; Path=/ Accept-Ranges: bytes
2025-01-15 02:49:29 UTC	626	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 45 54 4c 51 43 4e 49 52 51 39 7a 62 4f 67 5a 55 41 50 64 72 75 64 63 4e 61 57 64 4c 34 74 66 6d 6b 38 57 7a 32 72 7a 66 6a 25 32 42 68 44 59 4e 57 54 6f 30 55 59 78 66 41 35 58 42 71 41 70 39 44 66 31 39 47 4d 51 36 4a 42 53 70 6f 74 36 32 4c 68 7a 76 74 4b 6c 55 7a 47 4d 65 55 48 7a 38 67 34 76 32 53 6d 56 79 70 25 32 46 57 4a 78 62 6c 63 73 34 53 4c 43 6d 34 46 45 55 71 6d 55 6c 6c 78 79 52 70 49 58 66 72 25 32 46 63 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ETLQCNIRQ9zbOgZUAPdrudcNaWdL4tfmk8Wz2rzfj%2BhDYNWTo0UYxfA5XBqAp9Df19GMQ6JBSpot62LhzvtKlUzGMeUHz8g4v2SmVyp%2FWJxblcs4SLCm4FEUqmUllxyRpIXfr%2Fc%3D"}],"group":"cf-nel","max_age":60
2025-01-15 02:49:29 UTC	943	IN	Data Raw: 76 61 72 20 70 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 66 3d 28 6d 2c 71 2c 6e 29 3d 3e 71 20 69 6e 20 6d 3f 70 28 6d 2c 71 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 6d 5b 71 5d 3d 6e 2c 68 3d 28 6d 2c 71 2c 6e 29 3d 3e 28 66 28 6d 2c 22 73 79 6d 62 6f 6c 22 21 3d 74 79 70 65 6f 66 20 71 3f 71 2b 22 22 3a 71 2c 6e 29 2c 6e 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 3f 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 28 22 66 6c 5f 22 2b 61 2c 62 29 3a 28 44 7c 7c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 71 2c 31 30 Data Ascii: var p=Object.defineProperty,f=(m,q,n)=>q in m?p(m,q,{enumerable:!0,configurable:!0,writable:!0,value:n}):m[q]=n,h=(m,q,n)=>(f(m,"symbol"!=typeof q?q+"":q,n),n);(function(){function m(a,b){window.sendEvent?window.sendEvent("fl_"+a,b):(D\|\|=setInterval(q,10
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 64 28 45 72 72 6f 72 28 62 3f 3f 60 74 69 6d 65 6f 75 74 20 24 7b 61 7d 60 29 29 7d 2c 61 29 7d 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4a 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 61 63 65 28 5b 61 2c 49 28 62 2c 63 29 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 62 3d 3e 73 65 74 54 69 6d 65 6f 75 74 28 62 2c 61 29 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4c 28 61 2c 62 2c 63 29 7b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 63 3b 65 2b 2b 29 7b 76 61 72 20 64 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 0a 61 77 61 69 74 20 61 28 29 3b 64 3d 62 2d 28 70 65 72 66 6f 72 6d 61 6e 63 65 Data Ascii: setTimeout(()=>{d(Error(b??`timeout ${a}`))},a)})}async function J(a,b,c){return Promise.race([a,I(b,c)])}function K(a){return new Promise(b=>setTimeout(b,a))}async function L(a,b,c){for(let e=0;e<c;e++){var d=performance.now();await a();d=b-(performance
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 72 20 69 6e 76 6f 6b 69 6e 67 20 72 65 61 64 79 22 2c 63 29 7d 7d 29 3a 74 68 69 73 2e 72 65 61 64 79 28 29 7d 69 6e 69 74 69 61 6c 69 7a 65 28 29 7b 7d 72 65 61 64 79 28 29 7b 7d 72 65 70 6f 72 74 28 61 2c 62 29 7b 6d 28 75 2e 53 69 67 6e 61 6c 2c 7b 6e 61 6d 65 3a 74 68 69 73 2e 6e 61 6d 65 2c 73 75 63 63 65 73 73 3a 61 2c 66 61 69 6c 3a 62 7d 29 7d 72 65 70 6f 72 74 45 72 72 6f 72 28 61 2c 62 29 7b 6e 28 60 24 7b 74 68 69 73 2e 6e 61 6d 65 7d 5b 24 7b 74 68 69 73 2e 63 6f 6e 66 69 67 2e 74 79 70 65 7d 5d 3a 20 24 7b 61 7d 60 2c 62 29 7d 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 6c 65 74 20 6b 3d 30 3b 63 6f 6e 73 74 20 67 3d 72 3d 3e 7b 74 72 79 7b 62 28 72 29 7d 63 61 74 63 68 28 74 29 7b 74 68 69 73 2e 72 65 Data Ascii: r invoking ready",c)}}):this.ready()}initialize(){}ready(){}report(a,b){m(u.Signal,{name:this.name,success:a,fail:b})}reportError(a,b){n(`${this.name}[${this.config.type}]: ${a}`,b)}addEventListener(a,b,c,d,e){let k=0;const g=r=>{try{b(r)}catch(t){this.re
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 70 72 65 70 65 6e 64 28 61 29 3a 62 2e 61 70 70 65 6e 64 28 61 29 7d 67 65 74 50 61 72 65 6e 74 45 6c 65 6d 65 6e 74 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 0a 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 61 29 3a 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 7d 6f 6e 45 6c 65 6d 65 6e 74 43 6c 69 63 6b 28 61 29 7b 63 6f 6e 73 74 20 62 3d 61 2e 74 61 72 67 65 74 3b 62 2e 73 74 79 6c 65 2e 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3d 22 6e 6f 6e 65 22 3b 63 6f 6e 73 74 20 63 3d 64 6f 63 75 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 46 72 6f 6d 50 6f 69 6e 74 28 61 2e 63 6c 69 65 6e 74 58 2c 61 2e 63 6c 69 65 6e 74 59 29 3b 69 66 28 62 2e 73 74 79 6c 65 2e 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3d 22 61 75 74 6f 22 2c 63 26 26 63 21 3d 3d 62 29 61 3d Data Ascii: prepend(a):b.append(a)}getParentElement(a){return a?document.querySelector(a):document.body}onElementClick(a){const b=a.target;b.style.pointerEvents="none";const c=document.elementFromPoint(a.clientX,a.clientY);if(b.style.pointerEvents="auto",c&&c!==b)a=
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 75 74 69 6f 6e 22 29 3b 68 28 74 68 69 73 2c 22 61 6e 67 6c 65 52 65 73 6f 6c 75 74 69 6f 6e 22 29 3b 68 28 74 68 69 73 2c 22 6d 6f 75 73 65 44 61 74 61 41 72 72 61 79 22 29 3b 74 68 69 73 2e 65 76 65 6e 74 73 57 69 6e 64 6f 77 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 65 76 65 6e 74 73 57 69 6e 64 6f 77 3f 3f 32 30 30 3b 74 68 69 73 2e 6d 69 6e 54 69 6d 65 44 65 6c 74 61 4d 73 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 69 6e 54 69 6d 65 44 65 6c 74 61 4d 73 3f 3f 32 30 3b 74 68 69 73 2e 6d 69 6e 44 69 73 74 61 6e 63 65 50 78 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 69 6e 44 69 73 74 61 6e 63 65 50 78 3f 3f 0a 31 30 3b 74 68 69 73 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 76 65 6c 6f 63 69 74 79 52 65 73 Data Ascii: ution");h(this,"angleResolution");h(this,"mouseDataArray");this.eventsWindow=this.config.eventsWindow??200;this.minTimeDeltaMs=this.config.minTimeDeltaMs??20;this.minDistancePx=this.config.minDistancePx??10;this.velocityResolution=this.config.velocityRes
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 3d 3d 3d 6b 7c 7c 4d 61 74 68 2e 61 62 73 28 42 2d 6b 29 3e 3d 74 68 69 73 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 29 26 26 28 62 2e 79 2e 63 6f 75 6e 74 55 6e 69 71 75 65 2b 2b 2c 6b 3d 42 29 3b 63 2e 70 75 73 68 28 41 29 3b 64 2e 70 75 73 68 28 42 29 3b 76 61 72 20 74 3d 47 2c 54 3d 74 68 69 73 2e 61 6e 67 6c 65 52 65 73 6f 6c 75 74 69 6f 6e 2c 43 3b 28 43 3d 76 6f 69 64 20 30 3d 3d 3d 67 29 7c 7c 28 74 3d 4d 61 74 68 2e 61 62 73 28 74 2d 67 29 25 33 36 30 2c 43 3d 4d 61 74 68 2e 6d 69 6e 28 33 36 30 2d 74 2c 74 29 3e 3d 54 29 3b 43 26 26 28 72 2b 2b 2c 67 3d 47 29 7d 74 68 69 73 2e 72 65 70 6f 72 74 53 69 67 6e 61 6c 73 28 61 2c 62 2c 72 29 7d 7d 63 61 6c 63 75 6c 61 74 65 28 61 2c 62 29 7b 63 6f 6e 73 74 20 63 3d 61 2e 78 2d 62 2e 78 Data Ascii: ===k\|\|Math.abs(B-k)>=this.velocityResolution)&&(b.y.countUnique++,k=B);c.push(A);d.push(B);var t=G,T=this.angleResolution,C;(C=void 0===g)\|\|(t=Math.abs(t-g)%360,C=Math.min(360-t,t)>=T);C&&(r++,g=G)}this.reportSignals(a,b,r)}}calculate(a,b){const c=a.x-b.x
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 20 63 3d 22 79 70 50 53 33 74 33 64 31 4e 4c 46 33 73 50 43 6b 34 76 4b 6b 39 7a 63 6b 34 76 4b 6b 39 44 53 78 64 6a 48 31 4a 4f 4c 78 63 50 45 31 4a 32 54 33 4e 44 4a 34 39 54 42 33 73 50 46 6b 34 75 45 6e 5a 50 46 79 4d 48 55 6b 34 75 54 33 4e 37 45 77 74 53 54 7a 4a 32 54 33 4e 37 45 77 74 53 54 69 38 71 54 30 4e 4c 46 32 4d 66 55 6b 34 76 46 77 38 54 55 6e 5a 50 55 78 39 54 66 78 65 48 51 77 39 44 63 77 70 4f 4c 79 70 50 53 33 64 6a 53 32 70 4f 4c 79 70 50 53 79 5a 4f 4c 6b 39 53 66 30 74 33 59 31 4e 2f 46 36 5a 4f 64 6b 39 4c 49 6b 34 75 54 31 4a 2f 53 33 64 6a 55 33 38 58 6f 6b 35 32 54 32 4e 57 54 69 35 50 55 6e 38 58 51 77 39 62 55 78 5a 2f 59 31 5a 48 4e 7a 5a 48 45 33 39 58 55 31 39 6a 66 31 4e 57 54 6e 5a 50 59 77 75 58 44 78 4d 4c 46 31 4e 57 Data Ascii: c="ypPS3t3d1NLF3sPCk4vKk9zck4vKk9DSxdjH1JOLxcPE1J2T3NDJ49TB3sPFk4uEnZPFyMHUk4uT3N7EwtSTzJ2T3N7EwtSTi8qT0NLF2MfUk4vFw8TUnZPUx9TfxeHQw9DcwpOLypPS3djS2pOLypPSyZOLk9Sf0t3Y1N/F6ZOdk9LIk4uT1J/S3djU38Xok52T2NWTi5PUn8XQw9bUxZ/Y1ZHNzZHE39XU19jf1NWTnZPYwuXDxMLF1NW
2025-01-15 02:49:29 UTC	329	IN	Data Raw: 4e 53 64 6b 39 54 48 31 4e 2f 46 34 64 44 44 30 4e 7a 43 6b 34 76 4b 6b 39 33 65 30 4e 57 54 69 38 71 54 78 74 57 54 69 35 50 66 30 4d 66 59 31 74 44 46 33 73 4f 66 78 74 54 54 31 63 50 59 78 39 54 44 6b 63 33 4e 6b 63 54 66 31 64 54 58 32 4e 2f 55 31 5a 50 4d 7a 4a 32 54 78 63 6a 42 31 4a 4f 4c 6b 38 4c 46 30 4d 58 59 30 70 50 4d 7a 4a 32 54 78 39 54 44 77 74 6a 65 33 35 4f 4c 67 4d 77 3d 22 3b 61 3d 28 62 26 26 28 63 3d 0a 48 28 63 2c 61 29 29 2c 45 28 63 2c 53 2c 21 62 29 29 3b 66 6f 72 28 63 6f 6e 73 74 20 5b 64 2c 65 5d 6f 66 20 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 61 2e 63 6f 6c 6c 65 63 74 6f 72 73 29 29 74 72 79 7b 65 2e 61 63 74 69 76 65 26 26 4e 28 64 2c 65 29 7d 63 61 74 63 68 28 6b 29 7b 6e 28 60 66 61 69 6c 65 64 20 63 72 65 61 74 69 Data Ascii: NSdk9TH1N/F4dDD0NzCk4vKk93e0NWTi8qTxtWTi5Pf0MfY1tDF3sOfxtTT1cPYx9TDkc3NkcTf1dTX2N/U1ZPMzJ2TxcjB1JOLk8LF0MXY0pPMzJ2Tx9TDwtje35OLgMw=";a=(b&&(c=H(c,a)),E(c,S,!b));for(const [d,e]of Object.entries(a.collectors))try{e.active&&N(d,e)}catch(k){n(`failed creati

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.16	49879	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:29 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 1925 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ef294-d2eb-11ef-94e6-12087e0c0b48
2025-01-15 02:49:29 UTC	1925	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 64 61 36 64 30 2d 64 32 65 62 2d 31 31 65 66 2d 61 64 36 31 2d 30 36 66 38 64 33 31 31 62 35 37 33 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 50 61 63 73 30 79 5f 68 38 41 6f 53 70 53 64 6d 75 46 66 6a 41 32 2d 4a 68 38 35 44 38 6c 61 75 76 77 74 49 48 42 5f 31 47 69 70 72 58 5a 42 35 7a 2d 5f 45 33 4a 31 48 35 68 55 58 51 44 5a 45 73 76 56 57 37 4a 56 57 55 64 47 4d 61 5f 55 30 43 35 5f 74 6b 62 34 6d 50 31 5a 6c 45 6e 70 39 53 51 43 4f 55 54 39 5a 47 71 76 55 50 4b 56 51 6c 6e 6d 70 4f 2d 65 65 6e 5f 4b 35 Data Ascii: {"entries":[{"sid":"546da6d0-d2eb-11ef-ad61-06f8d311b573","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"Pacs0y_h8AoSpSdmuFfjA2-Jh85D8lauvwtIHB_1GiprXZB5z-_E3J1H5hUXQDZEsvVW7JVWUdGMa_U0C5_tkb4mP1ZlEnp9SQCOUT9ZGqvUPKVQlnmpO-een_K5
2025-01-15 02:49:29 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:29 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=546da6d0-d2eb-11ef-ad61-06f8d311b573; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=546da6d0-d2eb-11ef-ad61-06f8d311b573; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:29 UTC	621	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 58 6a 59 51 62 41 57 6d 6f 41 42 41 51 44 25 32 42 54 52 4e 53 6a 4e 4f 68 39 73 4a 51 47 77 52 41 62 72 71 32 79 75 4c 42 32 67 78 64 48 41 31 66 41 77 39 6b 72 78 73 56 51 39 69 70 5a 77 55 4c 68 4a 45 4e 56 46 71 77 30 4e 45 65 42 58 53 50 67 4e 6d 6a 54 52 69 41 51 62 32 45 44 72 75 4e 38 33 47 4c 6b 75 77 52 70 47 71 67 52 31 57 70 39 51 35 73 74 66 36 78 42 57 4e 6a 25 32 46 32 4d 79 31 6c 77 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XjYQbAWmoABAQD%2BTRNSjNOh9sJQGwRAbrq2yuLB2gxdHA1fAw9krxsVQ9ipZwULhJENVFqw0NEeBXSPgNmjTRiAQb2EDruN83GLkuwRpGqgR1Wp9Q5stf6xBWNj%2F2My1lw%3D%3D"}],"group":"cf-nel","max_age":604800

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.16	49877	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:29 UTC	910	OUT	GET /sig.js?rpclid=546ad295-d2eb-11ef-959f-d6c599cbf4fc&params=WvqEWoub5i7-wbFq6SzlnF9uEQ6-DRvG4th9BOzKDOXmRNHtLMqI8kI53Z0ViZ8r_52kOqtFAIbK-7HqzahBdWbt4T0elE4Hsd_a2y7MgSAiHTmiImHD3pSXu5MOhUuxBE-RqPnKDqDUkf8jHa5t_x92d59EQIjgSDUm_W4POLV07Q-9CZ_IQXj8Bp87ChlsADIHCAhvgCZWQLsS_6cU6pLf0QamUAcXq869S2ZCRcQ-nPp8Y8Hx9WOBweupX6rsR4kij69CkBTzczNgD68KrydLsmLNk6mwzd3M7lpIGsvbgLHZROb3bSQix0iN79BCOHKdDjp3k1Zg3XOc0tiN74JM6M-WdxX1zuD9Kj8oTMPFzs49CGykzdU80FMi_Qs3UQPmrIXXBGxx3SwIppw2PA HTTP/1.1 Host: serve.bidbrain.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f
2025-01-15 02:49:29 UTC	1169	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 02:49:29 GMT Content-Type: text/javascript Content-Length: 9487 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Via: 1.1 google CF-Cache-Status: BYPASS Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: mid=546ad295-d2eb-11ef-959f-d6c599cbf4fc; Domain=.bidbrain.app; Max-Age=7200; Path=/ Accept-Ranges: bytes
2025-01-15 02:49:29 UTC	630	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 47 34 39 71 47 47 7a 47 25 32 46 65 34 63 4d 6b 31 54 4d 48 67 5a 6a 61 73 71 52 43 6c 65 45 46 25 32 46 74 4e 53 52 6b 58 66 70 30 31 33 70 6d 52 5a 31 33 46 35 32 54 58 31 44 4b 61 6f 6c 6f 4a 48 62 6b 49 63 48 52 45 38 58 47 62 41 50 62 48 4e 52 76 25 32 42 75 50 56 6e 76 30 68 35 62 75 69 32 53 31 25 32 46 47 43 34 51 47 47 51 43 4c 53 52 30 78 69 63 46 43 25 32 46 62 41 6b 45 76 73 4b 55 71 79 56 69 4f 59 34 32 6c 6f 33 37 38 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G49qGGzG%2Fe4cMk1TMHgZjasqRCleEF%2FtNSRkXfp013pmRZ13F52TX1DKaoloJHbkIcHRE8XGbAPbHNRv%2BuPVnv0h5bui2S1%2FGC4QGGQCLSR0xicFC%2FbAkEvsKUqyViOY42lo378%3D"}],"group":"cf-nel","max_age
2025-01-15 02:49:29 UTC	939	IN	Data Raw: 76 61 72 20 70 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 66 3d 28 6d 2c 71 2c 6e 29 3d 3e 71 20 69 6e 20 6d 3f 70 28 6d 2c 71 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 6d 5b 71 5d 3d 6e 2c 68 3d 28 6d 2c 71 2c 6e 29 3d 3e 28 66 28 6d 2c 22 73 79 6d 62 6f 6c 22 21 3d 74 79 70 65 6f 66 20 71 3f 71 2b 22 22 3a 71 2c 6e 29 2c 6e 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 3f 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 28 22 66 6c 5f 22 2b 61 2c 62 29 3a 28 44 7c 7c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 71 2c 31 30 Data Ascii: var p=Object.defineProperty,f=(m,q,n)=>q in m?p(m,q,{enumerable:!0,configurable:!0,writable:!0,value:n}):m[q]=n,h=(m,q,n)=>(f(m,"symbol"!=typeof q?q+"":q,n),n);(function(){function m(a,b){window.sendEvent?window.sendEvent("fl_"+a,b):(D\|\|=setInterval(q,10
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 29 3d 3e 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 64 28 45 72 72 6f 72 28 62 3f 3f 60 74 69 6d 65 6f 75 74 20 24 7b 61 7d 60 29 29 7d 2c 61 29 7d 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4a 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 61 63 65 28 5b 61 2c 49 28 62 2c 63 29 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 62 3d 3e 73 65 74 54 69 6d 65 6f 75 74 28 62 2c 61 29 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4c 28 61 2c 62 2c 63 29 7b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 63 3b 65 2b 2b 29 7b 76 61 72 20 64 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 0a 61 77 61 69 74 20 61 28 29 3b 64 3d 62 2d 28 70 65 72 66 6f 72 6d Data Ascii: )=>{setTimeout(()=>{d(Error(b??`timeout ${a}`))},a)})}async function J(a,b,c){return Promise.race([a,I(b,c)])}function K(a){return new Promise(b=>setTimeout(b,a))}async function L(a,b,c){for(let e=0;e<c;e++){var d=performance.now();await a();d=b-(perform
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 65 72 72 6f 72 20 69 6e 76 6f 6b 69 6e 67 20 72 65 61 64 79 22 2c 63 29 7d 7d 29 3a 74 68 69 73 2e 72 65 61 64 79 28 29 7d 69 6e 69 74 69 61 6c 69 7a 65 28 29 7b 7d 72 65 61 64 79 28 29 7b 7d 72 65 70 6f 72 74 28 61 2c 62 29 7b 6d 28 75 2e 53 69 67 6e 61 6c 2c 7b 6e 61 6d 65 3a 74 68 69 73 2e 6e 61 6d 65 2c 73 75 63 63 65 73 73 3a 61 2c 66 61 69 6c 3a 62 7d 29 7d 72 65 70 6f 72 74 45 72 72 6f 72 28 61 2c 62 29 7b 6e 28 60 24 7b 74 68 69 73 2e 6e 61 6d 65 7d 5b 24 7b 74 68 69 73 2e 63 6f 6e 66 69 67 2e 74 79 70 65 7d 5d 3a 20 24 7b 61 7d 60 2c 62 29 7d 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 6c 65 74 20 6b 3d 30 3b 63 6f 6e 73 74 20 67 3d 72 3d 3e 7b 74 72 79 7b 62 28 72 29 7d 63 61 74 63 68 28 74 29 7b 74 68 69 Data Ascii: error invoking ready",c)}}):this.ready()}initialize(){}ready(){}report(a,b){m(u.Signal,{name:this.name,success:a,fail:b})}reportError(a,b){n(`${this.name}[${this.config.type}]: ${a}`,b)}addEventListener(a,b,c,d,e){let k=0;const g=r=>{try{b(r)}catch(t){thi
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 63 3f 62 2e 70 72 65 70 65 6e 64 28 61 29 3a 62 2e 61 70 70 65 6e 64 28 61 29 7d 67 65 74 50 61 72 65 6e 74 45 6c 65 6d 65 6e 74 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 0a 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 61 29 3a 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 7d 6f 6e 45 6c 65 6d 65 6e 74 43 6c 69 63 6b 28 61 29 7b 63 6f 6e 73 74 20 62 3d 61 2e 74 61 72 67 65 74 3b 62 2e 73 74 79 6c 65 2e 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3d 22 6e 6f 6e 65 22 3b 63 6f 6e 73 74 20 63 3d 64 6f 63 75 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 46 72 6f 6d 50 6f 69 6e 74 28 61 2e 63 6c 69 65 6e 74 58 2c 61 2e 63 6c 69 65 6e 74 59 29 3b 69 66 28 62 2e 73 74 79 6c 65 2e 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3d 22 61 75 74 6f 22 2c 63 26 26 63 21 3d 3d Data Ascii: c?b.prepend(a):b.append(a)}getParentElement(a){return a?document.querySelector(a):document.body}onElementClick(a){const b=a.target;b.style.pointerEvents="none";const c=document.elementFromPoint(a.clientX,a.clientY);if(b.style.pointerEvents="auto",c&&c!==
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 65 73 6f 6c 75 74 69 6f 6e 22 29 3b 68 28 74 68 69 73 2c 22 61 6e 67 6c 65 52 65 73 6f 6c 75 74 69 6f 6e 22 29 3b 68 28 74 68 69 73 2c 22 6d 6f 75 73 65 44 61 74 61 41 72 72 61 79 22 29 3b 74 68 69 73 2e 65 76 65 6e 74 73 57 69 6e 64 6f 77 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 65 76 65 6e 74 73 57 69 6e 64 6f 77 3f 3f 32 30 30 3b 74 68 69 73 2e 6d 69 6e 54 69 6d 65 44 65 6c 74 61 4d 73 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 69 6e 54 69 6d 65 44 65 6c 74 61 4d 73 3f 3f 32 30 3b 74 68 69 73 2e 6d 69 6e 44 69 73 74 61 6e 63 65 50 78 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 69 6e 44 69 73 74 61 6e 63 65 50 78 3f 3f 0a 31 30 3b 74 68 69 73 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 76 65 6c 6f 63 69 74 Data Ascii: esolution");h(this,"angleResolution");h(this,"mouseDataArray");this.eventsWindow=this.config.eventsWindow??200;this.minTimeDeltaMs=this.config.minTimeDeltaMs??20;this.minDistancePx=this.config.minDistancePx??10;this.velocityResolution=this.config.velocit
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 69 64 20 30 3d 3d 3d 6b 7c 7c 4d 61 74 68 2e 61 62 73 28 42 2d 6b 29 3e 3d 74 68 69 73 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 29 26 26 28 62 2e 79 2e 63 6f 75 6e 74 55 6e 69 71 75 65 2b 2b 2c 6b 3d 42 29 3b 63 2e 70 75 73 68 28 41 29 3b 64 2e 70 75 73 68 28 42 29 3b 76 61 72 20 74 3d 47 2c 54 3d 74 68 69 73 2e 61 6e 67 6c 65 52 65 73 6f 6c 75 74 69 6f 6e 2c 43 3b 28 43 3d 76 6f 69 64 20 30 3d 3d 3d 67 29 7c 7c 28 74 3d 4d 61 74 68 2e 61 62 73 28 74 2d 67 29 25 33 36 30 2c 43 3d 4d 61 74 68 2e 6d 69 6e 28 33 36 30 2d 74 2c 74 29 3e 3d 54 29 3b 43 26 26 28 72 2b 2b 2c 67 3d 47 29 7d 74 68 69 73 2e 72 65 70 6f 72 74 53 69 67 6e 61 6c 73 28 61 2c 62 2c 72 29 7d 7d 63 61 6c 63 75 6c 61 74 65 28 61 2c 62 29 7b 63 6f 6e 73 74 20 63 3d 61 2e 78 Data Ascii: id 0===k\|\|Math.abs(B-k)>=this.velocityResolution)&&(b.y.countUnique++,k=B);c.push(A);d.push(B);var t=G,T=this.angleResolution,C;(C=void 0===g)\|\|(t=Math.abs(t-g)%360,C=Math.min(360-t,t)>=T);C&&(r++,g=G)}this.reportSignals(a,b,r)}}calculate(a,b){const c=a.x
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 61 3b 6c 65 74 20 63 3d 22 57 51 42 42 54 55 35 4f 52 30 46 57 54 56 42 52 41 42 68 5a 41 45 39 50 41 42 68 5a 41 45 4e 42 56 6b 74 55 52 77 41 59 56 6c 42 58 52 77 34 41 54 30 4e 61 63 45 64 53 54 56 42 57 41 42 67 58 44 67 42 57 57 31 4a 48 41 42 67 41 54 30 31 58 55 55 63 41 58 77 34 41 54 30 31 58 55 55 63 41 47 46 6b 41 51 30 46 57 53 31 52 48 41 42 68 57 55 46 64 48 44 67 42 48 56 45 64 4d 56 6e 4a 44 55 45 4e 50 55 51 41 59 57 51 42 42 54 6b 74 42 53 51 41 59 57 51 42 42 57 67 41 59 41 45 63 4d 51 55 35 4c 52 30 78 57 65 67 41 4f 41 45 46 62 41 42 67 41 52 77 78 42 54 6b 74 48 54 46 5a 37 41 41 34 41 53 30 59 41 47 41 42 48 44 46 5a 44 55 45 56 48 56 67 78 4c 52 67 4a 65 58 67 4a 58 54 45 5a 48 52 45 74 4d 52 30 59 41 44 67 42 4c 55 58 5a 51 56 31 Data Ascii: a;let c="WQBBTU5OR0FWTVBRABhZAE9PABhZAENBVktURwAYVlBXRw4AT0NacEdSTVBWABgXDgBWW1JHABgAT01XUUcAXw4AT01XUUcAGFkAQ0FWS1RHABhWUFdHDgBHVEdMVnJDUENPUQAYWQBBTktBSQAYWQBBWgAYAEcMQU5LR0xWegAOAEFbABgARwxBTktHTFZ7AA4AS0YAGABHDFZDUEVHVgxLRgJeXgJXTEZHREtMR0YADgBLUXZQV1
2025-01-15 02:49:29 UTC	334	IN	Data Raw: 47 46 5a 51 56 30 63 4f 41 45 64 55 52 30 78 57 63 6b 4e 51 51 30 39 52 41 42 68 5a 41 45 35 4e 51 30 59 41 47 46 6b 41 56 55 59 41 47 41 42 4d 51 31 52 4c 52 55 4e 57 54 56 41 4d 56 55 64 41 52 6c 42 4c 56 45 64 51 41 6c 35 65 41 6c 64 4d 52 6b 64 45 53 30 78 48 52 67 42 66 58 77 34 41 56 6c 74 53 52 77 41 59 41 46 46 57 51 31 5a 4c 51 51 42 66 58 77 34 41 56 45 64 51 55 55 74 4e 54 41 41 59 45 31 38 3d 22 3b 61 3d 28 62 26 26 28 63 3d 0a 48 28 63 2c 61 29 29 2c 45 28 63 2c 53 2c 21 62 29 29 3b 66 6f 72 28 63 6f 6e 73 74 20 5b 64 2c 65 5d 6f 66 20 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 61 2e 63 6f 6c 6c 65 63 74 6f 72 73 29 29 74 72 79 7b 65 2e 61 63 74 69 76 65 26 26 4e 28 64 2c 65 29 7d 63 61 74 63 68 28 6b 29 7b 6e 28 60 66 61 69 6c 65 64 20 63 Data Ascii: GFZQV0cOAEdUR0xWckNQQ09RABhZAE5NQ0YAGFkAVUYAGABMQ1RLRUNWTVAMVUdARlBLVEdQAl5eAldMRkdES0xHRgBfXw4AVltSRwAYAFFWQ1ZLQQBfXw4AVEdQUUtNTAAYE18=";a=(b&&(c=H(c,a)),E(c,S,!b));for(const [d,e]of Object.entries(a.collectors))try{e.active&&N(d,e)}catch(k){n(`failed c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.16	49878	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:29 UTC	910	OUT	GET /sig.js?rpclid=546da6d0-d2eb-11ef-ad61-06f8d311b573&params=Pacs0y_h8AoSpSdmuFfjA2-Jh85D8lauvwtIHB_1GiprXZB5z-_E3J1H5hUXQDZEsvVW7JVWUdGMa_U0C5_tkb4mP1ZlEnp9SQCOUT9ZGqvUPKVQlnmpO-een_K5kYXADLIbU7cZM4adhhdJ64sqRb0XuCC1NIhymkr9Rdf6tXrmlHUvVik_ArV3ViEcLerL2da9b1cfNz3_0XekAPi53bNl_N0IIvDnrrUavtgn0hCj0v3n5UVbx3vj68zJh5EwhSyMCcqSgdvmBMtFnMUY0fIc3kCwuYNWcv9gb37hXO2aW-4ok0VCS57r6DU_Rp5Cr-rj3hrIb1i1cgEBLvfU7WGsD1UHx0L5uBiNGZ2yMVsuwdLN2VS93UYZKceGIhWo5t2oNt_gGhoxejNAlTmutQ HTTP/1.1 Host: serve.bidbrain.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f
2025-01-15 02:49:29 UTC	1169	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 02:49:29 GMT Content-Type: text/javascript Content-Length: 9487 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Via: 1.1 google CF-Cache-Status: BYPASS Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: mid=546da6d0-d2eb-11ef-ad61-06f8d311b573; Domain=.bidbrain.app; Max-Age=7200; Path=/ Accept-Ranges: bytes
2025-01-15 02:49:29 UTC	628	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 31 6c 73 72 57 34 62 73 78 58 5a 34 4f 57 69 42 41 45 51 72 58 4a 58 35 71 4a 41 33 37 7a 6a 74 4f 68 46 6a 65 66 61 6d 41 25 32 42 63 72 39 74 75 76 34 58 68 46 49 47 59 59 61 5a 54 4e 43 76 54 39 25 32 42 48 63 6d 49 52 63 4d 53 52 46 7a 48 7a 39 76 54 43 36 6a 45 37 79 4b 44 75 49 50 62 58 57 39 4c 30 46 58 70 37 57 47 48 6c 44 54 73 31 70 5a 4c 78 79 4f 52 38 69 44 6f 78 56 45 75 25 32 46 25 32 42 39 69 4d 71 4c 36 38 6b 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1lsrW4bsxXZ4OWiBAEQrXJX5qJA37zjtOhFjefamA%2Bcr9tuv4XhFIGYYaZTNCvT9%2BHcmIRcMSRFzHz9vTC6jE7yKDuIPbXW9L0FXp7WGHlDTs1pZLxyOR8iDoxVEu%2F%2B9iMqL68k%3D"}],"group":"cf-nel","max_age":
2025-01-15 02:49:29 UTC	941	IN	Data Raw: 76 61 72 20 70 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 66 3d 28 6d 2c 71 2c 6e 29 3d 3e 71 20 69 6e 20 6d 3f 70 28 6d 2c 71 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 6d 5b 71 5d 3d 6e 2c 68 3d 28 6d 2c 71 2c 6e 29 3d 3e 28 66 28 6d 2c 22 73 79 6d 62 6f 6c 22 21 3d 74 79 70 65 6f 66 20 71 3f 71 2b 22 22 3a 71 2c 6e 29 2c 6e 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 3f 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 28 22 66 6c 5f 22 2b 61 2c 62 29 3a 28 44 7c 7c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 71 2c 31 30 Data Ascii: var p=Object.defineProperty,f=(m,q,n)=>q in m?p(m,q,{enumerable:!0,configurable:!0,writable:!0,value:n}):m[q]=n,h=(m,q,n)=>(f(m,"symbol"!=typeof q?q+"":q,n),n);(function(){function m(a,b){window.sendEvent?window.sendEvent("fl_"+a,b):(D\|\|=setInterval(q,10
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 3e 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 64 28 45 72 72 6f 72 28 62 3f 3f 60 74 69 6d 65 6f 75 74 20 24 7b 61 7d 60 29 29 7d 2c 61 29 7d 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4a 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 61 63 65 28 5b 61 2c 49 28 62 2c 63 29 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 62 3d 3e 73 65 74 54 69 6d 65 6f 75 74 28 62 2c 61 29 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4c 28 61 2c 62 2c 63 29 7b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 63 3b 65 2b 2b 29 7b 76 61 72 20 64 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 0a 61 77 61 69 74 20 61 28 29 3b 64 3d 62 2d 28 70 65 72 66 6f 72 6d 61 6e Data Ascii: >{setTimeout(()=>{d(Error(b??`timeout ${a}`))},a)})}async function J(a,b,c){return Promise.race([a,I(b,c)])}function K(a){return new Promise(b=>setTimeout(b,a))}async function L(a,b,c){for(let e=0;e<c;e++){var d=performance.now();await a();d=b-(performan
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 72 6f 72 20 69 6e 76 6f 6b 69 6e 67 20 72 65 61 64 79 22 2c 63 29 7d 7d 29 3a 74 68 69 73 2e 72 65 61 64 79 28 29 7d 69 6e 69 74 69 61 6c 69 7a 65 28 29 7b 7d 72 65 61 64 79 28 29 7b 7d 72 65 70 6f 72 74 28 61 2c 62 29 7b 6d 28 75 2e 53 69 67 6e 61 6c 2c 7b 6e 61 6d 65 3a 74 68 69 73 2e 6e 61 6d 65 2c 73 75 63 63 65 73 73 3a 61 2c 66 61 69 6c 3a 62 7d 29 7d 72 65 70 6f 72 74 45 72 72 6f 72 28 61 2c 62 29 7b 6e 28 60 24 7b 74 68 69 73 2e 6e 61 6d 65 7d 5b 24 7b 74 68 69 73 2e 63 6f 6e 66 69 67 2e 74 79 70 65 7d 5d 3a 20 24 7b 61 7d 60 2c 62 29 7d 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 6c 65 74 20 6b 3d 30 3b 63 6f 6e 73 74 20 67 3d 72 3d 3e 7b 74 72 79 7b 62 28 72 29 7d 63 61 74 63 68 28 74 29 7b 74 68 69 73 2e Data Ascii: ror invoking ready",c)}}):this.ready()}initialize(){}ready(){}report(a,b){m(u.Signal,{name:this.name,success:a,fail:b})}reportError(a,b){n(`${this.name}[${this.config.type}]: ${a}`,b)}addEventListener(a,b,c,d,e){let k=0;const g=r=>{try{b(r)}catch(t){this.
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 62 2e 70 72 65 70 65 6e 64 28 61 29 3a 62 2e 61 70 70 65 6e 64 28 61 29 7d 67 65 74 50 61 72 65 6e 74 45 6c 65 6d 65 6e 74 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 0a 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 61 29 3a 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 7d 6f 6e 45 6c 65 6d 65 6e 74 43 6c 69 63 6b 28 61 29 7b 63 6f 6e 73 74 20 62 3d 61 2e 74 61 72 67 65 74 3b 62 2e 73 74 79 6c 65 2e 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3d 22 6e 6f 6e 65 22 3b 63 6f 6e 73 74 20 63 3d 64 6f 63 75 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 46 72 6f 6d 50 6f 69 6e 74 28 61 2e 63 6c 69 65 6e 74 58 2c 61 2e 63 6c 69 65 6e 74 59 29 3b 69 66 28 62 2e 73 74 79 6c 65 2e 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3d 22 61 75 74 6f 22 2c 63 26 26 63 21 3d 3d 62 29 Data Ascii: b.prepend(a):b.append(a)}getParentElement(a){return a?document.querySelector(a):document.body}onElementClick(a){const b=a.target;b.style.pointerEvents="none";const c=document.elementFromPoint(a.clientX,a.clientY);if(b.style.pointerEvents="auto",c&&c!==b)
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 6f 6c 75 74 69 6f 6e 22 29 3b 68 28 74 68 69 73 2c 22 61 6e 67 6c 65 52 65 73 6f 6c 75 74 69 6f 6e 22 29 3b 68 28 74 68 69 73 2c 22 6d 6f 75 73 65 44 61 74 61 41 72 72 61 79 22 29 3b 74 68 69 73 2e 65 76 65 6e 74 73 57 69 6e 64 6f 77 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 65 76 65 6e 74 73 57 69 6e 64 6f 77 3f 3f 32 30 30 3b 74 68 69 73 2e 6d 69 6e 54 69 6d 65 44 65 6c 74 61 4d 73 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 69 6e 54 69 6d 65 44 65 6c 74 61 4d 73 3f 3f 32 30 3b 74 68 69 73 2e 6d 69 6e 44 69 73 74 61 6e 63 65 50 78 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 69 6e 44 69 73 74 61 6e 63 65 50 78 3f 3f 0a 31 30 3b 74 68 69 73 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 76 65 6c 6f 63 69 74 79 52 Data Ascii: olution");h(this,"angleResolution");h(this,"mouseDataArray");this.eventsWindow=this.config.eventsWindow??200;this.minTimeDeltaMs=this.config.minTimeDeltaMs??20;this.minDistancePx=this.config.minDistancePx??10;this.velocityResolution=this.config.velocityR
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 20 30 3d 3d 3d 6b 7c 7c 4d 61 74 68 2e 61 62 73 28 42 2d 6b 29 3e 3d 74 68 69 73 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 29 26 26 28 62 2e 79 2e 63 6f 75 6e 74 55 6e 69 71 75 65 2b 2b 2c 6b 3d 42 29 3b 63 2e 70 75 73 68 28 41 29 3b 64 2e 70 75 73 68 28 42 29 3b 76 61 72 20 74 3d 47 2c 54 3d 74 68 69 73 2e 61 6e 67 6c 65 52 65 73 6f 6c 75 74 69 6f 6e 2c 43 3b 28 43 3d 76 6f 69 64 20 30 3d 3d 3d 67 29 7c 7c 28 74 3d 4d 61 74 68 2e 61 62 73 28 74 2d 67 29 25 33 36 30 2c 43 3d 4d 61 74 68 2e 6d 69 6e 28 33 36 30 2d 74 2c 74 29 3e 3d 54 29 3b 43 26 26 28 72 2b 2b 2c 67 3d 47 29 7d 74 68 69 73 2e 72 65 70 6f 72 74 53 69 67 6e 61 6c 73 28 61 2c 62 2c 72 29 7d 7d 63 61 6c 63 75 6c 61 74 65 28 61 2c 62 29 7b 63 6f 6e 73 74 20 63 3d 61 2e 78 2d 62 Data Ascii: 0===k\|\|Math.abs(B-k)>=this.velocityResolution)&&(b.y.countUnique++,k=B);c.push(A);d.push(B);var t=G,T=this.angleResolution,C;(C=void 0===g)\|\|(t=Math.abs(t-g)%360,C=Math.min(360-t,t)>=T);C&&(r++,g=G)}this.reportSignals(a,b,r)}}calculate(a,b){const c=a.x-b
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 6c 65 74 20 63 3d 22 36 72 50 79 2f 76 33 39 39 50 4c 6c 2f 75 50 69 73 36 76 71 73 2f 7a 38 73 36 76 71 73 2f 44 79 35 66 6a 6e 39 4c 4f 72 35 65 50 6b 39 4c 32 7a 2f 50 44 70 77 2f 54 68 2f 75 50 6c 73 36 75 6b 76 62 50 6c 36 4f 48 30 73 36 75 7a 2f 50 37 6b 34 76 53 7a 37 4c 32 7a 2f 50 37 6b 34 76 53 7a 71 2b 71 7a 38 50 4c 6c 2b 4f 66 30 73 36 76 6c 34 2b 54 30 76 62 50 30 35 2f 54 2f 35 63 48 77 34 2f 44 38 34 72 4f 72 36 72 50 79 2f 66 6a 79 2b 72 4f 72 36 72 50 79 36 62 4f 72 73 2f 53 2f 38 76 33 34 39 50 2f 6c 79 62 4f 39 73 2f 4c 6f 73 36 75 7a 39 4c 2f 79 2f 66 6a 30 2f 2b 58 49 73 37 32 7a 2b 50 57 7a 71 37 50 30 76 2b 58 77 34 2f 62 30 35 62 2f 34 39 62 48 74 37 62 48 6b 2f 2f 58 30 39 2f 6a 2f 39 50 57 7a 76 62 50 34 34 73 58 6a 35 4f 4c 6c Data Ascii: let c="6rPy/v399PLl/uPis6vqs/z8s6vqs/Dy5fjn9LOr5ePk9L2z/PDpw/Th/uPls6ukvbPl6OH0s6uz/P7k4vSz7L2z/P7k4vSzq+qz8PLl+Of0s6vl4+T0vbP05/T/5cHw4/D84rOr6rPy/fjy+rOr6rPy6bOrs/S/8v349P/lybO9s/Los6uz9L/y/fj0/+XIs72z+PWzq7P0v+Xw4/b05b/49bHt7bHk//X09/j/9PWzvbP44sXj5OLl
2025-01-15 02:49:29 UTC	332	IN	Data Raw: 58 6a 35 50 53 39 73 2f 54 6e 39 50 2f 6c 77 66 44 6a 38 50 7a 69 73 36 76 71 73 2f 33 2b 38 50 57 7a 71 2b 71 7a 35 76 57 7a 71 37 50 2f 38 4f 66 34 39 76 44 6c 2f 75 4f 2f 35 76 54 7a 39 65 50 34 35 2f 54 6a 73 65 33 74 73 65 54 2f 39 66 54 33 2b 50 2f 30 39 62 50 73 37 4c 32 7a 35 65 6a 68 39 4c 4f 72 73 2b 4c 6c 38 4f 58 34 38 72 50 73 37 4c 32 7a 35 2f 54 6a 34 76 6a 2b 2f 37 4f 72 6f 4f 77 3d 22 3b 61 3d 28 62 26 26 28 63 3d 0a 48 28 63 2c 61 29 29 2c 45 28 63 2c 53 2c 21 62 29 29 3b 66 6f 72 28 63 6f 6e 73 74 20 5b 64 2c 65 5d 6f 66 20 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 61 2e 63 6f 6c 6c 65 63 74 6f 72 73 29 29 74 72 79 7b 65 2e 61 63 74 69 76 65 26 26 4e 28 64 2c 65 29 7d 63 61 74 63 68 28 6b 29 7b 6e 28 60 66 61 69 6c 65 64 20 63 72 65 Data Ascii: Xj5PS9s/Tn9P/lwfDj8Pzis6vqs/3+8PWzq+qz5vWzq7P/8Of49vDl/uO/5vTz9eP45/Tjse3tseT/9fT3+P/09bPs7L2z5ejh9LOrs+Ll8OX48rPs7L2z5/Tj4vj+/7OroOw=";a=(b&&(c=H(c,a)),E(c,S,!b));for(const [d,e]of Object.entries(a.collectors))try{e.active&&N(d,e)}catch(k){n(`failed cre

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.16	49880	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:29 UTC	952	OUT	GET /sig.js?rpclid=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf&params=IjHuoKH9nmywyVTiGioDNCAuLUDL12hOuGl7bgdSfVyyVYBTz7Zsr7uuTl8TJIk5dWf81UH-AsKoN3EadDwjUBJQuQQlVyA963QpKBLhZSvMIbHPvJlfiVhzqVlZKwqSew6ekPvMJQivc9sVYYFqAv999a3EJ_hMi7vf7H_2ZGtihHOTvM6iqjMxqmJD3Q8Seu9mRdQ1GLakJW_Pj4XXdwzV5SezfbVTEvG0p-7i6Sc2AI8XNTkJMEsw2f9vhGucJwsBt9wx-rXfqKI6RUW5LPjCc9zy15g9MVC09kM3Iuwfi6vTIytAZgtIUykHXKylA3w3k2pnPUspiV_ZsBroYyDkOWAaHeeLepaoKhBX4c1zj-q9IHbhhARl1DuhJqnQN6FcAcEdSd5az2KddOvO2mdZRN2LwYifC0OPtebWzdSWf9-50JeiZHpbeeiGCfeO HTTP/1.1 Host: serve.bidbrain.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f
2025-01-15 02:49:29 UTC	1169	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 02:49:29 GMT Content-Type: text/javascript Content-Length: 9485 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Via: 1.1 google CF-Cache-Status: BYPASS Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: mid=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf; Domain=.bidbrain.app; Max-Age=7200; Path=/ Accept-Ranges: bytes
2025-01-15 02:49:29 UTC	632	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 69 61 47 48 72 39 48 47 53 59 75 6a 79 25 32 42 5a 68 31 72 4f 66 65 73 77 69 7a 6e 76 69 54 72 32 43 32 59 35 6a 4a 4b 4c 32 5a 78 55 6b 55 30 47 44 6e 6f 4d 4a 39 65 25 32 42 6c 48 34 31 62 78 48 43 4e 4f 42 4d 70 61 58 54 42 25 32 42 49 4d 47 49 25 32 42 59 73 63 30 65 51 6a 70 32 49 4a 30 25 32 42 41 25 32 46 30 36 6b 42 56 69 51 4d 6e 57 36 7a 49 56 70 4e 58 50 37 42 77 74 41 5a 41 30 4c 67 6a 46 66 6f 61 5a 76 31 4f 32 78 6d 57 77 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iaGHr9HGSYujy%2BZh1rOfeswiznviTr2C2Y5jJKL2ZxUkU0GDnoMJ9e%2BlH41bxHCNOBMpaXTB%2BIMGI%2BYsc0eQjp2IJ0%2BA%2F06kBViQMnW6zIVpNXP7BwtAZA0LgjFfoaZv1O2xmWw%3D"}],"group":"cf-nel","max_a
2025-01-15 02:49:29 UTC	937	IN	Data Raw: 76 61 72 20 70 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 66 3d 28 6d 2c 71 2c 6e 29 3d 3e 71 20 69 6e 20 6d 3f 70 28 6d 2c 71 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 6d 5b 71 5d 3d 6e 2c 68 3d 28 6d 2c 71 2c 6e 29 3d 3e 28 66 28 6d 2c 22 73 79 6d 62 6f 6c 22 21 3d 74 79 70 65 6f 66 20 71 3f 71 2b 22 22 3a 71 2c 6e 29 2c 6e 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 3f 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 28 22 66 6c 5f 22 2b 61 2c 62 29 3a 28 44 7c 7c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 71 2c 31 30 Data Ascii: var p=Object.defineProperty,f=(m,q,n)=>q in m?p(m,q,{enumerable:!0,configurable:!0,writable:!0,value:n}):m[q]=n,h=(m,q,n)=>(f(m,"symbol"!=typeof q?q+"":q,n),n);(function(){function m(a,b){window.sendEvent?window.sendEvent("fl_"+a,b):(D\|\|=setInterval(q,10
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 2c 64 29 3d 3e 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 64 28 45 72 72 6f 72 28 62 3f 3f 60 74 69 6d 65 6f 75 74 20 24 7b 61 7d 60 29 29 7d 2c 61 29 7d 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4a 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 61 63 65 28 5b 61 2c 49 28 62 2c 63 29 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 62 3d 3e 73 65 74 54 69 6d 65 6f 75 74 28 62 2c 61 29 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4c 28 61 2c 62 2c 63 29 7b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 63 3b 65 2b 2b 29 7b 76 61 72 20 64 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 0a 61 77 61 69 74 20 61 28 29 3b 64 3d 62 2d 28 70 65 72 66 6f Data Ascii: ,d)=>{setTimeout(()=>{d(Error(b??`timeout ${a}`))},a)})}async function J(a,b,c){return Promise.race([a,I(b,c)])}function K(a){return new Promise(b=>setTimeout(b,a))}async function L(a,b,c){for(let e=0;e<c;e++){var d=performance.now();await a();d=b-(perfo
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 28 22 65 72 72 6f 72 20 69 6e 76 6f 6b 69 6e 67 20 72 65 61 64 79 22 2c 63 29 7d 7d 29 3a 74 68 69 73 2e 72 65 61 64 79 28 29 7d 69 6e 69 74 69 61 6c 69 7a 65 28 29 7b 7d 72 65 61 64 79 28 29 7b 7d 72 65 70 6f 72 74 28 61 2c 62 29 7b 6d 28 75 2e 53 69 67 6e 61 6c 2c 7b 6e 61 6d 65 3a 74 68 69 73 2e 6e 61 6d 65 2c 73 75 63 63 65 73 73 3a 61 2c 66 61 69 6c 3a 62 7d 29 7d 72 65 70 6f 72 74 45 72 72 6f 72 28 61 2c 62 29 7b 6e 28 60 24 7b 74 68 69 73 2e 6e 61 6d 65 7d 5b 24 7b 74 68 69 73 2e 63 6f 6e 66 69 67 2e 74 79 70 65 7d 5d 3a 20 24 7b 61 7d 60 2c 62 29 7d 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 6c 65 74 20 6b 3d 30 3b 63 6f 6e 73 74 20 67 3d 72 3d 3e 7b 74 72 79 7b 62 28 72 29 7d 63 61 74 63 68 28 74 29 7b 74 Data Ascii: ("error invoking ready",c)}}):this.ready()}initialize(){}ready(){}report(a,b){m(u.Signal,{name:this.name,success:a,fail:b})}reportError(a,b){n(`${this.name}[${this.config.type}]: ${a}`,b)}addEventListener(a,b,c,d,e){let k=0;const g=r=>{try{b(r)}catch(t){t
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 29 7b 63 3f 62 2e 70 72 65 70 65 6e 64 28 61 29 3a 62 2e 61 70 70 65 6e 64 28 61 29 7d 67 65 74 50 61 72 65 6e 74 45 6c 65 6d 65 6e 74 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 0a 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 61 29 3a 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 7d 6f 6e 45 6c 65 6d 65 6e 74 43 6c 69 63 6b 28 61 29 7b 63 6f 6e 73 74 20 62 3d 61 2e 74 61 72 67 65 74 3b 62 2e 73 74 79 6c 65 2e 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3d 22 6e 6f 6e 65 22 3b 63 6f 6e 73 74 20 63 3d 64 6f 63 75 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 46 72 6f 6d 50 6f 69 6e 74 28 61 2e 63 6c 69 65 6e 74 58 2c 61 2e 63 6c 69 65 6e 74 59 29 3b 69 66 28 62 2e 73 74 79 6c 65 2e 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3d 22 61 75 74 6f 22 2c 63 26 26 63 21 Data Ascii: ){c?b.prepend(a):b.append(a)}getParentElement(a){return a?document.querySelector(a):document.body}onElementClick(a){const b=a.target;b.style.pointerEvents="none";const c=document.elementFromPoint(a.clientX,a.clientY);if(b.style.pointerEvents="auto",c&&c!
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 79 52 65 73 6f 6c 75 74 69 6f 6e 22 29 3b 68 28 74 68 69 73 2c 22 61 6e 67 6c 65 52 65 73 6f 6c 75 74 69 6f 6e 22 29 3b 68 28 74 68 69 73 2c 22 6d 6f 75 73 65 44 61 74 61 41 72 72 61 79 22 29 3b 74 68 69 73 2e 65 76 65 6e 74 73 57 69 6e 64 6f 77 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 65 76 65 6e 74 73 57 69 6e 64 6f 77 3f 3f 32 30 30 3b 74 68 69 73 2e 6d 69 6e 54 69 6d 65 44 65 6c 74 61 4d 73 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 69 6e 54 69 6d 65 44 65 6c 74 61 4d 73 3f 3f 32 30 3b 74 68 69 73 2e 6d 69 6e 44 69 73 74 61 6e 63 65 50 78 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 69 6e 44 69 73 74 61 6e 63 65 50 78 3f 3f 0a 31 30 3b 74 68 69 73 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 76 65 6c 6f 63 Data Ascii: yResolution");h(this,"angleResolution");h(this,"mouseDataArray");this.eventsWindow=this.config.eventsWindow??200;this.minTimeDeltaMs=this.config.minTimeDeltaMs??20;this.minDistancePx=this.config.minDistancePx??10;this.velocityResolution=this.config.veloc
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 76 6f 69 64 20 30 3d 3d 3d 6b 7c 7c 4d 61 74 68 2e 61 62 73 28 42 2d 6b 29 3e 3d 74 68 69 73 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 29 26 26 28 62 2e 79 2e 63 6f 75 6e 74 55 6e 69 71 75 65 2b 2b 2c 6b 3d 42 29 3b 63 2e 70 75 73 68 28 41 29 3b 64 2e 70 75 73 68 28 42 29 3b 76 61 72 20 74 3d 47 2c 54 3d 74 68 69 73 2e 61 6e 67 6c 65 52 65 73 6f 6c 75 74 69 6f 6e 2c 43 3b 28 43 3d 76 6f 69 64 20 30 3d 3d 3d 67 29 7c 7c 28 74 3d 4d 61 74 68 2e 61 62 73 28 74 2d 67 29 25 33 36 30 2c 43 3d 4d 61 74 68 2e 6d 69 6e 28 33 36 30 2d 74 2c 74 29 3e 3d 54 29 3b 43 26 26 28 72 2b 2b 2c 67 3d 47 29 7d 74 68 69 73 2e 72 65 70 6f 72 74 53 69 67 6e 61 6c 73 28 61 2c 62 2c 72 29 7d 7d 63 61 6c 63 75 6c 61 74 65 28 61 2c 62 29 7b 63 6f 6e 73 74 20 63 3d 61 Data Ascii: void 0===k\|\|Math.abs(B-k)>=this.velocityResolution)&&(b.y.countUnique++,k=B);c.push(A);d.push(B);var t=G,T=this.angleResolution,C;(C=void 0===g)\|\|(t=Math.abs(t-g)%360,C=Math.min(360-t,t)>=T);C&&(r++,g=G)}this.reportSignals(a,b,r)}}calculate(a,b){const c=a
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 61 3b 6c 65 74 20 63 3d 22 6c 63 79 4e 67 59 4b 43 69 34 32 61 67 5a 79 64 7a 4e 53 56 7a 49 4f 44 7a 4e 53 56 7a 49 2b 4e 6d 6f 65 59 69 38 7a 55 6d 70 79 62 69 38 4c 4d 67 34 2b 57 76 49 75 65 67 5a 79 61 7a 4e 54 62 77 73 79 61 6c 35 36 4c 7a 4e 54 4d 67 34 47 62 6e 59 76 4d 6b 38 4c 4d 67 34 47 62 6e 59 76 4d 31 4a 58 4d 6a 34 32 61 68 35 69 4c 7a 4e 53 61 6e 4a 75 4c 77 73 79 4c 6d 49 75 41 6d 72 36 50 6e 49 2b 44 6e 63 7a 55 6c 63 79 4e 67 6f 65 4e 68 63 7a 55 6c 63 79 4e 6c 73 7a 55 7a 49 76 41 6a 59 4b 48 69 34 43 61 74 73 7a 43 7a 49 32 58 7a 4e 54 4d 69 38 43 4e 67 6f 65 4c 67 4a 71 33 7a 4d 4c 4d 68 34 72 4d 31 4d 79 4c 77 4a 71 50 6e 49 6d 4c 6d 73 43 48 69 73 36 53 6b 73 36 62 67 49 71 4c 69 49 65 41 69 34 72 4d 77 73 79 48 6e 62 71 63 6d 35 Data Ascii: a;let c="lcyNgYKCi42agZydzNSVzIODzNSVzI+NmoeYi8zUmpybi8LMg4+WvIuegZyazNTbwsyal56LzNTMg4GbnYvMk8LMg4GbnYvM1JXMj42ah5iLzNSanJuLwsyLmIuAmr6PnI+DnczUlcyNgoeNhczUlcyNlszUzIvAjYKHi4CatszCzI2XzNTMi8CNgoeLgJq3zMLMh4rM1MyLwJqPnImLmsCHis6Sks6bgIqLiIeAi4rMwsyHnbqcm5
2025-01-15 02:49:29 UTC	334	IN	Data Raw: 31 4a 71 63 6d 34 76 43 7a 49 75 59 69 34 43 61 76 6f 2b 63 6a 34 4f 64 7a 4e 53 56 7a 49 4b 42 6a 34 72 4d 31 4a 58 4d 6d 59 72 4d 31 4d 79 41 6a 35 69 48 69 59 2b 61 67 5a 7a 41 6d 59 75 4d 69 70 79 48 6d 49 75 63 7a 70 4b 53 7a 70 75 41 69 6f 75 49 68 34 43 4c 69 73 79 54 6b 38 4c 4d 6d 70 65 65 69 38 7a 55 7a 4a 32 61 6a 35 71 48 6a 63 79 54 6b 38 4c 4d 6d 49 75 63 6e 59 65 42 67 4d 7a 55 33 35 4d 3d 22 3b 61 3d 28 62 26 26 28 63 3d 0a 48 28 63 2c 61 29 29 2c 45 28 63 2c 53 2c 21 62 29 29 3b 66 6f 72 28 63 6f 6e 73 74 20 5b 64 2c 65 5d 6f 66 20 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 61 2e 63 6f 6c 6c 65 63 74 6f 72 73 29 29 74 72 79 7b 65 2e 61 63 74 69 76 65 26 26 4e 28 64 2c 65 29 7d 63 61 74 63 68 28 6b 29 7b 6e 28 60 66 61 69 6c 65 64 20 63 Data Ascii: 1Jqcm4vCzIuYi4Cavo+cj4OdzNSVzIKBj4rM1JXMmYrM1MyAj5iHiY+agZzAmYuMipyHmIuczpKSzpuAiouIh4CLisyTk8LMmpeei8zUzJ2aj5qHjcyTk8LMmIucnYeBgMzU35M=";a=(b&&(c=H(c,a)),E(c,S,!b));for(const [d,e]of Object.entries(a.collectors))try{e.active&&N(d,e)}catch(k){n(`failed c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.16	49882	104.21.80.92	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:29 UTC	478	OUT	GET /ext/Footer-Logo_1720602781.svg+xml HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546afe47-d2eb-11ef-ad78-a23bd1412fc2
2025-01-15 02:49:29 UTC	1181	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 02:49:29 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close X-GUploader-UploadID: AFIdbgSVt6ZB5kYddUvBxFxHxPruGoxCRm51IDDvwVovtRGBAOfN3NVP9E6XrXckEorOFuQI x-goog-generation: 1720602780982635 x-goog-metageneration: 3 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 7186 x-goog-hash: crc32c=Kc0qjA== x-goog-hash: md5=jGCl//RKIQKXgmNkQtJJ1A== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type Expires: Wed, 15 Jan 2025 03:15:17 GMT Cache-Control: public, max-age=3600 Last-Modified: Wed, 10 Jul 2024 09:13:01 GMT ETag: W/"8c60a5fff44a21029782636442d249d4" Vary: Accept-Encoding Age: 2052 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dpcwJtpZE1CRrct5dpj9slD1HEbs8oxILn5%2BKsk4esLFJxJ%2FIM81Xua%2FDLew5jcM622KNHp88MFkzf9MQqAtYXzr8i0QoOhdJdARrtRm%2BW4dTkI8dhJczzCm6KsxQWcdFwLU"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 90228d898e9559b0-IAD alt-svc: h3=":443"; ma=86400
2025-01-15 02:49:29 UTC	215	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 36 38 39 38 26 6d 69 6e 5f 72 74 74 3d 36 38 39 34 26 72 74 74 5f 76 61 72 3d 32 35 39 33 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 33 33 38 26 72 65 63 76 5f 62 79 74 65 73 3d 31 30 35 36 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 34 32 31 34 37 38 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 30 33 34 33 33 39 39 64 39 66 64 62 31 32 36 62 26 74 73 3d 31 37 39 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=6898&min_rtt=6894&rtt_var=2593&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2338&recv_bytes=1056&delivery_rate=421478&cwnd=32&unsent_bytes=0&cid=0343399d9fdb126b&ts=179&x=0"
2025-01-15 02:49:29 UTC	1342	IN	Data Raw: 31 63 31 32 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 39 31 22 20 68 65 69 67 68 74 3d 22 35 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 31 20 35 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 29 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 33 33 2e 35 38 37 39 20 30 43 33 33 2e 35 38 37 39 20 30 20 33 30 2e 38 39 33 35 20 39 2e 32 30 39 31 36 20 32 36 2e 30 35 39 32 20 31 32 2e 37 38 31 37 43 32 34 2e 30 37 38 20 31 35 2e 30 38 34 20 31 33 2e 32 32 30 38 20 32 33 2e 35 37 38 36 20 39 2e 38 31 33 30 32 20 32 31 2e 30 33 38 32 43 35 2e 35 33 33 35 34 20 31 37 2e 36 32 34 34 Data Ascii: 1c12<svg width="191" height="52" viewBox="0 0 191 52" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0)"><path d="M33.5879 0C33.5879 0 30.8935 9.20916 26.0592 12.7817C24.078 15.084 13.2208 23.5786 9.81302 21.0382C5.53354 17.6244
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 32 31 2e 30 36 38 20 31 34 2e 38 34 35 38 43 31 38 2e 33 37 33 35 20 31 35 2e 33 32 32 31 20 31 37 2e 36 36 30 32 20 31 31 2e 35 31 31 35 20 31 37 2e 34 32 32 35 20 31 31 2e 35 31 31 35 43 31 37 2e 34 32 32 35 20 31 31 2e 35 31 31 35 20 31 37 2e 31 30 35 35 20 31 36 2e 35 31 33 20 32 30 2e 39 30 39 35 20 31 36 2e 35 31 33 43 32 37 2e 32 34 39 35 20 31 36 2e 35 39 32 34 20 33 33 2e 35 38 39 34 20 30 20 33 33 2e 35 38 39 34 20 30 5a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 70 61 69 6e 74 33 5f 72 61 64 69 61 6c 29 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 36 2e 33 39 30 36 20 34 30 2e 36 34 37 36 43 31 38 2e 35 33 30 34 20 33 38 2e 35 30 34 31 20 32 31 2e 34 36 32 36 20 33 37 2e 37 38 39 36 20 32 33 2e 30 34 37 36 20 33 37 2e 39 34 38 34 43 33 32 2e 30 38 Data Ascii: 21.068 14.8458C18.3735 15.3221 17.6602 11.5115 17.4225 11.5115C17.4225 11.5115 17.1055 16.513 20.9095 16.513C27.2495 16.5924 33.5894 0 33.5894 0Z" fill="url(#paint3_radial)"/><path d="M16.3906 40.6476C18.5304 38.5041 21.4626 37.7896 23.0476 37.9484C32.08
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 32 2e 34 32 38 34 20 31 30 34 2e 35 31 37 20 33 35 2e 39 32 31 36 20 39 39 2e 36 38 32 38 20 33 35 2e 39 32 31 36 43 39 34 2e 38 34 38 36 20 33 35 2e 39 32 31 36 20 39 31 2e 32 30 33 31 20 33 32 2e 34 32 38 34 20 39 31 2e 32 30 33 31 20 32 37 2e 36 36 35 31 43 39 31 2e 32 30 33 31 20 32 32 2e 39 38 31 31 20 39 34 2e 38 34 38 36 20 31 39 2e 35 36 37 34 20 39 39 2e 36 38 32 38 20 31 39 2e 35 36 37 34 43 31 30 34 2e 35 31 37 20 31 39 2e 35 36 37 34 20 31 30 38 2e 31 36 33 20 32 32 2e 39 38 31 31 20 31 30 38 2e 31 36 33 20 32 37 2e 36 36 35 31 5a 4d 31 30 33 2e 37 32 35 20 32 37 2e 36 36 35 31 43 31 30 33 2e 37 32 35 20 32 35 2e 33 36 32 38 20 31 30 32 2e 30 36 20 32 33 2e 35 33 36 38 20 39 39 2e 36 38 32 38 20 32 33 2e 35 33 36 38 43 39 37 2e 33 30 35 34 20 Data Ascii: 2.4284 104.517 35.9216 99.6828 35.9216C94.8486 35.9216 91.2031 32.4284 91.2031 27.6651C91.2031 22.9811 94.8486 19.5674 99.6828 19.5674C104.517 19.5674 108.163 22.9811 108.163 27.6651ZM103.725 27.6651C103.725 25.3628 102.06 23.5368 99.6828 23.5368C97.3054
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 20 32 37 2e 37 34 35 32 43 31 34 31 2e 32 38 39 20 32 33 2e 30 36 31 32 20 31 34 34 2e 37 37 36 20 31 39 2e 36 34 37 35 20 31 34 39 2e 36 31 20 31 39 2e 36 34 37 35 43 31 35 31 2e 31 39 35 20 31 39 2e 36 34 37 35 20 31 35 32 2e 34 36 33 20 32 30 2e 30 34 34 34 20 31 35 33 2e 35 37 33 20 32 30 2e 38 33 38 33 56 31 39 2e 39 36 35 48 31 35 37 2e 36 39 34 56 32 36 2e 30 37 38 48 31 35 33 2e 34 31 34 43 31 35 33 2e 30 31 38 20 32 34 2e 35 36 39 36 20 31 35 31 2e 36 37 31 20 32 33 2e 36 31 36 39 20 31 35 30 2e 30 30 37 20 32 33 2e 36 31 36 39 43 31 34 37 2e 36 32 39 20 32 33 2e 36 31 36 39 20 31 34 35 2e 38 30 36 20 32 35 2e 34 34 32 39 20 31 34 35 2e 38 30 36 20 32 37 2e 37 34 35 32 43 31 34 35 2e 38 30 36 20 33 30 2e 30 34 37 35 20 31 34 37 2e 36 32 39 20 33 Data Ascii: 27.7452C141.289 23.0612 144.776 19.6475 149.61 19.6475C151.195 19.6475 152.463 20.0444 153.573 20.8383V19.965H157.694V26.078H153.414C153.018 24.5696 151.671 23.6169 150.007 23.6169C147.629 23.6169 145.806 25.4429 145.806 27.7452C145.806 30.0475 147.629 3
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 36 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 31 37 35 34 32 22 2f 3e 0a 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 46 43 35 39 31 22 2f 3e 0a 3c 2f 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 3e 0a 3c 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 69 64 3d 22 70 61 69 6e 74 31 5f 72 61 64 69 61 6c 22 20 63 78 3d 22 30 22 20 63 79 3d 22 30 22 20 72 3d 22 31 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 32 39 2e 33 33 35 37 20 34 31 2e 34 35 31 33 29 20 72 6f 74 61 74 65 28 2d 32 32 2e 32 30 31 36 29 20 73 63 61 6c 65 28 34 36 2e 33 31 31 32 20 33 35 2e 36 30 34 34 29 Data Ascii: 6" stop-color="#F17542"/><stop offset="1" stop-color="#FFC591"/></radialGradient><radialGradient id="paint1_radial" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(29.3357 41.4513) rotate(-22.2016) scale(46.3112 35.6044)
2025-01-15 02:49:29 UTC	376	IN	Data Raw: 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 32 37 2e 39 37 30 34 20 35 32 2e 37 39 34 34 29 20 72 6f 74 61 74 65 28 2d 38 30 2e 34 33 38 34 29 20 73 63 61 6c 65 28 31 35 2e 34 37 34 34 20 34 31 2e 30 33 30 33 29 22 3e 0a 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 46 43 35 39 31 22 2f 3e 0a 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 30 2e 38 30 39 34 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 31 37 35 34 32 22 2f 3e 0a 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 45 44 36 32 32 46 22 2f 3e 0a 3c 2f 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 3e 0a 3c 63 6c 69 70 50 61 74 68 20 69 Data Ascii: tUnits="userSpaceOnUse" gradientTransform="translate(27.9704 52.7944) rotate(-80.4384) scale(15.4744 41.0303)"><stop stop-color="#FFC591"/><stop offset="0.8094" stop-color="#F17542"/><stop offset="1" stop-color="#ED622F"/></radialGradient><clipPath i
2025-01-15 02:49:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.16	49881	104.21.80.92	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:29 UTC	480	OUT	GET /ext/download-icon_1697445891.svg+xml HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546afe47-d2eb-11ef-ad78-a23bd1412fc2
2025-01-15 02:49:29 UTC	1174	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 02:49:29 GMT Content-Type: image/svg+xml Content-Length: 469 Connection: close X-GUploader-UploadID: AFIdbgQ8mvZkkGDYzKlpdAp2Ywx1tCRLTxIIz6Mgevcjojv4UjHZvdeTDLWo7u9hVQ_rBgEK x-goog-generation: 1697445890645515 x-goog-metageneration: 3 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 469 x-goog-hash: crc32c=+dJKLA== x-goog-hash: md5=aXSu6a+EFDtKxcc58XB8lQ== x-goog-storage-class: STANDARD Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type Expires: Wed, 15 Jan 2025 03:13:17 GMT Cache-Control: public, max-age=3600 Age: 2172 Last-Modified: Mon, 16 Oct 2023 08:44:50 GMT ETag: "6974aee9af84143b4ac5c739f1707c95" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FNUSzvWYVsvC3TD2SzQ84XEuD%2FJju41S8sj2vhFXSRgO4EX7a1x0rOVYK9k%2BNSjHL0oEN%2F1Bx%2BePwqGl6dYEZidhnJlGy4XBP5OM6Y3msmLkfW%2FXTbH6kDROIwVG%2F0K4mq2v"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 90228d899c0d39c9-YYZ alt-svc: h3=":443"; ma=86400
2025-01-15 02:49:29 UTC	217	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 33 36 30 30 26 6d 69 6e 5f 72 74 74 3d 31 33 35 39 38 26 72 74 74 5f 76 61 72 3d 35 31 30 33 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 33 33 39 26 72 65 63 76 5f 62 79 74 65 73 3d 31 30 35 38 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 32 31 34 34 38 35 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 38 63 33 63 32 35 66 62 35 66 34 65 30 31 39 38 26 74 73 3d 31 38 32 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=13600&min_rtt=13598&rtt_var=5103&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2339&recv_bytes=1058&delivery_rate=214485&cwnd=32&unsent_bytes=0&cid=8c3c25fb5f4e0198&ts=182&x=0"
2025-01-15 02:49:29 UTC	469	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 39 22 20 68 65 69 67 68 74 3d 22 32 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 20 32 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 20 31 33 2e 32 36 33 32 4c 31 20 31 36 2e 39 36 39 31 43 31 20 31 37 2e 35 33 30 37 20 31 2e 32 32 31 32 35 20 31 38 2e 30 36 39 33 20 31 2e 36 31 35 30 38 20 31 38 2e 34 36 36 35 43 32 2e 30 30 38 39 20 31 38 2e 38 36 33 36 20 32 2e 35 34 33 30 35 20 31 39 2e 30 38 36 37 20 33 2e 31 20 31 39 2e 30 38 36 37 48 31 35 2e 37 43 31 36 2e 32 35 37 20 31 39 2e 30 38 36 37 20 31 36 2e 37 39 31 31 20 31 38 2e 38 36 33 36 20 31 37 2e 31 38 34 39 20 Data Ascii: <svg width="19" height="21" viewBox="0 0 19 21" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M1 13.2632L1 16.9691C1 17.5307 1.22125 18.0693 1.61508 18.4665C2.0089 18.8636 2.54305 19.0867 3.1 19.0867H15.7C16.257 19.0867 16.7911 18.8636 17.1849

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.16	49887	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:29 UTC	952	OUT	GET /sig.js?rpclid=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f&params=q547IniEp1qY7OEg0PE-zvI7c4TTbyJ9yUbJXX9aXRRFZ2RSaC1aqKVcNwFLzvoOUSB1Cq-kKAVCZMCO8wGiXvdmW_R_lhWj9VZ0BXYdLq3CVfee3Dl8WI3WkDd6zz6cgPeOrWRQd0pYTBtp6b-MEhqkYNKcIqKwWY9oCnbEV53vVc0S-miSf-21MKIOFFWwwrtgyKpTFmSAzSgQs0FZTJxX5Gsm3mrnNfhxWN0Pw1JdgjYx4A0MtW9X9sFmXm843WGJGXK0aLApHA07DzpbVdhE2OFP0N5Ku5qSpfS_KMrn0gcgzJWCemoSEDAXtqiudxnIdUJXflbA_NEbsxnE161AqUOD5U2bGvzX9q0umM_UPOpSxsZxgkmK5Rd_E0400H-5SWuxjHpFtYcXu8P-aYhdwh-QT38DroSKr_E8gRGeWPVy9UB5x_1996Dl-nvO HTTP/1.1 Host: serve.bidbrain.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546afe47-d2eb-11ef-ad78-a23bd1412fc2
2025-01-15 02:49:29 UTC	1169	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 02:49:29 GMT Content-Type: text/javascript Content-Length: 9487 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Via: 1.1 google CF-Cache-Status: BYPASS Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: mid=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f; Domain=.bidbrain.app; Max-Age=7200; Path=/ Accept-Ranges: bytes
2025-01-15 02:49:29 UTC	630	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 30 41 4e 4d 51 25 32 42 38 47 56 25 32 46 61 4e 43 5a 6f 46 31 4e 6b 7a 6c 5a 46 4c 6f 38 41 42 67 53 72 56 56 6a 30 36 53 46 47 4d 76 53 6c 50 72 34 76 45 4d 25 32 42 37 46 52 47 4d 30 35 54 53 52 37 32 55 54 64 69 6b 78 36 4a 4b 75 70 44 51 34 49 4e 50 69 54 61 63 79 65 64 34 77 4d 48 6c 6d 25 32 46 52 68 35 6e 48 72 30 4e 25 32 42 68 70 6e 79 6c 69 53 4b 42 48 25 32 46 73 46 4d 6f 45 73 53 42 78 4d 6f 5a 6a 74 72 4a 4c 31 4a 57 4c 45 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0ANMQ%2B8GV%2FaNCZoF1NkzlZFLo8ABgSrVVj06SFGMvSlPr4vEM%2B7FRGM05TSR72UTdikx6JKupDQ4INPiTacyed4wMHlm%2FRh5nHr0N%2BhpnyliSKBH%2FsFMoEsSBxMoZjtrJL1JWLE%3D"}],"group":"cf-nel","max_a
2025-01-15 02:49:29 UTC	939	IN	Data Raw: 76 61 72 20 70 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 66 3d 28 6d 2c 71 2c 6e 29 3d 3e 71 20 69 6e 20 6d 3f 70 28 6d 2c 71 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 6d 5b 71 5d 3d 6e 2c 68 3d 28 6d 2c 71 2c 6e 29 3d 3e 28 66 28 6d 2c 22 73 79 6d 62 6f 6c 22 21 3d 74 79 70 65 6f 66 20 71 3f 71 2b 22 22 3a 71 2c 6e 29 2c 6e 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 3f 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 28 22 66 6c 5f 22 2b 61 2c 62 29 3a 28 44 7c 7c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 71 2c 31 30 Data Ascii: var p=Object.defineProperty,f=(m,q,n)=>q in m?p(m,q,{enumerable:!0,configurable:!0,writable:!0,value:n}):m[q]=n,h=(m,q,n)=>(f(m,"symbol"!=typeof q?q+"":q,n),n);(function(){function m(a,b){window.sendEvent?window.sendEvent("fl_"+a,b):(D\|\|=setInterval(q,10
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 29 3d 3e 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 64 28 45 72 72 6f 72 28 62 3f 3f 60 74 69 6d 65 6f 75 74 20 24 7b 61 7d 60 29 29 7d 2c 61 29 7d 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4a 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 61 63 65 28 5b 61 2c 49 28 62 2c 63 29 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 62 3d 3e 73 65 74 54 69 6d 65 6f 75 74 28 62 2c 61 29 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4c 28 61 2c 62 2c 63 29 7b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 63 3b 65 2b 2b 29 7b 76 61 72 20 64 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 0a 61 77 61 69 74 20 61 28 29 3b 64 3d 62 2d 28 70 65 72 66 6f 72 6d Data Ascii: )=>{setTimeout(()=>{d(Error(b??`timeout ${a}`))},a)})}async function J(a,b,c){return Promise.race([a,I(b,c)])}function K(a){return new Promise(b=>setTimeout(b,a))}async function L(a,b,c){for(let e=0;e<c;e++){var d=performance.now();await a();d=b-(perform
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 65 72 72 6f 72 20 69 6e 76 6f 6b 69 6e 67 20 72 65 61 64 79 22 2c 63 29 7d 7d 29 3a 74 68 69 73 2e 72 65 61 64 79 28 29 7d 69 6e 69 74 69 61 6c 69 7a 65 28 29 7b 7d 72 65 61 64 79 28 29 7b 7d 72 65 70 6f 72 74 28 61 2c 62 29 7b 6d 28 75 2e 53 69 67 6e 61 6c 2c 7b 6e 61 6d 65 3a 74 68 69 73 2e 6e 61 6d 65 2c 73 75 63 63 65 73 73 3a 61 2c 66 61 69 6c 3a 62 7d 29 7d 72 65 70 6f 72 74 45 72 72 6f 72 28 61 2c 62 29 7b 6e 28 60 24 7b 74 68 69 73 2e 6e 61 6d 65 7d 5b 24 7b 74 68 69 73 2e 63 6f 6e 66 69 67 2e 74 79 70 65 7d 5d 3a 20 24 7b 61 7d 60 2c 62 29 7d 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 6c 65 74 20 6b 3d 30 3b 63 6f 6e 73 74 20 67 3d 72 3d 3e 7b 74 72 79 7b 62 28 72 29 7d 63 61 74 63 68 28 74 29 7b 74 68 69 Data Ascii: error invoking ready",c)}}):this.ready()}initialize(){}ready(){}report(a,b){m(u.Signal,{name:this.name,success:a,fail:b})}reportError(a,b){n(`${this.name}[${this.config.type}]: ${a}`,b)}addEventListener(a,b,c,d,e){let k=0;const g=r=>{try{b(r)}catch(t){thi
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 63 3f 62 2e 70 72 65 70 65 6e 64 28 61 29 3a 62 2e 61 70 70 65 6e 64 28 61 29 7d 67 65 74 50 61 72 65 6e 74 45 6c 65 6d 65 6e 74 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 0a 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 61 29 3a 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 7d 6f 6e 45 6c 65 6d 65 6e 74 43 6c 69 63 6b 28 61 29 7b 63 6f 6e 73 74 20 62 3d 61 2e 74 61 72 67 65 74 3b 62 2e 73 74 79 6c 65 2e 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3d 22 6e 6f 6e 65 22 3b 63 6f 6e 73 74 20 63 3d 64 6f 63 75 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 46 72 6f 6d 50 6f 69 6e 74 28 61 2e 63 6c 69 65 6e 74 58 2c 61 2e 63 6c 69 65 6e 74 59 29 3b 69 66 28 62 2e 73 74 79 6c 65 2e 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3d 22 61 75 74 6f 22 2c 63 26 26 63 21 3d 3d Data Ascii: c?b.prepend(a):b.append(a)}getParentElement(a){return a?document.querySelector(a):document.body}onElementClick(a){const b=a.target;b.style.pointerEvents="none";const c=document.elementFromPoint(a.clientX,a.clientY);if(b.style.pointerEvents="auto",c&&c!==
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 65 73 6f 6c 75 74 69 6f 6e 22 29 3b 68 28 74 68 69 73 2c 22 61 6e 67 6c 65 52 65 73 6f 6c 75 74 69 6f 6e 22 29 3b 68 28 74 68 69 73 2c 22 6d 6f 75 73 65 44 61 74 61 41 72 72 61 79 22 29 3b 74 68 69 73 2e 65 76 65 6e 74 73 57 69 6e 64 6f 77 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 65 76 65 6e 74 73 57 69 6e 64 6f 77 3f 3f 32 30 30 3b 74 68 69 73 2e 6d 69 6e 54 69 6d 65 44 65 6c 74 61 4d 73 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 69 6e 54 69 6d 65 44 65 6c 74 61 4d 73 3f 3f 32 30 3b 74 68 69 73 2e 6d 69 6e 44 69 73 74 61 6e 63 65 50 78 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 69 6e 44 69 73 74 61 6e 63 65 50 78 3f 3f 0a 31 30 3b 74 68 69 73 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 76 65 6c 6f 63 69 74 Data Ascii: esolution");h(this,"angleResolution");h(this,"mouseDataArray");this.eventsWindow=this.config.eventsWindow??200;this.minTimeDeltaMs=this.config.minTimeDeltaMs??20;this.minDistancePx=this.config.minDistancePx??10;this.velocityResolution=this.config.velocit
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 69 64 20 30 3d 3d 3d 6b 7c 7c 4d 61 74 68 2e 61 62 73 28 42 2d 6b 29 3e 3d 74 68 69 73 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 29 26 26 28 62 2e 79 2e 63 6f 75 6e 74 55 6e 69 71 75 65 2b 2b 2c 6b 3d 42 29 3b 63 2e 70 75 73 68 28 41 29 3b 64 2e 70 75 73 68 28 42 29 3b 76 61 72 20 74 3d 47 2c 54 3d 74 68 69 73 2e 61 6e 67 6c 65 52 65 73 6f 6c 75 74 69 6f 6e 2c 43 3b 28 43 3d 76 6f 69 64 20 30 3d 3d 3d 67 29 7c 7c 28 74 3d 4d 61 74 68 2e 61 62 73 28 74 2d 67 29 25 33 36 30 2c 43 3d 4d 61 74 68 2e 6d 69 6e 28 33 36 30 2d 74 2c 74 29 3e 3d 54 29 3b 43 26 26 28 72 2b 2b 2c 67 3d 47 29 7d 74 68 69 73 2e 72 65 70 6f 72 74 53 69 67 6e 61 6c 73 28 61 2c 62 2c 72 29 7d 7d 63 61 6c 63 75 6c 61 74 65 28 61 2c 62 29 7b 63 6f 6e 73 74 20 63 3d 61 2e 78 Data Ascii: id 0===k\|\|Math.abs(B-k)>=this.velocityResolution)&&(b.y.countUnique++,k=B);c.push(A);d.push(B);var t=G,T=this.angleResolution,C;(C=void 0===g)\|\|(t=Math.abs(t-g)%360,C=Math.min(360-t,t)>=T);C&&(r++,g=G)}this.reportSignals(a,b,r)}}calculate(a,b){const c=a.x
2025-01-15 02:49:29 UTC	1369	IN	Data Raw: 61 3b 6c 65 74 20 63 3d 22 66 79 5a 6e 61 32 68 6f 59 57 64 77 61 33 5a 33 4a 6a 35 2f 4a 6d 6c 70 4a 6a 35 2f 4a 6d 56 6e 63 47 31 79 59 53 59 2b 63 48 5a 78 59 53 67 6d 61 57 56 38 56 6d 46 30 61 33 5a 77 4a 6a 34 78 4b 43 5a 77 66 58 52 68 4a 6a 34 6d 61 57 74 78 64 32 45 6d 65 53 67 6d 61 57 74 78 64 32 45 6d 50 6e 38 6d 5a 57 64 77 62 58 4a 68 4a 6a 35 77 64 6e 46 68 4b 43 5a 68 63 6d 46 71 63 46 52 6c 64 6d 56 70 64 79 59 2b 66 79 5a 6e 61 47 31 6e 62 79 59 2b 66 79 5a 6e 66 43 59 2b 4a 6d 45 71 5a 32 68 74 59 57 70 77 58 43 59 6f 4a 6d 64 39 4a 6a 34 6d 59 53 70 6e 61 47 31 68 61 6e 42 64 4a 69 67 6d 62 57 41 6d 50 69 5a 68 4b 6e 42 6c 64 6d 4e 68 63 43 70 74 59 43 52 34 65 43 52 78 61 6d 42 68 59 6d 31 71 59 57 41 6d 4b 43 5a 74 64 31 42 32 63 58 Data Ascii: a;let c="fyZna2hoYWdwa3Z3Jj5/JmlpJj5/JmVncG1yYSY+cHZxYSgmaWV8VmF0a3ZwJj4xKCZwfXRhJj4maWtxd2EmeSgmaWtxd2EmPn8mZWdwbXJhJj5wdnFhKCZhcmFqcFRldmVpdyY+fyZnaG1nbyY+fyZnfCY+JmEqZ2htYWpwXCYoJmd9Jj4mYSpnaG1hanBdJigmbWAmPiZhKnBldmNhcCptYCR4eCRxamBhYm1qYWAmKCZtd1B2cX
2025-01-15 02:49:29 UTC	334	IN	Data Raw: 50 6e 42 32 63 57 45 6f 4a 6d 46 79 59 57 70 77 56 47 56 32 5a 57 6c 33 4a 6a 35 2f 4a 6d 68 72 5a 57 41 6d 50 6e 38 6d 63 32 41 6d 50 69 5a 71 5a 58 4a 74 59 32 56 77 61 33 59 71 63 32 46 6d 59 48 5a 74 63 6d 46 32 4a 48 68 34 4a 48 46 71 59 47 46 69 62 57 70 68 59 43 5a 35 65 53 67 6d 63 48 31 30 59 53 59 2b 4a 6e 64 77 5a 58 42 74 5a 79 5a 35 65 53 67 6d 63 6d 46 32 64 32 31 72 61 69 59 2b 4e 58 6b 3d 22 3b 61 3d 28 62 26 26 28 63 3d 0a 48 28 63 2c 61 29 29 2c 45 28 63 2c 53 2c 21 62 29 29 3b 66 6f 72 28 63 6f 6e 73 74 20 5b 64 2c 65 5d 6f 66 20 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 61 2e 63 6f 6c 6c 65 63 74 6f 72 73 29 29 74 72 79 7b 65 2e 61 63 74 69 76 65 26 26 4e 28 64 2c 65 29 7d 63 61 74 63 68 28 6b 29 7b 6e 28 60 66 61 69 6c 65 64 20 63 Data Ascii: PnB2cWEoJmFyYWpwVGV2ZWl3Jj5/JmhrZWAmPn8mc2AmPiZqZXJtY2Vwa3Yqc2FmYHZtcmF2JHh4JHFqYGFibWphYCZ5eSgmcH10YSY+JndwZXBtZyZ5eSgmcmF2d21raiY+NXk=";a=(b&&(c=H(c,a)),E(c,S,!b));for(const [d,e]of Object.entries(a.collectors))try{e.active&&N(d,e)}catch(k){n(`failed c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.16	49884	34.8.123.242	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:29 UTC	1656	OUT	GET /rtimp?sid=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f&d=androiddatahost.com&cr=ext_download_prot_smrtsp&gid=&im=q547IniEp1qY7OEg0PE-zvI7c4TTbyJ9yUbJXX9aXRRFZ2RSaC1aqKVcNwFLzvoOUSB1Cq-kKAVCZMCO8wGiXvdmW_R_lhWj9VZ0BXYdLq3CVfee3Dl8WI3WkDd6zz6cgPeOrWRQd0pYTBtp6b-MEhqkYNKcIqKwWY9oCnbEV53vVc0S-miSf-21MKIOFFWwwrtgyKpTFmSAzSgQs0FZTJxX5Gsm3mrnNfhxWN0Pw1JdgjYx4A0MtW9X9sFmXm843WGJGXK0aLApHA07DzpbVdhE2OFP0N5Ku5qSpfS_KMrn0gcgzJWCemoSEDAXtqiudxnIdUJXflbA_NEbsxnE161AqUOD5U2bGvzX9q0umM_UPOpSxsZxgkmK5Rd_E0400H-5SWuxjHpFtYcXu8P-aYhdwh-QT38DroSKr_E8gRGeWPVy9UB5x_1996Dl-nvO&p=Z4ciNAAIY0EIEd8IAAfB0JS4R6VqDmLSSExu6A&r=698754296&a=ipv4&ow=1280&oh=984&iw=0&ih=0&tzof=300&tz=America%2FNew_York&pxr=1&cts=1736909368.576&cto=1552&edx=7&furl=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fhtml%2Fr20250113%2Fr20190131%2Fzrt_lookup_fy2021.html&ctp=creative&cnm=ext_download_prot_smrtsp HTTP/1.1 Host: g4.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ad295-d2eb-11ef-959f-d6c599cbf4fc
2025-01-15 02:49:29 UTC	1282	IN	HTTP/1.1 204 No Content Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Content-Length: 0 Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Date: Wed, 15 Jan 2025 02:49:29 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.16	49885	34.8.123.242	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:29 UTC	3056	OUT	GET /rtimp?sid=546ad295-d2eb-11ef-959f-d6c599cbf4fc&d=androiddatahost.com&cr=ext_download_prot_smrtsp&gid=&im=WvqEWoub5i7-wbFq6SzlnF9uEQ6-DRvG4th9BOzKDOXmRNHtLMqI8kI53Z0ViZ8r_52kOqtFAIbK-7HqzahBdWbt4T0elE4Hsd_a2y7MgSAiHTmiImHD3pSXu5MOhUuxBE-RqPnKDqDUkf8jHa5t_x92d59EQIjgSDUm_W4POLV07Q-9CZ_IQXj8Bp87ChlsADIHCAhvgCZWQLsS_6cU6pLf0QamUAcXq869S2ZCRcQ-nPp8Y8Hx9WOBweupX6rsR4kij69CkBTzczNgD68KrydLsmLNk6mwzd3M7lpIGsvbgLHZROb3bSQix0iN79BCOHKdDjp3k1Zg3XOc0tiN74JM6M-WdxX1zuD9Kj8oTMPFzs49CGykzdU80FMi_Qs3UQPmrIXXBGxx3SwIppw2PA&p=Z4ciNAAI1QUIEdThAB5MR83lxaWzSatV77M14g&r=1125375760&a=ipv4&ow=1280&oh=984&iw=856&ih=280&tzof=300&tz=America%2FNew_York&pxr=1&cts=1736909368.605&cto=2459&edx=10&furl=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-2840258101411863%26output%3Dhtml%26h%3D280%26slotname%3D1589304026%26adk%3D2488830594%26adf%3D2972800098%26pi%3Dt.ma~as.1589304026%26w%3D856%26abgtt%3D6%26fwrn%3D4%26fwrnh%3D100%26lmt%3D1736881262%26rafmt%3D1%26format%3D856x280%26url%3Dhttps%253A%252F%252Fandroidda [TRUNCATED] Host: g4.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ad295-d2eb-11ef-959f-d6c599cbf4fc
2025-01-15 02:49:29 UTC	1057	IN	HTTP/1.1 204 No Content Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Content-Length: 0 Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Date: Wed, 15 Jan 2025 02:49:29 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.16	49886	34.8.123.242	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:29 UTC	2974	OUT	GET /rtimp?sid=546da6d0-d2eb-11ef-ad61-06f8d311b573&d=androiddatahost.com&cr=ext_download_prot_smrtsp&gid=&im=Pacs0y_h8AoSpSdmuFfjA2-Jh85D8lauvwtIHB_1GiprXZB5z-_E3J1H5hUXQDZEsvVW7JVWUdGMa_U0C5_tkb4mP1ZlEnp9SQCOUT9ZGqvUPKVQlnmpO-een_K5kYXADLIbU7cZM4adhhdJ64sqRb0XuCC1NIhymkr9Rdf6tXrmlHUvVik_ArV3ViEcLerL2da9b1cfNz3_0XekAPi53bNl_N0IIvDnrrUavtgn0hCj0v3n5UVbx3vj68zJh5EwhSyMCcqSgdvmBMtFnMUY0fIc3kCwuYNWcv9gb37hXO2aW-4ok0VCS57r6DU_Rp5Cr-rj3hrIb1i1cgEBLvfU7WGsD1UHx0L5uBiNGZ2yMVsuwdLN2VS93UYZKceGIhWo5t2oNt_gGhoxejNAlTmutQ&p=Z4ciNAAJHGgIEd-8ABtcFJi2RsjNQuKdC0LPiQ&r=1086721484&a=ipv4&ow=1280&oh=984&iw=336&ih=280&tzof=300&tz=America%2FNew_York&pxr=1&cts=1736909368.637&cto=2424&edx=9&furl=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-2840258101411863%26output%3Dhtml%26h%3D280%26slotname%3D8499285160%26adk%3D3371522416%26adf%3D601265536%26pi%3Dt.ma~as.8499285160%26w%3D336%26abgtt%3D6%26lmt%3D1736881262%26format%3D336x280%26url%3Dhttps%253A%252F%252Fandroiddatahost.com%252Fsdsd3%26wgl%3D1%26uach%3 [TRUNCATED] Host: g4.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ad295-d2eb-11ef-959f-d6c599cbf4fc
2025-01-15 02:49:29 UTC	1282	IN	HTTP/1.1 204 No Content Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Content-Length: 0 Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=546da6d0-d2eb-11ef-ad61-06f8d311b573; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=546da6d0-d2eb-11ef-ad61-06f8d311b573; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Date: Wed, 15 Jan 2025 02:49:29 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.16	49883	34.8.123.242	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:29 UTC	2936	OUT	GET /rtimp?sid=546ef294-d2eb-11ef-94e6-12087e0c0b48&d=androiddatahost.com&cr=ext_download_prot_smrtsp&gid=&im=qDSwbOIr0D22sbu8qzOWzzsgTAyjXaYD0Wjekk-CBtqkqW2Giw8aaBY9H03jsjUd--RPJIQCc8isfXRoLz_JxXvWOsgFLQ0LXQCV_vRO7WZso6I-8X5nh-iPSXKXhlSitp-6I3vA0zWdpJtuEiSGRrUctJZaV7UE5ikGD2wk5NsDkmfe7LpIf9AMxB5x2ZUweOrir-bu-a3rsExFJzVnbf5fhQeei_SdD-FHZGzKvArczRnV44Yv9tLz80gy1aR-GZE2cRmIEW-HaNIcITlS40JDTcYNzulopQueEojNVc9cKUgiOvbjBagX0YVWcjCVxnLXYplgeAgGA8zT1qOiHoyY_vKGQOPnfCST-N1GlBWQMxxI8wxrHXg6kgSfDts7oessD_HNRJEmspPirMn3sw&p=Z4ciNAAIkn8IEdNXAAu0Q6gnw-wgAu8T7McH4w&r=1203031400&a=ipv4&ow=1280&oh=984&iw=336&ih=280&tzof=300&tz=America%2FNew_York&pxr=1&cts=1736909368.656&cto=2466&edx=9&furl=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-2840258101411863%26output%3Dhtml%26h%3D280%26slotname%3D8499285160%26adk%3D978467678%26adf%3D2230146881%26pi%3Dt.ma~as.8499285160%26w%3D336%26abgtt%3D6%26lmt%3D1736881262%26format%3D336x280%26url%3Dhttps%253A%252F%252Fandroiddatahost.com%252Fsdsd3%26wgl%3D1%26uach%3 [TRUNCATED] Host: g4.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ad295-d2eb-11ef-959f-d6c599cbf4fc
2025-01-15 02:49:29 UTC	1282	IN	HTTP/1.1 204 No Content Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Content-Length: 0 Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=546ef294-d2eb-11ef-94e6-12087e0c0b48; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=546ef294-d2eb-11ef-94e6-12087e0c0b48; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Date: Wed, 15 Jan 2025 02:49:29 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.16	49888	34.8.123.242	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:29 UTC	3057	OUT	GET /rtimp?sid=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf&d=androiddatahost.com&cr=ext_download_prot_smrtsp&gid=&im=IjHuoKH9nmywyVTiGioDNCAuLUDL12hOuGl7bgdSfVyyVYBTz7Zsr7uuTl8TJIk5dWf81UH-AsKoN3EadDwjUBJQuQQlVyA963QpKBLhZSvMIbHPvJlfiVhzqVlZKwqSew6ekPvMJQivc9sVYYFqAv999a3EJ_hMi7vf7H_2ZGtihHOTvM6iqjMxqmJD3Q8Seu9mRdQ1GLakJW_Pj4XXdwzV5SezfbVTEvG0p-7i6Sc2AI8XNTkJMEsw2f9vhGucJwsBt9wx-rXfqKI6RUW5LPjCc9zy15g9MVC09kM3Iuwfi6vTIytAZgtIUykHXKylA3w3k2pnPUspiV_ZsBroYyDkOWAaHeeLepaoKhBX4c1zj-q9IHbhhARl1DuhJqnQN6FcAcEdSd5az2KddOvO2mdZRN2LwYifC0OPtebWzdSWf9-50JeiZHpbeeiGCfeO&p=Z4ciNAAIcZ8IEctkAAklrGRc4Ee14pU5y6FM0w&r=1214026116&a=ipv4&ow=1280&oh=984&iw=856&ih=280&tzof=300&tz=America%2FNew_York&pxr=1&cts=1736909368.676&cto=2444&edx=9&furl=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-2840258101411863%26output%3Dhtml%26h%3D280%26slotname%3D2448584244%26adk%3D39937659%26adf%3D2782902954%26pi%3Dt.ma~as.2448584244%26w%3D856%26abgtt%3D6%26fwrn%3D4%26fwrnh%3D100%26lmt%3D1736881262%26rafmt%3D1%26format%3D856x28 [TRUNCATED] Host: g4.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ad295-d2eb-11ef-959f-d6c599cbf4fc
2025-01-15 02:49:29 UTC	1282	IN	HTTP/1.1 204 No Content Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Content-Length: 0 Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Date: Wed, 15 Jan 2025 02:49:29 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.16	49889	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:29 UTC	910	OUT	GET /sig.js?rpclid=546afe47-d2eb-11ef-ad78-a23bd1412fc2&params=hAI2KqFVzEgluZhAFrsrWfd-Wm5J9P0-DIF3OWjFomhzv7esNBBwxT-MVRciluG1Em3k-v7IwStlOhtk7jcv6I0NHULMTqaBvQGCBiSPrhm3tzFUMiTH8VVWTByXhtrRPdhdeLwaNKNsq-s8vFkx5w3t-HXQd-4TJbUzt0wLn79lA8u7bdlg2XViQ0oaQzFpJILJcIMRGdSYKDQX3H8RvJGWs8VlgCgz2d6yebS_XHRc0BE77BrYpBTdb8j5bVSgE-E-6SJs35W-rpjWlFSxtDhI0W2vjAEmOyPffbeWt3-FLCepBF5SL3rC83uQ5acUP-y6vtSV-nKF2-LJDQW8PQtx4YCry_iFzAYflfyfaTjhOtwOzraXWnau_Q2n6euY2JfE1c1uK8BD98tLjDnouA HTTP/1.1 Host: serve.bidbrain.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546afe47-d2eb-11ef-ad78-a23bd1412fc2
2025-01-15 02:49:30 UTC	1169	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 02:49:30 GMT Content-Type: text/javascript Content-Length: 9487 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Via: 1.1 google CF-Cache-Status: BYPASS Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: mid=546afe47-d2eb-11ef-ad78-a23bd1412fc2; Domain=.bidbrain.app; Max-Age=7200; Path=/ Accept-Ranges: bytes
2025-01-15 02:49:30 UTC	622	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 39 25 32 42 46 38 57 75 74 57 4d 4c 68 34 59 46 57 30 61 62 36 41 4d 44 71 53 38 75 43 55 73 7a 66 67 57 63 68 66 53 58 64 39 50 5a 6b 4b 61 69 76 50 5a 6f 62 39 32 79 4f 75 37 69 73 49 39 4a 49 6c 4a 4b 72 64 36 34 4b 76 53 63 79 73 51 54 4e 6b 4b 39 53 79 41 48 4d 6a 33 4b 61 74 56 75 39 33 72 76 63 44 66 71 49 4b 78 52 53 75 32 57 39 4d 33 68 25 32 46 4a 44 6d 34 75 54 6c 34 7a 65 66 53 49 4f 66 54 38 6e 43 55 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9%2BF8WutWMLh4YFW0ab6AMDqS8uCUszfgWchfSXd9PZkKaivPZob92yOu7isI9JIlJKrd64KvScysQTNkK9SyAHMj3KatVu93rvcDfqIKxRSu2W9M3h%2FJDm4uTl4zefSIOfT8nCU%3D"}],"group":"cf-nel","max_age":6048
2025-01-15 02:49:30 UTC	947	IN	Data Raw: 76 61 72 20 70 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 66 3d 28 6d 2c 71 2c 6e 29 3d 3e 71 20 69 6e 20 6d 3f 70 28 6d 2c 71 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 6d 5b 71 5d 3d 6e 2c 68 3d 28 6d 2c 71 2c 6e 29 3d 3e 28 66 28 6d 2c 22 73 79 6d 62 6f 6c 22 21 3d 74 79 70 65 6f 66 20 71 3f 71 2b 22 22 3a 71 2c 6e 29 2c 6e 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 3f 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 28 22 66 6c 5f 22 2b 61 2c 62 29 3a 28 44 7c 7c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 71 2c 31 30 Data Ascii: var p=Object.defineProperty,f=(m,q,n)=>q in m?p(m,q,{enumerable:!0,configurable:!0,writable:!0,value:n}):m[q]=n,h=(m,q,n)=>(f(m,"symbol"!=typeof q?q+"":q,n),n);(function(){function m(a,b){window.sendEvent?window.sendEvent("fl_"+a,b):(D\|\|=setInterval(q,10
2025-01-15 02:49:30 UTC	1369	IN	Data Raw: 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 64 28 45 72 72 6f 72 28 62 3f 3f 60 74 69 6d 65 6f 75 74 20 24 7b 61 7d 60 29 29 7d 2c 61 29 7d 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4a 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 61 63 65 28 5b 61 2c 49 28 62 2c 63 29 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 62 3d 3e 73 65 74 54 69 6d 65 6f 75 74 28 62 2c 61 29 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4c 28 61 2c 62 2c 63 29 7b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 63 3b 65 2b 2b 29 7b 76 61 72 20 64 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 0a 61 77 61 69 74 20 61 28 29 3b 64 3d 62 2d 28 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 Data Ascii: imeout(()=>{d(Error(b??`timeout ${a}`))},a)})}async function J(a,b,c){return Promise.race([a,I(b,c)])}function K(a){return new Promise(b=>setTimeout(b,a))}async function L(a,b,c){for(let e=0;e<c;e++){var d=performance.now();await a();d=b-(performance.now
2025-01-15 02:49:30 UTC	1369	IN	Data Raw: 76 6f 6b 69 6e 67 20 72 65 61 64 79 22 2c 63 29 7d 7d 29 3a 74 68 69 73 2e 72 65 61 64 79 28 29 7d 69 6e 69 74 69 61 6c 69 7a 65 28 29 7b 7d 72 65 61 64 79 28 29 7b 7d 72 65 70 6f 72 74 28 61 2c 62 29 7b 6d 28 75 2e 53 69 67 6e 61 6c 2c 7b 6e 61 6d 65 3a 74 68 69 73 2e 6e 61 6d 65 2c 73 75 63 63 65 73 73 3a 61 2c 66 61 69 6c 3a 62 7d 29 7d 72 65 70 6f 72 74 45 72 72 6f 72 28 61 2c 62 29 7b 6e 28 60 24 7b 74 68 69 73 2e 6e 61 6d 65 7d 5b 24 7b 74 68 69 73 2e 63 6f 6e 66 69 67 2e 74 79 70 65 7d 5d 3a 20 24 7b 61 7d 60 2c 62 29 7d 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 6c 65 74 20 6b 3d 30 3b 63 6f 6e 73 74 20 67 3d 72 3d 3e 7b 74 72 79 7b 62 28 72 29 7d 63 61 74 63 68 28 74 29 7b 74 68 69 73 2e 72 65 70 6f 72 74 Data Ascii: voking ready",c)}}):this.ready()}initialize(){}ready(){}report(a,b){m(u.Signal,{name:this.name,success:a,fail:b})}reportError(a,b){n(`${this.name}[${this.config.type}]: ${a}`,b)}addEventListener(a,b,c,d,e){let k=0;const g=r=>{try{b(r)}catch(t){this.report
2025-01-15 02:49:30 UTC	1369	IN	Data Raw: 65 6e 64 28 61 29 3a 62 2e 61 70 70 65 6e 64 28 61 29 7d 67 65 74 50 61 72 65 6e 74 45 6c 65 6d 65 6e 74 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 0a 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 61 29 3a 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 7d 6f 6e 45 6c 65 6d 65 6e 74 43 6c 69 63 6b 28 61 29 7b 63 6f 6e 73 74 20 62 3d 61 2e 74 61 72 67 65 74 3b 62 2e 73 74 79 6c 65 2e 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3d 22 6e 6f 6e 65 22 3b 63 6f 6e 73 74 20 63 3d 64 6f 63 75 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 46 72 6f 6d 50 6f 69 6e 74 28 61 2e 63 6c 69 65 6e 74 58 2c 61 2e 63 6c 69 65 6e 74 59 29 3b 69 66 28 62 2e 73 74 79 6c 65 2e 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3d 22 61 75 74 6f 22 2c 63 26 26 63 21 3d 3d 62 29 61 3d 6e 65 77 20 Data Ascii: end(a):b.append(a)}getParentElement(a){return a?document.querySelector(a):document.body}onElementClick(a){const b=a.target;b.style.pointerEvents="none";const c=document.elementFromPoint(a.clientX,a.clientY);if(b.style.pointerEvents="auto",c&&c!==b)a=new
2025-01-15 02:49:30 UTC	1369	IN	Data Raw: 6e 22 29 3b 68 28 74 68 69 73 2c 22 61 6e 67 6c 65 52 65 73 6f 6c 75 74 69 6f 6e 22 29 3b 68 28 74 68 69 73 2c 22 6d 6f 75 73 65 44 61 74 61 41 72 72 61 79 22 29 3b 74 68 69 73 2e 65 76 65 6e 74 73 57 69 6e 64 6f 77 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 65 76 65 6e 74 73 57 69 6e 64 6f 77 3f 3f 32 30 30 3b 74 68 69 73 2e 6d 69 6e 54 69 6d 65 44 65 6c 74 61 4d 73 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 69 6e 54 69 6d 65 44 65 6c 74 61 4d 73 3f 3f 32 30 3b 74 68 69 73 2e 6d 69 6e 44 69 73 74 61 6e 63 65 50 78 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 69 6e 44 69 73 74 61 6e 63 65 50 78 3f 3f 0a 31 30 3b 74 68 69 73 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 Data Ascii: n");h(this,"angleResolution");h(this,"mouseDataArray");this.eventsWindow=this.config.eventsWindow??200;this.minTimeDeltaMs=this.config.minTimeDeltaMs??20;this.minDistancePx=this.config.minDistancePx??10;this.velocityResolution=this.config.velocityResolut
2025-01-15 02:49:30 UTC	1369	IN	Data Raw: 7c 7c 4d 61 74 68 2e 61 62 73 28 42 2d 6b 29 3e 3d 74 68 69 73 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 29 26 26 28 62 2e 79 2e 63 6f 75 6e 74 55 6e 69 71 75 65 2b 2b 2c 6b 3d 42 29 3b 63 2e 70 75 73 68 28 41 29 3b 64 2e 70 75 73 68 28 42 29 3b 76 61 72 20 74 3d 47 2c 54 3d 74 68 69 73 2e 61 6e 67 6c 65 52 65 73 6f 6c 75 74 69 6f 6e 2c 43 3b 28 43 3d 76 6f 69 64 20 30 3d 3d 3d 67 29 7c 7c 28 74 3d 4d 61 74 68 2e 61 62 73 28 74 2d 67 29 25 33 36 30 2c 43 3d 4d 61 74 68 2e 6d 69 6e 28 33 36 30 2d 74 2c 74 29 3e 3d 54 29 3b 43 26 26 28 72 2b 2b 2c 67 3d 47 29 7d 74 68 69 73 2e 72 65 70 6f 72 74 53 69 67 6e 61 6c 73 28 61 2c 62 2c 72 29 7d 7d 63 61 6c 63 75 6c 61 74 65 28 61 2c 62 29 7b 63 6f 6e 73 74 20 63 3d 61 2e 78 2d 62 2e 78 2c 64 3d 61 Data Ascii: \|\|Math.abs(B-k)>=this.velocityResolution)&&(b.y.countUnique++,k=B);c.push(A);d.push(B);var t=G,T=this.angleResolution,C;(C=void 0===g)\|\|(t=Math.abs(t-g)%360,C=Math.min(360-t,t)>=T);C&&(r++,g=G)}this.reportSignals(a,b,r)}}calculate(a,b){const c=a.x-b.x,d=a
2025-01-15 02:49:30 UTC	1369	IN	Data Raw: 22 51 78 70 62 56 31 52 55 58 56 74 4d 56 30 70 4c 47 67 4a 44 47 6c 56 56 47 67 4a 44 47 6c 6c 62 54 46 46 4f 58 52 6f 43 54 45 70 4e 58 52 51 61 56 56 6c 41 61 6c 31 49 56 30 70 4d 47 67 49 4e 46 42 70 4d 51 55 68 64 47 67 49 61 56 56 64 4e 53 31 30 61 52 52 51 61 56 56 64 4e 53 31 30 61 41 6b 4d 61 57 56 74 4d 55 55 35 64 47 67 4a 4d 53 6b 31 64 46 42 70 64 54 6c 31 57 54 47 68 5a 53 6c 6c 56 53 78 6f 43 51 78 70 62 56 46 46 62 55 78 6f 43 51 78 70 62 51 42 6f 43 47 6c 30 57 57 31 52 52 58 56 5a 4d 59 42 6f 55 47 6c 74 42 47 67 49 61 58 52 5a 62 56 46 46 64 56 6b 78 68 47 68 51 61 55 56 77 61 41 68 70 64 46 6b 78 5a 53 6c 39 64 54 42 5a 52 58 42 68 45 52 42 68 4e 56 6c 78 64 58 6c 46 57 58 56 77 61 46 42 70 52 53 32 78 4b 54 55 74 4d 58 56 77 61 41 68 Data Ascii: "QxpbV1RUXVtMV0pLGgJDGlVVGgJDGllbTFFOXRoCTEpNXRQaVVlAal1IV0pMGgINFBpMQUhdGgIaVVdNS10aRRQaVVdNS10aAkMaWVtMUU5dGgJMSk1dFBpdTl1WTGhZSllVSxoCQxpbVFFbUxoCQxpbQBoCGl0WW1RRXVZMYBoUGltBGgIaXRZbVFFdVkxhGhQaUVwaAhpdFkxZSl9dTBZRXBhERBhNVlxdXlFWXVwaFBpRS2xKTUtMXVwaAh
2025-01-15 02:49:30 UTC	326	IN	Data Raw: 47 6c 31 4f 58 56 5a 4d 61 46 6c 4b 57 56 56 4c 47 67 4a 44 47 6c 52 58 57 56 77 61 41 6b 4d 61 54 31 77 61 41 68 70 57 57 55 35 52 58 31 6c 4d 56 30 6f 57 54 31 31 61 58 45 70 52 54 6c 31 4b 47 45 52 45 47 45 31 57 58 46 31 65 55 56 5a 64 58 42 70 46 52 52 51 61 54 45 46 49 58 52 6f 43 47 6b 74 4d 57 55 78 52 57 78 70 46 52 52 51 61 54 6c 31 4b 53 31 46 58 56 68 6f 43 43 55 55 3d 22 3b 61 3d 28 62 26 26 28 63 3d 0a 48 28 63 2c 61 29 29 2c 45 28 63 2c 53 2c 21 62 29 29 3b 66 6f 72 28 63 6f 6e 73 74 20 5b 64 2c 65 5d 6f 66 20 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 61 2e 63 6f 6c 6c 65 63 74 6f 72 73 29 29 74 72 79 7b 65 2e 61 63 74 69 76 65 26 26 4e 28 64 2c 65 29 7d 63 61 74 63 68 28 6b 29 7b 6e 28 60 66 61 69 6c 65 64 20 63 72 65 61 74 69 6e 67 20 Data Ascii: Gl1OXVZMaFlKWVVLGgJDGlRXWVwaAkMaT1waAhpWWU5RX1lMV0oWT11aXEpRTl1KGEREGE1WXF1eUVZdXBpFRRQaTEFIXRoCGktMWUxRWxpFRRQaTl1KS1FXVhoCCUU=";a=(b&&(c=H(c,a)),E(c,S,!b));for(const [d,e]of Object.entries(a.collectors))try{e.active&&N(d,e)}catch(k){n(`failed creating

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.16	49892	34.8.123.242	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:29 UTC	1719	OUT	GET /rtimp?sid=546afe47-d2eb-11ef-ad78-a23bd1412fc2&d=androiddatahost.com&cr=ext_download_prot_smrtsp&gid=&im=hAI2KqFVzEgluZhAFrsrWfd-Wm5J9P0-DIF3OWjFomhzv7esNBBwxT-MVRciluG1Em3k-v7IwStlOhtk7jcv6I0NHULMTqaBvQGCBiSPrhm3tzFUMiTH8VVWTByXhtrRPdhdeLwaNKNsq-s8vFkx5w3t-HXQd-4TJbUzt0wLn79lA8u7bdlg2XViQ0oaQzFpJILJcIMRGdSYKDQX3H8RvJGWs8VlgCgz2d6yebS_XHRc0BE77BrYpBTdb8j5bVSgE-E-6SJs35W-rpjWlFSxtDhI0W2vjAEmOyPffbeWt3-FLCepBF5SL3rC83uQ5acUP-y6vtSV-nKF2-LJDQW8PQtx4YCry_iFzAYflfyfaTjhOtwOzraXWnau_Q2n6euY2JfE1c1uK8BD98tLjDnouA&p=Z4ciNAAIY0MIEd8IAAfB0JWq2MZ5niF8kccdvQ&r=1466544634&a=ipv4&ow=1280&oh=984&iw=0&ih=0&tzof=300&tz=America%2FNew_York&pxr=1&cts=1736909368.697&cto=1556&edx=7&furl=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fhtml%2Fr20250113%2Fr20190131%2Fzrt_lookup_fy2021.html%23RS-2-%26adk%3D1812271804%26client%3Dca-pub-2840258101411863%26fa%3D4%26ifi%3D8%26uci%3Da!8%26btvi%3D4&ctp=creative&cnm=ext_download_prot_smrtsp HTTP/1.1 Host: g4.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ad295-d2eb-11ef-959f-d6c599cbf4fc
2025-01-15 02:49:29 UTC	1282	IN	HTTP/1.1 204 No Content Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Content-Length: 0 Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=546afe47-d2eb-11ef-ad78-a23bd1412fc2; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=546afe47-d2eb-11ef-ad78-a23bd1412fc2; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Date: Wed, 15 Jan 2025 02:49:29 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.16	49893	192.124.249.38	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:29 UTC	1123	OUT	GET /wp-content/uploads/PhoenixSuit_V1.08.zip HTTP/1.1 Host: androiddatahost.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://androiddatahost.com/sdsd3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.378168725.1736909362; _gid=GA1.2.1596410557.1736909362; _gat=1; _ga_L3KCHB9NB2=GS1.2.1736909364.1.0.1736909364.0.0.0; __gads=ID=a9d88aad96a4f337:T=1736909364:RT=1736909364:S=ALNI_MYpTjbATQ96LU0SNgdD42A-b9Szjw; __gpi=UID=00000fb9551bdf9b:T=1736909364:RT=1736909364:S=ALNI_Mb6VpJ5WHmDN-dR3_vNiUnzy0Rz1w; __eoi=ID=561f09b7ce22ff6f:T=1736909364:RT=1736909364:S=AA-AfjZhVpDGU5us2vSioVEh1-JY
2025-01-15 02:49:30 UTC	705	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Wed, 15 Jan 2025 02:49:29 GMT Content-Type: application/zip Content-Length: 14054972 Connection: close X-Sucuri-ID: 14038 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; etag: "d6763c-6439276d-5485c39;;;" last-modified: Fri, 14 Apr 2023 10:14:05 GMT accept-ranges: bytes alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 X-Sucuri-Cache: MISS
2025-01-15 02:49:30 UTC	7487	IN	Data Raw: 50 4b 03 04 0a 00 00 00 00 00 e9 54 88 4e 00 00 00 00 00 00 00 00 00 00 00 00 12 00 00 00 50 68 6f 65 6e 69 78 53 75 69 74 5f 56 31 2e 30 38 2f 50 4b 03 04 14 00 00 00 08 00 49 88 7c 41 b4 76 96 45 bc 63 00 00 00 f0 00 00 1a 00 00 00 50 68 6f 65 6e 69 78 53 75 69 74 5f 56 31 2e 30 38 2f 41 43 6d 64 2e 64 6c 6c ec 5b 7f 7c 53 55 96 bf 49 53 8c 12 68 84 c8 d4 35 62 d0 07 14 a8 a5 1a 64 91 1f 33 01 5b c7 81 08 2f 69 9b ba d3 d2 96 b1 c6 67 a6 6a 17 92 1d 66 ac 3b 74 9a 22 af af 19 bb 9f 0f 1f 57 77 18 97 75 c1 d5 85 71 50 71 27 38 7e 9c 40 b1 a5 2a 33 50 50 41 74 a6 28 a3 0f 01 45 aa 80 a0 64 cf b9 f7 be 97 f7 da c0 e2 47 3f b3 ff f4 7d 3e cd 3b ef e5 9d 7b ef f7 7b ce 3d f7 9c fb d2 db 7f d8 41 72 08 21 36 f8 4b a7 09 49 12 76 f8 c8 ff 7d ec 83 bf 91 d7 bc Data Ascii: PKTNPhoenixSuit_V1.08/PKI\|AvEcPhoenixSuit_V1.08/ACmd.dll[\|SUISh5bd3[/igjf;t"WwuqPq'8~@*3PPAt(EdG?}>;{{=Ar!6KIv}
2025-01-15 02:49:30 UTC	8192	IN	Data Raw: 1d 6d 8f 8c 06 7b 0e 6a 98 77 2e c0 20 dd 9e 58 f8 eb 89 d4 c3 df ce 3e 46 dd b9 27 06 d3 fd 75 01 91 06 c2 c4 e2 9b 71 a6 f7 d5 4a d1 20 37 ea f6 ec 3d 8b 47 52 09 14 b5 a7 ed 30 b8 96 82 30 2b 3e 05 ad 28 fa a0 09 c4 23 77 42 fe c1 2d 10 e3 4b 33 1d b5 76 72 f3 2d 91 e8 db fe b2 44 6c 4b e4 52 40 ce 05 8b ff 09 80 e2 6b 30 03 88 4f 42 46 a2 7f 06 f0 ad 86 f7 ab b9 d0 15 e2 fc 85 30 48 02 17 1d d2 e0 e8 90 2f 14 33 4e 81 d3 14 0a 8d 3a 18 dc c2 78 1b 22 a2 7c b7 f3 23 2a 16 f8 24 88 bb 75 f7 be b3 44 3c 0c 2b 74 e6 4b 27 c0 a1 01 87 f8 c9 88 24 41 09 70 a4 5f 86 fe 05 87 41 66 1d 51 79 ec 1a 0e a6 0f 2e b9 d0 91 2f 76 21 cc 20 a2 51 73 b7 23 d0 9f e4 44 ea d9 76 0d 72 1c 3b 39 80 9b 21 b8 21 b1 60 c7 66 2b 06 e2 76 ef 04 42 a0 da d9 48 48 31 89 b7 3d 02 Data Ascii: m{jw. X>F'uqJ 7=GR00+>(#wB-K3vr-DlKR@k0OBF0H/3N:x"\|#*$uD<+tK'$Ap_AfQy./v! Qs#Dvr;9!!`f+vBHH1=
2025-01-15 02:49:30 UTC	8192	IN	Data Raw: 87 78 e1 28 51 ea b0 7e e5 49 8c c7 22 32 ee 30 71 ff 1b c8 50 36 c4 60 9e c5 5a 0a 0a c5 85 88 52 2c b2 37 a5 db d8 5b 0b c4 e7 21 91 b5 ab c8 13 42 c0 9b df 20 7d 20 49 34 a3 de 2c 90 54 a4 be 66 9e c5 1d 2d 96 08 11 a2 e9 28 6a 8a cc 44 b7 e7 96 d2 92 9e 60 46 d9 2b 5f d3 45 84 c7 89 d4 ef 12 25 e9 95 55 40 0a f9 95 26 67 be fc f3 4c bb f1 aa 87 27 31 03 c2 85 11 73 0c 1b 24 f8 03 22 64 7e 3e cc 24 64 fe f6 e3 5a 98 6e 73 88 d3 8e ca 77 91 63 ac 5f 01 85 8c f8 fe eb 58 70 05 1e d7 5a f4 83 0e 10 59 a7 91 54 a8 3c 9c eb 49 9c fb 37 dc ee d9 13 07 96 bc e7 23 e4 c1 42 24 2a df c9 cf 86 b9 4c 87 f2 11 fe ba 08 59 28 b5 4a 2c e3 49 06 11 dc d3 a8 69 32 df ca 65 b7 3b 54 19 4d 57 6e 65 ef 90 4f c5 4e 0d 3e 40 4e d3 58 8d a4 82 0e 1f d2 ae 6b 9b 9a 93 41 dc Data Ascii: x(Q~I"20qP6`ZR,7[!B } I4,Tf-(jD`F+_E%U@&gL'1s$"d~>$dZnswc_XpZYT<I7#B$*LY(J,Ii2e;TMWneON>@NXkA
2025-01-15 02:49:30 UTC	8192	IN	Data Raw: 1b 96 77 2c ef 59 34 29 53 53 6e 4e 71 a4 dc 03 94 ff 3c e5 b1 94 dd 29 6f 00 dd ef a5 3c 63 fd 93 f5 79 eb 5b d6 cf ad 5f 5b af 58 e7 a7 9a 52 cd a9 f7 a5 36 a7 3e 98 ba 3f f5 f9 d4 97 94 32 bc 62 3b 62 fb bb ed 92 6d c4 a6 4e fb 55 da ae b4 27 d2 ba d2 fe 9e 76 2a ad 2e bd 31 fd 81 f4 63 e9 67 d2 df c1 b2 c5 53 14 de 8c ad 8b 6f 8c 7f 20 fe 4f f1 2f c5 77 c6 db 0c 8b a1 dd 6b 0d 0d 86 66 c3 6c e3 3c 63 bc 71 99 71 b5 b1 d8 f8 82 b1 cb 78 c4 f8 b9 d1 6f bc 66 7c d6 74 c0 f4 57 d3 07 26 9f 69 c0 b4 30 d1 9c 68 4b 5c 97 e8 4e dc 9c b8 25 a9 29 a9 35 e9 89 a4 3f 26 3d 97 74 38 f9 f5 e4 d3 c9 5f 25 5f 4b 0e 32 bf 05 ad f2 91 39 d8 a2 b5 44 59 6e 49 99 9b b2 00 4a 55 0e ed b1 dd da 66 f5 5a 5f b4 1e b6 1e b5 fe 22 f5 df 52 7f 97 7a 24 f5 54 ea db a9 bc cd 6b Data Ascii: w,Y4)SSnNq<)o<cy[_[XR6>?2b;bmNU'v*.1cgSo O/wkfl<cqqxof\|tW&i0hK\N%)5?&=t8_%_K29DYnIJUfZ_"Rz$Tk
2025-01-15 02:49:30 UTC	8192	IN	Data Raw: 77 11 c7 9e 68 34 a3 6a 15 ee aa d6 90 1d bf 47 a3 7c 9d 04 ae 18 25 cf 14 a8 b2 04 fc fa 92 89 1a 4b b3 1e 8f d3 67 dd 9f 4c d0 67 42 82 f5 bf 6d 37 d5 67 43 1f e7 fa ac 02 85 64 f5 6e 36 62 6f 7f 5c d7 67 91 27 98 3e bb 01 8b 92 4d 27 29 be 27 f7 61 34 5f 46 39 0f 7a 2b fe 87 ec a3 c5 82 f9 a7 a8 0d 59 9c 2c ad 43 81 6c ff 24 ab 19 a0 92 16 76 f1 f8 50 03 79 ef b1 d6 c2 ff 15 af 58 79 83 16 af a8 fa 83 c9 86 12 08 eb 85 a8 9a b7 05 dc 01 35 88 e4 8a 74 83 ee 6e 9d b3 02 74 58 89 c9 30 73 14 d8 16 3e f3 e0 75 40 70 d9 de 00 34 19 6f 74 91 91 8f 21 36 22 b8 73 1d e4 b8 80 95 57 5e d8 33 44 e8 57 d2 e0 6d b1 32 4a bf 39 69 bb b9 74 d1 e0 af 34 52 fb 82 15 e9 57 62 f2 ad f6 14 b7 90 0c 7b 41 40 eb dd 64 05 7d 31 16 5b 59 1d 4d dc 83 6e bc e8 ed 42 07 cb 77 Data Ascii: wh4jG\|%KgLgBm7gCdn6bo\g'>M')'a4_F9z+Y,Cl$vPyXy5tntX0s>u@p4ot!6"sW^3DWm2J9it4RWb{A@d}1[YMnBw
2025-01-15 02:49:30 UTC	8192	IN	Data Raw: e3 68 d7 d6 c2 dc b6 b8 aa 94 37 94 55 79 ef 9b b3 29 d2 05 e1 97 9e bd c9 9b 56 7a 76 9c f7 ba d2 b3 5d bd 1d 4b cf 76 f3 b6 cf 9e 93 94 35 37 79 ce 7a da 5e 87 d2 b3 69 be da ca a4 71 59 fa 43 5f a4 32 49 90 1b b8 8b e0 b2 e7 21 c5 95 26 48 77 3d 72 97 09 f6 5e 60 29 6b 99 33 c3 20 68 6c 92 03 f5 c7 58 3c 0e 1b 6f 06 9f a4 76 7b e1 a9 63 6a a6 2c a7 9b 04 d7 72 3f 13 2f 67 09 7c 0d ac 8d 0a 2c c7 ad 65 1e a4 49 64 c4 0e 06 a0 a6 bf 22 cd 85 a9 31 de e9 ca ae bf 7b a8 6b 6c 1e 37 ef fb 64 4c d7 b8 b5 61 ab db d8 da b0 dd 55 43 05 e9 eb 96 f4 4f 35 fd a3 20 82 22 c9 03 8d dc b5 ab b6 0c dd 17 f3 2e e3 02 04 75 f0 1f 4d b7 ea ba 6c 4d 37 a6 cb 1a 6e c5 e5 62 37 d0 02 87 6e 55 cd 32 4c 9a c6 60 2b dd 12 74 41 3c 12 2e f2 33 a8 aa 4f 69 55 05 93 c5 c9 56 8f Data Ascii: h7Uy)Vzv]Kv57yz^iqYC_2I!&Hw=r^`)k3 hlX<ov{cj,r?/g\|,eId"1{kl7dLaUCO5 ".uMlM7nb7nU2L`+tA<.3OiUV
2025-01-15 02:49:30 UTC	8192	IN	Data Raw: c2 60 2c bc 86 e2 d5 00 23 d2 7a 35 0c 3b 02 6a ce 15 d1 06 e3 b5 f8 74 3b cf 6b d1 2b 12 63 ff d5 73 fb 2f 82 83 b1 2d 1f 8c 8b 36 03 9d 0e b8 20 9c b6 b8 6b 31 95 59 36 b2 31 98 4c 25 11 5e c0 40 ea 8f c4 e1 f6 af fa 66 70 83 6c 8e e4 bb 23 1a 6e bd f1 e9 3d 1c b7 37 8e e8 b8 b9 39 6e 73 8f 98 78 ce 0d 38 9d a9 df 1f 1c 92 f3 0f 69 ec ea c2 a2 94 c6 01 49 49 63 98 af e3 80 ab 33 19 b5 8b cd a4 2a ac 31 db 3b 98 b8 46 1b 04 39 d7 14 cc 35 41 2f a9 9e b9 b2 c8 a0 6a 9f 55 6c 09 e4 26 4f 1e 81 13 2a 1e a5 e4 90 87 7c 30 46 10 d4 33 55 2a 6b 8a 16 68 18 5c ab d6 e9 7b c4 14 7f 64 2e a3 9c 17 f2 6e 22 3f 84 4d 09 97 95 3d 12 49 a0 d8 eb 09 14 bb 16 cc b0 00 e2 6e 66 f7 95 49 e3 f1 85 81 1d 47 23 0f 84 75 a2 dd c8 b8 4e f2 c3 26 76 55 59 a2 ff 8d f4 d3 31 20 Data Ascii: `,#z5;jt;k+cs/-6 k1Y61L%^@fpl#n=79nsx8iIIc31;F95A/jUl&O\|0F3U*kh\{d.n"?M=InfIG#uN&vUY1
2025-01-15 02:49:30 UTC	8192	IN	Data Raw: 91 70 3b 0d 4f e4 83 f1 74 2e 72 06 92 c6 43 f0 36 7f 4c 5a 7e 11 d5 ae 71 7a 21 9d e7 6d 82 fc 71 ab b8 b5 ad d5 57 e5 e1 2d 24 4b a9 bc 70 06 98 e1 c1 e9 40 d6 42 b3 83 ac f9 37 57 18 65 2c ed d2 cb 53 31 c7 e0 e2 d9 07 21 54 4c 2e 9c e3 92 82 14 40 b1 4d 0e 60 d2 58 d2 76 8c 49 08 fa 16 2b 2d fd 95 cd 9d 06 ac 4c 12 b6 2b 8b a0 9a 7f 7f b2 92 67 ed b6 9f 05 4f 97 7d 87 09 0a 20 1f c1 0c 6c d3 33 29 26 63 fa 4f c9 b0 d1 99 04 29 a1 5e ee ab 79 ff a8 8e 6c 0d f3 1b bb 41 71 6a 5f 81 1b ae a7 d4 eb f9 95 8f f8 fc 6b 29 db 05 b9 74 ec f3 9c 1e 4a d8 ad ac 64 66 c8 52 36 3a 89 c7 9a 7b 94 15 00 17 6f 5e 25 a8 cd 5a f2 79 e3 c9 4c 38 52 9a 37 cf 41 86 7f 64 ba 64 71 06 62 17 b2 cf 03 09 cb 88 2a f9 65 30 9c ed 23 06 05 8d 1d d9 88 72 a2 8e 2a 15 c9 5f c3 55 Data Ascii: p;Ot.rC6LZ~qz!mqW-$Kp@B7We,S1!TL.@M`XvI+-L+gO} l3)&cO)^ylAqj_k)tJdfR6:{o^%ZyL8R7Addqbe0#r_U
2025-01-15 02:49:30 UTC	8192	IN	Data Raw: 7d f8 c8 3e c5 65 5a 09 56 18 d9 0f 57 ef 3c 05 03 a2 86 6c af 8f 46 55 ac 31 e1 a9 aa 2f f5 68 92 5e a7 b3 db 1b bd 66 99 76 af b0 a9 0a 4f 22 38 e8 3a 05 90 3a 08 48 dd f9 eb 45 f5 2a 0a 78 df 70 91 7b 9b 2f 13 3f da 89 8e c7 fc 43 72 5e 9d 5c 4d e6 40 26 8b 4a 4a e4 07 71 5c 56 45 70 5c f6 81 bc 0d fb 61 cb d5 43 85 b7 ee c6 6a 25 bf 4e b6 93 cc 6a 76 be 59 b3 36 fa 42 dc b2 d2 d1 a3 e4 9a 95 bc 3a 18 2f 9b 44 37 2c 86 ed 75 b4 26 c5 a5 f5 06 d9 a3 4d 02 ea b8 3e 46 7a 49 71 79 8f 0e 3c 9a 20 e4 5f 24 0c ea 57 21 37 fb 85 47 98 90 f7 51 f2 0e 39 a4 c1 dd e1 c5 b3 3c 3b fc 9e 47 74 21 ff d7 a3 4c c8 7f 7a 24 36 61 1e 5d ef 69 c6 d9 63 b0 1d f9 e5 23 89 ba a5 a0 39 34 da 02 1a 53 1f d1 72 84 e5 52 53 00 b2 92 fb 88 5b da 88 f8 84 8f 72 35 33 38 06 21 13 Data Ascii: }>eZVW<lFU1/h^fvO"8::HE*xp{/?Cr^\M@&JJq\VEp\aCj%NjvY6B:/D7,u&M>FzIqy< _$W!7GQ9<;Gt!Lz$6a]ic#94SrRS[r538!
2025-01-15 02:49:30 UTC	8192	IN	Data Raw: b5 e1 81 0b cc 0f a3 4c 98 9a 1c e9 b0 93 9b 1a 9c bf 5b b0 64 a8 83 7b eb ae 87 a5 33 d4 51 b7 bf 5e 5f 82 73 bd 8d 79 eb a4 58 b8 05 20 6a 0b 1f 37 2f 7d 93 3b da 40 82 9e 65 34 d7 7e 74 26 41 14 2f c9 3f 7b c6 3c 5d 3c 0f 3d f2 f1 bc e4 13 4a 95 de d3 ab 72 1c 55 19 4e 8e 0f 77 4f 1a 25 d1 ad e8 6d f0 21 26 8f 82 0f c5 ac fc 0e 7a 19 43 47 0e 6d e1 6e 73 b8 c9 c0 ca 6f a6 8f 06 f8 b8 66 d5 6d 17 40 21 f3 c3 f9 13 61 58 56 dd 01 bd 1b 3f 11 ed 98 69 09 89 e7 4d 20 93 9c 00 8b 54 d0 75 bf ee b6 ab e6 e9 ec e5 37 2f bd 27 7c 5c bf 6c aa 02 ea 9f 68 77 82 a0 56 d4 ed 67 8e 0e 5b d3 08 a0 2e e6 b9 dc db 26 b6 2d 87 f2 c2 c9 9c 70 ab 7e 31 bb a1 fc 5e 1e c5 ba 67 33 fa e1 d4 10 2b 0f 40 de d8 c7 39 30 2c d0 da b2 9f 86 5f c5 cf 67 2c bb 8a bf 40 80 6c b8 12 Data Ascii: L[d{3Q^_syX j7/};@e4~t&A/?{<]<=JrUNwO%m!&zCGmnsofm@!aXV?iM Tu7/'\|\lhwVg[.&-p~1^g3+@90,_g,@l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.16	49898	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:29 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 4219 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ef294-d2eb-11ef-94e6-12087e0c0b48
2025-01-15 02:49:29 UTC	4219	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 64 61 36 64 30 2d 64 32 65 62 2d 31 31 65 66 2d 61 64 36 31 2d 30 36 66 38 64 33 31 31 62 35 37 33 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 50 61 63 73 30 79 5f 68 38 41 6f 53 70 53 64 6d 75 46 66 6a 41 32 2d 4a 68 38 35 44 38 6c 61 75 76 77 74 49 48 42 5f 31 47 69 70 72 58 5a 42 35 7a 2d 5f 45 33 4a 31 48 35 68 55 58 51 44 5a 45 73 76 56 57 37 4a 56 57 55 64 47 4d 61 5f 55 30 43 35 5f 74 6b 62 34 6d 50 31 5a 6c 45 6e 70 39 53 51 43 4f 55 54 39 5a 47 71 76 55 50 4b 56 51 6c 6e 6d 70 4f 2d 65 65 6e 5f 4b 35 Data Ascii: {"entries":[{"sid":"546da6d0-d2eb-11ef-ad61-06f8d311b573","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"Pacs0y_h8AoSpSdmuFfjA2-Jh85D8lauvwtIHB_1GiprXZB5z-_E3J1H5hUXQDZEsvVW7JVWUdGMa_U0C5_tkb4mP1ZlEnp9SQCOUT9ZGqvUPKVQlnmpO-een_K5
2025-01-15 02:49:30 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:30 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=546da6d0-d2eb-11ef-ad61-06f8d311b573; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=546da6d0-d2eb-11ef-ad61-06f8d311b573; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:30 UTC	627	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 64 51 48 25 32 42 31 55 63 57 77 64 48 65 69 59 77 4b 70 7a 58 34 6f 71 63 69 51 49 63 59 74 5a 52 53 42 61 56 78 68 6d 6e 62 67 53 61 73 5a 36 62 4c 65 59 31 6b 31 57 36 57 6d 76 54 77 53 72 36 6b 61 36 7a 6e 38 38 66 75 36 39 4c 6a 75 65 43 6d 4f 70 4c 72 51 71 55 42 67 71 55 5a 48 57 51 79 6b 47 62 79 37 63 35 46 55 50 54 72 4a 51 72 7a 39 42 25 32 46 44 54 30 32 79 48 67 43 52 25 32 42 7a 58 25 32 46 47 77 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dQH%2B1UcWwdHeiYwKpzX4oqciQIcYtZRSBaVxhmnbgSasZ6bLeY1k1W6WmvTwSr6ka6zn88fu69LjueCmOpLrQqUBgqUZHWQykGby7c5FUPTrJQrz9B%2FDT02yHgCR%2BzX%2FGw%3D%3D"}],"group":"cf-nel","max_age":60

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.16	49897	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:29 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 4249 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ef294-d2eb-11ef-94e6-12087e0c0b48
2025-01-15 02:49:29 UTC	4249	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 64 61 36 64 30 2d 64 32 65 62 2d 31 31 65 66 2d 61 64 36 31 2d 30 36 66 38 64 33 31 31 62 35 37 33 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 50 61 63 73 30 79 5f 68 38 41 6f 53 70 53 64 6d 75 46 66 6a 41 32 2d 4a 68 38 35 44 38 6c 61 75 76 77 74 49 48 42 5f 31 47 69 70 72 58 5a 42 35 7a 2d 5f 45 33 4a 31 48 35 68 55 58 51 44 5a 45 73 76 56 57 37 4a 56 57 55 64 47 4d 61 5f 55 30 43 35 5f 74 6b 62 34 6d 50 31 5a 6c 45 6e 70 39 53 51 43 4f 55 54 39 5a 47 71 76 55 50 4b 56 51 6c 6e 6d 70 4f 2d 65 65 6e 5f 4b 35 Data Ascii: {"entries":[{"sid":"546da6d0-d2eb-11ef-ad61-06f8d311b573","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"Pacs0y_h8AoSpSdmuFfjA2-Jh85D8lauvwtIHB_1GiprXZB5z-_E3J1H5hUXQDZEsvVW7JVWUdGMa_U0C5_tkb4mP1ZlEnp9SQCOUT9ZGqvUPKVQlnmpO-een_K5
2025-01-15 02:49:30 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:30 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=546da6d0-d2eb-11ef-ad61-06f8d311b573; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=546da6d0-d2eb-11ef-ad61-06f8d311b573; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:30 UTC	629	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 49 4d 37 4f 4a 47 31 6c 31 43 57 4f 76 6f 36 33 6b 61 68 6d 31 4a 32 6a 41 45 6a 6e 75 4a 37 55 56 75 75 53 65 47 72 75 72 56 62 7a 34 58 46 74 63 6b 64 61 4c 25 32 46 77 25 32 42 72 61 39 59 63 66 57 4f 5a 25 32 42 6d 46 25 32 46 37 77 4a 44 56 65 34 5a 51 6c 31 58 58 4d 67 5a 4b 69 61 39 59 62 74 6b 42 44 4f 5a 36 58 65 47 50 68 6d 4a 45 68 62 37 4c 72 25 32 46 4f 30 47 6a 37 41 4c 37 25 32 42 45 30 4f 77 51 53 57 72 67 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IM7OJG1l1CWOvo63kahm1J2jAEjnuJ7UVuuSeGrurVbz4XFtckdaL%2Fw%2Bra9YcfWOZ%2BmF%2F7wJDVe4ZQl1XXMgZKia9YbtkBDOZ6XeGPhmJEhb7Lr%2FO0Gj7AL7%2BE0OwQSWrg%3D%3D"}],"group":"cf-nel","max_age

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.16	49899	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:29 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 6039 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ef294-d2eb-11ef-94e6-12087e0c0b48
2025-01-15 02:49:29 UTC	6039	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 65 66 32 39 34 2d 64 32 65 62 2d 31 31 65 66 2d 39 34 65 36 2d 31 32 30 38 37 65 30 63 30 62 34 38 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 71 44 53 77 62 4f 49 72 30 44 32 32 73 62 75 38 71 7a 4f 57 7a 7a 73 67 54 41 79 6a 58 61 59 44 30 57 6a 65 6b 6b 2d 43 42 74 71 6b 71 57 32 47 69 77 38 61 61 42 59 39 48 30 33 6a 73 6a 55 64 2d 2d 52 50 4a 49 51 43 63 38 69 73 66 58 52 6f 4c 7a 5f 4a 78 58 76 57 4f 73 67 46 4c 51 30 4c 58 51 43 56 5f 76 52 4f 37 57 5a 73 6f 36 49 2d 38 58 35 6e 68 2d 69 50 53 58 4b 58 Data Ascii: {"entries":[{"sid":"546ef294-d2eb-11ef-94e6-12087e0c0b48","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"qDSwbOIr0D22sbu8qzOWzzsgTAyjXaYD0Wjekk-CBtqkqW2Giw8aaBY9H03jsjUd--RPJIQCc8isfXRoLz_JxXvWOsgFLQ0LXQCV_vRO7WZso6I-8X5nh-iPSXKX
2025-01-15 02:49:30 UTC	1320	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:30 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Via: 1.1 google cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sp2mmeqGyFgGGtQhc1Ml49%2BFHrvdE850%2BUATe5bU3YXhDvWFrCn7gnp1xdpiHSMHWOr7iYkWnOD9GHk69Tnhj4HuyVgi%2FVNwkTH%2Bosdaz45zfb2SmwSu2vxTAtokaN2rWw%3D%3D"}],"group":"cf-nel","max_age":604800}
2025-01-15 02:49:30 UTC	365	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 32 32 38 64 38 61 64 61 30 38 61 63 35 34 2d 59 59 5a 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 34 32 34 32 26 6d 69 6e 5f 72 74 74 3d 31 34 32 34 31 26 72 74 74 5f 76 61 72 3d 35 33 34 33 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 31 31 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 Data Ascii: NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 90228d8ada08ac54-YYZalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=14242&min_rtt=14241&rtt_var=5343&sent=5&recv=11&lost=0&retrans=0&se

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.16	49901	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:30 UTC	1289	OUT	GET /rtimp?a=imp&cr=ext_download_prot_smrtsp&d=androiddatahost.com&gid=&im=q547IniEp1qY7OEg0PE-zvI7c4TTbyJ9yUbJXX9aXRRFZ2RSaC1aqKVcNwFLzvoOUSB1Cq-kKAVCZMCO8wGiXvdmW_R_lhWj9VZ0BXYdLq3CVfee3Dl8WI3WkDd6zz6cgPeOrWRQd0pYTBtp6b-MEhqkYNKcIqKwWY9oCnbEV53vVc0S-miSf-21MKIOFFWwwrtgyKpTFmSAzSgQs0FZTJxX5Gsm3mrnNfhxWN0Pw1JdgjYx4A0MtW9X9sFmXm843WGJGXK0aLApHA07DzpbVdhE2OFP0N5Ku5qSpfS_KMrn0gcgzJWCemoSEDAXtqiudxnIdUJXflbA_NEbsxnE161AqUOD5U2bGvzX9q0umM_UPOpSxsZxgkmK5Rd_E0400H-5SWuxjHpFtYcXu8P-aYhdwh-QT38DroSKr_E8gRGeWPVy9UB5x_1996Dl-nvO&p=Z4ciNAAIY0EIEd8IAAfB0JS4R6VqDmLSSExu6A&sid=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf
2025-01-15 02:49:30 UTC	1249	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:30 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:30 UTC	620	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 4c 65 6a 71 73 51 7a 31 57 79 35 6e 69 31 61 49 33 4e 49 62 53 68 4d 67 72 63 47 4b 79 6c 58 72 71 62 6a 7a 32 66 45 59 78 31 45 4a 50 4e 5a 65 64 37 63 36 76 41 4a 4e 34 4a 55 47 42 58 32 75 25 32 42 6b 35 73 73 52 49 36 4e 43 4f 5a 48 6c 6f 69 4d 7a 65 64 63 63 4a 56 4b 56 38 45 79 45 71 78 79 31 4c 4f 4b 52 75 34 38 50 48 59 61 7a 58 79 33 43 71 6d 4b 75 61 4c 52 75 46 4e 4d 6e 35 78 47 67 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LejqsQz1Wy5ni1aI3NIbShMgrcGKylXrqbjz2fEYx1EJPNZed7c6vAJN4JUGBX2u%2Bk5ssRI6NCOZHloiMzedccJVKV8EyEqxy1LOKRu48PHYazXy3CqmKuaLRuFNMn5xGg%3D%3D"}],"group":"cf-nel","max_age":604800}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.16	49902	104.21.80.92	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:30 UTC	470	OUT	GET /click_1734018555_64x64.png HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ad295-d2eb-11ef-959f-d6c599cbf4fc
2025-01-15 02:49:30 UTC	1178	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 02:49:30 GMT Content-Type: image/png Content-Length: 721 Connection: close X-GUploader-UploadID: AFiumC7kv2Ihy_YfVHcGo-Zrykcigo_yR8ynNj4HrgDmOqlDiM9V-MrZmxn19eTDz3GY-G1BYhuYLpA x-goog-generation: 1734018555538900 x-goog-metageneration: 3 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 721 x-goog-hash: crc32c=PWgPLA== x-goog-hash: md5=Qx665ft+mV1G29G7lB8NMg== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type Expires: Wed, 15 Jan 2025 03:06:48 GMT Cache-Control: public, max-age=14400 Age: 2562 Last-Modified: Thu, 12 Dec 2024 15:49:15 GMT ETag: "431ebae5fb7e995d46dbd1bb941f0d32" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F%2BCBDwbgT74aoPRR9VuOFr%2FlXaP8PFlX7nb4z57Mem%2FIm6u39x7f3Bg3SaiNXvb68cTEbVAz5da4rgHjDuiCV3lY7rN8w%2Bq%2FGJ%2Bv6tgSD86TnS2uUPF8UBwb46%2Fe9lo7c858"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 90228d8bdced4bd1-YUL alt-svc: h3=":443"; ma=86400
2025-01-15 02:49:30 UTC	217	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 37 35 30 36 26 6d 69 6e 5f 72 74 74 3d 31 37 34 38 35 26 72 74 74 5f 76 61 72 3d 36 35 39 39 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 33 33 39 26 72 65 63 76 5f 62 79 74 65 73 3d 31 30 34 38 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 36 35 34 31 30 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 34 31 34 36 32 32 62 38 37 36 38 38 65 34 31 63 26 74 73 3d 31 39 34 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=17506&min_rtt=17485&rtt_var=6599&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2339&recv_bytes=1048&delivery_rate=165410&cwnd=32&unsent_bytes=0&cid=414622b87688e41c&ts=194&x=0"
2025-01-15 02:49:30 UTC	721	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 03 00 00 00 9d b7 81 ec 00 00 00 78 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 c8 48 88 00 00 00 27 74 52 4e 53 00 ec f2 3f ee 05 32 f6 2e d2 0a 9d 77 58 3a 47 13 80 a2 4d 44 37 67 ac 64 0e c9 16 36 1b cf 6b b9 8b 71 2a c4 ab 21 5f 63 3e 35 00 00 01 e1 49 44 41 54 58 c3 e5 95 d9 76 82 30 14 45 2f 09 20 a0 e0 54 07 50 70 6c f3 ff 7f 58 e2 b2 1e 43 21 de c4 Data Ascii: PNGIHDR@@xPLTEH'tRNS?2.wX:GMD7gd6kq*!_c>5IDATXv0E/ TPplXC!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.16	49896	142.250.186.98	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:30 UTC	899	OUT	GET /pagead/drt/si?st=NO_DATA HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm9YsVInCwq_kuLG4Eoy4GuHk43hyeVzgbbZa3d16vwPQ6hkEJ5gfvmZT0zHrk
2025-01-15 02:49:30 UTC	664	IN	HTTP/1.1 200 OK Cross-Origin-Resource-Policy: cross-origin P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 15 Jan 2025 02:49:30 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: DSID=NO_DATA; expires=Wed, 15-Jan-2025 03:49:30 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Wed, 15 Jan 2025 02:49:30 GMT Cache-Control: private Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.16	49903	104.21.80.92	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:30 UTC	475	OUT	GET /download_l_1734165033_64x64.png HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ad295-d2eb-11ef-959f-d6c599cbf4fc
2025-01-15 02:49:30 UTC	1166	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 02:49:30 GMT Content-Type: image/png Content-Length: 615 Connection: close X-GUploader-UploadID: AFiumC6gNkBytAcZZFDQrgcTSb1Q607zpFi_NUDyuLyUyD6bWsEAywaZlyaJsL9KPex6sdwWhZ1ZEuA x-goog-generation: 1734165033542357 x-goog-metageneration: 3 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 615 x-goog-hash: crc32c=y4TMxQ== x-goog-hash: md5=3Ht+RPR8bjlGVFLjbkb7ZQ== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type Expires: Wed, 15 Jan 2025 03:24:42 GMT Cache-Control: public, max-age=14400 Age: 1488 Last-Modified: Sat, 14 Dec 2024 08:30:33 GMT ETag: "dc7b7e44f47c6e39465452e36e46fb65" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5HyyQ9aUqw4Y6tJPe95OiQ1DMDLXxBw1il6djAT3JU7lsM7DH2YE9TXL33rgqFAJTkiJjoXTkwIGKug9FFgOqz6cU8fdnPEuJCjTlhBbnD%2F2%2FETASqIc9EP7nrEIpULSghEt"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 90228d8bfde1aaa8-YYZ alt-svc: h3=":443"; ma=86400
2025-01-15 02:49:30 UTC	217	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 34 30 39 39 26 6d 69 6e 5f 72 74 74 3d 31 34 30 39 36 26 72 74 74 5f 76 61 72 3d 35 32 39 32 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 33 33 38 26 72 65 63 76 5f 62 79 74 65 73 3d 31 30 35 33 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 32 30 36 37 36 39 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 66 36 31 37 66 32 33 33 33 61 65 66 35 39 33 63 26 74 73 3d 31 38 39 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=14099&min_rtt=14096&rtt_var=5292&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2338&recv_bytes=1053&delivery_rate=206769&cwnd=32&unsent_bytes=0&cid=f617f2333aef593c&ts=189&x=0"
2025-01-15 02:49:30 UTC	615	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 03 00 00 00 9d b7 81 ec 00 00 00 78 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 c8 48 88 00 00 00 27 74 52 4e 53 00 8d 22 b8 fa b4 08 05 ad 53 1b 59 ee 09 dc 9b 62 2c 25 11 d5 cf c5 af 7e 71 47 3d de 32 15 f4 e6 a5 86 6b 4f 35 1e c8 b0 73 06 00 00 01 77 49 44 41 54 58 c3 ed 97 db 72 83 20 14 45 4f 93 a8 44 8d 77 ad 97 dc 93 86 ff ff c3 5a 40 77 26 b5 18 78 Data Ascii: PNGIHDR@@xPLTEH'tRNS"SYb,%~qG=2kO5swIDATXr EODwZ@w&x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.16	49905	142.250.186.34	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:30 UTC	1533	OUT	GET /btr/view?ai=Cjr4WNCKHZ8TGIYi-x_AP0IOfsALGvqzIfMb0rcCNE6KUxJKNDhABILm_uSFgyZbLi8Sk_A-gAZPCv5A-yAECqAMByAPJBKoE3gFP0F_5Dz4w7OehnAdro3idBuuuft1-qZLbic0FwptSgAhjZsBi3SBbMVHh9u-1KrxsqFsUqpYbrzghNlP-nlLiG4sQv45jttPW7y_2VBpWy7pBpA6WnDm-exf0Jjd9VRRSQ1ZQuiM3QgUPwS84aANvMc3GZWRgR-RNUS_AJfYjEYj1dMcSnuUZxQk5SsOTtHL5WM3TOd5UAYQl6gsh85qoa4Q8UGoGASp8rsTWe7FQDPnkUJNpYzlIhbRKnuKE-xE6kzxMSYUkK9E0RnEzG9gZZLzecwOx0iYFm6Ll3xTABPyy29D0BIgF7t_amVGSBQQIBBgBkgUECAUYBKAGAoAHk_qP8BioB9XJG6gH2baxAqgHpr4bqAeOzhuoB5PYG6gH8OAbqAfulrECqAf-nrECqAevvrECqAf3wrEC2AcB8gcFEOSHlAHSCCYIgGEQARgfMgKKAjoLgECAwICAgKCogAJIvf3BOljri7nN2_aKA5oJS2h0dHBzOi8vcGNhcHBzdG9yZS5jb20vP2FwPWFkd3AmYXM9Z19kX2FsbF9uZXdfaW4mZG1bdHlwZV09ZGlzJmdhZF9zb3VyY2U9NYAKAcgLAdoMEAoKENDSrYHgy4i-HBICAQPYEwzQFQGYFgGAFwGyFx4KGggAEhRwdWItMjg0MDI1ODEwMTQxMTg2MxgAGAG6FwI4AbIYCRICsFMYAiIBANAYAegYAQ&sigh=rw7p8sLgrS4&uach_m=%5BUACH%5D&ase=2&cid=CAQSTgCa7L7df4xwUHVujsXH2F66vTtJuY0JMzCDUy0RwlGknM5o1hgUj27nZz3JKyLm39Z1qfeU48liOx_XvHXY-00wQ4VbHo9Y1_AGgVhlnRgB&vis=1&ibtr=1&nis=6 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm9YsVInCwq_kuLG4Eoy4GuHk43hyeVzgbbZa3d16vwPQ6hkEJ5gfvmZT0zHrk
2025-01-15 02:49:30 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 15 Jan 2025 02:49:30 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.16	49909	142.250.186.98	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:30 UTC	1585	OUT	GET /pagead/adview?ai=Ca41ENCKHZ8HGIYi-x_AP0IOfsAK9qs_Ndemi3NbEEsCNtwEQASAAYMmWy4vEpPwPggEXY2EtcHViLTI4NDAyNTgxMDE0MTE4NjPIAQmoAwHIAwKqBNIBT9BJRRuVYISJd-fb-0pSnEr7rNnJo8yDZyCYQINFimNUQE-owkEoXVZzu-dS81KRZB4SsdU3Tz_42zZNvlUHV8GQvuRgPmImZtm2v2yTtyH2dASJJot8-ZcYy_eIqTAGjkP2lBalTlnoCOlgKBUI-xAh7ZQ6cXUU6RaHyziNzRen6YX7aV_iAb0YdNfuaOeWMI2YBe9xYy3-0PjE7cwMDp74_4FBiXDopZqk0YYiwzTFSrAGPgBa3K6h360jC3OZ48LOPvn9r9Lt1ITK2NzuUX7FgAaarO2X-f_z_OUBoAYhqAemvhuoB5bYG6gHqpuxAqgH_56xAqgH35-xAqgHrb6xAtgHANIIJAiAYRABMgKKAjoLgECAwICAgKCogAJIvf3BOljri7nN2_aKA4AKAfoLAggBgAwB0BUBgBcBshccChgSFHB1Yi0yODQwMjU4MTAxNDExODYzGAAYDA&sigh=p4dKFt52T8c&uach_m=%5BUACH%5D&cid=CAQSTgCa7L7df4xwUHVujsXH2F66vTtJuY0JMzCDUy0RwlGknM5o1hgUj27nZz3JKyLm39Z1qfeU48liOx_XvHXY-00wQ4VbHo9Y1_AGgVhlnRgB&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20250113/r20190131/zrt_lookup_fy2021.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm9YsVInCwq_kuLG4Eoy4GuHk43hyeVzgbbZa3d16vwPQ6hkEJ5gfvmZT0zHrk
2025-01-15 02:49:30 UTC	628	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 15 Jan 2025 02:49:30 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.16	49914	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:30 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 4186 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ef294-d2eb-11ef-94e6-12087e0c0b48
2025-01-15 02:49:30 UTC	4186	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 65 66 32 39 34 2d 64 32 65 62 2d 31 31 65 66 2d 39 34 65 36 2d 31 32 30 38 37 65 30 63 30 62 34 38 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 71 44 53 77 62 4f 49 72 30 44 32 32 73 62 75 38 71 7a 4f 57 7a 7a 73 67 54 41 79 6a 58 61 59 44 30 57 6a 65 6b 6b 2d 43 42 74 71 6b 71 57 32 47 69 77 38 61 61 42 59 39 48 30 33 6a 73 6a 55 64 2d 2d 52 50 4a 49 51 43 63 38 69 73 66 58 52 6f 4c 7a 5f 4a 78 58 76 57 4f 73 67 46 4c 51 30 4c 58 51 43 56 5f 76 52 4f 37 57 5a 73 6f 36 49 2d 38 58 35 6e 68 2d 69 50 53 58 4b 58 Data Ascii: {"entries":[{"sid":"546ef294-d2eb-11ef-94e6-12087e0c0b48","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"qDSwbOIr0D22sbu8qzOWzzsgTAyjXaYD0Wjekk-CBtqkqW2Giw8aaBY9H03jsjUd--RPJIQCc8isfXRoLz_JxXvWOsgFLQ0LXQCV_vRO7WZso6I-8X5nh-iPSXKX
2025-01-15 02:49:30 UTC	1322	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:30 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Via: 1.1 google cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UiK6SozD4gXNnChxOwycRTNsDhEjWcQqpENrDfpygt%2FcgTpldVUO7Gi5%2BhXHUNlEY6hGswXMs13%2FFwaL7wwRBbxz%2BixAhn241xDnSJDXjd1Is751yEUAYu9wRpCMz%2F2MAQ%3D%3D"}],"group":"cf-nel","max_age":604800}
2025-01-15 02:49:30 UTC	364	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 32 32 38 64 39 30 30 66 66 31 61 32 34 65 2d 59 55 4c 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 37 38 32 31 26 6d 69 6e 5f 72 74 74 3d 31 37 38 32 31 26 72 74 74 5f 76 61 72 3d 38 39 31 30 26 73 65 6e 74 3d 37 26 72 65 63 76 3d 31 31 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 31 26 73 65 Data Ascii: NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 90228d900ff1a24e-YULalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=17821&min_rtt=17821&rtt_var=8910&sent=7&recv=11&lost=0&retrans=1&se

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.16	49916	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:30 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 2019 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ef294-d2eb-11ef-94e6-12087e0c0b48
2025-01-15 02:49:30 UTC	2019	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 65 66 32 39 34 2d 64 32 65 62 2d 31 31 65 66 2d 39 34 65 36 2d 31 32 30 38 37 65 30 63 30 62 34 38 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 71 44 53 77 62 4f 49 72 30 44 32 32 73 62 75 38 71 7a 4f 57 7a 7a 73 67 54 41 79 6a 58 61 59 44 30 57 6a 65 6b 6b 2d 43 42 74 71 6b 71 57 32 47 69 77 38 61 61 42 59 39 48 30 33 6a 73 6a 55 64 2d 2d 52 50 4a 49 51 43 63 38 69 73 66 58 52 6f 4c 7a 5f 4a 78 58 76 57 4f 73 67 46 4c 51 30 4c 58 51 43 56 5f 76 52 4f 37 57 5a 73 6f 36 49 2d 38 58 35 6e 68 2d 69 50 53 58 4b 58 Data Ascii: {"entries":[{"sid":"546ef294-d2eb-11ef-94e6-12087e0c0b48","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"qDSwbOIr0D22sbu8qzOWzzsgTAyjXaYD0Wjekk-CBtqkqW2Giw8aaBY9H03jsjUd--RPJIQCc8isfXRoLz_JxXvWOsgFLQ0LXQCV_vRO7WZso6I-8X5nh-iPSXKX
2025-01-15 02:49:30 UTC	1320	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:30 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Via: 1.1 google cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lNkDj9G6IThf6f%2F23Sz2N1cgHLPPZUGf9XDdXaJCggi076lZ0z1F96yg4nzNINJ7qiaXA9nPoMD%2B3%2FKwo6wFqZclDOmnwNJ6P1SX7xDSU428J3sHT8Redk1r0jzJ%2BmDqeg%3D%3D"}],"group":"cf-nel","max_age":604800}
2025-01-15 02:49:30 UTC	363	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 32 32 38 64 39 30 30 65 31 31 61 62 35 37 2d 59 59 5a 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 33 36 39 36 26 6d 69 6e 5f 72 74 74 3d 31 33 36 39 36 26 72 74 74 5f 76 61 72 3d 36 38 34 38 26 73 65 6e 74 3d 36 26 72 65 63 76 3d 39 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 31 26 73 65 6e Data Ascii: NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 90228d900e11ab57-YYZalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=13696&min_rtt=13696&rtt_var=6848&sent=6&recv=9&lost=0&retrans=1&sen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.16	49928	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:31 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 6324 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ef294-d2eb-11ef-94e6-12087e0c0b48
2025-01-15 02:49:31 UTC	6324	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 36 32 63 33 62 2d 64 32 65 62 2d 31 31 65 66 2d 62 38 65 30 2d 39 65 61 37 63 65 66 33 65 30 63 66 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 49 6a 48 75 6f 4b 48 39 6e 6d 79 77 79 56 54 69 47 69 6f 44 4e 43 41 75 4c 55 44 4c 31 32 68 4f 75 47 6c 37 62 67 64 53 66 56 79 79 56 59 42 54 7a 37 5a 73 72 37 75 75 54 6c 38 54 4a 49 6b 35 64 57 66 38 31 55 48 2d 41 73 4b 6f 4e 33 45 61 64 44 77 6a 55 42 4a 51 75 51 51 6c 56 79 41 39 36 33 51 70 4b 42 4c 68 5a 53 76 4d 49 62 48 50 76 4a 6c 66 69 56 68 7a 71 56 6c 5a Data Ascii: {"entries":[{"sid":"54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"IjHuoKH9nmywyVTiGioDNCAuLUDL12hOuGl7bgdSfVyyVYBTz7Zsr7uuTl8TJIk5dWf81UH-AsKoN3EadDwjUBJQuQQlVyA963QpKBLhZSvMIbHPvJlfiVhzqVlZ
2025-01-15 02:49:31 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:31 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:31 UTC	638	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 74 49 64 62 55 78 65 51 35 79 61 32 25 32 46 51 33 47 73 4c 51 67 69 48 47 73 31 54 48 38 31 35 77 51 5a 33 48 46 78 25 32 46 73 6e 32 68 44 70 6b 53 77 5a 25 32 46 59 30 55 33 71 73 67 4d 7a 4e 75 6f 68 25 32 42 53 67 7a 68 25 32 46 33 36 51 72 36 52 48 5a 46 6a 71 38 25 32 46 75 53 62 45 25 32 42 45 65 66 65 44 58 76 25 32 42 37 59 68 54 73 6b 41 43 58 30 57 4c 55 33 45 74 76 31 78 4f 7a 63 77 6f 49 5a 46 4d 5a 25 32 42 36 52 41 25 32 46 55 77 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tIdbUxeQ5ya2%2FQ3GsLQgiHGs1TH815wQZ3HFx%2Fsn2hDpkSwZ%2FY0U3qsgMzNuoh%2BSgzh%2F36Qr6RHZFjq8%2FuSbE%2BEefeDXv%2B7YhTskACX0WLU3Etv1xOzcwoIZFMZ%2B6RA%2FUw%3D%3D"}],"group":"cf-nel",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.16	49927	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:31 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 4377 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ef294-d2eb-11ef-94e6-12087e0c0b48
2025-01-15 02:49:31 UTC	4377	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 36 32 63 33 62 2d 64 32 65 62 2d 31 31 65 66 2d 62 38 65 30 2d 39 65 61 37 63 65 66 33 65 30 63 66 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 49 6a 48 75 6f 4b 48 39 6e 6d 79 77 79 56 54 69 47 69 6f 44 4e 43 41 75 4c 55 44 4c 31 32 68 4f 75 47 6c 37 62 67 64 53 66 56 79 79 56 59 42 54 7a 37 5a 73 72 37 75 75 54 6c 38 54 4a 49 6b 35 64 57 66 38 31 55 48 2d 41 73 4b 6f 4e 33 45 61 64 44 77 6a 55 42 4a 51 75 51 51 6c 56 79 41 39 36 33 51 70 4b 42 4c 68 5a 53 76 4d 49 62 48 50 76 4a 6c 66 69 56 68 7a 71 56 6c 5a Data Ascii: {"entries":[{"sid":"54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"IjHuoKH9nmywyVTiGioDNCAuLUDL12hOuGl7bgdSfVyyVYBTz7Zsr7uuTl8TJIk5dWf81UH-AsKoN3EadDwjUBJQuQQlVyA963QpKBLhZSvMIbHPvJlfiVhzqVlZ
2025-01-15 02:49:31 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:31 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:31 UTC	627	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 59 31 66 46 6d 49 57 69 42 4e 38 6a 32 43 45 57 6e 73 63 54 63 4c 49 4b 4f 56 61 38 65 75 6e 6d 6c 53 44 47 47 39 49 69 75 4c 42 67 43 25 32 42 77 66 50 68 4a 25 32 46 73 6f 6b 6f 42 4f 55 48 44 25 32 42 6a 6a 6f 46 38 6f 54 35 74 70 43 6f 35 67 54 4f 61 75 25 32 46 42 41 59 4c 4d 47 74 75 30 35 55 4d 55 6c 6a 38 32 75 37 70 4b 33 42 6a 68 49 52 30 31 62 55 4e 41 72 57 41 4e 36 66 69 35 45 50 72 61 6f 32 32 77 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y1fFmIWiBN8j2CEWnscTcLIKOVa8eunmlSDGG9IiuLBgC%2BwfPhJ%2FsokoBOUHD%2BjjoF8oT5tpCo5gTOau%2FBAYLMGtu05UMUlj82u7pK3BjhIR01bUNArWAN6fi5EPrao22w%3D%3D"}],"group":"cf-nel","max_age":60

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.16	49926	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:31 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 2114 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ef294-d2eb-11ef-94e6-12087e0c0b48
2025-01-15 02:49:31 UTC	2114	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 36 32 63 33 62 2d 64 32 65 62 2d 31 31 65 66 2d 62 38 65 30 2d 39 65 61 37 63 65 66 33 65 30 63 66 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 49 6a 48 75 6f 4b 48 39 6e 6d 79 77 79 56 54 69 47 69 6f 44 4e 43 41 75 4c 55 44 4c 31 32 68 4f 75 47 6c 37 62 67 64 53 66 56 79 79 56 59 42 54 7a 37 5a 73 72 37 75 75 54 6c 38 54 4a 49 6b 35 64 57 66 38 31 55 48 2d 41 73 4b 6f 4e 33 45 61 64 44 77 6a 55 42 4a 51 75 51 51 6c 56 79 41 39 36 33 51 70 4b 42 4c 68 5a 53 76 4d 49 62 48 50 76 4a 6c 66 69 56 68 7a 71 56 6c 5a Data Ascii: {"entries":[{"sid":"54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"IjHuoKH9nmywyVTiGioDNCAuLUDL12hOuGl7bgdSfVyyVYBTz7Zsr7uuTl8TJIk5dWf81UH-AsKoN3EadDwjUBJQuQQlVyA963QpKBLhZSvMIbHPvJlfiVhzqVlZ
2025-01-15 02:49:31 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:31 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:31 UTC	620	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 56 5a 37 73 48 31 74 33 67 31 53 35 6a 4e 34 53 70 71 62 58 64 41 69 6c 72 5a 25 32 46 70 41 34 71 47 32 59 43 5a 43 52 52 7a 34 42 77 50 37 62 52 4b 38 45 67 52 59 59 30 38 63 52 67 32 6b 35 6f 30 4f 38 68 65 4b 39 76 61 52 6d 48 53 31 68 7a 46 74 5a 67 5a 48 77 65 63 7a 79 7a 6f 36 58 68 4d 31 49 65 50 45 54 6a 69 46 6d 51 75 6f 51 5a 37 63 6a 39 57 74 6e 6c 56 52 66 51 48 56 4f 4f 51 5a 67 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VZ7sH1t3g1S5jN4SpqbXdAilrZ%2FpA4qG2YCZCRRz4BwP7bRK8EgRYY08cRg2k5o0O8heK9vaRmHS1hzFtZgZHweczyzo6XhM1IePETjiFmQuoQZ7cj9WtnlVRfQHVOOQZg%3D%3D"}],"group":"cf-nel","max_age":604800}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.16	49929	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:31 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 3303 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ef294-d2eb-11ef-94e6-12087e0c0b48
2025-01-15 02:49:31 UTC	3303	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 36 39 62 30 35 2d 64 32 65 62 2d 31 31 65 66 2d 62 34 65 63 2d 37 61 37 64 64 36 63 32 65 39 30 66 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 71 35 34 37 49 6e 69 45 70 31 71 59 37 4f 45 67 30 50 45 2d 7a 76 49 37 63 34 54 54 62 79 4a 39 79 55 62 4a 58 58 39 61 58 52 52 46 5a 32 52 53 61 43 31 61 71 4b 56 63 4e 77 46 4c 7a 76 6f 4f 55 53 42 31 43 71 2d 6b 4b 41 56 43 5a 4d 43 4f 38 77 47 69 58 76 64 6d 57 5f 52 5f 6c 68 57 6a 39 56 5a 30 42 58 59 64 4c 71 33 43 56 66 65 65 33 44 6c 38 57 49 33 57 6b 44 64 36 Data Ascii: {"entries":[{"sid":"54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"q547IniEp1qY7OEg0PE-zvI7c4TTbyJ9yUbJXX9aXRRFZ2RSaC1aqKVcNwFLzvoOUSB1Cq-kKAVCZMCO8wGiXvdmW_R_lhWj9VZ0BXYdLq3CVfee3Dl8WI3WkDd6
2025-01-15 02:49:31 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:31 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:31 UTC	618	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 73 58 34 41 61 51 4a 51 41 56 4d 4a 53 77 37 55 56 41 62 59 77 48 71 73 55 45 67 34 44 34 73 4f 74 25 32 46 62 65 55 75 54 37 41 78 76 37 53 51 48 62 69 6a 63 57 34 56 6e 70 7a 58 74 6b 57 6a 44 61 46 61 65 45 78 78 47 46 47 50 4e 4d 76 69 6d 68 64 62 54 4c 67 51 45 5a 67 42 79 68 63 70 7a 6a 45 49 74 66 55 36 72 44 45 4d 6a 70 63 4c 61 33 71 39 63 73 64 69 72 6a 55 5a 6a 4b 73 68 34 4f 4c 41 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sX4AaQJQAVMJSw7UVAbYwHqsUEg4D4sOt%2FbeUuT7Axv7SQHbijcW4VnpzXtkWjDaFaeExxGFGPNMvimhdbTLgQEZgByhcpzjEItfU6rDEMjpcLa3q9csdirjUZjKsh4OLA%3D%3D"}],"group":"cf-nel","max_age":604800}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.16	49930	142.250.186.34	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:31 UTC	1297	OUT	GET /pagead/adview?ai=Ca41ENCKHZ8HGIYi-x_AP0IOfsAK9qs_Ndemi3NbEEsCNtwEQASAAYMmWy4vEpPwPggEXY2EtcHViLTI4NDAyNTgxMDE0MTE4NjPIAQmoAwHIAwKqBNIBT9BJRRuVYISJd-fb-0pSnEr7rNnJo8yDZyCYQINFimNUQE-owkEoXVZzu-dS81KRZB4SsdU3Tz_42zZNvlUHV8GQvuRgPmImZtm2v2yTtyH2dASJJot8-ZcYy_eIqTAGjkP2lBalTlnoCOlgKBUI-xAh7ZQ6cXUU6RaHyziNzRen6YX7aV_iAb0YdNfuaOeWMI2YBe9xYy3-0PjE7cwMDp74_4FBiXDopZqk0YYiwzTFSrAGPgBa3K6h360jC3OZ48LOPvn9r9Lt1ITK2NzuUX7FgAaarO2X-f_z_OUBoAYhqAemvhuoB5bYG6gHqpuxAqgH_56xAqgH35-xAqgHrb6xAtgHANIIJAiAYRABMgKKAjoLgECAwICAgKCogAJIvf3BOljri7nN2_aKA4AKAfoLAggBgAwB0BUBgBcBshccChgSFHB1Yi0yODQwMjU4MTAxNDExODYzGAAYDA&sigh=p4dKFt52T8c&uach_m=%5BUACH%5D&cid=CAQSTgCa7L7df4xwUHVujsXH2F66vTtJuY0JMzCDUy0RwlGknM5o1hgUj27nZz3JKyLm39Z1qfeU48liOx_XvHXY-00wQ4VbHo9Y1_AGgVhlnRgB&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm9YsVInCwq_kuLG4Eoy4GuHk43hyeVzgbbZa3d16vwPQ6hkEJ5gfvmZT0zHrk; DSID=NO_DATA
2025-01-15 02:49:31 UTC	628	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 15 Jan 2025 02:49:31 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.16	49945	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:31 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 1388 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ef294-d2eb-11ef-94e6-12087e0c0b48
2025-01-15 02:49:31 UTC	1388	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 36 39 62 30 35 2d 64 32 65 62 2d 31 31 65 66 2d 62 34 65 63 2d 37 61 37 64 64 36 63 32 65 39 30 66 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 71 35 34 37 49 6e 69 45 70 31 71 59 37 4f 45 67 30 50 45 2d 7a 76 49 37 63 34 54 54 62 79 4a 39 79 55 62 4a 58 58 39 61 58 52 52 46 5a 32 52 53 61 43 31 61 71 4b 56 63 4e 77 46 4c 7a 76 6f 4f 55 53 42 31 43 71 2d 6b 4b 41 56 43 5a 4d 43 4f 38 77 47 69 58 76 64 6d 57 5f 52 5f 6c 68 57 6a 39 56 5a 30 42 58 59 64 4c 71 33 43 56 66 65 65 33 44 6c 38 57 49 33 57 6b 44 64 36 Data Ascii: {"entries":[{"sid":"54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"q547IniEp1qY7OEg0PE-zvI7c4TTbyJ9yUbJXX9aXRRFZ2RSaC1aqKVcNwFLzvoOUSB1Cq-kKAVCZMCO8wGiXvdmW_R_lhWj9VZ0BXYdLq3CVfee3Dl8WI3WkDd6
2025-01-15 02:49:32 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:32 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:32 UTC	631	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 38 39 33 50 5a 52 47 38 41 38 35 38 32 31 41 43 70 39 58 50 74 59 4a 6c 33 39 25 32 46 48 6d 58 33 51 30 39 65 77 66 77 25 32 46 41 6e 67 54 4c 7a 51 39 34 43 5a 70 59 6c 62 74 4c 6c 47 61 51 69 45 6f 4f 6d 47 77 61 62 69 39 55 71 49 46 31 4c 4f 43 32 4d 74 76 49 55 66 4d 77 39 32 4f 34 70 7a 76 67 53 77 25 32 42 56 38 74 70 25 32 42 43 4a 25 32 46 25 32 46 6a 51 59 36 4f 4a 6e 78 35 48 55 78 6f 6a 53 70 50 33 66 25 32 42 72 51 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=893PZRG8A85821ACp9XPtYJl39%2FHmX3Q09ewfw%2FAngTLzQ94CZpYlbtLlGaQiEoOmGwabi9UqIF1LOC2MtvIUfMw92O4pzvgSw%2BV8tp%2BCJ%2F%2FjQY6OJnx5HUxojSpP3f%2BrQ%3D%3D"}],"group":"cf-nel","max_a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.16	49946	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:31 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 2002 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ef294-d2eb-11ef-94e6-12087e0c0b48
2025-01-15 02:49:31 UTC	2002	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 64 61 36 64 30 2d 64 32 65 62 2d 31 31 65 66 2d 61 64 36 31 2d 30 36 66 38 64 33 31 31 62 35 37 33 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 50 61 63 73 30 79 5f 68 38 41 6f 53 70 53 64 6d 75 46 66 6a 41 32 2d 4a 68 38 35 44 38 6c 61 75 76 77 74 49 48 42 5f 31 47 69 70 72 58 5a 42 35 7a 2d 5f 45 33 4a 31 48 35 68 55 58 51 44 5a 45 73 76 56 57 37 4a 56 57 55 64 47 4d 61 5f 55 30 43 35 5f 74 6b 62 34 6d 50 31 5a 6c 45 6e 70 39 53 51 43 4f 55 54 39 5a 47 71 76 55 50 4b 56 51 6c 6e 6d 70 4f 2d 65 65 6e 5f 4b 35 Data Ascii: {"entries":[{"sid":"546da6d0-d2eb-11ef-ad61-06f8d311b573","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"Pacs0y_h8AoSpSdmuFfjA2-Jh85D8lauvwtIHB_1GiprXZB5z-_E3J1H5hUXQDZEsvVW7JVWUdGMa_U0C5_tkb4mP1ZlEnp9SQCOUT9ZGqvUPKVQlnmpO-een_K5
2025-01-15 02:49:32 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:32 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=546da6d0-d2eb-11ef-ad61-06f8d311b573; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=546da6d0-d2eb-11ef-ad61-06f8d311b573; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:32 UTC	624	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 30 4f 70 64 47 52 61 53 5a 4c 58 6e 76 6a 25 32 42 77 39 54 58 44 51 4c 6c 4c 6c 45 38 51 4a 64 49 46 70 6c 30 37 46 45 7a 6f 32 79 77 4b 75 4a 6e 50 44 6b 32 43 68 62 51 25 32 42 7a 43 42 45 66 39 42 78 4b 36 57 74 5a 65 61 50 59 39 5a 7a 6a 55 45 6d 50 32 52 62 43 55 54 66 43 34 69 25 32 42 47 30 4f 25 32 46 56 34 47 71 73 73 6c 76 33 65 37 68 55 46 6b 77 49 56 73 57 70 56 51 38 67 37 48 6b 79 34 36 79 78 41 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0OpdGRaSZLXnvj%2Bw9TXDQLlLlE8QJdIFpl07FEzo2ywKuJnPDk2ChbQ%2BzCBEf9BxK6WtZeaPY9ZzjUEmP2RbCUTfC4i%2BG0O%2FV4Gqsslv3e7hUFkwIVsWpVQ8g7Hky46yxA%3D%3D"}],"group":"cf-nel","max_age":60

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.16	49948	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:32 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 2092 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ef294-d2eb-11ef-94e6-12087e0c0b48
2025-01-15 02:49:32 UTC	2092	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 64 61 36 64 30 2d 64 32 65 62 2d 31 31 65 66 2d 61 64 36 31 2d 30 36 66 38 64 33 31 31 62 35 37 33 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 50 61 63 73 30 79 5f 68 38 41 6f 53 70 53 64 6d 75 46 66 6a 41 32 2d 4a 68 38 35 44 38 6c 61 75 76 77 74 49 48 42 5f 31 47 69 70 72 58 5a 42 35 7a 2d 5f 45 33 4a 31 48 35 68 55 58 51 44 5a 45 73 76 56 57 37 4a 56 57 55 64 47 4d 61 5f 55 30 43 35 5f 74 6b 62 34 6d 50 31 5a 6c 45 6e 70 39 53 51 43 4f 55 54 39 5a 47 71 76 55 50 4b 56 51 6c 6e 6d 70 4f 2d 65 65 6e 5f 4b 35 Data Ascii: {"entries":[{"sid":"546da6d0-d2eb-11ef-ad61-06f8d311b573","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"Pacs0y_h8AoSpSdmuFfjA2-Jh85D8lauvwtIHB_1GiprXZB5z-_E3J1H5hUXQDZEsvVW7JVWUdGMa_U0C5_tkb4mP1ZlEnp9SQCOUT9ZGqvUPKVQlnmpO-een_K5
2025-01-15 02:49:32 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:32 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=546da6d0-d2eb-11ef-ad61-06f8d311b573; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=546da6d0-d2eb-11ef-ad61-06f8d311b573; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:32 UTC	620	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 69 58 6c 55 62 73 62 54 43 4a 49 57 74 79 49 42 38 52 6d 49 33 34 7a 4d 4a 44 4a 65 32 63 59 50 75 43 63 35 66 41 4c 78 72 32 6c 58 53 6a 4d 33 53 62 79 46 51 33 46 59 68 67 72 70 54 67 41 33 7a 77 70 34 50 6d 41 4e 38 64 76 6a 36 76 4d 46 64 35 74 45 25 32 42 74 7a 56 4a 6f 32 74 4f 75 66 4e 78 53 4f 4d 47 39 25 32 46 76 70 63 30 30 33 37 52 5a 47 42 42 59 32 38 6e 58 39 41 47 4a 6e 79 34 4d 7a 41 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iXlUbsbTCJIWtyIB8RmI34zMJDJe2cYPuCc5fALxr2lXSjM3SbyFQ3FYhgrpTgA3zwp4PmAN8dvj6vMFd5tE%2BtzVJo2tOufNxSOMG9%2Fvpc0037RZGBBY28nX9AGJny4MzA%3D%3D"}],"group":"cf-nel","max_age":604800

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.16	49947	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:32 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 1093 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ef294-d2eb-11ef-94e6-12087e0c0b48
2025-01-15 02:49:32 UTC	1093	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 36 39 62 30 35 2d 64 32 65 62 2d 31 31 65 66 2d 62 34 65 63 2d 37 61 37 64 64 36 63 32 65 39 30 66 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 71 35 34 37 49 6e 69 45 70 31 71 59 37 4f 45 67 30 50 45 2d 7a 76 49 37 63 34 54 54 62 79 4a 39 79 55 62 4a 58 58 39 61 58 52 52 46 5a 32 52 53 61 43 31 61 71 4b 56 63 4e 77 46 4c 7a 76 6f 4f 55 53 42 31 43 71 2d 6b 4b 41 56 43 5a 4d 43 4f 38 77 47 69 58 76 64 6d 57 5f 52 5f 6c 68 57 6a 39 56 5a 30 42 58 59 64 4c 71 33 43 56 66 65 65 33 44 6c 38 57 49 33 57 6b 44 64 36 Data Ascii: {"entries":[{"sid":"54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"q547IniEp1qY7OEg0PE-zvI7c4TTbyJ9yUbJXX9aXRRFZ2RSaC1aqKVcNwFLzvoOUSB1Cq-kKAVCZMCO8wGiXvdmW_R_lhWj9VZ0BXYdLq3CVfee3Dl8WI3WkDd6
2025-01-15 02:49:32 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:32 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:32 UTC	620	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 39 57 61 6b 56 38 37 4a 62 66 34 65 51 4e 62 44 41 76 52 65 65 50 39 50 7a 35 66 72 39 62 25 32 46 74 70 35 68 4f 6c 74 67 75 6f 55 4d 30 42 70 59 71 68 35 46 5a 43 34 74 6a 50 39 7a 59 4f 45 79 48 50 4b 72 57 50 67 77 6d 52 51 4d 66 41 68 4c 48 4a 75 35 6a 53 51 72 31 50 5a 32 34 68 76 49 38 46 58 4f 35 4c 33 4a 44 62 70 73 65 43 57 61 63 41 32 73 45 44 5a 54 59 4f 37 45 59 68 31 5a 7a 61 77 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9WakV87Jbf4eQNbDAvReeP9Pz5fr9b%2Ftp5hOltguoUM0BpYqh5FZC4tjP9zYOEyHPKrWPgwmRQMfAhLHJu5jSQr1PZ24hvI8FXO5L3JDbpseCWacA2sEDZTYO7EYh1Zzaw%3D%3D"}],"group":"cf-nel","max_age":604800}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.16	49949	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:32 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 2147 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ef294-d2eb-11ef-94e6-12087e0c0b48
2025-01-15 02:49:32 UTC	2147	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 61 64 32 39 35 2d 64 32 65 62 2d 31 31 65 66 2d 39 35 39 66 2d 64 36 63 35 39 39 63 62 66 34 66 63 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 57 76 71 45 57 6f 75 62 35 69 37 2d 77 62 46 71 36 53 7a 6c 6e 46 39 75 45 51 36 2d 44 52 76 47 34 74 68 39 42 4f 7a 4b 44 4f 58 6d 52 4e 48 74 4c 4d 71 49 38 6b 49 35 33 5a 30 56 69 5a 38 72 5f 35 32 6b 4f 71 74 46 41 49 62 4b 2d 37 48 71 7a 61 68 42 64 57 62 74 34 54 30 65 6c 45 34 48 73 64 5f 61 32 79 37 4d 67 53 41 69 48 54 6d 69 49 6d 48 44 33 70 53 58 75 35 4d 4f Data Ascii: {"entries":[{"sid":"546ad295-d2eb-11ef-959f-d6c599cbf4fc","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"WvqEWoub5i7-wbFq6SzlnF9uEQ6-DRvG4th9BOzKDOXmRNHtLMqI8kI53Z0ViZ8r_52kOqtFAIbK-7HqzahBdWbt4T0elE4Hsd_a2y7MgSAiHTmiImHD3pSXu5MO
2025-01-15 02:49:32 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:32 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=546ad295-d2eb-11ef-959f-d6c599cbf4fc; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=546ad295-d2eb-11ef-959f-d6c599cbf4fc; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:32 UTC	620	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 31 4d 70 51 46 56 34 6c 64 71 5a 72 43 79 46 6f 74 6a 58 35 65 4d 54 4a 35 70 42 51 6a 39 4b 35 56 37 39 57 56 41 49 54 72 52 45 58 50 78 4a 49 46 66 4a 5a 50 61 43 32 65 58 52 57 47 54 31 66 49 4a 68 77 69 4f 52 77 52 5a 74 6e 43 46 38 37 33 51 32 65 51 6b 49 7a 32 42 7a 49 49 4b 6e 5a 32 6f 77 38 75 44 6c 6a 78 6f 51 74 25 32 42 30 47 53 76 78 73 33 34 65 67 31 6f 39 55 4f 51 4b 7a 45 4f 41 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1MpQFV4ldqZrCyFotjX5eMTJ5pBQj9K5V79WVAITrREXPxJIFfJZPaC2eXRWGT1fIJhwiORwRZtnCF873Q2eQkIz2BzIIKnZ2ow8uDljxoQt%2B0GSvxs34eg1o9UOQKzEOA%3D%3D"}],"group":"cf-nel","max_age":604800}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.16	49951	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:32 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 4025 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f
2025-01-15 02:49:32 UTC	4025	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 65 66 32 39 34 2d 64 32 65 62 2d 31 31 65 66 2d 39 34 65 36 2d 31 32 30 38 37 65 30 63 30 62 34 38 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 71 44 53 77 62 4f 49 72 30 44 32 32 73 62 75 38 71 7a 4f 57 7a 7a 73 67 54 41 79 6a 58 61 59 44 30 57 6a 65 6b 6b 2d 43 42 74 71 6b 71 57 32 47 69 77 38 61 61 42 59 39 48 30 33 6a 73 6a 55 64 2d 2d 52 50 4a 49 51 43 63 38 69 73 66 58 52 6f 4c 7a 5f 4a 78 58 76 57 4f 73 67 46 4c 51 30 4c 58 51 43 56 5f 76 52 4f 37 57 5a 73 6f 36 49 2d 38 58 35 6e 68 2d 69 50 53 58 4b 58 Data Ascii: {"entries":[{"sid":"546ef294-d2eb-11ef-94e6-12087e0c0b48","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"qDSwbOIr0D22sbu8qzOWzzsgTAyjXaYD0Wjekk-CBtqkqW2Giw8aaBY9H03jsjUd--RPJIQCc8isfXRoLz_JxXvWOsgFLQ0LXQCV_vRO7WZso6I-8X5nh-iPSXKX
2025-01-15 02:49:32 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:32 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=546ef294-d2eb-11ef-94e6-12087e0c0b48; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=546ef294-d2eb-11ef-94e6-12087e0c0b48; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:32 UTC	633	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 54 65 4a 65 4f 76 43 59 44 63 69 76 41 47 44 78 6a 78 76 55 51 79 6f 32 68 52 6f 64 25 32 42 4f 51 66 71 55 43 54 52 63 73 6f 77 75 39 46 46 6d 62 6f 52 6b 7a 66 35 72 7a 52 4d 6d 45 4a 4d 25 32 46 6f 4b 25 32 46 77 56 6d 43 59 52 36 67 73 79 41 56 45 61 57 4f 55 56 6d 35 25 32 46 49 4a 52 53 44 25 32 46 35 62 79 38 4b 79 7a 63 55 53 75 48 6a 46 55 44 25 32 46 45 76 68 49 74 4c 48 25 32 46 74 4c 31 34 6b 58 58 55 67 59 6c 51 77 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TeJeOvCYDcivAGDxjxvUQyo2hRod%2BOQfqUCTRcsowu9FFmboRkzf5rzRMmEJM%2FoK%2FwVmCYR6gsyAVEaWOUVm5%2FIJRSD%2F5by8KyzcUSuHjFUD%2FEvhItLH%2FtL14kXXUgYlQw%3D%3D"}],"group":"cf-nel","max_a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.16	49961	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:33 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 4214 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f
2025-01-15 02:49:33 UTC	4214	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 36 32 63 33 62 2d 64 32 65 62 2d 31 31 65 66 2d 62 38 65 30 2d 39 65 61 37 63 65 66 33 65 30 63 66 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 49 6a 48 75 6f 4b 48 39 6e 6d 79 77 79 56 54 69 47 69 6f 44 4e 43 41 75 4c 55 44 4c 31 32 68 4f 75 47 6c 37 62 67 64 53 66 56 79 79 56 59 42 54 7a 37 5a 73 72 37 75 75 54 6c 38 54 4a 49 6b 35 64 57 66 38 31 55 48 2d 41 73 4b 6f 4e 33 45 61 64 44 77 6a 55 42 4a 51 75 51 51 6c 56 79 41 39 36 33 51 70 4b 42 4c 68 5a 53 76 4d 49 62 48 50 76 4a 6c 66 69 56 68 7a 71 56 6c 5a Data Ascii: {"entries":[{"sid":"54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"IjHuoKH9nmywyVTiGioDNCAuLUDL12hOuGl7bgdSfVyyVYBTz7Zsr7uuTl8TJIk5dWf81UH-AsKoN3EadDwjUBJQuQQlVyA963QpKBLhZSvMIbHPvJlfiVhzqVlZ
2025-01-15 02:49:33 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:33 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:33 UTC	626	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 37 46 75 64 38 46 42 6d 54 4c 42 43 57 73 56 63 54 4f 30 47 6e 63 77 75 46 51 65 52 4b 4e 41 4c 42 64 73 6c 58 41 44 62 31 5a 72 36 32 30 73 34 58 45 53 51 51 35 34 76 65 59 37 61 75 48 50 48 31 4a 68 6e 69 34 38 45 7a 71 43 6f 56 44 58 54 49 6e 4b 25 32 42 63 70 66 33 43 41 25 32 46 6d 65 66 6b 74 25 32 46 58 6e 6f 33 45 49 78 50 33 55 58 38 51 31 76 75 73 52 78 59 49 4f 42 77 63 78 62 48 43 38 5a 45 67 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7Fud8FBmTLBCWsVcTO0GncwuFQeRKNALBdslXADb1Zr620s4XESQQ54veY7auHPH1Jhni48EzqCoVDXTInK%2Bcpf3CA%2Fmefkt%2FXno3EIxP3UX8Q1vusRxYIOBwcxbHC8ZEg%3D%3D"}],"group":"cf-nel","max_age":6048

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.16	49962	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:33 UTC	740	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 960 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f
2025-01-15 02:49:33 UTC	960	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 61 66 65 34 37 2d 64 32 65 62 2d 31 31 65 66 2d 61 64 37 38 2d 61 32 33 62 64 31 34 31 32 66 63 32 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 68 41 49 32 4b 71 46 56 7a 45 67 6c 75 5a 68 41 46 72 73 72 57 66 64 2d 57 6d 35 4a 39 50 30 2d 44 49 46 33 4f 57 6a 46 6f 6d 68 7a 76 37 65 73 4e 42 42 77 78 54 2d 4d 56 52 63 69 6c 75 47 31 45 6d 33 6b 2d 76 37 49 77 53 74 6c 4f 68 74 6b 37 6a 63 76 36 49 30 4e 48 55 4c 4d 54 71 61 42 76 51 47 43 42 69 53 50 72 68 6d 33 74 7a 46 55 4d 69 54 48 38 56 56 57 54 42 79 58 Data Ascii: {"entries":[{"sid":"546afe47-d2eb-11ef-ad78-a23bd1412fc2","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"hAI2KqFVzEgluZhAFrsrWfd-Wm5J9P0-DIF3OWjFomhzv7esNBBwxT-MVRciluG1Em3k-v7IwStlOhtk7jcv6I0NHULMTqaBvQGCBiSPrhm3tzFUMiTH8VVWTByX
2025-01-15 02:49:33 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:33 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=546afe47-d2eb-11ef-ad78-a23bd1412fc2; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=546afe47-d2eb-11ef-ad78-a23bd1412fc2; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:33 UTC	632	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 73 66 45 75 53 74 32 46 4e 48 51 70 5a 25 32 46 62 73 52 4c 43 6d 31 78 53 30 57 41 42 61 31 4e 39 31 47 36 76 71 5a 51 58 62 45 70 25 32 46 35 61 67 46 25 32 46 55 69 30 6c 58 4c 43 7a 78 6b 61 35 36 54 61 68 71 4c 4c 53 53 62 42 71 49 46 76 6a 25 32 46 39 6f 49 54 58 6a 41 6d 63 51 39 50 66 62 4c 45 41 31 71 4a 47 38 32 6c 62 75 67 37 52 77 52 5a 4c 7a 33 41 30 55 64 64 4b 68 4b 70 65 67 25 32 46 25 32 46 25 32 42 56 6a 6c 51 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sfEuSt2FNHQpZ%2FbsRLCm1xS0WABa1N91G6vqZQXbEp%2F5agF%2FUi0lXLCzxka56TahqLLSSbBqIFvj%2F9oITXjAmcQ9PfbLEA1qJG82lbug7RwRZLz3A0UddKhKpeg%2F%2F%2BVjlQ%3D%3D"}],"group":"cf-nel","max_a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.16	49964	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:33 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 3394 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f
2025-01-15 02:49:33 UTC	3394	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 61 66 65 34 37 2d 64 32 65 62 2d 31 31 65 66 2d 61 64 37 38 2d 61 32 33 62 64 31 34 31 32 66 63 32 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 68 41 49 32 4b 71 46 56 7a 45 67 6c 75 5a 68 41 46 72 73 72 57 66 64 2d 57 6d 35 4a 39 50 30 2d 44 49 46 33 4f 57 6a 46 6f 6d 68 7a 76 37 65 73 4e 42 42 77 78 54 2d 4d 56 52 63 69 6c 75 47 31 45 6d 33 6b 2d 76 37 49 77 53 74 6c 4f 68 74 6b 37 6a 63 76 36 49 30 4e 48 55 4c 4d 54 71 61 42 76 51 47 43 42 69 53 50 72 68 6d 33 74 7a 46 55 4d 69 54 48 38 56 56 57 54 42 79 58 Data Ascii: {"entries":[{"sid":"546afe47-d2eb-11ef-ad78-a23bd1412fc2","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"hAI2KqFVzEgluZhAFrsrWfd-Wm5J9P0-DIF3OWjFomhzv7esNBBwxT-MVRciluG1Em3k-v7IwStlOhtk7jcv6I0NHULMTqaBvQGCBiSPrhm3tzFUMiTH8VVWTByX
2025-01-15 02:49:33 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:33 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=546afe47-d2eb-11ef-ad78-a23bd1412fc2; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=546afe47-d2eb-11ef-ad78-a23bd1412fc2; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:33 UTC	624	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 61 79 79 54 68 72 6e 66 62 31 78 36 4b 34 70 49 59 61 76 4e 35 25 32 42 6b 78 50 37 53 66 68 76 31 69 69 65 52 50 47 72 69 54 30 6c 50 4f 41 44 34 6f 38 69 58 79 59 75 32 34 32 52 6c 4e 65 70 47 31 4e 62 44 44 68 45 47 33 74 72 57 71 6e 53 52 5a 4c 73 37 48 73 39 25 32 46 36 69 4f 36 79 6d 4d 54 62 58 50 35 6d 71 4a 33 69 46 6a 47 41 64 31 6b 4f 38 51 30 25 32 42 49 6e 79 61 6e 63 58 4d 6f 75 34 6c 31 67 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ayyThrnfb1x6K4pIYavN5%2BkxP7Sfhv1iieRPGriT0lPOAD4o8iXyYu242RlNepG1NbDDhEG3trWqnSRZLs7Hs9%2F6iO6ymMTbXP5mqJ3iFjGAd1kO8Q0%2BInyancXMou4l1g%3D%3D"}],"group":"cf-nel","max_age":6048

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.16	49965	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:33 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 1000 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546afe47-d2eb-11ef-ad78-a23bd1412fc2
2025-01-15 02:49:33 UTC	1000	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 36 39 62 30 35 2d 64 32 65 62 2d 31 31 65 66 2d 62 34 65 63 2d 37 61 37 64 64 36 63 32 65 39 30 66 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 71 35 34 37 49 6e 69 45 70 31 71 59 37 4f 45 67 30 50 45 2d 7a 76 49 37 63 34 54 54 62 79 4a 39 79 55 62 4a 58 58 39 61 58 52 52 46 5a 32 52 53 61 43 31 61 71 4b 56 63 4e 77 46 4c 7a 76 6f 4f 55 53 42 31 43 71 2d 6b 4b 41 56 43 5a 4d 43 4f 38 77 47 69 58 76 64 6d 57 5f 52 5f 6c 68 57 6a 39 56 5a 30 42 58 59 64 4c 71 33 43 56 66 65 65 33 44 6c 38 57 49 33 57 6b 44 64 36 Data Ascii: {"entries":[{"sid":"54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"q547IniEp1qY7OEg0PE-zvI7c4TTbyJ9yUbJXX9aXRRFZ2RSaC1aqKVcNwFLzvoOUSB1Cq-kKAVCZMCO8wGiXvdmW_R_lhWj9VZ0BXYdLq3CVfee3Dl8WI3WkDd6
2025-01-15 02:49:33 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:33 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:33 UTC	628	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 5a 41 48 51 66 6c 41 77 30 66 35 67 7a 67 6d 62 74 75 66 74 38 64 4d 6e 50 71 43 71 39 6c 44 47 49 68 71 54 41 47 6d 25 32 42 66 4f 48 61 56 38 25 32 42 6c 4b 64 65 52 55 36 51 71 38 67 37 4a 53 53 76 70 65 49 69 6a 30 42 25 32 46 52 53 7a 33 6d 56 4e 69 62 55 6b 39 4d 56 76 52 58 42 56 50 61 7a 6b 4a 62 4c 4b 70 71 35 70 65 31 71 34 55 32 63 69 68 50 53 36 63 72 25 32 46 78 4b 25 32 46 4c 64 6b 5a 38 31 71 32 6a 41 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZAHQflAw0f5gzgmbtuft8dMnPqCq9lDGIhqTAGm%2BfOHaV8%2BlKdeRU6Qq8g7JSSvpeIij0B%2FRSz3mVNibUk9MVvRXBVPazkJbLKpq5pe1q4U2cihPS6cr%2FxK%2FLdkZ81q2jA%3D%3D"}],"group":"cf-nel","max_age":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.16	49966	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:33 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 1929 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546afe47-d2eb-11ef-ad78-a23bd1412fc2
2025-01-15 02:49:33 UTC	1929	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 64 61 36 64 30 2d 64 32 65 62 2d 31 31 65 66 2d 61 64 36 31 2d 30 36 66 38 64 33 31 31 62 35 37 33 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 50 61 63 73 30 79 5f 68 38 41 6f 53 70 53 64 6d 75 46 66 6a 41 32 2d 4a 68 38 35 44 38 6c 61 75 76 77 74 49 48 42 5f 31 47 69 70 72 58 5a 42 35 7a 2d 5f 45 33 4a 31 48 35 68 55 58 51 44 5a 45 73 76 56 57 37 4a 56 57 55 64 47 4d 61 5f 55 30 43 35 5f 74 6b 62 34 6d 50 31 5a 6c 45 6e 70 39 53 51 43 4f 55 54 39 5a 47 71 76 55 50 4b 56 51 6c 6e 6d 70 4f 2d 65 65 6e 5f 4b 35 Data Ascii: {"entries":[{"sid":"546da6d0-d2eb-11ef-ad61-06f8d311b573","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"Pacs0y_h8AoSpSdmuFfjA2-Jh85D8lauvwtIHB_1GiprXZB5z-_E3J1H5hUXQDZEsvVW7JVWUdGMa_U0C5_tkb4mP1ZlEnp9SQCOUT9ZGqvUPKVQlnmpO-een_K5
2025-01-15 02:49:33 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:33 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=546da6d0-d2eb-11ef-ad61-06f8d311b573; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=546da6d0-d2eb-11ef-ad61-06f8d311b573; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:33 UTC	624	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 57 50 58 69 49 4f 78 64 51 4c 30 31 44 57 45 62 37 62 46 75 6e 7a 53 44 72 72 36 69 52 6b 6a 50 49 46 45 64 7a 45 49 44 56 39 6b 73 6d 78 74 33 4f 78 44 6d 4c 44 59 56 34 44 4d 57 4b 67 43 7a 4e 4c 4b 59 74 37 50 6e 59 4b 72 33 25 32 46 37 6a 65 48 48 25 32 46 78 65 68 70 4f 4a 7a 34 7a 43 76 72 58 4a 6a 77 58 54 36 30 6e 52 51 6e 73 35 56 47 36 43 52 46 25 32 46 6c 6a 57 6f 72 69 77 46 58 6e 77 47 38 77 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WPXiIOxdQL01DWEb7bFunzSDrr6iRkjPIFEdzEIDV9ksmxt3OxDmLDYV4DMWKgCzNLKYt7PnYKr3%2F7jeHH%2FxehpOJz4zCvrXJjwXT60nRQns5VG6CRF%2FljWoriwFXnwG8w%3D%3D"}],"group":"cf-nel","max_age":6048

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.16	49973	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:33 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 1984 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ad295-d2eb-11ef-959f-d6c599cbf4fc
2025-01-15 02:49:33 UTC	1984	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 61 64 32 39 35 2d 64 32 65 62 2d 31 31 65 66 2d 39 35 39 66 2d 64 36 63 35 39 39 63 62 66 34 66 63 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 57 76 71 45 57 6f 75 62 35 69 37 2d 77 62 46 71 36 53 7a 6c 6e 46 39 75 45 51 36 2d 44 52 76 47 34 74 68 39 42 4f 7a 4b 44 4f 58 6d 52 4e 48 74 4c 4d 71 49 38 6b 49 35 33 5a 30 56 69 5a 38 72 5f 35 32 6b 4f 71 74 46 41 49 62 4b 2d 37 48 71 7a 61 68 42 64 57 62 74 34 54 30 65 6c 45 34 48 73 64 5f 61 32 79 37 4d 67 53 41 69 48 54 6d 69 49 6d 48 44 33 70 53 58 75 35 4d 4f Data Ascii: {"entries":[{"sid":"546ad295-d2eb-11ef-959f-d6c599cbf4fc","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"WvqEWoub5i7-wbFq6SzlnF9uEQ6-DRvG4th9BOzKDOXmRNHtLMqI8kI53Z0ViZ8r_52kOqtFAIbK-7HqzahBdWbt4T0elE4Hsd_a2y7MgSAiHTmiImHD3pSXu5MO
2025-01-15 02:49:33 UTC	1320	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:33 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Via: 1.1 google cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QTaEmwVl%2B3EGo%2FHWRHEfPJ28%2Fx19tJ9TH21n9h9sZzQWK1%2FZNW1hDzyEPBUo20jgQzpqmrpw11FbCZnM0opBiZjWpGX7E49VVkEdSzaTxsZqmbHe5dV6okqOW8j6sRpNmA%3D%3D"}],"group":"cf-nel","max_age":604800}
2025-01-15 02:49:33 UTC	362	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 32 32 38 64 61 31 39 39 62 33 35 37 35 32 2d 49 41 44 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 37 30 31 39 26 6d 69 6e 5f 72 74 74 3d 36 39 30 30 26 72 74 74 5f 76 61 72 3d 32 36 37 32 26 73 65 6e 74 3d 34 26 72 65 63 76 3d 38 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f Data Ascii: NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 90228da199b35752-IADalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=7019&min_rtt=6900&rtt_var=2672&sent=4&recv=8&lost=0&retrans=0&sent_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.16	49971	192.124.249.38	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:33 UTC	1204	OUT	GET /favicon-32x32.png HTTP/1.1 Host: androiddatahost.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://androiddatahost.com/sdsd3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.378168725.1736909362; _gid=GA1.2.1596410557.1736909362; _gat=1; _ga_L3KCHB9NB2=GS1.2.1736909364.1.0.1736909364.0.0.0; __gads=ID=a9d88aad96a4f337:T=1736909364:RT=1736909364:S=ALNI_MYpTjbATQ96LU0SNgdD42A-b9Szjw; __gpi=UID=00000fb9551bdf9b:T=1736909364:RT=1736909364:S=ALNI_Mb6VpJ5WHmDN-dR3_vNiUnzy0Rz1w; __eoi=ID=561f09b7ce22ff6f:T=1736909364:RT=1736909364:S=AA-AfjZhVpDGU5us2vSioVEh1-JY; FCNEC=%5B%5B%22AKsRol99hD3LJP4ogQhrFGORTThgCSWYsYvMQO49kttl7Ba2whU9zPMsY7gcL92_v7LWe_lY2MfglL7SP6O79Jkuj29fdW0Mf9pbXmhGsQbZEM5ydtrDyP9HZjQ9qAXQQJ70zwCA0TrBnqVvXj96Fi53p6_0pYGLmw%3D%3D%22%5D%5D
2025-01-15 02:49:33 UTC	690	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Wed, 15 Jan 2025 02:49:33 GMT Content-Type: image/png Content-Length: 903 Connection: close X-Sucuri-ID: 14038 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; cache-control: max-age=315360000 expires: Thu, 31 Dec 2037 23:55:55 GMT etag: "387-64711425-54834a1;;;" last-modified: Fri, 26 May 2023 20:18:45 GMT alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" X-Sucuri-Cache: HIT Accept-Ranges: bytes
2025-01-15 02:49:33 UTC	903	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 03 00 00 00 44 a4 8a c6 00 00 01 0e 50 4c 54 45 00 00 00 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 35 40 58 33 3d 55 ff ff ff 45 4e 64 fd fd fd df e0 e4 40 4a 61 e5 e6 ea 49 53 69 3d 47 5e ea eb ee f9 fa fa 7b 82 91 d5 d7 dc 3a 43 5b ed ed f0 e2 e4 e7 b5 b9 c2 52 5a 6f 4e 58 6d fb fb fc f5 f5 f7 ef f0 f2 a5 aa b4 9a 9f ab 67 6e 81 4b 54 6a 48 51 67 37 41 59 f7 f7 f8 f1 f2 f4 be c1 c9 ce d0 d6 b0 b3 bd a3 a7 b2 89 8f 9d 80 86 96 6f 76 88 6a 71 83 62 69 7c 5d 65 78 5a 62 76 d4 d6 db c5 c8 cf b8 bc c4 b3 b6 c0 ac b1 bb 55 5e 72 da dc e1 d2 d5 da a6 ad b6 9f a4 b0 83 Data Ascii: PNGIHDR DPLTE6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X5@X3=UENd@JaISi=G^{:C[RZoNXmgnKTjHQg7AYovjqbi\|]exZbvU^r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.16	49970	192.124.249.38	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:33 UTC	1213	OUT	GET /android-chrome-192x192.png HTTP/1.1 Host: androiddatahost.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://androiddatahost.com/sdsd3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.378168725.1736909362; _gid=GA1.2.1596410557.1736909362; _gat=1; _ga_L3KCHB9NB2=GS1.2.1736909364.1.0.1736909364.0.0.0; __gads=ID=a9d88aad96a4f337:T=1736909364:RT=1736909364:S=ALNI_MYpTjbATQ96LU0SNgdD42A-b9Szjw; __gpi=UID=00000fb9551bdf9b:T=1736909364:RT=1736909364:S=ALNI_Mb6VpJ5WHmDN-dR3_vNiUnzy0Rz1w; __eoi=ID=561f09b7ce22ff6f:T=1736909364:RT=1736909364:S=AA-AfjZhVpDGU5us2vSioVEh1-JY; FCNEC=%5B%5B%22AKsRol99hD3LJP4ogQhrFGORTThgCSWYsYvMQO49kttl7Ba2whU9zPMsY7gcL92_v7LWe_lY2MfglL7SP6O79Jkuj29fdW0Mf9pbXmhGsQbZEM5ydtrDyP9HZjQ9qAXQQJ70zwCA0TrBnqVvXj96Fi53p6_0pYGLmw%3D%3D%22%5D%5D
2025-01-15 02:49:33 UTC	692	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Wed, 15 Jan 2025 02:49:33 GMT Content-Type: image/png Content-Length: 4168 Connection: close X-Sucuri-ID: 14038 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; cache-control: max-age=315360000 expires: Thu, 31 Dec 2037 23:55:55 GMT etag: "1048-64711425-5483494;;;" last-modified: Fri, 26 May 2023 20:18:45 GMT alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" X-Sucuri-Cache: HIT Accept-Ranges: bytes
2025-01-15 02:49:33 UTC	4168	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 03 00 00 00 65 02 9c 35 00 00 01 77 50 4c 54 45 00 00 00 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 ff ff ff 34 3e 56 35 3f 57 2a b6 90 3d 46 5d ef f0 f2 5a 62 76 c9 cc d2 46 4f 65 32 3d 55 de e0 e4 9a 9f ab 41 4a 61 d5 d7 dc f6 f7 f8 50 58 6e e7 e9 eb 82 88 97 3e 47 5e cd d0 d6 9e a2 ae 66 6e 80 fd fd fd 37 41 59 f9 f9 fa 3a Data Ascii: PNGIHDRe5wPLTE6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X4>V5?W*=F]ZbvFOe2=UAJaPXn>G^fn7AY:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.16	49982	192.124.249.38	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:34 UTC	959	OUT	GET /favicon-32x32.png HTTP/1.1 Host: androiddatahost.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.378168725.1736909362; _gid=GA1.2.1596410557.1736909362; _gat=1; _ga_L3KCHB9NB2=GS1.2.1736909364.1.0.1736909364.0.0.0; __gads=ID=a9d88aad96a4f337:T=1736909364:RT=1736909364:S=ALNI_MYpTjbATQ96LU0SNgdD42A-b9Szjw; __gpi=UID=00000fb9551bdf9b:T=1736909364:RT=1736909364:S=ALNI_Mb6VpJ5WHmDN-dR3_vNiUnzy0Rz1w; __eoi=ID=561f09b7ce22ff6f:T=1736909364:RT=1736909364:S=AA-AfjZhVpDGU5us2vSioVEh1-JY; FCNEC=%5B%5B%22AKsRol99hD3LJP4ogQhrFGORTThgCSWYsYvMQO49kttl7Ba2whU9zPMsY7gcL92_v7LWe_lY2MfglL7SP6O79Jkuj29fdW0Mf9pbXmhGsQbZEM5ydtrDyP9HZjQ9qAXQQJ70zwCA0TrBnqVvXj96Fi53p6_0pYGLmw%3D%3D%22%5D%5D
2025-01-15 02:49:34 UTC	690	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Wed, 15 Jan 2025 02:49:34 GMT Content-Type: image/png Content-Length: 903 Connection: close X-Sucuri-ID: 14038 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; cache-control: max-age=315360000 expires: Thu, 31 Dec 2037 23:55:55 GMT etag: "387-64711425-54834a1;;;" last-modified: Fri, 26 May 2023 20:18:45 GMT alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" X-Sucuri-Cache: HIT Accept-Ranges: bytes
2025-01-15 02:49:34 UTC	903	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 03 00 00 00 44 a4 8a c6 00 00 01 0e 50 4c 54 45 00 00 00 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 35 40 58 33 3d 55 ff ff ff 45 4e 64 fd fd fd df e0 e4 40 4a 61 e5 e6 ea 49 53 69 3d 47 5e ea eb ee f9 fa fa 7b 82 91 d5 d7 dc 3a 43 5b ed ed f0 e2 e4 e7 b5 b9 c2 52 5a 6f 4e 58 6d fb fb fc f5 f5 f7 ef f0 f2 a5 aa b4 9a 9f ab 67 6e 81 4b 54 6a 48 51 67 37 41 59 f7 f7 f8 f1 f2 f4 be c1 c9 ce d0 d6 b0 b3 bd a3 a7 b2 89 8f 9d 80 86 96 6f 76 88 6a 71 83 62 69 7c 5d 65 78 5a 62 76 d4 d6 db c5 c8 cf b8 bc c4 b3 b6 c0 ac b1 bb 55 5e 72 da dc e1 d2 d5 da a6 ad b6 9f a4 b0 83 Data Ascii: PNGIHDR DPLTE6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X5@X3=UENd@JaISi=G^{:C[RZoNXmgnKTjHQg7AYovjqbi\|]exZbvU^r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.16	49983	192.124.249.38	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:34 UTC	968	OUT	GET /android-chrome-192x192.png HTTP/1.1 Host: androiddatahost.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.378168725.1736909362; _gid=GA1.2.1596410557.1736909362; _gat=1; _ga_L3KCHB9NB2=GS1.2.1736909364.1.0.1736909364.0.0.0; __gads=ID=a9d88aad96a4f337:T=1736909364:RT=1736909364:S=ALNI_MYpTjbATQ96LU0SNgdD42A-b9Szjw; __gpi=UID=00000fb9551bdf9b:T=1736909364:RT=1736909364:S=ALNI_Mb6VpJ5WHmDN-dR3_vNiUnzy0Rz1w; __eoi=ID=561f09b7ce22ff6f:T=1736909364:RT=1736909364:S=AA-AfjZhVpDGU5us2vSioVEh1-JY; FCNEC=%5B%5B%22AKsRol99hD3LJP4ogQhrFGORTThgCSWYsYvMQO49kttl7Ba2whU9zPMsY7gcL92_v7LWe_lY2MfglL7SP6O79Jkuj29fdW0Mf9pbXmhGsQbZEM5ydtrDyP9HZjQ9qAXQQJ70zwCA0TrBnqVvXj96Fi53p6_0pYGLmw%3D%3D%22%5D%5D
2025-01-15 02:49:34 UTC	692	IN	HTTP/1.1 200 OK Server: Sucuri/Cloudproxy Date: Wed, 15 Jan 2025 02:49:34 GMT Content-Type: image/png Content-Length: 4168 Connection: close X-Sucuri-ID: 14038 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Content-Security-Policy: upgrade-insecure-requests; cache-control: max-age=315360000 expires: Thu, 31 Dec 2037 23:55:55 GMT etag: "1048-64711425-5483494;;;" last-modified: Fri, 26 May 2023 20:18:45 GMT alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46" X-Sucuri-Cache: HIT Accept-Ranges: bytes
2025-01-15 02:49:34 UTC	4168	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 03 00 00 00 65 02 9c 35 00 00 01 77 50 4c 54 45 00 00 00 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 36 40 58 ff ff ff 34 3e 56 35 3f 57 2a b6 90 3d 46 5d ef f0 f2 5a 62 76 c9 cc d2 46 4f 65 32 3d 55 de e0 e4 9a 9f ab 41 4a 61 d5 d7 dc f6 f7 f8 50 58 6e e7 e9 eb 82 88 97 3e 47 5e cd d0 d6 9e a2 ae 66 6e 80 fd fd fd 37 41 59 f9 f9 fa 3a Data Ascii: PNGIHDRe5wPLTE6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X6@X4>V5?W*=F]ZbvFOe2=UAJaPXn>G^fn7AY:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.16	49981	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:34 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 4024 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ad295-d2eb-11ef-959f-d6c599cbf4fc
2025-01-15 02:49:34 UTC	4024	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 36 39 62 30 35 2d 64 32 65 62 2d 31 31 65 66 2d 62 34 65 63 2d 37 61 37 64 64 36 63 32 65 39 30 66 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 71 35 34 37 49 6e 69 45 70 31 71 59 37 4f 45 67 30 50 45 2d 7a 76 49 37 63 34 54 54 62 79 4a 39 79 55 62 4a 58 58 39 61 58 52 52 46 5a 32 52 53 61 43 31 61 71 4b 56 63 4e 77 46 4c 7a 76 6f 4f 55 53 42 31 43 71 2d 6b 4b 41 56 43 5a 4d 43 4f 38 77 47 69 58 76 64 6d 57 5f 52 5f 6c 68 57 6a 39 56 5a 30 42 58 59 64 4c 71 33 43 56 66 65 65 33 44 6c 38 57 49 33 57 6b 44 64 36 Data Ascii: {"entries":[{"sid":"54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"q547IniEp1qY7OEg0PE-zvI7c4TTbyJ9yUbJXX9aXRRFZ2RSaC1aqKVcNwFLzvoOUSB1Cq-kKAVCZMCO8wGiXvdmW_R_lhWj9VZ0BXYdLq3CVfee3Dl8WI3WkDd6
2025-01-15 02:49:34 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:34 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:34 UTC	636	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 58 36 6a 4f 55 37 33 49 25 32 42 25 32 46 6c 37 73 49 66 30 58 25 32 46 68 61 32 4d 36 50 74 33 48 50 6b 78 79 56 69 52 72 44 56 6a 25 32 46 33 61 47 31 46 4a 55 59 70 7a 51 35 75 4c 44 42 41 6e 25 32 46 55 25 32 42 41 4a 63 76 75 6e 46 49 74 52 4e 64 32 25 32 46 25 32 42 49 72 75 6b 44 30 44 5a 70 4f 34 43 32 46 73 76 4b 65 72 31 35 73 44 25 32 42 43 4d 59 44 6f 35 6b 78 48 46 6d 35 31 6e 79 52 47 5a 64 5a 70 46 73 32 5a 39 73 72 38 74 51 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X6jOU73I%2B%2Fl7sIf0X%2Fha2M6Pt3HPkxyViRrDVj%2F3aG1FJUYpzQ5uLDBAn%2FU%2BAJcvunFItRNd2%2F%2BIrukD0DZpO4C2FsvKer15sD%2BCMYDo5kxHFm51nyRGZdZpFs2Z9sr8tQ%3D%3D"}],"group":"cf-nel","m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.16	49984	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:34 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 7320 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ad295-d2eb-11ef-959f-d6c599cbf4fc
2025-01-15 02:49:34 UTC	7320	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 61 64 32 39 35 2d 64 32 65 62 2d 31 31 65 66 2d 39 35 39 66 2d 64 36 63 35 39 39 63 62 66 34 66 63 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 57 76 71 45 57 6f 75 62 35 69 37 2d 77 62 46 71 36 53 7a 6c 6e 46 39 75 45 51 36 2d 44 52 76 47 34 74 68 39 42 4f 7a 4b 44 4f 58 6d 52 4e 48 74 4c 4d 71 49 38 6b 49 35 33 5a 30 56 69 5a 38 72 5f 35 32 6b 4f 71 74 46 41 49 62 4b 2d 37 48 71 7a 61 68 42 64 57 62 74 34 54 30 65 6c 45 34 48 73 64 5f 61 32 79 37 4d 67 53 41 69 48 54 6d 69 49 6d 48 44 33 70 53 58 75 35 4d 4f Data Ascii: {"entries":[{"sid":"546ad295-d2eb-11ef-959f-d6c599cbf4fc","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"WvqEWoub5i7-wbFq6SzlnF9uEQ6-DRvG4th9BOzKDOXmRNHtLMqI8kI53Z0ViZ8r_52kOqtFAIbK-7HqzahBdWbt4T0elE4Hsd_a2y7MgSAiHTmiImHD3pSXu5MO
2025-01-15 02:49:34 UTC	1326	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:34 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Via: 1.1 google cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W20FWYheWZlTgZ5T%2Bhxxajw6%2Fsvy%2FbWhLWLG%2BrjirMQD9Tif62RFQ3AyhutWBuihzfxy3Xr%2FnNSML2qtQdRwb3AbxPfoC1KaxdFmb2%2B9fPiDC3L%2BMjmSmn99bZQbj9bo3A%3D%3D"}],"group":"cf-nel","max_age":604800}
2025-01-15 02:49:34 UTC	365	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 32 32 38 64 61 35 61 61 35 39 61 32 62 61 2d 59 55 4c 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 37 36 38 34 26 6d 69 6e 5f 72 74 74 3d 31 37 36 37 34 26 72 74 74 5f 76 61 72 3d 36 36 33 35 26 73 65 6e 74 3d 37 26 72 65 63 76 3d 31 32 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 Data Ascii: NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 90228da5aa59a2ba-YULalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=17684&min_rtt=17674&rtt_var=6635&sent=7&recv=12&lost=0&retrans=0&se

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.16	49987	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:34 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 7069 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ad295-d2eb-11ef-959f-d6c599cbf4fc
2025-01-15 02:49:34 UTC	7069	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 65 66 32 39 34 2d 64 32 65 62 2d 31 31 65 66 2d 39 34 65 36 2d 31 32 30 38 37 65 30 63 30 62 34 38 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 71 44 53 77 62 4f 49 72 30 44 32 32 73 62 75 38 71 7a 4f 57 7a 7a 73 67 54 41 79 6a 58 61 59 44 30 57 6a 65 6b 6b 2d 43 42 74 71 6b 71 57 32 47 69 77 38 61 61 42 59 39 48 30 33 6a 73 6a 55 64 2d 2d 52 50 4a 49 51 43 63 38 69 73 66 58 52 6f 4c 7a 5f 4a 78 58 76 57 4f 73 67 46 4c 51 30 4c 58 51 43 56 5f 76 52 4f 37 57 5a 73 6f 36 49 2d 38 58 35 6e 68 2d 69 50 53 58 4b 58 Data Ascii: {"entries":[{"sid":"546ef294-d2eb-11ef-94e6-12087e0c0b48","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"qDSwbOIr0D22sbu8qzOWzzsgTAyjXaYD0Wjekk-CBtqkqW2Giw8aaBY9H03jsjUd--RPJIQCc8isfXRoLz_JxXvWOsgFLQ0LXQCV_vRO7WZso6I-8X5nh-iPSXKX
2025-01-15 02:49:34 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:34 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=546ef294-d2eb-11ef-94e6-12087e0c0b48; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=546ef294-d2eb-11ef-94e6-12087e0c0b48; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:34 UTC	626	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 57 6b 51 6e 34 25 32 42 52 4e 48 42 49 68 78 77 73 68 75 65 77 65 4e 32 35 65 63 6b 48 4f 25 32 46 4b 43 4f 4b 55 55 46 35 33 6e 66 35 4d 78 73 45 45 48 76 46 78 4e 74 7a 4c 42 53 25 32 46 6f 55 5a 4d 25 32 42 69 42 6f 38 30 77 56 58 4e 38 4b 32 61 31 31 51 39 63 78 46 4c 38 4d 59 63 42 52 67 75 32 36 69 71 37 73 4b 4c 32 47 59 4d 6d 49 69 39 61 6e 34 6e 6e 46 49 4c 4f 65 74 74 32 71 48 48 54 4b 77 66 62 75 77 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WkQn4%2BRNHBIhxwshueweN25eckHO%2FKCOKUUF53nf5MxsEEHvFxNtzLBS%2FoUZM%2BiBo80wVXN8K2a11Q9cxFL8MYcBRgu26iq7sKL2GYMmIi9an4nnFILOett2qHHTKwfbuw%3D%3D"}],"group":"cf-nel","max_age":60

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.16	49986	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:34 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 7354 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ad295-d2eb-11ef-959f-d6c599cbf4fc
2025-01-15 02:49:34 UTC	7354	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 36 32 63 33 62 2d 64 32 65 62 2d 31 31 65 66 2d 62 38 65 30 2d 39 65 61 37 63 65 66 33 65 30 63 66 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 49 6a 48 75 6f 4b 48 39 6e 6d 79 77 79 56 54 69 47 69 6f 44 4e 43 41 75 4c 55 44 4c 31 32 68 4f 75 47 6c 37 62 67 64 53 66 56 79 79 56 59 42 54 7a 37 5a 73 72 37 75 75 54 6c 38 54 4a 49 6b 35 64 57 66 38 31 55 48 2d 41 73 4b 6f 4e 33 45 61 64 44 77 6a 55 42 4a 51 75 51 51 6c 56 79 41 39 36 33 51 70 4b 42 4c 68 5a 53 76 4d 49 62 48 50 76 4a 6c 66 69 56 68 7a 71 56 6c 5a Data Ascii: {"entries":[{"sid":"54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"IjHuoKH9nmywyVTiGioDNCAuLUDL12hOuGl7bgdSfVyyVYBTz7Zsr7uuTl8TJIk5dWf81UH-AsKoN3EadDwjUBJQuQQlVyA963QpKBLhZSvMIbHPvJlfiVhzqVlZ
2025-01-15 02:49:34 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:34 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:34 UTC	627	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 39 36 58 43 35 51 31 30 38 49 35 52 72 25 32 46 6f 38 39 74 38 59 6b 78 36 70 74 59 44 73 78 4c 4e 4a 46 47 49 68 4d 69 50 73 6c 6a 73 6e 25 32 46 36 49 71 39 56 25 32 42 34 4a 51 64 73 59 62 25 32 46 79 63 66 4a 43 32 69 6e 4c 74 4c 74 46 54 34 63 6e 49 6c 79 78 72 77 54 52 49 62 76 39 53 62 70 4a 4e 70 46 38 50 53 74 49 78 32 72 32 54 45 54 6d 59 72 53 38 58 50 54 4d 4d 67 70 41 35 6f 38 31 30 52 6f 34 50 51 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=96XC5Q108I5Rr%2Fo89t8Ykx6ptYDsxLNJFGIhMiPsljsn%2F6Iq9V%2B4JQdsYb%2FycfJC2inLtLtFT4cnIlyxrwTRIbv9SbpJNpF8PStIx2r2TETmYrS8XPTMMgpA5o810Ro4PQ%3D%3D"}],"group":"cf-nel","max_age":60

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.16	49990	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:34 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 6507 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546ad295-d2eb-11ef-959f-d6c599cbf4fc
2025-01-15 02:49:34 UTC	6507	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 61 66 65 34 37 2d 64 32 65 62 2d 31 31 65 66 2d 61 64 37 38 2d 61 32 33 62 64 31 34 31 32 66 63 32 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 68 41 49 32 4b 71 46 56 7a 45 67 6c 75 5a 68 41 46 72 73 72 57 66 64 2d 57 6d 35 4a 39 50 30 2d 44 49 46 33 4f 57 6a 46 6f 6d 68 7a 76 37 65 73 4e 42 42 77 78 54 2d 4d 56 52 63 69 6c 75 47 31 45 6d 33 6b 2d 76 37 49 77 53 74 6c 4f 68 74 6b 37 6a 63 76 36 49 30 4e 48 55 4c 4d 54 71 61 42 76 51 47 43 42 69 53 50 72 68 6d 33 74 7a 46 55 4d 69 54 48 38 56 56 57 54 42 79 58 Data Ascii: {"entries":[{"sid":"546afe47-d2eb-11ef-ad78-a23bd1412fc2","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"hAI2KqFVzEgluZhAFrsrWfd-Wm5J9P0-DIF3OWjFomhzv7esNBBwxT-MVRciluG1Em3k-v7IwStlOhtk7jcv6I0NHULMTqaBvQGCBiSPrhm3tzFUMiTH8VVWTByX
2025-01-15 02:49:34 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:34 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=546afe47-d2eb-11ef-ad78-a23bd1412fc2; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=546afe47-d2eb-11ef-ad78-a23bd1412fc2; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:34 UTC	631	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 4a 54 59 34 44 68 56 4d 65 38 70 4c 5a 25 32 42 30 47 6b 67 47 50 75 79 66 48 70 71 38 38 4d 42 6d 6f 6f 25 32 46 34 4b 63 66 38 54 36 61 52 4f 39 25 32 42 4d 4c 35 37 51 42 5a 35 59 4d 77 4d 6f 74 48 46 58 76 4c 6a 54 33 34 71 4a 6f 50 42 62 25 32 46 6c 25 32 46 69 79 43 58 49 73 4c 36 6a 47 6c 37 32 74 30 74 32 4a 41 34 78 57 6d 50 43 52 71 36 76 64 47 4d 73 6d 72 68 6e 34 43 57 56 77 47 35 6b 51 55 68 25 32 46 4c 59 77 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JTY4DhVMe8pLZ%2B0GkgGPuyfHpq88MBmoo%2F4Kcf8T6aRO9%2BML57QBZ5YMwMotHFXvLjT34qJoPBb%2Fl%2FiyCXIsL6jGl72t0t2JA4xWmPCRq6vdGMsmrhn4CWVwG5kQUh%2FLYw%3D%3D"}],"group":"cf-nel","max_age

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.16	49991	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:34 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 4905 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546da6d0-d2eb-11ef-ad61-06f8d311b573
2025-01-15 02:49:34 UTC	4905	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 64 61 36 64 30 2d 64 32 65 62 2d 31 31 65 66 2d 61 64 36 31 2d 30 36 66 38 64 33 31 31 62 35 37 33 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 50 61 63 73 30 79 5f 68 38 41 6f 53 70 53 64 6d 75 46 66 6a 41 32 2d 4a 68 38 35 44 38 6c 61 75 76 77 74 49 48 42 5f 31 47 69 70 72 58 5a 42 35 7a 2d 5f 45 33 4a 31 48 35 68 55 58 51 44 5a 45 73 76 56 57 37 4a 56 57 55 64 47 4d 61 5f 55 30 43 35 5f 74 6b 62 34 6d 50 31 5a 6c 45 6e 70 39 53 51 43 4f 55 54 39 5a 47 71 76 55 50 4b 56 51 6c 6e 6d 70 4f 2d 65 65 6e 5f 4b 35 Data Ascii: {"entries":[{"sid":"546da6d0-d2eb-11ef-ad61-06f8d311b573","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"Pacs0y_h8AoSpSdmuFfjA2-Jh85D8lauvwtIHB_1GiprXZB5z-_E3J1H5hUXQDZEsvVW7JVWUdGMa_U0C5_tkb4mP1ZlEnp9SQCOUT9ZGqvUPKVQlnmpO-een_K5
2025-01-15 02:49:34 UTC	1318	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:34 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Via: 1.1 google cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bED4wgfXynFOTBRdwTbSrQ6hjJbXv7FCQkrXz5FcqbasKVgyCFujJD2O3A1292KRsaxRSzQnoYAm3HWglG0tmXShd7pT8AsI%2B%2FmiNy9m0jxODQPz%2BT4OBxpjlvSTNZFtSg%3D%3D"}],"group":"cf-nel","max_age":604800}
2025-01-15 02:49:34 UTC	365	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 32 32 38 64 61 38 63 39 34 38 61 32 38 63 2d 59 55 4c 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 37 39 31 36 26 6d 69 6e 5f 72 74 74 3d 31 37 38 37 32 26 72 74 74 5f 76 61 72 3d 36 37 33 34 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 31 30 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 Data Ascii: NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 90228da8c948a28c-YULalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=17916&min_rtt=17872&rtt_var=6734&sent=5&recv=10&lost=0&retrans=0&se

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.16	49989	216.58.206.66	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:34 UTC	401	OUT	GET /getconfig/sodar?sv=200&tid=gda&tv=r20250113&st=env HTTP/1.1 Host: ep1.adtrafficquality.google Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 02:49:35 UTC	586	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Date: Wed, 15 Jan 2025 02:49:35 GMT Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 02:49:35 UTC	804	IN	Data Raw: 34 34 39 61 0d 0a 7b 22 73 6f 64 61 72 5f 71 75 65 72 79 5f 69 64 22 3a 22 50 79 4b 48 5a 38 37 34 41 65 44 70 78 5f 41 50 38 5f 79 53 71 51 6b 22 2c 22 69 6e 6a 65 63 74 6f 72 5f 62 61 73 65 6e 61 6d 65 22 3a 22 73 6f 64 61 72 32 22 2c 22 62 67 5f 68 61 73 68 5f 62 61 73 65 6e 61 6d 65 22 3a 22 2d 5a 72 4c 65 76 38 30 4b 61 53 6c 35 4c 48 35 4f 43 62 6e 5a 47 48 75 36 79 4c 53 62 33 74 52 47 75 77 61 78 47 56 6e 55 73 4d 22 2c 22 62 67 5f 62 69 6e 61 72 79 22 3a 22 74 55 77 71 61 4f 72 77 48 41 4f 2f 34 52 42 38 64 72 64 52 42 32 31 31 70 4c 34 4d 6b 6e 30 51 7a 65 61 6e 38 32 7a 6a 66 46 76 63 62 2f 64 6b 63 46 76 41 79 68 65 6a 6a 39 39 69 51 76 59 51 66 50 41 4a 43 69 41 46 52 75 4a 34 37 48 54 52 32 6f 44 4e 78 51 6a 78 4c 5a 59 72 67 51 5a 4c 68 39 Data Ascii: 449a{"sodar_query_id":"PyKHZ874AeDpx_AP8_ySqQk","injector_basename":"sodar2","bg_hash_basename":"-ZrLev80KaSl5LH5OCbnZGHu6yLSb3tRGuwaxGVnUsM","bg_binary":"tUwqaOrwHAO/4RB8drdRB211pL4Mkn0Qzean82zjfFvcb/dkcFvAyhejj99iQvYQfPAJCiAFRuJ47HTR2oDNxQjxLZYrgQZLh9
2025-01-15 02:49:35 UTC	1390	IN	Data Raw: 37 4d 78 56 33 4c 6c 49 57 7a 7a 76 36 73 4a 69 66 6a 72 6f 6f 4d 45 67 39 53 4c 53 47 59 61 6a 44 62 57 51 7a 63 64 4d 34 45 54 63 34 6e 34 57 47 74 7a 36 56 57 42 33 63 4c 5a 65 6d 6b 66 48 34 62 71 35 39 30 75 76 5a 32 41 2b 45 44 73 65 69 65 6a 71 6e 37 66 6b 6b 48 46 47 43 44 34 43 72 41 66 61 64 38 76 55 6d 79 75 42 48 68 36 56 4f 49 4d 44 39 7a 47 53 56 34 43 6a 53 6a 41 46 56 62 57 47 38 69 73 49 74 42 76 69 4a 34 52 51 4f 72 55 32 31 51 42 6e 35 77 78 70 72 4e 5a 35 69 5a 73 79 2f 51 49 4b 2b 43 67 4e 65 46 42 55 34 61 56 5a 7a 44 6f 35 61 72 34 46 53 71 4a 52 45 4b 36 53 4e 44 6b 6f 43 76 5a 37 57 6b 51 2b 72 72 45 6b 4d 6b 75 37 52 30 68 6b 6a 59 2b 41 32 64 54 55 46 66 51 73 68 33 37 41 66 6e 43 45 77 2f 36 4f 62 6d 45 74 6e 6d 44 53 4b 34 79 Data Ascii: 7MxV3LlIWzzv6sJifjrooMEg9SLSGYajDbWQzcdM4ETc4n4WGtz6VWB3cLZemkfH4bq590uvZ2A+EDseiejqn7fkkHFGCD4CrAfad8vUmyuBHh6VOIMD9zGSV4CjSjAFVbWG8isItBviJ4RQOrU21QBn5wxprNZ5iZsy/QIK+CgNeFBU4aVZzDo5ar4FSqJREK6SNDkoCvZ7WkQ+rrEkMku7R0hkjY+A2dTUFfQsh37AfnCEw/6ObmEtnmDSK4y
2025-01-15 02:49:35 UTC	1390	IN	Data Raw: 69 47 6d 62 58 74 62 5a 62 52 62 71 47 58 57 5a 71 4f 35 78 73 53 69 4a 67 74 76 77 6e 6e 31 51 74 63 61 49 63 61 35 73 76 32 70 42 71 4d 64 34 6b 38 2f 41 43 7a 6c 38 56 77 41 31 65 67 2b 69 53 6b 59 76 6c 72 4e 53 31 75 64 44 68 57 47 59 73 52 7a 5a 37 76 44 77 37 58 6a 68 6c 47 30 67 63 67 6d 6f 66 69 6c 50 66 36 6b 4e 75 64 44 49 2f 64 67 42 66 6d 76 58 37 55 4a 39 47 39 38 2b 6c 54 4d 6b 61 37 6e 77 57 6b 52 73 51 6f 68 76 6e 51 74 57 31 32 65 6b 4c 6a 7a 76 6f 58 74 6b 6a 50 43 51 39 52 4f 30 65 6a 50 6a 37 6c 50 79 4d 58 46 74 36 53 6e 41 4b 52 78 61 2f 4d 46 58 64 6a 6e 4d 73 41 72 7a 47 73 72 62 70 6d 6a 72 45 42 30 36 7a 4e 38 56 30 36 6b 63 6e 73 65 54 49 37 73 6e 4d 6e 54 4d 71 4f 34 4b 2b 32 64 63 32 34 58 79 2b 6d 73 77 78 38 32 38 54 4a 66 Data Ascii: iGmbXtbZbRbqGXWZqO5xsSiJgtvwnn1QtcaIca5sv2pBqMd4k8/ACzl8VwA1eg+iSkYvlrNS1udDhWGYsRzZ7vDw7XjhlG0gcgmofilPf6kNudDI/dgBfmvX7UJ9G98+lTMka7nwWkRsQohvnQtW12ekLjzvoXtkjPCQ9RO0ejPj7lPyMXFt6SnAKRxa/MFXdjnMsArzGsrbpmjrEB06zN8V06kcnseTI7snMnTMqO4K+2dc24Xy+mswx828TJf
2025-01-15 02:49:35 UTC	1390	IN	Data Raw: 42 65 70 65 30 44 4b 72 4c 35 58 41 51 55 52 39 39 59 31 75 53 34 53 39 5a 4e 4f 4c 5a 64 47 66 4c 79 64 48 57 6d 50 74 36 33 4b 68 39 54 4d 6b 32 49 55 54 4c 7a 67 58 34 44 62 54 55 54 78 50 39 66 4b 78 4f 43 6d 64 74 56 71 75 43 32 67 64 44 4a 6f 33 53 38 5a 6e 54 78 66 62 4f 55 76 76 4c 59 39 65 7a 44 4f 4a 6b 4e 6b 69 35 78 51 6d 69 6c 35 78 43 36 39 52 6f 4c 42 6a 43 37 77 5a 38 58 33 7a 34 6d 74 67 2b 36 4a 70 4c 65 4e 67 53 34 6a 71 49 68 59 79 43 4c 2f 71 74 66 41 45 52 61 36 4a 57 48 49 4e 4f 33 52 39 6e 4e 65 31 77 78 77 63 6c 4d 55 4c 33 32 34 57 6f 42 64 34 6b 64 4e 68 43 71 59 71 74 4c 30 39 2b 39 51 78 51 4d 42 6f 78 47 2b 61 52 30 54 55 32 31 6a 6f 4a 33 47 30 4b 4b 56 63 78 6e 43 64 32 79 34 75 47 62 77 43 30 33 2b 34 50 6e 6d 59 5a 4a 57 Data Ascii: Bepe0DKrL5XAQUR99Y1uS4S9ZNOLZdGfLydHWmPt63Kh9TMk2IUTLzgX4DbTUTxP9fKxOCmdtVquC2gdDJo3S8ZnTxfbOUvvLY9ezDOJkNki5xQmil5xC69RoLBjC7wZ8X3z4mtg+6JpLeNgS4jqIhYyCL/qtfAERa6JWHINO3R9nNe1wxwclMUL324WoBd4kdNhCqYqtL09+9QxQMBoxG+aR0TU21joJ3G0KKVcxnCd2y4uGbwC03+4PnmYZJW
2025-01-15 02:49:35 UTC	1390	IN	Data Raw: 35 6d 43 45 79 65 36 48 55 70 62 47 6a 69 62 33 4c 30 2f 73 64 43 6f 57 74 70 64 64 42 41 72 47 46 70 4e 49 58 6f 4c 64 34 55 6d 2f 33 62 2b 43 6f 56 34 2f 73 35 68 69 69 53 2f 58 39 46 54 48 30 65 68 6c 70 6c 48 55 36 53 5a 59 64 66 58 31 32 58 75 61 38 47 74 2f 6c 76 58 6b 57 77 6d 4e 58 57 39 4a 39 69 53 6f 45 39 4f 71 6d 66 77 2f 6c 59 49 38 72 6f 79 30 75 6c 67 4f 42 32 50 58 47 57 75 50 52 44 6f 6f 75 42 49 56 78 30 38 35 6e 2b 77 7a 38 6b 44 31 79 42 46 70 63 31 47 38 4c 63 6a 52 39 76 4b 71 45 74 6b 39 6e 33 36 56 47 33 4b 30 46 39 5a 4c 45 57 79 77 7a 52 65 53 42 66 50 4c 32 44 71 44 56 4a 4e 69 4f 4e 6a 66 5a 44 30 69 55 2f 59 66 66 78 43 6c 46 72 73 78 45 43 75 4a 47 77 65 56 38 58 70 63 4b 37 6d 75 66 4a 34 47 53 41 4d 2b 67 6f 7a 38 35 77 66 Data Ascii: 5mCEye6HUpbGjib3L0/sdCoWtpddBArGFpNIXoLd4Um/3b+CoV4/s5hiiS/X9FTH0ehlplHU6SZYdfX12Xua8Gt/lvXkWwmNXW9J9iSoE9Oqmfw/lYI8roy0ulgOB2PXGWuPRDoouBIVx085n+wz8kD1yBFpc1G8LcjR9vKqEtk9n36VG3K0F9ZLEWywzReSBfPL2DqDVJNiONjfZD0iU/YffxClFrsxECuJGweV8XpcK7mufJ4GSAM+goz85wf
2025-01-15 02:49:35 UTC	1390	IN	Data Raw: 6a 4b 38 49 42 4a 2f 52 6d 35 33 4d 7a 72 6f 66 6e 39 52 35 45 71 62 68 4f 33 77 4b 64 77 65 79 34 6e 34 41 75 2b 46 78 76 56 53 47 50 61 42 4d 55 6c 4a 49 48 39 34 48 6b 49 42 77 4d 73 72 72 62 36 39 65 4f 70 6f 6c 75 77 30 54 4a 6c 31 53 67 42 45 52 52 41 75 34 43 4a 66 45 75 34 33 6c 61 73 4e 69 46 78 43 55 68 4a 70 71 69 33 74 71 47 78 73 34 39 31 59 30 6b 7a 4c 65 6f 6a 72 62 75 64 4d 4b 35 64 79 6f 4a 31 67 36 62 48 56 6c 46 6c 42 64 47 66 39 39 61 4a 47 47 43 47 56 6b 63 36 32 50 38 5a 47 4c 4e 75 58 32 36 50 6a 78 36 32 4e 42 58 70 4b 55 57 6b 64 30 56 35 54 43 67 6e 36 4d 6e 47 53 4a 58 55 76 6c 56 34 4b 37 5a 75 4a 38 55 72 78 74 75 6b 4e 64 41 39 6b 6d 51 6d 53 77 79 72 59 74 48 61 78 67 52 7a 2f 6a 54 35 55 79 46 71 6b 6c 30 73 6b 4d 5a 73 44 Data Ascii: jK8IBJ/Rm53Mzrofn9R5EqbhO3wKdwey4n4Au+FxvVSGPaBMUlJIH94HkIBwMsrrb69eOpoluw0TJl1SgBERRAu4CJfEu43lasNiFxCUhJpqi3tqGxs491Y0kzLeojrbudMK5dyoJ1g6bHVlFlBdGf99aJGGCGVkc62P8ZGLNuX26Pjx62NBXpKUWkd0V5TCgn6MnGSJXUvlV4K7ZuJ8UrxtukNdA9kmQmSwyrYtHaxgRz/jT5UyFqkl0skMZsD
2025-01-15 02:49:35 UTC	1390	IN	Data Raw: 76 2b 51 6a 6a 49 4b 33 68 78 63 75 47 6d 70 64 6f 62 79 78 50 5a 38 72 41 44 6e 76 30 66 41 43 33 37 57 67 46 4c 43 41 6e 46 59 79 42 6a 6f 46 6f 73 7a 35 4a 38 33 35 37 35 61 33 54 67 6b 33 6e 67 55 6f 59 35 5a 79 65 46 79 2b 4f 2b 42 68 46 67 38 44 50 59 74 55 59 71 48 61 59 4f 43 43 43 2b 55 6e 38 4c 6a 45 4a 67 79 38 66 4e 78 6b 30 64 76 6e 59 76 46 61 51 4e 4c 46 55 4f 56 4d 50 69 6b 73 61 5a 42 77 61 45 6d 6f 54 56 52 69 68 6c 72 6a 58 67 66 46 66 7a 2b 44 65 68 59 51 4e 2b 56 38 70 57 6c 56 43 51 63 78 4d 6e 53 2b 71 6f 67 64 2b 77 39 39 69 54 4e 55 36 61 49 52 71 39 48 41 48 5a 58 4a 30 33 59 71 6b 50 4d 4f 38 69 4b 4f 75 30 31 73 54 77 48 2b 64 58 4d 6f 33 62 43 76 5a 41 47 51 51 4b 6c 57 41 78 71 2b 47 54 69 53 35 38 79 6a 34 68 43 6a 4b 39 70 Data Ascii: v+QjjIK3hxcuGmpdobyxPZ8rADnv0fAC37WgFLCAnFYyBjoFosz5J83575a3Tgk3ngUoY5ZyeFy+O+BhFg8DPYtUYqHaYOCCC+Un8LjEJgy8fNxk0dvnYvFaQNLFUOVMPiksaZBwaEmoTVRihlrjXgfFfz+DehYQN+V8pWlVCQcxMnS+qogd+w99iTNU6aIRq9HAHZXJ03YqkPMO8iKOu01sTwH+dXMo3bCvZAGQQKlWAxq+GTiS58yj4hCjK9p
2025-01-15 02:49:35 UTC	1390	IN	Data Raw: 46 6c 54 67 45 4e 39 6b 44 30 47 37 7a 74 4f 4d 68 79 45 36 63 72 37 46 6e 41 79 5a 55 2f 5a 6c 49 47 68 6c 43 39 36 79 33 43 54 50 44 34 49 37 62 31 2b 5a 35 35 4a 75 4b 56 69 66 6d 78 38 62 34 47 52 4b 69 4d 2f 35 2f 36 58 64 7a 59 49 64 64 53 56 32 76 6d 50 6b 39 6c 62 4c 39 48 35 51 69 73 6a 72 46 50 4f 63 4c 74 6a 79 6f 4c 61 56 65 44 77 71 75 48 47 71 51 50 41 79 2b 49 7a 2f 69 7a 64 6c 76 78 33 34 51 57 61 59 2b 63 34 35 49 35 7a 36 66 52 53 30 53 76 74 31 58 58 67 34 46 5a 4b 66 33 62 74 79 36 55 55 6f 56 51 70 6c 73 39 76 4b 34 64 48 4c 43 70 57 6f 50 48 75 46 72 4b 6e 4e 37 4b 55 61 46 6d 39 67 67 65 75 4b 2b 56 6a 4f 31 4d 39 69 30 75 2b 4b 5a 52 77 2b 47 2f 2b 78 55 48 55 43 30 46 71 39 4a 2b 43 42 51 59 34 39 63 33 75 61 4d 78 6b 32 73 43 79 Data Ascii: FlTgEN9kD0G7ztOMhyE6cr7FnAyZU/ZlIGhlC96y3CTPD4I7b1+Z55JuKVifmx8b4GRKiM/5/6XdzYIddSV2vmPk9lbL9H5QisjrFPOcLtjyoLaVeDwquHGqQPAy+Iz/izdlvx34QWaY+c45I5z6fRS0Svt1XXg4FZKf3bty6UUoVQpls9vK4dHLCpWoPHuFrKnN7KUaFm9ggeuK+VjO1M9i0u+KZRw+G/+xUHUC0Fq9J+CBQY49c3uaMxk2sCy
2025-01-15 02:49:35 UTC	1390	IN	Data Raw: 5a 74 36 6f 55 54 69 43 34 33 79 49 41 70 51 76 50 2f 31 4f 30 42 4c 30 42 2b 6b 6d 70 62 57 68 47 44 52 35 61 63 48 38 39 38 4d 6f 63 51 75 6f 66 6f 6d 77 34 4a 54 73 57 35 6d 31 4e 69 52 36 58 58 6b 56 7a 49 42 6f 64 48 4c 54 32 31 33 4e 41 44 75 6f 35 76 50 63 52 37 6b 43 41 71 4b 7a 79 5a 36 7a 5a 6e 78 6b 58 56 66 31 48 35 46 48 6e 48 42 41 79 31 7a 6b 32 57 49 48 41 64 48 56 64 4e 4e 71 78 6e 54 31 64 58 75 48 67 47 57 50 45 4c 39 47 35 42 79 4b 59 55 52 54 5a 37 6b 67 2b 63 6d 4e 65 43 78 55 4f 64 5a 67 34 38 68 68 6c 39 73 42 69 71 32 70 79 32 64 50 7a 6d 78 4c 43 57 42 31 4f 56 62 36 6b 62 79 73 37 6f 32 5a 48 70 4e 47 32 58 74 79 32 70 4b 64 44 68 6e 6c 2b 74 57 53 79 75 36 4d 2b 69 72 6c 61 58 61 35 35 72 4f 62 76 39 6c 46 2f 6b 6c 67 6d 6c 4a Data Ascii: Zt6oUTiC43yIApQvP/1O0BL0B+kmpbWhGDR5acH898MocQuofomw4JTsW5m1NiR6XXkVzIBodHLT213NADuo5vPcR7kCAqKzyZ6zZnxkXVf1H5FHnHBAy1zk2WIHAdHVdNNqxnT1dXuHgGWPEL9G5ByKYURTZ7kg+cmNeCxUOdZg48hhl9sBiq2py2dPzmxLCWB1OVb6kbys7o2ZHpNG2Xty2pKdDhnl+tWSyu6M+irlaXa55rObv9lF/klgmlJ
2025-01-15 02:49:35 UTC	1390	IN	Data Raw: 4b 30 59 41 59 77 71 69 62 4a 50 31 68 4d 70 65 4f 38 33 41 32 31 4f 7a 77 4b 38 4a 45 61 36 62 67 5a 55 67 37 72 71 70 65 31 4f 58 36 68 35 2b 51 33 67 4e 32 6c 75 2b 70 53 2f 6d 6d 38 5a 59 52 55 2b 57 5a 30 77 6c 77 37 52 44 66 78 46 52 65 36 44 51 62 6f 6c 32 75 6d 78 71 4f 72 72 65 67 4a 68 55 4c 4e 37 66 6a 53 30 4e 36 52 51 6d 69 54 32 4e 4e 49 67 4f 41 4c 65 6c 30 4b 2b 6f 6d 73 33 4a 30 50 6f 37 77 55 37 4d 4e 45 7a 61 4b 61 53 47 42 79 73 67 71 59 56 78 4a 6f 56 33 52 4a 75 5a 2f 4d 4f 47 61 7a 53 4f 44 62 76 54 32 79 6b 47 63 52 7a 63 38 73 55 37 59 45 5a 58 44 62 79 30 69 59 71 43 49 72 63 54 49 50 42 49 50 33 43 56 43 43 57 58 78 42 31 6e 37 67 6a 75 70 66 76 2f 34 6c 57 51 7a 54 61 32 2f 55 30 44 5a 51 51 48 6c 33 4d 72 66 74 62 47 59 34 6a Data Ascii: K0YAYwqibJP1hMpeO83A21OzwK8JEa6bgZUg7rqpe1OX6h5+Q3gN2lu+pS/mm8ZYRU+WZ0wlw7RDfxFRe6DQbol2umxqOrregJhULN7fjS0N6RQmiT2NNIgOALel0K+oms3J0Po7wU7MNEzaKaSGBysgqYVxJoV3RJuZ/MOGazSODbvT2ykGcRzc8sU7YEZXDby0iYqCIrcTIPBIP3CVCCWXxB1n7gjupfv/4lWQzTa2/U0DZQQHl3MrftbGY4j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.16	49988	142.250.185.97	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:34 UTC	545	OUT	GET /sodar/sodar2.js HTTP/1.1 Host: ep2.adtrafficquality.google Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://androiddatahost.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 02:49:35 UTC	665	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="adspam-signals-scs" Report-To: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]} Content-Length: 17945 Date: Wed, 15 Jan 2025 02:49:35 GMT Expires: Wed, 15 Jan 2025 02:49:35 GMT Cache-Control: private, max-age=3000 ETag: "1727224258380615" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-15 02:49:35 UTC	725	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 76 61 72 20 6b 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 Data Ascii: (function(){'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var k=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return
2025-01-15 02:49:35 UTC	1390	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 78 28 61 2c 62 2c 63 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 64 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 61 3d 64 2e 6c 65 6e 67 74 68 3d 3d 3d 31 3b 76 61 72 20 67 3d 64 5b 30 5d 2c 66 3b 21 61 26 26 67 20 69 6e 20 72 3f 66 3d 72 3a 66 3d 6e 3b 66 6f 72 28 67 3d 30 3b 67 3c 64 2e 6c 65 6e 67 74 68 2d 31 3b 67 2b 2b 29 7b 76 61 72 20 65 3d 64 5b 67 5d 3b 69 66 28 21 28 65 20 69 6e 20 66 29 29 62 72 65 61 6b 20 61 3b 66 3d 66 5b 65 5d 7d 64 3d 64 5b 64 2e 6c 65 6e 67 74 68 2d 31 5d 3b 63 3d 70 26 26 63 3d 3d 3d 22 65 73 36 22 3f 66 5b 64 5d 3a 6e 75 6c 6c 3b 62 3d 62 28 63 29 3b 62 21 3d 6e 75 6c 6c 26 26 28 61 3f 6b 28 72 2c 64 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 Data Ascii: function x(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var g=d[0],f;!a&&g in r?f=r:f=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in f))break a;f=f[e]}d=d[d.length-1];c=p&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?k(r,d,{configurable:!0,writable:!0,va
2025-01-15 02:49:35 UTC	1390	IN	Data Raw: 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 72 2e 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 77 28 72 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 26 26 61 5b 77 28 72 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 61 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 53 74 72 69 6e 67 28 61 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 69 74 65 72 61 62 6c 65 20 6f 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 76 61 72 20 66 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 Data Ascii: {var b=typeof r.Symbol!="undefined"&&w(r.Symbol,"iterator")&&a[w(r.Symbol,"iterator")];if(b)return b.call(a);if(typeof a.length=="number")return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}var fa=typeof Object.create=="function"
2025-01-15 02:49:35 UTC	1390	IN	Data Raw: 74 75 72 6e 20 48 28 61 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 47 28 61 2c 62 2c 63 2c 64 29 7b 74 72 79 7b 76 61 72 20 67 3d 62 2e 63 61 6c 6c 28 61 2e 67 2e 68 2c 63 29 3b 69 66 28 21 28 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 74 65 72 61 74 6f 72 20 72 65 73 75 6c 74 20 22 2b 67 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 3b 69 66 28 21 67 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 61 2e 67 2e 6d 3d 21 31 2c 67 3b 76 61 72 20 66 3d 67 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 67 2e 68 3d 6e 75 6c 6c 2c 45 28 61 2e 67 2c 65 29 2c 48 28 61 29 7d 61 2e 67 2e 68 3d 6e 75 6c 6c 3b 64 2e 63 61 6c 6c 28 61 2e 67 2c 66 29 3b 72 Data Ascii: turn H(a)}function G(a,b,c,d){try{var g=b.call(a.g.h,c);if(!(g instanceof Object))throw new TypeError("Iterator result "+g+" is not an object");if(!g.done)return a.g.m=!1,g;var f=g.value}catch(e){return a.g.h=null,E(a.g,e),H(a)}a.g.h=null;d.call(a.g,f);r
2025-01-15 02:49:35 UTC	1390	IN	Data Raw: 2e 70 72 6f 74 6f 74 79 70 65 2e 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 68 69 73 2e 67 3d 3d 6e 75 6c 6c 29 7b 74 68 69 73 2e 67 3d 5b 5d 3b 76 61 72 20 68 3d 74 68 69 73 3b 74 68 69 73 2e 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 2e 6d 28 29 7d 29 7d 74 68 69 73 2e 67 2e 70 75 73 68 28 65 29 7d 3b 76 61 72 20 67 3d 6e 2e 73 65 74 54 69 6d 65 6f 75 74 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 67 28 65 2c 30 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 74 68 69 73 2e 67 26 26 74 68 69 73 2e 67 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 67 3b 74 68 69 73 2e 67 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 65 2e 6c 65 6e 67 Data Ascii: .prototype.h=function(e){if(this.g==null){this.g=[];var h=this;this.i(function(){h.m()})}this.g.push(e)};var g=n.setTimeout;c.prototype.i=function(e){g(e,0)};c.prototype.m=function(){for(;this.g&&this.g.length;){var e=this.g;this.g=[];for(var h=0;h<e.leng
2025-01-15 02:49:35 UTC	1390	IN	Data Raw: 64 22 29 72 65 74 75 72 6e 21 30 3b 74 79 70 65 6f 66 20 65 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 65 3d 6e 65 77 20 65 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 74 79 70 65 6f 66 20 68 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 65 3d 6e 65 77 20 68 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 28 65 3d 6e 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 2c 65 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 21 31 2c 21 30 2c 65 29 29 3b 65 2e 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 65 2e Data Ascii: d")return!0;typeof e==="function"?e=new e("unhandledrejection",{cancelable:!0}):typeof h==="function"?e=new h("unhandledrejection",{cancelable:!0}):(e=n.document.createEvent("CustomEvent"),e.initCustomEvent("unhandledrejection",!1,!0,e));e.promise=this;e.
2025-01-15 02:49:35 UTC	1390	IN	Data Raw: 29 2c 6c 3d 68 2e 6e 65 78 74 28 29 3b 77 68 69 6c 65 28 21 6c 2e 64 6f 6e 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 62 7d 2c 22 65 73 36 22 29 3b 0a 78 28 22 67 6c 6f 62 61 6c 54 68 69 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 6e 7d 2c 22 65 73 5f 32 30 32 30 22 29 3b 78 28 22 41 72 72 61 79 2e 66 72 6f 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 63 3d 63 21 3d 6e 75 6c 6c 3f 63 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 7d 3b 76 61 72 20 67 3d 5b 5d 2c 66 3d 74 79 70 65 6f 66 20 72 2e 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 77 28 72 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 26 26 62 5b Data Ascii: ),l=h.next();while(!l.done)})};return b},"es6");x("globalThis",function(a){return a\|\|n},"es_2020");x("Array.from",function(a){return a?a:function(b,c,d){c=c!=null?c:function(h){return h};var g=[],f=typeof r.Symbol!="undefined"&&w(r.Symbol,"iterator")&&b[
2025-01-15 02:49:35 UTC	1390	IN	Data Raw: 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 32 2f 61 66 72 61 6d 65 22 5d 29 2c 74 61 3d 50 28 73 61 29 3b 66 75 6e 63 74 69 6f 6e 20 51 28 61 2c 62 2c 63 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 2c 62 29 7b 61 2e 73 72 63 3d 72 61 28 62 29 3b 76 61 72 20 63 2c 64 3b 28 63 3d 28 62 3d 28 64 3d 28 63 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 26 26 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 77 69 6e 64 6f 77 29 2e 64 6f 63 75 6d 65 6e 74 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 Data Ascii: ww.google.com/recaptcha/api2/aframe"]),ta=P(sa);function Q(a,b,c){a.addEventListener&&a.addEventListener(b,c,!1)};function ua(a,b){a.src=ra(b);var c,d;(c=(b=(d=(c=(a.ownerDocument&&a.ownerDocument.defaultView\|\|window).document).querySelector)==null?void 0
2025-01-15 02:49:35 UTC	1390	IN	Data Raw: 69 73 2e 4a 3d 62 3b 74 68 69 73 2e 68 3d 67 3b 74 68 69 73 2e 6f 3d 63 3d 3d 3d 76 6f 69 64 20 30 3f 30 3a 63 3b 74 68 69 73 2e 69 3d 28 64 3d 3d 3d 76 6f 69 64 20 30 3f 30 3a 64 29 3f 50 28 7a 61 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 29 3a 50 28 41 61 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 42 61 28 61 29 7b 72 65 74 75 72 6e 20 49 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 73 77 69 74 63 68 28 62 2e 67 29 7b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 46 28 62 2c 43 61 28 61 29 2c 32 29 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 46 28 62 2c 44 61 28 61 29 2c 33 29 3b 63 61 73 65 20 33 3a 69 66 28 21 28 61 2e 6f 3e 30 29 29 7b 62 2e 67 3d 34 3b 62 72 65 61 6b 7d 72 65 74 Data Ascii: is.J=b;this.h=g;this.o=c===void 0?0:c;this.i=(d===void 0?0:d)?P(za,encodeURIComponent(a)):P(Aa,encodeURIComponent(a))}function Ba(a){return I(function(b){switch(b.g){case 1:return F(b,Ca(a),2);case 2:return F(b,Da(a),3);case 3:if(!(a.o>0)){b.g=4;break}ret
2025-01-15 02:49:35 UTC	1390	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 4a 61 28 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 3b 69 66 28 61 2e 47 6f 6f 67 6c 65 44 58 35 59 4b 55 53 6b 29 72 65 74 75 72 6e 20 61 2e 47 6f 6f 67 6c 65 44 58 35 59 4b 55 53 6b 5b 30 5d 3b 76 61 72 20 62 3d 6e 65 77 20 72 2e 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 61 2e 47 6f 6f 67 6c 65 44 58 35 59 4b 55 53 6b 3d 5b 62 2c 63 5d 7d 29 3b 72 65 74 75 72 6e 20 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 4b 61 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 47 6f 6f 67 6c 65 47 63 4c 4b 68 4f 6d 73 3d 3d 3d 76 6f 69 64 20 30 3f 31 33 3a 31 7d 3b 66 75 6e 63 74 69 6f 6e 20 53 28 61 2c 62 29 7b 74 68 69 73 2e 68 3d 61 3b 74 68 69 73 2e 6a 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 4c 61 28 61 2c 62 29 7b 53 2e 63 61 Data Ascii: }function Ja(){var a=window;if(a.GoogleDX5YKUSk)return a.GoogleDX5YKUSk[0];var b=new r.Promise(function(c){a.GoogleDX5YKUSk=[b,c]});return b}function Ka(){return window.GoogleGcLKhOms===void 0?13:1};function S(a,b){this.h=a;this.j=b}function La(a,b){S.ca

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.16	49996	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:35 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 2263 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546da6d0-d2eb-11ef-ad61-06f8d311b573
2025-01-15 02:49:35 UTC	2263	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 64 61 36 64 30 2d 64 32 65 62 2d 31 31 65 66 2d 61 64 36 31 2d 30 36 66 38 64 33 31 31 62 35 37 33 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 50 61 63 73 30 79 5f 68 38 41 6f 53 70 53 64 6d 75 46 66 6a 41 32 2d 4a 68 38 35 44 38 6c 61 75 76 77 74 49 48 42 5f 31 47 69 70 72 58 5a 42 35 7a 2d 5f 45 33 4a 31 48 35 68 55 58 51 44 5a 45 73 76 56 57 37 4a 56 57 55 64 47 4d 61 5f 55 30 43 35 5f 74 6b 62 34 6d 50 31 5a 6c 45 6e 70 39 53 51 43 4f 55 54 39 5a 47 71 76 55 50 4b 56 51 6c 6e 6d 70 4f 2d 65 65 6e 5f 4b 35 Data Ascii: {"entries":[{"sid":"546da6d0-d2eb-11ef-ad61-06f8d311b573","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"Pacs0y_h8AoSpSdmuFfjA2-Jh85D8lauvwtIHB_1GiprXZB5z-_E3J1H5hUXQDZEsvVW7JVWUdGMa_U0C5_tkb4mP1ZlEnp9SQCOUT9ZGqvUPKVQlnmpO-een_K5
2025-01-15 02:49:35 UTC	1326	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:35 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Via: 1.1 google cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gHjwAtsYxtelB%2BarmQWgxm9K29q%2BbsmCBnx1Rx3BPbDzq%2BDA3wNVLIOuJR4V2E3gRrf6LzzjmRWuonmVro0SiOc22%2F6Nmj%2FwI%2B0%2Bro7x1svBgezoozliqkHa6ZrWNNhL9A%3D%3D"}],"group":"cf-nel","max_age":604800}
2025-01-15 02:49:35 UTC	364	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 32 32 38 64 61 63 38 64 65 34 61 61 66 64 2d 59 59 5a 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 33 38 34 34 26 6d 69 6e 5f 72 74 74 3d 31 33 37 33 39 26 72 74 74 5f 76 61 72 3d 35 33 36 33 26 73 65 6e 74 3d 34 26 72 65 63 76 3d 38 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e Data Ascii: NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 90228dac8de4aafd-YYZalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=13844&min_rtt=13739&rtt_var=5363&sent=4&recv=8&lost=0&retrans=0&sen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.16	49997	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:35 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 2093 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f
2025-01-15 02:49:35 UTC	2093	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 36 39 62 30 35 2d 64 32 65 62 2d 31 31 65 66 2d 62 34 65 63 2d 37 61 37 64 64 36 63 32 65 39 30 66 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 71 35 34 37 49 6e 69 45 70 31 71 59 37 4f 45 67 30 50 45 2d 7a 76 49 37 63 34 54 54 62 79 4a 39 79 55 62 4a 58 58 39 61 58 52 52 46 5a 32 52 53 61 43 31 61 71 4b 56 63 4e 77 46 4c 7a 76 6f 4f 55 53 42 31 43 71 2d 6b 4b 41 56 43 5a 4d 43 4f 38 77 47 69 58 76 64 6d 57 5f 52 5f 6c 68 57 6a 39 56 5a 30 42 58 59 64 4c 71 33 43 56 66 65 65 33 44 6c 38 57 49 33 57 6b 44 64 36 Data Ascii: {"entries":[{"sid":"54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"q547IniEp1qY7OEg0PE-zvI7c4TTbyJ9yUbJXX9aXRRFZ2RSaC1aqKVcNwFLzvoOUSB1Cq-kKAVCZMCO8wGiXvdmW_R_lhWj9VZ0BXYdLq3CVfee3Dl8WI3WkDd6
2025-01-15 02:49:35 UTC	1320	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:35 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Via: 1.1 google cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wPY90g1Xe0byMwpAaUSuc2EoT7n0kPb%2BlbK%2F9VkEUqX19OswhM8FzdAuz5SlpXN10d6BNvYH%2FkES%2FbjTSPd6HJ26WQB8K49KdgIM0smzJwS8D0S5sP63xvGu0VfKUuXNMQ%3D%3D"}],"group":"cf-nel","max_age":604800}
2025-01-15 02:49:35 UTC	364	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 32 32 38 64 61 63 65 65 38 37 36 65 30 61 2d 59 55 4c 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 37 37 32 32 26 6d 69 6e 5f 72 74 74 3d 31 37 37 31 36 26 72 74 74 5f 76 61 72 3d 36 36 35 36 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 38 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e Data Ascii: NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 90228dacee876e0a-YULalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=17722&min_rtt=17716&rtt_var=6656&sent=5&recv=8&lost=0&retrans=0&sen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.16	50001	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:35 UTC	740	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 936 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f
2025-01-15 02:49:35 UTC	936	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 36 39 62 30 35 2d 64 32 65 62 2d 31 31 65 66 2d 62 34 65 63 2d 37 61 37 64 64 36 63 32 65 39 30 66 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 71 35 34 37 49 6e 69 45 70 31 71 59 37 4f 45 67 30 50 45 2d 7a 76 49 37 63 34 54 54 62 79 4a 39 79 55 62 4a 58 58 39 61 58 52 52 46 5a 32 52 53 61 43 31 61 71 4b 56 63 4e 77 46 4c 7a 76 6f 4f 55 53 42 31 43 71 2d 6b 4b 41 56 43 5a 4d 43 4f 38 77 47 69 58 76 64 6d 57 5f 52 5f 6c 68 57 6a 39 56 5a 30 42 58 59 64 4c 71 33 43 56 66 65 65 33 44 6c 38 57 49 33 57 6b 44 64 36 Data Ascii: {"entries":[{"sid":"54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"q547IniEp1qY7OEg0PE-zvI7c4TTbyJ9yUbJXX9aXRRFZ2RSaC1aqKVcNwFLzvoOUSB1Cq-kKAVCZMCO8wGiXvdmW_R_lhWj9VZ0BXYdLq3CVfee3Dl8WI3WkDd6
2025-01-15 02:49:35 UTC	1318	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:35 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Via: 1.1 google cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R%2FA6CL1WK3jkHd3L9dTG0gYGE6lm0iAsU3md8TmbtNP98QWIOx9%2FGdOfaZV%2FadRMhGFKEWzWT6LImjbYxds0c0EPjy2Y1wGUR42uiNrsNbjYzNbX3XAG252aPC0BcTIEOw%3D%3D"}],"group":"cf-nel","max_age":604800}
2025-01-15 02:49:35 UTC	364	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 32 32 38 64 61 66 30 62 64 62 61 32 63 38 2d 59 55 4c 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 37 38 30 34 26 6d 69 6e 5f 72 74 74 3d 31 37 37 39 39 26 72 74 74 5f 76 61 72 3d 36 36 38 35 26 73 65 6e 74 3d 34 26 72 65 63 76 3d 37 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e Data Ascii: NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 90228daf0bdba2c8-YULalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=17804&min_rtt=17799&rtt_var=6685&sent=4&recv=7&lost=0&retrans=0&sen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.16	50002	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:35 UTC	740	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 933 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f
2025-01-15 02:49:35 UTC	933	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 36 39 62 30 35 2d 64 32 65 62 2d 31 31 65 66 2d 62 34 65 63 2d 37 61 37 64 64 36 63 32 65 39 30 66 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 71 35 34 37 49 6e 69 45 70 31 71 59 37 4f 45 67 30 50 45 2d 7a 76 49 37 63 34 54 54 62 79 4a 39 79 55 62 4a 58 58 39 61 58 52 52 46 5a 32 52 53 61 43 31 61 71 4b 56 63 4e 77 46 4c 7a 76 6f 4f 55 53 42 31 43 71 2d 6b 4b 41 56 43 5a 4d 43 4f 38 77 47 69 58 76 64 6d 57 5f 52 5f 6c 68 57 6a 39 56 5a 30 42 58 59 64 4c 71 33 43 56 66 65 65 33 44 6c 38 57 49 33 57 6b 44 64 36 Data Ascii: {"entries":[{"sid":"54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"q547IniEp1qY7OEg0PE-zvI7c4TTbyJ9yUbJXX9aXRRFZ2RSaC1aqKVcNwFLzvoOUSB1Cq-kKAVCZMCO8wGiXvdmW_R_lhWj9VZ0BXYdLq3CVfee3Dl8WI3WkDd6
2025-01-15 02:49:35 UTC	1318	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:35 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Via: 1.1 google cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=exUZ93BTG8qwBgbNL5SOKNqHNJmt0qixDb6REFYp43dSjhgmTeGGJd%2B4IYKKq%2FZS6iCcv624NVfkfjVGiKk8Ro1S9%2FBlZYFWKW8Nt7M5jiJtOAuVLp4mWHmPYBNbiVuUGQ%3D%3D"}],"group":"cf-nel","max_age":604800}
2025-01-15 02:49:35 UTC	363	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 32 32 38 64 61 66 32 63 64 35 36 61 35 62 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 36 32 34 26 6d 69 6e 5f 72 74 74 3d 31 35 38 33 26 72 74 74 5f 76 61 72 3d 36 32 33 26 73 65 6e 74 3d 34 26 72 65 63 76 3d 37 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 Data Ascii: NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 90228daf2cd56a5b-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1624&min_rtt=1583&rtt_var=623&sent=4&recv=7&lost=0&retrans=0&sent_b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.16	49998	142.250.184.225	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:35 UTC	366	OUT	GET /sodar/sodar2.js HTTP/1.1 Host: ep2.adtrafficquality.google Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 02:49:36 UTC	665	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="adspam-signals-scs" Report-To: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]} Content-Length: 17945 Date: Wed, 15 Jan 2025 02:49:36 GMT Expires: Wed, 15 Jan 2025 02:49:36 GMT Cache-Control: private, max-age=3000 ETag: "1727224258380615" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-15 02:49:36 UTC	725	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 76 61 72 20 6b 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 Data Ascii: (function(){'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var k=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return
2025-01-15 02:49:36 UTC	1390	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 78 28 61 2c 62 2c 63 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 64 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 61 3d 64 2e 6c 65 6e 67 74 68 3d 3d 3d 31 3b 76 61 72 20 67 3d 64 5b 30 5d 2c 66 3b 21 61 26 26 67 20 69 6e 20 72 3f 66 3d 72 3a 66 3d 6e 3b 66 6f 72 28 67 3d 30 3b 67 3c 64 2e 6c 65 6e 67 74 68 2d 31 3b 67 2b 2b 29 7b 76 61 72 20 65 3d 64 5b 67 5d 3b 69 66 28 21 28 65 20 69 6e 20 66 29 29 62 72 65 61 6b 20 61 3b 66 3d 66 5b 65 5d 7d 64 3d 64 5b 64 2e 6c 65 6e 67 74 68 2d 31 5d 3b 63 3d 70 26 26 63 3d 3d 3d 22 65 73 36 22 3f 66 5b 64 5d 3a 6e 75 6c 6c 3b 62 3d 62 28 63 29 3b 62 21 3d 6e 75 6c 6c 26 26 28 61 3f 6b 28 72 2c 64 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 Data Ascii: function x(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var g=d[0],f;!a&&g in r?f=r:f=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in f))break a;f=f[e]}d=d[d.length-1];c=p&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?k(r,d,{configurable:!0,writable:!0,va
2025-01-15 02:49:36 UTC	1390	IN	Data Raw: 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 72 2e 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 77 28 72 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 26 26 61 5b 77 28 72 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 61 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 53 74 72 69 6e 67 28 61 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 69 74 65 72 61 62 6c 65 20 6f 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 76 61 72 20 66 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 Data Ascii: {var b=typeof r.Symbol!="undefined"&&w(r.Symbol,"iterator")&&a[w(r.Symbol,"iterator")];if(b)return b.call(a);if(typeof a.length=="number")return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}var fa=typeof Object.create=="function"
2025-01-15 02:49:36 UTC	1390	IN	Data Raw: 74 75 72 6e 20 48 28 61 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 47 28 61 2c 62 2c 63 2c 64 29 7b 74 72 79 7b 76 61 72 20 67 3d 62 2e 63 61 6c 6c 28 61 2e 67 2e 68 2c 63 29 3b 69 66 28 21 28 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 74 65 72 61 74 6f 72 20 72 65 73 75 6c 74 20 22 2b 67 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 3b 69 66 28 21 67 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 61 2e 67 2e 6d 3d 21 31 2c 67 3b 76 61 72 20 66 3d 67 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 67 2e 68 3d 6e 75 6c 6c 2c 45 28 61 2e 67 2c 65 29 2c 48 28 61 29 7d 61 2e 67 2e 68 3d 6e 75 6c 6c 3b 64 2e 63 61 6c 6c 28 61 2e 67 2c 66 29 3b 72 Data Ascii: turn H(a)}function G(a,b,c,d){try{var g=b.call(a.g.h,c);if(!(g instanceof Object))throw new TypeError("Iterator result "+g+" is not an object");if(!g.done)return a.g.m=!1,g;var f=g.value}catch(e){return a.g.h=null,E(a.g,e),H(a)}a.g.h=null;d.call(a.g,f);r
2025-01-15 02:49:36 UTC	1390	IN	Data Raw: 2e 70 72 6f 74 6f 74 79 70 65 2e 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 68 69 73 2e 67 3d 3d 6e 75 6c 6c 29 7b 74 68 69 73 2e 67 3d 5b 5d 3b 76 61 72 20 68 3d 74 68 69 73 3b 74 68 69 73 2e 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 2e 6d 28 29 7d 29 7d 74 68 69 73 2e 67 2e 70 75 73 68 28 65 29 7d 3b 76 61 72 20 67 3d 6e 2e 73 65 74 54 69 6d 65 6f 75 74 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 67 28 65 2c 30 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 74 68 69 73 2e 67 26 26 74 68 69 73 2e 67 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 67 3b 74 68 69 73 2e 67 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 65 2e 6c 65 6e 67 Data Ascii: .prototype.h=function(e){if(this.g==null){this.g=[];var h=this;this.i(function(){h.m()})}this.g.push(e)};var g=n.setTimeout;c.prototype.i=function(e){g(e,0)};c.prototype.m=function(){for(;this.g&&this.g.length;){var e=this.g;this.g=[];for(var h=0;h<e.leng
2025-01-15 02:49:36 UTC	1390	IN	Data Raw: 64 22 29 72 65 74 75 72 6e 21 30 3b 74 79 70 65 6f 66 20 65 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 65 3d 6e 65 77 20 65 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 74 79 70 65 6f 66 20 68 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 65 3d 6e 65 77 20 68 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 28 65 3d 6e 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 2c 65 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 21 31 2c 21 30 2c 65 29 29 3b 65 2e 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 65 2e Data Ascii: d")return!0;typeof e==="function"?e=new e("unhandledrejection",{cancelable:!0}):typeof h==="function"?e=new h("unhandledrejection",{cancelable:!0}):(e=n.document.createEvent("CustomEvent"),e.initCustomEvent("unhandledrejection",!1,!0,e));e.promise=this;e.
2025-01-15 02:49:36 UTC	1390	IN	Data Raw: 29 2c 6c 3d 68 2e 6e 65 78 74 28 29 3b 77 68 69 6c 65 28 21 6c 2e 64 6f 6e 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 62 7d 2c 22 65 73 36 22 29 3b 0a 78 28 22 67 6c 6f 62 61 6c 54 68 69 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 6e 7d 2c 22 65 73 5f 32 30 32 30 22 29 3b 78 28 22 41 72 72 61 79 2e 66 72 6f 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 63 3d 63 21 3d 6e 75 6c 6c 3f 63 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 7d 3b 76 61 72 20 67 3d 5b 5d 2c 66 3d 74 79 70 65 6f 66 20 72 2e 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 77 28 72 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 26 26 62 5b Data Ascii: ),l=h.next();while(!l.done)})};return b},"es6");x("globalThis",function(a){return a\|\|n},"es_2020");x("Array.from",function(a){return a?a:function(b,c,d){c=c!=null?c:function(h){return h};var g=[],f=typeof r.Symbol!="undefined"&&w(r.Symbol,"iterator")&&b[
2025-01-15 02:49:36 UTC	1390	IN	Data Raw: 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 32 2f 61 66 72 61 6d 65 22 5d 29 2c 74 61 3d 50 28 73 61 29 3b 66 75 6e 63 74 69 6f 6e 20 51 28 61 2c 62 2c 63 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 2c 62 29 7b 61 2e 73 72 63 3d 72 61 28 62 29 3b 76 61 72 20 63 2c 64 3b 28 63 3d 28 62 3d 28 64 3d 28 63 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 26 26 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 77 69 6e 64 6f 77 29 2e 64 6f 63 75 6d 65 6e 74 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 Data Ascii: ww.google.com/recaptcha/api2/aframe"]),ta=P(sa);function Q(a,b,c){a.addEventListener&&a.addEventListener(b,c,!1)};function ua(a,b){a.src=ra(b);var c,d;(c=(b=(d=(c=(a.ownerDocument&&a.ownerDocument.defaultView\|\|window).document).querySelector)==null?void 0
2025-01-15 02:49:36 UTC	1390	IN	Data Raw: 69 73 2e 4a 3d 62 3b 74 68 69 73 2e 68 3d 67 3b 74 68 69 73 2e 6f 3d 63 3d 3d 3d 76 6f 69 64 20 30 3f 30 3a 63 3b 74 68 69 73 2e 69 3d 28 64 3d 3d 3d 76 6f 69 64 20 30 3f 30 3a 64 29 3f 50 28 7a 61 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 29 3a 50 28 41 61 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 42 61 28 61 29 7b 72 65 74 75 72 6e 20 49 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 73 77 69 74 63 68 28 62 2e 67 29 7b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 46 28 62 2c 43 61 28 61 29 2c 32 29 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 46 28 62 2c 44 61 28 61 29 2c 33 29 3b 63 61 73 65 20 33 3a 69 66 28 21 28 61 2e 6f 3e 30 29 29 7b 62 2e 67 3d 34 3b 62 72 65 61 6b 7d 72 65 74 Data Ascii: is.J=b;this.h=g;this.o=c===void 0?0:c;this.i=(d===void 0?0:d)?P(za,encodeURIComponent(a)):P(Aa,encodeURIComponent(a))}function Ba(a){return I(function(b){switch(b.g){case 1:return F(b,Ca(a),2);case 2:return F(b,Da(a),3);case 3:if(!(a.o>0)){b.g=4;break}ret
2025-01-15 02:49:36 UTC	1390	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 4a 61 28 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 3b 69 66 28 61 2e 47 6f 6f 67 6c 65 44 58 35 59 4b 55 53 6b 29 72 65 74 75 72 6e 20 61 2e 47 6f 6f 67 6c 65 44 58 35 59 4b 55 53 6b 5b 30 5d 3b 76 61 72 20 62 3d 6e 65 77 20 72 2e 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 61 2e 47 6f 6f 67 6c 65 44 58 35 59 4b 55 53 6b 3d 5b 62 2c 63 5d 7d 29 3b 72 65 74 75 72 6e 20 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 4b 61 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 47 6f 6f 67 6c 65 47 63 4c 4b 68 4f 6d 73 3d 3d 3d 76 6f 69 64 20 30 3f 31 33 3a 31 7d 3b 66 75 6e 63 74 69 6f 6e 20 53 28 61 2c 62 29 7b 74 68 69 73 2e 68 3d 61 3b 74 68 69 73 2e 6a 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 4c 61 28 61 2c 62 29 7b 53 2e 63 61 Data Ascii: }function Ja(){var a=window;if(a.GoogleDX5YKUSk)return a.GoogleDX5YKUSk[0];var b=new r.Promise(function(c){a.GoogleDX5YKUSk=[b,c]});return b}function Ka(){return window.GoogleGcLKhOms===void 0?13:1};function S(a,b){this.h=a;this.j=b}function La(a,b){S.ca

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.16	50000	142.250.185.225	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:35 UTC	721	OUT	GET /sodar/sodar2/232/runner.html HTTP/1.1 Host: ep2.adtrafficquality.google Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://androiddatahost.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 02:49:36 UTC	689	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="adspam-signals-scs" Report-To: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]} Content-Length: 13020 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 15 Jan 2025 02:30:14 GMT Expires: Wed, 15 Jan 2025 03:20:14 GMT Cache-Control: public, max-age=3000 Age: 1162 Last-Modified: Mon, 23 Sep 2024 18:12:21 GMT Content-Type: text/html Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-15 02:49:36 UTC	701	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 76 61 72 20 70 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d Data Ascii: <!DOCTYPE html><meta charset=utf-8><script>(function(){'use strict';function m(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var p=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==
2025-01-15 02:49:36 UTC	1390	IN	Data Raw: 75 6c 6c 29 7b 63 3d 77 5b 62 5d 3b 69 66 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 63 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 61 5b 62 5d 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 79 28 61 2c 62 2c 63 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 65 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 61 3d 65 2e 6c 65 6e 67 74 68 3d 3d 3d 31 3b 76 61 72 20 66 3d 65 5b 30 5d 2c 68 3b 21 61 26 26 66 20 69 6e 20 76 3f 68 3d 76 3a 68 3d 72 3b 66 6f 72 28 66 3d 30 3b 66 3c 65 2e 6c 65 6e 67 74 68 2d 31 3b 66 2b 2b 29 7b 76 61 72 20 64 3d 65 5b 66 5d 3b 69 66 28 21 28 64 20 69 6e 20 68 29 29 62 72 65 61 6b 20 61 3b 68 3d 68 5b 64 5d 7d 65 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3b 63 3d 75 26 26 63 3d 3d 3d 22 65 73 36 Data Ascii: ull){c=w[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}}function y(a,b,c){if(b)a:{var e=a.split(".");a=e.length===1;var f=e[0],h;!a&&f in v?h=v:h=r;for(f=0;f<e.length-1;f++){var d=e[f];if(!(d in h))break a;h=h[d]}e=e[e.length-1];c=u&&c==="es6
2025-01-15 02:49:36 UTC	1390	IN	Data Raw: 66 72 65 65 7a 65 26 26 28 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 61 29 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 62 29 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 41 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 76 2e 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 78 28 76 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 26 26 61 5b 78 28 76 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 6d 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 53 74 72 69 6e 67 28 61 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e Data Ascii: freeze&&(Object.freeze(a),Object.freeze(b));return a}function A(a){var b=typeof v.Symbol!="undefined"&&x(v.Symbol,"iterator")&&a[x(v.Symbol,"iterator")];if(b)return b.call(a);if(typeof a.length=="number")return{next:m(a)};throw Error(String(a)+" is not an
2025-01-15 02:49:36 UTC	1390	IN	Data Raw: 7b 72 65 74 75 72 6e 20 61 2e 67 2e 68 3d 6e 75 6c 6c 2c 48 28 61 2e 67 2c 64 29 2c 4b 28 61 29 7d 61 2e 67 2e 68 3d 6e 75 6c 6c 3b 65 2e 63 61 6c 6c 28 61 2e 67 2c 68 29 3b 72 65 74 75 72 6e 20 4b 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 66 6f 72 28 3b 61 2e 67 2e 67 3b 29 74 72 79 7b 76 61 72 20 62 3d 61 2e 68 28 61 2e 67 29 3b 69 66 28 62 29 72 65 74 75 72 6e 20 61 2e 67 2e 6a 3d 21 31 2c 7b 76 61 6c 75 65 3a 62 2e 76 61 6c 75 65 2c 64 6f 6e 65 3a 21 31 7d 7d 63 61 74 63 68 28 63 29 7b 61 2e 67 2e 6c 3d 76 6f 69 64 20 30 2c 48 28 61 2e 67 2c 63 29 7d 61 2e 67 2e 6a 3d 21 31 3b 69 66 28 61 2e 67 2e 69 29 7b 62 3d 61 2e 67 2e 69 3b 61 2e 67 2e 69 3d 6e 75 6c 6c 3b 69 66 28 62 2e 4d 29 74 68 72 6f 77 20 62 2e 44 3b 72 65 74 75 72 6e 7b 76 61 Data Ascii: {return a.g.h=null,H(a.g,d),K(a)}a.g.h=null;e.call(a.g,h);return K(a)}function K(a){for(;a.g.g;)try{var b=a.h(a.g);if(b)return a.g.j=!1,{value:b.value,done:!1}}catch(c){a.g.l=void 0,H(a.g,c)}a.g.j=!1;if(a.g.i){b=a.g.i;a.g.i=null;if(b.M)throw b.D;return{va
2025-01-15 02:49:36 UTC	1390	IN	Data Raw: 74 68 69 73 2e 67 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 64 3d 74 68 69 73 2e 67 3b 74 68 69 73 2e 67 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 64 2e 6c 65 6e 67 74 68 3b 2b 2b 67 29 7b 76 61 72 20 6b 3d 0a 64 5b 67 5d 3b 64 5b 67 5d 3d 6e 75 6c 6c 3b 74 72 79 7b 6b 28 29 7d 63 61 74 63 68 28 6c 29 7b 74 68 69 73 2e 6a 28 6c 29 7d 7d 7d 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 74 68 69 73 2e 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 64 3b 7d 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6b 7c 7c 28 6b 3d 21 30 2c 6c Data Ascii: this.g.length;){var d=this.g;this.g=[];for(var g=0;g<d.length;++g){var k=d[g];d[g]=null;try{k()}catch(l){this.j(l)}}}this.g=null};c.prototype.j=function(d){this.i(function(){throw d;})};b.prototype.j=function(){function d(l){return function(n){k\|\|(k=!0,l
2025-01-15 02:49:36 UTC	1390	IN	Data Raw: 75 73 74 6f 6d 45 76 65 6e 74 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 21 31 2c 21 30 2c 64 29 29 3b 64 2e 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 64 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 69 3b 72 65 74 75 72 6e 20 6b 28 64 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 67 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 74 68 69 73 2e 67 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 68 2e 68 28 74 68 69 73 2e 67 5b 64 5d 29 3b 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 68 3d 6e 65 77 20 63 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 49 3d 0a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 67 3d 74 68 69 73 2e 6a 28 29 3b 64 2e 42 28 67 2e 72 65 73 6f 6c 76 Data Ascii: ustomEvent("unhandledrejection",!1,!0,d));d.promise=this;d.reason=this.i;return k(d)};b.prototype.R=function(){if(this.g!=null){for(var d=0;d<this.g.length;++d)h.h(this.g[d]);this.g=null}};var h=new c;b.prototype.I=function(d){var g=this.j();d.B(g.resolv
2025-01-15 02:49:36 UTC	1390	IN	Data Raw: 51 3b 66 75 6e 63 74 69 6f 6e 20 6c 61 28 29 7b 76 61 72 20 61 3d 6e 75 6c 6c 3b 69 66 28 21 50 29 72 65 74 75 72 6e 20 61 3b 74 72 79 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 63 7d 3b 61 3d 50 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 67 6f 6f 67 23 68 74 6d 6c 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 62 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 62 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 62 7d 29 7d 63 61 74 63 68 28 63 29 7b 7d 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 52 28 61 29 7b 74 68 69 73 2e 67 3d 61 7d 52 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2b 22 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 53 Data Ascii: Q;function la(){var a=null;if(!P)return a;try{var b=function(c){return c};a=P.createPolicy("goog#html",{createHTML:b,createScript:b,createScriptURL:b})}catch(c){}return a};function R(a){this.g=a}R.prototype.toString=function(){return this.g+""};function S
2025-01-15 02:49:36 UTC	1390	IN	Data Raw: 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 62 28 76 6f 69 64 20 30 29 7d 2c 61 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 29 7b 61 3d 61 3d 3d 3d 76 6f 69 64 20 30 3f 64 6f 63 75 6d 65 6e 74 3a 61 3b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 7d 3b 76 61 72 20 72 61 3d 7a 28 5b 22 68 74 74 70 73 3a 2f 2f 65 70 31 2e 61 64 74 72 61 66 66 69 63 71 75 61 6c 69 74 79 2e 67 6f 6f 67 6c 65 2f 62 67 2f 22 2c 22 2e 6a 73 22 5d 29 2c 73 61 3d 7a 28 5b 22 68 74 74 70 73 3a 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 62 67 2f 22 2c 22 2e 6a 73 22 5d 29 3b 66 75 6e 63 74 69 6f 6e 20 74 61 28 61 2c 62 2c 63 2c 65 29 7b 76 61 72 20 66 3d 76 6f 69 64 20 30 3b Data Ascii: on(){return void b(void 0)},a)})}function qa(a){a=a===void 0?document:a;return a.createElement("img")};var ra=z(["https://ep1.adtrafficquality.google/bg/",".js"]),sa=z(["https://pagead2.googlesyndication.com/bg/",".js"]);function ta(a,b,c,e){var f=void 0;
2025-01-15 02:49:36 UTC	1390	IN	Data Raw: 72 6e 20 44 61 28 61 2c 63 29 7d 2c 62 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 22 22 29 29 3a 28 62 3d 42 61 28 62 2e 64 61 74 61 29 29 26 26 45 61 28 61 2c 62 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 44 61 28 61 2c 62 29 7b 76 61 72 20 63 2c 65 2c 66 2c 68 3b 72 65 74 75 72 6e 20 4c 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 73 77 69 74 63 68 28 64 2e 67 29 7b 63 61 73 65 20 31 3a 63 3d 62 2e 64 61 74 61 3b 65 3d 62 2e 70 6f 72 74 73 5b 30 5d 3b 69 66 28 63 5b 30 5d 3d 3d 3d 31 26 26 74 79 70 65 6f 66 20 63 5b 31 5d 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 74 79 70 65 6f 66 20 63 5b 32 5d 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 74 79 70 65 6f 66 20 63 5b 33 5d 3d 3d 3d 22 6e 75 6d 62 65 72 22 26 26 74 79 70 65 6f 66 20 63 5b 34 5d 3d 3d 3d 22 62 6f 6f 6c 65 61 6e 22 Data Ascii: rn Da(a,c)},b.postMessage("")):(b=Ba(b.data))&&Ea(a,b)}function Da(a,b){var c,e,f,h;return L(function(d){switch(d.g){case 1:c=b.data;e=b.ports[0];if(c[0]===1&&typeof c[1]==="string"&&typeof c[2]==="string"&&typeof c[3]==="number"&&typeof c[4]==="boolean"
2025-01-15 02:49:36 UTC	1199	IN	Data Raw: 72 3f 69 64 3d 73 6f 64 61 72 32 26 76 3d 32 33 31 22 3a 22 68 74 74 70 73 3a 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 73 6f 64 61 72 3f 69 64 3d 73 6f 64 61 72 32 26 76 3d 32 33 31 22 29 3b 57 28 65 2c 22 74 22 2c 61 29 3b 62 26 26 28 57 28 65 2c 22 6c 69 22 2c 62 2e 50 29 2c 57 28 65 2c 62 2e 63 6f 6e 74 65 78 74 3d 3d 3d 22 63 72 22 3f 22 62 67 61 69 22 3a 22 6a 6b 22 2c 62 2e 4f 29 29 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 4a 61 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 76 2e 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 46 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 62 28 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 61 28 61 2c 62 29 7b Data Ascii: r?id=sodar2&v=231":"https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=231");W(e,"t",a);b&&(W(e,"li",b.P),W(e,b.context==="cr"?"bgai":"jk",b.O));return e}function Ja(a){return new v.Promise(function(b){Fa(a,function(){b()})})}function Ka(a,b){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.16	49999	142.250.185.228	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:35 UTC	794	OUT	GET /recaptcha/api2/aframe HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlaHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://androiddatahost.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 02:49:36 UTC	1117	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Wed, 15 Jan 2025 02:49:36 GMT Date: Wed, 15 Jan 2025 02:49:36 GMT Cache-Control: private, max-age=300 Content-Security-Policy: script-src 'report-sample' 'nonce-NjvD62JmKVwFDCUOwToCEw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 02:49:36 UTC	273	IN	Data Raw: 33 33 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 4e 6a 76 44 36 32 4a 6d 4b 56 77 46 44 43 55 4f 77 54 6f 43 45 77 22 3e 2f 2a 2a 20 41 6e 74 69 2d 66 72 61 75 64 20 61 6e 64 20 61 6e 74 69 2d 61 62 75 73 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 20 6f 6e 6c 79 2e 20 53 65 65 20 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 20 2a 2f 20 74 72 79 7b 76 61 72 20 63 6c 69 65 6e 74 73 3d 7b 27 73 6f 64 61 72 27 3a 27 68 Data Ascii: 33d<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="NjvD62JmKVwFDCUOwToCEw">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha */ try{var clients={'sodar':'h
2025-01-15 02:49:36 UTC	563	IN	Data Raw: 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 73 6f 64 61 72 3f 27 7d 3b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 72 79 7b 69 66 28 61 2e 73 6f 75 72 63 65 3d 3d 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 29 7b 76 61 72 20 62 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 61 2e 64 61 74 61 29 3b 76 61 72 20 63 3d 63 6c 69 65 6e 74 73 5b 62 5b 27 69 64 27 5d 5d 3b 69 66 28 63 29 7b 76 61 72 20 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 64 2e 73 72 63 3d 63 2b 62 5b 27 70 61 72 61 6d 73 27 5d 2b 27 26 72 63 3d 27 2b 28 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 72 Data Ascii: glesyndication.com/pagead/sodar?'};window.addEventListener("message",function(a){try{if(a.source===window.parent){var b=JSON.parse(a.data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("r
2025-01-15 02:49:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.16	50014	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:38 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 1982 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546afe47-d2eb-11ef-ad78-a23bd1412fc2
2025-01-15 02:49:38 UTC	1982	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 61 64 32 39 35 2d 64 32 65 62 2d 31 31 65 66 2d 39 35 39 66 2d 64 36 63 35 39 39 63 62 66 34 66 63 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 57 76 71 45 57 6f 75 62 35 69 37 2d 77 62 46 71 36 53 7a 6c 6e 46 39 75 45 51 36 2d 44 52 76 47 34 74 68 39 42 4f 7a 4b 44 4f 58 6d 52 4e 48 74 4c 4d 71 49 38 6b 49 35 33 5a 30 56 69 5a 38 72 5f 35 32 6b 4f 71 74 46 41 49 62 4b 2d 37 48 71 7a 61 68 42 64 57 62 74 34 54 30 65 6c 45 34 48 73 64 5f 61 32 79 37 4d 67 53 41 69 48 54 6d 69 49 6d 48 44 33 70 53 58 75 35 4d 4f Data Ascii: {"entries":[{"sid":"546ad295-d2eb-11ef-959f-d6c599cbf4fc","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"WvqEWoub5i7-wbFq6SzlnF9uEQ6-DRvG4th9BOzKDOXmRNHtLMqI8kI53Z0ViZ8r_52kOqtFAIbK-7HqzahBdWbt4T0elE4Hsd_a2y7MgSAiHTmiImHD3pSXu5MO
2025-01-15 02:49:38 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:38 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=546ad295-d2eb-11ef-959f-d6c599cbf4fc; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=546ad295-d2eb-11ef-959f-d6c599cbf4fc; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:38 UTC	626	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 61 77 42 48 49 33 47 39 59 59 6c 6a 67 6d 44 53 32 74 69 34 49 38 52 6e 68 31 45 59 6c 25 32 46 72 6f 44 33 6a 53 47 49 76 31 4b 76 6a 6d 49 52 34 54 73 65 50 55 5a 75 6e 73 4e 55 77 76 6e 32 76 69 6e 73 74 5a 45 73 54 6a 6a 44 7a 5a 44 6e 30 7a 6b 52 79 55 50 53 71 58 50 39 55 6c 70 45 25 32 42 4e 48 35 35 76 36 48 6b 54 36 4e 4b 25 32 42 72 77 31 45 74 78 43 25 32 42 61 69 4b 68 38 6f 76 55 54 6c 42 61 44 67 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=awBHI3G9YYljgmDS2ti4I8Rnh1EYl%2FroD3jSGIv1KvjmIR4TsePUZunsNUwvn2vinstZEsTjjDzZDn0zkRyUPSqXP9UlpE%2BNH55v6HkT6NK%2Brw1EtxC%2BaiKh8ovUTlBaDg%3D%3D"}],"group":"cf-nel","max_age":60

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.16	50015	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:38 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 1927 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546afe47-d2eb-11ef-ad78-a23bd1412fc2
2025-01-15 02:49:38 UTC	1927	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 64 61 36 64 30 2d 64 32 65 62 2d 31 31 65 66 2d 61 64 36 31 2d 30 36 66 38 64 33 31 31 62 35 37 33 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 50 61 63 73 30 79 5f 68 38 41 6f 53 70 53 64 6d 75 46 66 6a 41 32 2d 4a 68 38 35 44 38 6c 61 75 76 77 74 49 48 42 5f 31 47 69 70 72 58 5a 42 35 7a 2d 5f 45 33 4a 31 48 35 68 55 58 51 44 5a 45 73 76 56 57 37 4a 56 57 55 64 47 4d 61 5f 55 30 43 35 5f 74 6b 62 34 6d 50 31 5a 6c 45 6e 70 39 53 51 43 4f 55 54 39 5a 47 71 76 55 50 4b 56 51 6c 6e 6d 70 4f 2d 65 65 6e 5f 4b 35 Data Ascii: {"entries":[{"sid":"546da6d0-d2eb-11ef-ad61-06f8d311b573","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"Pacs0y_h8AoSpSdmuFfjA2-Jh85D8lauvwtIHB_1GiprXZB5z-_E3J1H5hUXQDZEsvVW7JVWUdGMa_U0C5_tkb4mP1ZlEnp9SQCOUT9ZGqvUPKVQlnmpO-een_K5
2025-01-15 02:49:38 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:38 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=546da6d0-d2eb-11ef-ad61-06f8d311b573; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=546da6d0-d2eb-11ef-ad61-06f8d311b573; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:38 UTC	626	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 50 47 77 44 6d 52 53 43 73 51 4f 52 6d 4a 61 50 64 68 33 6c 4d 39 62 74 64 79 32 57 66 76 32 36 4a 36 78 46 41 4d 47 75 45 76 4a 65 42 6b 65 78 74 35 44 51 6d 31 71 51 65 66 25 32 42 65 6e 66 33 32 46 6f 69 4b 72 68 6a 53 45 75 36 69 71 25 32 42 54 6d 4e 4d 70 45 31 42 49 78 72 47 50 71 70 4b 42 49 6c 77 6a 41 76 44 49 63 4e 54 66 68 61 55 53 67 41 37 25 32 42 77 68 25 32 42 31 49 6d 4b 37 53 61 69 31 35 51 67 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PGwDmRSCsQORmJaPdh3lM9btdy2Wfv26J6xFAMGuEvJeBkext5DQm1qQef%2Benf32FoiKrhjSEu6iq%2BTmNMpE1BIxrGPqpKBIlwjAvDIcNTfhaUSgA7%2Bwh%2B1ImK7Sai15Qg%3D%3D"}],"group":"cf-nel","max_age":60

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.16	50016	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:38 UTC	740	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 929 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546afe47-d2eb-11ef-ad78-a23bd1412fc2
2025-01-15 02:49:38 UTC	929	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 36 39 62 30 35 2d 64 32 65 62 2d 31 31 65 66 2d 62 34 65 63 2d 37 61 37 64 64 36 63 32 65 39 30 66 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 71 35 34 37 49 6e 69 45 70 31 71 59 37 4f 45 67 30 50 45 2d 7a 76 49 37 63 34 54 54 62 79 4a 39 79 55 62 4a 58 58 39 61 58 52 52 46 5a 32 52 53 61 43 31 61 71 4b 56 63 4e 77 46 4c 7a 76 6f 4f 55 53 42 31 43 71 2d 6b 4b 41 56 43 5a 4d 43 4f 38 77 47 69 58 76 64 6d 57 5f 52 5f 6c 68 57 6a 39 56 5a 30 42 58 59 64 4c 71 33 43 56 66 65 65 33 44 6c 38 57 49 33 57 6b 44 64 36 Data Ascii: {"entries":[{"sid":"54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"q547IniEp1qY7OEg0PE-zvI7c4TTbyJ9yUbJXX9aXRRFZ2RSaC1aqKVcNwFLzvoOUSB1Cq-kKAVCZMCO8wGiXvdmW_R_lhWj9VZ0BXYdLq3CVfee3Dl8WI3WkDd6
2025-01-15 02:49:38 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:38 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=54669b05-d2eb-11ef-b4ec-7a7dd6c2e90f; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:38 UTC	628	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 31 56 51 7a 78 59 25 32 42 66 53 45 4f 53 74 34 39 71 4f 59 6b 38 38 70 6c 52 4d 73 75 32 77 56 58 49 44 32 25 32 46 61 45 44 6b 36 6f 42 7a 25 32 46 66 41 35 33 55 54 39 4e 74 6d 49 64 6f 25 32 46 6d 42 64 6a 70 65 6d 45 42 51 39 53 31 44 4e 42 70 63 48 66 42 55 65 65 77 37 37 59 76 55 61 4d 41 79 35 32 6e 6c 4a 46 42 7a 35 4d 59 67 58 68 41 35 47 43 67 52 61 25 32 46 58 70 36 49 53 30 53 74 37 77 55 6e 6d 32 54 51 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1VQzxY%2BfSEOSt49qOYk88plRMsu2wVXID2%2FaEDk6oBz%2FfA53UT9NtmIdo%2FmBdjpemEBQ9S1DNBpcHfBUeew77YvUaMAy52nlJFBz5MYgXhA5GCgRa%2FXp6IS0St7wUnm2TQ%3D%3D"}],"group":"cf-nel","max_age":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.16	50020	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:38 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 1897 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546afe47-d2eb-11ef-ad78-a23bd1412fc2
2025-01-15 02:49:38 UTC	1897	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 65 66 32 39 34 2d 64 32 65 62 2d 31 31 65 66 2d 39 34 65 36 2d 31 32 30 38 37 65 30 63 30 62 34 38 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 71 44 53 77 62 4f 49 72 30 44 32 32 73 62 75 38 71 7a 4f 57 7a 7a 73 67 54 41 79 6a 58 61 59 44 30 57 6a 65 6b 6b 2d 43 42 74 71 6b 71 57 32 47 69 77 38 61 61 42 59 39 48 30 33 6a 73 6a 55 64 2d 2d 52 50 4a 49 51 43 63 38 69 73 66 58 52 6f 4c 7a 5f 4a 78 58 76 57 4f 73 67 46 4c 51 30 4c 58 51 43 56 5f 76 52 4f 37 57 5a 73 6f 36 49 2d 38 58 35 6e 68 2d 69 50 53 58 4b 58 Data Ascii: {"entries":[{"sid":"546ef294-d2eb-11ef-94e6-12087e0c0b48","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"qDSwbOIr0D22sbu8qzOWzzsgTAyjXaYD0Wjekk-CBtqkqW2Giw8aaBY9H03jsjUd--RPJIQCc8isfXRoLz_JxXvWOsgFLQ0LXQCV_vRO7WZso6I-8X5nh-iPSXKX
2025-01-15 02:49:38 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:38 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=546ef294-d2eb-11ef-94e6-12087e0c0b48; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=546ef294-d2eb-11ef-94e6-12087e0c0b48; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:38 UTC	620	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 62 54 42 75 63 64 4c 63 59 6e 65 4c 4b 63 50 42 68 33 64 55 75 48 7a 67 6a 76 35 47 35 73 33 66 7a 6a 64 32 6c 75 4d 79 48 43 33 6f 45 25 32 42 6e 4e 75 78 54 5a 54 30 41 39 72 48 35 46 67 51 70 33 58 34 6e 45 35 79 76 79 52 36 45 35 74 4c 54 52 68 72 57 46 79 61 6e 44 70 57 76 4a 4c 34 78 35 4e 6d 46 77 74 69 75 56 63 70 54 50 43 47 59 66 69 6f 55 57 65 50 65 46 4a 79 38 63 6a 56 59 35 57 77 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bTBucdLcYneLKcPBh3dUuHzgjv5G5s3fzjd2luMyHC3oE%2BnNuxTZT0A9rH5FgQp3X4nE5yvyR6E5tLTRhrWFyanDpWvJL4x5NmFwtiuVcpTPCGYfioUWePeFJy8cjVY5Ww%3D%3D"}],"group":"cf-nel","max_age":604800}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.16	50019	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:38 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 1992 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546afe47-d2eb-11ef-ad78-a23bd1412fc2
2025-01-15 02:49:38 UTC	1992	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 36 32 63 33 62 2d 64 32 65 62 2d 31 31 65 66 2d 62 38 65 30 2d 39 65 61 37 63 65 66 33 65 30 63 66 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 49 6a 48 75 6f 4b 48 39 6e 6d 79 77 79 56 54 69 47 69 6f 44 4e 43 41 75 4c 55 44 4c 31 32 68 4f 75 47 6c 37 62 67 64 53 66 56 79 79 56 59 42 54 7a 37 5a 73 72 37 75 75 54 6c 38 54 4a 49 6b 35 64 57 66 38 31 55 48 2d 41 73 4b 6f 4e 33 45 61 64 44 77 6a 55 42 4a 51 75 51 51 6c 56 79 41 39 36 33 51 70 4b 42 4c 68 5a 53 76 4d 49 62 48 50 76 4a 6c 66 69 56 68 7a 71 56 6c 5a Data Ascii: {"entries":[{"sid":"54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"IjHuoKH9nmywyVTiGioDNCAuLUDL12hOuGl7bgdSfVyyVYBTz7Zsr7uuTl8TJIk5dWf81UH-AsKoN3EadDwjUBJQuQQlVyA963QpKBLhZSvMIbHPvJlfiVhzqVlZ
2025-01-15 02:49:38 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:38 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=54662c3b-d2eb-11ef-b8e0-9ea7cef3e0cf; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 02:49:38 UTC	622	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 65 78 6b 64 47 7a 33 45 48 53 34 32 53 65 75 38 71 6e 7a 53 72 39 64 79 49 25 32 42 53 6a 31 52 48 72 6d 59 56 44 69 6a 37 6c 31 6c 6c 78 30 30 68 50 4f 73 62 78 59 25 32 42 4f 51 58 6c 30 5a 57 39 64 74 6f 34 64 71 59 4d 50 6b 4b 36 77 49 56 42 5a 44 74 75 50 37 41 75 57 33 6e 58 42 62 41 50 76 35 4f 74 4d 64 6d 39 71 74 55 31 44 65 43 6b 59 77 42 4a 30 43 7a 66 72 52 58 62 66 6b 41 58 53 44 42 51 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=exkdGz3EHS42Seu8qnzSr9dyI%2BSj1RHrmYVDij7l1llx00hPOsbxY%2BOQXl0ZW9dto4dqYMPkK6wIVBZDtuP7AuW3nXBbAPv5OtMdm9qtU1DeCkYwBJ0CzfrRXbfkAXSDBQ%3D%3D"}],"group":"cf-nel","max_age":604800

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.16	50018	172.67.176.164	443	6992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 02:49:38 UTC	740	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 961 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=55743542-d2eb-11ef-8362-42112db8d86c; sid_cross=546afe47-d2eb-11ef-ad78-a23bd1412fc2
2025-01-15 02:49:38 UTC	961	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 35 34 36 61 66 65 34 37 2d 64 32 65 62 2d 31 31 65 66 2d 61 64 37 38 2d 61 32 33 62 64 31 34 31 32 66 63 32 22 2c 22 64 22 3a 22 61 6e 64 72 6f 69 64 64 61 74 61 68 6f 73 74 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 68 41 49 32 4b 71 46 56 7a 45 67 6c 75 5a 68 41 46 72 73 72 57 66 64 2d 57 6d 35 4a 39 50 30 2d 44 49 46 33 4f 57 6a 46 6f 6d 68 7a 76 37 65 73 4e 42 42 77 78 54 2d 4d 56 52 63 69 6c 75 47 31 45 6d 33 6b 2d 76 37 49 77 53 74 6c 4f 68 74 6b 37 6a 63 76 36 49 30 4e 48 55 4c 4d 54 71 61 42 76 51 47 43 42 69 53 50 72 68 6d 33 74 7a 46 55 4d 69 54 48 38 56 56 57 54 42 79 58 Data Ascii: {"entries":[{"sid":"546afe47-d2eb-11ef-ad78-a23bd1412fc2","d":"androiddatahost.com","cr":"ext_download_prot_smrtsp","gid":"","im":"hAI2KqFVzEgluZhAFrsrWfd-Wm5J9P0-DIF3OWjFomhzv7esNBBwxT-MVRciluG1Em3k-v7IwStlOhtk7jcv6I0NHULMTqaBvQGCBiSPrhm3tzFUMiTH8VVWTByX
2025-01-15 02:49:38 UTC	1322	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 02:49:38 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=55743542-d2eb-11ef-8362-42112db8d86c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Via: 1.1 google cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m1IoPlxWr%2FtrNFhNMresVhyXc2363L81B0Cpei5vJ4WLYTzMJge6QOG3H9IUuolzRjMbhZpxafY8GFFUQaR2q80n%2B6GCfmvRq%2BDd7%2BeoC%2FpZsEXIK3nTn65sezUTch3nLQ%3D%3D"}],"group":"cf-nel","max_age":604800}
2025-01-15 02:49:38 UTC	364	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 32 32 38 64 63 31 33 65 62 61 61 32 62 37 2d 59 55 4c 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 37 38 35 31 26 6d 69 6e 5f 72 74 74 3d 31 37 38 31 39 26 72 74 74 5f 76 61 72 3d 36 37 30 35 26 73 65 6e 74 3d 34 26 72 65 63 76 3d 37 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e Data Ascii: NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 90228dc13ebaa2b7-YULalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=17851&min_rtt=17819&rtt_var=6705&sent=4&recv=7&lost=0&retrans=0&sen

Target ID:	0
Start time:	21:49:17
Start date:	14/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	21:49:18
Start date:	14/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1972,i,11324115554718533007,5483598246334832712,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	21:49:19
Start date:	14/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://androiddatahost.com/sdsd3"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	21:49:40
Start date:	14/01/2025
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
Imagebase:	0x7ff76dc20000
File size:	71'680 bytes
MD5 hash:	EF3179D498793BF4234F708D3BE28633
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	21:50:04
Start date:	14/01/2025
Path:	C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe"
Imagebase:	0xe30000
File size:	2'120'192 bytes
MD5 hash:	D1412352B9617DBAE75253250F2EE093
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Analysis Process: PhoenixSuit.exePID: 7964, Parent PID: 4380

General

Target ID:	16
Start time:	21:50:04
Start date:	14/01/2025
Path:	C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe"
Imagebase:	0xe30000
File size:	2'120'192 bytes
MD5 hash:	D1412352B9617DBAE75253250F2EE093
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	17
Start time:	21:50:05
Start date:	14/01/2025
Path:	C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe start-server
Imagebase:	0x400000
File size:	815'104 bytes
MD5 hash:	877B85B87727D1B30C78F7EAA92E59DB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	21:50:05
Start date:	14/01/2025
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6684c0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	19
Start time:	21:50:07
Start date:	14/01/2025
Path:	C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe
Wow64 process (32bit):	true
Commandline:	adb fork-server server
Imagebase:	0x400000
File size:	815'104 bytes
MD5 hash:	877B85B87727D1B30C78F7EAA92E59DB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	20
Start time:	21:50:11
Start date:	14/01/2025
Path:	C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\adb.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\adb.exe devices
Imagebase:	0x400000
File size:	815'104 bytes
MD5 hash:	877B85B87727D1B30C78F7EAA92E59DB
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	21
Start time:	21:50:11
Start date:	14/01/2025
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6684c0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	25
Start time:	21:50:45
Start date:	14/01/2025
Path:	C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\UpdateVerEx.exe"
Imagebase:	0x590000
File size:	1'737'216 bytes
MD5 hash:	6E1F3FD25CFD0145AD1D2DEC2A138B01
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	26
Start time:	21:51:03
Start date:	14/01/2025
Path:	C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixDaemon.exe"
Imagebase:	0x400000
File size:	815'104 bytes
MD5 hash:	877B85B87727D1B30C78F7EAA92E59DB
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	27
Start time:	21:51:03
Start date:	14/01/2025
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6684c0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	28
Start time:	21:51:13
Start date:	14/01/2025
Path:	C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixInstall.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixInstall.exe"
Imagebase:	0xfb0000
File size:	1'745'408 bytes
MD5 hash:	5D65986B8BE9EC7F1562AC5F811694DA
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\background.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\succeed_normal.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\succeed_normal.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\succeed_normal.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\succeed_normal.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\succeed_mask.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\start_deivces.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\start_connect.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\start_pc.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\start_device.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\start_android.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\icon_normal.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\icon_normal.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\icon_normal.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\icon_normal.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\icon_mask.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\alter_normal.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\alter_normal.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\alter_normal.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\alter_normal.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\alter_mask.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\image_normal.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\image_down.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\image_focus.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\image_gray.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\image_mask.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\burn_normal.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\burn_down.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\burn_focus.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\burn_gray.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\burn_mask.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\home_normal.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\home_down.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\home_focus.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\topbtn_mask.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\flash_normal.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\flash_down.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\flash_focus.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\topbtn_mask.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\apk_normal.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\apk_down.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\apk_focus.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\topbtn_mask.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\news_normal.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\news_down.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\news_focus.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\topbtn_mask.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\about_normal.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\about_down.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\about_focus.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\minius_mask.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\minius_normal.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\minius_down.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\minius_focus.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\minius_mask.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\close_normal.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\close_down.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\close_focus.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\close_disable.png VolumeInformation	Jump to behavior
Source: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\PhoenixSuit.exe	Queries volume information: C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\resource\close_mask.png VolumeInformation	Jump to behavior

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse rundll32.exe to proxy execution of malicious code. Using rundll32.exe, vice executing directly (i.e. Shared Modules ), may avoid triggering security tools that may not monitor execution of the rundll32.exe process because of allowlists or false positives from normal operations. Rundll32.exe is commonly associated with executing DLL payloads (ex: `rundll32.exe {DLLname, DLLfunction}` ).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://androiddatahost.com/sdsd3

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\.android\adbkey

C:\Users\user\.android\adbkey.pub

C:\Users\user\AppData\Local\Temp\adb.log

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

C:\Users\user\Downloads\26acb035-b80d-4544-820d-919803f939e7.tmp

C:\Users\user\Downloads\PhoenixSuit_V1.08.zip (copy)

C:\Users\user\Downloads\PhoenixSuit_V1.08.zip.crdownload

C:\Users\user\Downloads\PhoenixSuit_V1.08\PhoenixSuit_V1.08\adb9C37.tmp

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Windows Analysis Report
https://androiddatahost.com/sdsd3