Edit tour

Windows Analysis Report
https://nuance-pdf-professional2.software.informer.com/7.2/

Overview

General Information

Sample URL:	https://nuance-pdf-professional2.software.informer.com/7.2/
Analysis ID:	1592224
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected landing page (webpage, office document or email)

AI detected suspicious Javascript

Detected non-DNS traffic on DNS port

HTML body with high number of embedded SVGs detected

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5448 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3228 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2004,i,9348203157779861519,15638006010270494539,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6356 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5628 --field-trial-handle=2004,i,9348203157779861519,15638006010270494539,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6592 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4456 --field-trial-handle=2004,i,9348203157779861519,15638006010270494539,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6456 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nuance-pdf-professional2.software.informer.com/7.2/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected landing page (webpage, office document or email)

Source: https://nuance-pdf-professional2.software.informer.com/7.2/

Joe Sandbox AI: Page contains button: 'DOWNLOAD' Source: '1.2.pages.csv'

AI detected suspicious Javascript

Source: 0.150.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://get4.protectonow.com/install/?mid=f28d8534... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated URLs. It creates a script tag and an iframe that load content from untrusted domains, which could potentially be used for malicious purposes such as phishing or credential theft.
Source: 2.161..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://obseu.7roundprince.com/ct?id=74676&url=htt... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated code/URLs. The script appears to be executing a complex operation involving a large amount of encoded data, which is highly suspicious and indicative of malicious intent. Additionally, the script interacts with an untrusted domain, further increasing the risk. Overall, this script demonstrates clear signs of malicious activity and poses a significant security threat.
Source: 2.153..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://get4.protectonow.com/siglp.js?rpclid=f28d8... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. It also performs aggressive DOM manipulation and interacts with external domains of unknown reputation. While some of the functionality may be intended for legitimate purposes like analytics and error reporting, the overall behavior and lack of transparency raise significant security concerns.

Source: https://get4.protectonow.com/install/?mid=f28d8534-d38e-11ef-93a7-aab196f2f20d&rpclid=f28d8534-d38e-11ef-93a7-aab196f2f20d&utm_source=adx_ext_download_prot_smrtsp___5e460bab&uq=_JDg0vZrlOp4T6_9U0ssm5ItFDhV3TsqhLGO26omVj-2pXmkcPDHdNwDCaqhZpjpKTa7dG0kopMzaVwvRrpzQLXyz5bNrDsHKX4rae-VljJo0XQMs9qPDHH7jO7Lx_9WhNCEj1xuWu-4f2YWpcIqzgA77etzE7oZtFSzHsIewF6zNBxh8d3T9Zk-HKlhZPa0MQd1POmBJVA9GftafTfIXKITadh35clew_PwRPW1jYBE6OV5DcPze2-TuMN32-hA8DrE-3ihdR3djmkB6y-R7g&params=Nb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkPejZgAKFm3ZlUxHBNGiYcbgU5DmL2JgBOnA6uq5HqYXDGOAkkcHp77mTvilkZ5d9Q2rpDl_8WOAn-k2Y5V9CBXA9Hn2pQTPVn67DMY2sybqayiZvf5flizO3fgV6Cw9N2-R52IBOSmAosKxVeFWSaITqzx-S70fbalfXf6j_MGyOC9eAxeZ7JGLaNEYTuDszAbHweW2Joh-qvwh3aS1didawvBHLOP-V2AJ9n6wIzxxqj8vOzYkgNldKNUmJt1QcCV7gcheIGQeY618UdBWcgJbQ4H-Y9TkqHO2sUSV-RHzJCsRWDjhnFAPFm7pN506i_DH--SzmnConwZt5nHCFtvPxN2SulUo9

HTTP Parser: Total embedded SVG size: 147456

Source: https://nuance-pdf-professional2.software.informer.com/7.2/

HTTP Parser: Base64 decoded: [null,null,null,3]

Source: https://nuance-pdf-professional2.software.informer.com/7.2/	HTTP Parser: No favicon
Source: https://nuance-pdf-professional2.software.informer.com/7.2/	HTTP Parser: No favicon
Source: https://nuance-pdf-professional2.software.informer.com/7.2/	HTTP Parser: No favicon
Source: https://nuance-pdf-professional2.software.informer.com/7.2/	HTTP Parser: No favicon
Source: https://nuance-pdf-professional2.software.informer.com/7.2/	HTTP Parser: No favicon
Source: https://nuance-pdf-professional2.software.informer.com/7.2/	HTTP Parser: No favicon
Source: https://nuance-pdf-professional2.software.informer.com/7.2/	HTTP Parser: No favicon
Source: https://get4.protectonow.com/install/?mid=f28d8534-d38e-11ef-93a7-aab196f2f20d&rpclid=f28d8534-d38e-11ef-93a7-aab196f2f20d&utm_source=adx_ext_download_prot_smrtsp___5e460bab&uq=_JDg0vZrlOp4T6_9U0ssm5ItFDhV3TsqhLGO26omVj-2pXmkcPDHdNwDCaqhZpjpKTa7dG0kopMzaVwvRrpzQLXyz5bNrDsHKX4rae-VljJo0XQMs9qPDHH7jO7Lx_9WhNCEj1xuWu-4f2YWpcIqzgA77etzE7oZtFSzHsIewF6zNBxh8d3T9Zk-HKlhZPa0MQd1POmBJVA9GftafTfIXKITadh35clew_PwRPW1jYBE6OV5DcPze2-TuMN32-hA8DrE-3ihdR3djmkB6y-R7g&params=Nb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkPejZgAKFm3ZlUxHBNGiYcbgU5DmL2JgBOnA6uq5HqYXDGOAkkcHp77mTvilkZ5d9Q2rpDl_8WOAn-k2Y5V9CBXA9Hn2pQTPVn67DMY2sybqayiZvf5flizO3fgV6Cw9N2-R52IBOSmAosKxVeFWSaITqzx-S70fbalfXf6j_MGyOC9eAxeZ7JGLaNEYTuDszAbHweW2Joh-qvwh3aS1didawvBHLOP-V2AJ9n6wIzxxqj8vOzYkgNldKNUmJt1QcCV7gcheIGQeY618UdBWcgJbQ4H-Y9TkqHO2sUSV-RHzJCsRWDjhnFAPFm7pN506i_DH--SzmnConwZt5nHCFtvPxN2SulUo9	HTTP Parser: No favicon

Source: global traffic

TCP traffic: 192.168.2.4:49893 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /7.2/ HTTP/1.1Host: nuance-pdf-professional2.software.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/SourceSansPro-Regular.woff HTTP/1.1Host: nuance-pdf-professional2.software.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://nuance-pdf-professional2.software.informer.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://nuance-pdf-professional2.software.informer.com/7.2/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/SourceSansPro-Bold.woff HTTP/1.1Host: nuance-pdf-professional2.software.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://nuance-pdf-professional2.software.informer.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://nuance-pdf-professional2.software.informer.com/7.2/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/SourceSansPro-SemiBold.woff HTTP/1.1Host: nuance-pdf-professional2.software.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://nuance-pdf-professional2.software.informer.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://nuance-pdf-professional2.software.informer.com/7.2/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/v4/empty_stars.svg HTTP/1.1Host: nuance-pdf-professional2.software.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nuance-pdf-professional2.software.informer.com/7.2/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/empty.gif HTTP/1.1Host: img.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /style/onexit9.css HTTP/1.1Host: software.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icons/png/48/5524/5524797.png HTTP/1.1Host: img.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/blank.gif HTTP/1.1Host: img.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /style/v4/min/program.min.css HTTP/1.1Host: software.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/onexit9.js HTTP/1.1Host: i.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/footer4.js HTTP/1.1Host: i.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/program-mac.min.js HTTP/1.1Host: i.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/cache/hilight_software_v4.js?rnd=824406174 HTTP/1.1Host: i.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/comments-module/smiles/smile.gif HTTP/1.1Host: img.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icons/png/48/7048/7048274.png HTTP/1.1Host: img.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icons/png/48/8509/8509758.png HTTP/1.1Host: img.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log.php?id=67,70,204,8551,3957,1,8597,8691,50,46,7667,6523,6343,6385,6512,6504,9163,9561,8713,4543,291,6321,140,7241,7242,8043,6142,7117,9497,8431&urlid=&ref=&r=86110 HTTP/1.1Host: hits.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/achecker3.js HTTP/1.1Host: i.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/footer4.js HTTP/1.1Host: i.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icons/png/48/3243/3243680.png HTTP/1.1Host: img.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icons/png/48/8336/8336687.png HTTP/1.1Host: img.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/v2/elements.png HTTP/1.1Host: img.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icons/png/48/5860/5860964.png HTTP/1.1Host: img.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/log_hit4.php?r=20025 HTTP/1.1Host: software.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/v4/empty_stars.svg HTTP/1.1Host: nuance-pdf-professional2.software.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/onexit9.js HTTP/1.1Host: i.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icons/png/48/5524/5524797.png HTTP/1.1Host: img.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/empty.gif HTTP/1.1Host: img.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/blank.gif HTTP/1.1Host: img.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/comments-module/smiles/smile.gif HTTP/1.1Host: img.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icons/png/48/7048/7048274.png HTTP/1.1Host: img.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icons/png/48/8509/8509758.png HTTP/1.1Host: img.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/cache/hilight_software_v4.js?rnd=824406174 HTTP/1.1Host: i.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log.php?id=67,70,204,8551,3957,1,8597,8691,50,46,7667,6523,6343,6385,6512,6504,9163,9561,8713,4543,291,6321,140,7241,7242,8043,6142,7117,9497,8431&urlid=&ref=&r=86110 HTTP/1.1Host: hits.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icons/png/48/1866/1866515.png HTTP/1.1Host: img.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/program-mac.min.js HTTP/1.1Host: i.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/v4/empty_stars.svg HTTP/1.1Host: software.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://software.informer.com/style/v4/min/program.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/login_menu.php?ref= HTTP/1.1Host: nuance-pdf-professional2.software.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://nuance-pdf-professional2.software.informer.com/7.2/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
Source: global traffic	HTTP traffic detected: GET /images/default_icon/default_48_0.png HTTP/1.1Host: img.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/th_view.php?id=3948072 HTTP/1.1Host: nuance-pdf-professional2.software.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nuance-pdf-professional2.software.informer.com/7.2/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/achecker3.js HTTP/1.1Host: i.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
Source: global traffic	HTTP traffic detected: GET /images/v3/logo_si_white.svg HTTP/1.1Host: img.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icons/png/128/3439/3439369.png HTTP/1.1Host: img.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
Source: global traffic	HTTP traffic detected: GET /icons/png/48/8336/8336687.png HTTP/1.1Host: img.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
Source: global traffic	HTTP traffic detected: GET /ajax/log_hit4.php?r=20025 HTTP/1.1Host: software.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
Source: global traffic	HTTP traffic detected: GET /images/v4/fill_stars.svg HTTP/1.1Host: img.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
Source: global traffic	HTTP traffic detected: GET /p5/nuance-pdf-converter-professional-v8-main-window-display.png HTTP/1.1Host: img.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
Source: global traffic	HTTP traffic detected: GET /images/v2/elements.png HTTP/1.1Host: img.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
Source: global traffic	HTTP traffic detected: GET /icons/png/48/5860/5860964.png HTTP/1.1Host: img.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
Source: global traffic	HTTP traffic detected: GET /icons/png/48/3243/3243680.png HTTP/1.1Host: img.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
Source: global traffic	HTTP traffic detected: GET /ajax/login_menu.php?ref= HTTP/1.1Host: nuance-pdf-professional2.software.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
Source: global traffic	HTTP traffic detected: GET /awards/si-award-epick4.png HTTP/1.1Host: img.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
Source: global traffic	HTTP traffic detected: GET /images/v4/filled_stars.svg HTTP/1.1Host: img.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
Source: global traffic	HTTP traffic detected: GET /images/v4/empty_stars.svg HTTP/1.1Host: software.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
Source: global traffic	HTTP traffic detected: GET /icons/png/48/1866/1866515.png HTTP/1.1Host: img.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
Source: global traffic	HTTP traffic detected: GET /ajax/th_view.php?id=3948072 HTTP/1.1Host: nuance-pdf-professional2.software.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
Source: global traffic	HTTP traffic detected: GET /images/default_icon/default_48_0.png HTTP/1.1Host: img.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
Source: global traffic	HTTP traffic detected: GET /images/v4/5stars.svg HTTP/1.1Host: img.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
Source: global traffic	HTTP traffic detected: GET /images/v4/4stars.svg HTTP/1.1Host: img.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
Source: global traffic	HTTP traffic detected: GET /images/v3/logo_si_white.svg HTTP/1.1Host: img.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
Source: global traffic	HTTP traffic detected: GET /images/v4/3stars.svg HTTP/1.1Host: img.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
Source: global traffic	HTTP traffic detected: GET /icons/png/128/3439/3439369.png HTTP/1.1Host: img.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
Source: global traffic	HTTP traffic detected: GET /images/v4/2stars.svg HTTP/1.1Host: img.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
Source: global traffic	HTTP traffic detected: GET /pagead/html/r20250113/r20190131/zrt_lookup_fy2021.html HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/v4/1stars.svg HTTP/1.1Host: img.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-4821006852914359&output=html&h=90&slotname=7854405427&adk=4056614258&adf=1706824535&pi=t.ma~as.7854405427&w=1200&abgtt=9&fwrn=4&fwrnh=100&lmt=1736870130&rafmt=2&format=1200x90&url=https%3A%2F%2Fnuance-pdf-professional2.software.informer.com%2F7.2%2F&fwr=0&fwrattr=true&rpe=1&resp_fmts=2&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736979634915&bpp=4&bdt=1617&idt=1532&shv=r20250113&mjsv=m202501090101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&correlator=4566372036047&frm=20&pv=2&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=311&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533202%2C31089683%2C95344791%2C95350245%2C95340252%2C95340254&oid=2&pvsid=3788874330487745&tmod=2006592406&uas=0&nvt=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=o%7C%7Coe%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=1582 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-4821006852914359&output=html&h=280&slotname=9917528229&adk=658919145&adf=3882744954&pi=t.ma~as.9917528229&w=336&abgtt=9&fwrn=4&fwrnh=100&lmt=1736870130&rafmt=3&format=336x280&url=https%3A%2F%2Fnuance-pdf-professional2.software.informer.com%2F7.2%2F&fwr=0&fwrattr=true&rpe=1&resp_fmts=1&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736979634919&bpp=1&bdt=1620&idt=1594&shv=r20250113&mjsv=m202501090101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=1200x90&correlator=4566372036047&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=15&ady=550&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533202%2C31089683%2C95344791%2C95350245%2C95340252%2C95340254&oid=2&pvsid=3788874330487745&tmod=2006592406&uas=0&nvt=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=o%7C%7CoeE%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&fsb=1&dtd=1600 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/v4/fill_stars.svg HTTP/1.1Host: img.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-4821006852914359&output=html&h=90&slotname=4034399826&adk=3689936537&adf=2221415025&pi=t.ma~as.4034399826&w=847&abgtt=9&fwrn=4&fwrnh=100&lmt=1736870130&rafmt=2&format=847x90&url=https%3A%2F%2Fnuance-pdf-professional2.software.informer.com%2F7.2%2F&fwr=0&fwrattr=true&rpe=1&resp_fmts=2&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736979634920&bpp=1&bdt=1621&idt=1620&shv=r20250113&mjsv=m202501090101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=1200x90%2C336x280&correlator=4566372036047&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=15&ady=860&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533202%2C31089683%2C95344791%2C95350245%2C95340252%2C95340254&oid=2&pvsid=3788874330487745&tmod=2006592406&uas=0&nvt=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=o%7C%7CeE%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=1625 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-4821006852914359&output=html&adk=1812271804&adf=3025194257&abgtt=9&lmt=1736870130&plaf=1%3A2%2C7%3A2&plat=1%3A128%2C2%3A128%2C3%3A128%2C4%3A128%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fnuance-pdf-professional2.software.informer.com%2F7.2%2F&pra=7&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~3~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aicel=33~38&aifxl=29_18~30_19&aiixl=29_5~30_6&aiict=1&aiapm=0.2&aiapmi=0.33938&aief=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736979634921&bpp=3&bdt=1622&idt=1657&shv=r20250113&mjsv=m202501090101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=1200x90%2C336x280%2C847x90&nras=1&correlator=4566372036047&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533202%2C31089683%2C95344791%2C95350245%2C95340252%2C95340254&oid=2&pvsid=3788874330487745&tmod=2006592406&uas=3&nvt=1&fsapi=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&fsb=1&dtd=1664 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/v4/filled_stars.svg HTTP/1.1Host: img.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
Source: global traffic	HTTP traffic detected: GET /p5/nuance-pdf-converter-professional-v8-main-window-display.png HTTP/1.1Host: img.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
Source: global traffic	HTTP traffic detected: GET /awards/si-award-epick4.png HTTP/1.1Host: img.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
Source: global traffic	HTTP traffic detected: GET /images/v4/5stars.svg HTTP/1.1Host: img.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
Source: global traffic	HTTP traffic detected: GET /images/v4/4stars.svg HTTP/1.1Host: img.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
Source: global traffic	HTTP traffic detected: GET /images/v4/3stars.svg HTTP/1.1Host: img.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
Source: global traffic	HTTP traffic detected: GET /images/v4/1stars.svg HTTP/1.1Host: img.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
Source: global traffic	HTTP traffic detected: GET /images/v4/2stars.svg HTTP/1.1Host: img.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
Source: global traffic	HTTP traffic detected: GET /pagead/drt/s?v=r20120211 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4821006852914359&output=html&h=90&slotname=4034399826&adk=3689936537&adf=2221415025&pi=t.ma~as.4034399826&w=847&abgtt=9&fwrn=4&fwrnh=100&lmt=1736870130&rafmt=2&format=847x90&url=https%3A%2F%2Fnuance-pdf-professional2.software.informer.com%2F7.2%2F&fwr=0&fwrattr=true&rpe=1&resp_fmts=2&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736979634920&bpp=1&bdt=1621&idt=1620&shv=r20250113&mjsv=m202501090101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=1200x90%2C336x280&correlator=4566372036047&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=15&ady=860&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533202%2C31089683%2C95344791%2C95350245%2C95340252%2C95340254&oid=2&pvsid=3788874330487745&tmod=2006592406&uas=0&nvt=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=o%7C%7CeE%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=1625Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CcowAtTSIZ5nPM7qSjuwPsJeGsAe9qs_Ndemi3NbEEsCNtwEQASAAYMmWy4vEpPwPggEXY2EtcHViLTQ4MjEwMDY4NTI5MTQzNTnIAQmoAwHIAwKqBIICT9DUYKjKI4pQraEcfrh6m7h9bplWrkbPj_91eeUOpJhdu9KpO0_XYY-cFu19QnZyNheKNP9npaVhnppps6EXhc3BzLo3anLFZHbeg9orLOvmqDeb92XzJ9zmloLoNmP_QdruBQ3lrp4hdP1u3o5ziALuCeqfDUCAk3nMPyRGcGzELC11L3Li97soOg-L0FVd1MKKdwSb3JXcm9Jc4SzAnkh4e7olKZznc1bs88r2I5yWFLGbTgw6FY7xoSlUEd1JBSESOIhUn4RAQ2j7Ze9B0WVkDsyfWXvNgTvg5yey5YKtS_bWmlwrK3xttOT7-OwGuzjn-WXBxYdZQ4iA7PJcsyxzgAaarO2X-f_z_OUBoAYhqAemvhuoB5bYG6gHqpuxAqgH_56xAqgH35-xAqgHrb6xAtgHANIIJAiAYRABMgKKAjoLgECAwICAgKCogAJIvf3BOljj466y4fiKA4AKAfoLAggBgAwB0BUBgBcBshccChgSFHB1Yi00ODIxMDA2ODUyOTE0MzU5GAAYDA&sigh=1sAzvU4xCKM&uach_m=%5BUACH%5D&cid=CAQSTwCa7L7dQq7Ua8LJPgiEu7R4dxu7VSCDaaBZxHkFM4asi_fnDbC-VtJCptQoPfsZc_9JBcL2RZCBBo0g6gLsCb51Y4n2HKxUL6PsZw0IKKMYAQ HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4821006852914359&output=html&h=90&slotname=7854405427&adk=4056614258&adf=1706824535&pi=t.ma~as.7854405427&w=1200&abgtt=9&fwrn=4&fwrnh=100&lmt=1736870130&rafmt=2&format=1200x90&url=https%3A%2F%2Fnuance-pdf-professional2.software.informer.com%2F7.2%2F&fwr=0&fwrattr=true&rpe=1&resp_fmts=2&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736979634915&bpp=4&bdt=1617&idt=1532&shv=r20250113&mjsv=m202501090101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&correlator=4566372036047&frm=20&pv=2&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=311&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533202%2C31089683%2C95344791%2C95350245%2C95340252%2C95340254&oid=2&pvsid=3788874330487745&tmod=2006592406&uas=0&nvt=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=o%7C%7Coe%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=1582Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CFlzftTSIZ7fqNvicjuwP6qqliQyW75bOfLntip-hE-iin8aRDhABIOPuhSVgyZbLi8Sk_A-gAZPCv5A-yAECqAMByAPJBKoEjQJP0CL5SLOELaIQSqv0YIbDE8pOSbgr22jlHHBjjvufLioiWQD0qy5QZ63BY74A0vox_NruVSkZofwTOaw4ZX4--HDB5YWFIJft_oiYIPFrFuRGbt_LpG9JRyvxC5uwc2yi2Uyz3KdpR1li7oUfANKZ_S77aEEq26oHgYDYQzaz2ZTJP64pzZOxSktqkFuOahg1x3py7XiJm_yNyrAkQDR_ddhv30tgcROq6HoPe_QtpIdqxYlDxhWX7sDCyRWuNpMsGj4_OQ1X9ByemvAeYXnC17BOnu4_ao4Yu6J4z3M_UgR9Cx34rXaJtRmjRKbRKBDtLBH6isuKog6ayRvEJZo1YXmItnJIWEB1POvJR8AE9IPAwv8EiAWpyvnHUJIFBAgEGAGSBQQIBRgEoAYCgAeT-o_wGKgH1ckbqAfZtrECqAemvhuoB47OG6gHk9gbqAfw4BuoB-6WsQKoB_6esQKoB6--sQKoB_fCsQLYBwHyBwQQz9dm0ggmCIBhEAEYHzICigI6C4BAgMCAgICgqIACSL39wTpYjv-xsuH4igOaCUpodHRwczovL3BjYXBwc3RvcmUuY29tLz9hcD1hZHdwJmFzPWdfZF9hbGxfbmV3X3VzX2NhX2F1X2diX2luJmdhZF9zb3VyY2U9NYAKAcgLAdoMEQoLEJC4hu_4vLX3zQESAgED2BMN0BUBmBYBgBcBshceChoIABIUcHViLTQ4MjEwMDY4NTI5MTQzNTkYABgBuhcCOAGyGAkSArBTGAIiAQDQGAHoGAE&sigh=IhB1dc_aNk8&uach_m=%5BUACH%5D&ase=2&cid=CAQSTgCa7L7dHFLM9IPFcD6ghiOIXDaBWC3kpV_PFb9R9pCIrNFE7BSHF3RZLGlcutaAcbdRcj-GmWm9tJZKlN96y-eWrNTvXXeYwXuCpX3sSxgB&vis=1&ebtr=1&nis=6 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: trigger, event-sourceReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4821006852914359&output=html&h=90&slotname=4034399826&adk=3689936537&adf=2221415025&pi=t.ma~as.4034399826&w=847&abgtt=9&fwrn=4&fwrnh=100&lmt=1736870130&rafmt=2&format=847x90&url=https%3A%2F%2Fnuance-pdf-professional2.software.informer.com%2F7.2%2F&fwr=0&fwrattr=true&rpe=1&resp_fmts=2&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736979634920&bpp=1&bdt=1621&idt=1620&shv=r20250113&mjsv=m202501090101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=1200x90%2C336x280&correlator=4566372036047&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=15&ady=860&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533202%2C31089683%2C95344791%2C95350245%2C95340252%2C95340254&oid=2&pvsid=3788874330487745&tmod=2006592406&uas=0&nvt=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=o%7C%7CeE%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=1625Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=Cdz3WtTSIZ6qiNLaTjuwP-pCXuQK9qs_Ndemi3NbEEsCNtwEQASAAYMmWy4vEpPwPggEXY2EtcHViLTQ4MjEwMDY4NTI5MTQzNTnIAQmoAwHIAwKqBIICT9Cmv1-2FEzbw3G2tBIb1haRxDRSLz7yOGGQqurLUK5Np7iNGFjAafY9HpC_nPbw3M7sTsD6v3dvLEFcHabJAb-buCaAMTRI4sunpsadyoaGR6fbysEVdjp7jeFr4gJpxdXuV35NN6NhJ67MEb7qs9dPLNjiiILm0M97azcJR5ooAuQEZrU62Tag7v5OrPIQI7foZsuoKigmXsT1AVD4Gfr9u-OtT-yKfjMps-zpcMLnS1F7UWICa_rzqnICn9zRcNUe9S5dC9O8PT8ibVCcU1mUVl1VBC1VHgUhQl7T_cEJaUKBjLnwMeA3OKC41A45IsL2EbR2qiohd5sFWv8sReb_gAaarO2X-f_z_OUBoAYhqAemvhuoB5bYG6gHqpuxAqgH_56xAqgH35-xAqgHrb6xAtgHANIIJAiAYRABMgKKAjoLgECAwICAgKCogAJIvf3BOliOqq-y4fiKA4AKAfoLAggBgAwB0BUBgBcBshccChgSFHB1Yi00ODIxMDA2ODUyOTE0MzU5GAAYDA&sigh=lSXLiM_1JWU&uach_m=%5BUACH%5D&cid=CAQSTwCa7L7dauW-cuQWFi659Ps5JSAeXiroZyXANVgbnX4d8B4rLsxr6OWlefLHzaaO0oxkwYBW3LA5y6QsF-eog1jrg8xThFmwIVNMUpPZxvcYAQ HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4821006852914359&output=html&h=280&slotname=9917528229&adk=658919145&adf=3882744954&pi=t.ma~as.9917528229&w=336&abgtt=9&fwrn=4&fwrnh=100&lmt=1736870130&rafmt=3&format=336x280&url=https%3A%2F%2Fnuance-pdf-professional2.software.informer.com%2F7.2%2F&fwr=0&fwrattr=true&rpe=1&resp_fmts=1&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736979634919&bpp=1&bdt=1620&idt=1594&shv=r20250113&mjsv=m202501090101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=1200x90&correlator=4566372036047&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=15&ady=550&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533202%2C31089683%2C95344791%2C95350245%2C95340252%2C95340254&oid=2&pvsid=3788874330487745&tmod=2006592406&uas=0&nvt=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=o%7C%7CoeE%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&fsb=1&dtd=1600Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /ng-assets/creative/assets/polyfills-a3f452c3.js HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://googleads.g.doubleclick.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtimp?a=imp&cr=ext_download_prot_smrtsp&d=nuance-pdf-professional2.software.informer.com&gid=&im=Nb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkPejZgAKFm3ZlUxHBNGiYcbgU5DmL2JgBOnA6uq5HqYXDGOAkkcHp77mTvilkZ5d9Q2rpDl_8WOAn-k2Y5V9CBXA9Hn2pQTPVn67DMY2sybqayiZvf5flizO3fgV6Cw9N2-R52IBOSmAosKxVeFWSaITqzx-S70fbalfXf6j_MGyOC9eAxeZ7JGLaNEYTuDszAbHweW2Joh-qvwh3aS1didawvBHLOP-V2AJ9n6wIzxxqj8vOzYkgNldKNUmJt1QcCV7gcheIGQeY618UdBWcgJbQ4H-Y9TkqHO2sUSV-RHzJCsRWDjhnFAPFm7pN506i_DH--SzmnConwZt5nHCFtvPxN2SulUo9&p=Z4g0tQAM55kHg4k6AAGLsDXa4KrzOKSPp000GA&sid=f28d8534-d38e-11ef-93a7-aab196f2f20d HTTP/1.1Host: g.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtimp?a=imp&cr=ext_download_prot_smrtsp&d=nuance-pdf-professional2.software.informer.com&gid=&im=FD4w747ub408eaM-61M3wJ3qfK7ErWHy518FlRGHao3f2PgYtkrU2HX0FFqbUAk8GJ00NxtW6WbXQuI8X1R_UXehWD3jEYZp8ei2zrBAxLF_eC2lrTItLT6yz_yg3qTdqPt-cj1efdGND7MZs7ZsJRipunhgT1FJD1LmFwmpi2OQr3jTzQR9zLhN6QczGb3mADM0t22ZeO2Xg8vOdZ1mlHLLgV4JF8Ewi3eE2AqQEV5caCIffDgbT78Fp5xkdUBCPKbARqx_8dnDHiOjCvOSb8zgsh2ZWSOtPn8Jt3midXYsYSKsXfbpaFDmrS7in6m-SbDqI-7b6lnILvGIshUNqXmndP6THKiDOHkNtxfBm68RZWVMHDodxBN1AQoMoSIGhvlBVALm3I3Zh-sHGXHJLE1ypsFqtnfq3svddbFFasOB2kyZpEryAs4P90VcBWSq&p=Z4g0tQANESoHg4m2ACXIeoWRGUCrQlQ9M1dJjA&sid=f2906c3b-d38e-11ef-93a7-aab196f2f20d HTTP/1.1Host: g.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sig.js?rpclid=f28d8534-d38e-11ef-93a7-aab196f2f20d&params=Nb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkPejZgAKFm3ZlUxHBNGiYcbgU5DmL2JgBOnA6uq5HqYXDGOAkkcHp77mTvilkZ5d9Q2rpDl_8WOAn-k2Y5V9CBXA9Hn2pQTPVn67DMY2sybqayiZvf5flizO3fgV6Cw9N2-R52IBOSmAosKxVeFWSaITqzx-S70fbalfXf6j_MGyOC9eAxeZ7JGLaNEYTuDszAbHweW2Joh-qvwh3aS1didawvBHLOP-V2AJ9n6wIzxxqj8vOzYkgNldKNUmJt1QcCV7gcheIGQeY618UdBWcgJbQ4H-Y9TkqHO2sUSV-RHzJCsRWDjhnFAPFm7pN506i_DH--SzmnConwZt5nHCFtvPxN2SulUo9 HTTP/1.1Host: serve.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ng-assets/creative/assets/index-127e2d55.css HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ng-assets/creative/assets/index-5333d910.js HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://googleads.g.doubleclick.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sig.js?rpclid=f2906c3b-d38e-11ef-93a7-aab196f2f20d&params=FD4w747ub408eaM-61M3wJ3qfK7ErWHy518FlRGHao3f2PgYtkrU2HX0FFqbUAk8GJ00NxtW6WbXQuI8X1R_UXehWD3jEYZp8ei2zrBAxLF_eC2lrTItLT6yz_yg3qTdqPt-cj1efdGND7MZs7ZsJRipunhgT1FJD1LmFwmpi2OQr3jTzQR9zLhN6QczGb3mADM0t22ZeO2Xg8vOdZ1mlHLLgV4JF8Ewi3eE2AqQEV5caCIffDgbT78Fp5xkdUBCPKbARqx_8dnDHiOjCvOSb8zgsh2ZWSOtPn8Jt3midXYsYSKsXfbpaFDmrS7in6m-SbDqI-7b6lnILvGIshUNqXmndP6THKiDOHkNtxfBm68RZWVMHDodxBN1AQoMoSIGhvlBVALm3I3Zh-sHGXHJLE1ypsFqtnfq3svddbFFasOB2kyZpEryAs4P90VcBWSq HTTP/1.1Host: serve.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/drt/ui HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=CcowAtTSIZ5nPM7qSjuwPsJeGsAe9qs_Ndemi3NbEEsCNtwEQASAAYMmWy4vEpPwPggEXY2EtcHViLTQ4MjEwMDY4NTI5MTQzNTnIAQmoAwHIAwKqBIICT9DUYKjKI4pQraEcfrh6m7h9bplWrkbPj_91eeUOpJhdu9KpO0_XYY-cFu19QnZyNheKNP9npaVhnppps6EXhc3BzLo3anLFZHbeg9orLOvmqDeb92XzJ9zmloLoNmP_QdruBQ3lrp4hdP1u3o5ziALuCeqfDUCAk3nMPyRGcGzELC11L3Li97soOg-L0FVd1MKKdwSb3JXcm9Jc4SzAnkh4e7olKZznc1bs88r2I5yWFLGbTgw6FY7xoSlUEd1JBSESOIhUn4RAQ2j7Ze9B0WVkDsyfWXvNgTvg5yey5YKtS_bWmlwrK3xttOT7-OwGuzjn-WXBxYdZQ4iA7PJcsyxzgAaarO2X-f_z_OUBoAYhqAemvhuoB5bYG6gHqpuxAqgH_56xAqgH35-xAqgHrb6xAtgHANIIJAiAYRABMgKKAjoLgECAwICAgKCogAJIvf3BOljj466y4fiKA4AKAfoLAggBgAwB0BUBgBcBshccChgSFHB1Yi00ODIxMDA2ODUyOTE0MzU5GAAYDA&sigh=1sAzvU4xCKM&uach_m=%5BUACH%5D&cid=CAQSTwCa7L7dQq7Ua8LJPgiEu7R4dxu7VSCDaaBZxHkFM4asi_fnDbC-VtJCptQoPfsZc_9JBcL2RZCBBo0g6gLsCb51Y4n2HKxUL6PsZw0IKKMYAQ HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUlPbqVqjUCM5MRgGSpz8z-07qXlfZwNkJwQUlbQxq3vbOeObDwuexVBZjgodxY
Source: global traffic	HTTP traffic detected: GET /pagead/adview?ai=Cdz3WtTSIZ6qiNLaTjuwP-pCXuQK9qs_Ndemi3NbEEsCNtwEQASAAYMmWy4vEpPwPggEXY2EtcHViLTQ4MjEwMDY4NTI5MTQzNTnIAQmoAwHIAwKqBIICT9Cmv1-2FEzbw3G2tBIb1haRxDRSLz7yOGGQqurLUK5Np7iNGFjAafY9HpC_nPbw3M7sTsD6v3dvLEFcHabJAb-buCaAMTRI4sunpsadyoaGR6fbysEVdjp7jeFr4gJpxdXuV35NN6NhJ67MEb7qs9dPLNjiiILm0M97azcJR5ooAuQEZrU62Tag7v5OrPIQI7foZsuoKigmXsT1AVD4Gfr9u-OtT-yKfjMps-zpcMLnS1F7UWICa_rzqnICn9zRcNUe9S5dC9O8PT8ibVCcU1mUVl1VBC1VHgUhQl7T_cEJaUKBjLnwMeA3OKC41A45IsL2EbR2qiohd5sFWv8sReb_gAaarO2X-f_z_OUBoAYhqAemvhuoB5bYG6gHqpuxAqgH_56xAqgH35-xAqgHrb6xAtgHANIIJAiAYRABMgKKAjoLgECAwICAgKCogAJIvf3BOliOqq-y4fiKA4AKAfoLAggBgAwB0BUBgBcBshccChgSFHB1Yi00ODIxMDA2ODUyOTE0MzU5GAAYDA&sigh=lSXLiM_1JWU&uach_m=%5BUACH%5D&cid=CAQSTwCa7L7dauW-cuQWFi659Ps5JSAeXiroZyXANVgbnX4d8B4rLsxr6OWlefLHzaaO0oxkwYBW3LA5y6QsF-eog1jrg8xThFmwIVNMUpPZxvcYAQ HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnp6e8q3Hn02qx9nr5ulHgfqaOhOFhnsIORFFJRHSgAHbZOc4nFtnhzzAgnkCg
Source: global traffic	HTTP traffic detected: GET /pagead/drt/si?st=NO_DATA HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnp6e8q3Hn02qx9nr5ulHgfqaOhOFhnsIORFFJRHSgAHbZOc4nFtnhzzAgnkCg
Source: global traffic	HTTP traffic detected: GET /btr/view?ai=CFlzftTSIZ7fqNvicjuwP6qqliQyW75bOfLntip-hE-iin8aRDhABIOPuhSVgyZbLi8Sk_A-gAZPCv5A-yAECqAMByAPJBKoEjQJP0CL5SLOELaIQSqv0YIbDE8pOSbgr22jlHHBjjvufLioiWQD0qy5QZ63BY74A0vox_NruVSkZofwTOaw4ZX4--HDB5YWFIJft_oiYIPFrFuRGbt_LpG9JRyvxC5uwc2yi2Uyz3KdpR1li7oUfANKZ_S77aEEq26oHgYDYQzaz2ZTJP64pzZOxSktqkFuOahg1x3py7XiJm_yNyrAkQDR_ddhv30tgcROq6HoPe_QtpIdqxYlDxhWX7sDCyRWuNpMsGj4_OQ1X9ByemvAeYXnC17BOnu4_ao4Yu6J4z3M_UgR9Cx34rXaJtRmjRKbRKBDtLBH6isuKog6ayRvEJZo1YXmItnJIWEB1POvJR8AE9IPAwv8EiAWpyvnHUJIFBAgEGAGSBQQIBRgEoAYCgAeT-o_wGKgH1ckbqAfZtrECqAemvhuoB47OG6gHk9gbqAfw4BuoB-6WsQKoB_6esQKoB6--sQKoB_fCsQLYBwHyBwQQz9dm0ggmCIBhEAEYHzICigI6C4BAgMCAgICgqIACSL39wTpYjv-xsuH4igOaCUpodHRwczovL3BjYXBwc3RvcmUuY29tLz9hcD1hZHdwJmFzPWdfZF9hbGxfbmV3X3VzX2NhX2F1X2diX2luJmdhZF9zb3VyY2U9NYAKAcgLAdoMEQoLEJC4hu_4vLX3zQESAgED2BMN0BUBmBYBgBcBshceChoIABIUcHViLTQ4MjEwMDY4NTI5MTQzNTkYABgBuhcCOAGyGAkSArBTGAIiAQDQGAHoGAE&sigh=IhB1dc_aNk8&uach_m=%5BUACH%5D&ase=2&cid=CAQSTgCa7L7dHFLM9IPFcD6ghiOIXDaBWC3kpV_PFb9R9pCIrNFE7BSHF3RZLGlcutaAcbdRcj-GmWm9tJZKlN96y-eWrNTvXXeYwXuCpX3sSxgB&vis=1&ibtr=1&nis=6 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAttribution-Reporting-Eligible: event-source;navigation-source, triggerReferer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4821006852914359&output=html&h=90&slotname=4034399826&adk=3689936537&adf=2221415025&pi=t.ma~as.4034399826&w=847&abgtt=9&fwrn=4&fwrnh=100&lmt=1736870130&rafmt=2&format=847x90&url=https%3A%2F%2Fnuance-pdf-professional2.software.informer.com%2F7.2%2F&fwr=0&fwrattr=true&rpe=1&resp_fmts=2&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736979634920&bpp=1&bdt=1621&idt=1620&shv=r20250113&mjsv=m202501090101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=1200x90%2C336x280&correlator=4566372036047&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=15&ady=860&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533202%2C31089683%2C95344791%2C95350245%2C95340252%2C95340254&oid=2&pvsid=3788874330487745&tmod=2006592406&uas=0&nvt=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=o%7C%7CeE%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=1625Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnp6e8q3Hn02qx9nr5ulHgfqaOhOFhnsIORFFJRHSgAHbZOc4n
Source: global traffic	HTTP traffic detected: GET /ext/download-icon_1697445891.svg+xml HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce
Source: global traffic	HTTP traffic detected: GET /ext/Footer-Logo_1720602781.svg+xml HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce
Source: global traffic	HTTP traffic detected: GET /compressedFonts/RobotoRegular.woff2 HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://googleads.g.doubleclick.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /compressedFonts/RobotoBold.woff2 HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://googleads.g.doubleclick.netsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /click_1734018555_64x64.png HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce
Source: global traffic	HTTP traffic detected: GET /download_l_1734165033_64x64.png HTTP/1.1Host: cdn.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce
Source: global traffic	HTTP traffic detected: GET /i/ca-pub-4821006852914359?href=https%3A%2F%2Fnuance-pdf-professional2.software.informer.com%2F7.2&ers=2 HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ng-assets/creative/assets/polyfills-a3f452c3.js HTTP/1.1Host: cdn.bidbrain.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce
Source: global traffic	HTTP traffic detected: GET /ng-assets/creative/assets/index-5333d910.js HTTP/1.1Host: cdn.bidbrain.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce
Source: global traffic	HTTP traffic detected: GET /sig.js?rpclid=f28d8534-d38e-11ef-93a7-aab196f2f20d&params=Nb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkPejZgAKFm3ZlUxHBNGiYcbgU5DmL2JgBOnA6uq5HqYXDGOAkkcHp77mTvilkZ5d9Q2rpDl_8WOAn-k2Y5V9CBXA9Hn2pQTPVn67DMY2sybqayiZvf5flizO3fgV6Cw9N2-R52IBOSmAosKxVeFWSaITqzx-S70fbalfXf6j_MGyOC9eAxeZ7JGLaNEYTuDszAbHweW2Joh-qvwh3aS1didawvBHLOP-V2AJ9n6wIzxxqj8vOzYkgNldKNUmJt1QcCV7gcheIGQeY618UdBWcgJbQ4H-Y9TkqHO2sUSV-RHzJCsRWDjhnFAPFm7pN506i_DH--SzmnConwZt5nHCFtvPxN2SulUo9 HTTP/1.1Host: serve.bidbrain.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce
Source: global traffic	HTTP traffic detected: GET /sig.js?rpclid=f2906c3b-d38e-11ef-93a7-aab196f2f20d&params=FD4w747ub408eaM-61M3wJ3qfK7ErWHy518FlRGHao3f2PgYtkrU2HX0FFqbUAk8GJ00NxtW6WbXQuI8X1R_UXehWD3jEYZp8ei2zrBAxLF_eC2lrTItLT6yz_yg3qTdqPt-cj1efdGND7MZs7ZsJRipunhgT1FJD1LmFwmpi2OQr3jTzQR9zLhN6QczGb3mADM0t22ZeO2Xg8vOdZ1mlHLLgV4JF8Ewi3eE2AqQEV5caCIffDgbT78Fp5xkdUBCPKbARqx_8dnDHiOjCvOSb8zgsh2ZWSOtPn8Jt3midXYsYSKsXfbpaFDmrS7in6m-SbDqI-7b6lnILvGIshUNqXmndP6THKiDOHkNtxfBm68RZWVMHDodxBN1AQoMoSIGhvlBVALm3I3Zh-sHGXHJLE1ypsFqtnfq3svddbFFasOB2kyZpEryAs4P90VcBWSq HTTP/1.1Host: serve.bidbrain.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxVkpyu97IQUbHGCdzKUl7_eFeBwzzdrGLuvBYBvuDrMTj9uwC5VJyh_iBwuw_xJup-pg77HXsGPc4OiUPmYHGZqanKuWcKbHs8e1kkw2VvKXjqUksHi-XY6BgDkB8_uMQbl4Ol4cg==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzM2OTc5NjM5LDk2ODAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzddXSwiaHR0cHM6Ly9udWFuY2UtcGRmLXByb2Zlc3Npb25hbDIuc29mdHdhcmUuaW5mb3JtZXIuY29tLzcuMi8iLG51bGwsW1s4LCJCSHQwUkNmMExPbyJdLFs5LCJlbi1VUyJdLFsyMywiMTczNjk3OTYzNyJdLFsxOSwiMiJdLFsxNywiWzBdIl1dXQ HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /btr/view?ai=CFlzftTSIZ7fqNvicjuwP6qqliQyW75bOfLntip-hE-iin8aRDhABIOPuhSVgyZbLi8Sk_A-gAZPCv5A-yAECqAMByAPJBKoEjQJP0CL5SLOELaIQSqv0YIbDE8pOSbgr22jlHHBjjvufLioiWQD0qy5QZ63BY74A0vox_NruVSkZofwTOaw4ZX4--HDB5YWFIJft_oiYIPFrFuRGbt_LpG9JRyvxC5uwc2yi2Uyz3KdpR1li7oUfANKZ_S77aEEq26oHgYDYQzaz2ZTJP64pzZOxSktqkFuOahg1x3py7XiJm_yNyrAkQDR_ddhv30tgcROq6HoPe_QtpIdqxYlDxhWX7sDCyRWuNpMsGj4_OQ1X9ByemvAeYXnC17BOnu4_ao4Yu6J4z3M_UgR9Cx34rXaJtRmjRKbRKBDtLBH6isuKog6ayRvEJZo1YXmItnJIWEB1POvJR8AE9IPAwv8EiAWpyvnHUJIFBAgEGAGSBQQIBRgEoAYCgAeT-o_wGKgH1ckbqAfZtrECqAemvhuoB47OG6gHk9gbqAfw4BuoB-6WsQKoB_6esQKoB6--sQKoB_fCsQLYBwHyBwQQz9dm0ggmCIBhEAEYHzICigI6C4BAgMCAgICgqIACSL39wTpYjv-xsuH4igOaCUpodHRwczovL3BjYXBwc3RvcmUuY29tLz9hcD1hZHdwJmFzPWdfZF9hbGxfbmV3X3VzX2NhX2F1X2diX2luJmdhZF9zb3VyY2U9NYAKAcgLAdoMEQoLEJC4hu_4vLX3zQESAgED2BMN0BUBmBYBgBcBshceChoIABIUcHViLTQ4MjEwMDY4NTI5MTQzNTkYABgBuhcCOAGyGAkSArBTGAIiAQDQGAHoGAE&sigh=IhB1dc_aNk8&uach_m=%5BUACH%5D&ase=2&cid=CAQSTgCa7L7dHFLM9IPFcD6ghiOIXDaBWC3kpV_PFb9R9pCIrNFE7BSHF3RZLGlcutaAcbdRcj-GmWm9tJZKlN96y-eWrNTvXXeYwXuCpX3sSxgB&vis=1&ibtr=1&nis=6 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnp6e8q3Hn02qx9nr5ulHgfqaOhOFhnsIORFFJRHSgAHbZOc4nFtnhzzAgnkCg; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /rtimp?sid=f28d8534-d38e-11ef-93a7-aab196f2f20d&d=nuance-pdf-professional2.software.informer.com&cr=ext_download_prot_smrtsp&gid=&im=Nb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkPejZgAKFm3ZlUxHBNGiYcbgU5DmL2JgBOnA6uq5HqYXDGOAkkcHp77mTvilkZ5d9Q2rpDl_8WOAn-k2Y5V9CBXA9Hn2pQTPVn67DMY2sybqayiZvf5flizO3fgV6Cw9N2-R52IBOSmAosKxVeFWSaITqzx-S70fbalfXf6j_MGyOC9eAxeZ7JGLaNEYTuDszAbHweW2Joh-qvwh3aS1didawvBHLOP-V2AJ9n6wIzxxqj8vOzYkgNldKNUmJt1QcCV7gcheIGQeY618UdBWcgJbQ4H-Y9TkqHO2sUSV-RHzJCsRWDjhnFAPFm7pN506i_DH--SzmnConwZt5nHCFtvPxN2SulUo9&p=Z4g0tQAM55kHg4k6AAGLsDXa4KrzOKSPp000GA&r=1930373240&a=ipv4&ow=1280&oh=984&iw=1200&ih=90&tzof=300&tz=America%2FNew_York&pxr=1&cts=1736979641.481&cto=1665&edx=10&furl=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-4821006852914359%26output%3Dhtml%26h%3D90%26slotname%3D7854405427%26adk%3D4056614258%26adf%3D1706824535%26pi%3Dt.ma~as.7854405427%26w%3D1200%26abgtt%3D9%26fwrn%3D4%26fwrnh%3D100%26lmt%3D1736870130%26rafmt%3D2%26format%3D1200x90%26url%3Dhttps%253A%252F%252Fnuance-pdf-professional2.software.informer.com%252F7.2%252F%26fwr%3D0%26fwrattr%3Dtrue%26rpe%3D1%26resp_fmts%3D2%26wgl%3D1%26uach%3DWyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.%26dt%3D1736979634915%26bpp%3D4%26bdt%3D1617%26idt%3D1532%26shv%3Dr20250113%26mjsv%3Dm202501090101%26ptt%3D9%26saldr%3Daa%26abxe%3D1%26cookie_enabled%3D1%26eoidce%3D1%26correlator%3D4566372036047%26frm%3D20%26pv%3D2%26u_tz%3D-300%26u_his%3D1%26u_h%3D1024%26u_w%3D1280%26u_ah%3D984%26u_aw%3D1280%26u_cd%3D24%26u_sd%3D1%26dmc%3D8%26adx%3D32%26ady%3D311%26biw%3D1263%26bih%3D907%26scr_x%3D0%26scr_y%3D0%26eid%3D42533202%252C31089683%252C95344791%252C95350245%252C95340252%252C95340254%26oid%3D2%26pvsid%3D3788874330487745%26tmod%3D2006592406%26uas%3D0%26nvt%3D1%26fc%3D896%26brdim%3D0%252C0%252C0%252C0%252C1280%252C0%252C1280%252C984%252C1280%252C907%26vis%3D1%26rsz%3Do%257C%257Coe%257C%26abl%3DCS%26pfx%3D0%26fu%3D128%26bc%3D31%26bz%3D1%26td%3D1%26tdf%3D0%26psd%3DW251bGwsbnVsbCxudWxsLDNd%26nt%3D1%26ifi%3D1%26uci%3Da!1%26fsb%3D1%26dtd%3D1582&ctp=creative&cnm=ext_download_prot_smrtsp HTTP/1.1Host: g4.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie
Source: global traffic	HTTP traffic detected: GET /rtimp?sid=f2906c3b-d38e-11ef-93a7-aab196f2f20d&d=nuance-pdf-professional2.software.informer.com&cr=ext_download_prot_smrtsp&gid=&im=FD4w747ub408eaM-61M3wJ3qfK7ErWHy518FlRGHao3f2PgYtkrU2HX0FFqbUAk8GJ00NxtW6WbXQuI8X1R_UXehWD3jEYZp8ei2zrBAxLF_eC2lrTItLT6yz_yg3qTdqPt-cj1efdGND7MZs7ZsJRipunhgT1FJD1LmFwmpi2OQr3jTzQR9zLhN6QczGb3mADM0t22ZeO2Xg8vOdZ1mlHLLgV4JF8Ewi3eE2AqQEV5caCIffDgbT78Fp5xkdUBCPKbARqx_8dnDHiOjCvOSb8zgsh2ZWSOtPn8Jt3midXYsYSKsXfbpaFDmrS7in6m-SbDqI-7b6lnILvGIshUNqXmndP6THKiDOHkNtxfBm68RZWVMHDodxBN1AQoMoSIGhvlBVALm3I3Zh-sHGXHJLE1ypsFqtnfq3svddbFFasOB2kyZpEryAs4P90VcBWSq&p=Z4g0tQANESoHg4m2ACXIeoWRGUCrQlQ9M1dJjA&r=1395646145&a=ipv4&ow=1280&oh=984&iw=336&ih=280&tzof=300&tz=America%2FNew_York&pxr=1&cts=1736979641.533&cto=1698&edx=10&furl=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-4821006852914359%26output%3Dhtml%26h%3D280%26slotname%3D9917528229%26adk%3D658919145%26adf%3D3882744954%26pi%3Dt.ma~as.9917528229%26w%3D336%26abgtt%3D9%26fwrn%3D4%26fwrnh%3D100%26lmt%3D1736870130%26rafmt%3D3%26format%3D336x280%26url%3Dhttps%253A%252F%252Fnuance-pdf-professional2.software.informer.com%252F7.2%252F%26fwr%3D0%26fwrattr%3Dtrue%26rpe%3D1%26resp_fmts%3D1%26wgl%3D1%26uach%3DWyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.%26dt%3D1736979634919%26bpp%3D1%26bdt%3D1620%26idt%3D1594%26shv%3Dr20250113%26mjsv%3Dm202501090101%26ptt%3D9%26saldr%3Daa%26abxe%3D1%26cookie_enabled%3D1%26eoidce%3D1%26prev_fmts%3D1200x90%26correlator%3D4566372036047%26frm%3D20%26pv%3D1%26u_tz%3D-300%26u_his%3D1%26u_h%3D1024%26u_w%3D1280%26u_ah%3D984%26u_aw%3D1280%26u_cd%3D24%26u_sd%3D1%26dmc%3D8%26adx%3D15%26ady%3D550%26biw%3D1263%26bih%3D907%26scr_x%3D0%26scr_y%3D0%26eid%3D42533202%252C31089683%252C95344791%252C95350245%252C95340252%252C95340254%26oid%3D2%26pvsid%3D3788874330487745%26tmod%3D2006592406%26uas%3D0%26nvt%3D1%26fc%3D896%26brdim%3D0%252C0%252C0%252C0%252C1280%252C0%252C1280%252C984%252C1280%252C907%26vis%3D1%26rsz%3Do%257C%257CoeE%257C%26abl%3DCS%26pfx%3D0%26fu%3D128%26bc%3D31%26bz%3D1%26td%3D1%26tdf%3D0%26psd%3DW251bGwsbnVsbCxudWxsLDNd%26nt%3D1%26ifi%3D2%26uci%3Da!2%26fsb%3D1%26dtd%3D1600&ctp=creative&cnm=ext_download_prot_smrtsp HTTP/1.1Host: g4.bidbrain.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language:
Source: global traffic	HTTP traffic detected: GET /ext/download-icon_1697445891.svg+xml HTTP/1.1Host: cdn.bidbrain.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce; sid_cross=f2906c3b-d38e-11ef-93a7-aab196f2f20d
Source: global traffic	HTTP traffic detected: GET /ext/Footer-Logo_1720602781.svg+xml HTTP/1.1Host: cdn.bidbrain.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce; sid_cross=f2906c3b-d38e-11ef-93a7-aab196f2f20d
Source: global traffic	HTTP traffic detected: GET /click_1734018555_64x64.png HTTP/1.1Host: cdn.bidbrain.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce; sid_cross=f2906c3b-d38e-11ef-93a7-aab196f2f20d
Source: global traffic	HTTP traffic detected: GET /download_l_1734165033_64x64.png HTTP/1.1Host: cdn.bidbrain.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce; sid_cross=f2906c3b-d38e-11ef-93a7-aab196f2f20d
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: software.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635; __gads=ID=5c69e94fc791666f:T=1736979637:RT=1736979637:S=ALNI_MZ91N_Bhxth3E9d4L0p2k_EFPCBew; __gpi=UID=00000fbf26fe8626:T=1736979637:RT=1736979637:S=ALNI_MaVs1UyIzr7FOvcBakfRn50LMdu2Q; __eoi=ID=04f90f572a58aaff:T=1736979637:RT=1736979637:S=AA-AfjahxK2Y084g0TaOOC-JkUpD
Source: global traffic	HTTP traffic detected: GET /images/spacer.gif HTTP/1.1Host: img.informer.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635; __gads=ID=5c69e94fc791666f:T=1736979637:RT=1736979637:S=ALNI_MZ91N_Bhxth3E9d4L0p2k_EFPCBew; __gpi=UID=00000fbf26fe8626:T=1736979637:RT=1736979637:S=ALNI_MaVs1UyIzr7FOvcBakfRn50LMdu2Q; __eoi=ID=04f90f572a58aaff:T=1736979637:RT=1736979637:S=AA-AfjahxK2Y084g0TaOOC-JkUpD
Source: global traffic	HTTP traffic detected: GET /getconfig/sodar?sv=200&tid=gda&tv=r20250113&st=env HTTP/1.1Host: ep1.adtrafficquality.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://nuance-pdf-professional2.software.informer.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxXd9Foo-Ehq0xgBlp-pejyP-Ol0ad23R_mcLF3Y9JbnGV6KrkTQez0VKEKlJJNzfX7YJXfMevUhSDXv4Lf_WRHLx0WuGH6Af5GoBw_TFsXy6R8uQmBEBn-BtdI6MsKAR_fcvkEPrw==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzM2OTc5NjQxLDgwMDAwMDAwXSxudWxsLG51bGwsbnVsbCxbbnVsbCxbNyw5XSxudWxsLDIsbnVsbCwiZW4iXSwiaHR0cHM6Ly9udWFuY2UtcGRmLXByb2Zlc3Npb25hbDIuc29mdHdhcmUuaW5mb3JtZXIuY29tLzcuMi8iLG51bGwsW1s4LCJCSHQwUkNmMExPbyJdLFs5LCJlbi1VUyJdLFsyMywiMTczNjk3OTYzNyJdLFsxOSwiMiJdLFsxNywiWzBdIl1dXQ HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: software.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635; __gads=ID=5c69e94fc791666f:T=1736979637:RT=1736979637:S=ALNI_MZ91N_Bhxth3E9d4L0p2k_EFPCBew; __gpi=UID=00000fbf26fe8626:T=1736979637:RT=1736979637:S=ALNI_MaVs1UyIzr7FOvcBakfRn50LMdu2Q; __eoi=ID=04f90f572a58aaff:T=1736979637:RT=1736979637:S=AA-AfjahxK2Y084g0TaOOC-JkUpD
Source: global traffic	HTTP traffic detected: GET /images/spacer.gif HTTP/1.1Host: img.informer.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635; __gads=ID=5c69e94fc791666f:T=1736979637:RT=1736979637:S=ALNI_MZ91N_Bhxth3E9d4L0p2k_EFPCBew; __gpi=UID=00000fbf26fe8626:T=1736979637:RT=1736979637:S=ALNI_MaVs1UyIzr7FOvcBakfRn50LMdu2Q; __eoi=ID=04f90f572a58aaff:T=1736979637:RT=1736979637:S=AA-AfjahxK2Y084g0TaOOC-JkUpD
Source: global traffic	HTTP traffic detected: GET /sodar/sodar2.js HTTP/1.1Host: ep2.adtrafficquality.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getconfig/sodar?sv=200&tid=gda&tv=r20250113&st=env HTTP/1.1Host: ep1.adtrafficquality.googleConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxVXYCSCPy5B1JgAKQtMnN0P2vaiBVd2lKtPbNdS0mJZ169N_8_kHQeYInRDippu2LA40Av4IPEiztZtmSeWGs2pPc-bPcpJmOq_rJPXo-BBKqAScHkzEK7X2rkh8EAznuL94ZCAn_1hRIGfXO9TUAfWVVWyCoMLxAQ3Fd9dmq6qVhuml9aNDFxPJHvY/_.com/adlib_/noodleAdFramed._centre_ad./VASTAdPlugin._468x60. HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sodar/sodar2/232/runner.html HTTP/1.1Host: ep2.adtrafficquality.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f/AGSKWxUFa7gOa_QQmkFb3ywy-2AQ5ufRFIdrnC3uKi2p1cVvgQgaDS4R-iN9IEYr8CSFSaIAg68rnnhFbnNfPEcVqrjQD6-VJ009pGvDDmvYIhHKo86COyXrpqX0PJM1aY83CwKOWrnUgw==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzM2OTc5NjQzLDcxNzAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsOSw2XSxudWxsLDIsbnVsbCwiZW4iLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCwxXSwiaHR0cHM6Ly9udWFuY2UtcGRmLXByb2Zlc3Npb25hbDIuc29mdHdhcmUuaW5mb3JtZXIuY29tLzcuMi8iLG51bGwsW1s4LCJCSHQwUkNmMExPbyJdLFs5LCJlbi1VUyJdLFsyMywiMTczNjk3OTYzNyJdLFsxOSwiMiJdLFsxNywiWzBdIl1dXQ HTTP/1.1Host: fundingchoicesmessages.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/sodar?id=sodar2&v=232&t=2&li=gda_r20250113&jk=3788874330487745&bg=!NTalNnnNAAYsEuUeDBI7ADQBe5WfOIi-8zjsGZFErpG8kHxxskXxqa05Ld5vn961hkZqxPZ3CsYSLLs4tVQBnqsWbOLdAgAAAPFSAAAAAmgBB34ANsqp6OxNDAnbocVlCPgHBV-H_LnmaLM1lbFnaPpFAT2In31Herl84e_ejfLGfrtrS4deR4Rz45kCpbBBZmssnKGWrC6sWDGvsdy67pEsjMgO2f7qw8Y4hhFeExFnJPLlYdamAM5mdS-YvSuKlKVCsADT0LntSg7lRWjhwTu611VY6yhDMtql8dXVyU_8yimnvSBmz3NWOw7gK5WC3TUSQ23Z3xYSUgy0ussESwr4FAC49zlt9bxnKmvWKUDF0eoiEZP3LxTiJUDAumQ6-AMvpFpFtK63N0CeUhMaZyI0lrcP3Yd51odx3ujnEIsMeIz9hzSqSc7VJEG7uf8yVoNgVgyTzvRzIaw3pLWTi6BEBYJ0E7uEdYuJX_pkzo0Ra37B97kGnmX5Bbbp3doQjctSo1dZZ8J_vCfojCfj4XpJs8AqUKFiAIo4g5nPVd9C_gbhhUfY8ufo_BOZvZ94YBToxnA2-qfvJUIiH4te2zLP1QBX4SdJ6QEKgjoYp8oIYmSzp59OWoU2DFf3UGdYrWdDvlIKgWIxVUmegS5M6GQG0vxQvM4HAJ6lEExzDwflbZZz5uq013OIHk14b--M4iQ-30Gat8t-3qe19fNJLXdbId-MsuxUxx33g-9SLNbsoYC3MNLink-iqcrr86SqXkPoCR6i2nkG8w6gFhfcNVlJe4fOvCGfB2hVwg5_6GzR94bZQaPxFLAtR4vWkQYmZEZ51gW-Ymwed0kBz5X0A0ukHPmYVl2GvK3H-lHZC5J3gf-3f9Qk3syouT17NydYvnlXsEE4EpfQb8HshhOI452kIVQ9S5dqK4U4CUVhvXFZrBJfHPyfAc2ei6dRWJj3lOIO1ELnJRzx12CF_aAtIvEie1bB6An0ljlfslBHnQiY3VbxDMDfEPOYHKpQYQJSMgoAAyWSDi-wrc5d813ylZvnm80W4VCjv6SL4eYdKjX9TmWtYBC-kefBcGxYKG_q0ytT HTTP/1.1Host: ep1.adtrafficquality.googleConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nuance-pdf-professional2.software.informer.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /install/?mid=f28d8534-d38e-11ef-93a7-aab196f2f20d&rpclid=f28d8534-d38e-11ef-93a7-aab196f2f20d&utm_source=adx_ext_download_prot_smrtsp___5e460bab&uq=_JDg0vZrlOp4T6_9U0ssm5ItFDhV3TsqhLGO26omVj-2pXmkcPDHdNwDCaqhZpjpKTa7dG0kopMzaVwvRrpzQLXyz5bNrDsHKX4rae-VljJo0XQMs9qPDHH7jO7Lx_9WhNCEj1xuWu-4f2YWpcIqzgA77etzE7oZtFSzHsIewF6zNBxh8d3T9Zk-HKlhZPa0MQd1POmBJVA9GftafTfIXKITadh35clew_PwRPW1jYBE6OV5DcPze2-TuMN32-hA8DrE-3ihdR3djmkB6y-R7g&params=Nb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkPejZgAKFm3ZlUxHBNGiYcbgU5DmL2JgBOnA6uq5HqYXDGOAkkcHp77mTvilkZ5d9Q2rpDl_8WOAn-k2Y5V9CBXA9Hn2pQTPVn67DMY2sybqayiZvf5flizO3fgV6Cw9N2-R52IBOSmAosKxVeFWSaITqzx-S70fbalfXf6j_MGyOC9eAxeZ7JGLaNEYTuDszAbHweW2Joh-qvwh3aS1didawvBHLOP-V2AJ9n6wIzxxqj8vOzYkgNldKNUmJt1QcCV7gcheIGQeY618UdBWcgJbQ4H-Y9TkqHO2sUSV-RHzJCsRWDjhnFAPFm7pN506i_DH--SzmnConwZt5nHCFtvPxN2SulUo9 HTTP/1.1Host: get4.protectonow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /aclk?sa=L&ai=Cg079tTSIZ5nPM7qSjuwPsJeGsAe9qs_Ndemi3NbEEsCNtwEQASAAYMmWy4vEpPwPggEXY2EtcHViLTQ4MjEwMDY4NTI5MTQzNTnIAQmoAwHIAwKqBIUCT9DUYKjKI4pQraEcfrh6m7h9bplWrkbPj_91eeUOpJhdu9KpO0_XYY-cFu19QnZyNheKNP9npaVhnppps6EXhc3BzLo3anLFZHbeg9orLOvmqDeb92XzJ9zmloLoNmP_QdruBQ3lrp4hdP1u3o5ziALuCeqfDUCAk3nMPyRGcGzELC11L3Li97soOg-L0FVd1MKKdwSb3JXcm9Jc4SzAnkh4e7olKZznc1bs88r2I5yWFLGbTgw6FY7xoSlUEd1JBSESOIhUn4RAQ2j7Ze9B0WVkDsyfWXvNgTvg52WwxBA1jx_SabV4xe97aV_23ubQshb_NJtK01romKes9Gi9QiiAfXxigAaarO2X-f_z_OUBoAYhqAemvhuoB5bYG6gHqpuxAqgH_56xAqgH35-xAqgHrb6xAtgHANIIJAiAYRABMgKKAjoLgECAwICAgKCogAJIvf3BOljj466y4fiKA_oLAggBgAwB0BUBgBcBshcCGAw&num=1&sig=AOD64_0RRIR_3oWVmHVGijS2gmW-a71wAg&client=ca-pub-4821006852914359&adurl=https%3A%2F%2Fget4.protectonow.com%2Finstall%2F%3Fmid%3Df28d8534-d38e-11ef-93a7-aab196f2f20d%26rpclid%3Df28d8534-d38e-11ef-93a7-aab196f2f20d%26utm_source%3Dadx_ext_download_prot_smrtsp___5e460bab%26uq%3D_JDg0vZrlOp4T6_9U0ssm5ItFDhV3TsqhLGO26omVj-2pXmkcPDHdNwDCaqhZpjpKTa7dG0kopMzaVwvRrpzQLXyz5bNrDsHKX4rae-VljJo0XQMs9qPDHH7jO7Lx_9WhNCEj1xuWu-4f2YWpcIqzgA77etzE7oZtFSzHsIewF6zNBxh8d3T9Zk-HKlhZPa0MQd1POmBJVA9GftafTfIXKITadh35clew_PwRPW1jYBE6OV5DcPze2-TuMN32-hA8DrE-3ihdR3djmkB6y-R7g%26params%3DNb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkPejZgAKFm3ZlUxHBNGiYcbgU5DmL2JgBOnA6uq5HqYXDGOAkkcHp77mTvilkZ5d9Q2rpDl_8WOAn-k2Y5V9CBXA9Hn2pQTPVn67DMY2sybqayiZvf5flizO3fgV6Cw9N2-R52IBOSmAosKxVeFWSaITqzx-S70fbalfXf6j_MGyOC9eAxeZ7JGLaNEYTuDszAbHweW2Joh-qvwh3aS1didawvBHLOP-V2AJ9n6wIzxxqj8vOzYkgNldKNUmJt1QcCV7gcheIGQeY618UdBWcgJbQ4H-Y9TkqHO2sUSV-RHzJCsRWDjhnFAPFm7pN506i_DH--SzmnConwZt5nHCFtvPxN2SulUo9 HTTP/1.1Host: adclick.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnp6e8q3Hn02qx9nr5ulHgfqaOhOFhnsIORFFJRHSgAHbZOc4nFtnhzzAgnkCg; DSID=NO_DATA
Source: global traffic	HTTP traffic detected: GET /siglp.js?rpclid=f28d8534-d38e-11ef-93a7-aab196f2f20d&params=Nb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkPejZgAKFm3ZlUxHBNGiYcbgU5DmL2JgBOnA6uq5HqYXDGOAkkcHp77mTvilkZ5d9Q2rpDl_8WOAn-k2Y5V9CBXA9Hn2pQTPVn67DMY2sybqayiZvf5flizO3fgV6Cw9N2-R52IBOSmAosKxVeFWSaITqzx-S70fbalfXf6j_MGyOC9eAxeZ7JGLaNEYTuDszAbHweW2Joh-qvwh3aS1didawvBHLOP-V2AJ9n6wIzxxqj8vOzYkgNldKNUmJt1QcCV7gcheIGQeY618UdBWcgJbQ4H-Y9TkqHO2sUSV-RHzJCsRWDjhnFAPFm7pN506i_DH--SzmnConwZt5nHCFtvPxN2SulUo9 HTTP/1.1Host: get4.protectonow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"device-memory: 8rtt: 300sec-ch-ua-mobile: ?0sec-ch-viewport-height: 907User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-viewport-width: 1280sec-ch-ua-platform-version: "10.0.0"downlink: 10sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://get4.protectonow.com/install/?mid=f28d8534-d38e-11ef-93a7-aab196f2f20d&rpclid=f28d8534-d38e-11ef-93a7-aab196f2f20d&utm_source=adx_ext_download_prot_smrtsp___5e460bab&uq=_JDg0vZrlOp4T6_9U0ssm5ItFDhV3TsqhLGO26omVj-2pXmkcPDHdNwDCaqhZpjpKTa7dG0kopMzaVwvRrpzQLXyz5bNrDsHKX4rae-VljJo0XQMs9qPDHH7jO7Lx_9WhNCEj1xuWu-4f2YWpcIqzgA77etzE7oZtFSzHsIewF6zNBxh8d3T9Zk-HKlhZPa0MQd1POmBJVA9GftafTfIXKITadh35clew_PwRPW1jYBE6OV5DcPze2-TuMN32-hA8DrE-3ihdR3djmkB6y-R7g&params=Nb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkPejZgAKFm3ZlUxHBNGiYcbgU5DmL2JgBOnA6uq5HqYXDGOAkkcHp77mTvilkZ5d9Q2rpDl_8WOAn-k2Y5V9CBXA9Hn2pQTPVn67DMY2sybqayiZvf5flizO3fgV6Cw9N2-R52IBOSmAosKxVeFWSaITqzx-S70fbalfXf6j_MGyOC9eAxeZ7JGLaNEYTuDszAbHweW2Joh-qvwh3aS1didawvBHLOP-V2AJ9n6wIzxxqj8vOzYkgNldKNUmJt1QcCV7gcheIGQeY618UdBWcgJbQ4H-Y9TkqHO2sUSV-RHzJCsRWDjhnFAPFm7pN506i_DH--SzmnConwZt5nHCFtvPxN2SulUo9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=fda95280-d38e-11ef-bc27-c22fbff8fb28; uid_cross=fda95280-d38e-11ef-bc27-c22fbff8fb28; mid=f28d8534-d38e-11ef-93a7-aab196f2f20d; utm_source=adx_ext_download_prot_smrtsp___5e460bab; utm_source_cross=adx_ext_download_prot_smrtsp___5e460bab; p2088478120=144748304
Source: global traffic	HTTP traffic detected: GET /install/?mid=f28d8534-d38e-11ef-93a7-aab196f2f20d&rpclid=f28d8534-d38e-11ef-93a7-aab196f2f20d&utm_source=adx_ext_download_prot_smrtsp___5e460bab&uq=_JDg0vZrlOp4T6_9U0ssm5ItFDhV3TsqhLGO26omVj-2pXmkcPDHdNwDCaqhZpjpKTa7dG0kopMzaVwvRrpzQLXyz5bNrDsHKX4rae-VljJo0XQMs9qPDHH7jO7Lx_9WhNCEj1xuWu-4f2YWpcIqzgA77etzE7oZtFSzHsIewF6zNBxh8d3T9Zk-HKlhZPa0MQd1POmBJVA9GftafTfIXKITadh35clew_PwRPW1jYBE6OV5DcPze2-TuMN32-hA8DrE-3ihdR3djmkB6y-R7g&params=Nb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkPejZgAKFm3ZlUxHBNGiYcbgU5DmL2JgBOnA6uq5HqYXDGOAkkcHp77mTvilkZ5d9Q2rpDl_8WOAn-k2Y5V9CBXA9Hn2pQTPVn67DMY2sybqayiZvf5flizO3fgV6Cw9N2-R52IBOSmAosKxVeFWSaITqzx-S70fbalfXf6j_MGyOC9eAxeZ7JGLaNEYTuDszAbHweW2Joh-qvwh3aS1didawvBHLOP-V2AJ9n6wIzxxqj8vOzYkgNldKNUmJt1QcCV7gcheIGQeY618UdBWcgJbQ4H-Y9TkqHO2sUSV-RHzJCsRWDjhnFAPFm7pN506i_DH--SzmnConwZt5nHCFtvPxN2SulUo9 HTTP/1.1Host: get4.protectonow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid_cross=fda95280-d38e-11ef-bc27-c22fbff8fb28; utm_source_cross=adx_ext_download_prot_smrtsp___5e460bab
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise.js?render=6LfkWDYqAAAAAJvAuJELqQLg85Lg8zAp-k7w8siS&badge=inline&onload=onRecaptchaLoaded HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sxp/i/7d278047aab7cca6e1b3bb44e5382d20.js HTTP/1.1Host: euob.7roundprince.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ng-assets/lp/assets/index-526d8edf.css HTTP/1.1Host: cdn.protectonow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=fda95280-d38e-11ef-bc27-c22fbff8fb28; uid_cross=fda95280-d38e-11ef-bc27-c22fbff8fb28; mid=f28d8534-d38e-11ef-93a7-aab196f2f20d; utm_source=adx_ext_download_prot_smrtsp___5e460bab; utm_source_cross=adx_ext_download_prot_smrtsp___5e460bab; p2088478120=144748304
Source: global traffic	HTTP traffic detected: GET /ng-assets/lp/assets/polyfills-a3f452c3.js HTTP/1.1Host: cdn.protectonow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://get4.protectonow.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ng-assets/lp/assets/index-81ed22ca.js HTTP/1.1Host: cdn.protectonow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://get4.protectonow.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /siglp.js?rpclid=f28d8534-d38e-11ef-93a7-aab196f2f20d&params=Nb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkPejZgAKFm3ZlUxHBNGiYcbgU5DmL2JgBOnA6uq5HqYXDGOAkkcHp77mTvilkZ5d9Q2rpDl_8WOAn-k2Y5V9CBXA9Hn2pQTPVn67DMY2sybqayiZvf5flizO3fgV6Cw9N2-R52IBOSmAosKxVeFWSaITqzx-S70fbalfXf6j_MGyOC9eAxeZ7JGLaNEYTuDszAbHweW2Joh-qvwh3aS1didawvBHLOP-V2AJ9n6wIzxxqj8vOzYkgNldKNUmJt1QcCV7gcheIGQeY618UdBWcgJbQ4H-Y9TkqHO2sUSV-RHzJCsRWDjhnFAPFm7pN506i_DH--SzmnConwZt5nHCFtvPxN2SulUo9 HTTP/1.1Host: get4.protectonow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=fda95280-d38e-11ef-bc27-c22fbff8fb28; uid_cross=fda95280-d38e-11ef-bc27-c22fbff8fb28; mid=f28d8534-d38e-11ef-93a7-aab196f2f20d; utm_source=adx_ext_download_prot_smrtsp___5e460bab; utm_source_cross=adx_ext_download_prot_smrtsp___5e460bab; p2088478120=144748304
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise.js?render=6LfkWDYqAAAAAJvAuJELqQLg85Lg8zAp-k7w8siS&badge=inline&onload=onRecaptchaLoaded HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /install/?mid=f28d8534-d38e-11ef-93a7-aab196f2f20d&rpclid=f28d8534-d38e-11ef-93a7-aab196f2f20d&utm_source=adx_ext_download_prot_smrtsp___5e460bab&uq=_JDg0vZrlOp4T6_9U0ssm5ItFDhV3TsqhLGO26omVj-2pXmkcPDHdNwDCaqhZpjpKTa7dG0kopMzaVwvRrpzQLXyz5bNrDsHKX4rae-VljJo0XQMs9qPDHH7jO7Lx_9WhNCEj1xuWu-4f2YWpcIqzgA77etzE7oZtFSzHsIewF6zNBxh8d3T9Zk-HKlhZPa0MQd1POmBJVA9GftafTfIXKITadh35clew_PwRPW1jYBE6OV5DcPze2-TuMN32-hA8DrE-3ihdR3djmkB6y-R7g&params=Nb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkPejZgAKFm3ZlUxHBNGiYcbgU5DmL2JgBOnA6uq5HqYXDGOAkkcHp77mTvilkZ5d9Q2rpDl_8WOAn-k2Y5V9CBXA9Hn2pQTPVn67DMY2sybqayiZvf5flizO3fgV6Cw9N2-R52IBOSmAosKxVeFWSaITqzx-S70fbalfXf6j_MGyOC9eAxeZ7JGLaNEYTuDszAbHweW2Joh-qvwh3aS1didawvBHLOP-V2AJ9n6wIzxxqj8vOzYkgNldKNUmJt1QcCV7gcheIGQeY618UdBWcgJbQ4H-Y9TkqHO2sUSV-RHzJCsRWDjhnFAPFm7pN506i_DH--SzmnConwZt5nHCFtvPxN2SulUo9 HTTP/1.1Host: get4.protectonow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=fda95280-d38e-11ef-bc27-c22fbff8fb28; uid_cross=fda95280-d38e-11ef-bc27-c22fbff8fb28; mid=f28d8534-d38e-11ef-93a7-aab196f2f20d; utm_source=adx_ext_download_prot_smrtsp___5e460bab; utm_source_cross=adx_ext_download_prot_smrtsp___5e460bab; p2088478120=144748304
Source: global traffic	HTTP traffic detected: GET /sxp/i/7d278047aab7cca6e1b3bb44e5382d20.js HTTP/1.1Host: euob.7roundprince.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ng-assets/lp/assets/polyfills-a3f452c3.js HTTP/1.1Host: cdn.protectonow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=fda95280-d38e-11ef-bc27-c22fbff8fb28; uid_cross=fda95280-d38e-11ef-bc27-c22fbff8fb28; mid=f28d8534-d38e-11ef-93a7-aab196f2f20d; utm_source=adx_ext_download_prot_smrtsp___5e460bab; utm_source_cross=adx_ext_download_prot_smrtsp___5e460bab; p2088478120=144748304
Source: global traffic	HTTP traffic detected: GET /ng-assets/lp/assets/index-81ed22ca.js HTTP/1.1Host: cdn.protectonow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=fda95280-d38e-11ef-bc27-c22fbff8fb28; uid_cross=fda95280-d38e-11ef-bc27-c22fbff8fb28; mid=f28d8534-d38e-11ef-93a7-aab196f2f20d; utm_source=adx_ext_download_prot_smrtsp___5e460bab; utm_source_cross=adx_ext_download_prot_smrtsp___5e460bab; p2088478120=144748304; sid=f28d8534-d38e-11ef-93a7-aab196f2f20d; sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d
Source: global traffic	HTTP traffic detected: GET /ct?id=74676&url=https%3A%2F%2Fget4.protectonow.com%2Finstall%2F%3Fmid%3Df28d8534-d38e-11ef-93a7-aab196f2f20d%26rpclid%3Df28d8534-d38e-11ef-93a7-aab196f2f20d%26utm_source%3Dadx_ext_download_prot_smrtsp___5e460bab%26uq%3D_JDg0vZrlOp4T6_9U0ssm5ItFDhV3TsqhLGO26omVj-2pXmkcPDHdNwDCaqhZpjpKTa7dG0kopMzaVwvRrpzQLXyz5bNrDsHKX4rae-VljJo0XQMs9qPDHH7jO7Lx_9WhNCEj1xuWu-4f2YWpcIqzgA77etzE7oZtFSzHsIewF6zNBxh8d3T9Zk-HKlhZPa0MQd1POmBJVA9GftafTfIXKITadh35clew_PwRPW1jYBE6OV5DcPze2-TuMN32-hA8DrE-3ihdR3djmkB6y-R7g%26params%3DNb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkPejZgAKFm3ZlUxHBNGiYcbgU5DmL2JgBOnA6uq5HqYXDGOAkkcHp77mTvilkZ5d9Q2rpDl_8WOAn-k2Y5V9CBXA9Hn2pQTPVn67DMY2sybqayiZvf5flizO3fgV6Cw9N2-R52IBOSmAosKxVeFWSaITqzx-S70fbalfXf6j_MGyOC9eAxeZ7JGLaNEYTuDszAbHweW2Joh-qvwh3aS1didawvBHLOP-V2AJ9n6wIzxxqj8vOzYkgNldKNUmJt1QcCV7gcheIGQeY618UdBWcgJbQ4H-Y9TkqHO2sUSV-RHzJCsRWDjhnFAPFm7pN506i_DH--SzmnConwZt5nHCFtvPxN2SulUo9&sf=0&tpi=&ch=Channel1&uvid=f28d8534-d38e-11ef-93a7-aab196f2f20d&tsf=0&tsfmi=&tsfu=&cb=1736979657811&hl=1&op=1&ag=300509663&rand=94562791077125201222680867707701820560600701505507059297861210065900025581282908020500&fs=1280x907&fst=1280x907&np=win32&nv=google%20inc.&ref=https%3A%2F%2Fgoogleads.g.doubleclick.net%2F&ss=1280x1024&nc=0&at=&di=W1siZWYiLDEwN10sWyJhYm5jaCIsMThdLFstMiwiMTEsZDRIT1hWUFg3Zk5qTmIxS3U3Y1c5Z1RHODJ2UVZJNkFtOWd5RkFBaUhrVHlEQmZNbVhYaWlwaEVEb3hjYjBGakNZMEEzR051RGVKRmRaWGRveTVXMy81ODVxcGJVdzVjdFBmdiJdLFstNSwiLSJdLFstMjAsIi0iXSxbLTM4LCJpLC0xLC0xLDE5LDAsMTA5LDAsMCw1MTQsMjUwLC0xLDAsLCwyMjQwLDIyNDEiXSxbLTUxLCItIl0sWy02MSwie1wid2dzbFwiOlwiMDtcIixcInBjZlwiOlwiYmdyYTh1bm9ybVwifSJdLFstNjMsIi0iXSxbLTcxLCJhMDEwMDEwMTEwMDEwMDEwMTAwMDEwMTAwMTExMTEwMDAwMDAxMCJdLFstNCwiLSJdLFstMTEsIntcInRcIjpcIlwiLFwibVwiOltdfSJdLFstMTUsIi0iXSxbLTIzLCIrIl0sWy0yNCwiW10iXSxbLTM1LCJbMTczNjk3OTY1NzU2OCw1XSJdLFstMzcsIi0xMDktNjYtNzAtIl0sWy00MSwiLSJdLFstNTQsIntcImhcIjpbXCJfM1wiLFwiMjg3Mjg5OTMyMFwiXSxcImRcIjpbXSxcImJcIjpbXSxcInNcIjoxfSJdLFstNjIsIjgwIl0sWy02OSwiV2luMzJ8R29vZ2xlIEluYy58OHw0fFdpbmRvd3N8MCJdLFstNywiLSJdLFstMTAsIi0iXSxbLTE5LCJbMCwwLDAsMCwwLDAsMSwyNCwyNCxcIi1cIiwxMjgwLDk4NCwxMjgwLDEwMjQsMTI4MCw5ODQsMTI4MCw5MDcsMCwwLDAsMCxcIi1cIixcIi1cIiwxMjgwLDkwNywwXSJdLFstMzEsImZhbHNlIl0sWy0zNCwiLSJdLFstNDIsIjE3MjQyOTc2NTMiXSxbLTQ2LCIwIl0sWy00NywiQW1lcmljYS9OZXdfWW9yayxlbi1VUyxsYXRuLGdyZWdvcnkiXSxbLTYwLDIwMV0sWy02NSwiLSJdLFstOSwiKyJdLFstMTIsIm51bGwiXSxbLTI2LCJ7XCJ0amhzXCI6OTQ2MzQ0NSxcInVqaHNcIjo1NDUwOTYxLFwiamhzbFwiOjIxNzI2NDk0NzJ9Il0sWy0zMiwiMCJdLFstNDksIi0iXSxbLTUyLCItIl0sWy01OSwiZGVmYXVsdCJdLFstMTMsIi0iXSxbLTIyLCJbXCJuXCIsXCJuXCJdIl0sWy0yNSwiLSJdLFstMjcsIlszMDAsMTAsMCxcIjRnXCIsbnVsbF0iXSxbLTI4LCJlbi1VUyxlbiJdLFstMzAsIltcInZcIiwwXSJdLFstMzYsIltcIjUvNFwiLFwiNS80XCJdIl0sWy00OCwiMCwwIl0sWy01NywiV0UwWmVFdExXRUFYVDF3WkVWRk5UVWxLQXhZV1hFeFdXeGNPUzFaTVYxMUpTMUJYV2x3WFdsWlVGa3BCU1JaUUZnNWRDdzRCQ1EwT1dGaGJEbHBhV0E5Y0NGc0tXMXNORFZ3TUNnRUxYUXNKRjFOS0F3Z0REdzRBREF3UUZWaE5HVXNaRVZGTlRVbEtBeFlXWEV4V1d4Y09TMVpNVjExSlMxQlhXbHdYV2xaVUZrcEJTUlpRR
Source: global traffic	HTTP traffic detected: GET /compressedFonts/RobotoRegularLatin_1701696927.woff2 HTTP/1.1Host: cdn.protectonow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://get4.protectonow.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /compressedFonts/RobotoLight.woff2 HTTP/1.1Host: cdn.protectonow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://get4.protectonow.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /compressedFonts/RobotoBold.woff2 HTTP/1.1Host: cdn.protectonow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://get4.protectonow.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adx/userSync/44236094.js?id=_JDg0vZrlOp4T6_9U0ssm5ItFDhV3TsqhLGO26omVj-2pXmkcPDHdNwDCaqhZpjpKTa7dG0kopMzaVwvRrpzQLXyz5bNrDsHKX4rae-VljJo0XQMs9qPDHH7jO7Lx_9WhNCEj1xuWu-4f2YWpcIqzgA77etzE7oZtFSzHsIewF6zNBxh8d3T9Zk-HKlhZPa0MQd1POmBJVA9GftafTfIXKITadh35clew_PwRPW1jYBE6OV5DcPze2-TuMN32-hA8DrE-3ihdR3djmkB6y-R7g HTTP/1.1Host: get4.protectonow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"device-memory: 8rtt: 300sec-ch-ua-mobile: ?0sec-ch-viewport-height: 907User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-viewport-width: 1280sec-ch-ua-platform-version: "10.0.0"downlink: 5.9sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://get4.protectonow.com/install/?mid=f28d8534-d38e-11ef-93a7-aab196f2f20d&rpclid=f28d8534-d38e-11ef-93a7-aab196f2f20d&utm_source=adx_ext_download_prot_smrtsp___5e460bab&uq=_JDg0vZrlOp4T6_9U0ssm5ItFDhV3TsqhLGO26omVj-2pXmkcPDHdNwDCaqhZpjpKTa7dG0kopMzaVwvRrpzQLXyz5bNrDsHKX4rae-VljJo0XQMs9qPDHH7jO7Lx_9WhNCEj1xuWu-4f2YWpcIqzgA77etzE7oZtFSzHsIewF6zNBxh8d3T9Zk-HKlhZPa0MQd1POmBJVA9GftafTfIXKITadh35clew_PwRPW1jYBE6OV5DcPze2-TuMN32-hA8DrE-3ihdR3djmkB6y-R7g&params=Nb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkPejZgAKFm3ZlUxHBNGiYcbgU5DmL2JgBOnA6uq5HqYXDGOAkkcHp77mTvilkZ5d9Q2rpDl_8WOAn-k2Y5V9CBXA9Hn2pQTPVn67DMY2sybqayiZvf5flizO3fgV6Cw9N2-R52IBOSmAosKxVeFWSaITqzx-S70fbalfXf6j_MGyOC9eAxeZ7JGLaNEYTuDszAbHweW2Joh-qvwh3aS1didawvBHLOP-V2AJ9n6wIzxxqj8vOzYkgNldKNUmJt1QcCV7gcheIGQeY618UdBWcgJbQ4H-Y9TkqHO2sUSV-RHzJCsRWDjhnFAPFm7pN506i_DH--SzmnConwZt5nHCFtvPxN2SulUo9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=fda95280-d38e-11ef-bc27-c22fbff8fb28; uid_cross=fda95280-d38e-11ef-bc27-c22fbff8fb28; mid=f28d8534-d38e-11ef-93a7-aab196f2f20d; utm_source=adx_ext_download_prot_smrtsp___5e460bab; utm_source_cross=adx_ext_download_prot_smrtsp___5e460bab; p2088478120=144748304; sid=f28d8534-d38e-11ef-93a7-aab196f2f20d; sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; _cq_duid=1.1736979657.TvALYahdnYzqGls0; _cq_suid=1.1736979657.eNPi4xFKiCjhbtvd
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise/anchor?ar=1&k=6LfkWDYqAAAAAJvAuJELqQLg85Lg8zAp-k7w8siS&co=aHR0cHM6Ly9nZXQ0LnByb3RlY3Rvbm93LmNvbTo0NDM.&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=invisible&badge=inline&cb=7k1uo1xcezm HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ext/stticon_1735726475.png HTTP/1.1Host: cdn.protectonow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://get4.protectonow.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ext/checkmark-chrome_1698059071.svg+xml HTTP/1.1Host: cdn.protectonow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://get4.protectonow.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ext/chrome-logo_1698059188.svg+xml HTTP/1.1Host: cdn.protectonow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://get4.protectonow.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bg1_1735475692_1920x1080.png HTTP/1.1Host: cdn.protectonow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=fda95280-d38e-11ef-bc27-c22fbff8fb28; uid_cross=fda95280-d38e-11ef-bc27-c22fbff8fb28; mid=f28d8534-d38e-11ef-93a7-aab196f2f20d; utm_source=adx_ext_download_prot_smrtsp___5e460bab; utm_source_cross=adx_ext_download_prot_smrtsp___5e460bab; p2088478120=144748304; sid=f28d8534-d38e-11ef-93a7-aab196f2f20d; sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; _cq_duid=1.1736979657.TvALYahdnYzqGls0; _cq_suid=1.1736979657.eNPi4xFKiCjhbtvd
Source: global traffic	HTTP traffic detected: GET /tracker/tc_imp.gif?e=37dfbd8ee84e001269e8ce32e3418f949225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d59158b6a2117071a10acf9f29f674f86808155786a48fb792105876dd66595013804719707520c30510c93e8384677be26bb25cb43e29b25f45471ad0f2e6410d25afe5aecd2948a7fe07f52a13ad2a24710d14e681f2d1586d31c64e56ac8bf88b71208fe59f1d329e921c46bcf40e25c7ea8290ee95c400035db386ee683e99332bd06b442c316f0496f70bfc72f02431e24f97999c140ab51258fc6e279126332a5de6c7fd6d5431f2b436f0715a7902c701e56f2ab0b2093aef6298ee35d60013ee9f3e4869265b9d8d65fed5e990d39309bb9ccb6f161958eb46393370680fa9a2e4a12fe323eba8c063abbcaf1778b05ff40ae965d8013d9c56d9c7c71d6da2dc77ac787acf791afa1466ea37cf2e4a476162aef8c3e8fed1cf001175d8b4255d8898597c5acdf36927d81c8fa8e29b47b3467d77f2fdbcfc04d729feb70ab52bcc749c673ff2f440f44de37b106da98aa2fe28162904db1c0da8a3d8916173efa5a5b082f4a2b88af60b4168f988374a1ce37fbd43bcc8dd4ef7098a0e658397d8ef36343c1a1345c0fe1e0ec39f56ef5aa1eb0a441f121e275d613bb7bb8ad69c31c27b6ffc0707a7e6d6c507f0b17ec8bce30ad42b321482c209db40c9cc51d75baceabe2da6fa6aea5a4fa8fd0f34d10619d1d9bb41906de18367ba31b090f2b8208fe3741a8ab9b23f1048622dfdc2c96e74de4315e4767441e51dc8a85a754321f9f4a3bd7a79ac3cba25747cfe5a01bca950924d8ba73412af0d0b92259cf20df209866ab50927583b6608de033aadeef97854334ed895c23d10fe7c7e7da119b39705c7093372914c7c015f7af6d9fdeedce1eb3f5cf6b066344da34c15eb72dc9dd31fc5212213c5b297e8125d3f34933c866b7f1b1648fab1bf51c08d6752d78c7ebd45906bb369aee57b867560110d5495984d0b16dbf045ed0d011bcbb9882fe41d8400d531d8635504f9fc95408d83fb3a49c76fdd5a5133f7bf57c6059469e4a13ebe7bc1c6bf000138dfee118c18fe8955971bb46c2681c28b72426769d8e703ed78f859eb1cb6ee93ff86c9466c4c60a93abf96e51b8852290c4d4d5c19ca08f521ee5914235d14b9b74e41d9d8355ddb0b59f34b6efaaa58f4e04d1b885f6269a34dd087c356313bccd3a5c8000a225a7f441f47e7bb03a3bcb44eef27d0ef2150f4f349ab19928fd9a374a0d3053a18486e9ea689112e6c87467cad97c0d5f48083b7da357ef94733081d68ed8bfa4cfa9dac65b909dfb1652234522144e063bd408507c88daefb73ebf8c3b0bd3fc0afa9200dbcc89b79fbbe77ae0669e488c2cb2b6a9c0ba0f0caa8dfae32a0057008bfef9936e79c5d2032f03c968a6763b4fb91b893ace0c4aed6d08b0e8b2b8e485c592d745a63999a04abf81f8a134b0ffad0b01c9f78945f27fa288cf446f91871bccce7f6cf558419e3e73503771d88f447db0557e7d4df038dac3fc244e8926711660a2b4bcc21cf24d4772e299f0a4ee62a44c214364464dc61c2d37e2010497be8b655d6f2b3a122ae80e1c578bdf125875d0b535c04557a9eeae9b29c1fe792ce83b71db843ecdd16f1b0fa9bb2a645c37d9d4b85b79a441945d4995e9f27825c44e0b6e27c9e1e34c48812638753bc6ee6c0001e8630f413bd186cf4bee9eaad1599767b66eeabf15c8842c43d2c3b885b772d22adfa00fb5e12a62864cff833680e7b5ae705eff6dc5ad12064dbfee596c675ed56d53e8eb6835a742c5be484298d213a2b6b5b72ddb82a447d3a0b8e85fcb6d9c0bf7b9cab8620b30129bb53ae10433b93ede65c39ed58e7b8fc8d586424b9f3d6be31c7c33d3b08dae43b4d3487fcfcacb4f22d415e391c9fec3f22abf3b696f0d02fc0bab0450d9aed7608064f293857f90e40779d64d2b2583385d4edc4e7831df49380acb819e1a4c36e0ed6965b196fa6e1b0a4437ec306222df109e581ee979503c3007bc2bcb09844e25ec8f49911b6a172931d88d2fdaed7cd07d4fcf68bd7d2f3a1925
Source: global traffic	HTTP traffic detected: GET /ct?id=74676&url=https%3A%2F%2Fget4.protectonow.com%2Finstall%2F%3Fmid%3Df28d8534-d38e-11ef-93a7-aab196f2f20d%26rpclid%3Df28d8534-d38e-11ef-93a7-aab196f2f20d%26utm_source%3Dadx_ext_download_prot_smrtsp___5e460bab%26uq%3D_JDg0vZrlOp4T6_9U0ssm5ItFDhV3TsqhLGO26omVj-2pXmkcPDHdNwDCaqhZpjpKTa7dG0kopMzaVwvRrpzQLXyz5bNrDsHKX4rae-VljJo0XQMs9qPDHH7jO7Lx_9WhNCEj1xuWu-4f2YWpcIqzgA77etzE7oZtFSzHsIewF6zNBxh8d3T9Zk-HKlhZPa0MQd1POmBJVA9GftafTfIXKITadh35clew_PwRPW1jYBE6OV5DcPze2-TuMN32-hA8DrE-3ihdR3djmkB6y-R7g%26params%3DNb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkPejZgAKFm3ZlUxHBNGiYcbgU5DmL2JgBOnA6uq5HqYXDGOAkkcHp77mTvilkZ5d9Q2rpDl_8WOAn-k2Y5V9CBXA9Hn2pQTPVn67DMY2sybqayiZvf5flizO3fgV6Cw9N2-R52IBOSmAosKxVeFWSaITqzx-S70fbalfXf6j_MGyOC9eAxeZ7JGLaNEYTuDszAbHweW2Joh-qvwh3aS1didawvBHLOP-V2AJ9n6wIzxxqj8vOzYkgNldKNUmJt1QcCV7gcheIGQeY618UdBWcgJbQ4H-Y9TkqHO2sUSV-RHzJCsRWDjhnFAPFm7pN506i_DH--SzmnConwZt5nHCFtvPxN2SulUo9&sf=0&tpi=&ch=Channel1&uvid=f28d8534-d38e-11ef-93a7-aab196f2f20d&tsf=0&tsfmi=&tsfu=&cb=1736979657811&hl=1&op=1&ag=300509663&rand=94562791077125201222680867707701820560600701505507059297861210065900025581282908020500&fs=1280x907&fst=1280x907&np=win32&nv=google%20inc.&ref=https%3A%2F%2Fgoogleads.g.doubleclick.net%2F&ss=1280x1024&nc=0&at=&di=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
Source: global traffic	HTTP traffic detected: GET /ext/TOOLTIP_1701944305.svg+xml HTTP/1.1Host: cdn.protectonow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://get4.protectonow.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adx/userSync/44236094.js?id=_JDg0vZrlOp4T6_9U0ssm5ItFDhV3TsqhLGO26omVj-2pXmkcPDHdNwDCaqhZpjpKTa7dG0kopMzaVwvRrpzQLXyz5bNrDsHKX4rae-VljJo0XQMs9qPDHH7jO7Lx_9WhNCEj1xuWu-4f2YWpcIqzgA77etzE7oZtFSzHsIewF6zNBxh8d3T9Zk-HKlhZPa0MQd1POmBJVA9GftafTfIXKITadh35clew_PwRPW1jYBE6OV5DcPze2-TuMN32-hA8DrE-3ihdR3djmkB6y-R7g HTTP/1.1Host: get4.protectonow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=fda95280-d38e-11ef-bc27-c22fbff8fb28; uid_cross=fda95280-d38e-11ef-bc27-c22fbff8fb28; mid=f28d8534-d38e-11ef-93a7-aab196f2f20d; utm_source=adx_ext_download_prot_smrtsp___5e460bab; utm_source_cross=adx_ext_download_prot_smrtsp___5e460bab; p2088478120=144748304; sid=f28d8534-d38e-11ef-93a7-aab196f2f20d; sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; _cq_duid=1.1736979657.TvALYahdnYzqGls0; _cq_suid=1.1736979657.eNPi4xFKiCjhbtvd
Source: global traffic	HTTP traffic detected: GET /ng-assets/vendors/lottie_light.5.10.2.min.js HTTP/1.1Host: cdn.protectonow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=fda95280-d38e-11ef-bc27-c22fbff8fb28; uid_cross=fda95280-d38e-11ef-bc27-c22fbff8fb28; mid=f28d8534-d38e-11ef-93a7-aab196f2f20d; utm_source=adx_ext_download_prot_smrtsp___5e460bab; utm_source_cross=adx_ext_download_prot_smrtsp___5e460bab; p2088478120=144748304; sid=f28d8534-d38e-11ef-93a7-aab196f2f20d; sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; _cq_duid=1.1736979657.TvALYahdnYzqGls0; _cq_suid=1.1736979657.eNPi4xFKiCjhbtvd
Source: global traffic	HTTP traffic detected: GET /ext/stticon_1735726475.png HTTP/1.1Host: cdn.protectonow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=fda95280-d38e-11ef-bc27-c22fbff8fb28; uid_cross=fda95280-d38e-11ef-bc27-c22fbff8fb28; mid=f28d8534-d38e-11ef-93a7-aab196f2f20d; utm_source=adx_ext_download_prot_smrtsp___5e460bab; utm_source_cross=adx_ext_download_prot_smrtsp___5e460bab; p2088478120=144748304; sid=f28d8534-d38e-11ef-93a7-aab196f2f20d; sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; _cq_duid=1.1736979657.TvALYahdnYzqGls0; _cq_suid=1.1736979657.eNPi4xFKiCjhbtvd
Source: global traffic	HTTP traffic detected: GET /ext/chrome-logo_1698059188.svg+xml HTTP/1.1Host: cdn.protectonow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=fda95280-d38e-11ef-bc27-c22fbff8fb28; uid_cross=fda95280-d38e-11ef-bc27-c22fbff8fb28; mid=f28d8534-d38e-11ef-93a7-aab196f2f20d; utm_source=adx_ext_download_prot_smrtsp___5e460bab; utm_source_cross=adx_ext_download_prot_smrtsp___5e460bab; p2088478120=144748304; sid=f28d8534-d38e-11ef-93a7-aab196f2f20d; sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; _cq_duid=1.1736979657.TvALYahdnYzqGls0; _cq_suid=1.1736979657.eNPi4xFKiCjhbtvd
Source: global traffic	HTTP traffic detected: GET /ext/checkmark-chrome_1698059071.svg+xml HTTP/1.1Host: cdn.protectonow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=fda95280-d38e-11ef-bc27-c22fbff8fb28; uid_cross=fda95280-d38e-11ef-bc27-c22fbff8fb28; mid=f28d8534-d38e-11ef-93a7-aab196f2f20d; utm_source=adx_ext_download_prot_smrtsp___5e460bab; utm_source_cross=adx_ext_download_prot_smrtsp___5e460bab; p2088478120=144748304; sid=f28d8534-d38e-11ef-93a7-aab196f2f20d; sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; _cq_duid=1.1736979657.TvALYahdnYzqGls0; _cq_suid=1.1736979657.eNPi4xFKiCjhbtvd
Source: global traffic	HTTP traffic detected: GET /tracker/tc_imp.gif?e=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
Source: global traffic	HTTP traffic detected: GET /bg1_1735475692_1920x1080.png HTTP/1.1Host: cdn.protectonow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=fda95280-d38e-11ef-bc27-c22fbff8fb28; uid_cross=fda95280-d38e-11ef-bc27-c22fbff8fb28; mid=f28d8534-d38e-11ef-93a7-aab196f2f20d; utm_source=adx_ext_download_prot_smrtsp___5e460bab; utm_source_cross=adx_ext_download_prot_smrtsp___5e460bab; p2088478120=144748304; sid=f28d8534-d38e-11ef-93a7-aab196f2f20d; sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; _cq_duid=1.1736979657.TvALYahdnYzqGls0; _cq_suid=1.1736979657.eNPi4xFKiCjhbtvd
Source: global traffic	HTTP traffic detected: GET /ext/TOOLTIP_1701944305.svg+xml HTTP/1.1Host: cdn.protectonow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=fda95280-d38e-11ef-bc27-c22fbff8fb28; uid_cross=fda95280-d38e-11ef-bc27-c22fbff8fb28; mid=f28d8534-d38e-11ef-93a7-aab196f2f20d; utm_source=adx_ext_download_prot_smrtsp___5e460bab; utm_source_cross=adx_ext_download_prot_smrtsp___5e460bab; p2088478120=144748304; sid=f28d8534-d38e-11ef-93a7-aab196f2f20d; sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; _cq_duid=1.1736979657.TvALYahdnYzqGls0; _cq_suid=1.1736979657.eNPi4xFKiCjhbtvd
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obseu.7roundprince.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=6438bdec51f10f97b581b4ebc5ecefc9
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6LfkWDYqAAAAAJvAuJELqQLg85Lg8zAp-k7w8siS&co=aHR0cHM6Ly9nZXQ0LnByb3RlY3Rvbm93LmNvbTo0NDM.&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=invisible&badge=inline&cb=7k1uo1xcezmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/CY4IdQ8PNOqs9ugPxTaJh2hYWy8m1lFu__OIecPWn-w.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6LfkWDYqAAAAAJvAuJELqQLg85Lg8zAp-k7w8siS&co=aHR0cHM6Ly9nZXQ0LnByb3RlY3Rvbm93LmNvbTo0NDM.&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=invisible&badge=inline&cb=7k1uo1xcezmAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ext/loader_1698324395.json HTTP/1.1Host: cdn.protectonow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://get4.protectonow.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /step1_1735132523.json HTTP/1.1Host: cdn.protectonow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://get4.protectonow.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ng-assets/vendors/lottie_light.5.10.2.min.js HTTP/1.1Host: cdn.protectonow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=fda95280-d38e-11ef-bc27-c22fbff8fb28; uid_cross=fda95280-d38e-11ef-bc27-c22fbff8fb28; mid=f28d8534-d38e-11ef-93a7-aab196f2f20d; utm_source=adx_ext_download_prot_smrtsp___5e460bab; utm_source_cross=adx_ext_download_prot_smrtsp___5e460bab; p2088478120=144748304; sid=f28d8534-d38e-11ef-93a7-aab196f2f20d; sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; _cq_duid=1.1736979657.TvALYahdnYzqGls0; _cq_suid=1.1736979657.eNPi4xFKiCjhbtvd
Source: global traffic	HTTP traffic detected: GET /step2A_enjoy_1716197370.json HTTP/1.1Host: cdn.protectonow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://get4.protectonow.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/CY4IdQ8PNOqs9ugPxTaJh2hYWy8m1lFu__OIecPWn-w.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m/signin?redirect=https%3A%2F%2Fmedium.com%2Ffavicon.ico&loginType=default HTTP/1.1Host: medium.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login?return_to=%2Ffavicon.ico HTTP/1.1Host: squareup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login.php?next=https%3A%2F%2Fm.facebook.com%2F&refsrc=deprecated&_rdr HTTP/1.1Host: m.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login.php?next=https%3A%2F%2Fm.facebook.com%2F&refsrc=deprecated&_rdr HTTP/1.1Host: m.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login?redirect_after_login=/favicon.ico HTTP/1.1Host: twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping HTTP/1.1Host: ws-broker-service.us-east-1.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login.php?next=https%3A%2F%2Fwww.facebook.com%2Ffavicon.ico%3F_rdr%3Dp HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signin/yahoo/?redir=https%3A%2F%2Fwww.flickr.com/favicon.ico HTTP/1.1Host: login.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ext/loader_1698324395.json HTTP/1.1Host: cdn.protectonow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=fda95280-d38e-11ef-bc27-c22fbff8fb28; uid_cross=fda95280-d38e-11ef-bc27-c22fbff8fb28; mid=f28d8534-d38e-11ef-93a7-aab196f2f20d; utm_source=adx_ext_download_prot_smrtsp___5e460bab; utm_source_cross=adx_ext_download_prot_smrtsp___5e460bab; p2088478120=144748304; sid=f28d8534-d38e-11ef-93a7-aab196f2f20d; sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; _cq_duid=1.1736979657.TvALYahdnYzqGls0; _cq_suid=1.1736979657.eNPi4xFKiCjhbtvd
Source: global traffic	HTTP traffic detected: GET /step2A_enjoy_1716197370.json HTTP/1.1Host: cdn.protectonow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=fda95280-d38e-11ef-bc27-c22fbff8fb28; uid_cross=fda95280-d38e-11ef-bc27-c22fbff8fb28; mid=f28d8534-d38e-11ef-93a7-aab196f2f20d; utm_source=adx_ext_download_prot_smrtsp___5e460bab; utm_source_cross=adx_ext_download_prot_smrtsp___5e460bab; p2088478120=144748304; sid=f28d8534-d38e-11ef-93a7-aab196f2f20d; sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; _cq_duid=1.1736979657.TvALYahdnYzqGls0; _cq_suid=1.1736979657.eNPi4xFKiCjhbtvd
Source: global traffic	HTTP traffic detected: GET /step1_1735132523.json HTTP/1.1Host: cdn.protectonow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=fda95280-d38e-11ef-bc27-c22fbff8fb28; uid_cross=fda95280-d38e-11ef-bc27-c22fbff8fb28; mid=f28d8534-d38e-11ef-93a7-aab196f2f20d; utm_source=adx_ext_download_prot_smrtsp___5e460bab; utm_source_cross=adx_ext_download_prot_smrtsp___5e460bab; p2088478120=144748304; sid=f28d8534-d38e-11ef-93a7-aab196f2f20d; sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; _cq_duid=1.1736979657.TvALYahdnYzqGls0; _cq_suid=1.1736979657.eNPi4xFKiCjhbtvd
Source: global traffic	HTTP traffic detected: GET /ping HTTP/1.1Host: ws-broker-service.us-west-2.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obseu.7roundprince.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=6438bdec51f10f97b581b4ebc5ecefc9
Source: global traffic	HTTP traffic detected: GET /adx/getlst HTTP/1.1Host: get4.protectonow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"device-memory: 8rtt: 250sec-ch-ua-mobile: ?0sec-ch-viewport-height: 907User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-viewport-width: 1280sec-ch-ua-platform-version: "10.0.0"downlink: 7.25sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://get4.protectonow.com/install/?mid=f28d8534-d38e-11ef-93a7-aab196f2f20d&rpclid=f28d8534-d38e-11ef-93a7-aab196f2f20d&utm_source=adx_ext_download_prot_smrtsp___5e460bab&uq=_JDg0vZrlOp4T6_9U0ssm5ItFDhV3TsqhLGO26omVj-2pXmkcPDHdNwDCaqhZpjpKTa7dG0kopMzaVwvRrpzQLXyz5bNrDsHKX4rae-VljJo0XQMs9qPDHH7jO7Lx_9WhNCEj1xuWu-4f2YWpcIqzgA77etzE7oZtFSzHsIewF6zNBxh8d3T9Zk-HKlhZPa0MQd1POmBJVA9GftafTfIXKITadh35clew_PwRPW1jYBE6OV5DcPze2-TuMN32-hA8DrE-3ihdR3djmkB6y-R7g&params=Nb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkPejZgAKFm3ZlUxHBNGiYcbgU5DmL2JgBOnA6uq5HqYXDGOAkkcHp77mTvilkZ5d9Q2rpDl_8WOAn-k2Y5V9CBXA9Hn2pQTPVn67DMY2sybqayiZvf5flizO3fgV6Cw9N2-R52IBOSmAosKxVeFWSaITqzx-S70fbalfXf6j_MGyOC9eAxeZ7JGLaNEYTuDszAbHweW2Joh-qvwh3aS1didawvBHLOP-V2AJ9n6wIzxxqj8vOzYkgNldKNUmJt1QcCV7gcheIGQeY618UdBWcgJbQ4H-Y9TkqHO2sUSV-RHzJCsRWDjhnFAPFm7pN506i_DH--SzmnConwZt5nHCFtvPxN2SulUo9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=fda95280-d38e-11ef-bc27-c22fbff8fb28; uid_cross=fda95280-d38e-11ef-bc27-c22fbff8fb28; mid=f28d8534-d38e-11ef-93a7-aab196f2f20d; utm_source=adx_ext_download_prot_smrtsp___5e460bab; utm_source_cross=adx_ext_download_prot_smrtsp___5e460bab; p2088478120=144748304; sid=f28d8534-d38e-11ef-93a7-aab196f2f20d; sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; _cq_duid=1.1736979657.TvALYahdnYzqGls0; _cq_suid=1.1736979657.eNPi4xFKiCjhbtvd
Source: global traffic	HTTP traffic detected: GET /ext/favicon-32x32_1701772986.png HTTP/1.1Host: cdn.protectonow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=fda95280-d38e-11ef-bc27-c22fbff8fb28; uid_cross=fda95280-d38e-11ef-bc27-c22fbff8fb28; mid=f28d8534-d38e-11ef-93a7-aab196f2f20d; utm_source=adx_ext_download_prot_smrtsp___5e460bab; utm_source_cross=adx_ext_download_prot_smrtsp___5e460bab; p2088478120=144748304; sid=f28d8534-d38e-11ef-93a7-aab196f2f20d; sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; _cq_duid=1.1736979657.TvALYahdnYzqGls0; _cq_suid=1.1736979657.eNPi4xFKiCjhbtvd
Source: global traffic	HTTP traffic detected: GET /login?return_to=%2Ffavicon.ico HTTP/1.1Host: app.squareup.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=SRPD_Mkhe.3UR35YScKLK5.tMpLvECuNBbeBog.LEyY-1736979664-1.0.1.1-YrEsi1Qj14Ldhb7gIGk7iAEIbuXay1JSjEQU0n.Qmt2G1Fhd0OqkDAoLB7F4axTDB16YH3i4gPHQgvZ3WVsHhg
Source: global traffic	HTTP traffic detected: GET /login?dest=https%3A%2F%2Fwww.reddit.com%2Ffavicon.ico HTTP/1.1Host: www.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m/signin?redirect=https%3A%2F%2Fmedium.com%2Ffavicon.ico&loginType=default HTTP/1.1Host: medium.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=lo_cdda9c8dabff; sid=1:5wRlU0P+Ld7Wm8g2WuehNZa3AuiktuZtp4zVC8LEvzUU3zkg4Ewg1W9p+eMsXGNL; _cfuvid=UE4cGWGVzn3Pkoc00fSzzxsFDODiOtqXSOzZGm2exmQ-1736979664365-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /login?redirect_to=%2Ffavicon.ico HTTP/1.1Host: www.tumblr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login?redirect_after_login=/favicon.ico HTTP/1.1Host: x.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping HTTP/1.1Host: ws-broker-service.us-east-1.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping HTTP/1.1Host: ws-broker-service.us-east-1.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login/?dest=https%3A%2F%2Fwww.reddit.com%2Ffavicon.ico HTTP/1.1Host: www.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?next=https%3A%2F%2Fm.facebook.com%2F&refsrc=deprecated&_rdr HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?redir=https%3A%2F%2Fwww.flickr.com/favicon.ico HTTP/1.1Host: login.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBNA0iGcCEN-LuFZiN8mjLJVjAEYZqjIFEgEBAQGGiWeSZ9xH0iMA_eMAAA&S=AQAAAgMDIMHnLAHCZr6Y7Ydev0M
Source: global traffic	HTTP traffic detected: GET /login?cont=https%3a%2f%2fwww.dropbox.com%2fstatic%2fimages%2ffavicon.ico HTTP/1.1Host: www.dropbox.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login?return_to=%2Ffavicon.ico HTTP/1.1Host: app.squareup.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=SRPD_Mkhe.3UR35YScKLK5.tMpLvECuNBbeBog.LEyY-1736979664-1.0.1.1-YrEsi1Qj14Ldhb7gIGk7iAEIbuXay1JSjEQU0n.Qmt2G1Fhd0OqkDAoLB7F4axTDB16YH3i4gPHQgvZ3WVsHhg; __cf_bm=EE2VQHqAXN3Lq9SowEkosbafwWA.uoanZaCCBtsRlJ8-1736979665-1.0.1.1-BBZfH9LnxXdr.qC4LkuH7mDJ28HMAabUHHLruJsQhRgn2lhJ4neYbSk1EZONy84ZIzTmqdz6Q_qtZIGLMTAgaA
Source: global traffic	HTTP traffic detected: GET /?next=https%3A%2F%2Fm.facebook.com%2F&refsrc=deprecated&_rdr HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login/?next=https%3A%2F%2Fwww.pinterest.com%2Ffavicon.ico HTTP/1.1Host: www.pinterest.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping HTTP/1.1Host: ws-broker-service.us-west-2.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login?redirect_after_login=/favicon.ico HTTP/1.1Host: x.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A173697966522460177; guest_id_ads=v1%3A173697966522460177; personalization_id="v1_2RxsTWuw4OAhbOwz1VOnkw=="; guest_id=v1%3A173697966522460177
Source: global traffic	HTTP traffic detected: GET /ap/signin?_encoding=UTF8&openid.assoc_handle=usflex&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.mode=checkid_setup&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0&openid.ns.pape=http%3A%2F%2Fspecs.openid.net%2Fextensions%2Fpape%2F1.0&openid.pape.max_auth_age=10000000&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Ffavicon.ico HTTP/1.1Host: www.amazon.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping HTTP/1.1Host: ws-broker-service.us-east-1.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping HTTP/1.1Host: ws-broker-service.us-east-1.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping HTTP/1.1Host: ws-broker-service.us-west-2.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise/reload?k=6LfkWDYqAAAAAJvAuJELqQLg85Lg8zAp-k7w8siS HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AGVEItdiapGS4RM72ZhqlUl6C0PmIwMd1mqlSqABalyTpquqOumAjBWDhdd9Cec706HKvUYl9nAGIke6cdqjG30
Source: global traffic	HTTP traffic detected: GET /adx/getlst HTTP/1.1Host: get4.protectonow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=fda95280-d38e-11ef-bc27-c22fbff8fb28; uid_cross=fda95280-d38e-11ef-bc27-c22fbff8fb28; mid=f28d8534-d38e-11ef-93a7-aab196f2f20d; utm_source=adx_ext_download_prot_smrtsp___5e460bab; utm_source_cross=adx_ext_download_prot_smrtsp___5e460bab; p2088478120=144748304; sid=f28d8534-d38e-11ef-93a7-aab196f2f20d; sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; _cq_duid=1.1736979657.TvALYahdnYzqGls0; _cq_suid=1.1736979657.eNPi4xFKiCjhbtvd
Source: global traffic	HTTP traffic detected: GET /ext/favicon-32x32_1701772986.png HTTP/1.1Host: cdn.protectonow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=fda95280-d38e-11ef-bc27-c22fbff8fb28; uid_cross=fda95280-d38e-11ef-bc27-c22fbff8fb28; mid=f28d8534-d38e-11ef-93a7-aab196f2f20d; utm_source=adx_ext_download_prot_smrtsp___5e460bab; utm_source_cross=adx_ext_download_prot_smrtsp___5e460bab; p2088478120=144748304; sid=f28d8534-d38e-11ef-93a7-aab196f2f20d; sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; _cq_duid=1.1736979657.TvALYahdnYzqGls0; _cq_suid=1.1736979657.eNPi4xFKiCjhbtvd
Source: global traffic	HTTP traffic detected: GET /login/?dest=https%3A%2F%2Fwww.reddit.com%2Ffavicon.ico&rdt=50489 HTTP/1.1Host: www.reddit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rdt=267854e329c41407b90ec32ae6ab4949
Source: global traffic	HTTP traffic detected: GET /login/de/index?ref=https://eu.battle.net/favicon.ico HTTP/1.1Host: eu.battle.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login/?redir=favicon.ico HTTP/1.1Host: store.steampowered.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obseu.7roundprince.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=6438bdec51f10f97b581b4ebc5ecefc9
Source: global traffic	HTTP traffic detected: GET /login.php?next=https%3A%2F%2Fm.facebook.com%2F&refsrc=deprecated&_rdr HTTP/1.1Host: m.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login?return_to=https%3A%2F%2Fgithub.com%2Ffavicon.ico%3Fid%3D1 HTTP/1.1Host: github.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?redir=https%3A%2F%2Fwww.flickr.com/favicon.ico HTTP/1.1Host: login.yahoo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBNA0iGcCEN-LuFZiN8mjLJVjAEYZqjIFEgEBAQGGiWeSZ9xH0iMA_eMAAA&S=AQAAAgMDIMHnLAHCZr6Y7Ydev0M
Source: global traffic	HTTP traffic detected: GET /ping HTTP/1.1Host: ws-broker-service.us-east-1.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping HTTP/1.1Host: ws-broker-service.us-east-1.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login.php?next=https%3A%2F%2Fm.facebook.com%2F&refsrc=deprecated&_rdr HTTP/1.1Host: m.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login/?dest=https%3A%2F%2Fwww.reddit.com%2Ffavicon.ico&rdt=50489 HTTP/1.1Host: www.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rdt=267854e329c41407b90ec32ae6ab4949; loid=000000001h86nxd98r.2.1736979666145.Z0FBQUFBQm5pRFRTMGJDZm9yZkpCYnoxX0lxQ011UEhCQTBVQjRSS1Q5YmVjOU8wRE1oYldvc2JDYjJvUjhkOGhXQWJXTTdURmxiRFJSenMwMDBIUjFKc2ZwU1p0WWF5VmJUdzgwc29iU0RFSXJyUWRFY0doX2FHNVpwTDFZb3h2R1pQSzVHNGFIcEQ; session_tracker=bncmmbeellcmkhhqpe.0.1736979666149.Z0FBQUFBQm5pRFRTSUs1dDFwckxPQXAza0NUd2pLSWZSTVZSa3d6TnQ4dmx5M1pYWVZueHlvSFhmdHMwVlZ0QU1oUmNsWVQ0eWlQMTRPblpNMlV6S3RIRnRRNmhKN2hmRFllYlIxUzZKMnBMNU0wbFRDQ0xCOGRCRGxZRlNjQ29JVjFrWWcyQjJyamc; csv=2
Source: global traffic	HTTP traffic detected: GET /signin?returnUri=https://t.paypal.com/ts?v=1.0.0 HTTP/1.1Host: www.paypal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /checkcookie?redir=https%3A%2F%2Fslack.com%2Ffavicon.ico%23 HTTP/1.1Host: slack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login?cont=https%3a%2f%2fwww.dropbox.com%2fstatic%2fimages%2ffavicon.ico HTTP/1.1Host: www.dropbox.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: gvc=OTcwNjE2NzY5MDAyNzU1NjkyNTM4Mzg1NDA5MzIwMDQyNzM0NDU=; t=daf4CXdg9ze-14JRg7ciUO3g; __Host-js_csrf=daf4CXdg9ze-14JRg7ciUO3g
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise/clr?k=6LfkWDYqAAAAAJvAuJELqQLg85Lg8zAp-k7w8siS HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AGVEItdiapGS4RM72ZhqlUl6C0PmIwMd1mqlSqABalyTpquqOumAjBWDhdd9Cec706HKvUYl9nAGIke6cdqjG30
Source: global traffic	HTTP traffic detected: GET /ping HTTP/1.1Host: ws-broker-service.us-west-2.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping HTTP/1.1Host: ws-broker-service.us-west-2.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /profile/login/?next=https%3A%2F%2Fdisqus.com%2Ffavicon.ico HTTP/1.1Host: disqus.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login?r=%2Ffavicon.ico HTTP/1.1Host: 500px.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ap/signin?_encoding=UTF8&openid.assoc_handle=usflex&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.mode=checkid_setup&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0&openid.ns.pape=http%3A%2F%2Fspecs.openid.net%2Fextensions%2Fpape%2F1.0&openid.pape.max_auth_age=10000000&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Ffavicon.ico HTTP/1.1Host: www.amazon.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping HTTP/1.1Host: ws-broker-service.us-east-1.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping HTTP/1.1Host: ws-broker-service.us-east-1.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /account/login?continue=%2ffavicon.ico HTTP/1.1Host: secure.indeed.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login?return_to=https%3A%2F%2Fgithub.com%2Ffavicon.ico%3Fid%3D1 HTTP/1.1Host: github.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /account/signin/?next=/favicon.ico HTTP/1.1Host: bitbucket.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login/?redir=favicon.ico HTTP/1.1Host: store.steampowered.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: steamCountry=US%7C185ce35c568ebbb18a145d0cabae7186; browserid=412742498574669646; sessionid=56b058730c112796b6479c46
Source: global traffic	HTTP traffic detected: GET /profile/login/?next=https%3A%2F%2Fdisqus.com%2Ffavicon.ico HTTP/1.1Host: disqus.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: csrftoken=EFEhcHhQhWmpkzFWgkb4l4hRJ7h7XG57
Source: global traffic	HTTP traffic detected: GET /login?redirect_on_login=/favicon.ico HTTP/1.1Host: www.twitch.tvConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?next=https%3A%2F%2Fm.facebook.com%2F&refsrc=deprecated&_rdr HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signin?returnUri=https://t.paypal.com/ts?v=1.0.0 HTTP/1.1Host: www.paypal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: enforce_policy=ccpa; cookie_check=yes; d_id=5099871da141466094dbf69e8b17d15b1736979666851; LANG=en_US%3BUS; tsrce=unifiedloginnodeweb; x-pp-s=eyJ0IjoiMTczNjk3OTY2Njk5MiIsImwiOiIwIiwibSI6IjAifQ; nsid=s%3A7jp1AdbJ76xHDGr9cGyjY5CuPgSk0YKi.ufL0KH2OrTnUCzal80gRFrymdFZBZZRsruaDmTDefow; l7_az=dcg01.phx; ts=vreXpYrS%3D1768515666%26vteXpYrS%3D1736981466%26vr%3D6c0e57681940a551a8f5b2c6ed301df2%26vt%3D6c0e57681940a551a8f5b2c6ed301df1%26vtyp%3Dnew; ts_c=vr%3D6c0e57681940a551a8f5b2c6ed301df2%26vt%3D6c0e57681940a551a8f5b2c6ed301df1
Source: global traffic	HTTP traffic detected: GET /?next=https%3A%2F%2Fm.facebook.com%2F&refsrc=deprecated&_rdr HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login?u=2&to=ZmF2aWNvbi5pY28- HTTP/1.1Host: vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping HTTP/1.1Host: ws-broker-service.us-west-2.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping HTTP/1.1Host: ws-broker-service.us-west-2.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /checkcookie?redir=https%3A%2F%2Fslack.com%2Ffavicon.ico%23 HTTP/1.1Host: slack.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: utm=%7B%7D; b=ce5c65c19aafca2f55cd62828473a69d; x=ce5c65c19aafca2f55cd62828473a69d.1736979667
Source: global traffic	HTTP traffic detected: GET /login?r=%2Ffavicon.ico HTTP/1.1Host: 500px.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping HTTP/1.1Host: ws-broker-service.us-east-1.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ap/signin?_encoding=UTF8&openid.assoc_handle=imdb_us&openid.claimed_id=http%3a%2f%2fspecs.openid.net%2fauth%2f2.0%2fidentifier_select&openid.identity=http%3a%2f%2fspecs.openid.net%2fauth%2f2.0%2fidentifier_select&openid.mode=checkid_setup&openid.ns=http%3a%2f%2fspecs.openid.net%2fauth%2f2.0&openid.pape.max_auth_age=10000000&openid.return_to=https%3a%2f%2fwww.imdb.com%2ffavicon.ico HTTP/1.1Host: www.imdb.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login?redirect_on_login=/favicon.ico HTTP/1.1Host: www.twitch.tvConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: server_session_id=cce539605bd44508a344b6cd496a734f; unique_id=h2TUiANie7MufhOvAf5ToiVLtkyIgO0M; unique_id_durable=h2TUiANie7MufhOvAf5ToiVLtkyIgO0M
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login?rt=L&rp=%2ffavicon.ico&step=confirmation HTTP/1.1Host: accounts.craigslist.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login.php?next=https%3A%2F%2Fm.facebook.com%2F&refsrc=deprecated&_rdr HTTP/1.1Host: m.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login.php?next=https%3A%2F%2Fm.facebook.com%2F&refsrc=deprecated&_rdr HTTP/1.1Host: m.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?to=ZmF2aWNvbi5pY28- HTTP/1.1Host: vk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9070584652967973254_mnjrB69IMZ6oBwHNdHxkT3wUvPTCprtcWbUJD3znC0P; remixlgck=a900ee1aa12896b00d; remixua=43%7C-1%7C214%7C2987383930
Source: global traffic	HTTP traffic detected: GET /ping HTTP/1.1Host: ws-broker-service.us-west-2.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping HTTP/1.1Host: ws-broker-service.us-west-2.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ap/signin?_encoding=UTF8&openid.assoc_handle=imdb_us&openid.claimed_id=http%3a%2f%2fspecs.openid.net%2fauth%2f2.0%2fidentifier_select&openid.identity=http%3a%2f%2fspecs.openid.net%2fauth%2f2.0%2fidentifier_select&openid.mode=checkid_setup&openid.ns=http%3a%2f%2fspecs.openid.net%2fauth%2f2.0&openid.pape.max_auth_age=10000000&openid.return_to=https%3a%2f%2fwww.imdb.com%2ffavicon.ico HTTP/1.1Host: www.imdb.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?next=https%3A%2F%2Fm.facebook.com%2F&refsrc=deprecated&_rdr HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?next=https%3A%2F%2Fm.facebook.com%2F&refsrc=deprecated&_rdr HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login?rt=L&rp=%2ffavicon.ico&step=confirmation HTTP/1.1Host: accounts.craigslist.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ping HTTP/1.1Host: ws-broker-service.us-west-2.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?to=ZmF2aWNvbi5pY28- HTTP/1.1Host: vk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: remixlang=3; remixstlid=9070584652967973254_mnjrB69IMZ6oBwHNdHxkT3wUvPTCprtcWbUJD3znC0P; remixlgck=a900ee1aa12896b00d; remixua=43%7C-1%7C214%7C2987383930; remixstid=592023190_96kIY7SAVoZUZJP16tUK0IzIelNfYo8zuZu57LMa4Ez; remixrefkey=d5bd82eca1c665aa9b
Source: global traffic	HTTP traffic detected: GET /login.php?next=https%3A%2F%2Fm.facebook.com%2F&refsrc=deprecated&_rdr HTTP/1.1Host: m.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login.php?next=https%3A%2F%2Fm.facebook.com%2F&refsrc=deprecated&_rdr HTTP/1.1Host: m.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obseu.7roundprince.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=6438bdec51f10f97b581b4ebc5ecefc9
Source: global traffic	HTTP traffic detected: GET /?next=https%3A%2F%2Fm.facebook.com%2F&refsrc=deprecated&_rdr HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?next=https%3A%2F%2Fm.facebook.com%2F&refsrc=deprecated&_rdr HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /btn_win_1735204076.svg+xml HTTP/1.1Host: cdn.protectonow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=fda95280-d38e-11ef-bc27-c22fbff8fb28; uid_cross=fda95280-d38e-11ef-bc27-c22fbff8fb28; mid=f28d8534-d38e-11ef-93a7-aab196f2f20d; utm_source=adx_ext_download_prot_smrtsp___5e460bab; utm_source_cross=adx_ext_download_prot_smrtsp___5e460bab; p2088478120=144748304; sid=f28d8534-d38e-11ef-93a7-aab196f2f20d; sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; _cq_duid=1.1736979657.TvALYahdnYzqGls0; _cq_suid=1.1736979657.eNPi4xFKiCjhbtvd
Source: global traffic	HTTP traffic detected: GET /lottie_2_a_1735132522.json HTTP/1.1Host: cdn.protectonow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://get4.protectonow.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lottie_2_b_1735132522.json HTTP/1.1Host: cdn.protectonow.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://get4.protectonow.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://get4.protectonow.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login.php?next=https%3A%2F%2Fm.facebook.com%2F&refsrc=deprecated&_rdr HTTP/1.1Host: m.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login.php?next=https%3A%2F%2Fm.facebook.com%2F&refsrc=deprecated&_rdr HTTP/1.1Host: m.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /btn_win_1735204076.svg+xml HTTP/1.1Host: cdn.protectonow.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=fda95280-d38e-11ef-bc27-c22fbff8fb28; uid_cross=fda95280-d38e-11ef-bc27-c22fbff8fb28; mid=f28d8534-d38e-11ef-93a7-aab196f2f20d; utm_source=adx_ext_download_prot_smrtsp___5e460bab; utm_source_cross=adx_ext_download_prot_smrtsp___5e460bab; p2088478120=144748304; sid=f28d8534-d38e-11ef-93a7-aab196f2f20d; sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; _cq_duid=1.1736979657.TvALYahdnYzqGls0; _cq_suid=1.1736979657.eNPi4xFKiCjhbtvd
Source: global traffic	HTTP traffic detected: GET /?next=https%3A%2F%2Fm.facebook.com%2F&refsrc=deprecated&_rdr HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?next=https%3A%2F%2Fm.facebook.com%2F&refsrc=deprecated&_rdr HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obseu.7roundprince.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=6438bdec51f10f97b581b4ebc5ecefc9
Source: global traffic	HTTP traffic detected: GET /nN2TcE8GMLPezErz6w5W-PB6k8tpgqYQwDK_ztbu5-RW9t4BvzG1t6GlJ6YelK4_4REzeFOihB5lhTt5VRGZd_is=s60 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise/reload?k=6LfkWDYqAAAAAJvAuJELqQLg85Lg8zAp-k7w8siS HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AGVEItcqPAGgDz9R39TCtyf0ykP6PrOJeBtLeY1yZYy_jeEXom3zBSuoQdBBL3lYEV4hx8-grTTDGmKO5HBOj-g; NID=520=IAVM4TEnE7iB2heoyAK8bUBmssZBJ9HtY7iqh_pGj86sZkMGT-kketGiRZdONFMD-Ktto8VGnNIbmYrX73frEs2BerJRIH2L3CYyDy_jk4ejEcPK6VF2LGYzqJuLG2YMtwCfDMJ39-a1V1oE-Iso6oUytohjs82ueqFP4fC5IkuuVZgBwDiPk9z2yfytFg
Source: global traffic	HTTP traffic detected: GET /0nQtqVz_nvTu--u9xv7fTgdxle_nhvLuozE_euJlo8Vz8a-9kkkMPQps-OTUd4nIGQw3vs9fE7ERcL3lI2uiq-KgsgM=s275-w275-h175 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /BKHuX2DD95zO1DoQSIHyXH8_F9Ik4ADuI1XxoAT5L2OTASpb1WOd69fnhHBop3GdxSYFFkLGQS-h8atDYI5f9nhd6fo=s275-w275-h175 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kthxNShwMYLSZFOKTNPGLHvbrqlqgZ4P8nRvtOM2YvRsI_iN15aPS8-plCCn8H6jPpuWNS6yLjVcqQwJCAASb2iy=s275-w275-h175 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /FHttL1Pz951zHElWjx4j6u1_BY3GEeXLsfZFrWYilHM5mr5YetXvFnxg_B-P5heOsymqcYv_ZHxpozUVQOFLtantkw=s275-w275-h175 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sXqrFJhwlJsMvvJjhSVy2ykEBnWq07nXuJOjNVx4MMRRZAM-lD49906qnccjpcuacrYtAzt05oXRzYzEIQR7p-qfWw=s275-w275-h175 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vqhAd_lufZkkSsSvR1Pmt6J2vprUgpe9mBlBn0ym67AlBwW6d8X0JJzMBWDhCylteZIziZPzAJe46sATxOZfGRGo=s275-w275-h175 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise/clr?k=6LfkWDYqAAAAAJvAuJELqQLg85Lg8zAp-k7w8siS HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AGVEItcqPAGgDz9R39TCtyf0ykP6PrOJeBtLeY1yZYy_jeEXom3zBSuoQdBBL3lYEV4hx8-grTTDGmKO5HBOj-g; NID=520=IAVM4TEnE7iB2heoyAK8bUBmssZBJ9HtY7iqh_pGj86sZkMGT-kketGiRZdONFMD-Ktto8VGnNIbmYrX73frEs2BerJRIH2L3CYyDy_jk4ejEcPK6VF2LGYzqJuLG2YMtwCfDMJ39-a1V1oE-Iso6oUytohjs82ueqFP4fC5IkuuVZgBwDiPk9z2yfytFg
Source: global traffic	HTTP traffic detected: GET /QIS6-nC9cFHkmg07ddwwblOq2Z_NZYP4k1Odsp6mPopMQhrQZtoclOZmHbigOCWbvUoJcOTrIjvnMpr5iaeE8kTH=s275-w275-h175 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /MUdE5q8Y9INai_J-IONHSquUfvECl-yO-WBvTD6fOoNmR2iyAryh9nqYOpYW6DuWuYTOxHi6PBTq79ffeVq9BvJV-I8=s275-w275-h175 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /49X_jZPODshK81NcE2VTAn7jtIuCGi3bo2PH8UdQ8YV-X-3W8ik7UDMK1DFB7HO4uqZPhfZn6pki3HWeE2DMN204tg=s275-w275-h175 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /VflcyYKNiX81FYhjH8SofMF0O-CPgL7K-IQ-9eLjJEav9S3ip87NFX2ZPIvH_WJu85srQH4JWVNT35vKe-QfcQce4Q=s275-w275-h175 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SkcnoY_VoqWsdNnku3ClBCPmc7RbouAiM5gfiO1zQ9cpMtswb7SCIklPv2pp73nkDPNpOXvj4uGh1UEkeNO2aRd80A=s275-w275-h175 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2xJU2w7BQ2OUHsQwFNLOl3wbGd0rtPUuMJI1Um242S6N-acN0xG6Syj1jL17gxLKb3RMKwn6fajnFJISLQ8KCmP0yw=s275-w275-h175 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j-eBhzua_ZWgA6PQoz_0eYIenmIJxLebpoAVM818kY2qeWu2oE70aXG2XR1JGfDXkPFcHbLoDoItv4iLnnUBYee3=s1280-w1280-h800 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://chromewebstore.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mon HTTP/1.1Host: obseu.7roundprince.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cg_uuid=6438bdec51f10f97b581b4ebc5ecefc9
Source: global traffic	HTTP traffic detected: GET /js/googleapis.proxy.js?onload=startup HTTP/1.1Host: apis.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=g5C5DWn9iisNcNEgWgCcabmaxT35c2dMBKSohzv8g0ZLFxD6J0CatfTvgHo-_XaimQJZIER7cnlZEROvxLpnqCvadHyJMNTI7ZAqL2m1VE2FjRcG9CJeUY19WSswccMcl6DEpZQNoz3ymKj3tvgPz_Boz37YNYhRcZL4SG9e6oc5OPTvg9o3fbHwc6Yk-G9dW1ltHg
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.l2ZUC8FxqV8.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9xAAkaXO7Lqf7-9uTpZLtrkpWaXQ/cb=gapi.loaded_0?le=scs HTTP/1.1Host: apis.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=g5C5DWn9iisNcNEgWgCcabmaxT35c2dMBKSohzv8g0ZLFxD6J0CatfTvgHo-_XaimQJZIER7cnlZEROvxLpnqCvadHyJMNTI7ZAqL2m1VE2FjRcG9CJeUY19WSswccMcl6DEpZQNoz3ymKj3tvgPz_Boz37YNYhRcZL4SG9e6oc5OPTvg9o3fbHwc6Yk-G9dW1ltHg
Source: global traffic	HTTP traffic detected: GET /nN2TcE8GMLPezErz6w5W-PB6k8tpgqYQwDK_ztbu5-RW9t4BvzG1t6GlJ6YelK4_4REzeFOihB5lhTt5VRGZd_is HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_207.2.dr	String found in binary or memory: <p>Once you've done this, you can try to <a href="/signin">sign in again</a>.</p> </div></div><div id="overlay"></div></div><footer data-qa="footer"><section class="links"><div class="grid"><div class="col span_1_of_4 nav_col"><ul><li class="cat_1">Using Slack</li><li><a href="/is" data-qa="product_footer" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_product">Product</a></li><li><a href="/enterprise" data-qa="enterprise_footer" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_enterprise">Enterprise</a></li><li><a href="/pricing?ui_step=28&ui_element=5" data-qa="pricing_footer" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_pricing">Pricing</a></li><li><a href="https://get.slack.help/hc/en-us" data-qa="support_footer" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_support">Support</a></li><li><a href="/guides" data-qa="getting_started" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_getting_started">Slack Guides</a></li><li><a href="/marketplace" data-qa="app_directory" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_app_directory">Slack Marketplace</a></li><li><a href="https://api.slack.com/" data-qa="api" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_api">API</a></li></ul></div><div class="col span_1_of_4 nav_col"><ul><li class="cat_2">Slack <ts-icon class="ts_icon_heart"></ts-icon></li><li><a href="/careers" data-qa="jobs" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_jobs">Jobs</a></li><li><a href="/customers" data-qa="customers" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_customers">Customers</a></li><li><a href="/developers" data-qa="developers" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_developers">Developers</a></li><li><a href="/events" data-qa="events" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_events">Events</a></li><li><a href="https://slackhq.com/" data-qa="blog_footer" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_blog">Blog</a></li></ul></div><div class="col span_1_of_4 nav_col"><ul><li class="cat_3">Legal</li><li><a href="/privacy-policy" data-qa="privacy" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_privacy">Privacy</a></li><li><a href="/trust/security" data-qa="security" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_security">Security</a></li><li><a href="/terms-of-service" data-qa="tos" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_tos">Terms of Service</a></li><li><a href="/legal" data-qa="policies" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_policies">Policies</a></li></ul></div><div class="col span_1_of_4 nav_col"><ul><li class="cat_4">Handy Links</li><li><a href="/downloads" data-qa="downloads" data-clog-event="WEBSITE_CLICK" data-clog
Source: chromecache_207.2.dr	String found in binary or memory: <p>Once you've done this, you can try to <a href="/signin">sign in again</a>.</p> </div></div><div id="overlay"></div></div><footer data-qa="footer"><section class="links"><div class="grid"><div class="col span_1_of_4 nav_col"><ul><li class="cat_1">Using Slack</li><li><a href="/is" data-qa="product_footer" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_product">Product</a></li><li><a href="/enterprise" data-qa="enterprise_footer" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_enterprise">Enterprise</a></li><li><a href="/pricing?ui_step=28&ui_element=5" data-qa="pricing_footer" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_pricing">Pricing</a></li><li><a href="https://get.slack.help/hc/en-us" data-qa="support_footer" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_support">Support</a></li><li><a href="/guides" data-qa="getting_started" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_getting_started">Slack Guides</a></li><li><a href="/marketplace" data-qa="app_directory" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_app_directory">Slack Marketplace</a></li><li><a href="https://api.slack.com/" data-qa="api" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_api">API</a></li></ul></div><div class="col span_1_of_4 nav_col"><ul><li class="cat_2">Slack <ts-icon class="ts_icon_heart"></ts-icon></li><li><a href="/careers" data-qa="jobs" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_jobs">Jobs</a></li><li><a href="/customers" data-qa="customers" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_customers">Customers</a></li><li><a href="/developers" data-qa="developers" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_developers">Developers</a></li><li><a href="/events" data-qa="events" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_events">Events</a></li><li><a href="https://slackhq.com/" data-qa="blog_footer" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_blog">Blog</a></li></ul></div><div class="col span_1_of_4 nav_col"><ul><li class="cat_3">Legal</li><li><a href="/privacy-policy" data-qa="privacy" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_privacy">Privacy</a></li><li><a href="/trust/security" data-qa="security" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_security">Security</a></li><li><a href="/terms-of-service" data-qa="tos" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_tos">Terms of Service</a></li><li><a href="/legal" data-qa="policies" data-clog-event="WEBSITE_CLICK" data-clog-params="click_target=footer_policies">Policies</a></li></ul></div><div class="col span_1_of_4 nav_col"><ul><li class="cat_4">Handy Links</li><li><a href="/downloads" data-qa="downloads" data-clog-event="WEBSITE_CLICK" data-clog
Source: chromecache_366.2.dr	String found in binary or memory:   <span aria-hidden="true">\|</span>  <a href="https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.facebook.com%2FSteam" target="_blank" rel=" noopener"><img src="https://store.fastly.steamstatic.com/public/images/ico/ico_facebook.png" alt="Facebook"> Steam</a> equals www.facebook.com (Facebook)
Source: chromecache_384.2.dr	String found in binary or memory: }</script><script async src="https://www.googletagmanager.com/gtag/js?id=AW-10805689966"></script><script>function gtag(){dataLayer.push(arguments)}window.dataLayer=window.dataLayer\|\|[],gtag("js",new Date),gtag("config","AW-10805689966")</script><script type="text/javascript">!function(e){if(!window.pintrk){window.pintrk=function(){window.pintrk.queue.push(Array.prototype.slice.call(arguments))};var n=window.pintrk;n.queue=[],n.version="3.0";var t=document.createElement("script");t.async=!0,t.src="https://s.pinimg.com/ct/core.js";var r=document.getElementsByTagName("script")[0];r.parentNode.insertBefore(t,r)}}(),pintrk("load","2613922701259"),pintrk("page")</script><noscript><img height="1" width="1" style="display:none" alt="" src="https://ct.pinterest.com/v3/?tid=2613922701259&noscript=1"/></noscript><script>window.pintrk&&pintrk("track","pagevisit")</script><script>!function(e,t,n,c,o,a,f){e.fbq\|\|(o=e.fbq=function(){o.callMethod?o.callMethod.apply(o,arguments):o.queue.push(arguments)},e._fbq\|\|(e._fbq=o),(o.push=o).loaded=!0,o.version="2.0",o.queue=[],(a=t.createElement(n)).async=!0,a.src="https://connect.facebook.net/en_US/fbevents.js",(f=t.getElementsByTagName(n)[0]).parentNode.insertBefore(a,f))}(window,document,"script"),fbq("init","324942534599956"),fbq("track","PageView")</script><noscript><img height="1" width="1" style="display:none" src="https://www.facebook.com/tr?id=324942534599956&ev=PageView&noscript=1"/></noscript><script>!function(t,h,e,j,s,n){t.hj=t.hj\|\|function(){(t.hj.q=t.hj.q\|\|[]).push(arguments)},t._hjSettings={hjid:3105627,hjsv:6},s=h.getElementsByTagName("head")[0],(n=h.createElement("script")).async=1,n.src="https://static.hotjar.com/c/hotjar-"+t._hjSettings.hjid+".js?sv="+t._hjSettings.hjsv,s.appendChild(n)}(window,document)</script><script>const testImages = { equals www.facebook.com (Facebook)
Source: chromecache_294.2.dr	String found in binary or memory: </style><meta property="fb:app_id" content="138566025676"/><meta property="og:site_name" content="Airbnb"/><meta property="og:locale" content="en_US"/><meta property="og:url" content="https://www.airbnb.com/login"/><meta property="og:title" content="Log In / Sign Up - Airbnb"/><meta property="og:description" content="Join a global community of travelers and local hosts on Airbnb. Log in with your email address, Facebook, or Google."/><meta property="og:type" content="website"/><meta property="og:image" content="https://a0.muscache.com/im/pictures/fe7217ff-0b24-438d-880d-b94722c75bf5.jpg"/><meta name="robots" content="noindex, nofollow"/><meta name="description" content="Join a global community of travelers and local hosts on Airbnb. Log in with your email address, Facebook, or Google."/><title>Log In / Sign Up - Airbnb</title><link rel="manifest" href="/manifest.json"/><meta name="twitter:card" content="summary"/><meta name="twitter:title" content="Log In / Sign Up - Airbnb"/><meta name="twitter:site" content="@airbnb"/><meta name="twitter:app:name:iphone" content="Airbnb"/><meta name="twitter:app:name:ipad" content="Airbnb"/><meta name="twitter:app:name:googleplay" content="Airbnb"/><meta name="twitter:app:id:iphone" content="401626263"/><meta name="twitter:app:id:ipad" content="401626263"/><meta name="twitter:app:id:googleplay" content="com.airbnb.android"/><meta name="twitter:url" content="https://www.airbnb.com/login"/><script id="data-apollo-state" data-apollo-state="true" type="application/json">{}</script><script id="data-flagger_cdn_experiments" data-flagger_cdn_experiments="true" type="application/json">{"flagger_cdn_experiments":[]}</script><script id="aphrodite-classes" type="application/json">["_is5jnq","_1k81gub","_siy8gh","_vuzcgs","_176ugpa","_3hmsj","_pvfq6t","_z5mecy","_88xxct","_qrzeuh","_1y9y8er","_7lvai1","_gt7qdv","_2ftibv","_1tpjx2u","_je2ned","_15sn973","_1vk19cb","_1n35162","_kh8wuv","_k3vzc58","_1l63kxf","_88sa87","_tcop0t","_fvfsqm","_bc4egv","_jwti9r","_1udzt2s","_qr5vxk","_15m7xnk","_wxdo12","_1fqnaqg","_1sv27e6","_ar9stc","_jro6t0","_3qymq","_sovp2k","_xmk1z0p","_j8ldew","_pd8gea","_1fx0lfx","_lldyhy","_zlfm26","_1sbp7g1","_1p4noobx","_115qwnm","_1xbvnt9","_j7hlqym"]</script></head><body class="with-new-header"><div id="site-skip-links"><a class="screen-reader-only screen-reader-only-focusable skip-to-content" data-hook="skip-to-content" href="#site-content" tabindex="0">Skip to content</a><span id="popups-everywhere-skip-link"></span></div><div id="smart-banner"></div><noscript><div class="alert alert-with-icon alert-error no-js-alert" data-nosnippet="true"><i class="icon alert-icon icon-alert-alt"></i>We equals www.facebook.com (Facebook)
Source: chromecache_360.2.dr	String found in binary or memory: <li class="fb"><a href="https://www.facebook.com/softwareinformercom/" rel="noopener" target="_blank">FB</a></li> equals www.facebook.com (Facebook)
Source: chromecache_283.2.dr	String found in binary or memory: <span class='fb-custom social-wrapper' data-href='https://www.facebook.com/sharer.php?u=http://workspaceupdates.googleblog.com/2023/04/new-community-features-for-google-chat-and-an-update-currents%20.html'> equals www.facebook.com (Facebook)
Source: chromecache_248.2.dr, chromecache_238.2.dr, chromecache_377.2.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},Nk:function(){e=nb()},Kd:function(){d()}}};var Vb=wa(["data-gtm-yt-inspected-"]),SE=["www.youtube.com","www.youtube-nocookie.com"],TE,UE=!1; equals www.youtube.com (Youtube)
Source: chromecache_248.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=xC(a,c,e);U(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return U(122),!0;if(d&&f){for(var m=yb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},AC=function(){var a=[],b=function(c){return bb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_248.2.dr, chromecache_238.2.dr, chromecache_377.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Kh:e,Ih:f,Jh:g,ri:k,si:m,bf:n,Mb:b},q=A.YT;if(q)return q.ready&&q.ready(d),b;var r=A.onYouTubeIframeAPIReady;A.onYouTubeIframeAPIReady=function(){r&&r();d()};H(function(){for(var u=E.getElementsByTagName("script"),v=u.length,t=0;t<v;t++){var w=u[t].getAttribute("src");if(cF(w,"iframe_api")\|\|cF(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!UE&&aF(x[B],p.bf))return lc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_232.2.dr, chromecache_195.2.dr	String found in binary or memory: inline:{css:1},disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"}, equals www.youtube.com (Youtube)
Source: chromecache_248.2.dr	String found in binary or memory: var eE=function(a,b,c,d,e){var f=VB("fsl",c?"nv.mwt":"mwt",0),g;g=c?VB("fsl","nv.ids",[]):VB("fsl","ids",[]);if(!g.length)return!0;var k=$B(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);U(121);if(m==="https://www.facebook.com/tr/")return U(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!FA(k,HA(b, equals www.facebook.com (Facebook)
Source: chromecache_350.2.dr	String found in binary or memory: xf=y(["https://sandbox.google.com/tools/feedback/"]),yf=y(["https://www.google.cn/tools/feedback/"]),zf=y(["https://help.youtube.com/tools/feedback/"]),Af=y(["https://asx-frontend-staging.corp.google.com/inapp/"]),Bf=y(["https://asx-frontend-staging.corp.google.com/tools/feedback/"]),Cf=y(["https://localhost.corp.google.com/inapp/"]),Df=y(["https://localhost.proxy.googlers.com/inapp/"]),Ef=S(ff),Ff=[S(gf),S(hf)],Gf=[S(jf),S(kf),S(lf),S(mf),S(nf),S(of),S(pf),S(qf),S(rf),S(sf)],Hf=[S(tf),S(uf)],If= equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: nuance-pdf-professional2.software.informer.com
Source: global traffic	DNS traffic detected: DNS query: img.informer.com
Source: global traffic	DNS traffic detected: DNS query: hits.informer.com
Source: global traffic	DNS traffic detected: DNS query: software.informer.com
Source: global traffic	DNS traffic detected: DNS query: i.informer.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: g.bidbrain.app
Source: global traffic	DNS traffic detected: DNS query: cdn.bidbrain.app
Source: global traffic	DNS traffic detected: DNS query: serve.bidbrain.app
Source: global traffic	DNS traffic detected: DNS query: fundingchoicesmessages.google.com
Source: global traffic	DNS traffic detected: DNS query: g4.bidbrain.app
Source: global traffic	DNS traffic detected: DNS query: g6.bidbrain.app
Source: global traffic	DNS traffic detected: DNS query: ep1.adtrafficquality.google
Source: global traffic	DNS traffic detected: DNS query: ep2.adtrafficquality.google
Source: global traffic	DNS traffic detected: DNS query: get4.protectonow.com
Source: global traffic	DNS traffic detected: DNS query: adclick.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: cdn.protectonow.com
Source: global traffic	DNS traffic detected: DNS query: g.protectonow.com
Source: global traffic	DNS traffic detected: DNS query: euob.7roundprince.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: obseu.7roundprince.com
Source: global traffic	DNS traffic detected: DNS query: m.facebook.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: ws-broker-service.us-east-1.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: ws-broker-service.us-west-2.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: stun.l.google.com
Source: global traffic	DNS traffic detected: DNS query: medium.com
Source: global traffic	DNS traffic detected: DNS query: squareup.com
Source: global traffic	DNS traffic detected: DNS query: twitter.com
Source: global traffic	DNS traffic detected: DNS query: plus.google.com
Source: global traffic	DNS traffic detected: DNS query: login.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: app.squareup.com
Source: global traffic	DNS traffic detected: DNS query: www.reddit.com
Source: global traffic	DNS traffic detected: DNS query: x.com
Source: global traffic	DNS traffic detected: DNS query: www.tumblr.com
Source: global traffic	DNS traffic detected: DNS query: www.expedia.de
Source: global traffic	DNS traffic detected: DNS query: workspaceupdates.googleblog.com
Source: global traffic	DNS traffic detected: DNS query: www.dropbox.com
Source: global traffic	DNS traffic detected: DNS query: www.amazon.com
Source: global traffic	DNS traffic detected: DNS query: www.pinterest.com
Source: global traffic	DNS traffic detected: DNS query: eu.battle.net
Source: global traffic	DNS traffic detected: DNS query: store.steampowered.com
Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: slack.com
Source: global traffic	DNS traffic detected: DNS query: www.paypal.com
Source: global traffic	DNS traffic detected: DNS query: 500px.com
Source: global traffic	DNS traffic detected: DNS query: www.airbnb.com
Source: global traffic	DNS traffic detected: DNS query: disqus.com
Source: global traffic	DNS traffic detected: DNS query: secure.meetup.com
Source: global traffic	DNS traffic detected: DNS query: bitbucket.org
Source: global traffic	DNS traffic detected: DNS query: secure.indeed.com
Source: global traffic	DNS traffic detected: DNS query: vk.com
Source: global traffic	DNS traffic detected: DNS query: www.twitch.tv
Source: global traffic	DNS traffic detected: DNS query: accounts.craigslist.org
Source: global traffic	DNS traffic detected: DNS query: www.imdb.com
Source: global traffic	DNS traffic detected: DNS query: www.meetup.com
Source: global traffic	DNS traffic detected: DNS query: chromewebstore.google.com
Source: global traffic	DNS traffic detected: DNS query: lh3.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: scone-pa.clients6.google.com

Source: unknown

HTTP traffic detected: POST /rtimp HTTP/1.1Host: g.bidbrain.appConnection: keep-aliveContent-Length: 2036sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://googleads.g.doubleclick.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://googleads.g.doubleclick.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closex-xss-protection: 1; mode=blockx-content-type-options: nosniffstrict-transport-security: max-age=63072000; includeSubDomains; preloadx-ua-compatible: IE=edgereporting-endpoints: coop-endpoint="https://www.pinterest.com/_/_/coop_report/", coep-endpoint="https://www.pinterest.com/_/_/coep_report/"cross-origin-opener-policy-report-only: same-origin; report-to="coop-endpoint"set-cookie: csrftoken=c60a1ce73e66702cfef2361c6b0aa8b8; path=/; expires=Thu, 15 Jan 2026 22:21:05 GMT; samesite=lax; secureset-cookie: _pinterest_sess=TWc9PSZsNmg3K29zWS83d3hBR3FqSEcvK201eE0wV1hQcnNrdExLU0NtdGRUL084bmJzN2FGQzRQcHUvTHNhMzFCZTBDR2JpR0l0WG5zSytZZzFWdVE5QXFkc0ZMNmt1YXBPSlRBNWVDUndDNDIyVT0mY0o4Q3JiU2JZTXFMaFljNFNrUHI0dTUvZDJ3PQ==; path=/; expires=Sat, 10 Jan 2026 22:21:05 GMT; domain=.pinterest.com; samesite=none; secure; httponlyset-cookie: _auth=0; path=/; expires=Sat, 10 Jan 2026 22:21:05 GMT; domain=.pinterest.com; secure; httponlyp3p: CP="This is not a P3P policy. See https://www.pinterest.com/_/_/help/articles/pinterest-and-p3p for more info."
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 15 Jan 2025 22:21:07 GMTContent-Type: text/html;charset=UTF-8Transfer-Encoding: chunkedConnection: closeSet-Cookie: CTK=; Max-Age=0; Path=/; Secure; SameSite=Nonevary: Originvary: Access-Control-Request-Methodvary: Access-Control-Request-Headersx-frame-options: SAMEORIGINcontent-security-policy: upgrade-insecure-requests; frame-ancestors https://indeed.com https://*.indeed.comstrict-transport-security: max-age=86400pragma: no-cacheCache-Control: no-store, no-cache, must-revalidate, privateexpires: Wed, 15 Jan 2025 22:20:07 GMTcontent-language: en-USCF-Cache-Status: DYNAMICSet-Cookie: CTK=1ihm0smkljcli800; Domain=.indeed.com; Max-Age=157680000; Path=/; Secure; SameSite=NoneSet-Cookie: SURF=L15qlqeydX57jMJwiTCor0L8B8mRrtdf; Domain=.indeed.com; Expires=Wed, 22 Jan 2025 22:21:07 GMT; Path=/; Secure; HttpOnlySet-Cookie: __cf_bm=XVZED35ik4IcsPADKRZQSUrp7Q7DJFd5qfLFJNL2dKE-1736979667-1.0.1.1-tCvNRGXtL7maSUCXmAKg_3vza_pgxLuUhs40pQfC3qnGK5HQtByizPOAQLlmv.ImDAJied7_p6V5PeScq.tahQ; path=/; expires=Wed, 15-Jan-25 22:51:07 GMT; domain=.indeed.com; HttpOnly; Secure; SameSite=NoneSet-Cookie: __cflb=0H28v9ueys8DmBCU6XVKET5P25SoAHyMoHahgNbxQUL; SameSite=None; Secure; path=/; expires=Thu, 16-Jan-25 21:21:07 GMT; HttpOnly
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: closeContent-Length: 718Content-Type: text/html;charset=utf-8Server: DataDomeX-DataDome: protectedAccept-CH: Sec-CH-UA,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-Device-MemoryCharset: utf-8Cache-Control: max-age=0, private, no-cache, no-store, must-revalidatePragma: no-cacheAccess-Control-Allow-Credentials: trueAccess-Control-Expose-Headers: x-dd-b, x-set-cookieAccess-Control-Allow-Origin: *X-DataDome-CID: AHrlqAAAAAMAztJwa_OoWHcACC57vQ==X-DD-B: 1Set-Cookie: datadome=_ytUD3uhZhfex2S4yH9hAPt3qlrurjZD6TWm7CkfgnkKFBS4iDMam6Uss0Y5nRDuvddJfZRbNqYljSLalC9LhZrgUYSgHFMvCy9FifVHINg59jyVESkuZfFAKB16wi~_; Max-Age=2592000; Domain=.paypal.com; Path=/; Secure; SameSite=LaxAccept-Ranges: bytesDate: Wed, 15 Jan 2025 22:21:07 GMTVia: 1.1 varnishPaypal-Debug-Id: f456470014759Strict-Transport-Security: max-age=63072000; includeSubDomains; preloadX-Served-By: cache-ewr-kewr1740022-EWRX-Cache: MISSX-Cache-Hits: 0X-Timer: S1736979668.753533,VS0,VE18set-cookie: ddbc=1; secure; httponlyServer-Timing: content-encoding;desc="",x-cdn;desc="fastly"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundX-Content-Type-Options: nosniffX-Xss-Protection: 1; mode=blockAtl-Traceid: e79e86ff298342ce9e14486017388583Atl-Request-Id: e79e86ff-2983-42ce-9e14-486017388583Strict-Transport-Security: max-age=63072000; includeSubDomains; preloadReport-To: {"endpoints": [{"url": "https://dz8aopenkvv6s.cloudfront.net"}], "group": "endpoint-1", "include_subdomains": true, "max_age": 600}Nel: {"failure_fraction": 0.001, "include_subdomains": true, "max_age": 600, "report_to": "endpoint-1"}Access-Control-Allow-Origin: *Content-Length: 19046Content-Type: text/htmlVary: Accept-EncodingServer-Timing: atl-edge;dur=1,atl-edge-internal;dur=2,atl-edge-upstream;dur=0,atl-edge-pop;desc="aws-eu-central-1"Date: Wed, 15 Jan 2025 22:21:07 GMTServer: AtlassianEdgeConnection: close

Source: chromecache_288.2.dr	String found in binary or memory: http://csi.gstatic.com/csi
Source: chromecache_412.2.dr, chromecache_225.2.dr	String found in binary or memory: http://google.com
Source: chromecache_284.2.dr, chromecache_412.2.dr, chromecache_225.2.dr, chromecache_301.2.dr	String found in binary or memory: http://googleads.g.doubleclick.net
Source: chromecache_350.2.dr	String found in binary or memory: http://localhost.corp.google.com/inapp/
Source: chromecache_350.2.dr	String found in binary or memory: http://localhost.proxy.googlers.com/inapp/
Source: chromecache_412.2.dr, chromecache_225.2.dr	String found in binary or memory: http://mathiasbynens.be/
Source: chromecache_284.2.dr, chromecache_412.2.dr, chromecache_225.2.dr, chromecache_301.2.dr	String found in binary or memory: http://pagead2.googlesyndication.com
Source: chromecache_283.2.dr	String found in binary or memory: http://schema.org/Blog
Source: chromecache_283.2.dr	String found in binary or memory: http://schema.org/BlogPosting
Source: chromecache_283.2.dr	String found in binary or memory: http://schema.org/Person
Source: chromecache_283.2.dr	String found in binary or memory: http://twitter.com/share?text=Google
Source: chromecache_366.2.dr	String found in binary or memory: http://twitter.com/steam
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2021/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2021/02/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2021/03/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2021/04/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2021/05/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2021/06/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2021/07/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2021/08/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2021/09/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2021/10/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2021/11/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2021/12/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2022/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2022/01/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2022/02/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2022/03/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2022/04/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2022/05/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2022/06/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2022/07/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2022/08/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2022/09/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2022/10/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2022/11/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2022/12/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2023/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2023/01/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2023/02/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2023/03/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2023/04/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2023/04/new-community-features-for-google-chat-and-an-update-
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2023/04/set-default-label-values-for-files-in.html
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2023/04/streamlined-file-organization-google-drive-location-p
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2023/05/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2023/06/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2023/07/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2023/08/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2023/09/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2023/10/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2023/11/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2023/12/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2024/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2024/01/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2024/02/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2024/03/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2024/04/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2024/05/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2024/06/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2024/07/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2024/08/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2024/09/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2024/10/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2024/11/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2024/12/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2025/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/2025/01/
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/feeds/5157300376140296114/comments/default
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/feeds/posts/default
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/feeds/posts/default?alt=rss
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/API
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Accessibility
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Accounts
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Additional%20Google%20services
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Admin%20SDK
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Admin%20console
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Alpha
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Android
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/App%20Maker
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/AppSheet
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Assistant
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Bet
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Beta
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/BigQuery
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Chrome
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Cloud%20Search
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Colab
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Contacts
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Currents
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/DLP
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Developer
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Directory%20Sync
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Docs
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Drive%20for%20desktop
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Duet%20AI
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Editors
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Education%20Edition
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/End-user
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/G%20Suite
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/G%20Suite%20for%20Education
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/G%20Suite%20for%20Government
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Gemini
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Gmail
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Google%20Apps%20Script
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Google%20Calendar
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Google%20Chat
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Google%20Classroom
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Google%20Cloud%20Directory%20Sync
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Google%20Docs
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Google%20Drawings
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Google%20Drive
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Google%20Forms
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Google%20Hangouts
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Google%20Keep
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Google%20Maps
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Google%20Meet
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Google%20Meet%20Hardware
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Google%20Photos
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Google%20Sheets
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Google%20Sites
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Google%20Slides
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Google%20Tasks
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Google%20Vault
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Google%20Vids
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Google%20Voice
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Google%20Workspace
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Google%20Workspace%20Add-ons
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Google%20Workspace%20Marketplace
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Google%20Workspace%20Migrate
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Google%20Workspace%20for%20Education
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Groups
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Identity
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Jamboard
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/MDM
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Marketplace
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Microsoft%20Exchange
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Microsoft%20Outlook
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Migration
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Mobile
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Next%202023
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/NotebookLM
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Other
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Premier%20Edition
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Rapid
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Rapid%20Release
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Rapid%20Releases
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/SAML
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/SSO
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Scheduled%20Release
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Security%20and%20Compliance
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/Weekly%20Recap
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/What%27s%20New
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/YouTube
Source: chromecache_283.2.dr	String found in binary or memory: http://workspaceupdates.googleblog.com/search/label/iOS
Source: chromecache_300.2.dr, chromecache_351.2.dr, chromecache_191.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_213.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_366.2.dr	String found in binary or memory: http://www.steampowered.com/steamworks/
Source: chromecache_366.2.dr	String found in binary or memory: http://www.valvesoftware.com
Source: chromecache_366.2.dr	String found in binary or memory: http://www.valvesoftware.com/about
Source: chromecache_366.2.dr	String found in binary or memory: http://www.valvesoftware.com/legal.htm
Source: chromecache_207.2.dr	String found in binary or memory: http://www.whatarecookies.com/enable.asp
Source: chromecache_283.2.dr	String found in binary or memory: https://2542116.fls.doubleclick.net/activityi;src=2542116;type=gblog;cat=googl0;ord=ord=
Source: chromecache_207.2.dr	String found in binary or memory: https://a.slack-edge.com/0311ec2/style/rollup-slack_kit_helpers.css
Source: chromecache_207.2.dr	String found in binary or memory: https://a.slack-edge.com/2e88f6d/style/libs/lato-2-compressed.css
Source: chromecache_207.2.dr	String found in binary or memory: https://a.slack-edge.com/7250118/style/rollup-slack_kit_legacy_adapters.css
Source: chromecache_207.2.dr	String found in binary or memory: https://a.slack-edge.com/80588/img/emoji_2017_12_06/sheet_apple_64_indexed_256.png
Source: chromecache_207.2.dr	String found in binary or memory: https://a.slack-edge.com/80588/img/emoji_2017_12_06/sheet_google_64_indexed_256.png
Source: chromecache_207.2.dr	String found in binary or memory: https://a.slack-edge.com/80588/marketing/img/meta/favicon-32.png
Source: chromecache_207.2.dr	String found in binary or memory: https://a.slack-edge.com/a667a46/style/sticky_nav.css
Source: chromecache_207.2.dr	String found in binary or memory: https://a.slack-edge.com/b36bb29/style/rollup-plastic.css
Source: chromecache_207.2.dr	String found in binary or memory: https://a.slack-edge.com/bv1-13/application.3145a8060f24bcc31342.min.css
Source: chromecache_207.2.dr	String found in binary or memory: https://a.slack-edge.com/bv1-13/modern.vendor.b8590c39d48d3bf85d03.min.css
Source: chromecache_207.2.dr	String found in binary or memory: https://a.slack-edge.com/bv1-13/slack_beacon.1f9ab05446fdf309c62d.min.js
Source: chromecache_207.2.dr	String found in binary or memory: https://a.slack-edge.com/bv1-13/webpack.manifest.7a51c5a667c1161537c6.min.js
Source: chromecache_207.2.dr	String found in binary or memory: https://a.slack-edge.com/db887d0/style/footer.css
Source: chromecache_347.2.dr	String found in binary or memory: https://accounts.google.com/gsi/client
Source: chromecache_288.2.dr	String found in binary or memory: https://accounts.google.com/gsi/ottoken
Source: chromecache_288.2.dr	String found in binary or memory: https://accounts.google.com/o/fedcm/config.json
Source: chromecache_288.2.dr, chromecache_270.2.dr, chromecache_232.2.dr, chromecache_433.2.dr, chromecache_195.2.dr, chromecache_404.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_288.2.dr, chromecache_232.2.dr, chromecache_279.2.dr, chromecache_296.2.dr, chromecache_195.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_270.2.dr, chromecache_232.2.dr, chromecache_433.2.dr, chromecache_195.2.dr, chromecache_404.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_283.2.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/activity/src=2542116;type=gblog;cat=googl0;ord=1?
Source: chromecache_248.2.dr, chromecache_238.2.dr, chromecache_377.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_283.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js
Source: chromecache_207.2.dr	String found in binary or memory: https://api.slack.com/
Source: chromecache_270.2.dr, chromecache_213.2.dr, chromecache_232.2.dr, chromecache_433.2.dr, chromecache_195.2.dr, chromecache_404.2.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_350.2.dr	String found in binary or memory: https://apis.google.com/js/client.js
Source: chromecache_354.2.dr	String found in binary or memory: https://apis.google.com/js/googleapis.proxy.js?onload=startup
Source: chromecache_347.2.dr	String found in binary or memory: https://appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js
Source: chromecache_350.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/inapp/
Source: chromecache_350.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/
Source: chromecache_350.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/inapp/
Source: chromecache_350.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/tools/feedback/
Source: chromecache_350.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/inapp/
Source: chromecache_350.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/tools/feedback/
Source: chromecache_350.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_350.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_350.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/inapp/
Source: chromecache_350.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/tools/feedback/
Source: chromecache_350.2.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_350.2.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_283.2.dr	String found in binary or memory: https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiaYFhlSrNre35Mng8pmt5iePv668NArrjDt2lJq2v
Source: chromecache_283.2.dr	String found in binary or memory: https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEil-tQSvWkISdvbujn818sEroZRYYKpRGceE-TwpWR
Source: chromecache_248.2.dr, chromecache_238.2.dr, chromecache_377.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_412.2.dr, chromecache_225.2.dr	String found in binary or memory: https://cdn.ampproject.org/amp4ads-host-v0.js
Source: chromecache_412.2.dr, chromecache_225.2.dr	String found in binary or memory: https://cdn.ampproject.org/rtv/$
Source: chromecache_288.2.dr, chromecache_270.2.dr, chromecache_232.2.dr, chromecache_433.2.dr, chromecache_195.2.dr, chromecache_404.2.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_384.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_288.2.dr	String found in binary or memory: https://console.developers.google.com/
Source: chromecache_288.2.dr, chromecache_270.2.dr, chromecache_232.2.dr, chromecache_433.2.dr, chromecache_195.2.dr, chromecache_404.2.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_412.2.dr, chromecache_225.2.dr	String found in binary or memory: https://cse.google.com/cse.js
Source: chromecache_288.2.dr	String found in binary or memory: https://csi.gstatic.com/csi
Source: chromecache_384.2.dr	String found in binary or memory: https://ct.pinterest.com/v3/?tid=2613922701259&noscript=1
Source: chromecache_288.2.dr	String found in binary or memory: https://developers.google.com/
Source: chromecache_288.2.dr	String found in binary or memory: https://developers.google.com/api-client-library/javascript/reference/referencedocs
Source: chromecache_288.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/gis-migration)
Source: chromecache_288.2.dr	String found in binary or memory: https://developers.googleblog.com/2018/03/discontinuing-support-for-json-rpc-and.html
Source: chromecache_347.2.dr	String found in binary or memory: https://devvit-gateway.reddit.com
Source: chromecache_270.2.dr, chromecache_433.2.dr, chromecache_404.2.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_249.2.dr, chromecache_280.2.dr, chromecache_385.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/bg/
Source: chromecache_412.2.dr, chromecache_225.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/getconfig/sodar
Source: chromecache_249.2.dr, chromecache_280.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=232
Source: chromecache_249.2.dr, chromecache_280.2.dr	String found in binary or memory: https://ep1.adtrafficquality.google/pagead/sodar?id=sodar2&v=232
Source: chromecache_249.2.dr, chromecache_280.2.dr	String found in binary or memory: https://ep2.adtrafficquality.google
Source: chromecache_249.2.dr, chromecache_280.2.dr	String found in binary or memory: https://ep2.adtrafficquality.google/sodar/
Source: chromecache_412.2.dr, chromecache_225.2.dr	String found in binary or memory: https://ep2.adtrafficquality.google/sodar/$
Source: chromecache_412.2.dr, chromecache_225.2.dr	String found in binary or memory: https://ep3.adtrafficquality.google/ivt/worklet/caw.js
Source: chromecache_347.2.dr	String found in binary or memory: https://events.redditmedia.com/v2j
Source: chromecache_350.2.dr	String found in binary or memory: https://feedback-pa.clients6.google.com
Source: chromecache_350.2.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/annotator.css
Source: chromecache_350.2.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/render_frame2.html
Source: chromecache_350.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/inapp/%
Source: chromecache_350.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/tools/feedback/%
Source: chromecache_350.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/inapp/%
Source: chromecache_350.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/tools/feedback/%
Source: chromecache_445.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_412.2.dr, chromecache_225.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Google
Source: chromecache_412.2.dr, chromecache_225.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Google
Source: chromecache_283.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto:400italic
Source: chromecache_283.2.dr	String found in binary or memory: https://fonts.googleapis.com/icon?family=Material
Source: chromecache_445.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmZjtiu7.woff2)
Source: chromecache_445.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmdjtiu7.woff2)
Source: chromecache_445.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmhjtg.woff2)
Source: chromecache_445.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmtjtiu7.woff2)
Source: chromecache_445.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmxjtiu7.woff2)
Source: chromecache_445.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmZjtiu7.woff2)
Source: chromecache_445.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmdjtiu7.woff2)
Source: chromecache_445.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmhjtg.woff2)
Source: chromecache_445.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmtjtiu7.woff2)
Source: chromecache_445.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmxjtiu7.woff2)
Source: chromecache_445.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qE52i1dC.woff2)
Source: chromecache_445.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qER2i1dC.woff2)
Source: chromecache_445.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEV2i1dC.woff2)
Source: chromecache_445.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEl2i1dC.woff2)
Source: chromecache_445.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEp2iw.woff2)
Source: chromecache_213.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_213.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_213.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_213.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: chromecache_412.2.dr, chromecache_225.2.dr	String found in binary or memory: https://fundingchoicesmessages.google.com/i/$
Source: chromecache_207.2.dr	String found in binary or memory: https://get.slack.help/hc/en-us
Source: chromecache_284.2.dr, chromecache_412.2.dr, chromecache_225.2.dr, chromecache_301.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_412.2.dr, chromecache_225.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/$
Source: chromecache_350.2.dr	String found in binary or memory: https://gstatic.com/uservoice/surveys/resources/
Source: chromecache_311.2.dr	String found in binary or memory: https://help.meetup.com/hc/articles/360027447252
Source: chromecache_311.2.dr	String found in binary or memory: https://help.meetup.com/hc/articles/360046339551
Source: chromecache_366.2.dr	String found in binary or memory: https://help.steampowered.com/en/
Source: chromecache_366.2.dr	String found in binary or memory: https://help.steampowered.com/en/?snr=1_44_44_
Source: chromecache_350.2.dr	String found in binary or memory: https://help.youtube.com/tools/feedback/
Source: chromecache_393.2.dr, chromecache_198.2.dr, chromecache_287.2.dr, chromecache_317.2.dr	String found in binary or memory: https://hits.informer.com/log.php?id=
Source: chromecache_222.2.dr, chromecache_410.2.dr	String found in binary or memory: https://img.informer.com/images/default_icon/default_48_0.png
Source: chromecache_347.2.dr	String found in binary or memory: https://lit.dev/docs/api/LitElement/#LitElement.styles
Source: chromecache_350.2.dr	String found in binary or memory: https://localhost.corp.google.com/inapp/
Source: chromecache_350.2.dr	String found in binary or memory: https://localhost.proxy.googlers.com/inapp/
Source: chromecache_347.2.dr	String found in binary or memory: https://ogp.me/ns#
Source: chromecache_412.2.dr, chromecache_214.2.dr, chromecache_323.2.dr, chromecache_368.2.dr, chromecache_434.2.dr, chromecache_278.2.dr, chromecache_225.2.dr, chromecache_221.2.dr, chromecache_238.2.dr, chromecache_305.2.dr, chromecache_301.2.dr, chromecache_342.2.dr, chromecache_423.2.dr, chromecache_377.2.dr, chromecache_229.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_249.2.dr, chromecache_280.2.dr, chromecache_385.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/
Source: chromecache_412.2.dr, chromecache_225.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/getconfig/sodar
Source: chromecache_300.2.dr, chromecache_191.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=colleague-executed&name=
Source: chromecache_300.2.dr, chromecache_191.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=
Source: chromecache_300.2.dr, chromecache_191.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&name=invalid_geo&context=10
Source: chromecache_300.2.dr, chromecache_191.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=extra&rnd=
Source: chromecache_300.2.dr, chromecache_191.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&lidartos
Source: chromecache_300.2.dr, chromecache_191.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&start&control&fle=1&s
Source: chromecache_300.2.dr, chromecache_191.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-fallback2
Source: chromecache_300.2.dr, chromecache_191.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-later2
Source: chromecache_300.2.dr, chromecache_191.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-pagehide2
Source: chromecache_300.2.dr, chromecache_191.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fle-fetch-start2
Source: chromecache_300.2.dr, chromecache_191.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=reach&proto=
Source: chromecache_436.2.dr, chromecache_371.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=fccs&
Source: chromecache_284.2.dr, chromecache_301.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=rcs_internal
Source: chromecache_249.2.dr, chromecache_280.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=232
Source: chromecache_248.2.dr, chromecache_238.2.dr, chromecache_377.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_412.2.dr, chromecache_225.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/html/$
Source: chromecache_412.2.dr, chromecache_225.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/$
Source: chromecache_284.2.dr, chromecache_412.2.dr, chromecache_225.2.dr, chromecache_360.2.dr, chromecache_301.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
Source: chromecache_412.2.dr, chromecache_225.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=
Source: chromecache_284.2.dr, chromecache_412.2.dr, chromecache_278.2.dr, chromecache_225.2.dr, chromecache_301.2.dr, chromecache_229.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/err_rep.js
Source: chromecache_412.2.dr, chromecache_278.2.dr, chromecache_225.2.dr, chromecache_229.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/logging_library.js
Source: chromecache_412.2.dr, chromecache_278.2.dr, chromecache_225.2.dr, chromecache_229.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/managed/js/adsense/$
Source: chromecache_412.2.dr, chromecache_225.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping
Source: chromecache_412.2.dr, chromecache_278.2.dr, chromecache_225.2.dr, chromecache_301.2.dr, chromecache_229.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping?e=1
Source: chromecache_261.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?
Source: chromecache_249.2.dr, chromecache_280.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=232
Source: chromecache_366.2.dr	String found in binary or memory: https://partner.steamgames.com/steamdirect
Source: chromecache_213.2.dr, chromecache_351.2.dr, chromecache_359.2.dr, chromecache_277.2.dr, chromecache_325.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_270.2.dr, chromecache_232.2.dr, chromecache_433.2.dr, chromecache_195.2.dr, chromecache_404.2.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_283.2.dr	String found in binary or memory: https://plus.google.com/112374322230920073195
Source: chromecache_283.2.dr	String found in binary or memory: https://plus.google.com/116899029375914044550
Source: chromecache_270.2.dr, chromecache_232.2.dr, chromecache_433.2.dr, chromecache_195.2.dr, chromecache_404.2.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_300.2.dr, chromecache_191.2.dr	String found in binary or memory: https://publickeyservice.msmt.gcp.privacysandboxservices.com
Source: chromecache_384.2.dr	String found in binary or memory: https://s.pinimg.com/ct/core.js
Source: chromecache_350.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/
Source: chromecache_350.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/%
Source: chromecache_350.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/
Source: chromecache_350.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/%
Source: chromecache_350.2.dr	String found in binary or memory: https://scone-pa.clients6.google.com
Source: chromecache_412.2.dr, chromecache_225.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/car.js
Source: chromecache_412.2.dr, chromecache_225.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/pagead/js/cocar.js
Source: chromecache_412.2.dr, chromecache_225.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Source: chromecache_207.2.dr	String found in binary or memory: https://slack-status.com
Source: chromecache_207.2.dr	String found in binary or memory: https://slack.com
Source: chromecache_207.2.dr	String found in binary or memory: https://slack.com/
Source: chromecache_207.2.dr	String found in binary or memory: https://slack.com/beacon/timing
Source: chromecache_207.2.dr	String found in binary or memory: https://slack.com/create
Source: chromecache_207.2.dr	String found in binary or memory: https://slack.com/get-started#/create
Source: chromecache_207.2.dr	String found in binary or memory: https://slack.com/get-started#/find
Source: chromecache_207.2.dr	String found in binary or memory: https://slack.com/is
Source: chromecache_207.2.dr	String found in binary or memory: https://slack.com/pricing?ui_step=55&ui_element=5
Source: chromecache_207.2.dr	String found in binary or memory: https://slack.com/signin
Source: chromecache_207.2.dr	String found in binary or memory: https://slackatwork.com
Source: chromecache_207.2.dr	String found in binary or memory: https://slackhq.com/
Source: chromecache_410.2.dr	String found in binary or memory: https://software.informer.com/go/g.php?go=https%3A%2F%2Ftopxnotes.software.informer.com%2F&hs=473582
Source: chromecache_432.2.dr, chromecache_203.2.dr	String found in binary or memory: https://software.informer.com/go/go2.php?oe9&s=
Source: chromecache_428.2.dr, chromecache_351.2.dr	String found in binary or memory: https://ssl.gstatic.com/chrome/webstore/images/placeholder_logo.png
Source: chromecache_428.2.dr, chromecache_351.2.dr	String found in binary or memory: https://ssl.gstatic.com/chrome/webstore/images/placeholder_logo_2x.png
Source: chromecache_428.2.dr	String found in binary or memory: https://ssl.gstatic.com/chrome/webstore/images/placeholder_marquee.png
Source: chromecache_428.2.dr	String found in binary or memory: https://ssl.gstatic.com/chrome/webstore/images/placeholder_marquee_2x.png
Source: chromecache_428.2.dr, chromecache_351.2.dr	String found in binary or memory: https://ssl.gstatic.com/chrome/webstore/images/placeholder_promo_tile.png
Source: chromecache_428.2.dr, chromecache_351.2.dr	String found in binary or memory: https://ssl.gstatic.com/chrome/webstore/images/placeholder_promo_tile_2x.png
Source: chromecache_288.2.dr	String found in binary or memory: https://ssl.gstatic.com/gb/js/
Source: chromecache_350.2.dr	String found in binary or memory: https://stagingqual-feedback-pa-googleapis.sandbox.google.com
Source: chromecache_248.2.dr, chromecache_238.2.dr, chromecache_377.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_366.2.dr	String found in binary or memory: https://steamcommunity.com/
Source: chromecache_366.2.dr	String found in binary or memory: https://steamcommunity.com/?subsection=broadcasts
Source: chromecache_366.2.dr	String found in binary or memory: https://steamcommunity.com/discussions/
Source: chromecache_366.2.dr	String found in binary or memory: https://steamcommunity.com/market/
Source: chromecache_366.2.dr	String found in binary or memory: https://steamcommunity.com/my/wishlist/
Source: chromecache_366.2.dr	String found in binary or memory: https://steamcommunity.com/workshop/
Source: chromecache_366.2.dr	String found in binary or memory: https://store.fastly.steamstatic.com/public/css/applications/store/main.css?v=Dd1QBcW7Ng34&l=eng
Source: chromecache_366.2.dr	String found in binary or memory: https://store.fastly.steamstatic.com/public/css/v6/browse.css?v=i6TQ7oIBXK-E&l=english&_cdn=
Source: chromecache_366.2.dr	String found in binary or memory: https://store.fastly.steamstatic.com/public/css/v6/cart.css?v=SFGHVOgNiRXD&l=english&_cdn=fa
Source: chromecache_366.2.dr	String found in binary or memory: https://store.fastly.steamstatic.com/public/css/v6/store.css?v=p1S4tSu2k8Oq&l=english&_cdn=f
Source: chromecache_366.2.dr	String found in binary or memory: https://store.fastly.steamstatic.com/public/images/footerLogo_valve_new.png
Source: chromecache_366.2.dr	String found in binary or memory: https://store.fastly.steamstatic.com/public/images/ico/ico_twitter.png
Source: chromecache_366.2.dr	String found in binary or memory: https://store.fastly.steamstatic.com/public/images/v6/logo_steam_footer.png
Source: chromecache_366.2.dr	String found in binary or memory: https://store.fastly.steamstatic.com/public/javascript/applications/store/libraries~b28b7af69.js?v=v
Source: chromecache_366.2.dr	String found in binary or memory: https://store.fastly.steamstatic.com/public/javascript/applications/store/main.js?v=8o5YE6fTVBhG&amp
Source: chromecache_366.2.dr	String found in binary or memory: https://store.fastly.steamstatic.com/public/javascript/applications/store/manifest.js?v=kTC9eG2cWexl
Source: chromecache_366.2.dr	String found in binary or memory: https://store.fastly.steamstatic.com/public/javascript/dynamicstore.js?v=iQ2CGpHeNwDH&l=english&
Source: chromecache_366.2.dr	String found in binary or memory: https://store.fastly.steamstatic.com/public/javascript/main.js?v=wiAgKBaqWusf&l=english&_cdn
Source: chromecache_366.2.dr	String found in binary or memory: https://store.fastly.steamstatic.com/public/shared/css/buttons.css?v=ecbk11GZ8OUy&l=english&
Source: chromecache_366.2.dr	String found in binary or memory: https://store.fastly.steamstatic.com/public/shared/css/login.css?v=s2eLMp3puLuI&l=english&_c
Source: chromecache_366.2.dr	String found in binary or memory: https://store.fastly.steamstatic.com/public/shared/css/motiva_sans.css?v=YzJgj1FjzW34&l=english&
Source: chromecache_366.2.dr	String found in binary or memory: https://store.fastly.steamstatic.com/public/shared/css/shared_global.css?v=LkH7FFmHUNxE&l=englis
Source: chromecache_366.2.dr	String found in binary or memory: https://store.fastly.steamstatic.com/public/shared/css/shared_responsive.css?v=r6syZUh8_Rpk&l=en
Source: chromecache_366.2.dr	String found in binary or memory: https://store.fastly.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
Source: chromecache_366.2.dr	String found in binary or memory: https://store.fastly.steamstatic.com/public/shared/images/responsive/header_logo.png
Source: chromecache_366.2.dr	String found in binary or memory: https://store.fastly.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
Source: chromecache_366.2.dr	String found in binary or memory: https://store.fastly.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
Source: chromecache_366.2.dr	String found in binary or memory: https://store.fastly.steamstatic.com/public/shared/images/responsive/steam_share_image.jpg
Source: chromecache_366.2.dr	String found in binary or memory: https://store.fastly.steamstatic.com/public/shared/javascript/auth_refresh.js?v=w6QbwI-5-j2S&l=e
Source: chromecache_366.2.dr	String found in binary or memory: https://store.fastly.steamstatic.com/public/shared/javascript/jquery-1.8.3.min.js?v=NXam5zydzNu8&amp
Source: chromecache_366.2.dr	String found in binary or memory: https://store.fastly.steamstatic.com/public/shared/javascript/login.js?v=bV0ZlWAiNlZX&l=english&
Source: chromecache_366.2.dr	String found in binary or memory: https://store.fastly.steamstatic.com/public/shared/javascript/shared_global.js?v=gOyfgA0bHRkL&l=
Source: chromecache_366.2.dr	String found in binary or memory: https://store.fastly.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=tvQi85m
Source: chromecache_366.2.dr	String found in binary or memory: https://store.fastly.steamstatic.com/public/shared/javascript/tooltip.js?v=QYkT4eS5mbTN&l=englis
Source: chromecache_366.2.dr	String found in binary or memory: https://store.steampowered.com/
Source: chromecache_366.2.dr	String found in binary or memory: https://store.steampowered.com/?snr=1_60_4__global-header
Source: chromecache_366.2.dr	String found in binary or memory: https://store.steampowered.com/?snr=1_60_4__global-responsive-menu
Source: chromecache_366.2.dr	String found in binary or memory: https://store.steampowered.com/about
Source: chromecache_366.2.dr	String found in binary or memory: https://store.steampowered.com/about/?snr=1_60_4__global-header
Source: chromecache_366.2.dr	String found in binary or memory: https://store.steampowered.com/about/?snr=1_60_4__global-responsive-menu
Source: chromecache_366.2.dr	String found in binary or memory: https://store.steampowered.com/account/cookiepreferences/?snr=1_44_44_
Source: chromecache_366.2.dr	String found in binary or memory: https://store.steampowered.com/digitalgiftcards/?snr=1_44_44_
Source: chromecache_366.2.dr	String found in binary or memory: https://store.steampowered.com/explore/?snr=1_60_4__global-header
Source: chromecache_366.2.dr	String found in binary or memory: https://store.steampowered.com/explore/?snr=1_60_4__global-responsive-menu
Source: chromecache_366.2.dr	String found in binary or memory: https://store.steampowered.com/favicon.ico"
Source: chromecache_366.2.dr	String found in binary or memory: https://store.steampowered.com/hardware_recycling/?snr=1_44_44_
Source: chromecache_366.2.dr	String found in binary or memory: https://store.steampowered.com/join/?redir=favicon.ico&snr=1_60_4__62
Source: chromecache_366.2.dr	String found in binary or memory: https://store.steampowered.com/legal/?snr=1_44_44_
Source: chromecache_366.2.dr	String found in binary or memory: https://store.steampowered.com/login/?redir=login%2F%3Fredir%3Dfavicon.ico&redir_ssl=1&snr=1_60_4__g
Source: chromecache_366.2.dr	String found in binary or memory: https://store.steampowered.com/mobile
Source: chromecache_366.2.dr	String found in binary or memory: https://store.steampowered.com/news/?snr=1_60_4__global-header
Source: chromecache_366.2.dr	String found in binary or memory: https://store.steampowered.com/news/?snr=1_60_4__global-responsive-menu
Source: chromecache_366.2.dr	String found in binary or memory: https://store.steampowered.com/points/shop/?snr=1_60_4__global-header
Source: chromecache_366.2.dr	String found in binary or memory: https://store.steampowered.com/points/shop/?snr=1_60_4__global-responsive-menu
Source: chromecache_366.2.dr	String found in binary or memory: https://store.steampowered.com/privacy_agreement/?snr=1_44_44_
Source: chromecache_366.2.dr	String found in binary or memory: https://store.steampowered.com/privacy_agreement/?snr=1_60_4__global-responsive-menu
Source: chromecache_366.2.dr	String found in binary or memory: https://store.steampowered.com/stats/?snr=1_60_4__global-header
Source: chromecache_366.2.dr	String found in binary or memory: https://store.steampowered.com/stats/?snr=1_60_4__global-responsive-menu
Source: chromecache_366.2.dr	String found in binary or memory: https://store.steampowered.com/steam_refunds/?snr=1_44_44_
Source: chromecache_366.2.dr	String found in binary or memory: https://store.steampowered.com/steam_refunds/?snr=1_60_4__global-responsive-menu
Source: chromecache_366.2.dr	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/?snr=1_44_44_
Source: chromecache_366.2.dr	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/?snr=1_60_4__global-responsive-menu
Source: chromecache_350.2.dr, chromecache_351.2.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_283.2.dr	String found in binary or memory: https://support.google.com/a/answer/13137538
Source: chromecache_283.2.dr	String found in binary or memory: https://support.google.com/a/users/answer/11219858
Source: chromecache_428.2.dr	String found in binary or memory: https://support.google.com/chrome/a/answer/15469659?hl=
Source: chromecache_350.2.dr	String found in binary or memory: https://support.google.com/inapp/
Source: chromecache_350.2.dr	String found in binary or memory: https://support.google.com/inapp/%
Source: chromecache_248.2.dr, chromecache_238.2.dr, chromecache_377.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_350.2.dr	String found in binary or memory: https://test-scone-pa-googleapis.sandbox.google.com
Source: chromecache_249.2.dr, chromecache_280.2.dr	String found in binary or memory: https://tpc.googlesyndication.com
Source: chromecache_249.2.dr, chromecache_280.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/
Source: chromecache_412.2.dr, chromecache_225.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/$
Source: chromecache_207.2.dr	String found in binary or memory: https://twitter.com/SlackHQ
Source: chromecache_347.2.dr	String found in binary or memory: https://w3-reporting.reddit.com/reports
Source: chromecache_270.2.dr, chromecache_232.2.dr, chromecache_433.2.dr, chromecache_195.2.dr, chromecache_404.2.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_283.2.dr	String found in binary or memory: https://www.blogger.com/dyn-css/authorization.css?targetBlogID=5245696872621940063&zx=12a811db-c
Source: chromecache_283.2.dr	String found in binary or memory: https://www.blogger.com/feeds/5245696872621940063/posts/default
Source: chromecache_283.2.dr	String found in binary or memory: https://www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css
Source: chromecache_350.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/
Source: chromecache_350.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/%
Source: chromecache_249.2.dr, chromecache_280.2.dr, chromecache_351.2.dr, chromecache_238.2.dr, chromecache_377.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_412.2.dr, chromecache_225.2.dr	String found in binary or memory: https://www.google.com/adsense/search/async-ads.js
Source: chromecache_412.2.dr, chromecache_249.2.dr, chromecache_280.2.dr, chromecache_385.2.dr, chromecache_225.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: chromecache_347.2.dr	String found in binary or memory: https://www.google.com/recaptcha/enterprise.js?onload=grecaptchaOnLoad&render=explicit
Source: chromecache_347.2.dr	String found in binary or memory: https://www.google.com/recaptcha/enterprise.js?render=6LfRNvoUAAAAAKgEWIXbpPkMWcboc1n1gAeXq7lP
Source: chromecache_347.2.dr	String found in binary or memory: https://www.google.com/recaptcha/enterprise.js?render=6LfirrMoAAAAAHZOipvza4kpp_VtTwLNuXVwURNQ
Source: chromecache_303.2.dr, chromecache_372.2.dr	String found in binary or memory: https://www.google.com/recaptcha/enterprise/
Source: chromecache_412.2.dr, chromecache_225.2.dr	String found in binary or memory: https://www.google.com/s2/favicons?sz=64&domain_url=
Source: chromecache_350.2.dr, chromecache_351.2.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_350.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/
Source: chromecache_350.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/%
Source: chromecache_350.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/help_panel_binary.js
Source: chromecache_248.2.dr, chromecache_300.2.dr, chromecache_191.2.dr, chromecache_238.2.dr, chromecache_377.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_300.2.dr, chromecache_191.2.dr	String found in binary or memory: https://www.googleadservices.com/.well-known/private-aggregation/report-shared-storage
Source: chromecache_300.2.dr, chromecache_191.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/managed/js/activeview/
Source: chromecache_288.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.login
Source: chromecache_270.2.dr, chromecache_433.2.dr, chromecache_404.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_270.2.dr, chromecache_433.2.dr, chromecache_404.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_288.2.dr	String found in binary or memory: https://www.googleapis.com/auth/userinfo.email
Source: chromecache_288.2.dr	String found in binary or memory: https://www.googleapis.com/auth/userinfo.profile
Source: chromecache_248.2.dr, chromecache_238.2.dr, chromecache_377.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_384.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=AW-10805689966
Source: chromecache_283.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-DY1T9T89QG
Source: chromecache_300.2.dr, chromecache_191.2.dr	String found in binary or memory: https://www.googletagservices.com/agrp/
Source: chromecache_412.2.dr, chromecache_225.2.dr	String found in binary or memory: https://www.gstatic.com
Source: chromecache_213.2.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_213.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_213.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: chromecache_213.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/broken_image_grey600_18dp.png
Source: chromecache_283.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/search_grey600_24dp.png
Source: chromecache_213.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/2x/broken_image_grey600_18dp.png
Source: chromecache_283.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/2x/post_facebook_black_24dp.png
Source: chromecache_283.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/2x/post_twitter_black_24dp.png
Source: chromecache_412.2.dr, chromecache_225.2.dr	String found in binary or memory: https://www.gstatic.com/prose/protected/$
Source: chromecache_303.2.dr, chromecache_372.2.dr, chromecache_281.2.dr, chromecache_227.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js
Source: chromecache_350.2.dr, chromecache_351.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/
Source: chromecache_350.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/surveys/resources/
Source: chromecache_311.2.dr	String found in binary or memory: https://www.meetup.com/help/
Source: chromecache_311.2.dr	String found in binary or memory: https://www.meetup.com/privacy/
Source: chromecache_248.2.dr, chromecache_238.2.dr, chromecache_377.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_347.2.dr	String found in binary or memory: https://www.reddit.com
Source: chromecache_347.2.dr	String found in binary or memory: https://www.redditstatic.com/
Source: chromecache_347.2.dr	String found in binary or memory: https://www.redditstatic.com/shreddit/
Source: chromecache_347.2.dr	String found in binary or memory: https://www.redditstatic.com/shreddit/assets/account/standalone-auth-bg.svg
Source: chromecache_347.2.dr	String found in binary or memory: https://www.redditstatic.com/shreddit/assets/favicon/120x120.png
Source: chromecache_347.2.dr	String found in binary or memory: https://www.redditstatic.com/shreddit/assets/favicon/128x128.png
Source: chromecache_347.2.dr	String found in binary or memory: https://www.redditstatic.com/shreddit/assets/favicon/152x152.png
Source: chromecache_347.2.dr	String found in binary or memory: https://www.redditstatic.com/shreddit/assets/favicon/180x180.png
Source: chromecache_347.2.dr	String found in binary or memory: https://www.redditstatic.com/shreddit/assets/favicon/192x192.png
Source: chromecache_347.2.dr	String found in binary or memory: https://www.redditstatic.com/shreddit/assets/favicon/64x64.png
Source: chromecache_347.2.dr	String found in binary or memory: https://www.redditstatic.com/shreddit/assets/favicon/76x76.png
Source: chromecache_347.2.dr	String found in binary or memory: https://www.redditstatic.com/shreddit/assets/favicon/manifest.json
Source: chromecache_347.2.dr	String found in binary or memory: https://www.redditstatic.com/shreddit/en-US/alert-controller-client-js-09e8dda9.js
Source: chromecache_347.2.dr	String found in binary or memory: https://www.redditstatic.com/shreddit/en-US/answers-register-step-client-js-505d56f6.js
Source: chromecache_347.2.dr	String found in binary or memory: https://www.redditstatic.com/shreddit/en-US/auth-overlay-client-js-4391eff2.js
Source: chromecache_347.2.dr	String found in binary or memory: https://www.redditstatic.com/shreddit/en-US/login-step-client-js-f62cd5bb.js
Source: chromecache_347.2.dr	String found in binary or memory: https://www.redditstatic.com/shreddit/en-US/onboarding-flow-client-js-1f727f41.js
Source: chromecache_347.2.dr	String found in binary or memory: https://www.redditstatic.com/shreddit/en-US/phone-auth-client-js-5c311a5b.js
Source: chromecache_347.2.dr	String found in binary or memory: https://www.redditstatic.com/shreddit/en-US/recovery-step-client-js-4af36736.js
Source: chromecache_347.2.dr	String found in binary or memory: https://www.redditstatic.com/shreddit/en-US/register-step-client-js-fd1826ab.js
Source: chromecache_347.2.dr	String found in binary or memory: https://www.redditstatic.com/shreddit/en-US/shell-74ec768d.js
Source: chromecache_347.2.dr	String found in binary or memory: https://www.redditstatic.com/shreddit/en-US/sso-linking-step-client-js-07a250a0.js
Source: chromecache_347.2.dr	String found in binary or memory: https://www.redditstatic.com/shreddit/en-US/standalone-auth-client-js-79db2216.js
Source: chromecache_347.2.dr	String found in binary or memory: https://www.redditstatic.com/shreddit/polyfills/core-js.1c7aca84f142889ea448de106c19e2ec.js
Source: chromecache_347.2.dr	String found in binary or memory: https://www.redditstatic.com/shreddit/polyfills/custom-elements-es5-adapter.3342b468203af1a14ca005e8
Source: chromecache_347.2.dr	String found in binary or memory: https://www.redditstatic.com/shreddit/polyfills/fetch.a1ad5fb96dc0cb61b9454244c9bd7fe6.js
Source: chromecache_347.2.dr	String found in binary or memory: https://www.redditstatic.com/shreddit/polyfills/intersection-observer.e09cbb4189f6808e65aaf9f27b007c
Source: chromecache_347.2.dr	String found in binary or memory: https://www.redditstatic.com/shreddit/polyfills/lit-polyfill-support.2e7548e448acb656e34764769ec320e
Source: chromecache_347.2.dr	String found in binary or memory: https://www.redditstatic.com/shreddit/polyfills/regenerator-runtime.8710f32f34292d0b9a2da4993cb85d94
Source: chromecache_347.2.dr	String found in binary or memory: https://www.redditstatic.com/shreddit/polyfills/webcomponents.ed846db3e7c3b1354dcb129b8858e4d4.js
Source: chromecache_347.2.dr	String found in binary or memory: https://www.redditstatic.com/shreddit/sentry-94f7e90f.js
Source: chromecache_366.2.dr	String found in binary or memory: https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback
Source: chromecache_207.2.dr	String found in binary or memory: https://www.youtube.com/channel/UCY3YECgeBcLCzIrFLP4gblw
Source: chromecache_248.2.dr, chromecache_238.2.dr, chromecache_377.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50501
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50429 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50330
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50466 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 50339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50360
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 50384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50280
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50283
Source: unknown	Network traffic detected: HTTP traffic on port 50412 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50282
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50357 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50323 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 50229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 50367 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 50250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918

Source: classification engine

Classification label: mal48.win@31/413@228/69

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2004,i,9348203157779861519,15638006010270494539,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nuance-pdf-professional2.software.informer.com/7.2/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5628 --field-trial-handle=2004,i,9348203157779861519,15638006010270494539,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4456 --field-trial-handle=2004,i,9348203157779861519,15638006010270494539,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2004,i,9348203157779861519,15638006010270494539,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5628 --field-trial-handle=2004,i,9348203157779861519,15638006010270494539,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4456 --field-trial-handle=2004,i,9348203157779861519,15638006010270494539,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://nuance-pdf-professional2.software.informer.com/7.2/	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://cdn.protectonow.com/lottie_2_a_1735132522.json	0%	Avira URL Cloud	safe
https://nuance-pdf-professional2.software.informer.com/fonts/SourceSansPro-Bold.woff	0%	Avira URL Cloud	safe
https://cdn.protectonow.com/ext/checkmark-chrome_1698059071.svg+xml	0%	Avira URL Cloud	safe
https://cdn.protectonow.com/bg1_1735475692_1920x1080.png	0%	Avira URL Cloud	safe
https://g4.bidbrain.app/rtimp?sid=f28d8534-d38e-11ef-93a7-aab196f2f20d&d=nuance-pdf-professional2.software.informer.com&cr=ext_download_prot_smrtsp&gid=&im=Nb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkPejZgAKFm3ZlUxHBNGiYcbgU5DmL2JgBOnA6uq5HqYXDGOAkkcHp77mTvilkZ5d9Q2rpDl_8WOAn-k2Y5V9CBXA9Hn2pQTPVn67DMY2sybqayiZvf5flizO3fgV6Cw9N2-R52IBOSmAosKxVeFWSaITqzx-S70fbalfXf6j_MGyOC9eAxeZ7JGLaNEYTuDszAbHweW2Joh-qvwh3aS1didawvBHLOP-V2AJ9n6wIzxxqj8vOzYkgNldKNUmJt1QcCV7gcheIGQeY618UdBWcgJbQ4H-Y9TkqHO2sUSV-RHzJCsRWDjhnFAPFm7pN506i_DH--SzmnConwZt5nHCFtvPxN2SulUo9&p=Z4g0tQAM55kHg4k6AAGLsDXa4KrzOKSPp000GA&r=1930373240&a=ipv4&ow=1280&oh=984&iw=1200&ih=90&tzof=300&tz=America%2FNew_York&pxr=1&cts=1736979641.481&cto=1665&edx=10&furl=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-4821006852914359%26output%3Dhtml%26h%3D90%26slotname%3D7854405427%26adk%3D4056614258%26adf%3D1706824535%26pi%3Dt.ma~as.7854405427%26w%3D1200%26abgtt%3D9%26fwrn%3D4%26fwrnh%3D100%26lmt%3D1736870130%26rafmt%3D2%26format%3D1200x90%26url%3Dhttps%253A%252F%252Fnuance-pdf-professional2.software.informer.com%252F7.2%252F%26fwr%3D0%26fwrattr%3Dtrue%26rpe%3D1%26resp_fmts%3D2%26wgl%3D1%26uach%3DWyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.%26dt%3D1736979634915%26bpp%3D4%26bdt%3D1617%26idt%3D1532%26shv%3Dr20250113%26mjsv%3Dm202501090101%26ptt%3D9%26saldr%3Daa%26abxe%3D1%26cookie_enabled%3D1%26eoidce%3D1%26correlator%3D4566372036047%26frm%3D20%26pv%3D2%26u_tz%3D-300%26u_his%3D1%26u_h%3D1024%26u_w%3D1280%26u_ah%3D984%26u_aw%3D1280%26u_cd%3D24%26u_sd%3D1%26dmc%3D8%26adx%3D32%26ady%3D311%26biw%3D1263%26bih%3D907%26scr_x%3D0%26scr_y%3D0%26eid%3D42533202%252C31089683%252C95344791%252C95350245%252C95340252%252C95340254%26oid%3D2%26pvsid%3D3788874330487745%26tmod%3D2006592406%26uas%3D0%26nvt%3D1%26fc%3D896%26brdim%3D0%252C0%252C0%252C0%252C1280%252C0%252C1280%252C984%252C1280%252C907%26vis%3D1%26rsz%3Do%257C%257Coe%257C%26abl%3DCS%26pfx%3D0%26fu%3D128%26bc%3D31%26bz%3D1%26td%3D1%26tdf%3D0%26psd%3DW251bGwsbnVsbCxudWxsLDNd%26nt%3D1%26ifi%3D1%26uci%3Da!1%26fsb%3D1%26dtd%3D1582&ctp=creative&cnm=ext_download_prot_smrtsp	0%	Avira URL Cloud	safe
https://slackatwork.com	0%	Avira URL Cloud	safe
https://cdn.protectonow.com/ext/stticon_1735726475.png	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bitbucket.org	185.166.143.50	true	false	high
paypal-dynamic.map.fastly.net	151.101.1.21	true	false	high
g4.bidbrain.app	34.8.123.242	true	false	high
post.g.craigslist.org	208.82.238.246	true	false	high
500px.com	18.172.112.18	true	false	high
disqus.com	151.101.64.134	true	false	high
euob.7roundprince.com	13.32.121.16	true	false	high
cdn.bidbrain.app	104.21.80.92	true	false	high
ws-broker-service.us-east-1.amazonaws.com	44.216.185.77	true	false	high
www.google.com	142.250.186.164	true	false	high
h2.twitch.map.fastly.net	151.101.2.214	true	false	high
vk.com	87.240.132.67	true	false	high
software.informer.com	104.22.17.194	true	false	high
star-mini.c10r.facebook.com	157.240.253.35	true	false	high
chromewebstore.google.com	172.217.18.14	true	false	high
plus.l.google.com	142.250.184.238	true	false	high
github.com	140.82.121.3	true	false	high
ep2.adtrafficquality.google	142.250.184.225	true	false	high
cdn.app.squareup.com	162.159.140.28	true	false	high
d2bytcopxu066p.cloudfront.net	18.245.39.216	true	false	high
img.informer.com	74.117.179.70	true	false	high
ws-broker-service.us-west-2.amazonaws.com	18.246.119.221	true	false	high
prod.pinterest.global.map.fastly.net	151.101.128.84	true	false	high
secure.indeed.com	162.159.129.67	true	false	high
googleads.g.doubleclick.net	142.250.185.226	true	false	high
www3.l.google.com	142.250.185.142	true	false	high
reddit.map.fastly.net	151.101.65.140	true	false	high
obseu.7roundprince.com	34.251.101.162	true	false	high
eu.battle.net	37.244.28.102	true	false	high
x.com	104.244.42.1	true	false	high
stun.l.google.com	74.125.250.129	true	false	high
d3ag4hukkh62yn.cloudfront.net	99.86.8.42	true	false	high
g.protectonow.com	104.21.50.45	true	false	high
googlehosted.l.googleusercontent.com	172.217.18.1	true	false	high
g.bidbrain.app	104.21.80.92	true	false	high
adclick.g.doubleclick.net	142.250.186.162	true	false	high
slack.com	3.68.124.95	true	false	high
scone-pa.clients6.google.com	142.250.185.234	true	false	high
www.tumblr.com	192.0.77.40	true	false	high
squareup.com	162.159.137.66	true	false	high
nuance-pdf-professional2.software.informer.com	104.22.17.194	true	false	unknown
cdn.protectonow.com	172.67.200.191	true	false	high
hits.informer.com	204.155.159.109	true	false	high
store.steampowered.com	95.101.149.47	true	false	high
i.informer.com	172.67.43.115	true	false	high
get4.protectonow.com	104.21.50.45	true	false	high
twitter.com	104.244.42.65	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
plus.google.com	142.250.184.238	true	false	high
ep1.adtrafficquality.google	172.217.18.2	true	false	high
blogspot.l.googleusercontent.com	172.217.16.193	true	false	high
ds-ats.member.g02.yahoodns.net	212.82.100.140	true	false	high
medium.com	162.159.153.4	true	false	high
play.google.com	142.250.184.206	true	false	high
www-env.dropbox-dns.com	162.125.66.18	true	false	high
serve.bidbrain.app	172.67.176.164	true	false	high
m.facebook.com	unknown	unknown	false	high
g6.bidbrain.app	unknown	unknown	false	high
workspaceupdates.googleblog.com	unknown	unknown	false	high
login.yahoo.com	unknown	unknown	false	high
app.squareup.com	unknown	unknown	false	high
www.pinterest.com	unknown	unknown	false	high
www.reddit.com	unknown	unknown	false	high
www.twitch.tv	unknown	unknown	false	high
lh3.googleusercontent.com	unknown	unknown	false	high
fundingchoicesmessages.google.com	unknown	unknown	false	high
www.paypal.com	unknown	unknown	false	high
www.dropbox.com	unknown	unknown	false	high
www.facebook.com	unknown	unknown	false	high
secure.meetup.com	unknown	unknown	false	high
accounts.craigslist.org	unknown	unknown	false	high
www.meetup.com	unknown	unknown	false	high
www.amazon.com	unknown	unknown	false	high
www.imdb.com	unknown	unknown	false	high
www.airbnb.com	unknown	unknown	false	high
apis.google.com	unknown	unknown	false	high
www.expedia.de	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://apis.google.com/js/googleapis.proxy.js?onload=startup	false		high
https://cdn.bidbrain.app/ng-assets/creative/assets/index-5333d910.js	false		high
https://ws-broker-service.us-west-2.amazonaws.com/ping	false		high
https://software.informer.com/ajax/log_hit4.php?r=20025	false		high
https://cdn.protectonow.com/lottie_2_a_1735132522.json	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4821006852914359&output=html&h=90&slotname=4034399826&adk=3689936537&adf=2221415025&pi=t.ma~as.4034399826&w=847&abgtt=9&fwrn=4&fwrnh=100&lmt=1736870130&rafmt=2&format=847x90&url=https%3A%2F%2Fnuance-pdf-professional2.software.informer.com%2F7.2%2F&fwr=0&fwrattr=true&rpe=1&resp_fmts=2&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736979634920&bpp=1&bdt=1621&idt=1620&shv=r20250113&mjsv=m202501090101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=1200x90%2C336x280&correlator=4566372036047&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=15&ady=860&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533202%2C31089683%2C95344791%2C95350245%2C95340252%2C95340254&oid=2&pvsid=3788874330487745&tmod=2006592406&uas=0&nvt=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=o%7C%7CeE%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=1625	false		high
https://vk.com/login?u=2&to=ZmF2aWNvbi5pY28-	false		high
https://g4.bidbrain.app/rtimp?sid=f28d8534-d38e-11ef-93a7-aab196f2f20d&d=nuance-pdf-professional2.software.informer.com&cr=ext_download_prot_smrtsp&gid=&im=Nb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkPejZgAKFm3ZlUxHBNGiYcbgU5DmL2JgBOnA6uq5HqYXDGOAkkcHp77mTvilkZ5d9Q2rpDl_8WOAn-k2Y5V9CBXA9Hn2pQTPVn67DMY2sybqayiZvf5flizO3fgV6Cw9N2-R52IBOSmAosKxVeFWSaITqzx-S70fbalfXf6j_MGyOC9eAxeZ7JGLaNEYTuDszAbHweW2Joh-qvwh3aS1didawvBHLOP-V2AJ9n6wIzxxqj8vOzYkgNldKNUmJt1QcCV7gcheIGQeY618UdBWcgJbQ4H-Y9TkqHO2sUSV-RHzJCsRWDjhnFAPFm7pN506i_DH--SzmnConwZt5nHCFtvPxN2SulUo9&p=Z4g0tQAM55kHg4k6AAGLsDXa4KrzOKSPp000GA&r=1930373240&a=ipv4&ow=1280&oh=984&iw=1200&ih=90&tzof=300&tz=America%2FNew_York&pxr=1&cts=1736979641.481&cto=1665&edx=10&furl=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-4821006852914359%26output%3Dhtml%26h%3D90%26slotname%3D7854405427%26adk%3D4056614258%26adf%3D1706824535%26pi%3Dt.ma~as.7854405427%26w%3D1200%26abgtt%3D9%26fwrn%3D4%26fwrnh%3D100%26lmt%3D1736870130%26rafmt%3D2%26format%3D1200x90%26url%3Dhttps%253A%252F%252Fnuance-pdf-professional2.software.informer.com%252F7.2%252F%26fwr%3D0%26fwrattr%3Dtrue%26rpe%3D1%26resp_fmts%3D2%26wgl%3D1%26uach%3DWyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.%26dt%3D1736979634915%26bpp%3D4%26bdt%3D1617%26idt%3D1532%26shv%3Dr20250113%26mjsv%3Dm202501090101%26ptt%3D9%26saldr%3Daa%26abxe%3D1%26cookie_enabled%3D1%26eoidce%3D1%26correlator%3D4566372036047%26frm%3D20%26pv%3D2%26u_tz%3D-300%26u_his%3D1%26u_h%3D1024%26u_w%3D1280%26u_ah%3D984%26u_aw%3D1280%26u_cd%3D24%26u_sd%3D1%26dmc%3D8%26adx%3D32%26ady%3D311%26biw%3D1263%26bih%3D907%26scr_x%3D0%26scr_y%3D0%26eid%3D42533202%252C31089683%252C95344791%252C95350245%252C95340252%252C95340254%26oid%3D2%26pvsid%3D3788874330487745%26tmod%3D2006592406%26uas%3D0%26nvt%3D1%26fc%3D896%26brdim%3D0%252C0%252C0%252C0%252C1280%252C0%252C1280%252C984%252C1280%252C907%26vis%3D1%26rsz%3Do%257C%257Coe%257C%26abl%3DCS%26pfx%3D0%26fu%3D128%26bc%3D31%26bz%3D1%26td%3D1%26tdf%3D0%26psd%3DW251bGwsbnVsbCxudWxsLDNd%26nt%3D1%26ifi%3D1%26uci%3Da!1%26fsb%3D1%26dtd%3D1582&ctp=creative&cnm=ext_download_prot_smrtsp	false	Avira URL Cloud: safe	unknown
https://www.amazon.com/ap/signin?_encoding=UTF8&openid.assoc_handle=usflex&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.mode=checkid_setup&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0&openid.ns.pape=http%3A%2F%2Fspecs.openid.net%2Fextensions%2Fpape%2F1.0&openid.pape.max_auth_age=10000000&openid.return_to=https%3A%2F%2Fwww.amazon.com%2Ffavicon.ico	false		high
https://cdn.bidbrain.app/ext/download-icon_1697445891.svg+xml	false		high
https://bitbucket.org/account/signin/?next=/favicon.ico	false		high
https://500px.com/login?r=%2Ffavicon.ico	false		high
https://img.informer.com/images/empty.gif	false		high
https://software.informer.com/style/v4/min/program.min.css	false		high
https://lh3.googleusercontent.com/49X_jZPODshK81NcE2VTAn7jtIuCGi3bo2PH8UdQ8YV-X-3W8ik7UDMK1DFB7HO4uqZPhfZn6pki3HWeE2DMN204tg=s275-w275-h175	false		high
https://nuance-pdf-professional2.software.informer.com/fonts/SourceSansPro-Bold.woff	false	Avira URL Cloud: safe	unknown
https://www.dropbox.com/login?cont=https%3a%2f%2fwww.dropbox.com%2fstatic%2fimages%2ffavicon.ico	false		high
https://www.google.com/recaptcha/enterprise/reload?k=6LfkWDYqAAAAAJvAuJELqQLg85Lg8zAp-k7w8siS	false		high
https://cdn.protectonow.com/bg1_1735475692_1920x1080.png	false	Avira URL Cloud: safe	unknown
https://img.informer.com/images/v4/2stars.svg	false		high
https://secure.indeed.com/account/login?continue=%2ffavicon.ico	false		high
https://ep2.adtrafficquality.google/sodar/sodar2.js	false		high
https://www.google.com/js/bg/CY4IdQ8PNOqs9ugPxTaJh2hYWy8m1lFu__OIecPWn-w.js	false		high
https://fundingchoicesmessages.google.com/i/ca-pub-4821006852914359?href=https%3A%2F%2Fnuance-pdf-professional2.software.informer.com%2F7.2&ers=2	false		high
https://cdn.protectonow.com/ext/checkmark-chrome_1698059071.svg+xml	false	Avira URL Cloud: safe	unknown
https://g.bidbrain.app/rtimp?a=imp&cr=ext_download_prot_smrtsp&d=nuance-pdf-professional2.software.informer.com&gid=&im=FD4w747ub408eaM-61M3wJ3qfK7ErWHy518FlRGHao3f2PgYtkrU2HX0FFqbUAk8GJ00NxtW6WbXQuI8X1R_UXehWD3jEYZp8ei2zrBAxLF_eC2lrTItLT6yz_yg3qTdqPt-cj1efdGND7MZs7ZsJRipunhgT1FJD1LmFwmpi2OQr3jTzQR9zLhN6QczGb3mADM0t22ZeO2Xg8vOdZ1mlHLLgV4JF8Ewi3eE2AqQEV5caCIffDgbT78Fp5xkdUBCPKbARqx_8dnDHiOjCvOSb8zgsh2ZWSOtPn8Jt3midXYsYSKsXfbpaFDmrS7in6m-SbDqI-7b6lnILvGIshUNqXmndP6THKiDOHkNtxfBm68RZWVMHDodxBN1AQoMoSIGhvlBVALm3I3Zh-sHGXHJLE1ypsFqtnfq3svddbFFasOB2kyZpEryAs4P90VcBWSq&p=Z4g0tQANESoHg4m2ACXIeoWRGUCrQlQ9M1dJjA&sid=f2906c3b-d38e-11ef-93a7-aab196f2f20d	false		high
https://googleads.g.doubleclick.net/pagead/html/r20250113/r20190131/zrt_lookup_fy2021.html	false		high
https://cdn.protectonow.com/ext/stticon_1735726475.png	false	Avira URL Cloud: safe	unknown
https://www.google.com/pagead/drt/ui	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://workspaceupdates.googleblog.com/search/label/Rapid%20Releases	chromecache_283.2.dr	false		high
http://workspaceupdates.googleblog.com/search/label/YouTube	chromecache_283.2.dr	false		high
https://feedback.googleusercontent.com/resources/annotator.css	chromecache_350.2.dr	false		high
https://www.googletagservices.com/agrp/	chromecache_300.2.dr, chromecache_191.2.dr	false		high
https://apis.google.com/js/client.js	chromecache_350.2.dr	false		high
http://workspaceupdates.googleblog.com/search/label/Currents	chromecache_283.2.dr	false		high
http://workspaceupdates.googleblog.com/search/label/Google%20Calendar	chromecache_283.2.dr	false		high
http://workspaceupdates.googleblog.com/2022/01/	chromecache_283.2.dr	false		high
https://ep2.adtrafficquality.google	chromecache_249.2.dr, chromecache_280.2.dr	false		high
https://support.google.com/a/answer/13137538	chromecache_283.2.dr	false		high
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	chromecache_350.2.dr	false		high
http://workspaceupdates.googleblog.com/2023/06/	chromecache_283.2.dr	false		high
https://www.google.com/recaptcha/enterprise.js?render=6LfirrMoAAAAAHZOipvza4kpp_VtTwLNuXVwURNQ	chromecache_347.2.dr	false		high
https://www.blogger.com/feeds/5245696872621940063/posts/default	chromecache_283.2.dr	false		high
https://support.google.com/a/users/answer/11219858	chromecache_283.2.dr	false		high
https://fundingchoicesmessages.google.com/i/$	chromecache_412.2.dr, chromecache_225.2.dr	false		high
https://www.meetup.com/help/	chromecache_311.2.dr	false		high
https://slack.com/beacon/timing	chromecache_207.2.dr	false		high
https://store.fastly.steamstatic.com/public/shared/images/responsive/header_logo.png	chromecache_366.2.dr	false		high
http://workspaceupdates.googleblog.com/2022/12/	chromecache_283.2.dr	false		high
https://software.informer.com/go/go2.php?oe9&s=	chromecache_432.2.dr, chromecache_203.2.dr	false		high
http://workspaceupdates.googleblog.com/search/label/SAML	chromecache_283.2.dr	false		high
https://a.slack-edge.com/7250118/style/rollup-slack_kit_legacy_adapters.css	chromecache_207.2.dr	false		high
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	chromecache_350.2.dr	false		high
http://workspaceupdates.googleblog.com/2023/07/	chromecache_283.2.dr	false		high
http://workspaceupdates.googleblog.com/search/label/Drive%20for%20desktop	chromecache_283.2.dr	false		high
http://workspaceupdates.googleblog.com/2022/11/	chromecache_283.2.dr	false		high
https://software.informer.com/go/g.php?go=https%3A%2F%2Ftopxnotes.software.informer.com%2F&hs=473582	chromecache_410.2.dr	false		high
https://ep1.adtrafficquality.google/pagead/gen_204?id=sodar2&v=232	chromecache_249.2.dr, chromecache_280.2.dr	false		high
https://sandbox.google.com/inapp/%	chromecache_350.2.dr	false		high
https://a.slack-edge.com/db887d0/style/footer.css	chromecache_207.2.dr	false		high
http://workspaceupdates.googleblog.com/2023/04/streamlined-file-organization-google-drive-location-p	chromecache_283.2.dr	false		high
https://slack.com/is	chromecache_207.2.dr	false		high
http://workspaceupdates.googleblog.com/search/label/Admin%20SDK	chromecache_283.2.dr	false		high
http://workspaceupdates.googleblog.com/2023/08/	chromecache_283.2.dr	false		high
https://securepubads.g.doubleclick.net/pagead/js/cocar.js	chromecache_412.2.dr, chromecache_225.2.dr	false		high
http://workspaceupdates.googleblog.com/search/label/Google%20Slides	chromecache_283.2.dr	false		high
http://mathiasbynens.be/	chromecache_412.2.dr, chromecache_225.2.dr	false		high
http://workspaceupdates.googleblog.com/2022/10/	chromecache_283.2.dr	false		high
https://asx-frontend-autopush.corp.google.com/inapp/	chromecache_350.2.dr	false		high
https://www.meetup.com/privacy/	chromecache_311.2.dr	false		high
https://slackatwork.com	chromecache_207.2.dr	false	Avira URL Cloud: safe	unknown
http://workspaceupdates.googleblog.com/search/label/NotebookLM	chromecache_283.2.dr	false		high
https://store.fastly.steamstatic.com/public/javascript/main.js?v=wiAgKBaqWusf&l=english&_cdn	chromecache_366.2.dr	false		high
http://googleads.g.doubleclick.net	chromecache_284.2.dr, chromecache_412.2.dr, chromecache_225.2.dr, chromecache_301.2.dr	false		high
http://workspaceupdates.googleblog.com/2023/09/	chromecache_283.2.dr	false		high
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEil-tQSvWkISdvbujn818sEroZRYYKpRGceE-TwpWR	chromecache_283.2.dr	false		high
https://www.redditstatic.com/shreddit/polyfills/fetch.a1ad5fb96dc0cb61b9454244c9bd7fe6.js	chromecache_347.2.dr	false		high
https://ep2.adtrafficquality.google/sodar/$	chromecache_412.2.dr, chromecache_225.2.dr	false		high
http://workspaceupdates.googleblog.com/search/label/Gmail	chromecache_283.2.dr	false		high
https://help.steampowered.com/en/	chromecache_366.2.dr	false		high
https://store.fastly.steamstatic.com/public/javascript/applications/store/manifest.js?v=kTC9eG2cWexl	chromecache_366.2.dr	false		high
https://support.google.com/inapp/%	chromecache_350.2.dr	false		high
https://store.steampowered.com/?snr=1_60_4__global-header	chromecache_366.2.dr	false		high
http://workspaceupdates.googleblog.com/search/label/G%20Suite%20for%20Government	chromecache_283.2.dr	false		high
http://workspaceupdates.googleblog.com/search/label/Google%20Meet	chromecache_283.2.dr	false		high
http://www.steampowered.com/steamworks/	chromecache_366.2.dr	false		high
http://workspaceupdates.googleblog.com/search/label/Jamboard	chromecache_283.2.dr	false		high
http://workspaceupdates.googleblog.com/search/label/MDM	chromecache_283.2.dr	false		high
http://workspaceupdates.googleblog.com/search/label/Accounts	chromecache_283.2.dr	false		high
http://workspaceupdates.googleblog.com/search/label/Google%20Classroom	chromecache_283.2.dr	false		high
https://support.google.com/inapp/	chromecache_350.2.dr	false		high
https://asx-frontend-autopush.corp.google.co.uk/inapp/	chromecache_350.2.dr	false		high
http://workspaceupdates.googleblog.com/search/label/Android	chromecache_283.2.dr	false		high
https://apis.google.com	chromecache_270.2.dr, chromecache_213.2.dr, chromecache_232.2.dr, chromecache_433.2.dr, chromecache_195.2.dr, chromecache_404.2.dr	false		high
https://store.fastly.steamstatic.com/public/shared/css/shared_responsive.css?v=r6syZUh8_Rpk&l=en	chromecache_366.2.dr	false		high
https://steamcommunity.com/workshop/	chromecache_366.2.dr	false		high
https://slack.com/	chromecache_207.2.dr	false		high
https://store.steampowered.com/steam_refunds/?snr=1_44_44_	chromecache_366.2.dr	false		high
http://workspaceupdates.googleblog.com/search/label/Google%20Drawings	chromecache_283.2.dr	false		high
https://domains.google.com/suggest/flow	chromecache_270.2.dr, chromecache_433.2.dr, chromecache_404.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.100	unknown	United States	15169	GOOGLEUS	false
151.101.128.84	prod.pinterest.global.map.fastly.net	United States	54113	FASTLYUS	false
104.22.16.194	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.65.140	reddit.map.fastly.net	United States	54113	FASTLYUS	false
18.245.39.216	d2bytcopxu066p.cloudfront.net	United States	16509	AMAZON-02US	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
18.172.112.126	unknown	United States	3	MIT-GATEWAYSUS	false
3.68.124.95	slack.com	United States	16509	AMAZON-02US	false
99.86.8.42	d3ag4hukkh62yn.cloudfront.net	United States	16509	AMAZON-02US	false
157.240.0.35	unknown	United States	32934	FACEBOOKUS	false
172.217.18.2	ep1.adtrafficquality.google	United States	15169	GOOGLEUS	false
172.217.18.1	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.142	unknown	United States	15169	GOOGLEUS	false
212.82.100.140	ds-ats.member.g02.yahoodns.net	United Kingdom	34010	YAHOO-IRDGB	false
216.58.206.36	unknown	United States	15169	GOOGLEUS	false
162.159.153.4	medium.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.162	unknown	United States	15169	GOOGLEUS	false
3.248.162.96	unknown	United States	16509	AMAZON-02US	false
3.68.124.168	unknown	United States	16509	AMAZON-02US	false
151.101.194.214	unknown	United States	54113	FASTLYUS	false
185.166.143.50	bitbucket.org	Germany	16509	AMAZON-02US	false
162.125.66.18	www-env.dropbox-dns.com	United States	19679	DROPBOXUS	false
37.244.28.102	eu.battle.net	European Union	57976	BLIZZARDEU	false
140.82.121.3	github.com	United States	36459	GITHUBUS	false
140.82.121.4	unknown	United States	36459	GITHUBUS	false
87.240.132.67	vk.com	Russian Federation	47541	VKONTAKTE-SPB-AShttpvkcomRU	false
151.101.1.140	unknown	United States	54113	FASTLYUS	false
151.101.2.214	h2.twitch.map.fastly.net	United States	54113	FASTLYUS	false
162.159.137.66	squareup.com	United States	13335	CLOUDFLARENETUS	false
13.32.121.16	euob.7roundprince.com	United States	16509	AMAZON-02US	false
95.101.149.47	store.steampowered.com	European Union	20940	AKAMAI-ASN1EU	false
208.82.238.246	post.g.craigslist.org	United States	22414	CRAIGS-NET-1US	false
142.250.185.97	unknown	United States	15169	GOOGLEUS	false
142.250.185.98	unknown	United States	15169	GOOGLEUS	false
104.22.17.194	software.informer.com	United States	13335	CLOUDFLARENETUS	false
162.159.129.67	secure.indeed.com	United States	13335	CLOUDFLARENETUS	false
18.246.122.98	unknown	United States	16509	AMAZON-02US	false
18.172.112.18	500px.com	United States	3	MIT-GATEWAYSUS	false
192.0.77.40	www.tumblr.com	United States	2635	AUTOMATTICUS	false
142.250.184.225	ep2.adtrafficquality.google	United States	15169	GOOGLEUS	false
142.250.184.228	unknown	United States	15169	GOOGLEUS	false
208.82.238.230	unknown	United States	22414	CRAIGS-NET-1US	false
142.250.186.34	unknown	United States	15169	GOOGLEUS	false
151.101.192.134	unknown	United States	54113	FASTLYUS	false
172.67.200.191	cdn.protectonow.com	United States	13335	CLOUDFLARENETUS	false
34.8.123.242	g4.bidbrain.app	United States	2686	ATGS-MMD-ASUS	false
172.67.43.115	i.informer.com	United States	13335	CLOUDFLARENETUS	false
157.240.253.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
104.21.50.45	g.protectonow.com	United States	13335	CLOUDFLARENETUS	false
172.217.16.196	unknown	United States	15169	GOOGLEUS	false
151.101.64.134	disqus.com	United States	54113	FASTLYUS	false
172.67.176.164	serve.bidbrain.app	United States	13335	CLOUDFLARENETUS	false
74.117.179.70	img.informer.com	United States	40824	WZCOM-US	false
142.250.186.174	unknown	United States	15169	GOOGLEUS	false
204.155.159.109	hits.informer.com	United States	40824	WZCOM-US	false
74.125.250.129	stun.l.google.com	United States	15169	GOOGLEUS	false
44.216.185.77	ws-broker-service.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
104.244.42.65	twitter.com	United States	13414	TWITTERUS	false
104.244.42.1	x.com	United States	13414	TWITTERUS	false
142.250.186.162	adclick.g.doubleclick.net	United States	15169	GOOGLEUS	false
34.251.101.162	obseu.7roundprince.com	United States	16509	AMAZON-02US	false
162.159.140.28	cdn.app.squareup.com	United States	13335	CLOUDFLARENETUS	false
151.101.1.21	paypal-dynamic.map.fastly.net	United States	54113	FASTLYUS	false
18.246.119.221	ws-broker-service.us-west-2.amazonaws.com	United States	16509	AMAZON-02US	false
13.32.121.54	unknown	United States	16509	AMAZON-02US	false
104.21.80.92	cdn.bidbrain.app	United States	13335	CLOUDFLARENETUS	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1592224
Start date and time:	2025-01-15 23:19:27 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 31s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://nuance-pdf-professional2.software.informer.com/7.2/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@31/413@228/69

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.35, 172.217.18.14, 108.177.15.84, 142.250.184.206, 142.250.186.78, 142.250.184.238, 142.250.184.200, 142.250.185.66, 142.250.185.163, 142.250.185.78, 142.250.185.74, 142.250.186.42, 216.58.206.74, 216.58.212.170, 172.217.18.106, 142.250.185.138, 142.250.184.234, 216.58.212.138, 172.217.16.202, 142.250.185.170, 142.250.186.74, 142.250.74.202, 172.217.18.10, 142.250.185.106, 142.250.185.202, 142.250.185.234, 142.250.181.232, 142.251.168.84, 142.250.185.193, 142.250.186.130, 172.217.16.193, 142.250.185.226, 142.250.186.67, 142.250.186.98, 142.250.185.195, 199.232.210.172, 142.250.186.99, 184.30.131.245, 142.250.181.238, 216.58.206.67, 142.250.181.234, 142.250.186.138, 216.58.206.42, 142.250.186.106, 142.250.184.202, 142.250.186.170, 216.58.206.35, 172.217.23.110, 142.250.110.84, 2.23.196.184, 2.19.96.154, 2.19.96.160, 2.19.96.138, 2.19.96.153, 2.19.96.146, 2.19.96.250, 2.19.96.139, 2.19.96.251, 2.19.96.163, 151.101.2.217, 151.101.66.217, 151.101.130.217, 151.
Excluded domains from analysis (whitelisted): ssl.gstatic.com, www.googleadservices.com, www.expedia.de.edgekey.net, slscr.update.microsoft.com, p3.shared.global.fastly.net, clientservices.googleapis.com, san.airbnb.com.edgekey.net, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, www.googletagmanager.com, 2-01-37d2-0018.cdx.cedexis.net, update.googleapis.com, www.gstatic.com, www.google-analytics.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, fonts.gstatic.com, ctldl.windowsupdate.com, e6238.x.akamaiedge.net, ogads-pa.googleapis.com, pagead2.googlesyndication.com, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, tpc.googlesyndication.com, clients.l.google.com, e118243.a.akamaiedge.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://nuance-pdf-professional2.software.informer.com/7.2/

Input	Output
URL: https://nuance-pdf-professional2.software.informer.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": true, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": true, "reasoning": "This is a legitimate software.informer.com domain, but it uses a long subdomain structure referencing Nuance PDF Professional software. While software.informer.com is a known software information website, it's a third-party hosting platform rather than Nuance's official domain." }
URL: https://nuance-pdf-professional2.software.informer.com
URL: https://nuance-pdf-professional2.software.informer... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a simple check for the presence of an ad banner element on the page. It adds a CSS class 'noads1' to the body element if the ad banner's height is less than 1 pixel. This behavior is likely part of a legitimate functionality, such as detecting ad blockers or adjusting the layout based on the presence of ads. The code does not exhibit any high-risk indicators, such as dynamic code execution, data exfiltration, or obfuscation. Therefore, this script is considered low risk." }
wOnLoad(function(){ $j(document).ready(function(){ //setTimeout(function() { if (document.getElementById("adBanner").clientHeight < 1) document.body.className += ' noads1'; //}, 100); }) });
URL: https://nuance-pdf-professional2.software.informer... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet does not contain any high-risk indicators, such as dynamic code execution, data exfiltration, or heavily obfuscated code. It primarily consists of utility functions and event handlers, which are common in web development. While the script uses some legacy practices, such as the `XDomainRequest` API, these pose minor risks and are not inherently malicious. Overall, the script appears to be focused on page load and layout-related functionality, which is a relatively low-risk context." }
softadvice_cookie_name = '_gsid'; softadvice_cookie_name_sengine = '_from_sengine';var auth_cb_data = {blocks:{}, handlers:{}};window.windowIsLoaded = false; window.windowIsLoadedFunc = []; function wOnLoad(load_f){ if (window.windowIsLoaded){ if (typeof load_f == 'function') load_f(); } else window.windowIsLoadedFunc.push(load_f); } document.onreadystatechange = function () { if (document.readyState == "complete") eval_onload_funtions(); } function eval_onload_funtions(){ if (!window.windowIsLoaded){ window.windowIsLoaded = true; window.windowIsLoadedFunc.forEach(function(f){ if (typeof f=='function') f(); }); } }function document_width() { var clientWidth = typeof document.documentElement["clientWidth"] !== 'undefined' ? parseInt(document.documentElement["clientWidth"]) : 0; var d_scrollWidth = typeof document.documentElement["scrollWidth"] !== 'undefined' ? parseInt(document.documentElement["scrollWidth"]) : 0; var d_offsetWidth = typeof document.documentElement["offsetWidth"] !== 'undefined' ? parseInt(document.documentElement["offsetWidth"]) : 0; var b_scrollWidth = document.body !== null && typeof document.body === 'object' && typeof document.body["scrollWidth"] !== 'null' ? parseInt(document.body["scrollWidth"]) : 0; var b_offsetWidth = document.body !== null && typeof document.body === 'object' && typeof document.body["offsetWidth"] !== 'null' ? parseInt(document.body["offsetWidth"]) : 0;return Math.max(clientWidth, d_scrollWidth, d_offsetWidth, b_scrollWidth, b_offsetWidth); }function site_login_callback(){}function isScrolledIntoView(el) { var rect = el.getBoundingClientRect(); var elemTop = rect.top; var elemBottom = rect.bottom; return elemTop < window.innerHeight && elemBottom >= 0; }
URL: https://nuance-pdf-professional2.software.informer... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a simple script that loads styles dynamically. It does not exhibit any high-risk behaviors, such as dynamic code execution, data exfiltration, or obfuscation. The script uses standard DOM manipulation techniques to append a style element to the page and remove the original element. This behavior is consistent with a legitimate use case for loading styles, and there are no suspicious indicators present. Therefore, the risk score is low." }
var loadStyl=function(){var a=document.getElementById("load-styles"),b=document.createElement("div");b.innerHTML=a.textContent;document.body.appendChild(b);a.parentElement.removeChild(a)},raf=window.requestAnimationFrame\|\|window.mozRequestAnimationFrame\|\|window.webkitRequestAnimationFrame\|\|window.msRequestAnimationFrame;raf?raf(function(){window.setTimeout(loadStyl,0)}):window.addEventListener("load",loadStyl);
URL: https://get4.protectonow.com/install/?mid=f28d8534... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated URLs. It creates a script tag and an iframe that load content from untrusted domains, which could potentially be used for malicious purposes such as phishing or credential theft." }
!function(){function e(e,n){e.forEach(((e,t)=>n.setAttribute(t,e)))}!window.CHEQ.startsWith("$$")&&"1"===window.CHEQ&&function(){try{const n=function(){const n=document.createElement("script"),t={async:"true",src:"https://euob.7roundprince.com/sxp/i/7d278047aab7cca6e1b3bb44e5382d20.js",class:"ct_clicktrue_74676","data-ch":"Channel1","data-jsonp":"onCheqResponse","data-uvid":window.SID};return e(new Map(Object.entries(t)),n),n}(),t=function(){const n=document.createElement("noscript"),t=document.createElement("iframe");return e(new Map(Object.entries({src:"https://obs.7roundprince.com/ns/7d278047aab7cca6e1b3bb44e5382d20.html?ch=Channel1",width:"0",height:"0",style:"display:none"})),t),n.appendChild(t),n}();document.head.appendChild(n),document.body.appendChild(t)}catch(e){console.log(e)}}()}()
URL: https://euob.7roundprince.com/sxp/i/7d278047aab7cc... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "This script exhibits several moderate-risk behaviors, including external data transmission, the use of fallback domains, and aggressive DOM manipulation. While it does not contain any high-risk indicators like dynamic code execution or obvious data exfiltration, the overall behavior is concerning and requires further review. The script's interactions with potentially untrusted domains and its inconsistent behavior compared to its apparent purpose contribute to the medium-risk assessment." }
!function(t){var n={};function r(e){if(n[e])return n[e].exports;var i=n[e]={i:e,l:!1,exports:{}};return t[e].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=n,r.d=function(t,n,e){r.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:e})},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"_",{value:!0})},r.t=function(t,n){if(1&n&&(t=r(t)),8&n)return t;if(4&n&&"object"==typeof t&&t&&t._)return t;var e=Object.create(null);if(r.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:t}),2&n&&"string"!=typeof t)for(var i in t)r.d(e,i,function(n){return t[n]}.bind(null,i));return e},r.n=function(t){var n=t&&t._?function(){return t.default}:function(){return t};return r.d(n,"a",n),n},r.o=function(t,n){return Object.prototype.hasOwnProperty.call(t,n)},r.p="",r(r.s=5)}([function(t,n,r){var e=r(1),i=window,a=i.document,c=i.location,o=encodeURIComponent,u=decodeURIComponent,f=i.navigator,v="https://obseu.7roundprince.com/",s="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",l="abcdefghijklmnopqrstuvwxyz",d=l.split(""),h="ABCDEFGHIJKLMNOPQRSTUVWXYZ",p=h.split(""),_="12345678901234567890123456".split(""),y={C:function(t,n,r){return(r=void 0!==r?r:0)>100?-1:0===n?t:y.C(n,t%n,r+1)},S:function(t){return 0===t.length},I:function(t){try{return"[object Array]"===Object.prototype.toString.call(t)}catch(n){return y.k(t.length)}},A:function(t,n){for(var r in t=t\|\|{},n)delete t[r];return t},O:function(t,n){for(var r in t=t\|\|{},n)t[r]=n[r];return t},F:function(t){return encodeURIComponent(t)},R:function(t){try{return JSON.stringify(t)}catch(t){return""}},D:function(t,n,r){n=n\|\|",";var e=[];for(var i in t)r\|\|e.push(i),e.push(t[i]);return e.join(n)},N:function(){},T:function(t){return!Math.floor(Math.random()t)},j:function(t,n){return n\|\|(n=t,t=0),t=Math.ceil(t),n=Math.floor(n),Math.floor(Math.random()(n-t+1))+t},M:function(t){for(var n="",r="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",e=r.length,i=0;i<t;i++)n+=r.charAt(Math.floor(Math.random()e));return n},B:function(t,n){n<0&&(n=26-Math.abs(n)%26);var r="";return t.split("").forEach(function(t,e){var i=function(t,n){var r=null;if(d.indexOf(t)>=0?r=d:p.indexOf(t)>=0?r=p:_.indexOf(t)>=0&&(r=_),null!==r){var e=r.indexOf(t);return r[function(t,n){return(t+n)%26}(e,n)]}return t}(t,n);r+=i}),r},k:function(t){return void 0!==t},P:function(t){return!y.k(t)},U:function(t){return"function"==typeof t},L:function(t){return t&&"undefined"!==t},V:function(t,n){return n=n\|\|10,parseInt(t,n)},J:function(t){return"string"==typeof t},W:function(t){return"number"==typeof t},G:function(t){return/^\d+$/.test(t)},H:function(t){return y.V(t)%2==1},$:function(t){return y.V(t)%2==0},K:function(t){var n=y.V(t[0],32);return y.V(y.B(t.substring(1+n,t.length),-1n))},Z:(m=2654435761,g=2246822519,b=3266489917,w=374761393,C=4294901760,S=function(t,n){var r=t.charCodeAt(n+3);return(r=256(r=256(r=256r+t.charCodeAt(n+2))+t.charCodeAt(n+1))+t.charCodeAt(n))>>>0},I=function(t,n){return t<<n>>>0\|t>>>32-n},E=function(t,n){var r=65535&t,e=65535&n;return re+r(n&C)+(t&C)e>>>0},k=function(t,n,r){return E(I(t+E(g,S(n,r)),13),m)},function(t){try{var n,r,e,i,a,c,o=0,u=t.length;if(16>u)c=0+w;else{n=u-16,r=606290984,e=0+g,i=0,a=0-m;do{r=k(r,t,o),e=k(e,t,o+=4),i=k(i,t,o+=4),a=k(a,t,o+=4),o+=4}while(n>=o);c=I(r,1)+I(e,7)+I(i,12)+I(a,18)}for(c=c+u>>>0,n=u-4;n>=o;)c+=E(S(t,o),b),c=E(I(c>>>=0,17),668265263),o+=4;for(;u>o;)c+=E(t.charCodeAt(o),w),c=E(I(c>>>=0,11),m),++o;return c=E(c^=c>>>15,g),c=E(c^=c>>>13,b),(c^=c>>>16)>>>0}catch(t){return""}}),X:function(t,n){for(var r="",e=0;e<t.length;e++)r+=String.fromCharCode(t.charCodeAt(e)^(n\|\|214));return r},Y:function(t){if(i.atob)return i.atob(t);if(t=String(t).replace(/[\t\n\f\r ]+/g,""),!/^(?:[A-Za-z\d+\/]{4})*?(?:[A-Za-z\d+\/]{2}(?:==)?\|[A-Za-z\d+\/]{3}=?)?$/.test(t))throw new TypeError("atob failed");t+="==".slice(2-(3&t.length));for(var n,r,e,a="",c=0
URL: https://obseu.7roundprince.com/ct?id=74676&url=htt... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated code/URLs. The script appears to be executing a complex operation involving a large amount of encoded data, which is highly suspicious and indicative of malicious intent. Additionally, the script interacts with an untrusted domain, further increasing the risk. Overall, this script demonstrates clear signs of malicious activity and poses a significant security threat." }
typeof __ctcg_ct_74676_exec === 'function' && __ctcg_ct_74676_exec({"tc":"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","mon":"37dfbd8ee84e001269e8ce32e3418c9d9225c24f567d43d6da1908be6245cad7bd70a976710ce60ed89373bfe70e9c20c1e53e8d59158b6a2117071a10acf9f29f674f86808155786a48fb792105876dd66595013804719707520c30510c93e8384677be26bb25cb43e29b25f45471ad0f2e6410d25afe5aecd2948a7fe07f52a13ad2a24710d14e681f2d1586d31c64e56ac8bf88b71208fe59f1d329e921c46bcf40e25c7ea8290ee95c400035db386ee683e99332bd06b442c316f0496f70bfc72f02431e24f97999c140ab51258fc6e279126332a5de6c7fd6d5431f2b436f0715a7902c701e56f2ab0b2093aef6298ee35d60013ee9f3e4869265ec8ed653be559a5a3a309ce192bcf733c2dbb33fc1360b80ac9c2f4a44f0356bba8c063abbcaf1778b05ff40ae965
URL: https://get4.protectonow.com/install/?mid=f28d8534... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The provided JavaScript snippet contains a mix of behaviors that warrant further review. While it does not exhibit any high-risk indicators like dynamic code execution or data exfiltration, it does include some moderate-risk behaviors, such as external data transmission and the use of fallback domains. Additionally, the script appears to be engaging in aggressive DOM manipulation and contains some obfuscated code. However, the overall intent seems to be related to analytics and user tracking, which is a common practice, albeit with some questionable implementation details. Given the contextual factors, this script should be reviewed more closely, but it does not appear to be overtly malicious." }
window.SID="f28d8534-d38e-11ef-93a7-aab196f2f20d",window.FID="fda94c9a-d38e-11ef-bc27-c22fbff8fb28",window.EXP={"name":"ext_lp_157$$color@original"},window.DOM="$$$DOM$$$",window.CRID="",window.CNM="ext-common-lp",window.CLICK_URL_ESC_MACRO="",window.GID="",window.UID="fda95280-d38e-11ef-bc27-c22fbff8fb28",window.IS_APP="0",window.IS_INTERSTITIAL="0",window.IS_DEMO=0,window.PARAMS_B64={"classes":{"cta":{"border":"none","fontSize":"25px","fontWeight":"400","height":"65px"},"link":{"borderBottom":"1px dashed #f78f8f","color":"#f78f8f"},"text":{"color":"#222","fontFamily":"Roboto","lineHeight":"130%"}},"customAnimations":{"expandCompatibility":{"0":{"height":"0px","opacity":"0"},"100":{"height":"88px"},"50":{"opacity":"1"}}},"customJS":{"doneSync":"fetch('\/doneSync')","hotjar_snippet":" ","userSync":"function getUrlVars(){var r={};return window.location.href.replace(\/[?&]+([^=&]+)=([^&])\/gi,function(e,a,t){r[a]=t}),r} function loadUserSync(){var r=getUrlVars().uq;if(r){var e=`\/adx\/userSync\/${Math.floor(1e8Math.random())}.js?id=${r}`,a=document.createElement(\"script\");a.type=\"text\/javascript\",a.src=e,document.head.appendChild(a)}}loadUserSync();"},"customStepTemplates":{"custom_footer":{"config":{"placement":{"height":"35px","vertical":{"alignment":"bottom"},"width":"100vw"},"textParams":{"actions":{"click":[]},"style":["text",{"color":"#222222","cursor":"default","fontSize":"14px","lineHeight":"21px","padding":"7px 0px"}],"text":[{"actions":{"click":[{"target":"EULA","type":"target"}]},"text":"EULA"}," \| ",{"actions":{"click":[{"target":"Privacy","type":"target"}]},"text":"Privacy"}," \| ",{"actions":{"click":[{"target":"Contact","type":"target"}]},"text":"Contact"}," \| ",{"actions":{"click":[{"target":"Uninstall","type":"target"}]},"text":"Uninstall"},{"style":{"cursor":"default","marginLeft":"20px"},"text":"\u00a9 Copyright 2025 protectonow.com - All Rights Reserved."}]},"type":"text"},"params":{}},"custom_page_container":{"config":{"containerParams":{"actions":{},"elements":{"container":{"containerParams":{"elements":{"add_ext_btn":{"imageParams":{"actions":{"click":[{"target":"redirect_pop","type":"overlay"},{"target":"ext","type":"startPolling"},{"target":"post_click_main","type":"event"},{"delay":1500,"target":"store","type":"target"}],"hover":[{"target":"post_click_hover","type":"event"}]},"imageUrl":"https:\/\/cdn.protectonow.com\/btn_win_1735204076.svg+xml","responsiveStyle":{"mac":{"content":"url('https:\/\/cdn.protectonow.com\/btn_mac_1735204075.svg+xml')"}},"style":{"cursor":"pointer","width":"350px"}},"showParams":{"hidden":true},"type":"image"},"add_ext_btn2":{"buttonParams":{"actions":{"click":[{"target":"redirect_pop","type":"overlay"},{"target":"ext","type":"startPolling"},{"target":"post_click_main","type":"event"},{"delay":1500,"target":"store","type":"target"}],"hover":[{"target":"post_click_hover","type":"event"}]},"pseudoStyle":{"hover":{"background":"#1eaedb"}},"style":["text","cta",{"background":"#2196f3","borderRadius":"50px","color":"white","marginBottom":"-25px","marginTop":"-25px","padding":"0px 30px","scale":"1.2"}],"text":"+ ADD EXTENSION TO CHROME"},"showParams":{"hidden":true},"type":"button"},"add_ext_btn_text":{"buttonParams":{"actions":{"click":[{"target":"redirect_pop","type":"overlay"},{"target":"ext","type":"startPolling"},{"target":"post_click_main","type":"event"},{"delay":1500,"target":"store","type":"target"}],"hover":[{"target":"post_click_hover","type":"event"}]},"pseudoStyle":{"hover":{"background":"#1eaedb"}},"style":["text","cta",{"background":"#2196f3","borderRadius":"50px","color":"white","marginBottom":"-25px","marginTop":"-25px","padding":"0px 30px","scale":"1.2"}],"text":"+ ADD EXTENSION TO CHROME"},"showParams":{"hidden":true},"type":"button"},"already_installed_btn":{"buttonParams":{"actions":{"click":[]},"pseudoStyle":{"hover":{"cursor":"default"}},"style":["text","cta",{"background":"#ccc","borderRadius":"2px","color":"#666","marginBottom":"40px","marginTop":"2
URL: https://get4.protectonow.com/siglp.js?rpclid=f28d8... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. It also performs aggressive DOM manipulation and interacts with external domains of unknown reputation. While some of the functionality may be intended for legitimate purposes like analytics and error reporting, the overall behavior and lack of transparency raise significant security concerns." } The key factors contributing to the high-risk score are: 1. Dynamic Code Execution (3 points): The script uses `atob()` and `JSON.parse()` to decode and execute dynamic code, which poses a high risk of remote code execution. 2. Data Exfiltration (3 points): The script sends user data, including errors and potentially sensitive information, to external domains like `fl_` and `tracker-unknown.com`. 3. Obfuscated Code/URLs (3 points): The script uses heavily obfuscated code, making it difficult to understand the true intent and functionality. 4. Aggressive DOM Manipulation (2 points): The script repeatedly alters the DOM, including clearing `innerHTML`, which can be a sign of malicious activity. 5. Suspicious Domains (1 point): The script interacts with domains of unknown or dubious reputation, such as `tracker-unknown.com`. While the script may have some legitimate functionality, such as analytics and error reporting, the overall lack of transparency and the presence of high-risk behaviors outweigh any potential benefits. The combination of these factors results in a high-risk score of 7, indicating that this script requires further investigation and should be treated with caution.
var g=Object.defineProperty,y=(n,q,p)=>q in n?g(n,q,{enumerable:!0,configurable:!0,writable:!0,value:p}):n[q]=p,h=(n,q,p)=>(y(n,"symbol"!=typeof q?q+"":q,p),p); (function(){function n(a,b){window.sendEvent?window.sendEvent("fl_"+a,b):(E\|\|=setInterval(q,100),z.push({event:a,extra:b}))}function q(){window.sendEvent&&(clearInterval(E),z.forEach(a=>{n(a.event,a.extra)}),z=[])}function p(a,b){n(w.Error,{error:{message:null!=b&&b.message?`${a} - ${b.message}`:a}})}function I(a,b){return atob(a).split("").map(c=>c.charCodeAt(0)).map(c=>String.fromCharCode(c^b)).join("")}function F(a,b,c=!1){if("string"!=typeof a&&(a=JSON.stringify(a)),a.startsWith("$$"))return b; try{return JSON.parse(c?window.atob(a):a)}catch(d){return p("failed decoding config",d),b}}function v(a){return a.reduce((b,c)=>b+c,0)/a.length}function A(a){const b=v(a);return Math.sqrt(a.reduce((c,d)=>c+Math.pow(d-b,2),0)/a.length)}function J(a,b){return new Promise((c,d)=>{setTimeout(()=>{d(Error(b??`timeout ${a}`))},a)})}async function K(a,b,c){return Promise.race([a,J(b,c)])}function G(a){return new Promise(b=>setTimeout(b,a))}async function L(a,b,c){for(let e=0;e<c;e++){var d=performance.now(); await a();d=b-(performance.now()-d);e<c-1&&0<d&&await G(d)}}function M(a){if(0<Object.keys(a).length)return a;const b={};for(const c in a){const d=a[c];null!=d&&"function"!=typeof d&&(b[c]=a[c])}return b}function N(a,b){if(b.type===l.Static)return new O(a,b);if(b.type===l.Network)return new P(a,b);if(b.type===l.Element)return new Q(a,b);if(b.type===l.Mouse)return new R(a,b);if(b.type===t.Login)return new S(a,b);if(b.type===t.Ip)return new T(a,b);if(b.type===t.Sensor)return new U(a,b);throw Error(`invalid type in ${a}`); }var l=(a=>(a.Static="static",a.Network="network",a.Mouse="mouse",a.Element="element",a))(l\|\|{}),t=(a=>(a.Login="login",a.Ip="ip",a.Sensor="sensor",a))(t\|\|{});l.Network;l.Static;l.Static;l.Static;l.Element;l.Mouse;t.Sensor;t.Ip;l.Network;t.Login;l.Static;l.Static;l.Static;l.Element;const V={version:1,collectors:{}};var w=(a=>(a.Signal="sig",a.Init="init",a.Error="error",a))(w\|\|{});let z=[],E;class u{constructor(a,b){h(this,"config");h(this,"name");h(this,"eventListeners");this.config=b;this.name= a;this.eventListeners={};try{this.initialize()}catch(c){this.reportError("error initializing",c)}"complete"!==document.readyState?window.addEventListener("load",()=>{try{this.ready()}catch(c){this.reportError("error invoking ready",c)}}):this.ready()}initialize(){}ready(){}report(a,b){n(w.Signal,{name:this.name,success:a,fail:b})}reportError(a,b){p(`${this.name}[${this.config.type}]: ${a}`,b)}addEventListener(a,b,c,d,e){let f=0;const k=m=>{try{b(m)}catch(r){this.reportError(`error in ${a}`,r),e&& this.removeEventListeners(d,a)}finally{f++,c&&f>=c&&this.removeEventListeners(d,a)}};window.addEventListener(a,k,{capture:!0,passive:!0});this.eventListeners[a]=k}removeEventListeners(a=!0,b){a?Object.keys(this.eventListeners).forEach(c=>{this.removeEventListener(c)}):this.removeEventListener(b)}removeEventListener(a){if(a){var b=this.eventListeners[a];b&&(window.removeEventListener(a,b,{capture:!0}),delete this.eventListeners[a])}}}class Q extends u{constructor(a,b){super(a,b)}ready(){const a=this.config.elements; for(const [b,c]of Object.entries(a))this.createElement(b,c)}createElement(a,b){const {type:c,parent:d,attributes:e,style:f}=b;b=this.getParentElement(null==d?void 0:d.selector);if(!b)return void p(`failed to find parent element with selector ${null==d?void 0:d.selector} for ${a}`);const k=document.createElement(c),m={position:"absolute",zIndex:"10",fontSize:"1px",opacity:"0.01",...f};k.id=a;Object.assign(k,e);Object.assign(k.style,m);k.addEventListener("click",this.onElementClick);this.insertElement(k, b,null==d?void 0:d.prepend)}insertElement(a,b,c){c?b.prepend(a):b.append(a)}getParentElement(a){return a?document.querySelector(a):document.body}onElementClick(a){const b=a.target;b.style.pointerEvents="none";const c=document.elementFromPoint(a.clientX,a.clientY);if(b.styl
URL: https://www.gstatic.com/mysidia/14c7483e36ccb504f5... Model: Joe Sandbox AI	```json { "risk_score": 2, "reasoning": "The script contains moderate-risk indicators such as potential external data transmission through URL manipulation and query parameter handling. However, there are no high-risk behaviors like dynamic code execution or data exfiltration. The script appears to be part of a legitimate library (Closure Library) with no clear malicious intent." }
(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / var m=this\|\|self;function aa(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=m,e=0;e<c.length;e++)if(d=d[c[e]],d==null){c=null;break a}c=d}a=c&&c[a];return a!=null?a:b}function ba(a){return a};function q(a,b){if(!b)return a;b.indexOf("&")===0&&(b=b.substring(1));const c=/[?&]adurl=([^&])/.exec(a);return c?`${a.slice(0,c.index+1)}${b}&${a.slice(c.index+1)}`:`${a}${a.indexOf("?")===-1?"?":"&"}${b}`}function ca(a,b){switch(a){case 0:return b?"&ri=1":"";case 1:return b?"&ri=24":"&ri=27";case 2:return b?"&ri=25":"&ri=26";default:return""}} function da(a){a=a.o;if(!a)return"";let b="";a.platform&&(b+="&uap="+encodeURIComponent(a.platform));a.platformVersion&&(b+="&uapv="+encodeURIComponent(a.platformVersion));a.uaFullVersion&&(b+="&uafv="+encodeURIComponent(a.uaFullVersion));a.architecture&&(b+="&uaa="+encodeURIComponent(a.architecture));a.model&&(b+="&uam="+encodeURIComponent(a.model));a.bitness&&(b+="&uab="+encodeURIComponent(a.bitness));a.fullVersionList&&(b+="&uafvl="+encodeURIComponent(a.fullVersionList.map(c=>encodeURIComponent(c.brand)+ ";"+encodeURIComponent(c.version)).join("\|")));typeof a.wow64!=="undefined"&&(b+="&uaw="+Number(a.wow64));return b}function ea(a,b){return a.l?typeof a.i!=="string"\|\|a.i.length===0?null:{version:3,C:a.i,u:q(a.g,"&act=1"+ca(b,!0)+da(a))}:a.m?(a=a.g,a=/[?&]suid=/.test(a)?a:q(a,"&suid="+(Date.now()-(new Date("2024-01-01T00:00:00Z")).getTime())),{version:4,C:q(a,"&dct=1"+ca(b,!1)),u:q(a,"&act=1"+ca(b,!0))}):null}function fa(a,b){return b===2?q(a.g,"&ri=2"):b===0?q(a.g,"&ri=16"):a.g} var ha=class{constructor({url:a,aa:b}){this.g=a;this.o=b;b=/[?&]dsh=1(&\|$)/.test(a);this.l=!b&&/[?&]ae=1(&\|$)/.test(a);this.m=!b&&/[?&]ae=2(&\|$)/.test(a);this.h=/[?&]adurl=([^&])/.exec(a);this.B=!b&&/[?&]aspm=1(&\|$)/.test(a);if(this.h&&this.h[1]){let c;try{c=decodeURIComponent(this.h[1])}catch(d){c=null}this.i=c}}};/ Copyright Google LLC SPDX-License-Identifier: Apache-2.0 / var r=class{constructor(a){this.g=a}toString(){return this.g}},ia=new r("about:invalid#zClosurez");class ka{constructor(a){this.ha=a}}function u(a){return new ka(b=>b.substr(0,a.length+1).toLowerCase()===a+":")}const la=new ka(a=>/^[^:]([/?#]\|$)/.test(a));var ma=u("http"),na=u("https"),oa=u("ftp"),qa=u("mailto"),ra=u("intent"),sa=u("market"),ta=u("itms"),ua=u("itms-appss");const va=[u("data"),ma,na,qa,oa,la];function wa(a,b=va){if(a instanceof r)return a;for(let c=0;c<b.length;++c){const d=b[c];if(d instanceof ka&&d.ha(a))return new r(a)}}function xa(a,b=va){return wa(a,b)\|\|ia}var ya=/^\s(?!javascript:)(?:[\w+.-]+:\|[^:/?#](?:[/?#]\|$))/i;function za(a,b){if(b instanceof r)if(b instanceof r)b=b.g;else throw Error("");else b=ya.test(b)?b:void 0;b!==void 0&&(a.href=b)};function Aa(a,b){a:{const c=a.length,d=typeof a==="string"?a.split(""):a;for(let e=0;e<c;e++)if(e in d&&b.call(void 0,d[e],e,a)){b=e;break a}b=-1}return b<0?null:typeof a==="string"?a.charAt(b):a[b]};function Ba(a,b){a.__closure__error__context__984382\|\|(a.__closure__error__context__984382={});a.__closure__error__context__984382.severity=b};var Ca=RegExp("^(?:([^:/?#.]+):)?(?://(?:([^\\\\/?#])@)?([^\\\\/?#]?)(?::([0-9]+))?(?=[\\\\/?#]\|$))?([^?#]+)?(?:\\?([^#]))?(?:#([\\s\\S]))?$");function Da(a,b,c){if(Array.isArray(b))for(let d=0;d<b.length;d++)Da(a,String(b[d]),c);else b!=null&&c.push(a+(b===""?"":"="+encodeURIComponent(String(b))))}function Ea(a,b,c,d){const e=c.length;for(;(b=a.indexOf(c,b))>=0&&b<d;){var f=a.charCodeAt(b-1);if(f==38\|\|f==63)if(f=a.charCodeAt(b+e),!f\|\|f==61\|\|f==38\|\|f==35)return b;b+=e+1}return-1}var Fa=/#\|$/; function Ga(a,b){const c=a.search(Fa);let d=Ea(a,0,b,c);if(d<0)return null;let e=a.indexOf("&",d);if(e<0\|\|e>c)e=c;d+=b.length+1;return decodeURIComponent(a.slice(d,e!==-1?e:0).replace(/\+/g," "))}var Ha=/[?&]($\|#)/;function Ia(a){m.setTimeout(()=>{throw a;},0)};var Ja=aa(610401301,!1),Ka=aa(653718497,aa(1,!1));var La;const Ma=m.navigator;La=Ma?Ma.userAgentData\|\|nul
URL: https://cdn.protectonow.com/ng-assets/lp/assets/in... Model: Joe Sandbox AI	```json { "risk_score": 2, "reasoning": "The script includes dynamic import statements and uses MutationObserver for DOM manipulation, which are moderate-risk indicators. However, there is no evidence of data exfiltration, obfuscated code, or interaction with suspicious domains. The script appears to be related to module preloading and DOM observation, which are not inherently malicious." }
var oi=Object.defineProperty;var si=(e,t,n)=>t in e?oi(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n;var j=(e,t,n)=>(si(e,typeof t!="symbol"?t+"":t,n),n);function Mh(){import.meta.url,import("_").catch(()=>1),async function*(){}().next()}(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const o of document.querySelectorAll('link[rel="modulepreload"]'))r(o);new MutationObserver(o=>{for(const s of o)if(s.type==="childList")for(const i of s.addedNodes)i.tagName==="LINK"&&i.rel==="modulepreload"&&r(i)}).observe(document,{childList:!0,subtree:!0});function n(o){const s={};return o.integrity&&(s.integrity=o.integrity),o.referrerPolicy&&(s.referrerPolicy=o.referrerPolicy),o.crossOrigin==="use-credentials"?s.credentials="include":o.crossOrigin==="anonymous"?s.credentials="omit":s.credentials="same-origin",s}function r(o){if(o.ep)return;o.ep=!0;const s=n(o);fetch(o.href,s)}})();var O=(e=>(e.Video="video",e.Image="image",e.Iframe="iframe",e.Card="card",e.Button="button",e.Text="text",e.Input="input",e.Container="container",e.Custom="custom",e.Lottie="lottie",e.CustomHtml="customHtml",e))(O\|\|{}),C=(e=>(e.Step="step",e.Target="target",e.Overlay="overlay",e.Event="event",e.Close="close",e.Pixel="pixel",e.Submit="submit",e.JumpTo="jumpTo",e.Show="show",e.Hide="hide",e.ToggleVisibility="toggleVisibility",e.StartPolling="startPolling",e.StopPolling="stopPolling",e.CustomJS="customJS",e.Assess="assess",e.WriteState="writeState",e.Condition="condition",e.StartListening="startListening",e.StopListening="stopListening",e))(C\|\|{}),wt=(e=>(e.NewTab="newTab",e.Redirect="redirect",e.Popup="popup",e))(wt\|\|{}),je;(e=>{let t;(n=>{n.FadeIn="fadeIn",n.SlideUp="slideUp",n.SlideDown="slideDown",n.SlideLeft="slideLeft",n.SlideRight="slideRight",n.UnfoldVertical="unfoldVertical",n.UnfoldHorizontal="unfoldHorizontal",n.Expand="expand",n.SlideUpFaded="slideUpFaded"})(t\|\|(t={})),(n=>{n.FadeIn="fadeIn",n.SlideUp="slideUp",n.SlideDown="slideDown",n.SlideLeft="slideLeft",n.SlideRight="slideRight",n.UnfoldVertical="unfoldVertical",n.UnfoldHorizontal="unfoldHorizontal"})(e.Overlay\|\|(e.Overlay={})),(n=>{n.FadeIn="fadeIn",n.Expand="expand",n.SlideUp="slideUp",n.SlideUpFaded="slideUpFaded"})(e.Element\|\|(e.Element={}))})(je\|\|(je={}));var cr=(e=>(e.Pixel="pixel",e.Redirect="redirect",e))(cr\|\|{}),ke=(e=>(e.Center="center",e.Top="top",e.Bottom="bottom",e))(ke\|\|{}),Je=(e=>(e.Center="center",e.Left="left",e.Right="right",e))(Je\|\|{}),oe=(e=>(e.Left="left",e.Right="right",e))(oe\|\|{}),nt=(e=>(e.Cross="cross",e.Arrow="arrow",e))(nt\|\|{}),ut=(e=>(e.TopLeft="top_left",e.TopRight="top_right",e.BottomLeft="bottom_left",e.BottomRight="bottom_right",e))(ut\|\|{}),Do=(e=>(e.Top="top",e.Bottom="bottom",e))(Do\|\|{}),Me;(e=>{(t=>{t.SuccessActions="successActions",t.MissingActions="missingActions",t.FirstActions="firstActions",t.RunningActions="runningActions"})(e.Actions\|\|(e.Actions={}))})(Me\|\|(Me={}));const en=2;var Fe;(e=>{(t=>{t.SOUND_TOGGLER="soundToggler",t.PLAY="play"})(e.Type\|\|(e.Type={}))})(Fe\|\|(Fe={}));var Vo=(e=>(e.Text="text",e.Password="password",e.Email="email",e.Button="button",e.CheckBox="checkbox",e.Search="search",e.PhoneNumber="tel",e))(Vo\|\|{}),Uo=(e=>(e.Regular="regular",e.Slider="slider",e))(Uo\|\|{}),Ne=(e=>(e.PREV="prev",e.NEXT="next",e))(Ne\|\|{}),Ae=(e=>(e.Absolute="absolute",e.Grid="grid",e.Gallery="gallery",e))(Ae\|\|{});const Tt=e=>e["".concat(e.type,"Params")],Le=e=>{var t;return(t=Tt(e).actions)!=null?t:{}};var _n=(e=>(e.Persistent="persistent",e.Volatile="volatile",e))(_n\|\|{}),jn=(e=>(e.String="string",e.Number="number",e.Boolean="boolean",e))(jn\|\|{}),v;(e=>{(t=>{t.Clk="clk",t.Click="click",t.InvisibleClick="inv_click",t.FastClick="fast_click",t.Hover="hover",t.MouseLeave="mouseleave",t.FirstScroll="first_scroll",t.PageLoaded="page_loaded",t.Load="load",t.Unload="unload",t.Render="render",t.Init="init",t.Error="error",t.Warning="warning",t.ElapsedTime="elapsed_time",t.View="view",t.Hidden="h
URL: https://nuance-pdf-professional2.software.informer.com/7.2/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Create, convert, share PDF files with colleagues", "prominent_button_name": "Request Download", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://nuance-pdf-professional2.software.informer.com/7.2/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "It enables business users to create, convert, share PDF files with colleagues", "prominent_button_name": "DOWNLOAD", "text_input_field_labels": "unknown", "pdf_icon_visible": true, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://nuance-pdf-professional2.software.informer.com/7.2/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Create, convert, share PDF files with colleagues", "prominent_button_name": "Download", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://nuance-pdf-professional2.software.informer.com/7.2/ Model: Joe Sandbox AI	{ "brands": [ "Nuance" ] }
	{ "brands": [ "Nuance" ] }
URL: https://nuance-pdf-professional2.software.informer.com/7.2/ Model: Joe Sandbox AI	{ "brands": [ "Nuance Communications, Inc." ] }
	{ "brands": [ "Nuance Communications, Inc." ] }
URL: https://nuance-pdf-professional2.software.informer.com/7.2/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Create, convert, share PDF files with colleagues", "prominent_button_name": "Download", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://nuance-pdf-professional2.software.informer.com/7.2/ Model: Joe Sandbox AI	{ "brands": [ "Nuance Communications, Inc." ] }
	{ "brands": [ "Nuance Communications, Inc." ] }
URL: https://nuance-pdf-professional2.software.informer.com/7.2/ Model: Joe Sandbox AI	{ "brands": [ "Nuance" ] }
	{ "brands": [ "Nuance" ] }
URL: https://nuance-pdf-professional2.software.informer.com/7.2/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "It enables business users to create, convert, share PDF files with colleagues", "prominent_button_name": "Download", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://nuance-pdf-professional2.software.informer.com/7.2/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Create, convert, share PDF files with colleagues", "prominent_button_name": "Download", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://nuance-pdf-professional2.software.informer.com/7.2/ Model: Joe Sandbox AI	{ "brands": [ "Nuance" ] }
	{ "brands": [ "Nuance" ] }
URL: https://nuance-pdf-professional2.software.informer.com/7.2/ Model: Joe Sandbox AI	{ "brands": [ "Nuance Communications, Inc." ] }
	{ "brands": [ "Nuance Communications, Inc." ] }
URL: https://get4.protectonow.com/install/?mid=f28d8534-d38e-11ef-93a7-aab196f2f20d&rpclid=f28d8534-d38e-11ef-93a7-aab196f2f20d&utm_source=adx_ext_download_prot_smrtsp___5e460bab&uq=_JDg0vZrlOp4T6_9U0ssm5ItFDhV3TsqhLGO26omVj-2pXmkcPDHdNwDCaqhZpjpKTa7dG0kopMzaV Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://get4.protectonow.com/install/?mid=f28d8534-d38e-11ef-93a7-aab196f2f20d&rpclid=f28d8534-d38e-11ef-93a7-aab196f2f20d&utm_source=adx_ext_download_prot_smrtsp___5e460bab&uq=_JDg0vZrlOp4T6_9U0ssm5ItFDhV3TsqhLGO26omVj-2pXmkcPDHdNwDCaqhZpjpKTa7dG0kopMzaV Model: Joe Sandbox AI	{ "brands": "Protecto" }
	{ "brands": "Protecto" }
URL: https://get4.protectonow.com/install/?mid=f28d8534-d38e-11ef-93a7-aab196f2f20d&rpclid=f28d8534-d38e-11ef-93a7-aab196f2f20d&utm_source=adx_ext_download_prot_smrtsp___5e460bab&uq=_JDg0vZrlOp4T6_9U0ssm5ItFDhV3TsqhLGO26omVj-2pXmkcPDHdNwDCaqhZpjpKTa7dG0kopMzaV Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Click continue to go to the Chrome Web Store and install our Chrome Extension. This Extension modifies your default search provider to use our custom web search to provide you a better search experience.", "prominent_button_name": "continue with extension", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://get4.protectonow.com/install/?mid=f28d8534-d38e-11ef-93a7-aab196f2f20d&rpclid=f28d8534-d38e-11ef-93a7-aab196f2f20d&utm_source=adx_ext_download_prot_smrtsp___5e460bab&uq=_JDg0vZrlOp4T6_9U0ssm5ItFDhV3TsqhLGO26omVj-2pXmkcPDHdNwDCaqhZpjpKTa7dG0kopMzaV Model: Joe Sandbox AI	{ "brands": [ "Protecto" ] }
	{ "brands": [ "Protecto" ] }
URL: https://get4.protectonow.com/install/?mid=f28d8534-d38e-11ef-93a7-aab196f2f20d&rpclid=f28d8534-d38e-11ef-93a7-aab196f2f20d&utm_source=adx_ext_download_prot_smrtsp___5e460bab&uq=_JDg0vZrlOp4T6_9U0ssm5ItFDhV3TsqhLGO26omVj-2pXmkcPDHdNwDCaqhZpjpKTa7dG0kopMzaV Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Click continue to go to the Chrome Web Store and install our Chrome Extension. This Extension modifies your default search provider to use our custom web search to provide you a better search experience.", "prominent_button_name": "continue with extension", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://get4.protectonow.com/install/?mid=f28d8534-d38e-11ef-93a7-aab196f2f20d&rpclid=f28d8534-d38e-11ef-93a7-aab196f2f20d&utm_source=adx_ext_download_prot_smrtsp___5e460bab&uq=_JDg0vZrlOp4T6_9U0ssm5ItFDhV3TsqhLGO26omVj-2pXmkcPDHdNwDCaqhZpjpKTa7dG0kopMzaV Model: Joe Sandbox AI	{ "brands": [ "Protecto" ] }
	{ "brands": [ "Protecto" ] }
URL: https://get4.protectonow.com/install/?mid=f28d8534-d38e-11ef-93a7-aab196f2f20d&rpclid=f28d8534-d38e-11ef-93a7-aab196f2f20d&utm_source=adx_ext_download_prot_smrtsp___5e460bab&uq=_JDg0vZrlOp4T6_9U0ssm5ItFDhV3TsqhLGO26omVj-2pXmkcPDHdNwDCaqhZpjpKTa7dG0kopMzaV Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Click continue to go to the Chrome Web Store and install our Chrome Extension. This Extension modifies your default search provider to use our custom web search to provide you a better search experience.", "prominent_button_name": "Download Extension", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://chromewebstore.google.com/detail/smart-search-by-protecto/gggopmkdggckhpcnlmmhkbgcgmbknhkn Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Search smarter online with Protecto!", "prominent_button_name": "Add to Chrome", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://chromewebstore.google.com/detail/smart-search-by-protecto/gggopmkdggckhpcnlmmhkbgcgmbknhkn Model: Joe Sandbox AI	{ "brands": [ "Protecto" ] }
	{ "brands": [ "Protecto" ] }
URL: https://get4.protectonow.com/install/?mid=f28d8534-d38e-11ef-93a7-aab196f2f20d&rpclid=f28d8534-d38e-11ef-93a7-aab196f2f20d&utm_source=adx_ext_download_prot_smrtsp___5e460bab&uq=_JDg0vZrlOp4T6_9U0ssm5ItFDhV3TsqhLGO26omVj-2pXmkcPDHdNwDCaqhZpjpKTa7dG0kopMzaV Model: Joe Sandbox AI	{ "brands": [ "Protecto" ] }
	{ "brands": [ "Protecto" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.122191481864228
Encrypted:	false
SSDEEP:	3:CUnl/RPQgpllHh/:/9Q0/
MD5:	0D23D0B62908B75E89014AC3F864484E
SHA1:	640CC2607301598E4D871D618D668FAF24E2B01E
SHA-256:	546C5CF136073615AFDA5CAB173FEFF341171A26A848CF7CE09BB8BD8B07CE89
SHA-512:	6834F1548F26B94357FCC3312A3491E8C87080A84F678F990BEB2C745899A01E239964521E64A534D7D5554222F728AF966EC6EC8291BC64D2005861BCFD78EC
Malicious:	false
Reputation:	low
URL:	https://img.informer.com/images/spacer.gif
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3533)
Category:	dropped
Size (bytes):	222749
Entropy (8bit):	5.453364917537705
Encrypted:	false
SSDEEP:	6144:Giwcm/IpG4DMcdc/Fa9BDrk7m7U7ozJgs:yP/I5jMI
MD5:	ADB4D93F80755314547B699C181145BD
SHA1:	87BBCFD9E29A8BBB0ED8177AEB0F930499592AB7
SHA-256:	AF6B15D8917BD5AB039B73DB5F939C17DF1ACA2ACF7D4AC9D8F44A005EDAF6D6
SHA-512:	39DD81FFB91A9340D97B77E689B06D7D45201511CDF44352F3F1406AC3FEEAF2B786ECF13F08ADD5F0725610ECC3F24B2E87D5A8518CC2818F765921A0CA626C
Malicious:	false
Reputation:	low
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Lg=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Lg};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1683
Entropy (8bit):	4.319930928270355
Encrypted:	false
SSDEEP:	48:cMLj8NejIhj8NBLbUI7j8NBLbUIMj8NBLbUIxj8NBLbUE:r8Ney8NBH78NBHG8NBHh8NBHp
MD5:	1C7B758561931664DB7A21BDED0EBE69
SHA1:	343E93FE3944C374F93E3464C54BE0B2B93B48E2
SHA-256:	BD003AEBE4D1DA00DAE333E2A2AB8964806D0467287D9523727A7FAD1C09C3DA
SHA-512:	7F0050C6C3718951E7A870251DA3C2BCD73A67523D225D0EE83E73D1611866A542EA1788F49F6993D05AC1786EE57785306EE0A7D0C666C0FA954FCF9E64A39F
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="a" xmlns="http://www.w3.org/2000/svg" width="121" height="20" viewBox="0 0 121 20"><path d="m10.58,3.38l1.84,3.85.31.77.77.15,4.14.62-2.91,2.92-.61.46.15.77.77,4.15-3.68-1.85-.77-.31-.77.31-3.83,2,.77-4.15.15-.77-.61-.62-3.07-2.92,4.14-.62.77-.15.31-.77,2.15-3.85Zm0-3.38l-3.37,6.62L0,7.69l5.21,5.08-1.23,7.23,6.59-3.38,6.44,3.38-1.23-7.23,5.21-5.08-7.2-1.08L10.58,0Z" style="fill:#f66;"/><path d="m35.58,3.38l1.84,3.85.31.77.77.15,4.14.62-2.91,2.92-.61.46.15.77.77,4.15-3.68-1.85-.77-.31-.77.31-3.83,2,.77-4.15.15-.77-.61-.62-3.07-2.92,4.14-.62.77-.15.31-.77,2.15-3.85Zm0-3.38l-3.37,6.62-7.2,1.08,5.21,5.08-1.23,7.23,6.59-3.38,6.44,3.38-1.23-7.23,5.21-5.08-7.2-1.08-3.22-6.62Z" style="fill:#f66;"/><path d="m60.58,3.38l1.84,3.85.31.77.77.15,4.14.62-2.91,2.92-.61.46.15.77.77,4.15-3.68-1.85-.77-.31-.77.31-3.83,2,.77-4.15.15-.77-.61-.62-3.07-2.92,4.14-.62.77-.15.31-.77,2.15-3.85Zm0-3.38l-3.37,6.62-7.2,1.08,5.21,5.08-1.23,7.23,6.59-3.38,6.44,3.38-1.23-

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 275 x 175, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	7294
Entropy (8bit):	7.940201898468409
Encrypted:	false
SSDEEP:	192:+1bhNuB6fToTk3FM25boJSjzcREGy8v0dX:+1/uB67p3mSboGYlIX
MD5:	2257115AB8F7A35716A9635BFD804868
SHA1:	E041518C189BEE45D503CD8299864500C7B8B76F
SHA-256:	86D3617C2E0B6B6C6A2AAD850A64461C009B4711EA3FBD914232433B928E555F
SHA-512:	4D0016B071536068A7D32BB22AD46632FCC645F187467E9D6B1291B8CC25573FBFF990D0EEBD1F38DFB2750EF074642200234725240C31DAF52A77E9496BBEFD
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/QIS6-nC9cFHkmg07ddwwblOq2Z_NZYP4k1Odsp6mPopMQhrQZtoclOZmHbigOCWbvUoJcOTrIjvnMpr5iaeE8kTH=s275-w275-h175
Preview:	.PNG........IHDR.............Q..U....sBIT.....O.....bKGD.............$IDATx...w\|.e.....-.NB..A..)... x(b..P...DT~6TND..,`...,.=AT......)@H ....;.........MB.._..ze..g.,..y.g....oC...Q]....J.........$..% 9.(...@.H..J@r.P..............$..% 9.(...@.H..J@r.P..............$..% 9.(.tu.."....%.(5...%..,B,MQ.S.....4C..]..t%A...].D]......i5I..4m.XDIj,CQT..&.\|.$....=~jg.P.:R...D..@r:.(.....l....w..m`Fo..l6.4...m..wum}MM...9.W~...A..cM...p....Ra. ...T...8...C.e....3.=u..?... +'...w..`..p .i 9.A...NoB...+..}......{....U..^.z............N...X.D...F.r.......-..^...\|..w..Z..F.54..u$HN.r.B.@..6..7M........[.~..6.0..<.....].K.!$..v...7....'.B....:.fH..Q}{....~.t.F.1.\|...9..b~...o.y...N.U.......f-.0..T...2.......C......\......M.}SS.'...:Qm....-. 9...P.y.....B8F..%...6 .....=..........{d../....m9....... .....r........NW..~....r............q..>.U.wW....GkA.....{.y...#......%-9...n..k..sK..5/?r.-..>dOV..3....m..Ar....Q....=.oZ....77.....v.X...........97

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	31413
Entropy (8bit):	3.7954464232680114
Encrypted:	false
SSDEEP:	768:KIS5V8vB2n12X2IR3KCa/RXaqhJTrkI9Np5FmTRR3ze9:KIhon12faCa4qAS5ATRR3g
MD5:	6825C8F71299B2E86BFA8ACFCFF1FA2C
SHA1:	6B839122C5E875740B47A9CCCFE130552FC777F3
SHA-256:	E86FA5265C2D29E8E58A2C1AE562BC95261E5FD6A4BCC5EC4628610EAC1B2F35
SHA-512:	150DEB93F095226924DAB3E85362FF79D77A2614A1C3B367CC80B89E51A036DB369C1C089558F5397608573EEDD893F60B726E8C6A99B52633CA56C97ED4499C
Malicious:	false
Reputation:	low
Preview:	<svg width="1000" height="238" viewBox="0 0 1000 238" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_488_94)">.<rect width="1000" height="238" rx="16" fill="#089E61"/>.<mask id="mask0_488_94" style="mask-type:luminance" maskUnits="userSpaceOnUse" x="0" y="0" width="1000" height="238">.<path d="M986 0H14C6.26801 0 0 6.26801 0 14V224C0 231.732 6.26801 238 14 238H986C993.732 238 1000 231.732 1000 224V14C1000 6.26801 993.732 0 986 0Z" fill="white"/>.</mask>.<g mask="url(#mask0_488_94)">.<path d="M118.02 122H100.833V68.9089H118.564C123.766 68.9089 128.234 69.9717 131.967 72.0975C135.7 74.2059 138.56 77.2389 140.547 81.1965C142.552 85.1369 143.554 89.8636 143.554 95.3766C143.554 100.907 142.543 105.66 140.521 109.635C138.517 113.609 135.613 116.668 131.811 118.811C128.009 120.937 123.412 122 118.02 122ZM108.843 115.001H117.579C121.623 115.001 124.985 114.24 127.663 112.719C130.342 111.181 132.347 108.961 133.678 106.057C135.008 103.136 135.674 99.5761 135.674 95.376

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2049)
Category:	dropped
Size (bytes):	14478
Entropy (8bit):	5.470092501181737
Encrypted:	false
SSDEEP:	384:IYim7O/sAg9U6KAQdkzFc+5aiWQLHO91NIuW:IoqUAh8vz5W2H
MD5:	86FEDE8BE7FFAC7DF5D247115E7F4D12
SHA1:	C57DE81B88892016A304AAE99D209AA3D0AC0432
SHA-256:	E01393EF09D086E63CC45A3B9A0BC590E21C8E48CFB56B2E50F3E76403088E47
SHA-512:	199B0F2A0C1F81DF38A813553E15C903CBAD4BDD440129142E52C99FEE648F44BD0D564A9F8D47E18CB2001C58C54FAB534CFB4F58AA3C0F55B03E4E28A8485F
Malicious:	false
Reputation:	low
Preview:	(function(){var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),g=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-.1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(a==null)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regular expression");return a+""};.g("String.prototype.endsWith",function(a){return a?a:function(b,c){var d=h(this

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (59107), with no line terminators
Category:	downloaded
Size (bytes):	59107
Entropy (8bit):	6.107657728900587
Encrypted:	false
SSDEEP:	768:qAHIgdMyXAXabfGCOlB7snLc+kffmHulp5yYa6QC+S/542jesiE9Brb9+5iTdrDB:9qgleytUtexyoHWPu73m
MD5:	74EE6162833BA22D0D7772722C6F2114
SHA1:	AB05B2EA5CB01D035A3140A5E92B3933EC4467B3
SHA-256:	95D4BB94DE73AB08D30265B9D8E928E681973DF24C07D22E6A2D983C4D86BC8D
SHA-512:	E787EAC2CCB3E921F523080CD8EA5522288A1D26DD335441CE63C3285818E5E766DEBAEA7C0D8BCD22B7A65264EB072962A38D8AE0C0606B6DFE815D31EF3517
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4821006852914359&output=html&h=90&slotname=7854405427&adk=4056614258&adf=1706824535&pi=t.ma~as.7854405427&w=1200&abgtt=9&fwrn=4&fwrnh=100&lmt=1736870130&rafmt=2&format=1200x90&url=https%3A%2F%2Fnuance-pdf-professional2.software.informer.com%2F7.2%2F&fwr=0&fwrattr=true&rpe=1&resp_fmts=2&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736979634915&bpp=4&bdt=1617&idt=1532&shv=r20250113&mjsv=m202501090101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&correlator=4566372036047&frm=20&pv=2&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=311&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533202%2C31089683%2C95344791%2C95350245%2C95340252%2C95340254&oid=2&pvsid=3788874330487745&tmod=2006592406&uas=0&nvt=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=o%7C%7Coe%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=1582
Preview:	<!doctype html><html><head><script>var jscVersion = 'r20250114';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {};</script><script data-jc="42" data-jc-version="r20250114" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb/%<1245;05!=nehu`/!361:<320!9sqrm(&2057?61<&>`dopb~"]">(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var u=this\|\|self;function aa(a){return a};var w,x;a:{for(var ba=["CLOSURE_FLAGS"],y=u,z=0;z<ba.length;z++)if(y=y[ba[z]],y==null){x=null;break a}x=y}var ca=x&&x[610401301];w=ca!=null?ca:!1;var B;const da=u.navigator;B=da?da.userAgentData\|\|null:null;function C(a){return w?B?B.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function D(a){var b;a:{if(b=u.navigator)if(b=b.userAgent)break a;b=""}retur

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5081
Entropy (8bit):	5.220243056544806
Encrypted:	false
SSDEEP:	48:s0lwBPHJOg6gw9C/RwhLXHJcO6gw8aHJzkINFa+HJXzVaHJkyOHJnBTW3yllCflU:s0W0/CqAjzXBVaCmA5LDX
MD5:	6DEAE2CC3370FCEA73CDCCE8FCA27AB9
SHA1:	AD7D93A1B159C55545E7ACC366299F3DF33FB720
SHA-256:	DA70F96DAE89E501D2BD1FDB0AB19C2A560CF82E0C0D857FB098D6B913487B38
SHA-512:	1488E9CDBD60B458FF6E5DC7CE6155DB2A207D38599819B92808E2F4824BD993D38C6765AD3344E687E6E8A9EC646A218F0856C43EA70814D4351450080CC202
Malicious:	false
Reputation:	low
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="45" height="45"><defs><radialGradient id="radial-gradient" cx="670.02" cy="503.2" r="21.5" gradientTransform="translate(-648.5 -490.94)" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#3e2723" stop-opacity=".2"/><stop offset="1" stop-color="#3e2723" stop-opacity="0"/></radialGradient><radialGradient id="radial-gradient-2" cx="652.05" cy="-52.7" r="19.95" gradientTransform="matrix(1 0 0 -1 -65.5 -15.94)" xlink:href="#radial-gradient"/><radialGradient id="radial-gradient-3" cx="670.96" cy="513.47" r="22.47" gradientTransform="translate(-648.5 -490.94)" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#263238" stop-opacity=".2"/><stop offset="1" stop-color="#263238" stop-opacity="0"/></radialGradient><radialGradient id="radial-gradient-4" cx="79.22" cy="497.08" r="45.19" gradientTransform="translate(-72.5 -490.94)" gradientUnits="userSpaceOnUse

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	3662
Entropy (8bit):	4.2732147664200655
Encrypted:	false
SSDEEP:	96:/GJ2h3jye5fmtO5N4z6PFmD/OON8cwssX:/GJ2tygxX
MD5:	5607A34E38F494CC9EB8BAE4C20B018B
SHA1:	635BAA522802BDBAD8CDF2EEE76E88855EF944BD
SHA-256:	42B7D8A619BBB33F6AE4F7E2E9FC54959DFA74C0079BA31CF9E7EBB0A08486E7
SHA-512:	E8AD6AA03AB199E9295DFEFB32983DF96269611BDC49E3D2591AD963FF16DA191ABF189237D8FCD5FB6D6A8729C01B0E983DD91B3AEE79AC6167880D8AD4338A
Malicious:	false
Reputation:	low
Preview:	(function() {.. if (typeof jsparams != 'undefined') {. var platform_re = /(software\|linux\|macdownload)\.informer\.com/;. var matches = platform_re.exec(document.domain.toLowerCase());. var platform0 = "software";. if (matches != null). platform0 = matches[1];.. var loader = new Image(),. rarr = platform0 == "software" ?. [8706,8708,2601,3734,8707,8657,8658,8659,8780,8708,245]. :. [8734,2959,3731,8735,8686,8687,8688,8781,8736,2315],. jarr = jsparams.split(',');.. // console.log(rarr). for (var i = 0; i < jarr.length; i++) {. // console.log(jarr[i]). if (rarr.indexOf(parseInt(jarr[i], 10)) > -1) {. // console.log('==='). jarr.splice(i, 1);. }. }. // console.log(platform0);. jsparams = jarr.join(',');. // console.log(jsparams);. // console.log(document.referrer).

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1134
Entropy (8bit):	5.2605067914352714
Encrypted:	false
SSDEEP:	24:2dHAlKLfETCWJJ0urvFLzAfa/qzKKI+vRxGBkH5vudCcMH/SuvI:cHAlOfETCWguVz5q+KII0kAdF0/Q
MD5:	2B0098859FC5FB668666110052E089CD
SHA1:	C869C06542CEB53946DF8E468EA153B179B7B2B7
SHA-256:	D0D44F21B71E6A47B3637E38F2A240694BBB73721D213D953D180219320D0038
SHA-512:	DA382DBE707CC07D55862E7975AA961FF5AF20C63D7B5217BA0F46CA23B08E3EE49F29EDD7A3F3D819664EBEEDD9366B6A09A021D4CA21732D9C152DE4588B3A
Malicious:	false
Reputation:	low
URL:	https://img.informer.com/images/v4/2stars.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 24.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="...._1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 344 53" style="enable-background:new 0 0 344 53;" xml:space="preserve">..<style type="text/css">....st0{fill:#F06666;}....st1{fill:#E3ECF1;}..</style>..<g>...<polygon class="st0" points="27.9,0 36.5,17.4 55.7,20.2 41.8,33.8 45.1,53 27.9,43.9 10.6,53 13.9,33.8 0,20.2 19.3,17.4 ."/>...<polygon class="st0" points="99.9,0 108.5,17.4 127.8,20.2 113.9,33.8 117.2,53 99.9,43.9 82.7,53 86,33.8 72.1,20.2 91.3,17.4 ....."/>...<polygon class="st1" points="172,0 180.6,17.4 199.9,20.2 185.9,33.8 189.2,53 172,43.9 154.8,53 158.1,33.8 144.1,20.2 ....163.4,17.4 ."/>...<polygon class="st1" points="244.1,0 252.7,17.4 271.9,20.2 258,33.8 261.3,53 244.1,43.9 226.8,53 230.1,33.8 216.2,20.2 ....235.5,17.4 ."/>...<polygon class="st1"

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	dropped
Size (bytes):	265865
Entropy (8bit):	5.354910916820811
Encrypted:	false
SSDEEP:	3072:8FAlcIpxMi9Fwbk5GRZ7TPULi9UlT8+Icx0d7d6Q5lfEME3obHzvv88xcbffPiJw:8FvIpyiWSGRZ7TPUFu5VEezvk8CD3WTU
MD5:	B2BADD0D4BFF9A685634416D95463ED7
SHA1:	F007555B05CB957917490AACBE55AEA40E13CC0F
SHA-256:	9DFD5BB0047EBDA3CA639ABAC56B68D6F958C2B65C7B62260C19DD00E24D71F7
SHA-512:	374E5B6EEA26A269E6207B5617F2100EBAA00F8E8862A6CE3540D3B4DBFB4903C099F9DBC166A50F0A20BF42551202CD9DC7B1EF672420B62D9B38F9903F98DB
Malicious:	false
Reputation:	low
Preview:	!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(e.document)return t(e);throw new Error("jQuery requires a window with a document")}:t(e)}("undefined"!=typeof window?window:this,function(x,N){"use strict";function v(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item}function P(e){return null!=e&&e===e.window}var t=[],F=Object.getPrototypeOf,s=t.slice,B=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},R=t.push,y=t.indexOf,z={},H=z.toString,q=z.hasOwnProperty,U=q.toString,W=U.call(Object),m={},j=x.document,V={type:!0,src:!0,nonce:!0,noModule:!0};function Q(e,t,n){var i,r,o=(n=n\|\|j).createElement("script");if(o.text=e,t)for(i in V)(r=t[i]\|\|t.getAttribute&&t.getAttribute(i))&&o.setAttribute(i,r);n.head.appendChild(o).parentNode.removeChild(o)}function X(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?z[H.call(e)]\|\|"object"

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1134
Entropy (8bit):	5.260083205211005
Encrypted:	false
SSDEEP:	24:2dHAlKLfETCWJJ0urvSLzAfa/qzKKI+vRxGBkH5vudCcMH/SuvI:cHAlOfETCWgusz5q+KII0kAdF0/Q
MD5:	CAA9D5D4E02EFFCFC47A4EF804710AFD
SHA1:	FE3822A4CDAB7AFA728E84D98902DCD47A8028E3
SHA-256:	4546BEEEF186BC19A402D01E7CEFD3F421A964A37E09847E575BEAD7AAC607FD
SHA-512:	AE07AABA8243610EFFE314DE0C39652CAD50BBCF11845AD3E95380A3F720BF8DFF9302A25A610DEA85ECD56A02FFD1E84C9F6D4E635BE15BC561EC66713A6AAD
Malicious:	false
Reputation:	low
URL:	https://img.informer.com/images/v4/1stars.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 24.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="...._1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 344 53" style="enable-background:new 0 0 344 53;" xml:space="preserve">..<style type="text/css">....st0{fill:#F06666;}....st1{fill:#E3ECF1;}..</style>..<g>...<polygon class="st0" points="27.9,0 36.5,17.4 55.7,20.2 41.8,33.8 45.1,53 27.9,43.9 10.6,53 13.9,33.8 0,20.2 19.3,17.4 ."/>...<polygon class="st1" points="99.9,0 108.5,17.4 127.8,20.2 113.9,33.8 117.2,53 99.9,43.9 82.7,53 86,33.8 72.1,20.2 91.3,17.4 ....."/>...<polygon class="st1" points="172,0 180.6,17.4 199.9,20.2 185.9,33.8 189.2,53 172,43.9 154.8,53 158.1,33.8 144.1,20.2 ....163.4,17.4 ."/>...<polygon class="st1" points="244.1,0 252.7,17.4 271.9,20.2 258,33.8 261.3,53 244.1,43.9 226.8,53 230.1,33.8 216.2,20.2 ....235.5,17.4 ."/>...<polygon class="st1"

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1920 x 1080, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	147031
Entropy (8bit):	7.966669504461104
Encrypted:	false
SSDEEP:	3072:9IdUbttXq3FNvCJUBvXb00KpsWErZKa8Zf3nBCPYN6n0A/tbK76gmCsE6iuIl:9cUH0/WUBPplWAq776gmJq
MD5:	A8213F8FF936D3D243179CAF3AD39BA6
SHA1:	E3CA142251EBD3C5563D5BE4F9D4BFBC413FC108
SHA-256:	34EB36214442B970616F901D6552C914298F8440E78B1C01F2BD016FB7882A03
SHA-512:	8AC74F7AFD1DB310428C377840A65C63321C150261CCAF7F03894A797503642A3A751CD94203040E0734E29C6A708AAE621779971514A21E2569257F4960AFB2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......8.......1q...~PLTE.................................................................................................................................@..=.IDATx...w.0...F...C.u].........I...<BB..y...BR.{.y.{..I'eR..fZ.....'{^..NTK...].%...X....J...DZ)..K(...Q.3..D.]Y.D=.Q.ZE...'ieUd.~..?5U....XQ.........R......e.....L.. {. ,.D..!U..5WU95.+u..r7..;7t_U..........^.;..k].....\...{...6e.....7.cD...A..f..SC....K.O....1.??..}...\|.}.k6i.I..8.2....Z.....c.xi.".F.%.i..8.i..];.@...g..._...<#.........?..Rt.caO.....=qg......h....Ke..9.55.W..}.$..Z..XU....r..AcfuId.g..._.........y..x.i..m{..!._....Zz./..w..8.._<.....=.F.c..K..-{3Y;.6.....;.fA..........3a.& ..P.?\|..P.ie.[...'....;P.6..MjU..(,./Mnqr..Y.5-1..[0.....m..c.s..._hQ.v.............0.?./....;...@.t...=..8.....]......6.../;=.....,K...OJQm.h.f............!....!c...+..L...:.....'5.6..5.{+..Dq>..&..Q..s.{.i..'..[...[`....u.4.r.8g....<..(...U....:...a..}l.1.....{MN...}...4....{w.p.

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	6354
Entropy (8bit):	5.281564480340138
Encrypted:	false
SSDEEP:	96:bIYQ4TPvcsr0t4Rbf1LDad7wbIRYCoY4/cqsTRU+R/4miWMKB64usiZJ:bIw7kobtuwbgYC2/XhrKB64usiZJ
MD5:	FF3F4B9DED7DC9111FAAA6D9F51C0B3B
SHA1:	725C22FF6BE7CF293C388B253248CA7CDF4E330F
SHA-256:	C48A1EE09680B829E3129C7CFBB0063C926940D80D74219F3585B38C0579C6A8
SHA-512:	49F672F4B2C60CA85E603D81F18B4F83D3D717A990DAD5A211D1269D3B7EB7EF8C143D9CFEA290087AB133A60F182A6DE044759FF180D7403C9237B94C82AA85
Malicious:	false
Reputation:	low
Preview:	var eg_width=254;.var eg_height=345;.var eg_bordercolor='#e4e4e4';.var eg_bgTitle='#f0f0f0';.var eg_timeout=0;.var eg_disable_scrollbar=false;.var myWidth=0;.var myHeight=0;.var opened=false;.var is_in=false;.var egwind=null;.var eg_x=100;.var eg_y=100;.var nrp=-1;.var nrp_show=1;.var autoclose=null;.var onexitheight = 15;.var cookiename = 'onexit9_2';.var posy_p=0;.var movetop = false;..function show_close().{..$j("#exit_close").css({'display':'block'});.}..function mmove(e){..if(opened)return true;..if(typeof(window.innerWidth)=='number'){...myWidth=window.innerWidth;...myHeight=window.innerHeight..}..else if(document.documentElement&&(document.documentElement.clientWidth\|\|document.documentElement.clientHeight)){...myWidth=document.documentElement.clientWidth;...myHeight=document.documentElement.clientHeight..}..else if(document.body&&(document.body.clientWidth\|\|document.body.clientHeight))..{...myWidth=document.body.clientWidth;...myHeight=document.body.clientHeight..}..var posx=0;.

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1683
Entropy (8bit):	4.319930928270355
Encrypted:	false
SSDEEP:	48:cMLj8NejIhj8NBLbUI7j8NBLbUIMj8NBLbUIxj8NBLbUE:r8Ney8NBH78NBHG8NBHh8NBHp
MD5:	1C7B758561931664DB7A21BDED0EBE69
SHA1:	343E93FE3944C374F93E3464C54BE0B2B93B48E2
SHA-256:	BD003AEBE4D1DA00DAE333E2A2AB8964806D0467287D9523727A7FAD1C09C3DA
SHA-512:	7F0050C6C3718951E7A870251DA3C2BCD73A67523D225D0EE83E73D1611866A542EA1788F49F6993D05AC1786EE57785306EE0A7D0C666C0FA954FCF9E64A39F
Malicious:	false
Reputation:	low
URL:	https://nuance-pdf-professional2.software.informer.com/images/v4/empty_stars.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="a" xmlns="http://www.w3.org/2000/svg" width="121" height="20" viewBox="0 0 121 20"><path d="m10.58,3.38l1.84,3.85.31.77.77.15,4.14.62-2.91,2.92-.61.46.15.77.77,4.15-3.68-1.85-.77-.31-.77.31-3.83,2,.77-4.15.15-.77-.61-.62-3.07-2.92,4.14-.62.77-.15.31-.77,2.15-3.85Zm0-3.38l-3.37,6.62L0,7.69l5.21,5.08-1.23,7.23,6.59-3.38,6.44,3.38-1.23-7.23,5.21-5.08-7.2-1.08L10.58,0Z" style="fill:#f66;"/><path d="m35.58,3.38l1.84,3.85.31.77.77.15,4.14.62-2.91,2.92-.61.46.15.77.77,4.15-3.68-1.85-.77-.31-.77.31-3.83,2,.77-4.15.15-.77-.61-.62-3.07-2.92,4.14-.62.77-.15.31-.77,2.15-3.85Zm0-3.38l-3.37,6.62-7.2,1.08,5.21,5.08-1.23,7.23,6.59-3.38,6.44,3.38-1.23-7.23,5.21-5.08-7.2-1.08-3.22-6.62Z" style="fill:#f66;"/><path d="m60.58,3.38l1.84,3.85.31.77.77.15,4.14.62-2.91,2.92-.61.46.15.77.77,4.15-3.68-1.85-.77-.31-.77.31-3.83,2,.77-4.15.15-.77-.61-.62-3.07-2.92,4.14-.62.77-.15.31-.77,2.15-3.85Zm0-3.38l-3.37,6.62-7.2,1.08,5.21,5.08-1.23,7.23,6.59-3.38,6.44,3.38-1.23-

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	78685
Entropy (8bit):	6.020282308187139
Encrypted:	false
SSDEEP:	1536:OfGNbFoZJSUYOOaLnAW8+IcTOIQbkhXwW5vxM:mGRFauOxLA/+IcTOuXK
MD5:	6AEC8CFD5D3A790339DC627F9F1229B5
SHA1:	B6C8CFFE38E1015DD8595F2DD1A92435E2795874
SHA-256:	80583FA3C83831A9E036EBA0500D1B9C0D30892D0701F1617E0FAFAF5AEAA2CA
SHA-512:	4279E479C860007D04CD6FF0B8C45131C18D87420CD5CEB5C727A7DDBFB4206D007069102D643DA97C3BF01D0B756A2EF4662C8E39B6969FC154DE3C763B1EFC
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAAIGNIUk0AAHomAACAhAAA+gAAAIDoAAB1MAAA6mAAADqYAAAXcJy6UTwAAAAGYktHRAD/AP8A/6C9p5MAAHq9SURBVHja7Z15fFTl9f/fd9ZM9n1PgCyEXSSRNYKCgAuiIipuVSuudavV1tq6W/WrtnWrrZbWDZUqUqUoCoIEQhBI2JesELKvM9mTWe7c3x83d5xAlkky8fv92ft5vfKC19znOWfuZ571POc5B1SoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKHifwGCRqsTNFrdj6VPq9XqtNofT9+wvutQyEyad8t9IaPPntFUd

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (10522)
Category:	dropped
Size (bytes):	35089
Entropy (8bit):	5.470772325152451
Encrypted:	false
SSDEEP:	384:1SC6D2OCmwfjPwLrec+SnLMIiNesXfdAU6Iy4ZYThTMlKl99h/2Yuvg5sc:162OnwGXefdAmy4ZUTMlKl99hOGJ
MD5:	B8CC1FCA73164E7952265B6BB0CA1F9C
SHA1:	C5BC7240AE933E415785F3F6FD365B223EEDC158
SHA-256:	7AC8106C94596A0578C51C309B8F383FAADF9A5E6F8714289984461EE8B6C14F
SHA-512:	0256CF5E552192D8B054FEC75EA282CC125ADCE92FEA8F0FFC062D0369DCE07616AF05161EF1A07AF893C73C01FCD8A9D5152AD3983C6E8CD64773FEEC945645
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html lang="en-US" class=""><head><script type="text/javascript" crossorigin="anonymous" src="https://a.slack-edge.com/bv1-13/webpack.manifest.7a51c5a667c1161537c6.min.js" onload="window._cdn ? _cdn.ok(this, arguments) : null" onerror="window._cdn ? _cdn.failed(this, arguments) : null"></script><script>window.ts_endpoint_url = "https:\/\/slack.com\/beacon\/timing";(function(e) {..var n=Date.now?Date.now():+new Date,r=e.performance\|\|{},t=[],a={},i=function(e,n){for(var r=0,a=t.length,i=[];a>r;r++)t[r][e]==n&&i.push(t[r]);return i},o=function(e,n){for(var r,a=t.length;a--;)r=t[a],r.entryType!=e\|\|void 0!==n&&r.name!=n\|\|t.splice(a,1)};r.now\|\|(r.now=r.webkitNow\|\|r.mozNow\|\|r.msNow\|\|function(){return(Date.now?Date.now():+new Date)-n}),r.mark\|\|(r.mark=r.webkitMark\|\|function(e){var n={name:e,entryType:"mark",startTime:r.now(),duration:0};t.push(n),a[e]=n}),r.measure\|\|(r.measure=r.webkitMeasure\|\|function(e,n,r){n=a[n].startTime,r=a[r].startTime,t.push({name:e,entryType:"measure",s

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1134
Entropy (8bit):	5.260876625495238
Encrypted:	false
SSDEEP:	24:2dHAlKLfETCWJJ0urvFLzAf5/qzKKI+vRxGBkH5vudCcMH/SuvI:cHAlOfETCWguVzAq+KII0kAdF0/Q
MD5:	DFEA3544909013228ACEFD4DEB0879C5
SHA1:	A33BCAA4711CA9870DC385F0370BDD4C5081B4BA
SHA-256:	1938A8D4BBB0CEA5D54B7624F0A9803E390F435B0B8313EE4DC607F4A69AFB17
SHA-512:	1CDE6AA57320174599B62D66C98F3552DD7FD83BAF89159134D53A408EAA890FBFB05540390022711BCFB111F18444EBB66E5E1AD35006269DFDBC8059636141
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 24.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="...._1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 344 53" style="enable-background:new 0 0 344 53;" xml:space="preserve">..<style type="text/css">....st0{fill:#F06666;}....st1{fill:#E3ECF1;}..</style>..<g>...<polygon class="st0" points="27.9,0 36.5,17.4 55.7,20.2 41.8,33.8 45.1,53 27.9,43.9 10.6,53 13.9,33.8 0,20.2 19.3,17.4 ."/>...<polygon class="st0" points="99.9,0 108.5,17.4 127.8,20.2 113.9,33.8 117.2,53 99.9,43.9 82.7,53 86,33.8 72.1,20.2 91.3,17.4 ....."/>...<polygon class="st0" points="172,0 180.6,17.4 199.9,20.2 185.9,33.8 189.2,53 172,43.9 154.8,53 158.1,33.8 144.1,20.2 ....163.4,17.4 ."/>...<polygon class="st1" points="244.1,0 252.7,17.4 271.9,20.2 258,33.8 261.3,53 244.1,43.9 226.8,53 230.1,33.8 216.2,20.2 ....235.5,17.4 ."/>...<polygon class="st1"

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjstVShiiOB0qX823FfBqRyw85_PYeMvcwwN8WXPNijGOz7RStBFDTlieka0rswsFV1c3Od9Wb-0_siuVlVsoZEnYX8Ne07YZD1Pd_fa4F27myKO_vV10qy_MU_bzf2cfL2pwi34t7YM&sig=Cg0ArKJSzNzZTYqdekTxEAE&id=lidar2&mcvt=1002&p=0,0,280,336&tm=2773.600000000006&tu=1772&mtos=1002,1002,1002,1002,1002&tos=1002,0,0,0,0&v=20241204&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=20&adk=658919145&rs=2&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=3291243900&rst=1736979636520&rpt=4988&met=mue&wmsd=0&pbe=0&fle=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	129623
Entropy (8bit):	6.03728078359163
Encrypted:	false
SSDEEP:	1536:uTVyivCzO+j5JDFvSg+1bSdqB8VpC5xtt2udcs371AVo0WGV1vW2F2SLPD:NivWndvSg+gkBtPzlGvb
MD5:	7FEBD105F766DC06AEAE365A872271A2
SHA1:	BF9E191AA8E214174E33335E9335699B463FD3EE
SHA-256:	960BCE70CA22AC1B6EC874FD6F7B105E3D8EDA6801A5646755AB9206DA42CB94
SHA-512:	A26116065B39E0D23446523DAE029D850F0A360290369A1878C6CDF1B17B989D470DC6399BBEDE754689EAB8327460A742E6AF2BCC4B4596708EAACEA5823CF2
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4821006852914359&output=html&h=90&slotname=4034399826&adk=3689936537&adf=2221415025&pi=t.ma~as.4034399826&w=847&abgtt=9&fwrn=4&fwrnh=100&lmt=1736870130&rafmt=2&format=847x90&url=https%3A%2F%2Fnuance-pdf-professional2.software.informer.com%2F7.2%2F&fwr=0&fwrattr=true&rpe=1&resp_fmts=2&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736979634920&bpp=1&bdt=1621&idt=1620&shv=r20250113&mjsv=m202501090101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=1200x90%2C336x280&correlator=4566372036047&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=15&ady=860&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533202%2C31089683%2C95344791%2C95350245%2C95340252%2C95340254&oid=2&pvsid=3788874330487745&tmod=2006592406&uas=0&nvt=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=o%7C%7CeE%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=1625
Preview:	<!doctype html><html><head><script>var jscVersion = 'r20250114';</script><script>var google_casm=[];</script><style>a { color: #000000 }.img_ad:hover {-webkit-filter: brightness(120%)}</style><script></script><script>window.dicnf = {imprtype: 2,};</script><script data-jc="40" data-jc-version="r20250114" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb/%<1245;05!=nehu`/!361:<320!9sqrm(&2057?61<&>`dopb~"]">(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var q=this\|\|self;function aa(a){return a};var ba,t;a:{for(var ca=["CLOSURE_FLAGS"],v=q,ea=0;ea<ca.length;ea++)if(v=v[ca[ea]],v==null){t=null;break a}t=v}var fa=t&&t[610401301];ba=fa!=null?fa:!1;var w;const ha=q.navigator;w=ha?ha.userAgentData\|\|null:null;function ia(a){return ba?w?w.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function x(a){var b;a:{if(b=q.

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 275 x 175, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	16667
Entropy (8bit):	7.964780739721012
Encrypted:	false
SSDEEP:	384:L7P/JqTFIZCusjBTVdqFzvNLYiMqeCevovdH4msi:L7XMSMuY0FhYaaYCJi
MD5:	44E210F1A630B89AECA667F467317B68
SHA1:	E4B8788ADA8050D52B0CFF355F123AC1F60DF268
SHA-256:	296F633ECA093FEF4BE918DFBC97E845AB56A4F18A985E4B6304A71EB3F4D1A3
SHA-512:	46AFFFDE72339DDADCD78644BC7A115A6F5A20C0E716EE06DCF17AA012259E37010EDE17AA2F2908557ECB0731EFED99880105AAB5E59237D664693EA3856DE7
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/2xJU2w7BQ2OUHsQwFNLOl3wbGd0rtPUuMJI1Um242S6N-acN0xG6Syj1jL17gxLKb3RMKwn6fajnFJISLQ8KCmP0yw=s275-w275-h175
Preview:	.PNG........IHDR.............Q..U....sBIT.....O.....zTXtRaw profile type APP1....UL[.. ....=.C.4.6U.....y.F.-.8....\..:>5,....y........1....k.Q..+.HLd.R8...G...B#....L..gW.pL7r.[b...I..(k..h.-...X.. .IDATx..w\|........+..z.d.r...0...S.6..........GHH.%$...ZL..b....C....n.M...N...z......Y.Y.\..^z.......g.gf.A...ddd~ .t.@F.DV...`..##3.d.....Y922.AV...`..##3.d.....Y922.AV...`..##3.d.....Y922.AV...`..##3.d.....Y922...xR...J.+...i.A.b...~...)..:=UiP..vd.=\Aa.#..av`...r...j..s2..Z"7:2."..CM..lw..3...H9^..5.......-...JIf..#.^;.5.....r...Mz...J)B.e...7,..B. .....2g9..UA.1..Z.H9......JEzJ.I...B.p..+......h.7.......!D..k..E...J..B..".P8V....$..0.<....c.....g.0..`...c..9..BA.R.....6Q....6......[e..e....q..V.......9?\9..v[...._.G...B$....%.V..W..?......b.......5._}.....).:.j].e%.8..g.i.l~.r(...F.h.].v.7..E.fxOBd-0.....b........l.....}=....m.P[[........[...w.>...kI..m<.w..d..lvB...TUU....n7.....cA..m..q.,.a.`.9.... ...HT..X%.......\ D)..t^..".......

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (530)
Category:	downloaded
Size (bytes):	2725
Entropy (8bit):	5.676624938398712
Encrypted:	false
SSDEEP:	48:0LDdt7Jyq8krJRvIHELUb/e0j7jHLM76syQv/8rcn:0LjlFrcEkrPjwWcn
MD5:	13058B6A504A6E9565E8C26512670D07
SHA1:	49A39CF205F3D7C58493A8566436867E790565D4
SHA-256:	2AF495207AA5CEB8329A1FAEAEAE94D15FB4178D89367C93C1933527D97AE884
SHA-512:	AA3F30C4826A8B5926C1A9DA3139416852D08E39CA8179D56F6F78F5702B1955BA2CE20F0F95532DFFFA36131D7922D0A99A2E74C856DF58582600348C76573C
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-chrome-webstore/_/js/k=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.en_US.lwRYVOpsj_w.es5.O/ck=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.oit6mfZoPW0.L.B1.O/am=WGow4BY/d=1/exm=A7fCU,AWpPDd,BBI74,BVgquf,CfLNpd,DNlSjf,EFQ78c,EKHvcb,FCpbqb,FdMhB,Fu7Bjd,HsQQib,IZT63,JNoxi,KUM7Z,L1AAkb,LBaJxb,LEikZe,LcrBLd,LvGhrf,M0x0ie,MH0hJe,MI6k7c,MT4Hub,MdUzUe,MpJwZc,NwH0H,O1Gjze,O626Fe,O6y8ed,OTA3Ae,OhgRI,P6sQOc,PIVayb,PrPYRd,QIhFr,QVysJe,QvLWAb,Qy2cOb,R6rk4,RMhBfe,RiINWe,RqjULd,RyvaUb,SdcwHb,SpsfSb,UUJqVe,Uas9Hd,UkbOSe,Ulmmrd,V3dDOb,V9amgb,VBl5Ff,WhJNk,Wt6vjf,XVMNvd,YA1iG,YYmHzb,Z5uLle,ZDZcre,ZvHseb,ZwDk9d,_b,_tp,aW3pY,bZ0mod,byfTOb,cephkf,db7dHd,dsBBae,duFQFc,e5qFLc,ebZ3mb,gIl2M,gychg,h4ilFc,hKSk3e,hc6Ubd,hhhU8,i8oNZb,kBpGk,kjKdXe,lazG7b,ld80Uc,lsjVmc,lwddkf,mI3LFb,mUxuKd,mdR7q,n73qwf,o2G9me,p3hmRc,p8L0ob,pjICDe,pw70Gc,q0xTif,qv5bsb,ri2s0b,rm99Nc,s39S4,sI9bWe,sOXFj,sQ8PT,tw4SJc,w9C4d,w9hDv,ws9Tlc,xQtZb,xUdipf,zKiH5d,zbML3c,zr1jrb/excm=_b,_tp,itemdetailview/ed=1/wt=2/ujg=1/rs=AEP720JOa-HBKdRRZPKO8sen3KFm9_9RpQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:QIhFr;lOO0Vd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;wR5FRb:YA1iG;xqZiqf:BBI74;yEQyxe:p8L0ob;yxTchf:KUM7Z;zxnPse:duFQFc/m=qUYJve"
Preview:	"use strict";this.default_ChromeWebStoreConsumerFeUi=this.default_ChromeWebStoreConsumerFeUi\|\|{};(function(_){var window=this;.try{._.n("uIZIXd");.var W2={},X2={},TTa=new Map([["XDoBEd-JGcpL-P1ekSe",(W2[0]="XDoBEd-JGcpL-P1ekSe-OWXEXe-A9y3zc",W2[1]="XDoBEd-JGcpL-P1ekSe-OWXEXe-xTMeO",W2[2]="XDoBEd-JGcpL-P1ekSe-OWXEXe-OOOvgc",W2[3]="XDoBEd-JGcpL-P1ekSe-OWXEXe-fRtd9e-OOOvgc",W2[4]="XDoBEd-JGcpL-P1ekSe-OWXEXe-fRtd9e-SDqDXe",W2[5]="XDoBEd-JGcpL-P1ekSe-OWXEXe-SDqDXe",W2[6]="",W2)],["ugRNIf-JGcpL-P1ekSe",(X2[0]="ugRNIf-JGcpL-P1ekSe-OWXEXe-A9y3zc",X2[1]="ugRNIf-JGcpL-P1ekSe-OWXEXe-xTMeO",X2[2]="ugRNIf-JGcpL-P1ekSe-OWXEXe-OOOvgc",X2[3]="ugRNIf-JGcpL-P1ekSe-OWXEXe-fRtd9e-OOOvgc",.X2[4]="ugRNIf-JGcpL-P1ekSe-OWXEXe-fRtd9e-SDqDXe",X2[5]="ugRNIf-JGcpL-P1ekSe-OWXEXe-SDqDXe",X2[6]="",X2)]]);var UTa,VTa;UTa=_.Ri(["aria-"]);VTa=_.Ri(["aria-"]);._.Z2=function(a){_.N.call(this,a.Oa);this.progress=0;this.ma=6;this[_.NP]=!0;a:{a=this.oa().children().uc();for(var b=_.v(TTa),c=b.next();!c.done;c=b.next()){var

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2410)
Category:	downloaded
Size (bytes):	217439
Entropy (8bit):	5.520506280445331
Encrypted:	false
SSDEEP:	6144:BLDFV50OzKYRPAENEJ+pKSo5O4NmHhbq5ByukhCOWomLCQKfQ1zK0jOJv60JGxId:BLBV50OzKUPAENEkpKSo5O4NmHhbq5Bw
MD5:	62B6735D0C6059B25BCA3523393C8EE6
SHA1:	B1B3C4CE1DEA4CBE8A830F03FD1AB6F8D78F1EE0
SHA-256:	956817E2B1933BDEFE708C15AB06F601743C8287730E5B089FDE2CE08C42AD42
SHA-512:	139BFB53124EB1C8C54EFCB6B261C3BD6DD08AEC6660DFEE2AA851C3355139505179B54FF8CF2CE43CB91A3C4A5B6BAB50085F62EFB3B763C9E6D6CEEBF1E4CB
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.WSo7OLdFZck.2019.O/rt=j/m=qabr,q_dnp,qcwid,qapid,qads,q_dg/exm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin/d=1/ed=1/rs=AA2YrTu3OIbomB3nx1wiDyRkhdiMoOpjsA"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.Fd=typeof AsyncContext!=="undefined"&&typeof AsyncContext.Snapshot==="function"?a=>a&&AsyncContext.Snapshot.wrap(a):a=>a;.}catch(e){_._DumpException(e)}.try{._.ye=function(a){return _.Lb(a)&&a.nodeType==1};_.ze=function(a,b){if("textContent"in a)a.textContent=b;else if(a.nodeType==3)a.data=String(b);else if(a.firstChild&&a.firstChild.nodeType==3){for(;a.lastChild!=a.firstChild;)a.removeChild(a.lastChild);a.firstChild.data=String(b)}else _.ve(a),a.appendChild(_.le(a).createTextNode(String(b)))};var Ae;_.Be=function(a,b,c){Array.isArray(c)&&(c=c.join(" "));const d="aria-"+b;c===""\|\|c==void 0?(Ae\|\|(Ae={atomic:!1,autocomplete:"none",dropeffect:"none",haspopup:!1,live:"off",multiline:!1,multiselectable:!1,orientation:"vertical",readonly:!1,relevant:"additions text",required:!1,sort:"none",busy:!1,disabled:!1,hidden:!1,invalid:"false"}),c=Ae,b in c?a.setAttribute(d,c[b]):a.removeAttribute(d)):a.setAttribute(d,c)};var Fe;_.Ee=func

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (2166)
Category:	dropped
Size (bytes):	38972
Entropy (8bit):	5.526643578081119
Encrypted:	false
SSDEEP:	768:ByEz3JezjQJutwy7Gxr1xUQZr6sG6GBPRML/YbVuw/Zebn53sHrn5huyBvoqeqMr:I85efC6ssGyhBDpI
MD5:	14C7483E36CCB504F58F8BAB23BAD4E1
SHA1:	A9F10E07EF54FD611C1AD7838E7231DACAC39360
SHA-256:	41415710AFE97995A9AD088CB4B5BC6CC5D9581CE9AEAE46BB697087192A5D22
SHA-512:	7B4517EF78FB2DDD3D0527440E742FB13104C64149FF21CD9FFEEEB3FDC4F82971A220909D3C0C21E0C57803668F42BAA10EE9787052C3338E3627AE5B5B7990
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var m=this\|\|self;function aa(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=m,e=0;e<c.length;e++)if(d=d[c[e]],d==null){c=null;break a}c=d}a=c&&c[a];return a!=null?a:b}function ba(a){return a};function q(a,b){if(!b)return a;b.indexOf("&")===0&&(b=b.substring(1));const c=/[?&]adurl=([^&]*)/.exec(a);return c?`${a.slice(0,c.index+1)}${b}&${a.slice(c.index+1)}`:`${a}${a.indexOf("?")===-1?"?":"&"}${b}`}function ca(a,b){switch(a){case 0:return b?"&ri=1":"";case 1:return b?"&ri=24":"&ri=27";case 2:return b?"&ri=25":"&ri=26";default:return""}}.function da(a){a=a.o;if(!a)return"";let b="";a.platform&&(b+="&uap="+encodeURIComponent(a.platform));a.platformVersion&&(b+="&uapv="+encodeURIComponent(a.platformVersion));a.uaFullVersion&&(b+="&uafv="+encodeURIComponent(a.uaFullVersion));a.architecture&&(b+="&uaa="+encodeURIComponent(a.architecture));a.model&&(b+="&uam="+encodeURIComponent(a.model));a.bitness&&(b+=

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (674)
Category:	downloaded
Size (bytes):	1364
Entropy (8bit):	5.32275245424133
Encrypted:	false
SSDEEP:	24:knE6JSPQ10YsCgfsUg+/Pkoc7mZpnnUZFkfiK4Gb/ZGbBpTW2O0i4Rrcn:0RJ0h/67m7nkgp4Gb/ZGbfy2i4Rrcn
MD5:	B132B4874897DCC2E76A4CB6806CE790
SHA1:	3E99EC55065AC03CB176842E2465D8616ACD2134
SHA-256:	E1584A6760EF08FE7771E32145679AD025805336144AD321F196405F39FA0A9B
SHA-512:	3825AF0959C32E4CFB317C66BEED605CCA8F936F7E78B978302234A910F9B5F7C05F98D2149AECA0DDFBFFDF291A5FE013F15475619FDC4F5774DEE3300D69CA
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-chrome-webstore/_/js/k=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.en_US.lwRYVOpsj_w.es5.O/ck=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.oit6mfZoPW0.L.B1.O/am=WGow4BY/d=1/exm=A7fCU,AWpPDd,BBI74,BVgquf,CfLNpd,DNlSjf,EFQ78c,EKHvcb,FdMhB,Fu7Bjd,HsQQib,IZT63,JNoxi,KUM7Z,L1AAkb,LBaJxb,LEikZe,LcrBLd,LvGhrf,M0x0ie,MH0hJe,MI6k7c,MT4Hub,MdUzUe,MpJwZc,NwH0H,O1Gjze,O626Fe,O6y8ed,OTA3Ae,OhgRI,PIVayb,PrPYRd,QIhFr,QVysJe,QvLWAb,Qy2cOb,R6rk4,RMhBfe,RiINWe,RqjULd,RyvaUb,SdcwHb,SpsfSb,UUJqVe,Uas9Hd,UkbOSe,Ulmmrd,V3dDOb,V9amgb,VBl5Ff,XVMNvd,YA1iG,YYmHzb,Z5uLle,ZDZcre,ZvHseb,ZwDk9d,_b,_tp,aW3pY,bZ0mod,byfTOb,cephkf,dsBBae,duFQFc,e5qFLc,ebZ3mb,gIl2M,gychg,h4ilFc,hKSk3e,hc6Ubd,i8oNZb,kBpGk,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mUxuKd,mdR7q,n73qwf,o2G9me,p3hmRc,p8L0ob,pjICDe,pw70Gc,q0xTif,qv5bsb,ri2s0b,rm99Nc,s39S4,sI9bWe,sOXFj,sQ8PT,tw4SJc,w9C4d,w9hDv,ws9Tlc,xQtZb,xUdipf,zKiH5d,zbML3c,zr1jrb/excm=_b,_tp,itemdetailview/ed=1/wt=2/ujg=1/rs=AEP720JOa-HBKdRRZPKO8sen3KFm9_9RpQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:QIhFr;lOO0Vd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;wR5FRb:YA1iG;xqZiqf:BBI74;yEQyxe:p8L0ob;yxTchf:KUM7Z;zxnPse:duFQFc/m=P6sQOc"
Preview:	"use strict";this.default_ChromeWebStoreConsumerFeUi=this.default_ChromeWebStoreConsumerFeUi\|\|{};(function(_){var window=this;.try{._.n("P6sQOc");.var eAa=!!(_.lj[0]>>26&1);var gAa=function(a,b,c,d,e){this.o=a;this.ua=b;this.ma=c;this.Aa=d;this.Ha=e;this.j=0;this.v=fAa(this)},hAa=function(a){var b={};_.Ia(a.Xy(),function(e){b[e]=!0});var c=a.My(),d=a.Qy();return new gAa(a.Py(),c.j()1E3,a.Hy(),d.j()1E3,b)},fAa=function(a){return Math.random()Math.min(a.uaMath.pow(a.ma,a.j),a.Aa)},RU=function(a,b){return a.j>=a.o?!1:b!=null?!!a.Ha[b]:!0};var iAa=function(){this.j=_.jA(_.cAa);this.o=_.jA(_.OU);var a=_.jA(_.iO);this.fetch=a.fetch.bind(a)};iAa.prototype.v=function(a,b){if(this.o.getType(a.yc())!==1)return _.Ap(a);var c=this.j.DA;(c=c?hAa(c):null)&&RU(c)?(b=jAa(this,a,b,c),a=new _.zp(a,b,2)):a=_.Ap(a);return a};.var jAa=function(a,b,c,d){return c.then(function(e){return e},function(e){if(eAa)if(e instanceof _.Sf){if(!e.status\|\|!RU(d,_.Tl(e.status,1)))throw e;}else{if("function"==typeof _

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	7
Entropy (8bit):	2.5216406363433186
Encrypted:	false
SSDEEP:	3:W:W
MD5:	741839F346D6E8126AE38EE76A96FD12
SHA1:	DE18CCFA15E841C4EFE6788A08ECCDA935650BB1
SHA-256:	87695FDAC81728B9D7F2D4A1335C2632BB5E6BA1BED21D2DFF0254FBA31C7D5B
SHA-512:	47D4C7877004896984B270BA02711E0FA26D4F86C3A2566A89D4E457A821AFF267F6631925C081ACE90FB756ED4221AF8BA288364891DA56D2D862EFE4B44225
Malicious:	false
Reputation:	low
Preview:	healthy

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 275x175, components 3
Category:	downloaded
Size (bytes):	12546
Entropy (8bit):	7.957555146659612
Encrypted:	false
SSDEEP:	384:kNeWxTwUplKArTPmMF/XJzbXLCXn/czqMk3d2Ggb:kNeWF9ptrTvBJTCX/mkN2Gg
MD5:	21FFF5071EC92B57E393D1890F0EF4B0
SHA1:	C7E3140BD98969A6DBCEBAE2BF17E007D301087A
SHA-256:	4B6F81DA1BC61E21D07FFE4CDEDACAC687E0A69515111EF22F1E1E9DC04555BC
SHA-512:	E9F95C155476E4C25609064FC3D7D946F72C49C3D9B946245A1FFA3F57BD6097CA14EF893492BE5ECB505969B5DC96AB77C8EC9F25C443F41ABAB748C6AAB66D
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/vqhAd_lufZkkSsSvR1Pmt6J2vprUgpe9mBlBn0ym67AlBwW6d8X0JJzMBWDhCylteZIziZPzAJe46sATxOZfGRGo=s275-w275-h175
Preview:	......JFIF.....................................................................................................................................................................................................O.........................!...1A.Qa."q..&2BUrt.....#3RT.......$6Cbc...45DSs....................................G..........................!1AQaq..."2BRr.5Sb........#%........34CT.D$............?...2.1...50@h0b#d..1..H1..0%F. b..h.#.0./.C.u...m.[YQ....@..+...V'.0..x.X..5..B...=.&8.F........!."8..A..8....D .":.Y...._.1..+A.....c..F.@.. c.( 2w........+.0.(.a...G4W..sF......jv..bD.4....#...c.`...b...b..E..DB.[.@..r!....A.8.D...L.#.-.t:.P./.H...0@hb..1..h........`....c.F...h#...V.l.p.....&.7..."-aj.o...m.X{..yI..HW.!\-BFLZ.j..1\...\|k.8.....A.\k..k..b"..C..pH.........A H.p.G.W.....h`0,D.0Ahb......404...q.(..4W4.0,...".`6....oa3x....k2.h.&.....c...}9.o...<.ve..C_.5..{.J..#..eX.\|.0...k$.[.]..^.w..uV....k.....x...:...~..^u...1ma..]e%..)}..x_..I.+(.*1.....o3.S.6..~a?........

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 61628, version 1.0
Category:	downloaded
Size (bytes):	61628
Entropy (8bit):	7.996560994602728
Encrypted:	true
SSDEEP:	1536:D0bcbU0BkgaaHDF868T5Io63Udr9xCHGD1AMYN4+:gbcbUq5a4x8VV63ErD1g
MD5:	1033A47731E45F7BD46A1962359E96B4
SHA1:	AC6ABEF8D1819A685DB48A9515F77A24A153E2A0
SHA-256:	61C412FBDBBF1417355373A80125C8CF7E5CBAAB4218BAE0316FE6EF917BF798
SHA-512:	84CA95F89E0A16EFD962B44BD3F7FFE09B328F33C068ACD8A1FEFD08101D824929E8B9EECCB0786483AA2FD2C60BD0B76FC2242479268D69FAAB72C48902E34B
Malicious:	false
Reputation:	low
URL:	https://cdn.protectonow.com/compressedFonts/RobotoBold.woff2
Preview:	wOF2.............~....U..........................D...\|..h.`..H.B..<.....l.....F...l.6.$.... ..". .."[.B...r...`..v..-.8.ko.0.W....)...B.........4..wf.......J&2.IZ.i)E.........FP.".Z.%j(...<...,.c..).5..bW.h..}......Mv.......,....7H...&...G..x..SzA.V.....}.. ..!s..H....:.....YZ.4.......~....@..T.WOK.?.k....".{..".R.><Tf.&.\|..r..F..z..I.+.5.\|=. l..J...A..&.^g/..#......O6..XS...r.g.}...._3....l..\.V.Nw...c...i.<.()..l4.3.2<...h}U. ........:7._...(S.AU..P.....bg...8..a./.x..oy............?UH...#.T.Tl.../..Z....f~..% .[/.D.6".2v97[.'...p...'a....i...x,.....@..vrq.kO....f..@2..5...U=..,.A.....]t.[d..".B ..,b..#J..q....'..E......8.........M.c....5....~.....g.....I...l..$.DM.$.B..wrM.;..p!#W..c....FTNO.P.@......WU...-...'.gB7........#......P.ItzxW..[*....R."/.....SV..&{......r+M...P..C..7.>E..kS.T.\...=s..I...Fh.4......gp..KJ..v...Y.....p"...i.I.d....jwH...t).cG.......>....^6..@.&\|....G......U..{.........$..7..]..r.2`..9..~....;....Y...g

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Category:	downloaded
Size (bytes):	15744
Entropy (8bit):	7.986588355476176
Encrypted:	false
SSDEEP:	384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/
MD5:	15D9F621C3BD1599F0169DCF0BD5E63E
SHA1:	7CA9C5967F3BB8BFFEAB24B639B49C1E7D03FA52
SHA-256:	F6734F8177112C0839B961F96D813FCB189D81B60E96C33278C1983B6F419615
SHA-512:	D35A47162FC160CD5F806C3BB7FEB50EC96FDFC81753660EAD22EF33F89BE6B1BFD63D1135F6B479D35C2E9D30F2360FFC8819EFCA672270E230635BCB206C82
Malicious:	false
Reputation:	low
URL:	https://cdn.protectonow.com/compressedFonts/RobotoRegularLatin_1701696927.woff2
Preview:	wOF2......=........t..=..........................d..d..^.`.. .T..<.....\|..{........6.$.... ..t. ..I.3.%.....8..&....4Z.\|t .8.........D...$.uNE.P.E.Ak...=.x.9Xz.`.I..R....#F+B`..}.RP\|E...Z\.W[.............C...QB....m...cm.?.F.g.......Q....3......p...L2.[......!+@U..^~.......D.?.......j...U...c..U.l.6{...m.CD].h.t.....Q8.....@P...L.c.....+...ZD..2.K...:..4{g..:..~....v......<..H^.R.'....8....?.;...uy.VW..8=.".F..*.....@E....c....=..Ib.....y8$.a){.......KiIW.&..~.}..1..w.M..{.4......!..{..F.H.5#K...t..5.w...ve;. '......NJ......'(%;...?...D...M.Cq,<.=?.f......._...V..bA.(..37..v....+.uY.C.b.w8AF..3.n.-..'..U%.2....o.l."...^bj..aoF.!`....A....j...'.:Z.u...[..p.GW:U%.Ejq...:I...C........S.C...sJe.6D...<.UM,..&h..z}.y\|..9...D..j...n..B.$..T....?../.Q..=B...C._.f.#.:Bo.@]T.(..v..F..+d...". ......R..R..R....!..~A....X............>!`p..,08. 9.../.....r..Q.......Qpg.\ko...C..3..Y.y..t'.d9..>#\|..3..?.#..$....i........g5.z....S....{3..Sp..S2..w.6........

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2167)
Category:	downloaded
Size (bytes):	38115
Entropy (8bit):	5.52762360182264
Encrypted:	false
SSDEEP:	768:8ivfxdU2EQFQJ86qp40roqmRrZVmsnPua0A+EAV18NadZo4OHQr2W7OJ4wG8yXyu:1H7U+7opmsmq0jSnIqjZw
MD5:	CE0BFB4856FD846B8947D5D1277EBA9F
SHA1:	C3E10C13DC4A8D78C25A57FEF98D1FD5895D4F4F
SHA-256:	87686C876E73DF0EFCF2213455525647D1322C23319BE16290F8BBC18F3EAAB6
SHA-512:	2CAA4747D78EC20084B57D2140247C6FB347008B0EA42303B5255C0084EE469DE4A57C7821DE288B3D293D374E868DA0AA50AC08A4DF96DD1ADA98176ECB4EDD
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20250114/r20110914/client/one_click_handler_one_afma_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var m=this\|\|self;function aa(a){return a};function p(a,b){if(!b)return a;b.indexOf("&")===0&&(b=b.substring(1));const c=/[?&]adurl=([^&])/.exec(a);return c?`${a.slice(0,c.index+1)}${b}&${a.slice(c.index+1)}`:`${a}${a.indexOf("?")===-1?"?":"&"}${b}`}function ba(a,b){switch(a){case 0:return b?"&ri=1":"";case 1:return b?"&ri=24":"&ri=27";case 2:return b?"&ri=25":"&ri=26";default:return""}} .function ca(a){a=a.o;if(!a)return"";let b="";a.platform&&(b+="&uap="+encodeURIComponent(a.platform));a.platformVersion&&(b+="&uapv="+encodeURIComponent(a.platformVersion));a.uaFullVersion&&(b+="&uafv="+encodeURIComponent(a.uaFullVersion));a.architecture&&(b+="&uaa="+encodeURIComponent(a.architecture));a.model&&(b+="&uam="+encodeURIComponent(a.model));a.bitness&&(b+="&uab="+encodeURIComponent(a.bitness));a.fullVersionList&&(b+="&uafvl="+encodeURIComponent(a.fullVersionList.map(c=>encodeURIC

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1001)
Category:	downloaded
Size (bytes):	1196
Entropy (8bit):	5.333582724590128
Encrypted:	false
SSDEEP:	24:5RRRxkgItfur7dzmhYtc/FFlvyLYt3dVOVZYOaU/OjRR55+l:fvIA9MvvJO3Gj15I
MD5:	47CB9F7EE4927E0C4FD4EBC61AD18FDD
SHA1:	814310BC2436DBA485B651513DE9AE54222307F2
SHA-256:	128485ACA9E4075332B58355BF06B8C53FEAD880E9E93303E09265FF1C2BCE77
SHA-512:	EDEADD6E233B5C7B96F4C1ABAEFE18BA0FAFB4CAD0067A173646A848FB1A11552A2033BEA5847228401225C427086FCD16C8B0D7DCB969E2CF8A3E33577695B3
Malicious:	false
Reputation:	low
URL:	https://i.informer.com/js/cache/hilight_software_v4.js?rnd=824406174
Preview:	var str="TopXNotes";var leftColumn=document.getElementById("leftColumn");if(leftColumn){var clsName='featured block';var div=document.createElement("div");div.className=clsName;div.onclick=function(){window.open("https://software.informer.com/go/g.php?go=https%3A%2F%2Ftopxnotes.software.informer.com%2F&hs=473582134&hilight&id=3948072")};var text=new Array();text.push('<span class="th_img">Today's Highlight</span><div class="th_logo small"><img src="https://img.informer.com/images/default_icon/default_48_0.png" alt="TopXNotes"/></div><a id="featured_name" href="https://software.informer.com/go/g.php?go=https%3A%2F%2Ftopxnotes.software.informer.com%2F&hs=473582134&hilight&id=3948072" onclick="return false;">TopXNotes</a>');text.push('<div id="thdesc"></div>');text.push('<img src="/ajax/th_view.php?id=3948072" width="1" height="1" alt="counter">');div.innerHTML=text.join("");if(leftColumn.childNodes.length){var before1=leftColumn.childNodes[0];leftColumn.insertBefore(div,before1)}els

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 31568, version 1.0
Category:	downloaded
Size (bytes):	31568
Entropy (8bit):	7.99179193151151
Encrypted:	true
SSDEEP:	768:nV/PrFLvj4faRm0uZd9N56pGyOPRA3Y8NyjZ:pPrFbjU0m0Qd56pYA3YUa
MD5:	EB11BFB369775FF0739DABB3A5F379CC
SHA1:	2EEBAEA2F7080C0B256FBFC70AB91473243AF0F8
SHA-256:	2E0BDC192134BB3950A1BA4C1148901E39EBD8D2D01F64EF23106E90A9F771B0
SHA-512:	59E89752E932AADE54D5B2B940E09F3C8B12A836F1C5EB515E82036A97492F42E12A4FB3DC156CB8D969D6CB4E8FD8F18B358715F972E12D4596AD390430CB21
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/productsans/v9/pxiDypQkot1TnFhsFMOfGShVF9eO.woff2
Preview:	wOF2......{P......H...z...........................X..j.`....l..a.....P.._..8....h.6.$..l. ..8..{...[.3.@..o1.........(..vD.D^r.;..(..7%....?/i.a.t.kKa...fi(T.DE.....P.b..-n.i..=.q-1QR.$...1..3C.....A..v...y:.n....&M.}.p)...r...p.l...5t...I..N.....>G..Of.f...N.H"y.{9....d......u/..f.&=...:..@...A.e3.a2.e.R f.L..E..nN...mO...+.....f..`._..G....O...s].q..).m"k..a...U..........SDRR........^J..g.J......Mcic......u.f".\|.:...J8./...zv.....?1.........<...[.-<.I........k<.M.kp]j.?...l.....d..Y ........k.(..M.S....E.(...~..#.........}..91 ...d...k...6....m.XA........p.X.`.6...u.l...o..._....S._.G.....%SZ...K.~..1.Z.....vu..2...T.+E...Ob...\..D&...KdrR9..T"......Hr.T".. ..e........B0...._.O.\.33w.........-...2....u..K.+.J....R....G.TX....nI....@.."l.%t..-$z<....1:.F.9.......5...f.4..%Y2.P.@.t.....S..e.1..z...o<....O.ECp....z.....g. (.......];...7...r..w....Z8W.$.z$.z.y{...6.........F.....'..y\|...R.ss...[.UM.".}.d....d..f.%.l.A..N+\....H..Y..*t

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	dropped
Size (bytes):	141707
Entropy (8bit):	5.447155309339483
Encrypted:	false
SSDEEP:	3072:p9rsTsEhvdEQYRMD9AIpUlNkVnkO9MKzCr0WNBzuGq:4vduaG7lsbqPKZ
MD5:	0726E80CF805638A4305FBAB3BD8F03E
SHA1:	5521C93BBF2758ACEA33D570FD47576E24C771B9
SHA-256:	78CA22A5B433862C23BC0CB5344897202FB09F27457188FEB45F8F9C8C3A443C
SHA-512:	3C17E55E35C6A4E7BB7EE6A1F1713B61A28F3BBA3211B7301AE06563B4C5FDBACD7A9F1149CB7FBF2A732EE6F67ED7550098EE1CBC37362B934E78E9CEF757BD
Malicious:	false
Reputation:	low
Preview:	var oi=Object.defineProperty;var si=(e,t,n)=>t in e?oi(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n;var j=(e,t,n)=>(si(e,typeof t!="symbol"?t+"":t,n),n);function Mh(){import.meta.url,import("_").catch(()=>1),async function*(){}().next()}(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const o of document.querySelectorAll('link[rel="modulepreload"]'))r(o);new MutationObserver(o=>{for(const s of o)if(s.type==="childList")for(const i of s.addedNodes)i.tagName==="LINK"&&i.rel==="modulepreload"&&r(i)}).observe(document,{childList:!0,subtree:!0});function n(o){const s={};return o.integrity&&(s.integrity=o.integrity),o.referrerPolicy&&(s.referrerPolicy=o.referrerPolicy),o.crossOrigin==="use-credentials"?s.credentials="include":o.crossOrigin==="anonymous"?s.credentials="omit":s.credentials="same-origin",s}function r(o){if(o.ep)return;o.ep=!0;const s=n(o);fetch(o.href,s)}})();var O=(e=>(e.Video="video",e.Image

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2731)
Category:	downloaded
Size (bytes):	442828
Entropy (8bit):	5.579893166721979
Encrypted:	false
SSDEEP:	12288:c0r0Kinb77jT2gCJ73jZr6BliV0CorajmE9FUVbCaO8M2rWPCkXiWAdYUtFGTiDn:c0r0Kinb77jT2gCJLjZr6BliV0brajmx
MD5:	21126DA023904D636F635D16EBDAD753
SHA1:	673F7AD4B65F293669DC3D44FB2F1F9110787AF6
SHA-256:	3D97FFA7779F82C00A3A44FF7E9373A8126135A00B4632D7D9D3DEC8AB5AD20D
SHA-512:	3EA8524E474645982C9E1CBEDD04A560A0E68723139732A58379FEFBCA10207DC7BB01EE32333C6EE031CF2995158DB1BA73501002056D1B1AB6886DC4E34315
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/adsense/m202501090101/show_ads_impl_fy2021.js
Preview:	(function(sttc){'use strict';var q,aa=Object.defineProperty;function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",fa={},ha={};function ia(a,b,c){if(!c\|\|a!=null){c=ha[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ka(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in fa?f=fa:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ea&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(fa,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ha[d]===void 0&&(a=Math.random()*1E9>>>0,ha[d]=ea?ca.Symbol(d):"$jscp$"+a+"$"+d),aa(f,ha[d],{configurable:!0,writable:!0,value:b})))}}var la=Object.create,ma=Object.setPrototypeOf; .function oa(a,b){a.prototype=

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (721)
Category:	downloaded
Size (bytes):	30680
Entropy (8bit):	5.583367205107106
Encrypted:	false
SSDEEP:	768:ambgYNSxX88J7NlwOOvR7iPtGqhPDwDpgjlECLbfbpV:a+Ys8J7OqOpgjlECLbfNV
MD5:	D63FE17D5B9B419604C1EFAFAF0CC847
SHA1:	5C70FD7D55CB8B4C664095ADD112C700958B106E
SHA-256:	7CC095FEBAB4BF19DB18A19A151E7E3E874B42B81957CDF24F7F4F6193A30BDA
SHA-512:	AED8C2E037D7F1F80214FD1425A1BC1B874CC7AC2FCE5BDECA01A5E9C4881F046A7650738511ED1273CD90D754C20C62D4BEC1EE25293A450E9D6E44416D07E7
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-chrome-webstore/_/js/k=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.en_US.lwRYVOpsj_w.es5.O/ck=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.oit6mfZoPW0.L.B1.O/am=WGow4BY/d=1/exm=A7fCU,AWpPDd,BBI74,BVgquf,CfLNpd,DNlSjf,EFQ78c,EKHvcb,FdMhB,Fu7Bjd,HsQQib,IZT63,JNoxi,KUM7Z,L1AAkb,LBaJxb,LEikZe,LcrBLd,LvGhrf,M0x0ie,MH0hJe,MI6k7c,MT4Hub,MdUzUe,MpJwZc,NwH0H,O1Gjze,O626Fe,O6y8ed,OTA3Ae,OhgRI,PIVayb,PrPYRd,QIhFr,QVysJe,QvLWAb,R6rk4,RMhBfe,RiINWe,RqjULd,RyvaUb,SdcwHb,SpsfSb,UUJqVe,Uas9Hd,UkbOSe,Ulmmrd,V3dDOb,V9amgb,VBl5Ff,XVMNvd,YA1iG,YYmHzb,Z5uLle,ZDZcre,ZvHseb,ZwDk9d,_b,_tp,aW3pY,bZ0mod,byfTOb,cephkf,dsBBae,duFQFc,e5qFLc,ebZ3mb,gIl2M,gychg,h4ilFc,hKSk3e,hc6Ubd,i8oNZb,kBpGk,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mUxuKd,mdR7q,n73qwf,o2G9me,p3hmRc,p8L0ob,pjICDe,pw70Gc,qv5bsb,ri2s0b,rm99Nc,s39S4,sI9bWe,sQ8PT,tw4SJc,w9C4d,w9hDv,ws9Tlc,xQtZb,xUdipf,zKiH5d,zbML3c,zr1jrb/excm=_b,_tp,itemdetailview/ed=1/wt=2/ujg=1/rs=AEP720JOa-HBKdRRZPKO8sen3KFm9_9RpQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:QIhFr;lOO0Vd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;wR5FRb:YA1iG;xqZiqf:BBI74;yEQyxe:p8L0ob;yxTchf:KUM7Z;zxnPse:duFQFc/m=sOXFj,q0xTif,Qy2cOb"
Preview:	"use strict";this.default_ChromeWebStoreConsumerFeUi=this.default_ChromeWebStoreConsumerFeUi\|\|{};(function(_){var window=this;.try{._.Ai(_.lu);._.n("sOXFj");.var sA=function(){_.Nr.call(this)};_.F(sA,_.fA);sA.Ea=_.fA.Ea;sA.prototype.j=function(a){return a()};_.mA(_.ku,sA);._.r();._.n("oGtAuc");._.rga=new _.cg(_.lu);._.r();._.rB=function(a,b){a&&_.eg.ob().register(a,b)};._.n("q0xTif");.var Lga=function(a,b){_.Or(a,b)},Mga=function(a){var b=function(d){_.es(d)&&(_.es(d).Hb=null,_.RA(d,null));d.XyHi9&&(d.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(var c=0;c<a.length;c++)b(a[c])};_.tB=function(a){_.PA.call(this,a.Oa);var b=this,c=a.context.YR;this.j=c.Di;this.ma=this.Ha=this.v=null;this.o=a.service.qb;this.Aa=a.service.d_;a=this.j.ma.then(function(d){b.v=d;d=b.j.id.XI(d,b.j.j);b.Ha=d.variant});c=c.bF.then(function(d){b.ma=d});this.Iy=this.Iy.bind(this);Lga(this,_.rh([a,c]))};_.F(_.tB,_.PA);_.tB.Ea=function(){return{context:{YR:"FVxLkf"},service:{qb:_.qA,component:_.dB,d_:_.rga}}}

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.8035671313969885
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKFcM6Qaxp3T2TjWaee:PLKdXNQKFtaxZT2TjL
MD5:	C206147C7CAE99642A4F8A2C640A0019
SHA1:	8C32B7B7E0807BBE85E5C8C94F87AFEA31EEDC40
SHA-256:	6F55ADBECCE78B9C566F8DC830177DC91782702FF35F213F009FC2B902E25603
SHA-512:	0D94AA53B801AC69A9BB4A7DF4FC0E00B6FFD1C5668A6FEE4EFC11986B7F516EB27A8A0197C0106A4295ACD5F63C222EA2F1BD9431BF2D689672AC91C5528EB6
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js');

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	106589
Entropy (8bit):	5.433758693135534
Encrypted:	false
SSDEEP:	1536:Qb5Uv0wWa056X1XbFL6/9YHjrx4ziYtCRl69JLtaLBrDgfnH1OBeFWySrbyqEcud:oNE1tHjiPsLBw5XSCbp
MD5:	7B2A703A03AC1BCAAD0F7E88BDF43E24
SHA1:	150ACFE06990163530941384F2A4CEF733E06030
SHA-256:	C64D6C808F46DAB854C6DA6ADA3857A214477C0F2591EB783F62A0F6FA30C7A1
SHA-512:	7FF3B1CD3CC050DDBA8C27B92C3B8E97AD2ED5C746698E9A6DC4D11D3D866F328FC99142167037BCC1C7684BBB56EA02BEA313BD2ED54E090630E7E8835A3984
Malicious:	false
Reputation:	low
Preview:	!function(t){var n={};function r(e){if(n[e])return n[e].exports;var i=n[e]={i:e,l:!1,exports:{}};return t[e].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=n,r.d=function(t,n,e){r.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:e})},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"_",{value:!0})},r.t=function(t,n){if(1&n&&(t=r(t)),8&n)return t;if(4&n&&"object"==typeof t&&t&&t._)return t;var e=Object.create(null);if(r.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:t}),2&n&&"string"!=typeof t)for(var i in t)r.d(e,i,function(n){return t[n]}.bind(null,i));return e},r.n=function(t){var n=t&&t._?function(){return t.default}:function(){return t};return r.d(n,"a",n),n},r.o=function(t,n){return Object.prototype.hasOwnProperty.call(t,n)},r.p="",r(r.s=5)}([function(t,n,r){var e=r(1),i=window,a=i.document,c=i.location,o=encodeURIComponent,u=decodeURIComponent,f=i.navigat

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3682)
Category:	downloaded
Size (bytes):	160486
Entropy (8bit):	5.60200688077966
Encrypted:	false
SSDEEP:	3072:19uf9+mMEF2m9t55gI5SjrqS3ADZlSHmlY2+G7lkMf1sKqeMPkgizR014QK:19uf9+UF2m9t55r5aq86XSHmn+G7lkML
MD5:	E1BC6AD1631777FE51FD498B24D412FB
SHA1:	15609D02EB90DCCF72C015A40B79E1270B11DE4C
SHA-256:	66AB7CD47B5ABE89C671349907EA4E8FA6025EBECAD8D83EFF2432177FF394F0
SHA-512:	176A0EC856FC6D50E0EFFF454661B0D867FFD117A3C2A0D06452FF291956E6E32482FBFE3B52E3C971CB5D52D6201BCA1F05A7E773485F399985C5BF22181E90
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
Preview:	(function(sttc){'use strict';var aa,ba=Object.defineProperty;function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",fa={},ha={};function ia(a,b,c){if(!c\|\|a!=null){c=ha[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ja(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in fa?f=fa:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ea&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?ba(fa,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ha[d]===void 0&&(a=Math.random()*1E9>>>0,ha[d]=ea?da.Symbol(d):"$jscp$"+a+"$"+d),ba(f,ha[d],{configurable:!0,writable:!0,value:b})))}}ja("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")},"es_nex

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	206
Entropy (8bit):	5.121546426036098
Encrypted:	false
SSDEEP:	6:tI9mc4slyhrHrERtMtMFm4UOmFrB0N6AHo+M:t44hrHrWMqNUHBu6A3M
MD5:	C37A5A3FC8C4728AE8DB39621B875035
SHA1:	BA0741296F09AA556701019E8F3DF78FB6EB15C0
SHA-256:	2BF339B4730ED9DF2865F724168BCB3578F01BB836A4D47E7AB9084F447F4857
SHA-512:	E77D1C73BED280E8CB2293C165B3721B84A41A0C6E2A6DA0E57D16837796C0BE47FF6D857032ABBA5DD5068AC4038EA129DCB5A91936EF439FAB6F42454BA88B
Malicious:	false
Reputation:	low
URL:	https://cdn.protectonow.com/ext/checkmark-chrome_1698059071.svg+xml
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="-2 -9 30 30" width="30" height="30">.. <path fill-rule="evenodd" d="M22.594 3.5L8.062 18.188l-6.656-6.625L0 13l8.063 8L24 4.937z" fill="#53a656"/>..</svg>..

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 275 x 175, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	17778
Entropy (8bit):	7.9583181057691945
Encrypted:	false
SSDEEP:	384:jqx5TJgc0NQgXadUozfnFD9tITEBIJuGgwBMc:jqzucYXgfnhIjJDgbc
MD5:	70FBFDD5B41F29E657AF36EE3B7850D1
SHA1:	677B0EAA95AB3D3FD2758C8CA90522693B31247E
SHA-256:	A7D5FD6E514EF981D097F1C98C78756FC40D02ABD8D58DAAD3CAA8104700B7E4
SHA-512:	3CB86F735E23AB66E1A9D1BF2BEC2320B2632FF2E3B54625D09DE886C9B3D2F35CD237C03EB98FE1ED8F8BB5437CC42C94A94EF7A3DDD85B7C7B996E5AEE8585
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/FHttL1Pz951zHElWjx4j6u1_BY3GEeXLsfZFrWYilHM5mr5YetXvFnxg_B-P5heOsymqcYv_ZHxpozUVQOFLtantkw=s275-w275-h175
Preview:	.PNG........IHDR.............Q..U....sBIT.....O... .IDATx..wx......{....e.B0...l.%!O \ w..'.$._B.;.p....r.......`c....[.eIV_........_....j.$3.....;3...w...V.eY...1E........'9....I..G>p.......pp..'9....I..G>p.......pp..'9....I..G>p.......pp..'9.......8Kg+...jrh.Bh!B..194...B..!:..,B.?...........V"d.%...!E.#B....Cc.!\.C;..n.......pp..'9....I..G>p.......pp..'9....I..G>L.K..d``..../..RGG.l..t.?....^QQ.V..o..exxx.....!.0.Z....;E".B.....S\|>..R(._..W.R7X..s....q.!.N../^...8...j.e.O>.....1g...).IN.......7.....n..h,)).q.e.T*..SO=..S.........}.I$../..v.....^t.]w.v.m 9..............I.M.{..y.2[.x.I......W#.,..A......O......C4.......o......e.c.&.....X.=x....~...b.......!...PH&.e.".".U<.7..W..B.........0..W.b__....f3H...O..uN>....o..fYY..m...0.R.....<}.f..y.f.PFl.....F.qc.9...CH.CK.!.Bd....BLn.Y.r.a...^{.....wb..........S.U\\../.9..s...P...K.R..........R..J..o........EDn...H.O.U].%.L..7e....(.D.{.;/.lhhhdd.f5 6.6l..{.ju2.ljj.c..~.;..........p=3..es.Ae._\|.h4

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2049)
Category:	downloaded
Size (bytes):	14478
Entropy (8bit):	5.470092501181737
Encrypted:	false
SSDEEP:	384:IYim7O/sAg9U6KAQdkzFc+5aiWQLHO91NIuW:IoqUAh8vz5W2H
MD5:	86FEDE8BE7FFAC7DF5D247115E7F4D12
SHA1:	C57DE81B88892016A304AAE99D209AA3D0AC0432
SHA-256:	E01393EF09D086E63CC45A3B9A0BC590E21C8E48CFB56B2E50F3E76403088E47
SHA-512:	199B0F2A0C1F81DF38A813553E15C903CBAD4BDD440129142E52C99FEE648F44BD0D564A9F8D47E18CB2001C58C54FAB534CFB4F58AA3C0F55B03E4E28A8485F
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/js/googleapis.proxy.js?onload=startup
Preview:	(function(){var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),g=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-.1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(a==null)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regular expression");return a+""};.g("String.prototype.endsWith",function(a){return a?a:function(b,c){var d=h(this

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2217
Entropy (8bit):	7.784314656105583
Encrypted:	false
SSDEEP:	48:Jwb0JwvaWEr+DdqgJgzXAkobhtD+xXS/W6gOn51QOoV7jJNS7:Kb8wWt62QkoD0FOXArA
MD5:	54F1A6D8B613C0863868E33C72131673
SHA1:	C2C698555AFBCA60984BA197A86F1645FBE70666
SHA-256:	E761AA8220C090608F73020C0B26D03A851BB27B863A9E47EF9D159AA9666E3B
SHA-512:	22D4851A44CCB674C8D230FF835146302E150139F900E8510667BB74AF293E87A93B4B805D4F770C8A0E820516637918965DB14FA7A0826B2FFE6EC78D570035
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....`.......PLTELiq..................s..v..x..{..\|..}..~..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................yGM....tRNS.......eP<....ZIDATx.m.].]W...k.....I&..N...u.D......A."...A..7}lQ(R.T....*.......H...R...A.&$Dk.P3.c...?.....i.4.{.....^..9....P\..d....:..\|P.......C...4.&}.......P....\|..;..R?..

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 275 x 175, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	57687
Entropy (8bit):	7.987349281165526
Encrypted:	false
SSDEEP:	1536:rMewwP7Y0NLo4aACovdW+jLAX2zMTmhyMT4rHdss:wUl/abGdpLTdoC47
MD5:	3F896AE15E5CCD21BDF16E01373A7049
SHA1:	BDA8414BA68399B5D316692D7E78F241A33F3093
SHA-256:	58FD7984A6A845F4B4B82602383E3444D2DD49972A03DBABEB26F331EAAD86FD
SHA-512:	29355D54CD4FD0835705FFA0C8B9B3C1AD5CAAD9FEB630D4E2704DA98FEE5FC33FF0095A30DBC7112A052DA16C396FE35EBBB6F5EB9DBFAEBA35DCB9C8D5EE5D
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/SkcnoY_VoqWsdNnku3ClBCPmc7RbouAiM5gfiO1zQ9cpMtswb7SCIklPv2pp73nkDPNpOXvj4uGh1UEkeNO2aRd80A=s275-w275-h175
Preview:	.PNG........IHDR.............Q..U....sBIT.....O... .IDATx...k.-[v.4.sV.Z{.s.9..v?.....M..!...1I ?.d.[.p...#'H...&....eK@@B($J@H..,0v.CQdlLl...._q;.n..>.={.j.9.?.9g....v.P}...U5k..c\|....?.3?CD",..LD....+~f...'""'....B`....;......."..3Y1"..D..U..B.a..aT.O.>{.....p8.....z8....N.3.....\|..9'3........W"o?...TO.......v.."..n.K..9.2.1...c..r.9.wgfwr7....?...{..0..FD)..TD..t:....gf....D.tp....f+...1.n...EXU...0...,.....?..o......WWW).)....r......Q)VJ.........c.!.&<]J..!"..s..QDb.8....1.v..D.?..D.'.'.Vo...FDV.>ff'w...df..3.;.1Q.e].eYJ)".c.AD.\|.;O...=....9?x....p8.8...x....\|:..0..p].m....a...........;.a.n.ff..K).....ETC "............n.^V.9FD...[..'f..1."r.`.#.5CPw!b,h"....r6.:`...bf.q.R0...E.......(3..Yqg..Y..!.uM......u].%...........D.OJx..:....4sf.4..(9g..9...K.\.$_..>.3..;1.R.F...SN...pg....K....}..5...ia.K.....r.z6....+.A......j.w......@.a. ,1.!..x...9-..k..*.....v.0q..3........p.....s..j....._kw..76.y..l..].._.i7.K..&n...v."~.f..I..~$...'\L..9.)....1\|.

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://nuance-pdf-professional2.software.informer.com/ajax/th_view.php?id=3948072
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	165338
Entropy (8bit):	5.266358388281521
Encrypted:	false
SSDEEP:	1536:DCtTP16jTcd3wniMcEHy4mUqvSxr+NgOqng2yNs4LFkL75kbLWR1IPzA8M8nL/R6:FjnrHyJs4LFkL75kbjpWFJ+aefTyPWA
MD5:	CBBF956CA6CA6B151DCBC41A84FC7AD4
SHA1:	E73284B3BA80762C14D7FA7293CB4E3F2FB1CBAF
SHA-256:	C670EB76C876056985A5C9E98A129AE56F9BF159CE001762BECC65D1FBFE1E13
SHA-512:	828334E1F64853F30802F22133EE6AC89D2C8A4DF3B43B987AD1CEAAE1769709E637A727D09807EE2BBA4F7D401B4E4C024D239F228488FE676ADB8733F763ED
Malicious:	false
Reputation:	low
Preview:	"undefined"!=typeof navigator&&function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).lottie=e()}(this,(function(){"use strict";var t="",e=!1,i=-999999,s=function(){return t};function a(t){return document.createElement(t)}function r(t,e){var i,s,a=t.length;for(i=0;i<a;i+=1)for(var r in s=t[i].prototype)Object.prototype.hasOwnProperty.call(s,r)&&(e.prototype[r]=s[r])}function n(t){function e(){}return e.prototype=t,e}var h=function(){function t(t){this.audios=[],this.audioFactory=t,this._volume=1,this._isMuted=!1}return t.prototype={addAudio:function(t){this.audios.push(t)},pause:function(){var t,e=this.audios.length;for(t=0;t<e;t+=1)this.audios[t].pause()},resume:function(){var t,e=this.audios.length;for(t=0;t<e;t+=1)this.audios[t].resume()},setRate:function(t){var e,i=this.audios.length;for(e=0;e<i;e+=1)this.audios[e].setRate(t)},createAudio:function(t){

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 26 x 42, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	225
Entropy (8bit):	6.766032563517348
Encrypted:	false
SSDEEP:	6:6v/lhP/yOf7iDxYl2w8kHwU7VstdHwTdp:6v/7COf7uxjwLHw6VoROz
MD5:	ADBA15D1F83FAFFBF818C91D6E3D4A0D
SHA1:	50E8C1BBB081A737C43DC4D0B490193230DCC0CA
SHA-256:	5719CDD3ACDB2B6A5B9AE0BEE910FC88FBC0F297F83235C02865D78EEED48446
SHA-512:	260F24385839710D4AAB59C363E301F6EBAAAA7E6BF1130CF4C9DD36E2EC36BA9536786C1D34E67A3BC6FEF8BF7E43CDED6598B12377C53E4B2CFD42D525108C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............0Kc....IDATX...A.. ..a#...F....`.".....=..=.;....<`.i.#..l..d.T7.H.S......,..\..+.z ~..KCcI.5....f.......`.t.`uhl}.3v...l].HQ 6.V..I.....O2.%..^..@.......Y..U..._.e..;;}2..........IEND.B`.

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5960)
Category:	downloaded
Size (bytes):	318628
Entropy (8bit):	5.5855042126345005
Encrypted:	false
SSDEEP:	6144:Q4WDsyIJDyA0qbvIC1f7EvGgMShpmSu9R2lfyiRigs:5W2JOLqbAQQ3u9RShiR
MD5:	014249A986A22221C6EA3C1E635BDDAC
SHA1:	359C9A826423D5101E1B444F8E882EDBAD6A0677
SHA-256:	44EB37D0F12717030AF39A68EBF07243C1376CFDB0C8FB8F59B32140BDBD9ACB
SHA-512:	325553D50B000BF587533512280D7F27CEAFCF5CCF68EECCAD3B3A591BEFAC3CC176BB137EE12304A0CAEADC8D72F694AE7B682726C03DC4D52ABA6732632EF0
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-207ENHB31P
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":12,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_manualEmailEnabled":false,"vtp_cityValue":"","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneValue":"","vtp_autoPhoneEnabled":false,"vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"","vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":4},{"function":"__ccd_ga_first","priority":11,"vtp_instanceDestinationId":"G-207ENHB31P","tag_id":17},{"function":"__set_product_settings","priority":10,"vtp_instanceDestinationId":"G-207ENHB31P","vtp_foreignTldMacroResult":["macro",1],"vtp_isCh

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 170 x 170, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	36766
Entropy (8bit):	7.976787066811947
Encrypted:	false
SSDEEP:	768:ubK2hftUjS70YROWyzuJLrBYAww6r0MtyG8IXkryWQh/TvchNTcY:ubbftUjS70WOxzSS3fhNoyWQF0rTT
MD5:	3232607D67314138FE2AF6339562E1E5
SHA1:	9FFB43AACD52B272166500DAEC24FABF8722DE6A
SHA-256:	0C959754499D0800227BF7FC8A74CCA7446AED328281ACC2DAAB67D2AEC5E440
SHA-512:	362524107E2D75E83182446D27BF10A362ACCAFA47021A00E6272133256187EEDAE1A8698181506459049F1A28A471E2668C83DDE085B0B938922DF53F090200
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............=v....eIDATx..].xUW.~..7...'8. -T...&A..1 F.$............Z(....z...9....!I;....7.\.g..,_k..........I.).... ....O.....J...............d=..\|mj.....7..d~..{...jLPZ.\|...A.......1.sPAP.PqP)P.PYP9Py...1_S.\|OA.3........w[..........;`.gJ9J.l&x>..&..}..F....Qzd...............BB.<.k..]..?..7.gxD......5\|-....3........w...l~w.s-...g..w....5....).>4%Xv.G.B.J..y...*7....&.\|/ED..n..t..U...(.G...3g...e..M.m.6.c...;e.]..F.e..=..n.f.l.UV.\%s.......A..k........w....s...-d.1.....k.......5a.d..r3Uo.e...7p..(......o/......'..+d.-..v......w.>....8xP..:$...V:r..9zT....;v.\|<..............o.~.,.. .}..Z.F&O."......;JDx..!.Oz.2.J...\..v7.ZR..@..P......q1.[.x.w+.w/.?4.og../.w. ....y....M.!..v..Rp.@..`:p..:.0.hG.......'...r..)9.:}..Ag.......g...?}..^.ZN..O..c.. >"..v.......x.J.m.`.B.2t.p.aa!/\|}....R......l.n.5~h^.;....!=.5=l.............8.S.... S ......I.....r..U.~..}[..........G......y.....g.........Sy....{..!./_.../..\|.....

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	141707
Entropy (8bit):	5.447155309339483
Encrypted:	false
SSDEEP:	3072:p9rsTsEhvdEQYRMD9AIpUlNkVnkO9MKzCr0WNBzuGq:4vduaG7lsbqPKZ
MD5:	0726E80CF805638A4305FBAB3BD8F03E
SHA1:	5521C93BBF2758ACEA33D570FD47576E24C771B9
SHA-256:	78CA22A5B433862C23BC0CB5344897202FB09F27457188FEB45F8F9C8C3A443C
SHA-512:	3C17E55E35C6A4E7BB7EE6A1F1713B61A28F3BBA3211B7301AE06563B4C5FDBACD7A9F1149CB7FBF2A732EE6F67ED7550098EE1CBC37362B934E78E9CEF757BD
Malicious:	false
Reputation:	low
URL:	https://cdn.protectonow.com/ng-assets/lp/assets/index-81ed22ca.js
Preview:	var oi=Object.defineProperty;var si=(e,t,n)=>t in e?oi(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n;var j=(e,t,n)=>(si(e,typeof t!="symbol"?t+"":t,n),n);function Mh(){import.meta.url,import("_").catch(()=>1),async function*(){}().next()}(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const o of document.querySelectorAll('link[rel="modulepreload"]'))r(o);new MutationObserver(o=>{for(const s of o)if(s.type==="childList")for(const i of s.addedNodes)i.tagName==="LINK"&&i.rel==="modulepreload"&&r(i)}).observe(document,{childList:!0,subtree:!0});function n(o){const s={};return o.integrity&&(s.integrity=o.integrity),o.referrerPolicy&&(s.referrerPolicy=o.referrerPolicy),o.crossOrigin==="use-credentials"?s.credentials="include":o.crossOrigin==="anonymous"?s.credentials="omit":s.credentials="same-origin",s}function r(o){if(o.ep)return;o.ep=!0;const s=n(o);fetch(o.href,s)}})();var O=(e=>(e.Video="video",e.Image

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	883
Entropy (8bit):	5.090240181717694
Encrypted:	false
SSDEEP:	24:2d7LxzmJKIO0UI4ZfvII5MWzWXIzjIAvIk:cHxYmI6II2WSXIfIkIk
MD5:	54056124C7D1C817B0A7977D03E9813A
SHA1:	570256ED0672F9E7A6D94782C1A7612460802827
SHA-256:	5161EA81E9840D47A0EAED669420B4A3E247DE594CFB82AD189CEFAC734375A6
SHA-512:	77EB1292C611FEF1E948F123B44FAABAD77ADACE3A9CCF8245273B6B5D89F6A7886B022D4F48E130E3F56323A60814F07D823790CF6B70D4C40901C7BDD0FDA7
Malicious:	false
Reputation:	low
URL:	https://img.informer.com/images/v4/filled_stars.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="a" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 80 13"><defs><clipPath id="b"><rect width="80" height="13" style="fill:none;"/></clipPath></defs><g style="clip-path:url(#b);"><g><path d="m7.05,0l2.15,4.3,4.8.7-3.47,3.3.82,4.7-4.29-2.2-4.39,2.2.82-4.7L0,5l4.8-.7L7.05,0Z" style="fill:#f66;"/><path d="m23.55,0l2.15,4.3,4.91.7-3.58,3.3.92,4.7-4.39-2.2-4.29,2.2.82-4.7-3.47-3.3,4.8-.7,2.15-4.3Z" style="fill:#f66;"/><path d="m40.2,0l2.16,4.3,4.84.7-3.5,3.3.82,4.7-4.32-2.2-4.32,2.2.82-4.7-3.5-3.3,4.84-.7,2.16-4.3Z" style="fill:#f66;"/><path d="m56.75,0l2.15,4.3,4.8.7-3.47,3.3.82,4.7-4.29-2.2-4.39,2.2.92-4.7-3.58-3.3,4.91-.7,2.15-4.3Z" style="fill:#f66;"/><path d="m73.25,0l2.25,4.3,4.8.7-3.47,3.3.82,4.7-4.39-2.2-4.29,2.2.82-4.7-3.47-3.3,4.8-.7,2.15-4.3Z" style="fill:#f66;"/></g></g></svg>

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	34945
Entropy (8bit):	4.738116119966321
Encrypted:	false
SSDEEP:	384:3q8CVU3SENPLb46deALhkW52V7GXICrxa6IeZJy2aCzQsGNHxYMAW:dCVUpPLb4xJVKXlYK821QRHxYMAW
MD5:	7A7F5BFBD268A63515614A2B0951AA59
SHA1:	6C64E83C4E89B73511AC083AFF58BBB95238A214
SHA-256:	29F0A1AE942A083732E0DFE8F9E6DB0D9369D6BFF3C537CBAEFA00143DE065D3
SHA-512:	68B73462A11F494EA160A8A4E010460B9AC4537DBD5DCF9B230800F29E281B4EAC091502EDCC06FD02B2D84F3ED4A5DB33760E5A9E4D2344CDD544E0AC1E679F
Malicious:	false
Reputation:	low
Preview:	...<!DOCTYPE html>.<html lang="en-us">.<head>. . <link rel="shortcut icon" href="//a.disquscdn.com/1734556966/img/favicon16-32.ico" type="image/vnd.microsoft.icon">... <meta http-equiv="Content-Type" content="text/html;charset=UTF-8">. <meta http-equiv="Content-Language" content="en-us">. <meta name="keywords" content="Disqus, disqus.com, comments, blog, blogs, discussion">. <meta name="google" value="notranslate" />. <title>. .Log In \| Disqus.. </title>.. <meta name="description" content="Disqus is a global comment system that improves discussion on websites and connects conversations across the web.">.. . <script type="text/javascript" charset="utf-8">. document.domain = 'disqus.com';. if (window.context === undefined) {. var context = {};. }. context.disqusUrl = 'https://disqus.com';. context.revealUrl = 'http://hubspot.disqus.biz/reveal-by-disqus-organic';. context.disqusDomain = 'disqus.com';. context.mediaUrl = '

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3578
Entropy (8bit):	7.913143046582507
Encrypted:	false
SSDEEP:	96:WSsPW6M0OeXLUKOSLvP4+ScrKGnJdcZq50d1iCO:WSsPWreXLRXcpKdaq50d1iCO
MD5:	E9FC09AF6FBDB32452AF175D9BFECB7F
SHA1:	CB983107C44899CAF42565F1E705A5F1CDABCCDB
SHA-256:	1A49164A42698625AB28141633E3D49C662DE7A2ACEFF1027C39502133650D67
SHA-512:	5668DD32497BE95FB7050E3B52C375A7CA025C22C301F6BF89C5D61A69CF71CC6F1DC141001720CE46E6B1B2DA343947A6D9D12762AE3EAD3AB1ECD01CCDCF7B
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/nN2TcE8GMLPezErz6w5W-PB6k8tpgqYQwDK_ztbu5-RW9t4BvzG1t6GlJ6YelK4_4REzeFOihB5lhTt5VRGZd_is
Preview:	.PNG........IHDR..............>a.....pHYs.................IDATx..]{.TU...H.g....2.Dy...f..e.K.$B.=...-V..^di,o...Y"K..hEi.5..s/T....&..s..].0`IQ...;3gf.sf..;3g..o.o..............vC..@ .....P..[f\.T.#......y......S..-+\|....@.....=.e....P&.me...6.......=.pt..z...l..........=.......PF...T.@..d...........F.U~....{.......!.....86...z..........y.4.k}.eF.u..P.w...>.....Pg..}j...J2.{..Pf...s(..KR\...X..Wx......q.?.O...~C_(.V~.k..e.?.u]S..#>C......0.L...d..<.%.q.u!x.Y.+@...%.r..Z......8.33hF[o@{..._.T..Z...P.h...M.^.A..C......d...w......z...b]...@ ....'..u......y....Pf.{8..[._2..!.[.....5.i..k}.. ..^..D.x.G..c....iX.jr..;.t....H..\)...ku.e.dhw... q_\..mB.3....@2.{..?.C....y.....!....}1.{...@ .....@ .........2X..Y..._.U.V.IPe..FXK...,.g}q....X.......4.............T......(\|...Ro.x...A..}.u...J..+.4.M-;...A...WLy*...o..{:..+p.... u..}P"N_It8..Dg..R....h..5.....B....fh.........#\|...&.>..dD.!....m.1.......a.).!...[.e.a.T...../.E`...........{.f...

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1986
Entropy (8bit):	7.8853473417881865
Encrypted:	false
SSDEEP:	48:C+FNy3Ggnf2ouczhvr8R5FEP0ZORsj5Nm93e2iTFjP29Ei:C+K3tPukQFZZO05Nw3e2ujS
MD5:	0A83BAA8D5ECAD091D581A9183890BF5
SHA1:	131B7C9B6D59D36A2F685E600D47198164FDD062
SHA-256:	649EA2BEC663CB0F8F33DCDA1A4E70396B5E3699347D1D39A65BB69CF68CFA73
SHA-512:	DF0FEE75906E8E33D7740BBC5078E22999248762BC89CEBD3009CEEE8A3DFD0A9D531AA777A489C5E6E7081451425FB3B041E8AFBC330E09D2B91C757B9A2376
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......IDATh...k.]U....s_..L.v.....H15...GRE.... .....h04%..I.j\|..E?T?.....BB.....ZH.....N..yv....p^...9..J..=w.....^........(`...=..C.,\Sqb.C....9.0._.[..\.O.H..9...m..Z..X..a..)....C.q....9...NV.....s....Cry.z..3..O..2...F..#cT....x.o.i....B.Q..1.Bn.>$_..+......Rp..t.......}....w.^...1....vB...P..~/...o~.UE.Y.p...G.m.J.c...:.wi..4....D.+.t:..."Fs......1p.7F.&.p_>...;.........@..Q.O.a.... "...\.B$....3...w..$.. ,.!...c..F#......9.{._".D.K..q%}..{.D.....#{.c...m...M.>.>.....:S..S#..XV4...M.e.P<N....7u!./=.B.7..+^..Y6.;...#...D....%J.}(...p.]..........".5......9....@.H:.l.{C.4S.........N..(./R<.(....^.......PZ."x.c..e...O...]m3....}....^I.Q.\|.p/b...}....~.l.oj.Z...L.......~... .".VG.@..../....D...Uh6h<u..5X.'.x.ou...z0?...'G.....7B.I....b..H....F..-b.Z.51.w.x..._..(.Jn...o./A...83.~......p.....(....6,.E!+~.](..$k6P......m......x.../..Cr....!n.or..MO.)..?.....@.Lbm.V&..9.........^..]..j..P....T.${

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	11924
Entropy (8bit):	7.956780561744912
Encrypted:	false
SSDEEP:	192:93GfpzKfGyVP3lPh9ADcYYI2Bs0ZxkDrwPUtmF2Wxh8OgADH8EGg:9322fGyBVh9AYYYI2s0ZxUrHtmYY07g
MD5:	2489B7B052799C0F523D53AE2724D3E2
SHA1:	5A088AD33E294FE2DAB5E28E18D89B14CA0E1B4B
SHA-256:	EC84957C9B592ADDC25F99249D79E0945A39063F46F361722C7CD634A0887188
SHA-512:	09BC3A48AAD28AB8A23B46E46953F293590842C9D925E7223889B2A7BCD487C8528B8D9ADA43AF6A9CF10C1960D9E166F0D4811E862A6277C7B3906F7ADBB1C9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............>a.....gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs...H...H.F.k>..-.IDATx..kp[.y../. ...H@......e[.d..[rm)I.{.3.tw.Oz.v...o;..e..mvg.f&.S.u...Z..X.c.D+.u.h.w.".;.."......px ..)R.HJ......s..^...?....>..>..>..>..>..>..>..>..>.....N>.[....H.d...%EEE........^...Z..N...z....\|......./.v..T.........{.....`8"....-//'....d.........N.....;?22....c.......r..p....,.]...,SVV..{7,M.........>..,......n..pG..?..?'.J9KKK.e......;.;.!..$...........W]]=..nk;4...---X.V...X..gu.;&...!.F.......h..h.ZdYF..RWW.^......O.._.u..........E..N..'.5.F....t...:......:...0...d2.L&.555....../~...^xa.....N.*... .r.F..{...TEE.v>~.e...y"..>..p.x<.$I..f.V+.x.h4.....@2.....W...?\|...&....u.<.....9......o0..+^+.@...w.G.....b1..0.P.....dff.d2.^.G..3;;[..d..\|.....m..mS..W......{...v..e.. ..$..).............Y.`6.innfrr.k....d......=VRR._..t...e..-:@KK.......=o.X..\.....~!4LMu10..........`.PW.?p:}$.....

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3274), with no line terminators
Category:	downloaded
Size (bytes):	3274
Entropy (8bit):	5.390471426059042
Encrypted:	false
SSDEEP:	48:lwBrcIGsrcIGyCGnllJ1ws15Tws15QZUxzVKLCJEcouyntAu1I5nEcJyZXE1eelB:lXTMb1db1hNY/cobkcsidqg3gcIOW
MD5:	33E4EF067E8DB248F4DFB3C7F76E02B5
SHA1:	D5D5979344C1D3F41A32A180ADC849D373196B6A
SHA-256:	89E059962059032E7A140D5739E8C9C197A55D7305ABD98466C9D6D300B07A02
SHA-512:	9A1F769697EE558640C298906A933259DE20D4CD01D0D485BAEA1B7274B8F951B6D56BF5DF1E54383482970245E2CC5F71EB833EA1C89E949E6948DB56A448AE
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm.CEsjJf2wziM.L.W.O/m=qcwid/excm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin/d=1/ed=1/ct=zgms/rs=AA2YrTvDtorsWuiBHYzP5-lS7pwgoAa95g"
Preview:	.gb_P{-webkit-border-radius:50%;border-radius:50%;bottom:2px;height:18px;position:absolute;right:0;width:18px}.gb_Ja{-webkit-border-radius:50%;border-radius:50%;-webkit-box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);margin:2px}.gb_Ka{fill:#f9ab00}.gb_F .gb_Ka{fill:#fdd663}.gb_La>.gb_Ka{fill:#d93025}.gb_F .gb_La>.gb_Ka{fill:#f28b82}.gb_La>.gb_Ma{fill:white}.gb_Ma,.gb_F .gb_La>.gb_Ma{fill:#202124}.gb_Na{-webkit-clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 31.3282C19.1443 31.7653 17.5996 32 16 32C7.16344 32 0 24.8366 0 16C0 7.16344 7.16344 0 16 0Z");clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 3

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7958)
Category:	downloaded
Size (bytes):	353350
Entropy (8bit):	5.578360556296148
Encrypted:	false
SSDEEP:	6144:q4PosyIJDyA0qgvIC1f7EvGgMShTCm4p9R2lfyiRigN:zPLJOLqgAQQPkp9RShig
MD5:	D5DEF10EE4F0E6902BEDBBDD86C2E387
SHA1:	5490CF3D9B6EF18BFD6866E562F20DA5FA4B70E6
SHA-256:	7CE0D4151A949318CEFD1B1966151DD7945021324FCBD98F8BE821C3BC6C80C9
SHA-512:	343838420D5A6AD4A025D3602182839CC837A24DB51699F081DE1A393CC9A716C68576175DAB02134C2FB4F6C66C18DA28C474177D42D0C239E0D4D66D39785E
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-KHZNC1Q6K0
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":21,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":8},{"function":"__ogt_1p_data_v2","priority":21,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_l

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1382)
Category:	dropped
Size (bytes):	17945
Entropy (8bit):	5.330388445341784
Encrypted:	false
SSDEEP:	384:AbnElW+CdYyqBFy9G/JtCHAOgRImVWsc5JZB:Ll3CdnqC9ct2A1ImVWsc5h
MD5:	3B071D5606CC1CF92AE307F5BDB4E540
SHA1:	E191068CC90E5489130489A1CF173FE50BBA28B8
SHA-256:	FF3DE130872FE0FB5B770DFA2BC9F0DAF8AB320403A34A60D089436F08D24F99
SHA-512:	8A1287D7528B2B65D61D6E0A639F2CBE5658AFC3EDB5E2AF9494E8CC876AA6C8060A55D3BD4AA85A0B3B82733E64F7F7A6B4A5F2597FD99FD37136A83A6BBCAD
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var k=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ba(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",r={},u={};function w(a,b,c){if(!c\|\|a!=null){c=u[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}}.function x(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var g=d[0],f;!a&&g in r?f=r:f=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in f))break a;f=f[e]}d=d[d.length-1];c=p&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?k(r,d,{configurable:!0,writable:!0,value:b}):b!==c&&(u[d]

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	31413
Entropy (8bit):	3.7954464232680114
Encrypted:	false
SSDEEP:	768:KIS5V8vB2n12X2IR3KCa/RXaqhJTrkI9Np5FmTRR3ze9:KIhon12faCa4qAS5ATRR3g
MD5:	6825C8F71299B2E86BFA8ACFCFF1FA2C
SHA1:	6B839122C5E875740B47A9CCCFE130552FC777F3
SHA-256:	E86FA5265C2D29E8E58A2C1AE562BC95261E5FD6A4BCC5EC4628610EAC1B2F35
SHA-512:	150DEB93F095226924DAB3E85362FF79D77A2614A1C3B367CC80B89E51A036DB369C1C089558F5397608573EEDD893F60B726E8C6A99B52633CA56C97ED4499C
Malicious:	false
Reputation:	low
URL:	https://cdn.protectonow.com/btn_win_1735204076.svg+xml
Preview:	<svg width="1000" height="238" viewBox="0 0 1000 238" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0_488_94)">.<rect width="1000" height="238" rx="16" fill="#089E61"/>.<mask id="mask0_488_94" style="mask-type:luminance" maskUnits="userSpaceOnUse" x="0" y="0" width="1000" height="238">.<path d="M986 0H14C6.26801 0 0 6.26801 0 14V224C0 231.732 6.26801 238 14 238H986C993.732 238 1000 231.732 1000 224V14C1000 6.26801 993.732 0 986 0Z" fill="white"/>.</mask>.<g mask="url(#mask0_488_94)">.<path d="M118.02 122H100.833V68.9089H118.564C123.766 68.9089 128.234 69.9717 131.967 72.0975C135.7 74.2059 138.56 77.2389 140.547 81.1965C142.552 85.1369 143.554 89.8636 143.554 95.3766C143.554 100.907 142.543 105.66 140.521 109.635C138.517 113.609 135.613 116.668 131.811 118.811C128.009 120.937 123.412 122 118.02 122ZM108.843 115.001H117.579C121.623 115.001 124.985 114.24 127.663 112.719C130.342 111.181 132.347 108.961 133.678 106.057C135.008 103.136 135.674 99.5761 135.674 95.376

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 26 x 42, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	225
Entropy (8bit):	6.766032563517348
Encrypted:	false
SSDEEP:	6:6v/lhP/yOf7iDxYl2w8kHwU7VstdHwTdp:6v/7COf7uxjwLHw6VoROz
MD5:	ADBA15D1F83FAFFBF818C91D6E3D4A0D
SHA1:	50E8C1BBB081A737C43DC4D0B490193230DCC0CA
SHA-256:	5719CDD3ACDB2B6A5B9AE0BEE910FC88FBC0F297F83235C02865D78EEED48446
SHA-512:	260F24385839710D4AAB59C363E301F6EBAAAA7E6BF1130CF4C9DD36E2EC36BA9536786C1D34E67A3BC6FEF8BF7E43CDED6598B12377C53E4B2CFD42D525108C
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/images/nessie_icon_tiamat_white.png
Preview:	.PNG........IHDR.............0Kc....IDATX...A.. ..a#...F....`.".....=..=.;....<`.i.#..l..d.T7.H.S......,..\..+.z ~..KCcI.5....f.......`.t.`uhl}.3v...l].HQ 6.V..I.....O2.%..^..@.......Y..U..._.e..;;}2..........IEND.B`.

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (512)
Category:	downloaded
Size (bytes):	3415
Entropy (8bit):	5.528995534075965
Encrypted:	false
SSDEEP:	48:0pztecAAK7QTc55cB0NciWQ41IsFAJ00CGoVFct3P+jPD0VauXL/0Farcn:0p41AcQTQ5k0NxWt1DWfC7yR+jqT8Gcn
MD5:	4DEADCCEEBBD3294476D5B95BF8B9D6B
SHA1:	A3746B0CCCD8449F2E6C28D41A3B6C34B666C534
SHA-256:	D05195EE16CBBB735E950A88E44985D043A81E65BAD77F6C15056281BF195259
SHA-512:	772F3EE63C6F38DA1E9B5490B06A60D0E3CA6AC26BA01C2DA750AA07F595CEE31E8680913491EFE6ACDFBBA607D3DBD33FA898D2D7E9849D14B364959EEC9143
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-chrome-webstore/_/js/k=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.en_US.lwRYVOpsj_w.es5.O/ck=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.oit6mfZoPW0.L.B1.O/am=WGow4BY/d=1/exm=A7fCU,AWpPDd,BBI74,BVgquf,CfLNpd,DNlSjf,EFQ78c,EKHvcb,FdMhB,Fu7Bjd,HsQQib,IZT63,JNoxi,KUM7Z,L1AAkb,LBaJxb,LEikZe,LcrBLd,LvGhrf,M0x0ie,MH0hJe,MI6k7c,MT4Hub,MdUzUe,MpJwZc,NwH0H,O1Gjze,O626Fe,O6y8ed,OTA3Ae,OhgRI,P6sQOc,PIVayb,PrPYRd,QIhFr,QVysJe,QvLWAb,Qy2cOb,R6rk4,RMhBfe,RiINWe,RqjULd,RyvaUb,SdcwHb,SpsfSb,UUJqVe,Uas9Hd,UkbOSe,Ulmmrd,V3dDOb,V9amgb,VBl5Ff,XVMNvd,YA1iG,YYmHzb,Z5uLle,ZDZcre,ZvHseb,ZwDk9d,_b,_tp,aW3pY,bZ0mod,byfTOb,cephkf,db7dHd,dsBBae,duFQFc,e5qFLc,ebZ3mb,gIl2M,gychg,h4ilFc,hKSk3e,hc6Ubd,i8oNZb,kBpGk,kjKdXe,lazG7b,ld80Uc,lsjVmc,lwddkf,mI3LFb,mUxuKd,mdR7q,n73qwf,o2G9me,p3hmRc,p8L0ob,pjICDe,pw70Gc,q0xTif,qv5bsb,ri2s0b,rm99Nc,s39S4,sI9bWe,sOXFj,sQ8PT,tw4SJc,w9C4d,w9hDv,ws9Tlc,xQtZb,xUdipf,zKiH5d,zbML3c,zr1jrb/excm=_b,_tp,itemdetailview/ed=1/wt=2/ujg=1/rs=AEP720JOa-HBKdRRZPKO8sen3KFm9_9RpQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:QIhFr;lOO0Vd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;wR5FRb:YA1iG;xqZiqf:BBI74;yEQyxe:p8L0ob;yxTchf:KUM7Z;zxnPse:duFQFc/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_ChromeWebStoreConsumerFeUi=this.default_ChromeWebStoreConsumerFeUi\|\|{};(function(_){var window=this;.try{._.n("Wt6vjf");.var Nz=function(a){this.Ga=_.z(a,0,Nz.messageId)};_.F(Nz,_.D);Nz.prototype.ub=function(){return _.Pl(this,1)};Nz.prototype.Gc=function(a){_.bm(this,1,a)};Nz.messageId="f.bo";var Oz=function(){_.Xo.call(this)};_.F(Oz,_.Xo);Oz.prototype.mc=function(){this.Nz=!1;Pz(this);_.Xo.prototype.mc.call(this)};Oz.prototype.j=function(){Qz(this);if(this.eq)return Rz(this),!1;if(!this.xB)return Sz(this),!0;this.dispatchEvent("p");if(!this.Yw)return Sz(this),!0;this.Iv?(this.dispatchEvent("r"),Sz(this)):Rz(this);return!1};.var Tz=function(a){var b=new _.Bu(a.YI);a.Ox!=null&&b.j.set("authuser",a.Ox);return b},Rz=function(a){a.eq=!0;var b=Tz(a),c="rt=r&f_uid="+encodeURIComponent(String(a.Yw));_.rr(b,(0,_.yi)(a.v,a),"POST",c)};.Oz.prototype.v=function(a){a=a.target;Qz(this);if(_.xr(a)){this.uu=0;if(this.Iv)this.eq=!1,this.dispatchEvent("r");else if(this.xB)thi

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.458694969562842
Encrypted:	false
SSDEEP:	3:mSlcKcYunS6winYn:mS6SWY
MD5:	EE5535C6603826F3B2F13441FFDB4413
SHA1:	EF4A492CE7ACF2E8F8D3E33C352599DEB3DE6999
SHA-256:	F63CE39DDD46CCC59A95D6EA563F2AE1E3E634398345597F248A4E0498A774AC
SHA-512:	00CA7D38AD72D2282F22E2EA65DC9249653AB64D8B963418C70E9A5D55DCFFC33A4CA91DBCF9438B28C8E5135BAC196D3763602EAAD8BC685AC612CFA527BC9D
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgm74j70psSLQRIFDQhb2igSBQ2UVPrPEgUNeG8SGQ==?alt=proto
Preview:	ChsKBw0IW9ooGgAKBw2UVPrPGgAKBw14bxIZGgA=

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18318)
Category:	downloaded
Size (bytes):	18936
Entropy (8bit):	5.689383912539823
Encrypted:	false
SSDEEP:	384:Hdp50FuAuCZfnLYdCCwR1bxZlRKMAdNcnae9JJyZ+KO4Vx:FCZvP3bAdwaepGOg
MD5:	6F6D3B561738FD855AB800DA5B967D3D
SHA1:	653DAE597FE07100DD1863EF43DA6A2432D98959
SHA-256:	098E08750F0F34EAACF6E80FC536898768585B2F26D6516EFFF38879C3D69FEC
SHA-512:	83F0448A8661F335521279202E5F880C8D38EE73A53DEA7288F404708B3A7B75E6B4681EDE622079DFC3EA274C6131C06C96B08CD6D158E9B13D9ECCF59EB83D
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/CY4IdQ8PNOqs9ugPxTaJh2hYWy8m1lFu__OIecPWn-w.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var P=function(V,Z){if(Z=(V=null,K).trustedTypes,!Z\|\|!Z.createPolicy)return V;try{V=Z.createPolicy("bg",{createHTML:Y,createScript:Y,createScriptURL:Y})}catch(l){K.console&&K.console.error(l.message)}return V},Y=function(V){return V},K=this\|\|self;(0,eval)(function(V,Z){return(Z=P())&&V.eval(Z.createScript("1"))===1?function(l){return Z.createScript(l)}:function(l){return""+l}}(K)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var Zn=function(Z,V,l,Y,P,S,Q,I){return(S=(Y=[-49,76,71,-4,62,-20,Y,-15,65,-40],P=(I=Vp,l&7),C)[V.L](V.nS),S)[V.L]=function(W){P+=6+(Q=W,7)l,P&=7},S.concat=function(W){return((Q=(W=(W=+(W=Z%16+1,Y)[P+75&7]ZW-160ZZQ+(I()\|0)W+40QQ-2120Q+4ZZW+P-WQ-3040ZQ,Y[W]),void 0),Y)[(P+69&7)+(l&2)]=W,Y)[P+(l&2)]=76,W},S},Ku=function(Z,V,l,Y){for(;V.Y.length;){l=(V.C=null,V.Y.po

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	721
Entropy (8bit):	6.777163295363377
Encrypted:	false
SSDEEP:	12:6v/7sAIeOufV8TBeQVuXePwXAaSSwdWhsPpcl+zf80f41s2:qIfufV8TwQAOic9WhsRpzf8vP
MD5:	431EBAE5FB7E995D46DBD1BB941F0D32
SHA1:	19DEDD4B4E4D5D06C5882790E5B4EB1429FAF50A
SHA-256:	FA68A5FE0B00F530C164B07DD67B85D1CB5BA2743F2DFA93BEBC6E0C1F805E96
SHA-512:	346443D50AAFB1CC30EFF012B18A398D03F2751E6EAEC7E976B8F966F93A7C052668B56B145DF12020B60BECB754F1D3C5C256B61ABEC559C192C4D3D7C8465B
Malicious:	false
Reputation:	low
URL:	https://cdn.bidbrain.app/click_1734018555_64x64.png
Preview:	.PNG........IHDR...@...@............xPLTE..........................................................................................................................H....'tRNS...?..2.....wX:G...MD7g.d...6..k..q*.!_c>5....IDATX...v.0.E/. ..T.Ppl...X..C!.....r....H.)..D....#......_ym..yi.....Z.&..r.`..\|..&.C. 0.....mX....Og.4@.............4.yd..".."o.... ...g...f.$B5.9.I.#.".?..0A...s.{.`<e.0...k4RmX..!x.&zW3....o...p..........[......1.t.2W..'...~::.J..:dDl.....@L..&.t.#.<.K.....2:.8`...a.q...a..q....../V..C............._tHB..]m.........sj.P.]..-..+a1.:....at.4........\+l....v....:.t....4.n@.y..Z"..<...E.gHY...c(S=.F...c(+.f.Y...7.H.....8...?.'.&...;..........}..=.M.X.o.4c..&.....IEND.B`.

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	"https://hits.informer.com/log.php?id=67,70,204,8551,3957,1,8597,8691,50,46,7667,6523,6343,6385,6512,6504,9163,9561,8713,4543,291,6321,140,7241,7242,8043,6142,7117,9497,8431&urlid=&ref=&r=86110"
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	721
Entropy (8bit):	6.777163295363377
Encrypted:	false
SSDEEP:	12:6v/7sAIeOufV8TBeQVuXePwXAaSSwdWhsPpcl+zf80f41s2:qIfufV8TwQAOic9WhsRpzf8vP
MD5:	431EBAE5FB7E995D46DBD1BB941F0D32
SHA1:	19DEDD4B4E4D5D06C5882790E5B4EB1429FAF50A
SHA-256:	FA68A5FE0B00F530C164B07DD67B85D1CB5BA2743F2DFA93BEBC6E0C1F805E96
SHA-512:	346443D50AAFB1CC30EFF012B18A398D03F2751E6EAEC7E976B8F966F93A7C052668B56B145DF12020B60BECB754F1D3C5C256B61ABEC559C192C4D3D7C8465B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@............xPLTE..........................................................................................................................H....'tRNS...?..2.....wX:G...MD7g.d...6..k..q*.!_c>5....IDATX...v.0.E/. ..T.Ppl...X..C!.....r....H.)..D....#......_ym..yi.....Z.&..r.`..\|..&.C. 0.....mX....Og.4@.............4.yd..".."o.... ...g...f.$B5.9.I.#.".?..0A...s.{.`<e.0...k4RmX..!x.&zW3....o...p..........[......1.t.2W..'...~::.J..:dDl.....@L..&.t.#.<.K.....2:.8`...a.q...a..q....../V..C............._tHB..]m.........sj.P.]..-..+a1.:....at.4........\+l....v....:.t....4.n@.y..Z"..<...E.gHY...c(S=.F...c(+.f.Y...7.H.....8...?.'.&...;..........}..=.M.X.o.4c..&.....IEND.B`.

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (15321)
Category:	downloaded
Size (bytes):	15324
Entropy (8bit):	5.302097763923818
Encrypted:	false
SSDEEP:	192:60gLV8HIK3DLEMSvsA8fGBtYaIV4z3VWWKG/2B8Vn2lvB3qM:DeVKIK3DA6A8fWFMT
MD5:	50319984388054A00AE6305BB6DFE7BF
SHA1:	C219D75323E37074C86E1AB7D5907466FA302F5E
SHA-256:	127E2D55017B805C0EDBEBCF0DA6429681D94D0478BD97AD0AF307376D76D9ED
SHA-512:	F2EBA6078C520D428A861210E4B966B41FCCBF816DA320E271532265E8A7E51C7FD901D3DD6C42D72BA8B765131ED036027ECF83A00952FB229F60630E89EBFE
Malicious:	false
Reputation:	low
URL:	https://cdn.bidbrain.app/ng-assets/creative/assets/index-127e2d55.css
Preview:	@charset "UTF-8";._advertiser_1jlcv_1{position:absolute;z-index:501;width:fit-content;height:fit-content;font-size:12px;font-weight:700;background-color:transparent}._advertiserName_1jlcv_11{z-index:504;color:#b9b8b8;user-select:none;pointer-events:none}._clickable_1jlcv_18{cursor:pointer}._bottom_left_1rmpi_1{bottom:0;left:0}._top_left_1rmpi_6{top:0;left:0}._bottom_right_1rmpi_11{bottom:0;right:0}._top_right_1rmpi_16{top:0;right:0}._closeButton_5b4wb_2{position:absolute;border-radius:50%;height:20px;width:20px;background:#6f6f6f;user-select:none;display:flex;justify-content:center;align-items:center;color:#efeeee;font-family:auto}._closeStyle_5b4wb_16:before{content:".";height:20px;width:20px;font-size:16px;display:flex;align-items:flex-end;justify-content:center;transform:rotate(45deg);color:#efeeee;font-weight:400;font-style:normal;text-decoration:none;font-synthesis:none;text-rendering:optimizeLegibility;font-family:serif;line-height:18px;cursor:default}._altCloseStyleX_5b4wb_37{

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 762, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2983
Entropy (8bit):	7.890480318622121
Encrypted:	false
SSDEEP:	48:JvjybRyhJJ2xpNPtsBVc1NsRhFtdMO83behADdKKXYvOU4cB0oj0+lIzbmnPsdSg:Jvm1yd2xpNPts3eNsndx1qRdsOqoRzbB
MD5:	84166C3ED8398459DA101A6E8147571E
SHA1:	310083DB119220BDEC9370752F2C37FDA04B5804
SHA-256:	1B03FB22B6CEE918FE259DDD00FEF232957FC8EF16F5AFF359CE41B5A38BADAB
SHA-512:	D35FD61CC4F8D84E92CBD569B618B994F51DED6A51AE8F48E211DDFA86AC8810DE5535AB2FC79F1CFE98C0CA8603D31CE273091DF2734FBF55AE776F6213B09C
Malicious:	false
Reputation:	low
URL:	https://img.informer.com/images/v2/elements.png
Preview:	.PNG........IHDR...P...........!>....PLTE........................................X..0){..........4T.9Z.'T.................A8.......b...........wn....\R.......@m..i_...]...F...}y...NE...E...................n... .h....U......./N.....1.........m..Tk......y.,Fwy........g....Pq.7].w...........V}....]t.:F`Gb....g....tRNS..Vm....(.C...N....2IDATx....n.0...F...%..4P..JP.).4R..f..J..!&A.....]......0...]?n#.@...7......#p.g7.b.......1..`>..:..u...e..U..........n..........5...W....`........H..V.....@..$.aA...o.....$.@.'.,/...ok.../k...X..F.........){@>S..2...y..Z.1p._.[......t...k'`. .#..onrc..k..Q..........E..b&2..3.uE...u..D...........].7.......~...mYa7.:........x.>).A.......\.lf....Yw.(...Y..^..@f.r}....<...Iq....W#.-..{`.9..`9.A...[.J.<.....~.e5....w..k"...c..X..s..H ...R.E}M?.".@..$...m.a....j..y[t..>..D...b.KI.`....>....~.{...q...$0....u.M....@.............)`.K.a7^.i.x..WU..Su3&[p.=..L......tp...N.U.>......Sx.....gl..>...?...x...*.Pu.O.T..

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	469
Entropy (8bit):	4.889487192217403
Encrypted:	false
SSDEEP:	12:trIoqCtuCV9/K4KiwXl69on6kAHFjhllR:tcoqAuui4KiwX96kajhllR
MD5:	6974AEE9AF84143B4AC5C739F1707C95
SHA1:	B0E39311591AA75BF203BC7ABDF64FDAF7B05797
SHA-256:	E8B2FE0CAF115F14D018B7064E8F710521D4C284263A7AE2922FEEC272961DA6
SHA-512:	4788601CCA97E02AEFD465BAA0872171A47330E22761CA9BA5B7C14FE006E9C88E03F4E7A9DE4A9850EE9BFBA530ED0E437B42C13FECA604818D5C52EEF3259A
Malicious:	false
Reputation:	low
URL:	https://cdn.bidbrain.app/ext/download-icon_1697445891.svg+xml
Preview:	<svg width="19" height="21" viewBox="0 0 19 21" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M1 13.2632L1 16.9691C1 17.5307 1.22125 18.0693 1.61508 18.4665C2.0089 18.8636 2.54305 19.0867 3.1 19.0867H15.7C16.257 19.0867 16.7911 18.8636 17.1849 18.4665C17.5787 18.0693 17.8 17.5307 17.8 16.9691V13.2632M9.40117 1V13M9.40117 13L14.2012 8.41485M9.40117 13L4.60117 8.41485" stroke="white" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"/>.</svg>.

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (829), with no line terminators
Category:	downloaded
Size (bytes):	829
Entropy (8bit):	5.400334675515657
Encrypted:	false
SSDEEP:	24:4Hksyq3q5/Jz2pRNrBZJuvu8goqc0ioNhc+VV4+mI:2yq6z2bNrVENtmN+3+j
MD5:	86C3627C98C0F5D0801BAE2B78E37DF6
SHA1:	DC93D83A9242D2D621024FC1926F31F8E7BD4553
SHA-256:	44CDFB89F5C0B995B0AF8342D9F29703E6722362A622C4ABE946B43CE80A0C12
SHA-512:	EA3AAABCDE842468BEC1B50E5D412176389BCFF1C34881034A028E8DC6B9697749AD504D63A5F610F4E75A5036C17E8264302F284589868AFCCE50A2064A0377
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/aframe
Preview:	<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="PxvV0zSmr7P21dpb4AQ76g">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha / try{var clients={'sodar':'https://pagead2.googlesyndication.com/pagead/sodar?'};window.addEventListener("message",function(a){try{if(a.source===window.parent){var b=JSON.parse(a.data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("rc::a")?sessionStorage.getItem("rc::b"):"");window.document.body.appendChild(d);sessionStorage.setItem("rc::e",parseInt(sessionStorage.getItem("rc::e")\|\|0)+1);localStorage.setItem("rc::h",'1736979646660');}}}catch(b){}});window.parent.postMessage("_grecaptcha_ready", "");}catch(b){}</script></body></html>

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HhXnhiCRn:rn
MD5:	835FFE887D85727159FE340C1DDC4E39
SHA1:	7ABC702C0A222E99625A30BFF6193DD81707B43C
SHA-256:	413F49399EBB73D79E248653CB3CB0FCA401A978200CE382D6B8C8EF657DA003
SHA-512:	965872948D64E20D9A9E73A5CDFA0876F2EAF75AE65B99404D81E516F6E9DBB7584A0FD3D5757C9BE361FA91854E5AF9FBEE876A38F99354597ACC1A99B62285
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAllZnCaqz3OhhIFDYzGkEM=?alt=proto
Preview:	CgkKBw2MxpBDGgA=

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2460)
Category:	dropped
Size (bytes):	16238
Entropy (8bit):	5.493507146750787
Encrypted:	false
SSDEEP:	384:r8VFJaUWy1AfwUwTIUq+rBNpX7EqWizLBC8oJUry4pnF+qlMfKsS:r8VFJTWy14wUwTI9iNpX7pWcf4v4pFP5
MD5:	647F48269C17B304426AC60D8C5BAF44
SHA1:	6205E188CCF4A6B3674778ED97438EFE0E135A02
SHA-256:	486C11EF948B612507F68B69408CDC2F3BFE24AB2183465E57CC9387BD9AEC37
SHA-512:	580F46D641E4B3B463723F3F8A037ED625A029BD01AE7E7BC3EB5EA1257A2A513340B9531C970544097563A32CD24AF205D3C3C18CB88CAF78241EC7E9920586
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';var aa=Object.defineProperty;function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this); .function da(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}}da("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")});/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function ea(a){return a};var q,r;a:{for(var fa=["CLOSURE_FLAGS"],t=m,u=0;u<fa.length;u++)if(t=t[fa[u]],t==null){r=null;break a}r=t}var ha=r&&r[610401301];q=ha!=null?ha:!1;var y;const ia=m.navigator;y=ia?ia.userAgentData\|\|null:null;function z(a){return q?y?y.brands.some(({brand:b}

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	7
Entropy (8bit):	2.5216406363433186
Encrypted:	false
SSDEEP:	3:W:W
MD5:	741839F346D6E8126AE38EE76A96FD12
SHA1:	DE18CCFA15E841C4EFE6788A08ECCDA935650BB1
SHA-256:	87695FDAC81728B9D7F2D4A1335C2632BB5E6BA1BED21D2DFF0254FBA31C7D5B
SHA-512:	47D4C7877004896984B270BA02711E0FA26D4F86C3A2566A89D4E457A821AFF267F6631925C081ACE90FB756ED4221AF8BA288364891DA56D2D862EFE4B44225
Malicious:	false
Reputation:	low
Preview:	healthy

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 275 x 175, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	74333
Entropy (8bit):	7.9894445220335975
Encrypted:	false
SSDEEP:	1536:tCn6JSy6DBq/S4std9Ou9oTa1PgGkl6NaurXLw5LJeVlwWRoULMiSW:tFJ8eKtdgu9oe1Inl6Drk5LCZIi/
MD5:	F3E4A4B4C1A24DF21455ED9B894236BE
SHA1:	400AD0EE26852CBFB20D2C3B460868D9BBA2618C
SHA-256:	43A2E6DF047D90ED80AB14AFF35E19897BCA709556F27A145F700ADDDA32F78E
SHA-512:	78344D0FEEE8CFCAC609E08C78615834D2D160E84B8472B7458EDFBD26BBA481E467BA51441A5BB9CF37D5189A5C81EE9C2ED888DB108D2903398CDFFC1B3C89
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/0nQtqVz_nvTu--u9xv7fTgdxle_nhvLuozE_euJlo8Vz8a-9kkkMPQps-OTUd4nIGQw3vs9fE7ERcL3lI2uiq-KgsgM=s275-w275-h175
Preview:	.PNG........IHDR...............:.....sBIT....\|.d...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2.. .IDATx..y.e.U..]U.Lw.=.Z.Vk.-[.-l...`C..6.......'.$/.c.y.@.SL...G .!.`p....[.2.d.[c.[.j.t.Ng.{W.?j....Z.?.<..l}Z..s..].Z.5.9....."] B$.p.1F..!..!.....%=.D.8B...=GD..#.{R.1= .Dk....(....o.N......B............"....w:..{.>.Q.....8...K.N}..;.....o.....!.".....k...y....M.....K..B....'..I...e.%.uk..:...O...`+..0=......W......-.U..t..{c.{...RPj7.f.c.b.H..h...l,.Z...v.".! ..NOD.B ..vB.9.B.Dbl..@....u.#.y.y..:"J.!...!.@.s.k...I}I....5l$g..u....h4..M.M6.@...oD. ....y/...s..6i8..B..D...h8...V$&b..N....e..p.m.(.cZ....$.M4.....$.\|..B...[k$..N$.Etl.}.........`k..........N\f..\3....Q.........<&t>._.0Q.5.H.,.....?...\.2S.W..H..A.....S.m.#.Y30.q#.D../..`.f\f?...ZD...DQ;.@......!...E.!@l..d... R..Nt['.qN...i.!&..ez.A....b."..#.Z.->....G...... .<..qt.4..1.\.Nl...,.!..g......p....9. -)..b.....JH...

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1134
Entropy (8bit):	5.260876625495238
Encrypted:	false
SSDEEP:	24:2dHAlKLfETCWJJ0urvFLzAf5/qzKKI+vRxGBkH5vudCcMH/SuvI:cHAlOfETCWguVzAq+KII0kAdF0/Q
MD5:	DFEA3544909013228ACEFD4DEB0879C5
SHA1:	A33BCAA4711CA9870DC385F0370BDD4C5081B4BA
SHA-256:	1938A8D4BBB0CEA5D54B7624F0A9803E390F435B0B8313EE4DC607F4A69AFB17
SHA-512:	1CDE6AA57320174599B62D66C98F3552DD7FD83BAF89159134D53A408EAA890FBFB05540390022711BCFB111F18444EBB66E5E1AD35006269DFDBC8059636141
Malicious:	false
Reputation:	low
URL:	https://img.informer.com/images/v4/3stars.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 24.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="...._1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 344 53" style="enable-background:new 0 0 344 53;" xml:space="preserve">..<style type="text/css">....st0{fill:#F06666;}....st1{fill:#E3ECF1;}..</style>..<g>...<polygon class="st0" points="27.9,0 36.5,17.4 55.7,20.2 41.8,33.8 45.1,53 27.9,43.9 10.6,53 13.9,33.8 0,20.2 19.3,17.4 ."/>...<polygon class="st0" points="99.9,0 108.5,17.4 127.8,20.2 113.9,33.8 117.2,53 99.9,43.9 82.7,53 86,33.8 72.1,20.2 91.3,17.4 ....."/>...<polygon class="st0" points="172,0 180.6,17.4 199.9,20.2 185.9,33.8 189.2,53 172,43.9 154.8,53 158.1,33.8 144.1,20.2 ....163.4,17.4 ."/>...<polygon class="st1" points="244.1,0 252.7,17.4 271.9,20.2 258,33.8 261.3,53 244.1,43.9 226.8,53 230.1,33.8 216.2,20.2 ....235.5,17.4 ."/>...<polygon class="st1"

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 170 x 170, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	36766
Entropy (8bit):	7.976787066811947
Encrypted:	false
SSDEEP:	768:ubK2hftUjS70YROWyzuJLrBYAww6r0MtyG8IXkryWQh/TvchNTcY:ubbftUjS70WOxzSS3fhNoyWQF0rTT
MD5:	3232607D67314138FE2AF6339562E1E5
SHA1:	9FFB43AACD52B272166500DAEC24FABF8722DE6A
SHA-256:	0C959754499D0800227BF7FC8A74CCA7446AED328281ACC2DAAB67D2AEC5E440
SHA-512:	362524107E2D75E83182446D27BF10A362ACCAFA47021A00E6272133256187EEDAE1A8698181506459049F1A28A471E2668C83DDE085B0B938922DF53F090200
Malicious:	false
Reputation:	low
URL:	https://img.informer.com/awards/si-award-epick4.png
Preview:	.PNG........IHDR.............=v....eIDATx..].xUW.~..7...'8. -T...&A..1 F.$............Z(....z...9....!I;....7.\.g..,_k..........I.).... ....O.....J...............d=..\|mj.....7..d~..{...jLPZ.\|...A.......1.sPAP.PqP)P.PYP9Py...1_S.\|OA.3........w[..........;`.gJ9J.l&x>..&..}..F....Qzd...............BB.<.k..]..?..7.gxD......5\|-....3........w...l~w.s-...g..w....5....).>4%Xv.G.B.J..y...*7....&.\|/ED..n..t..U...(.G...3g...e..M.m.6.c...;e.]..F.e..=..n.f.l.UV.\%s.......A..k........w....s...-d.1.....k.......5a.d..r3Uo.e...7p..(......o/......'..+d.-..v......w.>....8xP..:$...V:r..9zT....;v.\|<..............o.~.,.. .}..Z.F&O."......;JDx..!.Oz.2.J...\..v7.ZR..@..P......q1.[.x.w+.w/.?4.og../.w. ....y....M.!..v..Rp.@..`:p..:.0.hG.......'...r..)9.:}..Ag.......g...?}..^.ZN..O..c.. >"..v.......x.J.m.`.B.2t.p.aa!/\|}....R......l.n.5~h^.;....!=.5=l.............8.S.... S ......I.....r..U.~..}[..........G......y.....g.........Sy....{..!./_.../..\|.....

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5081
Entropy (8bit):	5.220243056544806
Encrypted:	false
SSDEEP:	48:s0lwBPHJOg6gw9C/RwhLXHJcO6gw8aHJzkINFa+HJXzVaHJkyOHJnBTW3yllCflU:s0W0/CqAjzXBVaCmA5LDX
MD5:	6DEAE2CC3370FCEA73CDCCE8FCA27AB9
SHA1:	AD7D93A1B159C55545E7ACC366299F3DF33FB720
SHA-256:	DA70F96DAE89E501D2BD1FDB0AB19C2A560CF82E0C0D857FB098D6B913487B38
SHA-512:	1488E9CDBD60B458FF6E5DC7CE6155DB2A207D38599819B92808E2F4824BD993D38C6765AD3344E687E6E8A9EC646A218F0856C43EA70814D4351450080CC202
Malicious:	false
Reputation:	low
URL:	https://cdn.protectonow.com/ext/chrome-logo_1698059188.svg+xml
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="45" height="45"><defs><radialGradient id="radial-gradient" cx="670.02" cy="503.2" r="21.5" gradientTransform="translate(-648.5 -490.94)" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#3e2723" stop-opacity=".2"/><stop offset="1" stop-color="#3e2723" stop-opacity="0"/></radialGradient><radialGradient id="radial-gradient-2" cx="652.05" cy="-52.7" r="19.95" gradientTransform="matrix(1 0 0 -1 -65.5 -15.94)" xlink:href="#radial-gradient"/><radialGradient id="radial-gradient-3" cx="670.96" cy="513.47" r="22.47" gradientTransform="translate(-648.5 -490.94)" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#263238" stop-opacity=".2"/><stop offset="1" stop-color="#263238" stop-opacity="0"/></radialGradient><radialGradient id="radial-gradient-4" cx="79.22" cy="497.08" r="45.19" gradientTransform="translate(-72.5 -490.94)" gradientUnits="userSpaceOnUse

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4434)
Category:	downloaded
Size (bytes):	74412
Entropy (8bit):	5.584975491478061
Encrypted:	false
SSDEEP:	1536:ON+4tY0S2yvGnf4vA6s/RXHUJGokpuv+S9cOTm7IWOByK:T2yvefHfotP9ti7IyK
MD5:	604305B4C6768309AFD161FB4765ED1D
SHA1:	8BA0E9078CDD729A55C99B8C81EFB10C77B0C7A4
SHA-256:	10F2C1A783A6BCA723B2E7F96579FDED43E7CF14A032CC593E67AFCE3AE458FA
SHA-512:	9F8A6218A096397C5E379C6A31A580FD598E59EA291A283BC64AD4C2B83B60D0CEE74643DB0279AFBBC77C8FB8EEB7E9DFDBA6A02DA344806FA6AAA21FFFD3DD
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.l2ZUC8FxqV8.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9xAAkaXO7Lqf7-9uTpZLtrkpWaXQ/cb=gapi.loaded_0?le=scs
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([]);.var ca,da,ha,ma,xa,Aa,Ba;ca=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.la=ha(this);ma=function(a,b){if(b)a:{var c=_.la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&da(c,a,{configurable:!0,writable:!0,value:b})}};.ma("Symbol",function(a){if(a)return a;var b

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (786)
Category:	dropped
Size (bytes):	1672
Entropy (8bit):	5.286735414643417
Encrypted:	false
SSDEEP:	48:bFj15yMuJcZ2E9uIic2u8aYlPFs3l7Q2xtHS:Fey2EYIic2u8bl9sJu
MD5:	AB304529064B2C30C88FC41AD81913E0
SHA1:	14091E21A049D97B052DD56FF4076898F6F7D0CC
SHA-256:	88C5A7E6C9B3319F4BE9CD873D1E19766A62BE628EA9921156DD2702F1D15031
SHA-512:	6F8A7C3D2516C88E172D6AF1F88B0F32242A737BA128F95E0668D57EE004384DAFE4011A84FC543BA477A7BC82A8D47862F1F276F0C89FA0087D63E4D3B72691
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';let e=[];const f=()=>{const a=e;e=[];for(const b of a)try{b()}catch{}};function g(a=document){return a.createElement("img")};function h(a=null){return a&&a.getAttribute("data-jc")==="26"?a:document.querySelector('[data-jc="26"]')};var k=document;/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=()=>{var a=k.querySelectorAll("link[data-reload-stylesheet][as=style][rel=preload]");for(var b=0;b<a.length;b++){var c=a[b],d="link",l=document;d=String(d);l.contentType==="application/xhtml+xml"&&(d=d.toLowerCase());d=l.createElement(d);d.setAttribute("rel","stylesheet");d.setAttribute("href",c.getAttribute("href"));k.head.appendChild(d)}if(a.length>0&&!(Math.random()>.01)){a=(a=h(document.currentScript))&&a.getAttribute("data-jc-rcd")==="true"?"pagead2.googlesyndication-cn.com":"pagead2.googlesyndication.com"; .b=(b=h(document.currentScript))&&b.getAttribute("data-jc-version")\|\|"unknown";a=`https://${a}/pagead/gen_204?id=jca

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 52280, version 1.0
Category:	downloaded
Size (bytes):	52280
Entropy (8bit):	7.995413196679271
Encrypted:	true
SSDEEP:	1536:1rvqtK8DZilXxwJ8mMwAZy7phqsFLdG3B4d:xytBZits8bw4wzbFxG3B4d
MD5:	F61F0D4D0F968D5BBA39A84C76277E1A
SHA1:	AA3693EA140ECA418B4B2A30F6A68F6F43B4BEB2
SHA-256:	57147F08949ABABE7DEEF611435AE418475A693E3823769A25C2A39B6EAD9CCC
SHA-512:	6C3BD90F709BCF9151C9ED9FFEA55C4F6883E7FDA2A4E26BF018C83FE1CFBE4F4AA0DB080D6D024070D53B2257472C399C8AC44EEFD38B9445640EFA85D5C487
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v58/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCI.woff2
Preview:	wOF2.......8.....................................^...$..4?HVAR..?MVAR9.`?STAT.',..J/.......`..(..Z.0..R.6.$.... .....K..[..q..c..T.....>.P.j.`.w..#...%......N.".....$..3.0.6......... .L.rX/r[j.y.\|(.4.%#.....2.v.m..-..%.....;-.Y.{..&..O=#l@...k..7g..ZI...#.Z./+T..r7...M..3).Z%.x....s..sL..[A!.51w'/.8V..2Z..%.X.h.o.).]..9..Q`.$.....7..kZ.~O........d..g.n.d.Rw+&....Cz..uy#..fz,(.J....v.%..`..9.....h...?O..:...c%.....6s....xl..#...5..._......1.>.)"U.4 W....?%......6//!$...!.n9C@n...........!""^.....W..Z<.7.x.."UT.T....E.."R>.R..t.....H d..e_.K../.+8.Q.P.ZQ....;...U....]......._.e......71.?.7.ORv.?...l...G\|.P...\|:...I.X..2.,.L........d.g.]}W#uW]QnuP-s.;.-Y.....].......C..j_.M0...y.......J..........NY..@A...,....-.F......'..w./j5g.vUS...U..0.&...y7.LP.....%.....Y......Y..D. e.A..G.?.$.......6...eaK.n5.m...N...,...+BCl..L> .E9~.b[.w.x....6<...}.e...%V....O.......*.?...a..#[eE.4..p..$...].....%......o._......N.._~..El....b..A.0.r8.....\|..D.d..

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	899
Entropy (8bit):	4.7862829113216145
Encrypted:	false
SSDEEP:	12:TMHdNF7Qom1+1zQLVnj1pGtDv1zQLVLjXapGtD51zQLVLjXapGtD01zQLVLjXapi:2dDpmE5Yo55sqo75sqoC5sqo35sqoc
MD5:	210A5D33378FB11FBA37145FDFB0DE54
SHA1:	002F427BE7CADA01F7ABC470637590AA389550DB
SHA-256:	322E49726D45EC3A01D5848DF2082FBE6AE496DE9290F27E8334AAC285CDFB3C
SHA-512:	56A886D65F7EBA2000A5B199E21645069EBABA51769B31626A473B25DFC26694124B9C3D96A54B87B82600529F396E636B76D2CD6EB7D24ABC900D5D8EF36A57
Malicious:	false
Reputation:	low
URL:	https://img.informer.com/images/v4/fill_stars.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="a" xmlns="http://www.w3.org/2000/svg" width="121" height="20" viewBox="0 0 121 20">. <path d="m10.58,0l3.22,6.62,7.2,1.08-5.21,5.08,1.23,7.23-6.44-3.38-6.59,3.38,1.23-7.23L0,7.69l7.2-1.08L10.58,0Z". style="fill:#f66;"/>. <path d="m35.58,0l3.22,6.62,7.2,1.08-5.21,5.08,1.23,7.23-6.44-3.38-6.59,3.38,1.23-7.23-5.21-5.08,7.2-1.08,3.37-6.62Z". style="fill:#f66;"/>. <path d="m60.58,0l3.22,6.62,7.2,1.08-5.21,5.08,1.23,7.23-6.44-3.38-6.59,3.38,1.23-7.23-5.21-5.08,7.2-1.08,3.37-6.62Z". style="fill:#f66;"/>. <path d="m85.58,0l3.22,6.62,7.2,1.08-5.21,5.08,1.23,7.23-6.44-3.38-6.59,3.38,1.23-7.23-5.21-5.08,7.2-1.08,3.37-6.62Z". style="fill:#f66;"/>. <path d="m110.58,0l3.22,6.62,7.2,1.08-5.21,5.08,1.23,7.23-6.44-3.38-6.59,3.38,1.23-7.23-5.21-5.08,7.2-1.08,3.37-6.62Z". style="fill:#f66;"/>.</svg>

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://software.informer.com/ajax/log_hit4.php?r=20025
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjssRwWAXUQDsowDI69xi343ADWrO9dmV63sX3c0ZhVnTFKu5dwuv_Ng7o-BNcFccnvth1nxUr44of5P5_EYobslfF6X22HFA1-AQNyBFsDBJbnY-ue1XoLEulWkjv_jn7-PGiilQQa0&sig=Cg0ArKJSzAjkSxagZP5oEAE&id=lidar2&mcvt=1000&p=0,0,90,1200&tm=2792.1999999999825&tu=1792.5&mtos=1000,1000,1000,1000,1000&tos=1000,0,0,0,0&v=20241204&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=20&adk=4056614258&rs=2&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=3291243900&rst=1736979636500&rpt=4969&met=mue&wmsd=0&pbe=0&fle=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 762, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2983
Entropy (8bit):	7.890480318622121
Encrypted:	false
SSDEEP:	48:JvjybRyhJJ2xpNPtsBVc1NsRhFtdMO83behADdKKXYvOU4cB0oj0+lIzbmnPsdSg:Jvm1yd2xpNPts3eNsndx1qRdsOqoRzbB
MD5:	84166C3ED8398459DA101A6E8147571E
SHA1:	310083DB119220BDEC9370752F2C37FDA04B5804
SHA-256:	1B03FB22B6CEE918FE259DDD00FEF232957FC8EF16F5AFF359CE41B5A38BADAB
SHA-512:	D35FD61CC4F8D84E92CBD569B618B994F51DED6A51AE8F48E211DDFA86AC8810DE5535AB2FC79F1CFE98C0CA8603D31CE273091DF2734FBF55AE776F6213B09C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P...........!>....PLTE........................................X..0){..........4T.9Z.'T.................A8.......b...........wn....\R.......@m..i_...]...F...}y...NE...E...................n... .h....U......./N.....1.........m..Tk......y.,Fwy........g....Pq.7].w...........V}....]t.:F`Gb....g....tRNS..Vm....(.C...N....2IDATx....n.0...F...%..4P..JP.).4R..f..J..!&A.....]......0...]?n#.@...7......#p.g7.b.......1..`>..:..u...e..U..........n..........5...W....`........H..V.....@..$.aA...o.....$.@.'.,/...ok.../k...X..F.........){@>S..2...y..Z.1p._.[......t...k'`. .#..onrc..k..Q..........E..b&2..3.uE...u..D...........].7.......~...mYa7.:........x.>).A.......\.lf....Yw.(...Y..^..@f.r}....<...Iq....W#.-..{`.9..`9.A...[.J.<.....~.e5....w..k"...c..X..s..H ...R.E}M?.".@..$...m.a....j..y[t..>..D...b.KI.`....>....~.{...q...$0....u.M....@.............)`.K.a7^.i.x..WU..Su3&[p.=..L......tp...N.U.>......Sx.....gl..>...?...x...*.Pu.O.T..

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (654)
Category:	downloaded
Size (bytes):	560258
Entropy (8bit):	5.668859512958225
Encrypted:	false
SSDEEP:	6144:QStgGd8JmYx0sb6h8YfALjbBksK8ecdy7FdzZA96fcJ2fL2iJ5B7lXaqy2:Gn8hALjbispecknzXfIKhX7
MD5:	19DDAC3BE88EDA2C8263C5D52FA7F6BD
SHA1:	C81720778F57C56244C72CE6EF402BB4DE5F9619
SHA-256:	B261530F05E272E18B5B5C86D860C4979C82B5B6C538E1643B3C94FC9BA76DD6
SHA-512:	393015B8C7F14D5D4BDB9CCEED7CD1477A7DB07BC7C40BAE7D0A48A2ADFA7D56F9D1C3E4EC05C92FDE152E72FFA6B75D8BF724E1F63F9BC21421125667AFB05C
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var X=function(){return[function(N,a,U,y,A,l,z){if((l=["toString",6,"constructor"],N&71)==N)if(typeof U==="string")z={buffer:Z[11](17,1,a,U),qH:!1};else if(Array.isArray(U))z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===Uint8Array)z={buffer:U,qH:!1};else if(U[l[2]]===ArrayBuffer)z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===WC)z={buffer:r[9](25,a,null,U)\|\|new Uint8Array(0),qH:!0};else if(U instanceof Uint8Array)z={buffer:new Uint8Array(U.buffer,U.byteOffset,U.byteLength),qH:!1};else throw Error("Type not convertible to a Uint8Array, expected a Uint8Array, an ArrayBuffer, a base64 encoded string, a Byt

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3715)
Category:	dropped
Size (bytes):	160391
Entropy (8bit):	5.600239451485163
Encrypted:	false
SSDEEP:	3072:Tk0bf5b2I4hdT6ZuXeWAFe7v7lttnDXrOcDpgF7lX9rQhdJ/yPouj0/dtRHAtQK:Tk0bf5b2/hdT6ZuXXAg7vZXDXrOYpgFD
MD5:	54444AC7341AF2AD3613529E384C6425
SHA1:	A59792CCE94ABEF29E1824023615AF32E72A0CF9
SHA-256:	8ED518738E5D6F166AB8812B1C220E6FB2A51031BCD1CEA3A09F13397CF95362
SHA-512:	9FB25F19BDD689D761A489317975B3C10A7D2D28D4C1293244C70E59DF120CC263EF6BFC97B55E4E6376EEF0C31992862E6C301E23D8AA7BBDA8F64E95E3EBCD
Malicious:	false
Reputation:	low
Preview:	(function(sttc){'use strict';var aa,ba=Object.defineProperty;function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",fa={},ha={};function ia(a,b,c){if(!c\|\|a!=null){c=ha[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ja(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in fa?f=fa:f=da;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ea&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?ba(fa,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ha[d]===void 0&&(a=Math.random()*1E9>>>0,ha[d]=ea?da.Symbol(d):"$jscp$"+a+"$"+d),ba(f,ha[d],{configurable:!0,writable:!0,value:b})))}}ja("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")},"es_nex

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2477)
Category:	dropped
Size (bytes):	232014
Entropy (8bit):	5.54489448566524
Encrypted:	false
SSDEEP:	6144:ehew6xJ5u2A415QyqVho8HMTm8uuCeV3h5AOx:eLvA5QyqccyhuuCeJ1x
MD5:	65D82463AE64D4D9A569DCB7AC8313A7
SHA1:	48A453D5023610362F7B5309D88A437ED5BA9373
SHA-256:	D708C7283AB45ED7F7281CB46A66339BCA3C2E2BAF2FED95087560C89EB04C17
SHA-512:	9832967BAE7F6330B343016D04954954FA5B1D1A0058DF13606C764CF27EE7780D2471DF4880772FE489D3FD1B06CF13E6131E0F36C592D25DDA195899CF526D
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_gsi=this.default_gsi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x17122000, 0x632, ]);.var aa,ba,ca,da,t,ea,ha,na,oa;aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};da=ca(this);t=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writab

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1382)
Category:	downloaded
Size (bytes):	17945
Entropy (8bit):	5.330388445341784
Encrypted:	false
SSDEEP:	384:AbnElW+CdYyqBFy9G/JtCHAOgRImVWsc5JZB:Ll3CdnqC9ct2A1ImVWsc5h
MD5:	3B071D5606CC1CF92AE307F5BDB4E540
SHA1:	E191068CC90E5489130489A1CF173FE50BBA28B8
SHA-256:	FF3DE130872FE0FB5B770DFA2BC9F0DAF8AB320403A34A60D089436F08D24F99
SHA-512:	8A1287D7528B2B65D61D6E0A639F2CBE5658AFC3EDB5E2AF9494E8CC876AA6C8060A55D3BD4AA85A0B3B82733E64F7F7A6B4A5F2597FD99FD37136A83A6BBCAD
Malicious:	false
Reputation:	low
URL:	https://ep2.adtrafficquality.google/sodar/sodar2.js
Preview:	(function(){'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var k=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ba(this),p=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",r={},u={};function w(a,b,c){if(!c\|\|a!=null){c=u[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}}.function x(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var g=d[0],f;!a&&g in r?f=r:f=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in f))break a;f=f[e]}d=d[d.length-1];c=p&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?k(r,d,{configurable:!0,writable:!0,value:b}):b!==c&&(u[d]

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	102
Entropy (8bit):	4.8035671313969885
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKFcM6Qaxp3T2TjWaee:PLKdXNQKFtaxZT2TjL
MD5:	C206147C7CAE99642A4F8A2C640A0019
SHA1:	8C32B7B7E0807BBE85E5C8C94F87AFEA31EEDC40
SHA-256:	6F55ADBECCE78B9C566F8DC830177DC91782702FF35F213F009FC2B902E25603
SHA-512:	0D94AA53B801AC69A9BB4A7DF4FC0E00B6FFD1C5668A6FEE4EFC11986B7F516EB27A8A0197C0106A4295ACD5F63C222EA2F1BD9431BF2D689672AC91C5528EB6
Malicious:	false
Reputation:	low
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js');

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	71003
Entropy (8bit):	3.944709134639949
Encrypted:	false
SSDEEP:	1536:fyJzKdxerk+5SczodW0Jlg2d6G88F5/NEOe:kk15S
MD5:	FD363CB3479032144561992C79F9047B
SHA1:	E55293674CC7CD1B8CB2EC1FBC4EBDB04E6A83AB
SHA-256:	B1194E97C1F8D350CF8458012DFF4E1975B08A5B8C17F2C90A658E9349123522
SHA-512:	3C1A7155944EA4A6F548A63A7AA7643EE8243B96E22C1A7D283B20D86539D2364B5E83DF82F8FF5543D1BD1D29F33C4375FF007FD1E927B7FBCAED90DE1B1F45
Malicious:	false
Reputation:	low
Preview:	<svg width="231" height="119" viewBox="0 0 231 119" fill="none" xmlns="http://www.w3.org/2000/svg">.<g filter="url(#filter0_d_108_52)">.<path d="M217 3H13C10.79 3 9 4.79 9 7V21L4 26L9 31V104C9 106.21 10.79 108 13 108H217C219.21 108 221 106.21 221 104V7C221 4.79 219.21 3 217 3Z" fill="white"/>.<path d="M9.35347 21.3536L9.49992 21.2071V21V7C9.49992 5.06614 11.066 3.5 12.9999 3.5H217C218.934 3.5 220.5 5.06614 220.5 7V104C220.5 105.934 218.934 107.5 217 107.5H12.9999C11.066 107.5 9.49992 105.934 9.49992 104V31V30.7929L9.35347 30.6464L4.70703 26L9.35347 21.3536Z" stroke="#D3D3D3"/>.</g>.<path d="M32.9062 19.2227H34.3711C34.3242 19.7812 34.168 20.2793 33.9023 20.7168C33.6367 21.1504 33.2637 21.4922 32.7832 21.7422C32.3027 21.9922 31.7188 22.1172 31.0312 22.1172C30.5039 22.1172 30.0293 22.0234 29.6074 21.8359C29.1855 21.6445 28.8242 21.375 28.5234 21.0273C28.2227 20.6758 27.9922 20.252 27.832 19.7559C27.6758 19.2598 27.5977 18.7051 27.5977 18.0918V17.3828C27.5977 16.7695 27.6777 16.2148 27.83

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (14850)
Category:	dropped
Size (bytes):	190191
Entropy (8bit):	5.322634020055499
Encrypted:	false
SSDEEP:	1536:sDl71wFFxUlsz07a110XQvjv8pYuT66TF9+Fr2ySg110XQvjv8pYuT66TF9+Fr2w:sDs+yoM17h17gRnPXO99
MD5:	606B63633BB79CC433E060BACFCCDBD0
SHA1:	9F5065C608B266474AC74D1BAF3B03631361CF24
SHA-256:	4CDAD20CD3224F3161D2582BB3C60DD500804EDF274D41EE14B1B7AAF9CA2517
SHA-512:	8A46BBF63F7BE97039E812A6EEBF6D265093844A3DBECFA767387CF57B77B9A0BB2490798656E8A5EE8DF5B76EBBAFB34D325BAD88F3474A13A9DE1159962843
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html class='v2 detail-page' dir='ltr' itemscope='' itemtype='http://schema.org/Blog' lang='en' xmlns='http://www.w3.org/1999/xhtml' xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data' xmlns:expr='http://www.google.com/2005/gml/expr'>.<head>.<link href='https://www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css' rel='stylesheet' type='text/css'/>.<title>.Google Workspace Updates: New community features for Google Chat and an update on Currents .</title>.<meta content='width=device-width, height=device-height, minimum-scale=1.0, initial-scale=1.0, user-scalable=0' name='viewport'/>.<meta content='IE=Edge' http-equiv='X-UA-Compatible'/>.<meta content='article' property='og:type'/>.<meta content='New community features for Google Chat and an update on Currents ' property='og:title'/>.<meta content='https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiaYFhlSrNre35Mng8pmt5iePv668NArrjDt2lJq2vz2X7qhW3wnmzPejq5fi1b0Mcp

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4090)
Category:	downloaded
Size (bytes):	182480
Entropy (8bit):	5.501539205057783
Encrypted:	false
SSDEEP:	3072:8JWjJhXFUYKs0UwSEy7nC9MFkSAImQa7cQUpiLdMqsKwPfQEgek71sB4CXr5ksBe:8JWjJhOYKs0UwSEy7nCaFkSAImQ9QUMt
MD5:	C5EAB7679D9D31E9855296831B774427
SHA1:	DD72B9BFC8F146B97805E327DDB066A5FA895FB8
SHA-256:	58EE22958891361A6E38FE7703E70D88EF1978A743B4704792046E773DC6317A
SHA-512:	1277055E7FAE8E24B70AE038D7772F32B476BA17FD34C4D6F3E7390AF3173994B62B8F414AEAC2B182053DA0A9741FB503EA1D82B3E3A66067D2E267D405CC7A
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/adsense/m202501090101/reactive_library_fy2021.js
Preview:	(function(sttc){'use strict';var q,aa=Object.defineProperty;function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this),da=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",ea={},ha={};function ia(a,b,c){if(!c\|\|a!=null){c=ha[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ja(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in ea?f=ea:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=da&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(ea,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ha[d]===void 0&&(a=Math.random()*1E9>>>0,ha[d]=da?ca.Symbol(d):"$jscp$"+a+"$"+d),aa(f,ha[d],{configurable:!0,writable:!0,value:b})))}}ja("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")},"es_next

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (59172), with no line terminators
Category:	downloaded
Size (bytes):	59172
Entropy (8bit):	6.104964798843793
Encrypted:	false
SSDEEP:	768:qAHIgdMyXAXabfGCOlB7snLc+kffmHulatRxtn+X+S/542jsaJko9Brb9+ibTdry:9qglnUZtssWWZoO3m
MD5:	EF7E6BA805A17D88A16DCEC7E3CE2DC2
SHA1:	C73825E7A28C18AB3E60B2066CFD7C7DCE4BB4EC
SHA-256:	325732960B7615A9985D5AF288E5578886DA21008F3B8AE9B192C24CB032293A
SHA-512:	BB87DC55D16303D92C56314F044D84B93D3561E2D65867783DBE053030070FE31589B5C0204BC4EAD5D469E689990F48DEEC185541D44843BDEC317213F69E6B
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4821006852914359&output=html&h=280&slotname=9917528229&adk=658919145&adf=3882744954&pi=t.ma~as.9917528229&w=336&abgtt=9&fwrn=4&fwrnh=100&lmt=1736870130&rafmt=3&format=336x280&url=https%3A%2F%2Fnuance-pdf-professional2.software.informer.com%2F7.2%2F&fwr=0&fwrattr=true&rpe=1&resp_fmts=1&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736979634919&bpp=1&bdt=1620&idt=1594&shv=r20250113&mjsv=m202501090101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=1200x90&correlator=4566372036047&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=15&ady=550&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533202%2C31089683%2C95344791%2C95350245%2C95340252%2C95340254&oid=2&pvsid=3788874330487745&tmod=2006592406&uas=0&nvt=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=o%7C%7CoeE%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&fsb=1&dtd=1600
Preview:	<!doctype html><html><head><script>var jscVersion = 'r20250114';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {};</script><script data-jc="42" data-jc-version="r20250114" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb/%<1245;05!=nehu`/!361:<320!9sqrm(&2057?61<&>`dopb~"]">(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var u=this\|\|self;function aa(a){return a};var w,x;a:{for(var ba=["CLOSURE_FLAGS"],y=u,z=0;z<ba.length;z++)if(y=y[ba[z]],y==null){x=null;break a}x=y}var ca=x&&x[610401301];w=ca!=null?ca:!1;var B;const da=u.navigator;B=da?da.userAgentData\|\|null:null;function C(a){return w?B?B.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function D(a){var b;a:{if(b=u.navigator)if(b=b.userAgent)break a;b=""}retur

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	206
Entropy (8bit):	5.121546426036098
Encrypted:	false
SSDEEP:	6:tI9mc4slyhrHrERtMtMFm4UOmFrB0N6AHo+M:t44hrHrWMqNUHBu6A3M
MD5:	C37A5A3FC8C4728AE8DB39621B875035
SHA1:	BA0741296F09AA556701019E8F3DF78FB6EB15C0
SHA-256:	2BF339B4730ED9DF2865F724168BCB3578F01BB836A4D47E7AB9084F447F4857
SHA-512:	E77D1C73BED280E8CB2293C165B3721B84A41A0C6E2A6DA0E57D16837796C0BE47FF6D857032ABBA5DD5068AC4038EA129DCB5A91936EF439FAB6F42454BA88B
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="-2 -9 30 30" width="30" height="30">.. <path fill-rule="evenodd" d="M22.594 3.5L8.062 18.188l-6.656-6.625L0 13l8.063 8L24 4.937z" fill="#53a656"/>..</svg>..

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (518)
Category:	dropped
Size (bytes):	2608
Entropy (8bit):	5.319294506249258
Encrypted:	false
SSDEEP:	48:H6Pif6h6uzi46AiNqYOZuSp/XM/i/8riJKFgClVDff+ndKMskG3cn:H6PwQkqYCXQc8rKKFgCjTMs0n
MD5:	18CCF622B63BA67A156AF4178B1E7F24
SHA1:	C057B8C0FF20D8BECE6299DEDEF73C8FA4413D2D
SHA-256:	5FC209B264C022516BD63C11137D4A9B166142119F738E405C9F8DE1BF1F98C4
SHA-512:	EE5A6BBC6DB6366D6820D542F8448DE6C41C3FBAB11064BC8FAB8CE5AEA994AD4D4CA8ABDFC8EB1943C7A54D882785F19DAC8309937B7805EB50362A9A8785A6
Malicious:	false
Reputation:	low
Preview:	function getStyle(a){return window.getComputedStyle?getComputedStyle(a,""):a.currentStyle}function get_last_block_element(a){var e=a.parentElement;return e&&"none"==getStyle(e).display?get_last_block_element(e):a}function show_parent(a){a.style.setProperty("display","block","important");a.style.setProperty("visibility","visible","important");if((a=a.parentElement)&&"none"==getStyle(a).display)show_parent(a);else return!0}var bnr_shown=!1;.function eleph_bnr_shonw(){if(bnr_shown)return!0;bnr_shown=!0;var a=document.createElement("img");a.src="https://hits.informer.com/log.php?id="+bnr_hits_counter+"&r="+Math.round(1E5Math.random());a.alt="counter";a.setAttribute("width",1);a.setAttribute("height",1);document.body.appendChild(a);return!0}var adblock_added=!1;.function achange(a){if(!adblock_added&&!a){document.body.classList.add("noads");document.body.classList.add("noads-elph");adblock_added=!0;a=document.querySelectorAll("div[class='aa-']");var e=/(aa-\d+)/,f=window.innerWidth\|\|docum

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1170)
Category:	downloaded
Size (bytes):	209242
Entropy (8bit):	5.525393011767426
Encrypted:	false
SSDEEP:	6144:y2vAXZ8m7uXFb5CcdsvyvTmfi7OxDP1Bm5G:pAXiYib5Ccdky57S
MD5:	9BDB9448C7E33CA694B5E2D082BD8A23
SHA1:	A2770A13F152C2B5334A3258B6BF18F7B2480280
SHA-256:	460EB8FBF7F1CBCED6213AD285E57023898C8119401C329685E4255EF9B3F610
SHA-512:	1D6DE8738D6A2270A6721E4ED349D00A15FB37C932718625A75A9454EEA371C294B6235724F6D6713399667FE3C8F6A10C60DD00E1583CD7C06F0A9372705559
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.l2ZUC8FxqV8.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9xAAkaXO7Lqf7-9uTpZLtrkpWaXQ/cb=gapi.loaded_1"
Preview:	gapi.loaded_1(function(_){var window=this;._.Bg=(window.gapi\|\|{}).load;._.Tn=_.Be(_.Me,"rw",_.Ce());.var Un=function(a,b){(a=_.Tn[a])&&a.state<b&&(a.state=b)};var Vn=function(a){a=(a=_.Tn[a])?a.oid:void 0;if(a){var b=_.ye.getElementById(a);b&&b.parentNode.removeChild(b);delete _.Tn[a];Vn(a)}};_.Wn=function(a){a=a.container;typeof a==="string"&&(a=document.getElementById(a));return a};_.Xn=function(a){var b=a.clientWidth;return"position:absolute;top:-10000px;width:"+(b?b+"px":a.style.width\|\|"300px")+";margin:0px;border-style:none;"};._.Yn=function(a,b){var c={},d=a.xc(),e=b&&b.width,f=b&&b.height,h=b&&b.verticalAlign;h&&(c.verticalAlign=h);e\|\|(e=d.width\|\|a.width);f\|\|(f=d.height\|\|a.height);d.width=c.width=e;d.height=c.height=f;d=a.getIframeEl();e=a.getId();Un(e,2);a:{e=a.getSiteEl();c=c\|\|{};var k;if(_.Me.oa&&(k=d.id)){f=(f=_.Tn[k])?f.state:void 0;if(f===1\|\|f===4)break a;Vn(k)}(f=e.nextSibling)&&f.dataset&&f.dataset.gapistub&&(e.parentNode.removeChild(f),e.style.cssText="");f=c.width;h=c.

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1613
Entropy (8bit):	7.845156851169029
Encrypted:	false
SSDEEP:	24:8W4kh44T8WXljWPde4L+1ycDNgjemt+HLz9xpiblnni+VmYBu4I3yesmUEr4P7n:QX52ue4LSNgjXaz9xudi+v+ZTra7
MD5:	427739CD460B86F31B569E4224FD067B
SHA1:	CF5B0353D6EE61BA9931F31091FE3EC628278DC0
SHA-256:	93920E14E9FE3F8809449C06A2F74BFEA9FF2A30C17A4191B4DEC8BCDF12A218
SHA-512:	4486B6F2F5E4CB4FF8ED97B520E7AC03FF3FAE41EA2D81E5B0EE71369D95B4943FCD41D50A894BF29B72054AC41727D8095CB447E74D642AED9C982BCF1BA7D2
Malicious:	false
Reputation:	low
URL:	https://img.informer.com/icons/png/48/7048/7048274.png
Preview:	.PNG........IHDR...0...0.....W.......IDATh..Ol.U..?ofw.v.#..".......z...H@.O.$. ...&..H$...<..F.bP.'.U..P.....-$,%t..@.Jgg.y.....mi..v........?#....dyxl..wr'....G...rVx..[.8>.7==.I. 1.Z(....!......j....11......B ...W....j....3..P5W..6...1..0Q7.%..5..e.b...g..'..w;.`/.f.f..+..@.M%..:..uS.}.T.%.E}f....)...........T....;{...W..#.jg.p?.{.1.}...C...hc..Z>D]...W.y......Q..2..]@(.../7;w....4.D.F.L......:.u.9Qs..U<..nF.p.Q.S.l.pl..4H,{#vv..@]...xg.<v_;V....I.i 4.....M..uau~...P..cA..Bb.\..vF.....D...25.....O..:w.;..>....=e.r.Jh8....m..F....m.:.<...}...nC....Yg. ...'.b.k.....#.<.7[...Z.3x...V....(kP..D..P...,..Q..A&4...n.M.K..R....<...2/....\|.3x>..1s..>r...6m.y.."..x...r..'.!t..2s.jf-.........7Dt...N^...[...B!.9..M,..r..b...D..6.@r2b.@.y.2..b....J+oh.{.s.z...,$...u."U..g!.L.y...JP..O...Cn.yu.?.P.SR.u..}..BI-A...l...FI7.......9..!.j...W..J..;KQ?.4....j...K6.fZ..;.=..M.y..gQ5@...T..3.....J...!...W.q......r..u.......t...tv...($.b{E/..Y.....Z......oc.NV..~.]

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2526)
Category:	dropped
Size (bytes):	23270
Entropy (8bit):	5.503833775820013
Encrypted:	false
SSDEEP:	384:yio8su2naz/rbhhy/6IbtS/4ouK87eU2w6wqpPBZ5AE3VnIJq9cLcuy4nDEWyDY9:yi3sVnaz/rbhQPAAouK87eUp6JPZCE3k
MD5:	519FBC47D014ED898E08CD32411DA107
SHA1:	36ABBEC560F1031F008E2FBFA1968C7AFE63ADF6
SHA-256:	04581663A590A3B051B88AA91A71C8941E064D62839993B3F47FF8AA1B21017B
SHA-512:	AA02876DA3FBE91D74C8CD88A47BA2DF2379725A05D7B4C8C3BAB891CB808AEB29FC3BC05A8EC96CF177437ED6986F7104759E0975FC98C8BFD161CCA28AE843
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a){return a};function ba(a){m.setTimeout(()=>{throw a;},0)};var da,n;a:{for(var ea=["CLOSURE_FLAGS"],p=m,fa=0;fa<ea.length;fa++)if(p=p[ea[fa]],p==null){n=null;break a}n=p}var ha=n&&n[610401301];da=ha!=null?ha:!1;var q;const ia=m.navigator;q=ia?ia.userAgentData\|\|null:null;function ja(a){return da?q?q.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function u(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return b.indexOf(a)!=-1};function v(){return da?!!q&&q.brands.length>0:!1}function ka(){return v()?ja("Chromium"):(u("Chrome")\|\|u("CriOS"))&&!(v()?0:u("Edge"))\|\|u("Silk")};function la(a){la[" "](a);return a}la[" "]=function(){};!u("Android")\|\|ka();ka();u("Safari")&&(ka()\|\|(v()?0:u("Coast"))\|\|(v()?0:u("Opera"))\|\|(v()?0:u("Edge"))\|\|(v()?ja("Microsoft Edge"):u("Edg/"))\|\|v()&&ja("Opera"));let ma=void 0;var na=new Set;function oa(a,b=!

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	116649
Entropy (8bit):	5.1181882798318545
Encrypted:	false
SSDEEP:	1536:XFgVvOMALqtLtTv7JaCuupUzyskPPI7Emk8cc3PJcK9mTvJDsQMkxf0JRLEmsFCu:wvZ/v7Jsy8Qc3svYwo52
MD5:	97040C8753870AC16E1CBDC5C5BC5003
SHA1:	59F51DFCC46350AEDF6A863798CDF394D5136D9B
SHA-256:	94867437A469D6CA0897B8C90556E7944B5B64AE33D1E80E0F70BDF424044B73
SHA-512:	F4D4441D6A3ED0B68CE3D21E4D9965CC66F2E897DA4F606A04D6703917ACC0524C38F6C33B390F7E7D5352F81C1412ADDE80D060BFD901B10D6BC5D7E0682B87
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html class="tw-root--hover"><head><meta charset="utf-8"><title>Twitch</title><meta name="viewport" content="width=device-width,initial-scale=1"><meta property='og:site_name' content='Twitch'><meta property='og:title' content='Twitch'><meta property='og:description' content='Twitch is the world's leading video platform and community for gamers.'><meta property='og:image' content='https://static-cdn.jtvnw.net/ttv-static-metadata/twitch_logo3.jpg'><meta property='og:type' content='website'><meta property='twitter:site' content='@twitch'><link rel="icon" type="image/png" sizes="32x32" href="https://assets.twitch.tv/assets/favicon-32-e29e246c157142c94346.png" crossorigin="anonymous"><link rel="icon" type="image/png" sizes="16x16" href="https://assets.twitch.tv/assets/favicon-16-52e571ffea063af7a7f4.png" crossorigin="anonymous"><link rel="preconnect" href="https://api.twitch.tv/" crossorigin><link rel="dns-prefetch" href="https://api.twitch.tv/"><link rel="preconnect" hre

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 127484, version 0.0
Category:	downloaded
Size (bytes):	127484
Entropy (8bit):	7.989682130460322
Encrypted:	false
SSDEEP:	3072:B685G6HLbP5RaXRhshJz1R7ryEMAEAIx4d:B68YGLbP5Shs/zxM6d
MD5:	E2C2AA3F2D32159A3270D8C1D7C9D015
SHA1:	91F931E6F9396CAE583DDCF7AF7888E62A541B12
SHA-256:	C6367D91247CB8B62CA2EAB760C2F87FA4217D7887BFE9A23B49A557237AEB33
SHA-512:	795F9E610276A6037F6C2689CEA21BC1F0024872139D7B4A87FCDACF35869B2E1F26D62597C257E5D7FB8EEC9F2AA09D9682C8E094C4811E501D3ED5020E2C27
Malicious:	false
Reputation:	low
URL:	https://nuance-pdf-professional2.software.informer.com/fonts/SourceSansPro-Regular.woff
Preview:	wOFF..............X.........................BASE......J....d.\.FFTM............\|.GDEF..il...b....R.VLGPOS......e........BGSUB..j...!'..<R.T.SOS/2...$...Y...`]...cmap...D.......j....cvt ...$......."..fpgm...........s.Y.7gasp..id............glyf..........R`....head.......6...6.&..hhea.......!...$...Yhmtx...........^.,.\loca...P.......d..%.maxp....... ... ....name..A........d.x&.post..F..."r..K.p...prep.......S...V.c.........`..._.<..................?\..:...o..............x.c`d``...=....V..8...".}:..}................v....................x.c`f.e..........................,.LL,..L....P..........?..l...7.........1M.R..\|.87.....x...pV........*......!.H."....,..#..X...E....Z..`..tj.....X.......Ug.u. .....P..w.w.G..u........s.9....!3.?7....B..jd..'E`h4L..ER .)+...........UJ1<......SAO.......PW..j{.....H.h......sd..)C..pk..>./.}..`.t...m...V.{...<.. .\|.t.+..G"Q;..v..."%.c.kn.wg.........../f..e..........S^..RrP....n/...Q..E ....l..Q......l..c.!y.Y..vg...O.....W....(P.

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://img.informer.com/images/empty.gif
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (26602)
Category:	dropped
Size (bytes):	303201
Entropy (8bit):	5.439738283866097
Encrypted:	false
SSDEEP:	3072:1JCw6q6CLwgvOuaPaxA0TfvCLA5wc58Gl:jb6q6CLwgW3CxA6vmA5wG8G
MD5:	4728033DE512F358C5CB6B9586C61626
SHA1:	82CD69F1A81DEFAC8FC0162F80ADB1059A4591B8
SHA-256:	2A9A7283F3BACFA888CF9FEF75159C13D5CBF192355A12FB4A642BE5CDF9C9B6
SHA-512:	AD027847A4E4D46D9E510EF962A78626B25483AF2F70D7E92381629145B3FC2D02876D3795570703434690462C6C73ADD2FE905C40730DA29FFE9EDEB71E5B83
Malicious:	false
Reputation:	low
Preview:	<!doctype html>.<html lang="en" dir="ltr" data-is-hyperloop="true" data-is-async-local-storage="true"><head><meta charSet="utf-8"/><meta name="locale" content="en"/><meta name="google" content="notranslate"/><meta id="csrf-param-meta-tag" name="csrf-param" content="authenticity_token"/><meta id="csrf-token-meta-tag" name="csrf-token" content=""/><meta id="english-canonical-url" content=""/><meta name="twitter:widgets:csp" content="on"/><meta name="mobile-web-app-capable" content="yes"/><meta name="apple-mobile-web-app-capable" content="yes"/><meta name="application-name" content="Airbnb"/><meta name="apple-mobile-web-app-title" content="Airbnb"/><meta name="theme-color" content="#ffffff"/><meta name="msapplication-navbutton-color" content="#ffffff"/><meta name="apple-mobile-web-app-status-bar-style" content="black-translucent"/><meta name="msapplication-starturl" content="/?utm_source=homescreen"/><link rel="stylesheet" href="https://a0.muscache.com/airbnb/static/packages/web/common/fr

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.122191481864228
Encrypted:	false
SSDEEP:	3:CUnl/RPQgpllHh/:/9Q0/
MD5:	0D23D0B62908B75E89014AC3F864484E
SHA1:	640CC2607301598E4D871D618D668FAF24E2B01E
SHA-256:	546C5CF136073615AFDA5CAB173FEFF341171A26A848CF7CE09BB8BD8B07CE89
SHA-512:	6834F1548F26B94357FCC3312A3491E8C87080A84F678F990BEB2C745899A01E239964521E64A534D7D5554222F728AF966EC6EC8291BC64D2005861BCFD78EC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2477)
Category:	downloaded
Size (bytes):	232093
Entropy (8bit):	5.544861820682047
Encrypted:	false
SSDEEP:	6144:HhPw6xJ5u2A415QyqVho8HMTm8uuCeV3h5AOx:HcvA5QyqccyhuuCeJ1x
MD5:	92DFB7270876DD47636825094334C0AC
SHA1:	66C684BDB8F42272C5DC9609B680C139A5F14C05
SHA-256:	55C944F240F93B8462DED897B5046C8C53DF06167C6FD8AF1A99BA1BB57FEC36
SHA-512:	83B949F9DD1739A1D69AE963BF0B8A731CE3ABA98924AF099AF3EA2C4407674F22B873AE8A778186E9DFF397EAD6F13FA1E27466F85717E43DF3CA42F7A04AEA
Malicious:	false
Reputation:	low
URL:	https://accounts.google.com/gsi/client
Preview:	"use strict";this.default_gsi=this.default_gsi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x17122000, 0x736, ]);.var aa,ba,ca,da,t,ea,ha,na,oa;aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};da=ca(this);t=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writab

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.122191481864228
Encrypted:	false
SSDEEP:	3:CUnl/RPQgpllHh/:/9Q0/
MD5:	0D23D0B62908B75E89014AC3F864484E
SHA1:	640CC2607301598E4D871D618D668FAF24E2B01E
SHA-256:	546C5CF136073615AFDA5CAB173FEFF341171A26A848CF7CE09BB8BD8B07CE89
SHA-512:	6834F1548F26B94357FCC3312A3491E8C87080A84F678F990BEB2C745899A01E239964521E64A534D7D5554222F728AF966EC6EC8291BC64D2005861BCFD78EC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	883
Entropy (8bit):	5.090240181717694
Encrypted:	false
SSDEEP:	24:2d7LxzmJKIO0UI4ZfvII5MWzWXIzjIAvIk:cHxYmI6II2WSXIfIkIk
MD5:	54056124C7D1C817B0A7977D03E9813A
SHA1:	570256ED0672F9E7A6D94782C1A7612460802827
SHA-256:	5161EA81E9840D47A0EAED669420B4A3E247DE594CFB82AD189CEFAC734375A6
SHA-512:	77EB1292C611FEF1E948F123B44FAABAD77ADACE3A9CCF8245273B6B5D89F6A7886B022D4F48E130E3F56323A60814F07D823790CF6B70D4C40901C7BDD0FDA7
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="a" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 80 13"><defs><clipPath id="b"><rect width="80" height="13" style="fill:none;"/></clipPath></defs><g style="clip-path:url(#b);"><g><path d="m7.05,0l2.15,4.3,4.8.7-3.47,3.3.82,4.7-4.29-2.2-4.39,2.2.82-4.7L0,5l4.8-.7L7.05,0Z" style="fill:#f66;"/><path d="m23.55,0l2.15,4.3,4.91.7-3.58,3.3.92,4.7-4.39-2.2-4.29,2.2.82-4.7-3.47-3.3,4.8-.7,2.15-4.3Z" style="fill:#f66;"/><path d="m40.2,0l2.16,4.3,4.84.7-3.5,3.3.82,4.7-4.32-2.2-4.32,2.2.82-4.7-3.5-3.3,4.84-.7,2.16-4.3Z" style="fill:#f66;"/><path d="m56.75,0l2.15,4.3,4.8.7-3.47,3.3.82,4.7-4.29-2.2-4.39,2.2.92-4.7-3.58-3.3,4.91-.7,2.15-4.3Z" style="fill:#f66;"/><path d="m73.25,0l2.25,4.3,4.8.7-3.47,3.3.82,4.7-4.39-2.2-4.29,2.2.82-4.7-3.47-3.3,4.8-.7,2.15-4.3Z" style="fill:#f66;"/></g></g></svg>

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 61736, version 1.0
Category:	downloaded
Size (bytes):	61736
Entropy (8bit):	7.996579108855938
Encrypted:	true
SSDEEP:	1536:k6Fj5vgPSsqNzcvwFQsQK+CKxd+Vs6lj9BsA:zl5vAqEVXKexB6tPsA
MD5:	EDE84D96808C486E3DE74CBD8F2A2C80
SHA1:	BAE3CE34F928BE471EE489BBFE5B7425AEE8298E
SHA-256:	02F1DCC0C722E24CBA9BE4B720831A79489E766D5EDF8B77F582E0869312D86E
SHA-512:	996D7258DD45F8676916F05138E7F3141ABD7C0207AE43CA820A10211BD237C6BDAC0209967B45C4A1D27C08DBAAD2F933D16D0400B0710981804E651D4B804B
Malicious:	false
Reputation:	low
URL:	https://cdn.bidbrain.app/compressedFonts/RobotoRegular.woff2
Preview:	wOF2.......(......................................D...$..h.`..H.L..<.....`..C..F...l.6.$.... .... ..[[OG..........m.P.t../..F4....V.<m.BH7........k...o......./K&2f...... s.:....;.Bh.Q.G...4...QH..&.m.:J.......X.8:.].S[Oo..$.Y.}.........&9...:/..]..i....>..+$!.Y.&..L...T..o,3zo..:.....H...9a...k.[.9.?tR..$.......j...B..:Uo\..$.M...-op...B..6..lx.~.....p,...0.............>.%k..;Q'..GV......!..?.... <.?.-.$.<.:..j.e7.sa.e!.....&.'..R.^.Z~.N=....x....^.E.z..<.$.)%..;...K..'.B.+......{~.A.....].~.n$Vw....\d.Ce.k.).shnB"*..:...{.A.....=.^....HH.>.....W.....9..a.z.7&q....(...E>eD.\..R."~j..........y..(.M-R.vny..xRQ.V...y.O..0........._..U.<^.n...~..Gp.NW>...3.LC..`'.oR..eD.%p........&.....Ytb..x_\|e.....g.....Ds..#W:r...U..=!l.Z...f...........UQv...X..n..B.eT.)Fm`.Q..O.K..I+Y.d.8..(...>..w\.............U.}....!:.,...l.JaA!,F..?....l........i&.......e.IW~...`R@.BH..2....z.o..5b..`T.H...R...B..LJ....$...)z....6w.H.. l..y..'jr..6....c....\|]......y.O...c.f.X$E5..{s.

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3533)
Category:	downloaded
Size (bytes):	222749
Entropy (8bit):	5.453364917537705
Encrypted:	false
SSDEEP:	6144:Giwcm/IpG4DMcdc/Fa9BDrk7m7U7ozJgs:yP/I5jMI
MD5:	ADB4D93F80755314547B699C181145BD
SHA1:	87BBCFD9E29A8BBB0ED8177AEB0F930499592AB7
SHA-256:	AF6B15D8917BD5AB039B73DB5F939C17DF1ACA2ACF7D4AC9D8F44A005EDAF6D6
SHA-512:	39DD81FFB91A9340D97B77E689B06D7D45201511CDF44352F3F1406AC3FEEAF2B786ECF13F08ADD5F0725610ECC3F24B2E87D5A8518CC2818F765921A0CA626C
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.Lg=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.Lg};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4090)
Category:	dropped
Size (bytes):	182480
Entropy (8bit):	5.501539205057783
Encrypted:	false
SSDEEP:	3072:8JWjJhXFUYKs0UwSEy7nC9MFkSAImQa7cQUpiLdMqsKwPfQEgek71sB4CXr5ksBe:8JWjJhOYKs0UwSEy7nCaFkSAImQ9QUMt
MD5:	C5EAB7679D9D31E9855296831B774427
SHA1:	DD72B9BFC8F146B97805E327DDB066A5FA895FB8
SHA-256:	58EE22958891361A6E38FE7703E70D88EF1978A743B4704792046E773DC6317A
SHA-512:	1277055E7FAE8E24B70AE038D7772F32B476BA17FD34C4D6F3E7390AF3173994B62B8F414AEAC2B182053DA0A9741FB503EA1D82B3E3A66067D2E267D405CC7A
Malicious:	false
Reputation:	low
Preview:	(function(sttc){'use strict';var q,aa=Object.defineProperty;function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this),da=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",ea={},ha={};function ia(a,b,c){if(!c\|\|a!=null){c=ha[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ja(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in ea?f=ea:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=da&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(ea,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ha[d]===void 0&&(a=Math.random()*1E9>>>0,ha[d]=da?ca.Symbol(d):"$jscp$"+a+"$"+d),aa(f,ha[d],{configurable:!0,writable:!0,value:b})))}}ja("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")},"es_next

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 61336, version 1.0
Category:	downloaded
Size (bytes):	61336
Entropy (8bit):	7.997105939529831
Encrypted:	true
SSDEEP:	1536:Srlosq112iKLJGU1m1/oUofcaOhakyEovsY8o0Vap7p:H78GUkAUorkyEcsYnpd
MD5:	685FF68DFCC01DEAC95D423BAA383E9D
SHA1:	2ACD5A24B24E1414065CF9AF5D78032A85A98786
SHA-256:	1E8A804AAFD1E6822E545A3F187A2F22F66A022F9EA90C6A24B14DBF8F5299D4
SHA-512:	CED68EE8C74EFBC43FEB23CC1EECACC689EAD4C4A203BCA2EBA074A6BE07AF80617AA7ECC2E60BDA2286CB71B5F9AF7636E8D0D0D5832DECE3BB58D93435882C
Malicious:	false
Reputation:	low
URL:	https://cdn.protectonow.com/compressedFonts/RobotoLight.woff2
Preview:	wOF2.............~l...5...........................V..h.`..H.R..<.....l..1..F...l.6.$.... ..N. ..8[DE...........T5%..x...a.10u.[...?.FiX3..M...m.T........._.,.q...}......8..}.)....:.lB.6...]HH?.HIR.4$.').a.JT.{.e.J..mT...F........N...Y.A..@.I. .....sI..3..hWis./Ir]..........K.v....hn.I..A~.O.F....Y...^..h.!..z7..M.f....$.&$..L.....\|.>w.......48...JH._.U....(....C........j..n7....w..F8).... ...............4z<4.Fe..y.a.$...=............U..?S..`..K.+X...2P'....M..:.HdH)A}.::.]KI....V.w.....a(..b........P%.G..]'...3F.....[.]....~.....Dt&F.bk....^.v.._d.VV.ta....\|[...^.!.[....F.@z#Gn....,G...\|.B.....R....E...B..c0@.....9c{..[..K..(hcs....X...X `.(F....s).DG..#.........m.\|..[....N.A......2.J.......V.])[.,....U...:....m..).c../.=\|.i......8.n......{....R)pmh@j......?v...t[.b..3K"......3.K.3...O.' .cg.$6k..,./Rr.7....; K.#P.T.b........L(.A....Om.._..d]...tg..\...E.W..@G.:..t.+0....(.`.M.>m..fG....P.{.....30g....E.Q.BQ..,......X.NWV-.W.[....{....%j..\

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1724), with no line terminators
Category:	dropped
Size (bytes):	1724
Entropy (8bit):	5.729175154189824
Encrypted:	false
SSDEEP:	24:2jkm94oHPccXAAbIlAj+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtFtD1IV:iEcKKo7LmvtUjPKtX7ftD1INOLrwUnG
MD5:	3AB53F10AC3780B633BF3AAA31BA7313
SHA1:	CEEFF69F3350F4F870776F677F2E7E8C10558170
SHA-256:	9F4CE1B600F6EAA9734AD3C39989382875215D477502B01C16E8F2BCD1965066
SHA-512:	E2B3F19FFA7BB7EA229B5DEC5DA740A1D492FE3B4D98A632EF9B3BA5284617B6BEEBA770E815E4C678E1259CF0F43D1183C143794B05135892D61728567F4057
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['enterprise2fa']=cfg['enterprise2fa']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('6LfkWDYqAAAAAJvAuJELqQLg85Lg8zAp-k7w8siS');(cfg['onload']=cfg['onload']\|\|[]).push('onRecaptchaLoaded');(cfg['badge']=cfg['badge']\|\|[]).push('inline');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibG

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2246
Entropy (8bit):	7.885788754986282
Encrypted:	false
SSDEEP:	48:EYhMnUgu5emJ0wjd715c98XqiPCchGStMIHvCKJM4TLJB:z0W8+0OtLcXcCRilP
MD5:	E8412F0DF0980711CA73CBD375949375
SHA1:	64A3D8DD7FAB9FE97D746ACDC66E8EBAF1D23B81
SHA-256:	DCE4BF579B21644447F7AB1F895E9E3443040D39D1140DEED5AB66ED3C69AFBA
SHA-512:	2AAB5FD16C07F9D067B1044BC568AE91A0C10B3453209BF2EB0AC7E4B978E72EAF3F10DBC10FC4D8507D3CC1B95FA0BF7C7849B3D83E1BFD236CE427871FFC38
Malicious:	false
Reputation:	low
URL:	https://cdn.protectonow.com/ext/stticon_1735726475.png
Preview:	.PNG........IHDR...<...<.....:..r....sBIT....\|.d....}IDATh..{.T...?.sw....>..Q.sQ..5i.....@.VM.V.4.mljM........j.j.....X[.Y.5Vd....V,U..!.....{..cv.a..efX%\|...=..~...s...9s...7RJ.v]..1f....x..R../.......}..J...(.`x..o#DK.N.tH.7SC.IF...S....(}..+.P...-..X......f.._....gz..B...!....+.2..J...3..9.g......-.......P.9@.......et.G@_...Z....\|.x....a..}.......7l'\|...n.s..U..a1\|.....f.+..}w..b..\S..<...yU.........O.mU.Eyo.c9..JL.....p@,...y.I...T..[y..s...u...?..g..h^.qN...>..q..yE](}....e........6s...ON.a.V}.2....*.k.V.....;...1 ......>@......5...o.H+.[.....s@..=.BT..........;Gj`...ST.F,Y.<.r&K.~..N..JSO..J.....6..i.U?8.........`Z.a."...6........v!r.Q.......K...!.fi7...H.........}.w.{....o.>'s8T.y.cpz]Cu.a..@M.&..\|..\../}?].k-...l'\|9.#>T..........!w.....W8...-/6...........C0.vA...W.I..D..`.L.#..u..EXS..Q.n...[. .". ..D<r.`.3......X.lm....y.@.U..XdL....=..h..!.JD.Ou.I.c........)....>...Y....c...}..B{x>..v...Y`.p...r..u?>..y.8. jUN..n..

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2460)
Category:	downloaded
Size (bytes):	16238
Entropy (8bit):	5.493507146750787
Encrypted:	false
SSDEEP:	384:r8VFJaUWy1AfwUwTIUq+rBNpX7EqWizLBC8oJUry4pnF+qlMfKsS:r8VFJTWy14wUwTI9iNpX7pWcf4v4pFP5
MD5:	647F48269C17B304426AC60D8C5BAF44
SHA1:	6205E188CCF4A6B3674778ED97438EFE0E135A02
SHA-256:	486C11EF948B612507F68B69408CDC2F3BFE24AB2183465E57CC9387BD9AEC37
SHA-512:	580F46D641E4B3B463723F3F8A037ED625A029BD01AE7E7BC3EB5EA1257A2A513340B9531C970544097563A32CD24AF205D3C3C18CB88CAF78241EC7E9920586
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20250114/r20110914/elements/html/fullscreen_api_adapter_fy2021.js
Preview:	(function(){'use strict';var aa=Object.defineProperty;function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this); .function da(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}}da("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")});/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function ea(a){return a};var q,r;a:{for(var fa=["CLOSURE_FLAGS"],t=m,u=0;u<fa.length;u++)if(t=t[fa[u]],t==null){r=null;break a}r=t}var ha=r&&r[610401301];q=ha!=null?ha:!1;var y;const ia=m.navigator;y=ia?ia.userAgentData\|\|null:null;function z(a){return q?y?y.brands.some(({brand:b}

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (16144)
Category:	downloaded
Size (bytes):	16147
Entropy (8bit):	5.2978676499624875
Encrypted:	false
SSDEEP:	192:QeWQWEWPjWioBWHWWa80gLV8HIK3DLEMSvsA8fGBtYaIV4z3VWWKG/2B8Vn2lvBP:AOgENeVKIK3DA6A8fWFMT
MD5:	B0A6230851EB7FF1FFAC26EA44269ABF
SHA1:	88C509FE5B8A4B9A5341553ADEAA6EA46C5F5A05
SHA-256:	526D8EDF4AF3A91C5A26A13CF7248168C0AC13DB84D2BE81712F4D0CA1790076
SHA-512:	0B05AF52118FD0410C544739B38C1235F223868424D44D29B33551A797632705D33514A85840E2168FE77A198E0AF0FC9D2E93A5E913028FD9A30898B6A96881
Malicious:	false
Reputation:	low
URL:	https://cdn.protectonow.com/ng-assets/lp/assets/index-526d8edf.css
Preview:	@charset "UTF-8";#lp_loader_wrapper{display:flex;height:100vh;width:100vw;align-items:center;justify-content:center;position:absolute;top:0;left:0;background:white}#lp_loader_wrapper #lp_loader{display:flex;column-gap:10px}#lp_loader_wrapper #lp_loader .dot{height:30px;width:30px;border-radius:50%;background:#085f63;box-shadow:0 5px 10px rgba(0,0,0,.1);animation:animate .8s ease-in-out infinite alternate}#lp_loader_wrapper #lp_loader .dot:nth-child(1){animation-delay:-.25s}#lp_loader_wrapper #lp_loader .dot:nth-child(2){background-color:#49beb7;animation-delay:-.5s}#lp_loader_wrapper #lp_loader .dot:nth-child(3){background-color:#facf5a;animation-delay:-.75s}#lp_loader_wrapper #lp_loader .dot:nth-child(4){background-color:#ff5959;animation-delay:-1s}@keyframes animate{0%{transform:translateY(-10px)}to{transform:translateY(5px)}}._advertiser_1jlcv_1{position:absolute;z-index:501;width:fit-content;height:fit-content;font-size:12px;font-weight:700;background-color:transparent}._advertiser

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkVmvcDus_iOBIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 980 x 120, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4683
Entropy (8bit):	7.824068000027095
Encrypted:	false
SSDEEP:	96:KRXOJj+tl7T8klEh78rKFKNIuPb1y5o5sTKzQRivpuUSOe/0q:0a6tlP8klu4rKFwIuPb1yc9zMi4iuD
MD5:	8F4A524B7D6DAFE9ECB5874328FA3A88
SHA1:	A7C6CF776793D13816BC87A048C97214C5B66CCF
SHA-256:	801D7165C69A2360EB99B6FFF973B5C55C8E97624F0B956EBE4350A2ECEC274C
SHA-512:	73E5E72A3D7C71F14202EECF3D7A8DC01133542D6BA28BE8397DB90CFDA98AD9AC0C811D4C4C5FD602546C7797F0BC411E2380883E2F45AC3125EE5471E8706D
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/simgad/16107939302310558116?sqp=4sqPyQQrQikqJwhfEAEdAAC0QiABKAEwCTgDQPCTCUgAUAFYAWBfcAJ4AcUBLbKdPg&rs=AOga4qlxIYP286w243Esj7rmDNN51fkYrA
Preview:	.PNG........IHDR.......x.....$<J....kPLTE..X```.........@@@ .......h,......(3>...CMV000.............PPP......ppp.....^fn....................m..c.......m.....b6@Jx.....................y..............ksz..........oooPYb..w.{F..............w..m.....l..a..............{G.....x..x..{5@J......QYb___..........n..a.r9.r:..S..............x...........q9..{..T.................OJ....IDATx..{....c....[dHS.D..aY.e[..'.....Mv{...{..........H1R...}.K .....o..<7............................................o..E....gw>....Fn...O.>,n.....7.b..k[..Y....b.....0\|.f,...x..nQk....?4..r..9..0....\...%l.........(w.$..Z...lf.... ?\|b..2.w..zm....uA......N...H..[.g.....G...z.Z....j..O#u...e..^wg....&I...[9Z.....}.K..=....T....R/.%4.}#..MmV..(...2.}s."^...!.Yo.}r=3...t1....7d.+.s.o....B.n=W.......znn.(..vd..mG..G...rg..XR.<'H-KX..}.......X....f....R..A...;4{m....n.a.Z:.>..V.......T.kV...V..*...$..Hs.xV.....k.8Zv...n..Z..../.b..gi_...-u..I.U..0Q.

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3627
Entropy (8bit):	7.922163655046567
Encrypted:	false
SSDEEP:	96:jqZDae+Vvm3uGBb8Ay7jGu5pStEGEtLSDTMqr5YUZ:Wa7e3uGZ8lGApSuGFZYm
MD5:	ED7857CDE53A27D11087C3780D83682C
SHA1:	FE4BFD58B0ACAFD04235F14BE3A8B364B52C0091
SHA-256:	D7088968D5997B8322CB12BAB6CB29647E99F588014FF9AA34F9E84EE40530B7
SHA-512:	1A80AD16E6F99D96F9A0A2BAD855FE5F2740C6C17C5737A17F4005FA57A2206526197E335CD30CEC3AAB268EB8A7B1DD488D6F75044478F2CC6C4243CF97F54D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......IDATh..{l\..?.{.<..;6&..V.....i...$@)....v.]..../..J...-..".XmZu...+.H.b. -..E.8e......U.y...'~...9..sg.......s......L.1..z........hs.6....a.c..?..~..7..0...............b.......d..H ...l.m.#......>~..[...\0f.....{[....S..'4.^..N2..LG..Y...&.....F....45Iir...~`...D.?...7j.wIeu....,..A...P......:..1.F.......q..{.1..IB.c.<....kc...dI.2...@.c....j.P...a...F........o....~...] z.sy.e.3^e..cX..S.F..M%..\.p'.(M...l.g...>3...7v).z.sM.3...]c..T..dU.Aa.....wf.Sy.+NQ....tW..y!....K.;......5a....mA..\.........;.pzilH.zu.SE.3..91<...t.7..^....8Q(`.;..2g8......[@<..C)5...,....9{...5/...o......x>...^....v.z...Jn...x...F.s&.;5.751``...vs...p........m.)c.-..K[../.....<..A.%p]..G.z..G..h.....A..R.q.f...orl.C..\|8g.....x.w..7..../.<....L..n.&...K[x.7........W,.J..R..^p}.....Bo....\...'..-L..wO.z...:.(.>............^...CI.mh@J..2..H!...:Z...>.<.:%#..I.d.+.@%....rl,..r,.c...a[H[!..<..._^.?c#....).wH).R..,R...y`.....T*..

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1954
Entropy (8bit):	7.879702936137602
Encrypted:	false
SSDEEP:	48:TuqSI5RDOxA9UDHJUFq8HjPZaUC3/2U+85uQjMmH3xFLUSj70z:MI2AiDHJt8Hl83enG9lXx6Sj6
MD5:	CB14EDA58FA2AE54BDD521C9FAAFB318
SHA1:	0FFD19A177C18EEE0A72E2755D4DF1FF9520161B
SHA-256:	F7C77533CCA41F6DDCD7262E81A28EE266867E663EC1A4148743FD36523DD419
SHA-512:	5C7BDDB0E5EF1829060CF6D9D38DE5C6955A7346C224AC4AB07B642D5BFC4C8AD7347E40146F2574B79DF401F12A9EA718CFF61F2A50F37532FC9428EEE4CA92
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W......iIDATh..]lS.......9....``....&T'Q.@+.BSP.VjW5m.1J...&4.I.}e..z1AAY...D.E...V..Q.i..H..jBTZ..&kb...........v..._...{......<......4..`[.h.?.;._...^e#...s....w.W...3.EI..:.(ABE.....!...xV...P.....ZmEq(..y.h.P.H..&g......H...5..:.z.K.d6.{.KCE....tM4...T.....e$"....d.f4[.e..3.....X..;..:..G..0\|f.x8.......DCQ..V...V[.l...Qb...m.m...O#...-N.-N...=~...........R$...........!.fRDnGh.h..HgI..}.M....U.P......YY.E..6...hlo,...X.K.......q.p.m.$...$t...&..-[....{.K..>.%"..x.M/m..go......U....\|..p.p....H.D..>z.......eg.m...?.[......,a0..e.;.i}....\|.\|...9.!q'.\+#."..nd...1...7.y..O.....1Qv...\d.f...F~H.@q(..m/....1..}...S..M/n..H'......!..=~......QY..D$Aj&.@..V....O.:...? ..`..'w..c;...e}.l......uC.%.P..T...]..x^.^h"D.O..n4....d.f....a>....d_.!.o.l.e..g.3.kY.['.I..o.#.I....,]....(.y..8...w..\.....On....3..xQ. ..W............q...7T......t..3.{.d6.z.j.W.......m.V...}d.......G....^.....nC]%..h!.W7.*...P..Xj7+..5&

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (35759), with no line terminators
Category:	dropped
Size (bytes):	35760
Entropy (8bit):	5.315871715595222
Encrypted:	false
SSDEEP:	768:Yf4PWSV3tgDeW+QxKyPXUTh6K6P2vXo3hxmXptqF:Ywi525Q3hxQpUF
MD5:	49BD25634B21C9FE941A5A9A3FCA3136
SHA1:	504072CD7F2840EEA1D8E34104E51C691390E108
SHA-256:	A7741349E0BA2CDF0BEBCB15C772F5943ADA73FEB131BF6D752FCDAC8FE6D8C6
SHA-512:	8AE8E3A0DD43098EC145D29920533D9C6B8D1B88F51938CF21A0C8A7F556675E263AD797E93D58BA9F7AD9302117C54F4F4A9C7D238727F0476295ECC64F1D12
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html lang="en-US"><head><meta charSet="utf-8"/><style data-fullcalendar="true"></style><meta name="viewport" content="width=device-width, initial-scale=1"/><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/><meta name="service" content="web-next"/><meta name="X-Location" content=""/><meta name="X-Build-Version" content="063c6d4f0a9880d9f0ca172df43690621aff486f"/><link rel="icon" href="https://secure.meetupstatic.com/next/images/general/favicon.ico" type="image/x-icon" sizes="any"/><link rel="shortcut icon" href="https://secure.meetupstatic.com/next/images/general/favicon.ico"/><link rel="apple-touch-icon" sizes="120x120" href="https://secure.meetupstatic.com/next/images/general/m_swarm_120x120.png"/><link rel="apple-touch-icon" sizes="152x152" href="https://secure.meetupstatic.com/next/images/general/m_swarm_152x152.png"/><link rel="apple-touch-icon" sizes="167x167" href="https://secure.meetupstatic.com/next/images/general/m_swarm_167x167.png"/><link re

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1986
Entropy (8bit):	7.8853473417881865
Encrypted:	false
SSDEEP:	48:C+FNy3Ggnf2ouczhvr8R5FEP0ZORsj5Nm93e2iTFjP29Ei:C+K3tPukQFZZO05Nw3e2ujS
MD5:	0A83BAA8D5ECAD091D581A9183890BF5
SHA1:	131B7C9B6D59D36A2F685E600D47198164FDD062
SHA-256:	649EA2BEC663CB0F8F33DCDA1A4E70396B5E3699347D1D39A65BB69CF68CFA73
SHA-512:	DF0FEE75906E8E33D7740BBC5078E22999248762BC89CEBD3009CEEE8A3DFD0A9D531AA777A489C5E6E7081451425FB3B041E8AFBC330E09D2B91C757B9A2376
Malicious:	false
Reputation:	low
URL:	https://img.informer.com/icons/png/48/8509/8509758.png
Preview:	.PNG........IHDR...0...0.....W.......IDATh...k.]U....s_..L.v.....H15...GRE.... .....h04%..I.j\|..E?T?.....BB.....ZH.....N..yv....p^...9..J..=w.....^........(`...=..C.,\Sqb.C....9.0._.[..\.O.H..9...m..Z..X..a..)....C.q....9...NV.....s....Cry.z..3..O..2...F..#cT....x.o.i....B.Q..1.Bn.>$_..+......Rp..t.......}....w.^...1....vB...P..~/...o~.UE.Y.p...G.m.J.c...:.wi..4....D.+.t:..."Fs......1p.7F.&.p_>...;.........@..Q.O.a.... "...\.B$....3...w..$.. ,.!...c..F#......9.{._".D.K..q%}..{.D.....#{.c...m...M.>.>.....:S..S#..XV4...M.e.P<N....7u!./=.B.7..+^..Y6.;...#...D....%J.}(...p.]..........".5......9....@.H:.l.{C.4S.........N..(./R<.(....^.......PZ."x.c..e...O...]m3....}....^I.Q.\|.p/b...}....~.l.oj.Z...L.......~... .".VG.@..../....D...Uh6h<u..5X.'.x.ou...z0?...'G.....7B.I....b..H....F..-b.Z.51.w.x..._..(.Jn...o./A...83.~......p.....(....6,.E!+~.](..$k6P......m......x.../..Cr....!n.or..MO.)..?.....@.Lbm.V&..9.........^..]..j..P....T.${

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	47
Entropy (8bit):	4.453005074851736
Encrypted:	false
SSDEEP:	3:m8ZJV7NInL5A0IMAr:m+ElA0IMAr
MD5:	7F5F2BE159837D73B72A4B37616BCE44
SHA1:	C93D7F25B530B05C26440D3352213B683D03DCC3
SHA-256:	CCECD185AC16BA0A538840F37701053FBB861F7FBBDD86039C7415FCD924D1F2
SHA-512:	A1002883CA1DD74080546C6D34A38144B867A8E8A22E4BAD80EB1D221A86FE9EDEA81A5F12D3CA6B2BF29E686FC80CC32B06E37B83381750B6E773A62052A0A8
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/google_top_exp.js?fcd=true
Preview:	window['google_empty_script_included'] = true;.

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 275 x 175, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	57127
Entropy (8bit):	7.984444491514286
Encrypted:	false
SSDEEP:	1536:C06M9sXRX69ACJPcM0BJTqyFX5fuo07zt5:x6XBbCJmTJXn0Pb
MD5:	1157B0561E870AFA586A9063E916264D
SHA1:	D310C4FFCC038EB033A26CB9696BD42C4C7D1268
SHA-256:	A20AAE333A7D03B273EDDF0C54CB4A6AC9D1D47B4ABF7DF360FEEDCC70F69D04
SHA-512:	981E7C730935307ED56D7F491FA08ABE73BE85430A6C671BBA2E27EDBA6C11E937AF545492E6385D8D5FEBE1EA6C713772F19DFA3E09F3D6878DFEE4A8195C5B
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/kthxNShwMYLSZFOKTNPGLHvbrqlqgZ4P8nRvtOM2YvRsI_iN15aPS8-plCCn8H6jPpuWNS6yLjVcqQwJCAASb2iy=s275-w275-h175
Preview:	.PNG........IHDR.............Q..U....sBIT.....O...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2.. .IDATx....$Ir-vT..=".C.05.?@..V..'\.\|...@r...$DH...?.H...9@...t..]]y.....L...."2....`...>.....zqw7....uM.T...(.....@D..q8...SJ.....p7..j....EP..P.q.j".Rv.......O.U....=.h..jf."..o..oj...W.u].i...............x.\...w..\|<.Zj.q..a\..G).....\|.G.....<...............j....n7M....\ku.i..};..6.n,.&GZk.g3K).Rxe.UUU...#e.......`f.....).u].eI)..u.J))......r:.v......<<<.Z...8..0.;.U.\|o?."2....R.I^....+.....Z.e..^.....F>..W.qO).+..........C^..D.H$9gv/.'fFU9.1..3I....E"...R.w..{..0..s......[..........F..@c.7Ku.....-l...w....=..5....z.\.i....<M.0..{........@.m]....p.\..0..\|>M..`]WU...3.....".p....E..cy8..R,?....e..C.4\|......,. Jw/...d.4...'.. .`.`.X..=o4..D....N2...,OOO.sv;.C.&....r......q,....{..3o.C8.a..ir.y..'.aX.5..e..."8.v)ED...8.".s...}.K.@J....R4..RW...uY.q.P..y..R*.U.Vs.......[uGJ...JI ..Bv.s......./..

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	165338
Entropy (8bit):	5.266358388281521
Encrypted:	false
SSDEEP:	1536:DCtTP16jTcd3wniMcEHy4mUqvSxr+NgOqng2yNs4LFkL75kbLWR1IPzA8M8nL/R6:FjnrHyJs4LFkL75kbjpWFJ+aefTyPWA
MD5:	CBBF956CA6CA6B151DCBC41A84FC7AD4
SHA1:	E73284B3BA80762C14D7FA7293CB4E3F2FB1CBAF
SHA-256:	C670EB76C876056985A5C9E98A129AE56F9BF159CE001762BECC65D1FBFE1E13
SHA-512:	828334E1F64853F30802F22133EE6AC89D2C8A4DF3B43B987AD1CEAAE1769709E637A727D09807EE2BBA4F7D401B4E4C024D239F228488FE676ADB8733F763ED
Malicious:	false
Reputation:	low
URL:	https://cdn.protectonow.com/ng-assets/vendors/lottie_light.5.10.2.min.js
Preview:	"undefined"!=typeof navigator&&function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).lottie=e()}(this,(function(){"use strict";var t="",e=!1,i=-999999,s=function(){return t};function a(t){return document.createElement(t)}function r(t,e){var i,s,a=t.length;for(i=0;i<a;i+=1)for(var r in s=t[i].prototype)Object.prototype.hasOwnProperty.call(s,r)&&(e.prototype[r]=s[r])}function n(t){function e(){}return e.prototype=t,e}var h=function(){function t(t){this.audios=[],this.audioFactory=t,this._volume=1,this._isMuted=!1}return t.prototype={addAudio:function(t){this.audios.push(t)},pause:function(){var t,e=this.audios.length;for(t=0;t<e;t+=1)this.audios[t].pause()},resume:function(){var t,e=this.audios.length;for(t=0;t<e;t+=1)this.audios[t].resume()},setRate:function(t){var e,i=this.audios.length;for(e=0;e<i;e+=1)this.audios[e].setRate(t)},createAudio:function(t){

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (518)
Category:	downloaded
Size (bytes):	2608
Entropy (8bit):	5.319294506249258
Encrypted:	false
SSDEEP:	48:H6Pif6h6uzi46AiNqYOZuSp/XM/i/8riJKFgClVDff+ndKMskG3cn:H6PwQkqYCXQc8rKKFgCjTMs0n
MD5:	18CCF622B63BA67A156AF4178B1E7F24
SHA1:	C057B8C0FF20D8BECE6299DEDEF73C8FA4413D2D
SHA-256:	5FC209B264C022516BD63C11137D4A9B166142119F738E405C9F8DE1BF1F98C4
SHA-512:	EE5A6BBC6DB6366D6820D542F8448DE6C41C3FBAB11064BC8FAB8CE5AEA994AD4D4CA8ABDFC8EB1943C7A54D882785F19DAC8309937B7805EB50362A9A8785A6
Malicious:	false
Reputation:	low
URL:	https://i.informer.com/js/achecker3.js
Preview:	function getStyle(a){return window.getComputedStyle?getComputedStyle(a,""):a.currentStyle}function get_last_block_element(a){var e=a.parentElement;return e&&"none"==getStyle(e).display?get_last_block_element(e):a}function show_parent(a){a.style.setProperty("display","block","important");a.style.setProperty("visibility","visible","important");if((a=a.parentElement)&&"none"==getStyle(a).display)show_parent(a);else return!0}var bnr_shown=!1;.function eleph_bnr_shonw(){if(bnr_shown)return!0;bnr_shown=!0;var a=document.createElement("img");a.src="https://hits.informer.com/log.php?id="+bnr_hits_counter+"&r="+Math.round(1E5Math.random());a.alt="counter";a.setAttribute("width",1);a.setAttribute("height",1);document.body.appendChild(a);return!0}var adblock_added=!1;.function achange(a){if(!adblock_added&&!a){document.body.classList.add("noads");document.body.classList.add("noads-elph");adblock_added=!0;a=document.querySelectorAll("div[class='aa-']");var e=/(aa-\d+)/,f=window.innerWidth\|\|docum

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2479
Entropy (8bit):	4.538573334410749
Encrypted:	false
SSDEEP:	48:YLWxx3lSxKccuYYHUYdYgtjwiSxMJcuYYHWK:4WxxVojlVtBoMZv
MD5:	9F3DACB24DE7F6204C8B70593E6B4BF4
SHA1:	42103D3293AB961EE5948EF67B3334FFAB210FF2
SHA-256:	E4991F3B1E444AF1BF1B5E07ECFB38CADF2599619F5078709C139F046FC9E52D
SHA-512:	975E88629CB1D8BC46AF6A50F22B33885124BC75BF6501EF8DA06F4AA54135CD21EC86E277450EC8774F2A9CA18D736E9B8D6928E9C32C67E095A584273AEBC6
Malicious:	false
Reputation:	low
Preview:	{"v":"4.8.0","meta":{"g":"LottieFiles AE 3.4.5","a":"","k":"","d":"","tc":""},"fr":29.9700012207031,"ip":0,"op":20.0000008146167,"w":60,"h":60,"nm":"loader","ddd":0,"assets":[],"layers":[{"ddd":0,"ind":1,"ty":4,"nm":"Shape Layer 2","sr":1,"ks":{"o":{"a":0,"k":100,"ix":11},"r":{"a":0,"k":0,"ix":10},"p":{"a":0,"k":[37.273,27.523,0],"ix":2},"a":{"a":0,"k":[22.773,-9.227,0],"ix":1},"s":{"a":0,"k":[100,100,100],"ix":6}},"ao":0,"shapes":[{"ty":"gr","it":[{"d":1,"ty":"el","s":{"a":0,"k":[46,46],"ix":2},"p":{"a":0,"k":[0,0],"ix":3},"nm":"Ellipse Path 1","mn":"ADBE Vector Shape - Ellipse","hd":false},{"ty":"st","c":{"a":0,"k":[0.105882360421,0.349019607843,0.913725550034,1],"ix":3},"o":{"a":0,"k":100,"ix":4},"w":{"a":0,"k":8,"ix":5},"lc":1,"lj":1,"ml":4,"bm":0,"nm":"Stroke 1","mn":"ADBE Vector Graphic - Stroke","hd":false},{"ty":"tr","p":{"a":0,"k":[15.441,-6.056],"ix":2},"a":{"a":0,"k":[0,0],"ix":1},"s":{"a":0,"k":[100,100],"ix":3},"r":{"a":0,"k":0,"ix":6},"o":{"a":0,"k":100,"ix":7},"sk":{"a":

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2167)
Category:	dropped
Size (bytes):	38115
Entropy (8bit):	5.52762360182264
Encrypted:	false
SSDEEP:	768:8ivfxdU2EQFQJ86qp40roqmRrZVmsnPua0A+EAV18NadZo4OHQr2W7OJ4wG8yXyu:1H7U+7opmsmq0jSnIqjZw
MD5:	CE0BFB4856FD846B8947D5D1277EBA9F
SHA1:	C3E10C13DC4A8D78C25A57FEF98D1FD5895D4F4F
SHA-256:	87686C876E73DF0EFCF2213455525647D1322C23319BE16290F8BBC18F3EAAB6
SHA-512:	2CAA4747D78EC20084B57D2140247C6FB347008B0EA42303B5255C0084EE469DE4A57C7821DE288B3D293D374E868DA0AA50AC08A4DF96DD1ADA98176ECB4EDD
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var m=this\|\|self;function aa(a){return a};function p(a,b){if(!b)return a;b.indexOf("&")===0&&(b=b.substring(1));const c=/[?&]adurl=([^&])/.exec(a);return c?`${a.slice(0,c.index+1)}${b}&${a.slice(c.index+1)}`:`${a}${a.indexOf("?")===-1?"?":"&"}${b}`}function ba(a,b){switch(a){case 0:return b?"&ri=1":"";case 1:return b?"&ri=24":"&ri=27";case 2:return b?"&ri=25":"&ri=26";default:return""}} .function ca(a){a=a.o;if(!a)return"";let b="";a.platform&&(b+="&uap="+encodeURIComponent(a.platform));a.platformVersion&&(b+="&uapv="+encodeURIComponent(a.platformVersion));a.uaFullVersion&&(b+="&uafv="+encodeURIComponent(a.uaFullVersion));a.architecture&&(b+="&uaa="+encodeURIComponent(a.architecture));a.model&&(b+="&uam="+encodeURIComponent(a.model));a.bitness&&(b+="&uab="+encodeURIComponent(a.bitness));a.fullVersionList&&(b+="&uafvl="+encodeURIComponent(a.fullVersionList.map(c=>encodeURIC

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	7186
Entropy (8bit):	4.836201932278951
Encrypted:	false
SSDEEP:	96:hGYTNAmuRrdZq5uK6JTBEzjx1R3grWqFDlNRPbRBSDtowkEhB8i69C0ygtF1Dv2A:hhurjqRHRKN1z28i69C07pCf2
MD5:	8C60A5FFF44A21029782636442D249D4
SHA1:	79114A95A3695870106ECDE04A8F127EC1C3898D
SHA-256:	18851BB2CF7B00826E87DA430999706BB3813BDE4A1FDD99B34ED7CB8EBC7F20
SHA-512:	C28CECDEC6B9F9360A75A6CE2810245F094ACB8B74061937B40F12BE8C3CD6D1D8B08172CB68A3E4E89AAEFCB1D74789728B3F6C25D8D91937EAB7B6C0FA20B0
Malicious:	false
Reputation:	low
Preview:	<svg width="191" height="52" viewBox="0 0 191 52" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0)">.<path d="M33.5879 0C33.5879 0 30.8935 9.20916 26.0592 12.7817C24.078 15.084 13.2208 23.5786 9.81302 21.0382C5.53354 17.6244 9.81302 6.11298 9.49603 6.19237C8.06953 6.50992 -0.251692 15.4015 0.144557 27.6275C0.223807 31.2 1.25405 36.7573 4.26554 40.6473C7.35628 44.7756 12.4283 45.0137 13.1415 44.1405C15.519 41.2824 18.6097 37.313 23.6025 37.7893C32.6369 38.6626 32.5577 51.9206 32.5577 51.9206C34.3804 51.2855 47.0604 38.5038 44.9999 20.4031C43.8112 10.0824 39.2939 3.25496 33.5879 0Z" fill="url(#paint0_radial)"/>.<path d="M39.6107 5.39847C37.8672 3.09618 35.8067 1.27023 33.5877 0C33.5877 0 27.2477 12.0672 22.4135 15.6397C20.4322 17.942 13.696 21.7527 10.2883 19.2122C6.00879 15.7985 9.73353 6.11298 9.41653 6.19237C8.06928 6.50992 -3.42193 29.0565 16.7075 30.0886C31.9235 30.8824 44.9204 20.4031 44.9204 20.4031C44.2864 14.1313 42.3052 9.05038 39.6107 5.39847Z" fill="u

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3912
Entropy (8bit):	7.941193907298384
Encrypted:	false
SSDEEP:	96:34QVROtDUatTSdvIkkxAIObrGLCnJh/XMjQB/Q:3T3YpZUZ2HObrGLQTEjQa
MD5:	04051167E9FC5F5A5B4E110AF46592B2
SHA1:	98089905C89149F3E9D226F2B8E07E7028CB5D2D
SHA-256:	7575F5E99A5CBA10D39286F0E7E829496B060B22B8B5AD8F976F2F65FC7B4D71
SHA-512:	F58B92629D8EF3AAE22F587DC3EDB515B10EB7BD1C72D1C718AF1550566FDCA7DA6DFC313B2B53C06CF2221B1DA1B10EDD4631D0CCBC67FAB35D77D74681774F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......IDATh..{\|..u.wvv..]...$.,$#.c.v...1...$N[.$@.o>.6..C.%\|..M...I.y4..1...h...8.y%D.............3...e=,L...........s.=wf....Y..v......_..K.9..I...h......w^.].R.d....;.w4n..7...A..}i...9...E.5.5p..C.......N...vq.9v..}r.;..k..3?4...#._.n...=..3..._.8\.#....G.A.$.E..B@)..X.f....\e.V...X....ek.OOF......>p.d.V........^,..7.z}R..z....A...Ja.....R....F.2.7._.h2z%]p...^....5...p.\.Z...N.P....H&$P...7\Y...[.c.B....6/.......u..Q.6&5..ROR...1.O.E.._.~...~C..I.E.}.5r..J..{..:..b.....a......0....+.......U.0.p.Ly.s.{.7}.:.4..w.v...[...V.`AE...m...eu..q...\|.w....5k1..>.......,.......Ee.....xzUH]U.........3..{.k?.....V4ry.ZjT4.....N,.........i....,.4....9....._7?n.....G..\....& ../.P.&..!.U.....6.P.y...8fc..M..A=....L.G.(q..\|..\|.}~...B.`q.:.\|.b.2M`.4Z[...tf..%..?..g....`.=.A.w....tP.."(./..W..../........P..........s.....:......J(5......).....ll..7.%.#..W,,?w...........!.....H...z0.." ....}m..L`.u..k.].c..P....

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 275 x 175, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	50775
Entropy (8bit):	7.99003036284436
Encrypted:	true
SSDEEP:	1536:ru7JDSqZJEgeRZ9u77XR7q4uw5u1932f6MX7WPCegZ:4Dp2geb9uTuEO9cLh
MD5:	E06A0C4A5C427DE427AC02945E189630
SHA1:	E059AC208F0E7B7723B192AE6B18F6D4FF64BA6C
SHA-256:	1EA335DCA23A72400A0CC437C226C3738ABAE8ACD1ADE765D596A018FEEABF8A
SHA-512:	491442278328C2DB3BBD50CF540E9EFA51E2539724293DA74FA56AEF1AB8FA7938025551009006DA460FDA02C6B5564A2C97C2EE8724188729964D07EBB2176A
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/MUdE5q8Y9INai_J-IONHSquUfvECl-yO-WBvTD6fOoNmR2iyAryh9nqYOpYW6DuWuYTOxHi6PBTq79ffeVq9BvJV-I8=s275-w275-h175
Preview:	.PNG........IHDR.............Q..U....sBIT.....O... .IDATx...y..Uu6..[U.V.6........(..AE.&F.....&..$.......Q.[.q.ETDLT67$,.....0.LO.tWuU...q..V..~..tW..]...{.[4.h..........N..^W~'.u.E..=.#^.01...;p....p+.x..8d...18!e.r..X/.q.w.#"..N.c...D9X_.gf.5....d...BG...h.i0.......(Y..4..Dr..\|..GULq..D.`.\n....\..Tm.U.:.(..V1.b..y.....Yfd.a.....Ce53.?.1x..M$..#.)r.8.$...).h.>..0..vW.X}..b.K.5H...?%.....&.HFH..2..q..l...:Qw.?....JG..O{7.6.xLh.J.r...(...S...H.GgC..J..T:&..C....w.......E}.Ut.....t..=.. ..".2.B.X.......H./c+W.O.+.e...f.d...yR.w.n.t,T.Q@6SU.b...1Lo.9.NI.d.^<.h".'.+...bZb7.....rWV...H ^.......(...{..DdHF.M...D&2.7.."..x._.Q.........i..}H.r.....!..>...5..y....Oc"Bf$b^6e6.i.......,...63....Xw...+/".lv.F...V..G.v.Ipq>.w.j.QG......86.(.........m.zF..#.T..`5....T.L).X.s..I.KG..r..}$.@d.8...So.J.6".F.. K(J.3QV..R.....\.{.NR..lP.7\.........D.:.}u..j....D%..J..AqD..".......L......].O.k9........1......'".V.7....Tg$.fm.pu......Fi..N.Z#..Y>.!.\`...... .x.D.%A@"

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3025)
Category:	downloaded
Size (bytes):	9061
Entropy (8bit):	5.525139897908045
Encrypted:	false
SSDEEP:	192:kh/6bKGDg3eksiGBpIHhigCpcw3/MG2bm2pyp0nO:kh/6bKGDqeYGBwigCpJ3URK2Ep0nO
MD5:	79426CCDA723ED62810AC1D857F1C551
SHA1:	1CFDBB9E522D0D663244E2CA2FD4A38C4DA54E40
SHA-256:	233D93EE0443D7E9D5DF97E4D5A2DC4AD6B18B0D86E62E46BB9953ECDBC2BACC
SHA-512:	D2E7946A17E244DC8EA6173B93A6321CFB17BD916764AA4EF74D489757AFCC700FA0CB45532E95C4C3FED56892D0E5CAACB6F25E75564F21B8CB7C7A5AEF457C
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/html/r20250113/r20190131/zrt_lookup_fy2021.html
Preview:	<!DOCTYPE html><script>.(function(){'use strict';/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var l=this\|\|self;var n,p;a:{for(var aa=["CLOSURE_FLAGS"],w=l,z=0;z<aa.length;z++)if(w=w[aa[z]],w==null){p=null;break a}p=w}var ba=p&&p[610401301];n=ba!=null?ba:!1;function ca(){var a=l.navigator;return a&&(a=a.userAgent)?a:""}var A;const da=l.navigator;A=da?da.userAgentData\|\|null:null;function B(a){return n?A?A.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function C(a){return ca().indexOf(a)!=-1};function E(){return n?!!A&&A.brands.length>0:!1}function F(){return E()?B("Chromium"):(C("Chrome")\|\|C("CriOS"))&&!(E()?0:C("Edge"))\|\|C("Silk")};function ea(a,b){Array.prototype.forEach.call(a,b,void 0)};function G(a){G[" "](a);return a}G[" "]=function(){};var fa=ca().toLowerCase().indexOf("webkit")!=-1&&!C("Edge");!C("Android")\|\|F();F();C("Safari")&&(F()\|\|(E()?0:C("Coast"))\|\|(E()?0:C("Opera"))\|\|(E()?0:C("Edge"))\|\|(E()?B("Microsoft Edge"):C("Edg/"))\|\|E()&&B

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1436
Entropy (8bit):	7.66616417060062
Encrypted:	false
SSDEEP:	24:pN4EWfyvL7A2rDdswLoFNtDD6BODSEgB95vKHeUt+8w66W+r7EnCkz3sfwaEEuhl:AXyvLDrQoY94CHewSWE4Jn
MD5:	9BA7EED2E720DB5DDBF21025DE7F32A2
SHA1:	D3FFF365965E7C13EBD043A82F52E9172D912D9F
SHA-256:	B9D11E4CB730E64C4D6BB4FBAFE33264AFCF0627A20BC4EC53A20420D25829F5
SHA-512:	933456EEF3AF8AD79E6ABFBAA53CF7EEC3C96332E1599E3D22E341D5E21D7668B786FD24CF9CBDCF53625BFB882720A376DF82FD6AA277887797CD48E510FE88
Malicious:	false
Reputation:	low
URL:	https://cdn.protectonow.com/ext/favicon-32x32_1701772986.png
Preview:	.PNG........IHDR... ... .....szz....cIDATx....TE.......aaEY"".B.E.....h................aa..<..3..].f.].:..L...U.N.m$..(.....].h..x.~...Y......%IYq...I....-.m...(.c.VI[....0...#.P..,l.......@.x...l{.X.......m..`70.........4j{HR.vYR.+.mI......Vm/Jz.<......m/.5...AI3.........W..X.7..l+"....I....`V.y.W...Q.3....J.f.&..0.,.^..f..4m.$ul[.lg.......c....).;b~A.5...v.D.AIS...$7%]....@'...N......HK'R....>........`.(I.C..m?...N..mW$..&%M...4l{@R.y..Kj.K..K.........G$...J...F....A...80.......)......u...........H..L..h...=,.=.+.;.[.\|.hGA..8D-....OI..<......7.4....9$."......m..}3...x..MI...(...y(.k....;.Ic$.5#.y..-R..$..j......{u..].}.:..H..Z.H....Z,..........t....W.(.d..P....J.R...^...$..c.Y.z..6..F<.=...(.J.@...j.V..Dlh.\|...h....:)..aW..Z....k$.p,....B~{..*...Su...q.....5..z.c.p.EU.r................^.OH..r5..y.6.N.....X.}.X.;.$r...z.....P..H..&.{..........Y.+.&H.M%..?.]..x...w...[./..............O...!`O.<..u...c.e.;%...@..3....ld..uI....o.......2.

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (654)
Category:	downloaded
Size (bytes):	560258
Entropy (8bit):	5.668859512958225
Encrypted:	false
SSDEEP:	6144:QStgGd8JmYx0sb6h8YfALjbBksK8ecdy7FdzZA96fcJ2fL2iJ5B7lXaqy2:Gn8hALjbispecknzXfIKhX7
MD5:	19DDAC3BE88EDA2C8263C5D52FA7F6BD
SHA1:	C81720778F57C56244C72CE6EF402BB4DE5F9619
SHA-256:	B261530F05E272E18B5B5C86D860C4979C82B5B6C538E1643B3C94FC9BA76DD6
SHA-512:	393015B8C7F14D5D4BDB9CCEED7CD1477A7DB07BC7C40BAE7D0A48A2ADFA7D56F9D1C3E4EC05C92FDE152E72FFA6B75D8BF724E1F63F9BC21421125667AFB05C
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var X=function(){return[function(N,a,U,y,A,l,z){if((l=["toString",6,"constructor"],N&71)==N)if(typeof U==="string")z={buffer:Z[11](17,1,a,U),qH:!1};else if(Array.isArray(U))z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===Uint8Array)z={buffer:U,qH:!1};else if(U[l[2]]===ArrayBuffer)z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===WC)z={buffer:r[9](25,a,null,U)\|\|new Uint8Array(0),qH:!0};else if(U instanceof Uint8Array)z={buffer:new Uint8Array(U.buffer,U.byteOffset,U.byteLength),qH:!1};else throw Error("Type not convertible to a Uint8Array, expected a Uint8Array, an ArrayBuffer, a base64 encoded string, a Byt

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	265865
Entropy (8bit):	5.354910916820811
Encrypted:	false
SSDEEP:	3072:8FAlcIpxMi9Fwbk5GRZ7TPULi9UlT8+Icx0d7d6Q5lfEME3obHzvv88xcbffPiJw:8FvIpyiWSGRZ7TPUFu5VEezvk8CD3WTU
MD5:	B2BADD0D4BFF9A685634416D95463ED7
SHA1:	F007555B05CB957917490AACBE55AEA40E13CC0F
SHA-256:	9DFD5BB0047EBDA3CA639ABAC56B68D6F958C2B65C7B62260C19DD00E24D71F7
SHA-512:	374E5B6EEA26A269E6207B5617F2100EBAA00F8E8862A6CE3540D3B4DBFB4903C099F9DBC166A50F0A20BF42551202CD9DC7B1EF672420B62D9B38F9903F98DB
Malicious:	false
Reputation:	low
URL:	https://i.informer.com/js/program-mac.min.js
Preview:	!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(e.document)return t(e);throw new Error("jQuery requires a window with a document")}:t(e)}("undefined"!=typeof window?window:this,function(x,N){"use strict";function v(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item}function P(e){return null!=e&&e===e.window}var t=[],F=Object.getPrototypeOf,s=t.slice,B=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},R=t.push,y=t.indexOf,z={},H=z.toString,q=z.hasOwnProperty,U=q.toString,W=U.call(Object),m={},j=x.document,V={type:!0,src:!0,nonce:!0,noModule:!0};function Q(e,t,n){var i,r,o=(n=n\|\|j).createElement("script");if(o.text=e,t)for(i in V)(r=t[i]\|\|t.getAttribute&&t.getAttribute(i))&&o.setAttribute(i,r);n.head.appendChild(o).parentNode.removeChild(o)}function X(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?z[H.call(e)]\|\|"object"

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (565)
Category:	downloaded
Size (bytes):	245111
Entropy (8bit):	5.631974047137012
Encrypted:	false
SSDEEP:	3072:PEEpAmcG90DPRxnKE7OrgSRZsHQSI/kPRM0OqhSw9c9FWHMlb:uRDDZ57vH9i0OqhsWU
MD5:	7780C65CBD13DCF422B7FCEB56CFCBFD
SHA1:	1A4FA051BC07FB3AA69CBAC8045FE5EDA5C3B7EB
SHA-256:	32C1826FE36ED7ECF8093C571322897E33D87E0BDD1650069808C24973E4BA52
SHA-512:	A719FA2693425FE40C4F74BC6F487B29B192FA39184B831574911EBCD193DEA0CFFDDD4943383AC14257C67555330C6067D6BBDDFE0A0AAF4BC462A2744618A3
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-chrome-webstore/_/js/k=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.en_US.lwRYVOpsj_w.es5.O/am=WGow4BY/d=1/excm=_b,_tp,itemdetailview/ed=1/dg=0/wt=2/ujg=1/rs=AEP720LxAAtWUfmyW2Wx_vQGGmG45s16AA/m=_b,_tp"
Preview:	"use strict";this.default_ChromeWebStoreConsumerFeUi=this.default_ChromeWebStoreConsumerFeUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20306a58, 0x5b, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var ja,aaa,baa,Xa,fb,lb,eaa,faa,Ab,Gb,Lb,Mb,Nb,Ob,Qb,Rb,Ub,gaa,haa,Wb,Yb,ec,hc,jaa,pc,sc,tc,yc,laa,Ec,oaa,raa,Fc,qaa,paa,naa,maa,Gc,Lc,Mc,Ic,Jc,Rc,ad,bd,Vc,hd,waa,xd,yd,td,ud,Bd,xaa,Gd,yaa,Kd,Jd,zaa,Aaa,de,ee,ke,Ge,Ee,He,A,Se,We,cf,ff,tf,Eaa,Faa,Gaa,Haa,yf,Cf,Ff,Jaa,Kaa,Laa,Maa,Naa,Oaa,$f,Paa,Qaa,Raa,yg,Uaa,Gg,Vaa,$aa,Yaa,Vg,dba,Xg,$g,fba,gba,bh,ph,kba,lba,uh,vh,mba,nba,oba,pba,Lh,rba,Oh,sba,tba,ai,bi,vba,wba,li,mi,Bba,D

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1280 x 800, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	600239
Entropy (8bit):	7.965791827729248
Encrypted:	false
SSDEEP:	12288:D+gK9UATWHGygG8oV7fKIZqlScfi42FBLou+wdIhaXyNkcydNMsHyVsBLpqp5bU:/DHHpgG8oUIZqlH/2Xo+IhzkhXioL9
MD5:	31D94174ABDDE18EAFA34100F005ECDF
SHA1:	86E052E6A96B509771B142096BD4055AE70F32A0
SHA-256:	1ABF765FDA40411C9A37C5005D47011D62FF8B6C83E968198DD54219EE2080C7
SHA-512:	9DF5988A9D5967337DDF56FBAFCD9EA1B2DD212D974F5E1418F2FD0BE45B6C4D43DE6CECE57926A9AC1BD269D439BE6AA931638307DC6F38B8AEC79F5CBED534
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/j-eBhzua_ZWgA6PQoz_0eYIenmIJxLebpoAVM818kY2qeWu2oE70aXG2XR1JGfDXkPFcHbLoDoItv4iLnnUBYee3=s1280-w1280-h800
Preview:	.PNG........IHDR....... .....\|.......pHYs.................sRGB.........gAMA......a...(DIDATx..................s..i....r.}..Z...n..)..............?..[~....\|.~.....99q9....w.....w./....}}...-Z..s..~?.n.}...?..K_....}M$.1nv...j.....ju_6X...w5.....Y.h.....w..w.k.s..i..Ll.....cc.6^..f,..E...E.......dO...._.iK..[o.^.;/..c.p....Qx......Zm.e1........\|+q..../y=?\...h....&.../..7_.."..w}......&...3.5.r...&.m...~.F.}^r......k.../Y.3..1...`..r........4.....}.c..;.k8...>#W..3\|.....D..,.i.VN....gp.....}..mu.a...n..q...;.?....U2.............<g5D./vt... x.....%. ..gL.m[. ./...-.....\u;7.,...og...?^...5...i.Y.R9....n.}.wN..K).j..};...x..d .._....?v]v...C7.....[..yl.>6s...fi...@l....~$NO..3w.i..~.4.s"_..p...{..x.No......l=..{.....Z..#.m...._@yl))......-......7.....\.h;^p~...UM..-.?....+.....m.....3........D~\|.Yb3]..m...d...114..p.S...!.o{.<.o....}...p........;V.Gl.Isy...~.g..{.1.=,.e_..Y....1.{j......u.[u....i.Y.$.......F...M..3U.cB..8.>...I..&....E....=q.i

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	6399
Entropy (8bit):	4.268527058791902
Encrypted:	false
SSDEEP:	96:tacGmNnBAcK8ECeng0xzTb/dHstAF07Iw/:tasNBG8EC7UFsY8Iw/
MD5:	824D8B6AD9CA509A870DEA431F2DB54D
SHA1:	AF8CE088F14148EEE1AC32D0C390F74E3AF49DEA
SHA-256:	0CCCF7B20AC4D3FA47CF9FF2CAA0ADFB813C039C58CECF36FB0659DFBB6B6FBE
SHA-512:	C2AE77CB80C1807636542B5152637DD4904D5F19C4BA59168736752468C217865C7234EA80836D20D6DBA9F3C23802F3AA84E9F32776A867AC78313D4922CDA8
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 284 26.01"><title>logo</title><path d="M12.46,0a12.5,12.5,0,1,0,6.21,23.35c2,1,3.07,1.38,5.49,2.65-.74-2.44-1-3.9-1.54-6.06a13.1,13.1,0,0,0,2.32-7.42A12.52,12.52,0,0,0,12.46,0Zm0,22.5a10,10,0,1,1,10-10A10,10,0,0,1,12.5,22.51Z" style="fill:#ffffff"/><circle cx="12.5" cy="12.42" r="3.1" style="fill:#ffffff"/><path d="M43.65,16.36a16.13,16.13,0,0,0-3.73-1.25,9.93,9.93,0,0,1-3.43-1.29,2.33,2.33,0,0,1-.94-2,2.56,2.56,0,0,1,1.13-2.16,4.94,4.94,0,0,1,3-.83,4.94,4.94,0,0,1,3.17,1,3.06,3.06,0,0,1,1.26,2.5H46a4.54,4.54,0,0,0-1.72-3.71A7,7,0,0,0,39.7,7.21a6.83,6.83,0,0,0-4.33,1.32,4.07,4.07,0,0,0-1.69,3.34A3.8,3.8,0,0,0,34.29,14a4.7,4.7,0,0,0,1.86,1.52,15.38,15.38,0,0,0,3.53,1.11A8.71,8.71,0,0,1,43.08,18a2.7,2.7,0,0,1,1.13,2.28,2.61,2.61,0,0,1-1.2,2.2,5.37,5.37,0,0,1-3.2.85,5.71,5.71,0,0,1-3.4-.92A3.29,3.29,0,0,1,35,19.84H33.15A4.45,4.45,0,0,0,35,23.5,7.66,7.66,0,0,0,39.78,25a7.46,7.46,0,0,0,4.56-1.3,4.09,4.09,0,0,0,1.75-3.46,4.08,4.08,0,0,0-.6

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	32038
Entropy (8bit):	3.6482727631486385
Encrypted:	false
SSDEEP:	192:BapwqWLvl4VVD3gI+3DB10QQp2TSavb9XhUTDg7Fcp3eD8vdoN7D:BaiqWp4v3gz3Yt2mavb9XhUea3E8l
MD5:	E8D009E34AA14FD014772018C4F7E402
SHA1:	F8B44D6E1F61044BF31AC14A830437718A5389C6
SHA-256:	76BF9BA07053AE43B98354707919EDFB22EA913449D190785A5446D8D8D94CAA
SHA-512:	4BD3FD1E4E8D9B30403A1EF17F061A53FA1ACCDC282561E01A2CB26D9C57C8325D356B86C89CDB44A5013A6793261C799450014E86788904B008DF545C3716A5
Malicious:	false
Reputation:	low
URL:	https://software.informer.com/favicon.ico
Preview:	............ .h...F... .... .........00.... ..%..V...@@.... .(B...:..(....... ..... .........................j<..j<..j<..j<..j<..j<..j<..j<..j=..j<..j<..j<..k=..j<..j<..j<..j<..j<..j<..j<..j<..l>..l>..i;..i;..k>..m?..k=..f7..j<..j<..j<..j<..j<..j<..j<..l?..b2.._-..k=..l>..a0..]+..f6..{R..j<..j<..j<..j<..j<..j<..k>..`/...lB...................g.........`/..l?..j<..j<..j<..l>..a0....~..........j>..h:...\|..........zX.a0..l?..j<..j<..l>..a0...vQ......Z,.Z'..a0..a0..]*..pD........w._-..l?..j<..j<..k=..c3........s.[)..k=..sH..wM..j;.._-...tQ.....k>..i;..j=..k=..g8..wM......}T&.c3..zQ...........`1.d4..oC.......c4.c3..k>..k=..f6..\|T......xO..`0...f9..........}W.a0..l?.......k>.b2..l>..j=..i;..k>.......kF.b2..j;....b...r.l>..e6..\|S'.....xO..f7..k=..j<..l?..^-..........]+..f6..c3..b1..g9..X%........`/..l>..j<..j<..k=..i:..l?.........vK..d4..d4..pD.........vL..f7..k=..j<..j<..j<..k>..f7..oC.........................yO .d4..l>..j<..j<..j<..j<..j<..k>..h9..`....Y'...b...f..a0.a1..f6..l>..j<..j<

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1613
Entropy (8bit):	7.845156851169029
Encrypted:	false
SSDEEP:	24:8W4kh44T8WXljWPde4L+1ycDNgjemt+HLz9xpiblnni+VmYBu4I3yesmUEr4P7n:QX52ue4LSNgjXaz9xudi+v+ZTra7
MD5:	427739CD460B86F31B569E4224FD067B
SHA1:	CF5B0353D6EE61BA9931F31091FE3EC628278DC0
SHA-256:	93920E14E9FE3F8809449C06A2F74BFEA9FF2A30C17A4191B4DEC8BCDF12A218
SHA-512:	4486B6F2F5E4CB4FF8ED97B520E7AC03FF3FAE41EA2D81E5B0EE71369D95B4943FCD41D50A894BF29B72054AC41727D8095CB447E74D642AED9C982BCF1BA7D2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......IDATh..Ol.U..?ofw.v.#..".......z...H@.O.$. ...&..H$...<..F.bP.'.U..P.....-$,%t..@.Jgg.y.....mi..v........?#....dyxl..wr'....G...rVx..[.8>.7==.I. 1.Z(....!......j....11......B ...W....j....3..P5W..6...1..0Q7.%..5..e.b...g..'..w;.`/.f.f..+..@.M%..:..uS.}.T.%.E}f....)...........T....;{...W..#.jg.p?.{.1.}...C...hc..Z>D]...W.y......Q..2..]@(.../7;w....4.D.F.L......:.u.9Qs..U<..nF.p.Q.S.l.pl..4H,{#vv..@]...xg.<v_;V....I.i 4.....M..uau~...P..cA..Bb.\..vF.....D...25.....O..:w.;..>....=e.r.Jh8....m..F....m.:.<...}...nC....Yg. ...'.b.k.....#.<.7[...Z.3x...V....(kP..D..P...,..Q..A&4...n.M.K..R....<...2/....\|.3x>..1s..>r...6m.y.."..x...r..'.!t..2s.jf-.........7Dt...N^...[...B!.9..M,..r..b...D..6.@r2b.@.y.2..b....J+oh.{.s.z...,$...u."U..g!.L.y...JP..O...Cn.yu.?.P.SR.u..}..BI-A...l...FI7.......9..!.j...W..J..;KQ?.4....j...K6.fZ..;.=..M.y..gQ5@...T..3.....J...!...W.q......r..u.......t...tv...($.b{E/..Y.....Z......oc.NV..~.]

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1954
Entropy (8bit):	7.879702936137602
Encrypted:	false
SSDEEP:	48:TuqSI5RDOxA9UDHJUFq8HjPZaUC3/2U+85uQjMmH3xFLUSj70z:MI2AiDHJt8Hl83enG9lXx6Sj6
MD5:	CB14EDA58FA2AE54BDD521C9FAAFB318
SHA1:	0FFD19A177C18EEE0A72E2755D4DF1FF9520161B
SHA-256:	F7C77533CCA41F6DDCD7262E81A28EE266867E663EC1A4148743FD36523DD419
SHA-512:	5C7BDDB0E5EF1829060CF6D9D38DE5C6955A7346C224AC4AB07B642D5BFC4C8AD7347E40146F2574B79DF401F12A9EA718CFF61F2A50F37532FC9428EEE4CA92
Malicious:	false
Reputation:	low
URL:	https://img.informer.com/icons/png/48/5860/5860964.png
Preview:	.PNG........IHDR...0...0.....W......iIDATh..]lS.......9....``....&T'Q.@+.BSP.VjW5m.1J...&4.I.}e..z1AAY...D.E...V..Q.i..H..jBTZ..&kb...........v..._...{......<......4..`[.h.?.;._...^e#...s....w.W...3.EI..:.(ABE.....!...xV...P.....ZmEq(..y.h.P.H..&g......H...5..:.z.K.d6.{.KCE....tM4...T.....e$"....d.f4[.e..3.....X..;..:..G..0\|f.x8.......DCQ..V...V[.l...Qb...m.m...O#...-N.-N...=~...........R$...........!.fRDnGh.h..HgI..}.M....U.P......YY.E..6...hlo,...X.K.......q.p.m.$...$t...&..-[....{.K..>.%"..x.M/m..go......U....\|..p.p....H.D..>z.......eg.m...?.[......,a0..e.;.i}....\|.\|...9.!q'.\+#."..nd...1...7.y..O.....1Qv...\d.f...F~H.@q(..m/....1..}...S..M/n..H'......!..=~......QY..D$Aj&.@..V....O.:...? ..`..'w..c;...e}.l......uC.%.P..T...]..x^.^h"D.O..n4....d.f....a>....d_.!.o.l.e..g.3.kY.['.I..o.#.I....,]....(.y..8...w..\.....On....3..xQ. ..W............q...7T......t..3.{.d6.z.j.W.......m.V...}d.......G....^.....nC]%..h!.W7.*...P..Xj7+..5&

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34960), with no line terminators
Category:	dropped
Size (bytes):	34960
Entropy (8bit):	4.804644946451074
Encrypted:	false
SSDEEP:	384:CY3gvjmrUA58TzS5vqqRLya3Kg0bhK/v81V1Xb6WCpv2nIuLx87LPfWHHNXQsa2X:CYQvjmrUiCzAvLRmZg0BWpJ28Z8cU0m
MD5:	12E1862159AB01F6072752CC1320E6B4
SHA1:	0F30522238523A8CAA87295438E13D82902312A3
SHA-256:	D4D5769BA66D3C91E32DB265FF6C0EBAFB47B3A21B7CD7D50B9B1A8C330F8D90
SHA-512:	DE386A82C6240DCA2C7DF106FAD1A10685EAC435BFDF34B25FEF2FD2ED52B5DC0F2F02BE68B10852DC43DA0B4060FFE770EA5293EA70E87CA02C2D8BF098C859
Malicious:	false
Reputation:	low
Preview:	{"v":"4.8.0","meta":{"g":"LottieFiles AE 3.4.5","a":"","k":"","d":"","tc":""},"fr":29.9700012207031,"ip":0,"op":90.0000036657751,"w":319,"h":111,"nm":"step2","ddd":0,"assets":[],"fonts":{"list":[{"fName":"Roboto-Medium","fFamily":"Roboto","fStyle":"Medium","ascent":75},{"fName":"Roboto-Bold","fFamily":"Roboto","fStyle":"Bold","ascent":75}]},"layers":[{"ddd":0,"ind":1,"ty":5,"nm":"4","sr":1,"ks":{"o":{"a":0,"k":100,"ix":11},"r":{"a":0,"k":0,"ix":10},"p":{"a":0,"k":[252.865,44.023,0],"ix":2},"a":{"a":0,"k":[-4.135,-4.977,0],"ix":1},"s":{"a":0,"k":[100,100,100],"ix":6}},"ao":0,"t":{"d":{"k":[{"s":{"s":14,"f":"Roboto-Medium","t":"3","j":0,"tr":0,"lh":16.8,"ls":0,"fc":[0.133,0.133,0.133]},"t":0}]},"p":{},"m":{"g":1,"a":{"a":0,"k":[0,0],"ix":2}},"a":[]},"ip":0,"op":90.0000036657751,"st":0,"bm":0},{"ddd":0,"ind":2,"ty":5,"nm":"3","sr":1,"ks":{"o":{"a":0,"k":100,"ix":11},"r":{"a":0,"k":0,"ix":10},"p":{"a":0,"k":[147.519,43.955,0],"ix":2},"a":{"a":0,"k":[-3.981,-5.045,0],"ix":1},"s":{"a":0,"k":

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34960), with no line terminators
Category:	downloaded
Size (bytes):	34960
Entropy (8bit):	4.804644946451074
Encrypted:	false
SSDEEP:	384:CY3gvjmrUA58TzS5vqqRLya3Kg0bhK/v81V1Xb6WCpv2nIuLx87LPfWHHNXQsa2X:CYQvjmrUiCzAvLRmZg0BWpJ28Z8cU0m
MD5:	12E1862159AB01F6072752CC1320E6B4
SHA1:	0F30522238523A8CAA87295438E13D82902312A3
SHA-256:	D4D5769BA66D3C91E32DB265FF6C0EBAFB47B3A21B7CD7D50B9B1A8C330F8D90
SHA-512:	DE386A82C6240DCA2C7DF106FAD1A10685EAC435BFDF34B25FEF2FD2ED52B5DC0F2F02BE68B10852DC43DA0B4060FFE770EA5293EA70E87CA02C2D8BF098C859
Malicious:	false
Reputation:	low
URL:	https://cdn.protectonow.com/step2A_enjoy_1716197370.json
Preview:	{"v":"4.8.0","meta":{"g":"LottieFiles AE 3.4.5","a":"","k":"","d":"","tc":""},"fr":29.9700012207031,"ip":0,"op":90.0000036657751,"w":319,"h":111,"nm":"step2","ddd":0,"assets":[],"fonts":{"list":[{"fName":"Roboto-Medium","fFamily":"Roboto","fStyle":"Medium","ascent":75},{"fName":"Roboto-Bold","fFamily":"Roboto","fStyle":"Bold","ascent":75}]},"layers":[{"ddd":0,"ind":1,"ty":5,"nm":"4","sr":1,"ks":{"o":{"a":0,"k":100,"ix":11},"r":{"a":0,"k":0,"ix":10},"p":{"a":0,"k":[252.865,44.023,0],"ix":2},"a":{"a":0,"k":[-4.135,-4.977,0],"ix":1},"s":{"a":0,"k":[100,100,100],"ix":6}},"ao":0,"t":{"d":{"k":[{"s":{"s":14,"f":"Roboto-Medium","t":"3","j":0,"tr":0,"lh":16.8,"ls":0,"fc":[0.133,0.133,0.133]},"t":0}]},"p":{},"m":{"g":1,"a":{"a":0,"k":[0,0],"ix":2}},"a":[]},"ip":0,"op":90.0000036657751,"st":0,"bm":0},{"ddd":0,"ind":2,"ty":5,"nm":"3","sr":1,"ks":{"o":{"a":0,"k":100,"ix":11},"r":{"a":0,"k":0,"ix":10},"p":{"a":0,"k":[147.519,43.955,0],"ix":2},"a":{"a":0,"k":[-3.981,-5.045,0],"ix":1},"s":{"a":0,"k":

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 20 x 24
Category:	downloaded
Size (bytes):	1065
Entropy (8bit):	6.041670798563073
Encrypted:	false
SSDEEP:	24:lcltvQpznJsisRYV4jcsKsRYV4jfsJUsRYV45:l6deOCV4jUV4jHV45
MD5:	7DBC79368EAC7A224B26708057A1A044
SHA1:	936323FEE38CABFEB7FA048F6B235B332EEC380B
SHA-256:	B9C74781AF551A68E296690C7D0DE2481533DDBE59A9435CBEC29AFB84F74EB1
SHA-512:	F665178C4505AD1708D55AE8FB3AE4DEB809E7360905E1B6442CB65886847631DA25E5A0E21E63BE3FC6B44A476FA2DC952E4BC3552BD6F2733B10487A348D30
Malicious:	false
Reputation:	low
URL:	https://img.informer.com/images/comments-module/smiles/smile.gif
Preview:	GIF89a.......@4... ..... ..................ye<iU ....}..........ymU.........................aeP..q...........]H.yi@.u.........ue8..aL....mP..e.q]0iH..................}.........e.q..}..}..m.ua4..............................................................................................................................................................................................!..NETSCAPE2.0.....!..Built with GIF Movie Gear 4.0.!.!Design by Aiwan (aiwan@yandex.ru).!.....D.,............D.........................5$++$8......9..@"....')72.....;)'...3........,....:B.....=..D.........&....6........%...4........ ..-xp......XX ...u... ..B.z.x..1........@.G...0..a.6..P.......-..I.A......=p... .<`....... 0.....<:0#......8..!.../>....E....*....U..........J.....!.....D.,..........'.DD..D...D.......D.........D.........D..!.....D.,............DD...........................!.....D.,..........'.DD..D...D.......D.........D.........D..!...,.D.,............DD.......................

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1314
Entropy (8bit):	5.197367126177473
Encrypted:	false
SSDEEP:	24:2dnNAlKLfLITgHRWMEiPNzWfn0xFDiU14Yd0LiWtCyrDAbwaMMbGI:cNAlOfMTgxWMDVcESYd0LhCyrcbw7Uh
MD5:	1031D42AE78229B952ACEC5FDE50B235
SHA1:	7A6D7405F87F2A29AA772DC4B1677BE996D44BBC
SHA-256:	4CA25780BE24C966C322BF9965F491CD2BF78908588BDE07EB5C6E91A899224C
SHA-512:	43415D02019B98631AC11A01E07BFCFF5041727CD44D1EC429962804CD36C30D688A1CC5007BEBA7C5E49D55ADA1EE41FB7BF901BFF7777D739322C89AD0D9CC
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 24.1.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="...._1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="344px" height="53px" viewBox="0 0 344 53" style="enable-background:new 0 0 344 53;" xml:space="preserve">..<style type="text/css">....st0{fill:#f06666;}....st1{fill:#e3ecf1;}..</style>..<g>...<polygon class="st0" points="27.867,0 36.478,17.447 55.734,20.244 41.8,33.824 45.09,53 27.867,43.947 10.644,53 13.933,33.824 ....0,20.244 19.256,17.447 ."/>...<polygon class="st0" points="99.933,0 108.545,17.447 127.8,20.244 113.867,33.824 117.156,53 99.933,43.947 82.711,53 86,33.824 ....72.067,20.244 91.322,17.447 ."/>...<polygon class="st0" points="172,0 180.611,17.447 199.867,20.244 185.933,33.824 189.223,53 172,43.947 154.777,53 ....158.067,33.824 144.133,20.244 163.389,17.447 ."/>...<polygon class="st0" points="244.067,0 2

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	140180
Entropy (8bit):	1.7234218829858372
Encrypted:	false
SSDEEP:	192:XZaqH1/Bk1od1Q21sc1FC1JvL92ugYC92ugnC92ub9hxxTnUT90Dth+FF/Atln5J:JaSUiLy9xGbY2jEPMAUWRbB2C4VUr+
MD5:	A41AF0DE1C8133E81BF550BE486FC07B
SHA1:	E68C0B7F822E92E141D23BAB6CA91F16B7088898
SHA-256:	C1613494BAD1F29831E921AF1FC5BF209A0FB84B21B1A618C124F23A0B07E086
SHA-512:	F11BEBF01087AB6F915233B270AFCAF922C8EC300CB65ED962BB8F0E3CBA69A7183C136B36C8FB2E6BCECFC960DC5CEC56EEDF7655773DE475949882F00CADC5
Malicious:	false
Reputation:	low
URL:	https://cdn.protectonow.com/step1_1735132523.json
Preview:	{. "v": "4.8.0",. "meta": {. "g": "LottieFiles AE 3.4.5",. "a": "",. "k": "",. "d": "",. "tc": "#FFFFFF". },. "fr": 29.9700012207031,. "ip": 0,. "op": 41.0000016699642,. "w": 319,. "h": 111,. "nm": "1step",. "ddd": 0,. "assets": [],. "fonts": {. "list": [. {. "fName": "Roboto-Medium",. "fFamily": "Roboto",. "fStyle": "Medium",. "ascent": 75. }. ]. },. "layers": [. {. "ddd": 0,. "ind": 1,. "ty": 5,. "nm": "4",. "sr": 1,. "ks": {. "o": {. "a": 0,. "k": 100,. "ix": 11. },. "r": {. "a": 0,. "k": 0,. "ix": 10. },. "p": {. "a": 0,. "k": [. 252.865,. 44.023,. 0. ],. "ix": 2. },. "a": {. "a": 0,. "k": [. -4.135,. -4.977,. 0. ],. "ix": 1. },.

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	615
Entropy (8bit):	6.4948217311323795
Encrypted:	false
SSDEEP:	12:6v/7sAIeCBLnNVE+SLB/AIr8SKE8GVBWbXITQpuWPUMaOVCgS:qIHBxVE+2yE8GVBWb4T6PUMFogS
MD5:	DC7B7E44F47C6E39465452E36E46FB65
SHA1:	4C2C6934965B21574AE3F30B32E20599B4FDE409
SHA-256:	A677E54EBCB87E8AA9349724D4DCDC6C6E74A3D3F2E4FEA58226E225B79C6A8A
SHA-512:	80149BC04571BEC07A00587DE04D4858EE531CE9548611DC9BA28C559688A00966FFFD0462946C44FF15773753EA1A7D1D8409093065BFE7CC769229F6554E34
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@............xPLTE..........................................................................................................................H....'tRNS.."......S.Y...b,%....~qG=.2...kO5..s....wIDATX...r. .EO..D.w.......Z@w&..x.....Z..GG.&...8'.x%.Sz...l..W).Z.>..c.,.E..........K...v...@x....~r.. 6.).v#f.V..!x...lV....9.=.N....#.....C.x0..._...0...>.z4.r,...<.........-....h3M'5.....bq_e..9>g...Z.c...#.(.....M.A.{'Q.....'.<...{.o% W...L.H.XB...rL.0..T...g. .jf`....2.3.Ka.e.:....2.j0.......t\|.....I.6".>&.A.............6\|....,..t..^u...q...N...o._..._.....IEND.B`.

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	205
Entropy (8bit):	6.471232950817362
Encrypted:	false
SSDEEP:	6:6v/lhPmvbPM6ArwrgPowQka3cQhWb8i4NI1Q/2up:6v/7OvzZ6IRwIcQEb7461Q2c
MD5:	4087858E2C9DB9AA8F6A840AEDCFB533
SHA1:	D1FFE861DA6BD0E95FD1A365B0C3D3CEB6CD58A3
SHA-256:	4D45982F2DC34F36C9045EE46A75A1943666BB7FD64E103CAC8C7429E7012840
SHA-512:	541228667C513266FFAC017AA43CCACEA410E20BF27D30599276E9984FAC2C433AC58288C19F7A5BFEB1C9B4074B8C9C472080BF1C706303F97B2CE73DBD634F
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/icons/material/system/2x/feedback_grey600_24dp.png
Preview:	.PNG........IHDR...0...0.......1.....IDATx...1..1.DQ.f....@H.....%`..j.M&"....5....;...;.......\.....\..U.4..pe.<.P.....%... ...@....p.....@...X...5..{.$.x^....y=..z.......\|.......+.........IEND.B`.

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6399
Entropy (8bit):	4.268527058791902
Encrypted:	false
SSDEEP:	96:tacGmNnBAcK8ECeng0xzTb/dHstAF07Iw/:tasNBG8EC7UFsY8Iw/
MD5:	824D8B6AD9CA509A870DEA431F2DB54D
SHA1:	AF8CE088F14148EEE1AC32D0C390F74E3AF49DEA
SHA-256:	0CCCF7B20AC4D3FA47CF9FF2CAA0ADFB813C039C58CECF36FB0659DFBB6B6FBE
SHA-512:	C2AE77CB80C1807636542B5152637DD4904D5F19C4BA59168736752468C217865C7234EA80836D20D6DBA9F3C23802F3AA84E9F32776A867AC78313D4922CDA8
Malicious:	false
Reputation:	low
URL:	https://img.informer.com/images/v3/logo_si_white.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 284 26.01"><title>logo</title><path d="M12.46,0a12.5,12.5,0,1,0,6.21,23.35c2,1,3.07,1.38,5.49,2.65-.74-2.44-1-3.9-1.54-6.06a13.1,13.1,0,0,0,2.32-7.42A12.52,12.52,0,0,0,12.46,0Zm0,22.5a10,10,0,1,1,10-10A10,10,0,0,1,12.5,22.51Z" style="fill:#ffffff"/><circle cx="12.5" cy="12.42" r="3.1" style="fill:#ffffff"/><path d="M43.65,16.36a16.13,16.13,0,0,0-3.73-1.25,9.93,9.93,0,0,1-3.43-1.29,2.33,2.33,0,0,1-.94-2,2.56,2.56,0,0,1,1.13-2.16,4.94,4.94,0,0,1,3-.83,4.94,4.94,0,0,1,3.17,1,3.06,3.06,0,0,1,1.26,2.5H46a4.54,4.54,0,0,0-1.72-3.71A7,7,0,0,0,39.7,7.21a6.83,6.83,0,0,0-4.33,1.32,4.07,4.07,0,0,0-1.69,3.34A3.8,3.8,0,0,0,34.29,14a4.7,4.7,0,0,0,1.86,1.52,15.38,15.38,0,0,0,3.53,1.11A8.71,8.71,0,0,1,43.08,18a2.7,2.7,0,0,1,1.13,2.28,2.61,2.61,0,0,1-1.2,2.2,5.37,5.37,0,0,1-3.2.85,5.71,5.71,0,0,1-3.4-.92A3.29,3.29,0,0,1,35,19.84H33.15A4.45,4.45,0,0,0,35,23.5,7.66,7.66,0,0,0,39.78,25a7.46,7.46,0,0,0,4.56-1.3,4.09,4.09,0,0,0,1.75-3.46,4.08,4.08,0,0,0-.6

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (2166)
Category:	downloaded
Size (bytes):	38972
Entropy (8bit):	5.526643578081119
Encrypted:	false
SSDEEP:	768:ByEz3JezjQJutwy7Gxr1xUQZr6sG6GBPRML/YbVuw/Zebn53sHrn5huyBvoqeqMr:I85efC6ssGyhBDpI
MD5:	14C7483E36CCB504F58F8BAB23BAD4E1
SHA1:	A9F10E07EF54FD611C1AD7838E7231DACAC39360
SHA-256:	41415710AFE97995A9AD088CB4B5BC6CC5D9581CE9AEAE46BB697087192A5D22
SHA-512:	7B4517EF78FB2DDD3D0527440E742FB13104C64149FF21CD9FFEEEB3FDC4F82971A220909D3C0C21E0C57803668F42BAA10EE9787052C3338E3627AE5B5B7990
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/mysidia/14c7483e36ccb504f58f8bab23bad4e1.js?tag=addon/mysidia_one_click_handler_one_afma
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var m=this\|\|self;function aa(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=m,e=0;e<c.length;e++)if(d=d[c[e]],d==null){c=null;break a}c=d}a=c&&c[a];return a!=null?a:b}function ba(a){return a};function q(a,b){if(!b)return a;b.indexOf("&")===0&&(b=b.substring(1));const c=/[?&]adurl=([^&]*)/.exec(a);return c?`${a.slice(0,c.index+1)}${b}&${a.slice(c.index+1)}`:`${a}${a.indexOf("?")===-1?"?":"&"}${b}`}function ca(a,b){switch(a){case 0:return b?"&ri=1":"";case 1:return b?"&ri=24":"&ri=27";case 2:return b?"&ri=25":"&ri=26";default:return""}}.function da(a){a=a.o;if(!a)return"";let b="";a.platform&&(b+="&uap="+encodeURIComponent(a.platform));a.platformVersion&&(b+="&uapv="+encodeURIComponent(a.platformVersion));a.uaFullVersion&&(b+="&uafv="+encodeURIComponent(a.uaFullVersion));a.architecture&&(b+="&uaa="+encodeURIComponent(a.architecture));a.model&&(b+="&uam="+encodeURIComponent(a.model));a.bitness&&(b+=

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53753)
Category:	downloaded
Size (bytes):	55060
Entropy (8bit):	5.745385673852077
Encrypted:	false
SSDEEP:	1536:jHBZ8A11qcfEVS9bl8Z2cALC3qLcfs6rHL:j7fEVZ2cAjeBHL
MD5:	6AEB364D3039709E56CE6931F2AE6BA1
SHA1:	AA078139A6BF05F82E923F89DDBF6245300938B1
SHA-256:	B8AE2562740D461647234085678E42807EEFD46CF431D777A0AC1267D2CDDF36
SHA-512:	805F17A96BE598A87E0E1B91C7FD8A3EC444C3FCE283C6D4792AE55D26B040E10F06E01E4BBC5E095A75AC9290D17C34C069452E86D6CC50E3E7EA4F9A0B6178
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/uK4lYnQNRhZHI0CFZ45CgH7v1Gz0Mdd3oKwSZ9LN3zY.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function K(T){return T}var h=function(T,g,z,k,H,u,x,l,Y,N,G,A){for(A=(N=z,34);;)try{if(N==g)break;else if(N==z)l=u,Y=E.trustedTypes,N=17;else if(N==17)N=Y&&Y.createPolicy?91:4;else{if(N==4)return l;if(N==T)E.console[x](G.message),N=79;else if(N==84)N=E.console?T:79;else if(N==k)A=34,N=84;else if(N==91)A=24,l=Y.createPolicy(H,{createHTML:I,createScript:I,createScriptURL:I}),N=79;else if(N==79)return A=34,l}}catch(p){if(A==34)throw p;A==24&&(G=p,N=k)}},E=this\|\|self,I=function(T){return K.call(this,T)};(0,eval)(function(T,g){return(g=h(39,5,20,93,"bg",null,"error"))&&T.eval(g.createScript("1"))===1?function(z){return g.createScript(z)}:function(z){return""+z}}(E)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:applica

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1683
Entropy (8bit):	4.319930928270355
Encrypted:	false
SSDEEP:	48:cMLj8NejIhj8NBLbUI7j8NBLbUIMj8NBLbUIxj8NBLbUE:r8Ney8NBH78NBHG8NBHh8NBHp
MD5:	1C7B758561931664DB7A21BDED0EBE69
SHA1:	343E93FE3944C374F93E3464C54BE0B2B93B48E2
SHA-256:	BD003AEBE4D1DA00DAE333E2A2AB8964806D0467287D9523727A7FAD1C09C3DA
SHA-512:	7F0050C6C3718951E7A870251DA3C2BCD73A67523D225D0EE83E73D1611866A542EA1788F49F6993D05AC1786EE57785306EE0A7D0C666C0FA954FCF9E64A39F
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="a" xmlns="http://www.w3.org/2000/svg" width="121" height="20" viewBox="0 0 121 20"><path d="m10.58,3.38l1.84,3.85.31.77.77.15,4.14.62-2.91,2.92-.61.46.15.77.77,4.15-3.68-1.85-.77-.31-.77.31-3.83,2,.77-4.15.15-.77-.61-.62-3.07-2.92,4.14-.62.77-.15.31-.77,2.15-3.85Zm0-3.38l-3.37,6.62L0,7.69l5.21,5.08-1.23,7.23,6.59-3.38,6.44,3.38-1.23-7.23,5.21-5.08-7.2-1.08L10.58,0Z" style="fill:#f66;"/><path d="m35.58,3.38l1.84,3.85.31.77.77.15,4.14.62-2.91,2.92-.61.46.15.77.77,4.15-3.68-1.85-.77-.31-.77.31-3.83,2,.77-4.15.15-.77-.61-.62-3.07-2.92,4.14-.62.77-.15.31-.77,2.15-3.85Zm0-3.38l-3.37,6.62-7.2,1.08,5.21,5.08-1.23,7.23,6.59-3.38,6.44,3.38-1.23-7.23,5.21-5.08-7.2-1.08-3.22-6.62Z" style="fill:#f66;"/><path d="m60.58,3.38l1.84,3.85.31.77.77.15,4.14.62-2.91,2.92-.61.46.15.77.77,4.15-3.68-1.85-.77-.31-.77.31-3.83,2,.77-4.15.15-.77-.61-.62-3.07-2.92,4.14-.62.77-.15.31-.77,2.15-3.85Zm0-3.38l-3.37,6.62-7.2,1.08,5.21,5.08-1.23,7.23,6.59-3.38,6.44,3.38-1.23-

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	604
Entropy (8bit):	7.573620174038291
Encrypted:	false
SSDEEP:	12:6v/7dkfFQPHl09Kor6EHz1g+WVmObBbBbaLPIpTIiVojx5cF8NonhstcAzhu1:CkEl0nr6EHz1VWV33ePIpTzVojx5p6nH
MD5:	7BD42E5A35B5FB3FF852D6EA9191CA83
SHA1:	8A141EB392A05A2DEA3DCD83B97940EF70A81EBC
SHA-256:	5C4A713EE4250851232BE9F9F68D41586BE39B299528CFC7266E0B0E7E582E1B
SHA-512:	6FF31ACB937D6944570A837BB77AED92DAE41D71681440DC4765758FC40585F55999F2CDD78C4CE76A5AB414331BA9959BAFCFEF7E85B756AAB899C247F02890
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1....#IDATx...MKTQ...3...K...gP.Eo.Z$..6......"0..."..E-Z...C....+..E.T...JH/.HC.$d...y..."..W...w.3..3..9... ^..Fr4R.Q.....H<...\...V.[...v.L.D...y.wYQ....]....w&...\|F...iz8..b.s.r..[.H..5..5D..[@.ed.-...O..=..G..lpD.R.F".J....... .. y..$>.)V.`..quuP4.W9.}......y......~E}.7....IU.~.!.Ak.>....A..o..._.....7.4...{.K..6o.O..5.0n.`..z...V."^. 0.x=..^M...*t...H..9.B.(UD..>heD......."....W..T.E..0D.fYfI..3.-.G".....#.p....q.......Bv..{5.!u.F.i.......[.s.)....I....v.....Y.P.5?...n.'.......;...T......f......Q...~...8.....h.......T3<........IEND.B`.

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (11822)
Category:	downloaded
Size (bytes):	11824
Entropy (8bit):	5.2927390094370335
Encrypted:	false
SSDEEP:	192:O9d9uZiYB+zsjBHN5whvID3YMYSPSWQ55aTkcfChQY+DdlZ7hJfLHmJIBu:Ee2zsNHHwlIDhPSZ550kcfChQtvJfxBu
MD5:	659A1EC658C77B9C936C856B9B72A548
SHA1:	C1076FE1A694D561FFAA673793CB6418763FA1E4
SHA-256:	B2D12B381E4F471679E903D6C8FE634AB8DDA43764168C8F3C1EE1269FE7EDAB
SHA-512:	77F2057B03E14C9378F6C6CB087263D7239EDA44D57104DF48105B88938656F594BD68DCAD9CDA0409AFDB78205C872B65F63816146923676F522C3626232558
Malicious:	false
Reputation:	low
URL:	https://cdn.protectonow.com/ng-assets/lp/assets/polyfills-a3f452c3.js
Preview:	export function __vite_legacy_guard(){import.meta.url;import("_").catch(()=>1);(async function*(){})().next()};var t="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},n=function(t){return t&&t.Math===Math&&t},r=n("object"==typeof globalThis&&globalThis)\|\|n("object"==typeof window&&window)\|\|n("object"==typeof self&&self)\|\|n("object"==typeof t&&t)\|\|n("object"==typeof t&&t)\|\|function(){return this}()\|\|Function("return this")(),e={},o=function(t){try{return!!t()}catch(n){return!0}},i=!o((function(){return 7!==Object.defineProperty({},1,{get:function(){return 7}})[1]})),u=!o((function(){var t=function(){}.bind();return"function"!=typeof t\|\|t.hasOwnProperty("prototype")})),c=u,a=Function.prototype.call,f=c?a.bind(a):function(){return a.apply(a,arguments)},l={},s={}.propertyIsEnumerable,p=Object.getOwnPropertyDescriptor,y=p&&!s.call({1:2},1);l.f=y?function(t){var n=p(this,t);return!!n&&n.enumerable}:s

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (59885)
Category:	dropped
Size (bytes):	388631
Entropy (8bit):	5.222850986609683
Encrypted:	false
SSDEEP:	3072:X9A6NxOKllfvh6xFzfYOo5+6AcWYe1+B8+:NA6NxOKllfvUxFDYOo5+6BWYe1+B8+
MD5:	283B5915336E48C7239C5B35A3D0F4D2
SHA1:	6CC24D33EA152FB79649CE065AC8111712B2D0A7
SHA-256:	DC496EBD73EF71854A7732343DE50DCB2C16B58FF3BDD5F4D38672526724D515
SHA-512:	CBB9AD4E2E079D434BE095BB3570C128B7AB8DE497AE6D2D9BEC1387D303CE440CBEE199C3746AACEBCED6B4F6DE93D9AA4B2B15B6CCBDF3F914B489B1430FA2
Malicious:	false
Reputation:	low
Preview:	. <!DOCTYPE html>. <html lang="en-US" class="theme-beta">. <head prefix="og: https://ogp.me/ns#">. <title>Reddit - Dive into anything</title>. <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">. <meta name="apple-mobile-web-app-capable" content="yes">. <meta name="apple-mobile-web-app-status-bar-style" content="black">. <meta name="msapplication-navbutton-color" content="#000000">. <meta name="theme-color" content="#000000">. . . . <link rel="preconnect" href="https://www.redditstatic.com/" crossorigin="anonymous" />. <link rel="dns-prefetch" href="https://www.redditstatic.com/" />. . . <script type="module" nonce="ZBWVuZO93GyqfqFPWEaWTQ==">let n;Promise.resolve();let e=null;async function o(){return e\|\|(e=async function(){if(n=window.navigation,!n){console.log("Navigation API not supported, loading polyfill");try{const{applyPolyfill:e}=await impo

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1055)
Category:	downloaded
Size (bytes):	2690
Entropy (8bit):	5.398083497267717
Encrypted:	false
SSDEEP:	48:Otg7xNqHIN7QaE9Fa9FZpPiNmgrZyHicju8m5I0zRHkFRCmTx:rN7Qabhiwdicju8WhRHMnTx
MD5:	2669D16AAE166D157B8434762A199620
SHA1:	CA7E08D45D0D469ED57825C28CB214F421311F97
SHA-256:	944A37F694B55DE268A0BF52DBAE4E12F12C4AE09EE5C8D213BA05075C2865DD
SHA-512:	51CCCC87145F0B0098B81BEA1506C726BB249E65F3B5FCC853F1FC4D4E55716F1F9318E43A2A0B31DFC4C968C14EBAF1EEFB9331C6DCE1B561459883DA7E9432
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20250114/r20110914/client/window_focus_fy2021.js
Preview:	(function(){'use strict';function f(a,b,e){a.addEventListener&&a.addEventListener(b,e,!1)};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a,b,e){if(Array.isArray(b))for(let c=0;c<b.length;c++)g(a,String(b[c]),e);else b!=null&&e.push(a+(b===""?"":"="+encodeURIComponent(String(b))))};function l(a=document){return a.createElement("img")};function m(a,b,e=null,c=!1){n(a,b,e,c)}function n(a,b,e,c){a.google_image_requests\|\|(a.google_image_requests=[]);const d=l(a.document);if(e\|\|c){const k=h=>{e&&e(h);if(c){h=a.google_image_requests;const v=Array.prototype.indexOf.call(h,d,void 0);v>=0&&Array.prototype.splice.call(h,v,1)}d.removeEventListener&&d.removeEventListener("load",k,!1);d.removeEventListener&&d.removeEventListener("error",k,!1)};f(d,"load",k);f(d,"error",k)}d.src=b;a.google_image_requests.push(d)};function p(a=null){return a&&a.getAttribute("data-jc")==="22"?a:document.querySelector('[data-jc="22"]')};var q=document,r=window;functi

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	106589
Entropy (8bit):	5.433758693135534
Encrypted:	false
SSDEEP:	1536:Qb5Uv0wWa056X1XbFL6/9YHjrx4ziYtCRl69JLtaLBrDgfnH1OBeFWySrbyqEcud:oNE1tHjiPsLBw5XSCbp
MD5:	7B2A703A03AC1BCAAD0F7E88BDF43E24
SHA1:	150ACFE06990163530941384F2A4CEF733E06030
SHA-256:	C64D6C808F46DAB854C6DA6ADA3857A214477C0F2591EB783F62A0F6FA30C7A1
SHA-512:	7FF3B1CD3CC050DDBA8C27B92C3B8E97AD2ED5C746698E9A6DC4D11D3D866F328FC99142167037BCC1C7684BBB56EA02BEA313BD2ED54E090630E7E8835A3984
Malicious:	false
Reputation:	low
URL:	https://euob.7roundprince.com/sxp/i/7d278047aab7cca6e1b3bb44e5382d20.js
Preview:	!function(t){var n={};function r(e){if(n[e])return n[e].exports;var i=n[e]={i:e,l:!1,exports:{}};return t[e].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=n,r.d=function(t,n,e){r.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:e})},r.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"_",{value:!0})},r.t=function(t,n){if(1&n&&(t=r(t)),8&n)return t;if(4&n&&"object"==typeof t&&t&&t._)return t;var e=Object.create(null);if(r.r(e),Object.defineProperty(e,"default",{enumerable:!0,value:t}),2&n&&"string"!=typeof t)for(var i in t)r.d(e,i,function(n){return t[n]}.bind(null,i));return e},r.n=function(t){var n=t&&t._?function(){return t.default}:function(){return t};return r.d(n,"a",n),n},r.o=function(t,n){return Object.prototype.hasOwnProperty.call(t,n)},r.p="",r(r.s=5)}([function(t,n,r){var e=r(1),i=window,a=i.document,c=i.location,o=encodeURIComponent,u=decodeURIComponent,f=i.navigat

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4239)
Category:	downloaded
Size (bytes):	122240
Entropy (8bit):	5.472342937051307
Encrypted:	false
SSDEEP:	1536:1/jb3s/0RgooWMFK2BnUKg9pKrxG3/rs8ycVv37bX4y52YSNeyjmFX/guM3C9spw:Nj7sbwtKgIEDfDbX4dZC9speZ8C
MD5:	91D092D1D5955231FD561F95F71D9E53
SHA1:	B55E0DB85E7720308D8B462E6149C4F1D044B354
SHA-256:	FDABCBDD258FBA8BD06935249232CA45F702A3A639BC71DEFBD2C621C5BF8DFC
SHA-512:	3D80F53A35F795084CD62AEDCD5CA80A542760ABCCF020F58D4846F57E72E5862E6F75330E67CA9211DF5D363FE3E1EDC55D7586A02B68EE72A20B472D637B7B
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},t=ca(this),v=function(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.v("Symbol",function(a){if(a)return a;var b=function(f,g){this.$jscomp$symbol$id_=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.$jscomp$symbol$id_};var c="jscomp_symbol_"+(Math.random

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26218)
Category:	downloaded
Size (bytes):	884422
Entropy (8bit):	5.789073712244685
Encrypted:	false
SSDEEP:	6144:MuOyci3Jh3gJAeAXGL3qayLeE/STDofVHQB5aH3cpuIO71HXrV0OM4MXpfdSJFqc:0ycCeAXu3+NSnofvI+1350Pd0usq6
MD5:	9E583415815CE85753A43CE7627EF085
SHA1:	0A39AF0A2242B366B4FE74BAFB92E90D3AE72596
SHA-256:	6F92632FC1F8047D8431390BDAA3AD7F424A74EDFD338903511FB5C946B805A9
SHA-512:	4594019588A46075228575DFCD6F32D3446C65770237D72B29406AB435C99CD8AA4381E41E2138A77DBE62FB6DE9C2F5FE592B1C719E62BCFBB085A71D893A38
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-chrome-webstore/_/js/k=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.en_US.lwRYVOpsj_w.es5.O/ck=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.oit6mfZoPW0.L.B1.O/am=WGow4BY/d=1/exm=_b,_tp/excm=_b,_tp,itemdetailview/ed=1/wt=2/ujg=1/rs=AEP720JOa-HBKdRRZPKO8sen3KFm9_9RpQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:QIhFr;lOO0Vd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;wR5FRb:YA1iG;xqZiqf:BBI74;yEQyxe:p8L0ob;yxTchf:KUM7Z;zxnPse:duFQFc/m=ws9Tlc,n73qwf,UUJqVe,IZT63,e5qFLc,O1Gjze,ebZ3mb,gIl2M,mI3LFb,byfTOb,lsjVmc,xUdipf,ZDZcre,OTA3Ae,ZwDk9d,RyvaUb,YYmHzb,p8L0ob,MT4Hub,h4ilFc,M0x0ie,zKiH5d,o2G9me,mUxuKd,ri2s0b,kBpGk,qv5bsb,UkbOSe,DNlSjf,Fu7Bjd,O6y8ed,MpJwZc,PrPYRd,lazG7b,LEikZe,NwH0H,V3dDOb,XVMNvd,L1AAkb,KUM7Z,s39S4,duFQFc,sI9bWe,lwddkf,gychg,w9hDv,RMhBfe,CfLNpd,SdcwHb,aW3pY,pw70Gc,mdR7q,EFQ78c,Ulmmrd,A7fCU,xQtZb,FdMhB,MI6k7c,kjKdXe,JNoxi,BVgquf,QIhFr,YA1iG,V9amgb,hKSk3e,hc6Ubd,SpsfSb,Z5uLle,BBI74,MdUzUe,zbML3c,zr1jrb,QvLWAb,Uas9Hd,pjICDe"
Preview:	"use strict";_F_installCss(".EDId0c{position:relative}.nhh4Ic{position:absolute;left:0;right:0;top:0;z-index:1;pointer-events:none}.nhh4Ic[data-state=snapping],.nhh4Ic[data-state=cancelled]{transition:transform 200ms}.MGUFnf{display:block;width:28px;height:28px;padding:15px;margin:0 auto;transform:scale(0.7);background-color:#fafafa;border:1px solid #e0e0e0;border-radius:50%;box-shadow:0 2px 2px 0 rgba(0,0,0,.2);transition:opacity 400ms}.nhh4Ic[data-state=resting] .MGUFnf,.nhh4Ic[data-state=cooldown] .MGUFnf{transform:scale(0);transition:transform 150ms}.nhh4Ic .LLCa0e{stroke-width:3.6px;transform:translateZ(1px)}.nhh4Ic[data-past-threshold=false] .LLCa0e{opacity:.3}.rOhAxb{fill:#4285f4;stroke:#4285f4}.A6UUqe{display:none;stroke-width:3px;width:28px;height:28px}.tbcVO{width:28px;height:28px}.bQ7oke{position:absolute;width:0;height:0;overflow:hidden}.A6UUqe.qs41qe{animation-name:quantumWizSpinnerRotate;animation-duration:1568.63ms;animation-iteration-count:infinite;animation-timing-func

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	899
Entropy (8bit):	4.7862829113216145
Encrypted:	false
SSDEEP:	12:TMHdNF7Qom1+1zQLVnj1pGtDv1zQLVLjXapGtD51zQLVLjXapGtD01zQLVLjXapi:2dDpmE5Yo55sqo75sqoC5sqo35sqoc
MD5:	210A5D33378FB11FBA37145FDFB0DE54
SHA1:	002F427BE7CADA01F7ABC470637590AA389550DB
SHA-256:	322E49726D45EC3A01D5848DF2082FBE6AE496DE9290F27E8334AAC285CDFB3C
SHA-512:	56A886D65F7EBA2000A5B199E21645069EBABA51769B31626A473B25DFC26694124B9C3D96A54B87B82600529F396E636B76D2CD6EB7D24ABC900D5D8EF36A57
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg id="a" xmlns="http://www.w3.org/2000/svg" width="121" height="20" viewBox="0 0 121 20">. <path d="m10.58,0l3.22,6.62,7.2,1.08-5.21,5.08,1.23,7.23-6.44-3.38-6.59,3.38,1.23-7.23L0,7.69l7.2-1.08L10.58,0Z". style="fill:#f66;"/>. <path d="m35.58,0l3.22,6.62,7.2,1.08-5.21,5.08,1.23,7.23-6.44-3.38-6.59,3.38,1.23-7.23-5.21-5.08,7.2-1.08,3.37-6.62Z". style="fill:#f66;"/>. <path d="m60.58,0l3.22,6.62,7.2,1.08-5.21,5.08,1.23,7.23-6.44-3.38-6.59,3.38,1.23-7.23-5.21-5.08,7.2-1.08,3.37-6.62Z". style="fill:#f66;"/>. <path d="m85.58,0l3.22,6.62,7.2,1.08-5.21,5.08,1.23,7.23-6.44-3.38-6.59,3.38,1.23-7.23-5.21-5.08,7.2-1.08,3.37-6.62Z". style="fill:#f66;"/>. <path d="m110.58,0l3.22,6.62,7.2,1.08-5.21,5.08,1.23,7.23-6.44-3.38-6.59,3.38,1.23-7.23-5.21-5.08,7.2-1.08,3.37-6.62Z". style="fill:#f66;"/>.</svg>

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	71003
Entropy (8bit):	3.944709134639949
Encrypted:	false
SSDEEP:	1536:fyJzKdxerk+5SczodW0Jlg2d6G88F5/NEOe:kk15S
MD5:	FD363CB3479032144561992C79F9047B
SHA1:	E55293674CC7CD1B8CB2EC1FBC4EBDB04E6A83AB
SHA-256:	B1194E97C1F8D350CF8458012DFF4E1975B08A5B8C17F2C90A658E9349123522
SHA-512:	3C1A7155944EA4A6F548A63A7AA7643EE8243B96E22C1A7D283B20D86539D2364B5E83DF82F8FF5543D1BD1D29F33C4375FF007FD1E927B7FBCAED90DE1B1F45
Malicious:	false
Reputation:	low
URL:	https://cdn.protectonow.com/ext/TOOLTIP_1701944305.svg+xml
Preview:	<svg width="231" height="119" viewBox="0 0 231 119" fill="none" xmlns="http://www.w3.org/2000/svg">.<g filter="url(#filter0_d_108_52)">.<path d="M217 3H13C10.79 3 9 4.79 9 7V21L4 26L9 31V104C9 106.21 10.79 108 13 108H217C219.21 108 221 106.21 221 104V7C221 4.79 219.21 3 217 3Z" fill="white"/>.<path d="M9.35347 21.3536L9.49992 21.2071V21V7C9.49992 5.06614 11.066 3.5 12.9999 3.5H217C218.934 3.5 220.5 5.06614 220.5 7V104C220.5 105.934 218.934 107.5 217 107.5H12.9999C11.066 107.5 9.49992 105.934 9.49992 104V31V30.7929L9.35347 30.6464L4.70703 26L9.35347 21.3536Z" stroke="#D3D3D3"/>.</g>.<path d="M32.9062 19.2227H34.3711C34.3242 19.7812 34.168 20.2793 33.9023 20.7168C33.6367 21.1504 33.2637 21.4922 32.7832 21.7422C32.3027 21.9922 31.7188 22.1172 31.0312 22.1172C30.5039 22.1172 30.0293 22.0234 29.6074 21.8359C29.1855 21.6445 28.8242 21.375 28.5234 21.0273C28.2227 20.6758 27.9922 20.252 27.832 19.7559C27.6758 19.2598 27.5977 18.7051 27.5977 18.0918V17.3828C27.5977 16.7695 27.6777 16.2148 27.83

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	432
Entropy (8bit):	5.281272828455501
Encrypted:	false
SSDEEP:	12:hYA0HqJmqGB79hLFBkAAqJmPm/esHbm4Nbx4IQL:hYPcBYBvPz7m4NW
MD5:	9469AD65BAB1D484F67944639622A524
SHA1:	BD84913325F597DB836CB219CB04F1721560F16B
SHA-256:	59DD5844BA8CE4D83A2AD0E4243FCC1A34348DD704676F4D8A146E7C9E920021
SHA-512:	CDE2F377863D4E2119D26E58D17316DD38240CA73297179A8DE17D8624F5ED643538E9CF4AE1D3B5715810D30BAD1EF7830E5A268AF935D3CBE63F936ED32D0F
Malicious:	false
Reputation:	low
URL:	https://scone-pa.clients6.google.com/static/proxy.html?usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.gapi.en.l2ZUC8FxqV8.O%2Fd%3D1%2Frs%3DAHpOoo9xAAkaXO7Lqf7-9uTpZLtrkpWaXQ%2Fm%3D__features__
Preview:	<!DOCTYPE html>.<html>.<head>.<title></title>.<meta http-equiv="X-UA-Compatible" content="IE=edge" />.<script type="text/javascript" nonce="5s9N2hTwrhp6UUE4n3HtTA">. window['startup'] = function() {. googleapis.server.init();. };.</script>.<script type="text/javascript". src="https://apis.google.com/js/googleapis.proxy.js?onload=startup" async. defer nonce="5s9N2hTwrhp6UUE4n3HtTA"></script>.</head>.<body>.</body>.</html>.

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2479
Entropy (8bit):	4.538573334410749
Encrypted:	false
SSDEEP:	48:YLWxx3lSxKccuYYHUYdYgtjwiSxMJcuYYHWK:4WxxVojlVtBoMZv
MD5:	9F3DACB24DE7F6204C8B70593E6B4BF4
SHA1:	42103D3293AB961EE5948EF67B3334FFAB210FF2
SHA-256:	E4991F3B1E444AF1BF1B5E07ECFB38CADF2599619F5078709C139F046FC9E52D
SHA-512:	975E88629CB1D8BC46AF6A50F22B33885124BC75BF6501EF8DA06F4AA54135CD21EC86E277450EC8774F2A9CA18D736E9B8D6928E9C32C67E095A584273AEBC6
Malicious:	false
Reputation:	low
URL:	https://cdn.protectonow.com/ext/loader_1698324395.json
Preview:	{"v":"4.8.0","meta":{"g":"LottieFiles AE 3.4.5","a":"","k":"","d":"","tc":""},"fr":29.9700012207031,"ip":0,"op":20.0000008146167,"w":60,"h":60,"nm":"loader","ddd":0,"assets":[],"layers":[{"ddd":0,"ind":1,"ty":4,"nm":"Shape Layer 2","sr":1,"ks":{"o":{"a":0,"k":100,"ix":11},"r":{"a":0,"k":0,"ix":10},"p":{"a":0,"k":[37.273,27.523,0],"ix":2},"a":{"a":0,"k":[22.773,-9.227,0],"ix":1},"s":{"a":0,"k":[100,100,100],"ix":6}},"ao":0,"shapes":[{"ty":"gr","it":[{"d":1,"ty":"el","s":{"a":0,"k":[46,46],"ix":2},"p":{"a":0,"k":[0,0],"ix":3},"nm":"Ellipse Path 1","mn":"ADBE Vector Shape - Ellipse","hd":false},{"ty":"st","c":{"a":0,"k":[0.105882360421,0.349019607843,0.913725550034,1],"ix":3},"o":{"a":0,"k":100,"ix":4},"w":{"a":0,"k":8,"ix":5},"lc":1,"lj":1,"ml":4,"bm":0,"nm":"Stroke 1","mn":"ADBE Vector Graphic - Stroke","hd":false},{"ty":"tr","p":{"a":0,"k":[15.441,-6.056],"ix":2},"a":{"a":0,"k":[0,0],"ix":1},"s":{"a":0,"k":[100,100],"ix":3},"r":{"a":0,"k":0,"ix":6},"o":{"a":0,"k":100,"ix":7},"sk":{"a":

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	32038
Entropy (8bit):	3.6482727631486385
Encrypted:	false
SSDEEP:	192:BapwqWLvl4VVD3gI+3DB10QQp2TSavb9XhUTDg7Fcp3eD8vdoN7D:BaiqWp4v3gz3Yt2mavb9XhUea3E8l
MD5:	E8D009E34AA14FD014772018C4F7E402
SHA1:	F8B44D6E1F61044BF31AC14A830437718A5389C6
SHA-256:	76BF9BA07053AE43B98354707919EDFB22EA913449D190785A5446D8D8D94CAA
SHA-512:	4BD3FD1E4E8D9B30403A1EF17F061A53FA1ACCDC282561E01A2CB26D9C57C8325D356B86C89CDB44A5013A6793261C799450014E86788904B008DF545C3716A5
Malicious:	false
Reputation:	low
Preview:	............ .h...F... .... .........00.... ..%..V...@@.... .(B...:..(....... ..... .........................j<..j<..j<..j<..j<..j<..j<..j<..j=..j<..j<..j<..k=..j<..j<..j<..j<..j<..j<..j<..j<..l>..l>..i;..i;..k>..m?..k=..f7..j<..j<..j<..j<..j<..j<..j<..l?..b2.._-..k=..l>..a0..]+..f6..{R..j<..j<..j<..j<..j<..j<..k>..`/...lB...................g.........`/..l?..j<..j<..j<..l>..a0....~..........j>..h:...\|..........zX.a0..l?..j<..j<..l>..a0...vQ......Z,.Z'..a0..a0..]*..pD........w._-..l?..j<..j<..k=..c3........s.[)..k=..sH..wM..j;.._-...tQ.....k>..i;..j=..k=..g8..wM......}T&.c3..zQ...........`1.d4..oC.......c4.c3..k>..k=..f6..\|T......xO..`0...f9..........}W.a0..l?.......k>.b2..l>..j=..i;..k>.......kF.b2..j;....b...r.l>..e6..\|S'.....xO..f7..k=..j<..l?..^-..........]+..f6..c3..b1..g9..X%........`/..l>..j<..j<..k=..i:..l?.........vK..d4..d4..pD.........vL..f7..k=..j<..j<..j<..k>..f7..oC.........................yO .d4..l>..j<..j<..j<..j<..j<..k>..h9..`....Y'...b...f..a0.a1..f6..l>..j<..j<

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	286227
Entropy (8bit):	5.244797398196451
Encrypted:	false
SSDEEP:	1536:3Up64eeYPBFb63U4tVELX2dZKYNsKVUUv5zdwW+DKlDpd3Q0AkcBgpo/B6to0dW8:3hFb63UTXM3/5+Z620dDlg7NMF2g
MD5:	574A2E114AF73DC8D9C40EEA6AFD4713
SHA1:	C2706EAB4BA3F86B5A70E29D8409751676BA5E78
SHA-256:	7DE1F2A90E53AC820D48EB0B51F21EC5CD02104BB6D63D2FF1BFA63D728D6871
SHA-512:	C88199E96A2D5D643D2ED632E9D1D75139B90ECA263B7F3686E281291F87A6177021BC4780BB803D12C9328CC77288ECF25F7DD4135E184E3303E3D01AED4793
Malicious:	false
Reputation:	low
URL:	https://software.informer.com/style/v4/min/program.min.css
Preview:	*,::before,::after{box-sizing:border-box}body,h1,h2,h3,h4,p,figure,blockquote,dl,dd{margin:0}body,input,textarea,select,button{font-synthesis:none;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}ul,ol{list-style:none;padding:0;margin:0}html{scroll-behavior:smooth;overflow-x:hidden}body{min-height:100vh;display:flex;flex-direction:column;text-rendering:optimizeSpeed;line-height:1.5}footer{margin-top:auto}img,picture{max-width:100%;display:block}input,button,textarea,select{font:inherit}.sticky{display:none}body{background-color:#f2f2f2}header{margin-bottom:0;box-shadow:0 0 7px .5px rgb(0 0 0/18%)}body>.wrapper-content{margin-bottom:0;margin-top:0;background-color:#fff;padding-top:22px;padding-left:22px;padding-right:22px;box-shadow:0 -5px 7px .5px rgb(0 0 0/18%);flex-grow:1}.aaa0 img{-o-object-fit:contain;object-fit:contain}.top_b,.adst{margin-bottom:40px}.right_b{margin-bottom:40px}.top_b:not(.lclbnr),.aa-650,.top_ab,.top_b ins,.top_ab ins,.aa-650 ins{height:100px!

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (11822)
Category:	dropped
Size (bytes):	11824
Entropy (8bit):	5.2927390094370335
Encrypted:	false
SSDEEP:	192:O9d9uZiYB+zsjBHN5whvID3YMYSPSWQ55aTkcfChQY+DdlZ7hJfLHmJIBu:Ee2zsNHHwlIDhPSZ550kcfChQtvJfxBu
MD5:	659A1EC658C77B9C936C856B9B72A548
SHA1:	C1076FE1A694D561FFAA673793CB6418763FA1E4
SHA-256:	B2D12B381E4F471679E903D6C8FE634AB8DDA43764168C8F3C1EE1269FE7EDAB
SHA-512:	77F2057B03E14C9378F6C6CB087263D7239EDA44D57104DF48105B88938656F594BD68DCAD9CDA0409AFDB78205C872B65F63816146923676F522C3626232558
Malicious:	false
Reputation:	low
Preview:	export function __vite_legacy_guard(){import.meta.url;import("_").catch(()=>1);(async function*(){})().next()};var t="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},n=function(t){return t&&t.Math===Math&&t},r=n("object"==typeof globalThis&&globalThis)\|\|n("object"==typeof window&&window)\|\|n("object"==typeof self&&self)\|\|n("object"==typeof t&&t)\|\|n("object"==typeof t&&t)\|\|function(){return this}()\|\|Function("return this")(),e={},o=function(t){try{return!!t()}catch(n){return!0}},i=!o((function(){return 7!==Object.defineProperty({},1,{get:function(){return 7}})[1]})),u=!o((function(){var t=function(){}.bind();return"function"!=typeof t\|\|t.hasOwnProperty("prototype")})),c=u,a=Function.prototype.call,f=c?a.bind(a):function(){return a.apply(a,arguments)},l={},s={}.propertyIsEnumerable,p=Object.getOwnPropertyDescriptor,y=p&&!s.call({1:2},1);l.f=y?function(t){var n=p(this,t);return!!n&&n.enumerable}:s

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (654)
Category:	dropped
Size (bytes):	560258
Entropy (8bit):	5.668859512958225
Encrypted:	false
SSDEEP:	6144:QStgGd8JmYx0sb6h8YfALjbBksK8ecdy7FdzZA96fcJ2fL2iJ5B7lXaqy2:Gn8hALjbispecknzXfIKhX7
MD5:	19DDAC3BE88EDA2C8263C5D52FA7F6BD
SHA1:	C81720778F57C56244C72CE6EF402BB4DE5F9619
SHA-256:	B261530F05E272E18B5B5C86D860C4979C82B5B6C538E1643B3C94FC9BA76DD6
SHA-512:	393015B8C7F14D5D4BDB9CCEED7CD1477A7DB07BC7C40BAE7D0A48A2ADFA7D56F9D1C3E4EC05C92FDE152E72FFA6B75D8BF724E1F63F9BC21421125667AFB05C
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var X=function(){return[function(N,a,U,y,A,l,z){if((l=["toString",6,"constructor"],N&71)==N)if(typeof U==="string")z={buffer:Z[11](17,1,a,U),qH:!1};else if(Array.isArray(U))z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===Uint8Array)z={buffer:U,qH:!1};else if(U[l[2]]===ArrayBuffer)z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===WC)z={buffer:r[9](25,a,null,U)\|\|new Uint8Array(0),qH:!0};else if(U instanceof Uint8Array)z={buffer:new Uint8Array(U.buffer,U.byteOffset,U.byteLength),qH:!1};else throw Error("Type not convertible to a Uint8Array, expected a Uint8Array, an ArrayBuffer, a base64 encoded string, a Byt

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (38050)
Category:	downloaded
Size (bytes):	86004
Entropy (8bit):	5.326756382678693
Encrypted:	false
SSDEEP:	768:B2vFYP9aBECQPKUljh5aHU5VY+efjVA+YBKpnui2ywVpMU1rwJ/+UfQb6:B23+23jkunuiBwVpMU1rwJBfY6
MD5:	C823682E6FE6F3832E36B0750F6F7D98
SHA1:	B7D233324655C7AAB0EF9F2DA6C9280DBCC8A99D
SHA-256:	893572A09CE00C904F0BECCB442D6E46835F9078F8622B2DD82ADBB5F853ABD2
SHA-512:	F996648A0B7B622ED9AAF58351473D706EE90185E33F720DB5ACDE863691420FE44F9102691F74BB6B3B6C26E45723B230AE2550F30C76376450D0BE99EF5281
Malicious:	false
Reputation:	low
URL:	https://nuance-pdf-professional2.software.informer.com/7.2/
Preview:	<!DOCTYPE html>.<html lang="en-US">.<head>.<meta charset="UTF-8">.<title>Nuance PDF Converter Professional 7.2 Download (Free trial)...</title>.<meta name="description" content="Nuance PDF Converter Professional version 7.2 (PDFPlus.exe). PDF Converter Professional is smart yet simple-to-use software that lets business users improve...">.<meta name="viewport" content="width=device-width, initial-scale=1">.<meta property="fb:app_id" content="290876971021585">.<link rel="canonical" href="https://nuance-pdf-professional2.software.informer.com/7.2/">.<link rel="shortcut icon" href="https://software.informer.com/favicon.ico" type="image/x-icon">.<link rel="preconnect" href="//img.informer.com">.<link rel="dns-prefetch" href="//img.informer.com">.<link rel="preconnect" href="//www.googletagmanager.com">.<link rel="dns-prefetch" href="//www.googletagmanager.com">.<link rel="preconnect" href="//pagead2.googlesyndication.com">.<link rel="dns-prefetch" href="//pagead2.googlesyndication.com">.<li

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7186
Entropy (8bit):	4.836201932278951
Encrypted:	false
SSDEEP:	96:hGYTNAmuRrdZq5uK6JTBEzjx1R3grWqFDlNRPbRBSDtowkEhB8i69C0ygtF1Dv2A:hhurjqRHRKN1z28i69C07pCf2
MD5:	8C60A5FFF44A21029782636442D249D4
SHA1:	79114A95A3695870106ECDE04A8F127EC1C3898D
SHA-256:	18851BB2CF7B00826E87DA430999706BB3813BDE4A1FDD99B34ED7CB8EBC7F20
SHA-512:	C28CECDEC6B9F9360A75A6CE2810245F094ACB8B74061937B40F12BE8C3CD6D1D8B08172CB68A3E4E89AAEFCB1D74789728B3F6C25D8D91937EAB7B6C0FA20B0
Malicious:	false
Reputation:	low
URL:	https://cdn.bidbrain.app/ext/Footer-Logo_1720602781.svg+xml
Preview:	<svg width="191" height="52" viewBox="0 0 191 52" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0)">.<path d="M33.5879 0C33.5879 0 30.8935 9.20916 26.0592 12.7817C24.078 15.084 13.2208 23.5786 9.81302 21.0382C5.53354 17.6244 9.81302 6.11298 9.49603 6.19237C8.06953 6.50992 -0.251692 15.4015 0.144557 27.6275C0.223807 31.2 1.25405 36.7573 4.26554 40.6473C7.35628 44.7756 12.4283 45.0137 13.1415 44.1405C15.519 41.2824 18.6097 37.313 23.6025 37.7893C32.6369 38.6626 32.5577 51.9206 32.5577 51.9206C34.3804 51.2855 47.0604 38.5038 44.9999 20.4031C43.8112 10.0824 39.2939 3.25496 33.5879 0Z" fill="url(#paint0_radial)"/>.<path d="M39.6107 5.39847C37.8672 3.09618 35.8067 1.27023 33.5877 0C33.5877 0 27.2477 12.0672 22.4135 15.6397C20.4322 17.942 13.696 21.7527 10.2883 19.2122C6.00879 15.7985 9.73353 6.11298 9.41653 6.19237C8.06928 6.50992 -3.42193 29.0565 16.7075 30.0886C31.9235 30.8824 44.9204 20.4031 44.9204 20.4031C44.2864 14.1313 42.3052 9.05038 39.6107 5.39847Z" fill="u

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	17402
Entropy (8bit):	6.016841730418344
Encrypted:	false
SSDEEP:	384:0mHDP3y0JBMzGyIlUhztsV8Nku/GyMgopfviZPxKObNKj3IgM3xHbvU:h7C0J4wlMZsV82uzMgo4ZPxpi3IgB
MD5:	BF8F65BBD809B31F89FE8DAD17C3FD6F
SHA1:	6571E5A664CFF91ADFBB36BB1C3BD993CB3B975A
SHA-256:	DEF1A6707FDD4D2EA88C202F19A7083B4C8E67D4CC1FE25F6372D9730ED6A21B
SHA-512:	55BB5C1A00307336EAF937514DC31DE07429BAA165631D49AE839F5F7DC8D23583F4C4910C7AC3E206E645E410CBDCECE7F92D78DD244EA93629D8695E78DC1C
Malicious:	false
Reputation:	low
URL:	https://ep1.adtrafficquality.google/getconfig/sodar?sv=200&tid=gda&tv=r20250113&st=env
Preview:	{"sodar_query_id":"vDSIZ4vFAe6DjuwPzKGiyQg","injector_basename":"sodar2","bg_hash_basename":"dNIx5DWZp-OCvb2UxgrLm6p_sBgxbD3rZA99js5av7Y","bg_binary":"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

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 275 x 175, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	26902
Entropy (8bit):	7.98496260687522
Encrypted:	false
SSDEEP:	768:TNi4cUfw1IsfnoqdkfQAALHoeBwlgfYNLsHg86eO:hcUIfEQ1IeOosLRv
MD5:	AAC92A708249C5EAE6F8705D71B80ECC
SHA1:	9F4695390EB2AFDE5F87279A711C209924FC353C
SHA-256:	38E06AF0B7465191A2C7253C20B7AB981F3D1ED9C0039DB42CA78C04524B2EFB
SHA-512:	A0AA35E54120D3913C83617E9488939909A256C104485755AD788D2FF0E307942B34607FB124177ECB0CDA8FDDFAAC0B484E9154E85488E35883983BD19DC97B
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/BKHuX2DD95zO1DoQSIHyXH8_F9Ik4ADuI1XxoAT5L2OTASpb1WOd69fnhHBop3GdxSYFFkLGQS-h8atDYI5f9nhd6fo=s275-w275-h175
Preview:	.PNG........IHDR.............Q..U....sBIT.....O... .IDATx..]wxT..~.m..lz..:H.D....EQTlX..bo..+(v.D....R...H.I..m.Mv........4BD4~.><d...3..9s..RSF..^\ ..../.h..r..^..^......9^x..x9../../.x.E[.../.h.....m..s..-.r..^..^..........A.........y.....B.0.`..n...JA)X......<(.$..z.>._..B@.p,j-H=!fg.9Y....JX..%.....Qq$<...e;ue. I....t/....i...B.#..7.....`\|.VC.G(K(.%D. .....R....2..p9.......h-.#.C..AQ..vY...I..TFF&....d.."...@.A%P..D.a).}.1z.7j.* ..w....._....,a..?.l....X".P...2.L@......P.7..#C..,...jy.....}8xM.^...sX........p..2!`.L......@d.Y&...m.Le....D;....g.7OU1..y.h...B.........p.....R.@.. .^GD...A...V.0`8.............c..A..]...j..-..s...P~...\@.F..PJ(.(.5....v...0&.k02.!.Uf...b..!..v....C......0...7..K...1..y....^9....ya.9../.@)..PK....f.....VG.Z.........t.Vq..MT..^.BA..L!.....lS...........a........6....,..t.8...y]L.......;.%..g..~) .L.L2..Kv.:wcE..Y.g...@....6.^..../"...[....F...%.,r....2.' ...........oK.5U......+...0.2.:Du`f......1D)]....

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2034)
Category:	downloaded
Size (bytes):	21514
Entropy (8bit):	5.402044114976701
Encrypted:	false
SSDEEP:	384:xB8YlQ+AIfTDurzaxswMMx0taqPDq1sxyMashEzVfLlz26z/rPJpPG+gtZ:xB8YiAfT5swMMx0tJ29jsuzVpF/7TPGl
MD5:	C5AD71CA37EE3D73ACC6C660E51DBF3E
SHA1:	24F0A3DACF1D6C8F366B5A61018B7800E099E135
SHA-256:	DE53389A86429CEF102E32FD677C4155E16808A39C7127DF4C0AB795C7E2FE8C
SHA-512:	0BA4C200460F53161A83B6A114E2F0732DDC0DCDB37949C36349AFF3493C5A860EC77BEB13567679BF429ACCC1FF77B857BA1A1C6F079E86DFB8937912E7CA18
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-chrome-webstore/_/js/k=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.en_US.lwRYVOpsj_w.es5.O/ck=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.oit6mfZoPW0.L.B1.O/am=WGow4BY/d=1/exm=A7fCU,AWpPDd,BBI74,BVgquf,CfLNpd,DNlSjf,EFQ78c,EKHvcb,FdMhB,Fu7Bjd,HsQQib,IZT63,JNoxi,KUM7Z,L1AAkb,LBaJxb,LEikZe,LcrBLd,M0x0ie,MH0hJe,MI6k7c,MT4Hub,MdUzUe,MpJwZc,NwH0H,O1Gjze,O626Fe,O6y8ed,OTA3Ae,OhgRI,PIVayb,PrPYRd,QIhFr,QVysJe,QvLWAb,R6rk4,RMhBfe,RiINWe,RyvaUb,SdcwHb,SpsfSb,UUJqVe,Uas9Hd,UkbOSe,Ulmmrd,V3dDOb,V9amgb,VBl5Ff,XVMNvd,YA1iG,YYmHzb,Z5uLle,ZDZcre,ZvHseb,ZwDk9d,_b,_tp,aW3pY,bZ0mod,byfTOb,cephkf,dsBBae,duFQFc,e5qFLc,ebZ3mb,gIl2M,gychg,h4ilFc,hKSk3e,hc6Ubd,i8oNZb,kBpGk,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mUxuKd,mdR7q,n73qwf,o2G9me,p8L0ob,pjICDe,pw70Gc,qv5bsb,ri2s0b,rm99Nc,s39S4,sI9bWe,sQ8PT,tw4SJc,w9C4d,w9hDv,ws9Tlc,xQtZb,xUdipf,zKiH5d,zbML3c,zr1jrb/excm=_b,_tp,itemdetailview/ed=1/wt=2/ujg=1/rs=AEP720JOa-HBKdRRZPKO8sen3KFm9_9RpQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:QIhFr;lOO0Vd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;wR5FRb:YA1iG;xqZiqf:BBI74;yEQyxe:p8L0ob;yxTchf:KUM7Z;zxnPse:duFQFc/m=p3hmRc,LvGhrf,RqjULd"
Preview:	"use strict";this.default_ChromeWebStoreConsumerFeUi=this.default_ChromeWebStoreConsumerFeUi\|\|{};(function(_){var window=this;.try{.var uI;._.wI=function(){var a=uI(_.Ae("xwAfE"),function(){return _.Ae("UUFaWc")}),b=uI(_.Ae("xnI9P"),function(){return _.Ae("u4g7r")}),c,d,e,f;return(f=vI)!=null?f:vI=Object.freeze({isEnabled:function(g){return g===-1\|\|_.If(_.Ae("iCzhFc"))?!1:a.enabled\|\|b.enabled},environment:(c=_.Am(_.Ae("y2FhP")))!=null?c:void 0,Mx:(d=_.Am(_.Ae("MUE6Ne")))!=null?d:void 0,ij:(e=_.Am(_.Ae("cfb2h")))!=null?e:void 0,Jh:_.Dm(_.Ae("yFnxrf"),-1),iF:_.Cg(_.Ae("fPDxwd")).map(function(g){return _.Dm(g,0)}).filter(function(g){return g>0}),.aJ:a,MI:b})};uI=function(a,b){a=_.If(a);return{enabled:a,On:a?_.Qd(_.Em(b(),_.xI)):Wha()}};_.xI=function(a){this.Ga=_.z(a)};_.F(_.xI,_.D);var Wha=function(a){return function(){var b;(b=a[_.Ed])\|\|(b=new a,_.mc(b.Ga),b=a[_.Ed]=b);return b}}(_.xI);var vI;._.n("p3hmRc");.var lia=function(a){a.ma=!0;return a},mia=function(a,b,c,d){this.transport=a;thi

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3801)
Category:	dropped
Size (bytes):	29151
Entropy (8bit):	5.295777996304536
Encrypted:	false
SSDEEP:	768:ApIuFeJon0wKBIPK0vXoByYjHWDzswJs+X9hJYBnCkqAP35o3Br8MfMOsr2l+X9s:ApIuFeJon0wKBIPK0vXoByYjHWDzswJB
MD5:	5152860A5D0652DF0A3307574D5C000D
SHA1:	5CA0CBFA429F0FB2642D67988482C86175A5BA29
SHA-256:	5FDE813DB1928D0DF28441EACCB3158806652425DF9ECFB4A1FB021F3F5E8F65
SHA-512:	9FE4624BC2E8CE670A0A32BC325890C7CFB0546AF6716186B0039412E634C8C1F56BC61CF356892E454ADADED87BFEBE02C9F861FE8E49FCBDCF26D54FF6FEB1
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html class=" responsive" lang="en">.<head>..<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">....<meta name="viewport" content="width=device-width,initial-scale=1">...<meta name="theme-color" content="#171a21">...<title>Sign In</title>..<link rel="shortcut icon" href="/favicon.ico" type="image/x-icon">.......<link href="https://store.fastly.steamstatic.com/public/shared/css/motiva_sans.css?v=YzJgj1FjzW34&l=english&_cdn=fastly" rel="stylesheet" type="text/css">.<link href="https://store.fastly.steamstatic.com/public/shared/css/shared_global.css?v=LkH7FFmHUNxE&l=english&_cdn=fastly" rel="stylesheet" type="text/css">.<link href="https://store.fastly.steamstatic.com/public/shared/css/buttons.css?v=ecbk11GZ8OUy&l=english&_cdn=fastly" rel="stylesheet" type="text/css">.<link href="https://store.fastly.steamstatic.com/public/css/v6/store.css?v=p1S4tSu2k8Oq&l=english&_cdn=fastly" rel="stylesheet" type="text/css">.<link href="htt

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 404 x 280, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	57666
Entropy (8bit):	7.993278661469849
Encrypted:	true
SSDEEP:	1536:Yl4a+rMkzvXSyaf6vg0HXXZI5OTq31AiO/2fgkDFpRdZQ:Yl4bzvXSLf69XZ7f72fg0FQ
MD5:	6C4E9EC43A81C34200DEAE1A6A01C718
SHA1:	0BDD4834C4633873334367CD47E4D1A9EB2586F0
SHA-256:	5401F9C6F4EB9F026B7F3CCFD049D692565A52E2BB72FD4DB6353E3F3731E9D3
SHA-512:	26ADC9EEFD42A70DCEFDBE087D776E4D5344A687405A9B0EBE467BD1E09BEB1A7262D4174240AC5413A30D345F2F156749A339169980B3C80E4D2E7C079B8A8F
Malicious:	false
Reputation:	low
URL:	https://img.informer.com/p5/nuance-pdf-converter-professional-v8-main-window-display.png
Preview:	.PNG........IHDR.............Li.1....gAMA......a.....sRGB........ tEXtjpeg:sampling-factor.2x2,1x1,1x1I.......tEXtjpeg:colorspace.2,uU....%tEXtdate:modify.2016-08-30T11:38:57-04:00=>.T...%tEXtdate:create.2017-11-10T03:39:08-05:00 .m....AtEXtcomment.CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85.........pHYs...H...H.F.k>....PLTE.............................................................................................................................................................................................................................................::9...uvv...}}\|..................................hii............................oppx{l.......x.....y...qse......p\|}y........T^_.......y..m...q..y.............................itu.........ij]...............\cd.....................p..ec^W...............z...w.......o.....mYWR....!........g...JRR...DFB...1...1.UM@GG X^-....pknsB...Idc....^^hg3{....U37#..}............g......cy.C...{CCSo......

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2526)
Category:	downloaded
Size (bytes):	23270
Entropy (8bit):	5.503833775820013
Encrypted:	false
SSDEEP:	384:yio8su2naz/rbhhy/6IbtS/4ouK87eU2w6wqpPBZ5AE3VnIJq9cLcuy4nDEWyDY9:yi3sVnaz/rbhQPAAouK87eUp6JPZCE3k
MD5:	519FBC47D014ED898E08CD32411DA107
SHA1:	36ABBEC560F1031F008E2FBFA1968C7AFE63ADF6
SHA-256:	04581663A590A3B051B88AA91A71C8941E064D62839993B3F47FF8AA1B21017B
SHA-512:	AA02876DA3FBE91D74C8CD88A47BA2DF2379725A05D7B4C8C3BAB891CB808AEB29FC3BC05A8EC96CF177437ED6986F7104759E0975FC98C8BFD161CCA28AE843
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20250114/r20110914/abg_lite_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function aa(a){return a};function ba(a){m.setTimeout(()=>{throw a;},0)};var da,n;a:{for(var ea=["CLOSURE_FLAGS"],p=m,fa=0;fa<ea.length;fa++)if(p=p[ea[fa]],p==null){n=null;break a}n=p}var ha=n&&n[610401301];da=ha!=null?ha:!1;var q;const ia=m.navigator;q=ia?ia.userAgentData\|\|null:null;function ja(a){return da?q?q.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function u(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return b.indexOf(a)!=-1};function v(){return da?!!q&&q.brands.length>0:!1}function ka(){return v()?ja("Chromium"):(u("Chrome")\|\|u("CriOS"))&&!(v()?0:u("Edge"))\|\|u("Silk")};function la(a){la[" "](a);return a}la[" "]=function(){};!u("Android")\|\|ka();ka();u("Safari")&&(ka()\|\|(v()?0:u("Coast"))\|\|(v()?0:u("Opera"))\|\|(v()?0:u("Edge"))\|\|(v()?ja("Microsoft Edge"):u("Edg/"))\|\|v()&&ja("Opera"));let ma=void 0;var na=new Set;function oa(a,b=!

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 126516, version 0.0
Category:	downloaded
Size (bytes):	126516
Entropy (8bit):	7.989754530935444
Encrypted:	false
SSDEEP:	3072:wcz8p/h+OSOeXhcb8r3ebQ3qmryEx87A/0jTk:wczk4xOeyb8rc7KxaAMXk
MD5:	8099F571CCAC0D27D8FEDD2CE93E6E68
SHA1:	AA49813DF53E6A97D86412CC2C6DB6903C6D4D97
SHA-256:	1967BC4D3F937E71A565C1D818AAE0DC7D1BA9AF9C1B25C32F8F5F3C0307EE2F
SHA-512:	B5D62EA1CE7D60FD0614E855E4EB141D8F2F04A0475395038F1E9B65D74E30AD396F6E30608E73C3BDF87520970D23022D8DF82F4CA81CFE6AC209E1F5F5EE28
Malicious:	false
Reputation:	low
URL:	https://nuance-pdf-professional2.software.informer.com/fonts/SourceSansPro-SemiBold.woff
Preview:	wOFF.......4......Q.........................BASE.......J....d.\.FFTM............\|.GDEF..f....b....R.VLGPOS...p..dZ.......GSUB..hH..!'..<R.T.SOS/2...$...X...`^...cmap...@.......j....cvt ... .......X..fpgm...........s.Y.7gasp..f.............glyf..........K....head.......6...6.#..hhea.......!...$...Whmtx...\|.......^.0.loca...L.......d...maxp....... ... ....name..?$...A.......[post..Dh.."r..K.p...prep.......S...VS..8.......`...S_.<..................?\..8...n..............x.c`d``...=......,8...".}:...................k....................x.c`f.g.``e``........1...Q.(..............(.....N.......3......\|.QP..q>H..5.. .....,i..x...pV..../.HQV!$!D$...R(K."............7.].....Ju:jm.....E.pi..ua.nSw..D+j K^..\|.}..`.f..{...{.....t..M..6x.Ls.d.wr6..UJ..Y.\...F.D..m...u.[.W!...7S.....g.\.:p.....V.H.6KI.P...q..!..H....y..^...<....I.W........<.>K....o..>7>..1..r.;....R.:f1.3.?..g..R....t..@.zD..a....\|.o.&.N..s....%../(.........\.@...2...x.W..g....."..0~....=.....^.

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1920 x 1080, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	147031
Entropy (8bit):	7.966669504461104
Encrypted:	false
SSDEEP:	3072:9IdUbttXq3FNvCJUBvXb00KpsWErZKa8Zf3nBCPYN6n0A/tbK76gmCsE6iuIl:9cUH0/WUBPplWAq776gmJq
MD5:	A8213F8FF936D3D243179CAF3AD39BA6
SHA1:	E3CA142251EBD3C5563D5BE4F9D4BFBC413FC108
SHA-256:	34EB36214442B970616F901D6552C914298F8440E78B1C01F2BD016FB7882A03
SHA-512:	8AC74F7AFD1DB310428C377840A65C63321C150261CCAF7F03894A797503642A3A751CD94203040E0734E29C6A708AAE621779971514A21E2569257F4960AFB2
Malicious:	false
Reputation:	low
URL:	https://cdn.protectonow.com/bg1_1735475692_1920x1080.png
Preview:	.PNG........IHDR.......8.......1q...~PLTE.................................................................................................................................@..=.IDATx...w.0...F...C.u].........I...<BB..y...BR.{.y.{..I'eR..fZ.....'{^..NTK...].%...X....J...DZ)..K(...Q.3..D.]Y.D=.Q.ZE...'ieUd.~..?5U....XQ.........R......e.....L.. {. ,.D..!U..5WU95.+u..r7..;7t_U..........^.;..k].....\...{...6e.....7.cD...A..f..SC....K.O....1.??..}...\|.}.k6i.I..8.2....Z.....c.xi.".F.%.i..8.i..];.@...g..._...<#.........?..Rt.caO.....=qg......h....Ke..9.55.W..}.$..Z..XU....r..AcfuId.g..._.........y..x.i..m{..!._....Zz./..w..8.._<.....=.F.c..K..-{3Y;.6.....;.fA..........3a.& ..P.?\|..P.ie.[...'....;P.6..MjU..(,./Mnqr..Y.5-1..[0.....m..c.s..._hQ.v.............0.?./....;...@.t...=..8.....]......6.../;=.....,K...OJQm.h.f............!....!c...+..L...:.....'5.6..5.{+..Dq>..&..Q..s.{.i..'..[...[`....u.4.r.8g....<..(...U....:...a..}l.1.....{MN...}...4....{w.p.

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3160)
Category:	dropped
Size (bytes):	20762
Entropy (8bit):	5.534161653662071
Encrypted:	false
SSDEEP:	384:ElV/MfTqRhG/rVBnnksgmca0ha5WpZbTNinUm0fBC08er7ODgUR5KAC+P8aqWahC:ElV/MrqRc/rznAkLEpNTNiUz5C0Lr70X
MD5:	DF8C7196958168C2B6E10F4D2306BEF3
SHA1:	5AEAB2C4B37035DE83839EBAC95C471E8EA132F2
SHA-256:	6617311ECE84D2511297F47001AA93FB5F171F4DAF874472913F3FE78C00653B
SHA-512:	36BA3A8E074C9F88CCF33F6F9FA433AC9A0A3D2C2EABDA87790FE17E55BAAFAD8A70F4D2E040D393DBCE01833A774EAC0B79A30AF64C0589C389C6859BEF933C
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';var aa=Object.defineProperty;function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this); .function da(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var f=a[d];if(!(f in c))break a;c=c[f]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}}da("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")});/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var n=this\|\|self;function ka(a,b,c){return a.call.apply(a.bind,arguments)}function p(a,b,c){p=ka;return p.apply(null,arguments)}function la(a){return a}function ma(a,b){function c(){}c.prototype=b.prototype;a.N=b.prototype;a.prototype=new c;a.prototype.constructor=a;a.O=function(d,f,g){for(var e=

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1724), with no line terminators
Category:	downloaded
Size (bytes):	1724
Entropy (8bit):	5.729175154189824
Encrypted:	false
SSDEEP:	24:2jkm94oHPccXAAbIlAj+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtFtD1IV:iEcKKo7LmvtUjPKtX7ftD1INOLrwUnG
MD5:	3AB53F10AC3780B633BF3AAA31BA7313
SHA1:	CEEFF69F3350F4F870776F677F2E7E8C10558170
SHA-256:	9F4CE1B600F6EAA9734AD3C39989382875215D477502B01C16E8F2BCD1965066
SHA-512:	E2B3F19FFA7BB7EA229B5DEC5DA740A1D492FE3B4D98A632EF9B3BA5284617B6BEEBA770E815E4C678E1259CF0F43D1183C143794B05135892D61728567F4057
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/enterprise.js?render=6LfkWDYqAAAAAJvAuJELqQLg85Lg8zAp-k7w8siS&badge=inline&onload=onRecaptchaLoaded
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['enterprise2fa']=cfg['enterprise2fa']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('6LfkWDYqAAAAAJvAuJELqQLg85Lg8zAp-k7w8siS');(cfg['onload']=cfg['onload']\|\|[]).push('onRecaptchaLoaded');(cfg['badge']=cfg['badge']\|\|[]).push('inline');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibG

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 20 x 24
Category:	dropped
Size (bytes):	1065
Entropy (8bit):	6.041670798563073
Encrypted:	false
SSDEEP:	24:lcltvQpznJsisRYV4jcsKsRYV4jfsJUsRYV45:l6deOCV4jUV4jHV45
MD5:	7DBC79368EAC7A224B26708057A1A044
SHA1:	936323FEE38CABFEB7FA048F6B235B332EEC380B
SHA-256:	B9C74781AF551A68E296690C7D0DE2481533DDBE59A9435CBEC29AFB84F74EB1
SHA-512:	F665178C4505AD1708D55AE8FB3AE4DEB809E7360905E1B6442CB65886847631DA25E5A0E21E63BE3FC6B44A476FA2DC952E4BC3552BD6F2733B10487A348D30
Malicious:	false
Reputation:	low
Preview:	GIF89a.......@4... ..... ..................ye<iU ....}..........ymU.........................aeP..q...........]H.yi@.u.........ue8..aL....mP..e.q]0iH..................}.........e.q..}..}..m.ua4..............................................................................................................................................................................................!..NETSCAPE2.0.....!..Built with GIF Movie Gear 4.0.!.!Design by Aiwan (aiwan@yandex.ru).!.....D.,............D.........................5$++$8......9..@"....')72.....;)'...3........,....:B.....=..D.........&....6........%...4........ ..-xp......XX ...u... ..B.z.x..1........@.G...0..a.6..P.......-..I.A......=p... .<`....... 0.....<:0#......8..!.../>....E....*....U..........J.....!.....D.,..........'.DD..D...D.......D.........D.........D..!.....D.,............DD...........................!.....D.,..........'.DD..D...D.......D.........D.........D..!...,.D.,............DD.......................

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 7328
Category:	dropped
Size (bytes):	2353
Entropy (8bit):	7.9212462073973775
Encrypted:	false
SSDEEP:	48:XVM4xNB2s+5OdPY6939T4wb5TYGj5AmCFX7v/QPlzWl0X:u44OVR9uwC77h2lzWl0X
MD5:	85261C26BC2B875A6454D22D54F1530E
SHA1:	A1EA4AF83BE195348F9413F2EF963AC45E8C8F71
SHA-256:	AF1658D8970786820C1FA2F888D53A0D148D91F05ECC009350A3C526C9CB2564
SHA-512:	0A0D362479A5EBE89EA5BF36C2988C319B5D1A30B8194213EFC10D5DBE02A877B3A118A8B6EFB9800003B509AF1ED04F6ADD0438F71325E52CB2EA7B9C4F4345
Malicious:	false
Reputation:	low
Preview:	...........Yms.6..._..fbyb..%.-..8v.k.N'=OF.............].E...H.\.8c.........P.......\.....N.....q../..3...c1...T;.p.u.`WH.^#.r.2.)......_.Q.......h.......-...).l.4g.....L....R......5.K?.l.8D.C.q.$.`W..8.>..9Ed...&.p{.....e.....\...~8w/d.`....~}..p@..P...;.0.)....n.sv../R...^.W....8#F.T..:f...!.1B....r&...<p..p......Q.Xk......v..k....O.(...=........j/7...$.F.o6.;G...q.....h...7....=h..~..)I...L.{.5zu...Q...s...s]3.(..d....;.C#.PJ{.G...B....lhmoo?.........P......2.I.........&E.T..L.. ........(U....g>.9...Yh..o..y....G.../..:.....1x. ....`C.5OS..@..A..w;.W{....Ot.i..i.JX]2..N`.j.2..WW._7.o.....^....s....;]....W.L_.....RS.[.T.$.....`1..&.LFF...(...S.iFSL...s5U....ibI......+....T..n@./S.b6P...V.L.:...0..Ue.OX=P.pLh.....A.L.*.SZ.....{..G...[..%...>.GT...f..b.(b....DI......$...........b.Q`S.L/&...U.......;6..p!..L....N._!...!...b.q&.1.Mp......R...@B.2B.@8...y.'....I..<"..`..$,..j6=.z.....`.RC..rx.C..'.m.S.~.8.!Kch...%./..d.....4q...h.c..x+.....1._.w

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1829
Entropy (8bit):	7.853693094963993
Encrypted:	false
SSDEEP:	48:mTVPOydqXt24htj67rYHhbmiNaXb0ahfxYg2Bfdb4i:mIJ567rYMiNaXtxNQ
MD5:	89B3A657B3830E20D67C43067C590D7A
SHA1:	D79C54FFD7EF28BCB1B562B729F44C516EEA81F8
SHA-256:	10BD90B3DCBC40006BD38F883BB23952AEC7488228787B8DF01B3EC10CBA8F12
SHA-512:	28B1B5A7A085B1CB52EFD77056BEC016AA2E401072E5675A5DCE1A93A971006DDA700C17E6F6C77425F87CC051350B70FEC3D553FC75373ED2C8CF839DDCFDC7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......IDATh..[lT....k...........65..".`b.-bD}1.&b.........`0..!&Z.&$.E.'(O.-.r..CG...03.M.3k....v..[.._..n..._...=B)..B..e...RJ.'....Gv.....T..V..\|.?K_...2.mI.j..R..p.^..LK.....W.M+m..(......B.\|&4.........{...E.P[..oc+.Z.2'.\|.ju....y.././....-..R......F..v.#!.,...6..^......K......@Fs.x.......0.._~!....>`l....,...y.w...2_.a.C.H.w..2.H..x.,....v..dFG....P...L'.e.oT..H....<.@+....l..k....g ...M&.,....m...' [[.... ......+E./....T........H.H..X)_0d.x.......ZZ...CC$.....9..6..k..(..b.....W.]..Oj.~.u.`.j.1......m!.....7m"...vmQ........I....6..@ PR6v...e+!.."...B0...?.]w.2 `.m;r.9..C...:~...@.._...I.)X.y},......r.0..b6.F...0.e...,../>..?..s.........L....f9....b.q.a)%..'..D..!..........2..W....M1..u...0...mh`.....7.0..q5."....!l.A)b.....m..<v...<{...Z.....).<..3......=c...h...+...EfdetpjJ)\........l.Z.NcK....d....MU.?./...d6.@V)f..+.......fff...<..`f'+.V6..K2....M.......id/^dbp...!b.,I.P..,;z.e..

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	476
Entropy (8bit):	5.213921484748651
Encrypted:	false
SSDEEP:	12:ky5UFOSnT1IDNI6zbqMIiAsytT+XLkkbRNced0:knESnT1UIWq3YytSVrcn
MD5:	8615844D666968E5353A85137BF6FCD9
SHA1:	91EC7CA8AA7EB2DA7DE8173FA1F32464DF24DB0E
SHA-256:	1E4A3F0F680A8A7A5D871305596512E186BC65559E159C2BA94224BE8235B4DE
SHA-512:	A186C8ED860C9F5CEDB0BA3D9C8426CE62860875E6FB867D94C9B5770DAEE085B47ECF449A5CD2C5B23696851CB5A62F2E7454E8F49F61402FCAED0D047D52E5
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-chrome-webstore/_/js/k=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.en_US.lwRYVOpsj_w.es5.O/ck=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.oit6mfZoPW0.L.B1.O/am=WGow4BY/d=1/exm=A7fCU,AWpPDd,BBI74,BVgquf,CfLNpd,DNlSjf,EFQ78c,EKHvcb,FdMhB,Fu7Bjd,HsQQib,IZT63,JNoxi,KUM7Z,L1AAkb,LBaJxb,LEikZe,LcrBLd,LvGhrf,M0x0ie,MH0hJe,MI6k7c,MT4Hub,MdUzUe,MpJwZc,NwH0H,O1Gjze,O626Fe,O6y8ed,OTA3Ae,OhgRI,P6sQOc,PIVayb,PrPYRd,QIhFr,QVysJe,QvLWAb,Qy2cOb,R6rk4,RMhBfe,RiINWe,RqjULd,RyvaUb,SdcwHb,SpsfSb,UUJqVe,Uas9Hd,UkbOSe,Ulmmrd,V3dDOb,V9amgb,VBl5Ff,XVMNvd,YA1iG,YYmHzb,Z5uLle,ZDZcre,ZvHseb,ZwDk9d,_b,_tp,aW3pY,bZ0mod,byfTOb,cephkf,dsBBae,duFQFc,e5qFLc,ebZ3mb,gIl2M,gychg,h4ilFc,hKSk3e,hc6Ubd,i8oNZb,kBpGk,kjKdXe,lazG7b,ld80Uc,lsjVmc,lwddkf,mI3LFb,mUxuKd,mdR7q,n73qwf,o2G9me,p3hmRc,p8L0ob,pjICDe,pw70Gc,q0xTif,qv5bsb,ri2s0b,rm99Nc,s39S4,sI9bWe,sOXFj,sQ8PT,tw4SJc,w9C4d,w9hDv,ws9Tlc,xQtZb,xUdipf,zKiH5d,zbML3c,zr1jrb/excm=_b,_tp,itemdetailview/ed=1/wt=2/ujg=1/rs=AEP720JOa-HBKdRRZPKO8sen3KFm9_9RpQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:QIhFr;lOO0Vd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;wR5FRb:YA1iG;xqZiqf:BBI74;yEQyxe:p8L0ob;yxTchf:KUM7Z;zxnPse:duFQFc/m=db7dHd"
Preview:	"use strict";this.default_ChromeWebStoreConsumerFeUi=this.default_ChromeWebStoreConsumerFeUi\|\|{};(function(_){var window=this;.try{._.n("db7dHd");.var W4=function(a){_.tB.call(this,a.Oa)};_.F(W4,_.tB);W4.Ea=_.tB.Ea;W4.prototype.Ve=function(){return"db7dHd"};W4.prototype.Se=function(){return!0};W4.prototype.We=function(){return _.U4};_.rB(_.SF,W4);_.IA.db7dHd=_.WF;.._.r();.}catch(e){_._DumpException(e)}.}).call(this,this.default_ChromeWebStoreConsumerFeUi);.// Google Inc..

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5960)
Category:	dropped
Size (bytes):	318618
Entropy (8bit):	5.585513402290095
Encrypted:	false
SSDEEP:	6144:Q4WDsyIJDyA0q2vIC1f7EvGgMShpmSu9R2lfyiRigs:5W2JOLq2AQQ3u9RShiR
MD5:	A11776B9276926611DEF9DF95E47D943
SHA1:	1FF79AD5D16D0F8D6DEE1C4406AC48D6AB2E96A4
SHA-256:	164869DDD48B320EB2BFBEC1D546993C7E6CFBD2B4EAC1C64548EFBD80FEFB1D
SHA-512:	DB0529E5B78FF8D16F4FFA87E09D00B70F41FC21E262F23855309243A3DDA4894F687C16043B6059B41FCF711D1CABC5794AA4B5825EADAF6E32A295D097139F
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_1p_data_v2","priority":12,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_manualEmailEnabled":false,"vtp_cityValue":"","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneValue":"","vtp_autoPhoneEnabled":false,"vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"","vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":4},{"function":"__ccd_ga_first","priority":11,"vtp_instanceDestinationId":"G-207ENHB31P","tag_id":17},{"function":"__set_product_settings","priority":10,"vtp_instanceDestinationId":"G-207ENHB31P","vtp_foreignTldMacroResult":["macro",1],"vtp_isCh

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1134
Entropy (8bit):	5.260083205211005
Encrypted:	false
SSDEEP:	24:2dHAlKLfETCWJJ0urvSLzAfa/qzKKI+vRxGBkH5vudCcMH/SuvI:cHAlOfETCWgusz5q+KII0kAdF0/Q
MD5:	CAA9D5D4E02EFFCFC47A4EF804710AFD
SHA1:	FE3822A4CDAB7AFA728E84D98902DCD47A8028E3
SHA-256:	4546BEEEF186BC19A402D01E7CEFD3F421A964A37E09847E575BEAD7AAC607FD
SHA-512:	AE07AABA8243610EFFE314DE0C39652CAD50BBCF11845AD3E95380A3F720BF8DFF9302A25A610DEA85ECD56A02FFD1E84C9F6D4E635BE15BC561EC66713A6AAD
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 24.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="...._1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 344 53" style="enable-background:new 0 0 344 53;" xml:space="preserve">..<style type="text/css">....st0{fill:#F06666;}....st1{fill:#E3ECF1;}..</style>..<g>...<polygon class="st0" points="27.9,0 36.5,17.4 55.7,20.2 41.8,33.8 45.1,53 27.9,43.9 10.6,53 13.9,33.8 0,20.2 19.3,17.4 ."/>...<polygon class="st1" points="99.9,0 108.5,17.4 127.8,20.2 113.9,33.8 117.2,53 99.9,43.9 82.7,53 86,33.8 72.1,20.2 91.3,17.4 ....."/>...<polygon class="st1" points="172,0 180.6,17.4 199.9,20.2 185.9,33.8 189.2,53 172,43.9 154.8,53 158.1,33.8 144.1,20.2 ....163.4,17.4 ."/>...<polygon class="st1" points="244.1,0 252.7,17.4 271.9,20.2 258,33.8 261.3,53 244.1,43.9 226.8,53 230.1,33.8 216.2,20.2 ....235.5,17.4 ."/>...<polygon class="st1"

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 126204, version 0.0
Category:	downloaded
Size (bytes):	126204
Entropy (8bit):	7.990242349962192
Encrypted:	true
SSDEEP:	3072:t7fa6lJ5VWC7EisktkVRs4+DRSryEvva8zpZ:tXD5VWCIimV+4iuq8zb
MD5:	625678880D8C338450F204A33FEC863B
SHA1:	B24C1D2F287BEA376FF5CE79065E5800C43DDA8F
SHA-256:	A4C0D82E111E1BC9FC4565C5B0744B39FBEB888A2BA8C65FC56A41632B6A81B7
SHA-512:	3192BE30A7735C01268353E7D0FF9AECC76A672008C5FCE756FD57B528933F419B30F45540AA0DE525E941FE3AE93AF0C5BC0D748CBE7DDDA90ADA428949AE9E
Malicious:	false
Reputation:	low
URL:	https://nuance-pdf-professional2.software.informer.com/fonts/SourceSansPro-Bold.woff
Preview:	wOFF..............M.........................BASE......J....d.\.FFTM............\|.GDEF..ep...b....R.VLGPOS......d....:...)GSUB..f...!'..<R.T.SOS/2...$...Y...`_...cmap...@.......j....cvt ... .........9fpgm...........s.Y.7gasp..eh............glyf..........J$.H..head.......6...6."..hhea.......!...$...Vhmtx...........^. ..loca...L.......d..W$maxp....... ... ....name..=........@n5&Opost..B..."r..K.p...prep.......R...V2..........`RD.._.<..................?\..7...m..............x.c`d``...=.......9r..".}:...................m....................x.c`fr`....................5......,.LL,..L....P.........?..l...7........?0M.R..\|.S6.....x...p........i...!..@.I.....x.D-. ...PL.[.U.....Emq.RiU...v...B.<..1-#b."/.D..l.g.~...r.2....}.9g.9....i.?S....2...T.-.@qt....g.d...3...w.....6S...23.#e....7.....A.(..B.....0.$.C..w..j{...."..n....6..K..S...._.'....2.L.A.ug.2w$.Nv.d...%E.c6k...:..:..2.vf.U.0.K.\..Ef.....9..2..-.+azK..$.8P..'..YN._..Y*].h.g3%+....5dH.yE.0o..%..{.. .l.g..

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 980 x 120, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4683
Entropy (8bit):	7.824068000027095
Encrypted:	false
SSDEEP:	96:KRXOJj+tl7T8klEh78rKFKNIuPb1y5o5sTKzQRivpuUSOe/0q:0a6tlP8klu4rKFwIuPb1yc9zMi4iuD
MD5:	8F4A524B7D6DAFE9ECB5874328FA3A88
SHA1:	A7C6CF776793D13816BC87A048C97214C5B66CCF
SHA-256:	801D7165C69A2360EB99B6FFF973B5C55C8E97624F0B956EBE4350A2ECEC274C
SHA-512:	73E5E72A3D7C71F14202EECF3D7A8DC01133542D6BA28BE8397DB90CFDA98AD9AC0C811D4C4C5FD602546C7797F0BC411E2380883E2F45AC3125EE5471E8706D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......x.....$<J....kPLTE..X```.........@@@ .......h,......(3>...CMV000.............PPP......ppp.....^fn....................m..c.......m.....b6@Jx.....................y..............ksz..........oooPYb..w.{F..............w..m.....l..a..............{G.....x..x..{5@J......QYb___..........n..a.r9.r:..S..............x...........q9..{..T.................OJ....IDATx..{....c....[dHS.D..aY.e[..'.....Mv{...{..........H1R...}.K .....o..<7............................................o..E....gw>....Fn...O.>,n.....7.b..k[..Y....b.....0\|.f,...x..nQk....?4..r..9..0....\...%l.........(w.$..Z...lf.... ?\|b..2.w..zm....uA......N...H..[.g.....G...z.Z....j..O#u...e..^wg....&I...[9Z.....}.K..=....T....R/.%4.}#..MmV..(...2.}s."^...!.Yo.}r=3...t1....7d.+.s.o....B.n=W.......znn.(..vd..mG..G...rg..XR.<'H-KX..}.......X....f....R..A...;4{m....n.a.Z:.>..V.......T.kV...V..*...$..Hs.xV.....k.8Zv...n..Z..../.b..gi_...-u..I.U..0Q.

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2217
Entropy (8bit):	7.784314656105583
Encrypted:	false
SSDEEP:	48:Jwb0JwvaWEr+DdqgJgzXAkobhtD+xXS/W6gOn51QOoV7jJNS7:Kb8wWt62QkoD0FOXArA
MD5:	54F1A6D8B613C0863868E33C72131673
SHA1:	C2C698555AFBCA60984BA197A86F1645FBE70666
SHA-256:	E761AA8220C090608F73020C0B26D03A851BB27B863A9E47EF9D159AA9666E3B
SHA-512:	22D4851A44CCB674C8D230FF835146302E150139F900E8510667BB74AF293E87A93B4B805D4F770C8A0E820516637918965DB14FA7A0826B2FFE6EC78D570035
Malicious:	false
Reputation:	low
URL:	https://img.informer.com/images/default_icon/default_48_0.png
Preview:	.PNG........IHDR...0...0.....`.......PLTELiq..................s..v..x..{..\|..}..~..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................yGM....tRNS.......eP<....ZIDATx.m.].]W...k.....I&..N...u.D......A."...A..7}lQ(R.T....*.......H...R...A.&$Dk.P3.c...?.....i.4.{.....^..9....P\..d....:..\|P.......C...4.&}.......P....\|..;..R?..

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (786)
Category:	downloaded
Size (bytes):	1672
Entropy (8bit):	5.286735414643417
Encrypted:	false
SSDEEP:	48:bFj15yMuJcZ2E9uIic2u8aYlPFs3l7Q2xtHS:Fey2EYIic2u8bl9sJu
MD5:	AB304529064B2C30C88FC41AD81913E0
SHA1:	14091E21A049D97B052DD56FF4076898F6F7D0CC
SHA-256:	88C5A7E6C9B3319F4BE9CD873D1E19766A62BE628EA9921156DD2702F1D15031
SHA-512:	6F8A7C3D2516C88E172D6AF1F88B0F32242A737BA128F95E0668D57EE004384DAFE4011A84FC543BA477A7BC82A8D47862F1F276F0C89FA0087D63E4D3B72691
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20250114/r20110914/client/load_preloaded_resource_fy2021.js
Preview:	(function(){'use strict';let e=[];const f=()=>{const a=e;e=[];for(const b of a)try{b()}catch{}};function g(a=document){return a.createElement("img")};function h(a=null){return a&&a.getAttribute("data-jc")==="26"?a:document.querySelector('[data-jc="26"]')};var k=document;/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=()=>{var a=k.querySelectorAll("link[data-reload-stylesheet][as=style][rel=preload]");for(var b=0;b<a.length;b++){var c=a[b],d="link",l=document;d=String(d);l.contentType==="application/xhtml+xml"&&(d=d.toLowerCase());d=l.createElement(d);d.setAttribute("rel","stylesheet");d.setAttribute("href",c.getAttribute("href"));k.head.appendChild(d)}if(a.length>0&&!(Math.random()>.01)){a=(a=h(document.currentScript))&&a.getAttribute("data-jc-rcd")==="true"?"pagead2.googlesyndication-cn.com":"pagead2.googlesyndication.com"; .b=(b=h(document.currentScript))&&b.getAttribute("data-jc-version")\|\|"unknown";a=`https://${a}/pagead/gen_204?id=jca

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53753)
Category:	dropped
Size (bytes):	55060
Entropy (8bit):	5.745385673852077
Encrypted:	false
SSDEEP:	1536:jHBZ8A11qcfEVS9bl8Z2cALC3qLcfs6rHL:j7fEVZ2cAjeBHL
MD5:	6AEB364D3039709E56CE6931F2AE6BA1
SHA1:	AA078139A6BF05F82E923F89DDBF6245300938B1
SHA-256:	B8AE2562740D461647234085678E42807EEFD46CF431D777A0AC1267D2CDDF36
SHA-512:	805F17A96BE598A87E0E1B91C7FD8A3EC444C3FCE283C6D4792AE55D26B040E10F06E01E4BBC5E095A75AC9290D17C34C069452E86D6CC50E3E7EA4F9A0B6178
Malicious:	false
Reputation:	low
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function K(T){return T}var h=function(T,g,z,k,H,u,x,l,Y,N,G,A){for(A=(N=z,34);;)try{if(N==g)break;else if(N==z)l=u,Y=E.trustedTypes,N=17;else if(N==17)N=Y&&Y.createPolicy?91:4;else{if(N==4)return l;if(N==T)E.console[x](G.message),N=79;else if(N==84)N=E.console?T:79;else if(N==k)A=34,N=84;else if(N==91)A=24,l=Y.createPolicy(H,{createHTML:I,createScript:I,createScriptURL:I}),N=79;else if(N==79)return A=34,l}}catch(p){if(A==34)throw p;A==24&&(G=p,N=k)}},E=this\|\|self,I=function(T){return K.call(this,T)};(0,eval)(function(T,g){return(g=h(39,5,20,93,"bg",null,"error"))&&T.eval(g.createScript("1"))===1?function(z){return g.createScript(z)}:function(z){return""+z}}(E)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:applica

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (24646)
Category:	dropped
Size (bytes):	35294
Entropy (8bit):	5.4052814803030955
Encrypted:	false
SSDEEP:	768:tyCnQTfzh0nslQSYCJcS5warNpn/fU5c3y97TbY3i3GifBNA:xQT7cs6STn05c3A3eq5W
MD5:	5FC7CCA5B30235F141E95E040E50AC45
SHA1:	BDA9D775BCA2E39FC8C9F250C2C3F1BB66191B29
SHA-256:	B0C6DE901B490754F04841D7DDEE742DFC27020D77CBD07B0C046C3DCF31334F
SHA-512:	EEE28EE177A7F0B9454F694289F5DBD441B5B33C5050337496F29B1C1C33613DCD1F00A6790E77FD2535D77264AEE10189B76F13D286C16E2EAC58AABE373748
Malicious:	false
Reputation:	low
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"/><meta http-equiv="Content-Type" content="text/html; charset=utf-8"/><link rel="shortcut icon" href="/favicon.ico"/><meta name="viewport" content="width=device-width,height=device-height,initial-scale=1,maximum-scale=1,user-scalable=no"><meta name="theme-color" content="#000000"/><script type="text/javascript" async defer="defer">if ("false" !== "false") {. ;window.NREUM\|\|(NREUM={});NREUM.init={privacy:{cookies_enabled:true}};. window.NREUM\|\|(NREUM={}),__nr_require=function(t,e,n){function r(n){if(!e[n]){var o=e[n]={exports:{}};t[n][0].call(o.exports,function(e){var o=t[n][1][e];return r(o\|\|e)},o,o.exports)}return e[n].exports}if("function"==typeof __nr_require)return __nr_require;for(var o=0;o<n.length;o++)r(n[o]);return r}({1:[function(t,e,n){function r(t){try{s.console&&console.log(t)}catch(e){}}var o,i=t("ee"),a=t(25),s={};try{o=localStorage.getItem("__nr_flags").split(","),console&&"function"==typeof console.

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2008)
Category:	downloaded
Size (bytes):	13020
Entropy (8bit):	5.338335125035746
Encrypted:	false
SSDEEP:	192:pl/66sGOASROqI3wgh5MXnYY9EAhMmK3qzfaGxCLLgIJQaYmx:rnsGN6JIVs3LLK3qzf6gIZYmx
MD5:	D1F231B50B152372A6C3100F4AED1973
SHA1:	1BF10951BE06DA03D1371A904E19C0419F2A3637
SHA-256:	9DEC95894AF322B087AB6E87F9C8CE66D849646CF33B375D33C957F4569ED081
SHA-512:	00093B7FC4AFFA2D2230622F5D7DA69730246B74620AD4DE30AC64E41FB9AC927AFD2AB426034D71DC85A3DFEE9A46E73DF48DA7E2636A54579EA9AAAC4CAFF6
Malicious:	false
Reputation:	low
URL:	https://ep2.adtrafficquality.google/sodar/sodar2/232/runner.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){'use strict';function m(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var p=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function aa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var r=aa(this),u=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",v={},w={};function x(a,b,c){if(!c\|\|a!=null){c=w[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}}.function y(a,b,c){if(b)a:{var e=a.split(".");a=e.length===1;var f=e[0],h;!a&&f in v?h=v:h=r;for(f=0;f<e.length-1;f++){var d=e[f];if(!(d in h))break a;h=h[d]}e=e[e.length-1];c=u&&c==="es6"?h[e]:null;b=b(c);b!=null&&(a?p(v,e,{config

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjssGyuR_QRXE7-gV_-ofcGHWRexXqS6AJzNZqe40Su-pFwVDyNuzWQxXVK7N0hpQ3qaqCJGAUWdY8iEFfnO7d-Nm685zctiheyGEHhuL8SeeZkVu-0KFj0oGKl8l_MHleCLNc1O69dncgpc69mrDegqv8nmqG3cFHo2haqRw&sai=AMfl-YQK0pguUdU0aW7i6EI9XGWGFOQzK0LRG15Bj42xAANYItjQQ_5-H7hK714KZ3j-LwcaenzjC-8l6jk9hSCYleCYmy_qFFObb_Grw-QoIYOFLHCyJdX13sZjoTAehjCZ-qXSJYLo38GB-F8eVsLH&sig=Cg0ArKJSzDsQgXG--a8YEAE&cid=CAQSTgCa7L7dHFLM9IPFcD6ghiOIXDaBWC3kpV_PFb9R9pCIrNFE7BSHF3RZLGlcutaAcbdRcj-GmWm9tJZKlN96y-eWrNTvXXeYwXuCpX3sSxgB&id=lidar2&mcvt=1000&p=0,56,90,791&tm=1015.3000000000175&tu=15.10000000000582&mtos=0,0,1000,1000,1000&tos=0,0,1000,0,0&v=20241204&bin=7&avms=nio&bs=0,0&mc=0.52&if=1&vu=1&app=0&itpl=4&adk=3689936537&rs=2&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0%3D&vs=4&r=v&co=3291243900&rst=1736979636549&rpt=3172&met=mue&wmsd=0&pbe=0&fle=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.122191481864228
Encrypted:	false
SSDEEP:	3:CUnl/RPQgpllHh/:/9Q0/
MD5:	0D23D0B62908B75E89014AC3F864484E
SHA1:	640CC2607301598E4D871D618D668FAF24E2B01E
SHA-256:	546C5CF136073615AFDA5CAB173FEFF341171A26A848CF7CE09BB8BD8B07CE89
SHA-512:	6834F1548F26B94357FCC3312A3491E8C87080A84F678F990BEB2C745899A01E239964521E64A534D7D5554222F728AF966EC6EC8291BC64D2005861BCFD78EC
Malicious:	false
Reputation:	low
URL:	https://img.informer.com/images/blank.gif
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2318
Entropy (8bit):	5.206665349898711
Encrypted:	false
SSDEEP:	48:+XfQSkHJBWr3fv5Ge3CfGvWviPT8MgTstDzPHu2GH4vwJRHozktkHJBWr3b:+vEHnWrpJ04WyFz/dGH4++HnWrL
MD5:	7BBB431D2E9FB94BB738BEA8E1E2E218
SHA1:	479AC381EF226D54E998A30E8210F14B87028E93
SHA-256:	D2140D44A0416BA4B09271EF7DA2FB106BAB382BAD52E105D82786F305E38E90
SHA-512:	EF2C0AF6FF991B58BBBE45FD0290E16A73FFF69DAA7D40D56ACBDBB1B8273444CFE8DF1626E3F6F3E093AC3602AB1BF92FCFAE89A3E389D183417B0E4A7AB8CD
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/productlogos/chrome_store/v7/192px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" height="192" viewBox="0 0 192 192" width="192"><path d="M0 0h192v192H0z" fill="none"/><defs><path d="M8 20v140c0 6.6 5.4 12 12 12h152c6.6 0 12-5.4 12-12V20H8zm108 32H76c-4.42 0-8-3.58-8-8s3.58-8 8-8h40c4.42 0 8 3.58 8 8s-3.58 8-8 8z" id="a"/></defs><clipPath id="b"><use overflow="visible" xlink:href="#a"/></clipPath><path clip-path="url(#b)" d="M8 20h176v152H8z" fill="#eee"/><path clip-path="url(#b)" d="M116 36H76c-4.42 0-8 3.58-8 8s3.58 8 8 8h40c4.42 0 8-3.58 8-8s-3.58-8-8-8z" fill="#fff"/><g clip-path="url(#b)"><defs><circle cx="96" cy="160" id="c" r="76"/></defs><clipPath id="d"><use overflow="visible" xlink:href="#c"/></clipPath><path clip-path="url(#d)" d="M32.07 84v93.27h34.01L96 125.45h76V84zm0 0v93.27h34.01L96 125.45h76V84z" fill="#DB4437"/><path clip-path="url(#d)" d="M20 236h72.34l33.58-33.58v-25.14l-59.84-.01L20 98.24zm0 0h72.34l33.58-33.58v-25.14l-59.84-.01L20 98.24z" fill="#0F9D58"/><path cl

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18318)
Category:	dropped
Size (bytes):	18936
Entropy (8bit):	5.689383912539823
Encrypted:	false
SSDEEP:	384:Hdp50FuAuCZfnLYdCCwR1bxZlRKMAdNcnae9JJyZ+KO4Vx:FCZvP3bAdwaepGOg
MD5:	6F6D3B561738FD855AB800DA5B967D3D
SHA1:	653DAE597FE07100DD1863EF43DA6A2432D98959
SHA-256:	098E08750F0F34EAACF6E80FC536898768585B2F26D6516EFFF38879C3D69FEC
SHA-512:	83F0448A8661F335521279202E5F880C8D38EE73A53DEA7288F404708B3A7B75E6B4681EDE622079DFC3EA274C6131C06C96B08CD6D158E9B13D9ECCF59EB83D
Malicious:	false
Reputation:	low
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var P=function(V,Z){if(Z=(V=null,K).trustedTypes,!Z\|\|!Z.createPolicy)return V;try{V=Z.createPolicy("bg",{createHTML:Y,createScript:Y,createScriptURL:Y})}catch(l){K.console&&K.console.error(l.message)}return V},Y=function(V){return V},K=this\|\|self;(0,eval)(function(V,Z){return(Z=P())&&V.eval(Z.createScript("1"))===1?function(l){return Z.createScript(l)}:function(l){return""+l}}(K)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var Zn=function(Z,V,l,Y,P,S,Q,I){return(S=(Y=[-49,76,71,-4,62,-20,Y,-15,65,-40],P=(I=Vp,l&7),C)[V.L](V.nS),S)[V.L]=function(W){P+=6+(Q=W,7)l,P&=7},S.concat=function(W){return((Q=(W=(W=+(W=Z%16+1,Y)[P+75&7]ZW-160ZZQ+(I()\|0)W+40QQ-2120Q+4ZZW+P-WQ-3040ZQ,Y[W]),void 0),Y)[(P+69&7)+(l&2)]=W,Y)[P+(l&2)]=76,W},S},Ku=function(Z,V,l,Y){for(;V.Y.length;){l=(V.C=null,V.Y.po

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1955
Entropy (8bit):	7.880068908634466
Encrypted:	false
SSDEEP:	48:FHa1K2+MzesJDDrCK8F1HuB8/EBMUcec3:9t2+SDbY1OB8/qMUcD3
MD5:	20E3B33E017CB69623C7C11E1E6D81F3
SHA1:	880A711CBED7F75DAAABB353418CDF6399CD0C85
SHA-256:	0D8E94A68DCE2AE40160A947B98B92A1FA513D914B0D95C63EB4949BBA37C2A3
SHA-512:	B657024DBF93C1210E0F65124241A673DA6AD99B251CF5E5AAA811C1486B8CACA288201475A77C9FADB334A32970AD12333EBDEE6E3613FA4B229BAEB6D465B7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W......jIDATh..kP....../.......r." .r3X...I....L.q.N;.I3m.1m'mc;.6I....t...i.hH..x..E....rW........+...w.e....m.9....=.y.{.s.Y...~.........(.b..4...7M.....Y..~...8...&..pb...j...t.Su...iwY....N.\$...!.......B!`.....V.;..E.n'....;~.<.....@..\|....'......0%....c4..c.M..N.L(p.....3.......... ....E....w.....$5.kym.;\..-p..F.....x}...o...@...d..V3{v....S1.H.V..m..l.....Z..r...S&`I.....E1.[D.:...p....SI1.r..S.]..f.:.M...a.F....^=..IAv^...It..r.l;..v.m..v....&I$. ..r..a+.g..h.@..".h. .':p.m..A.'7...R..07..).h.K..zt:.S\....{....S.+W..e.wH}..n..^.I.....t......;.?3%.u[.O...;9r..H!..'....B..#v..t...Irn<.R...t...O.L..?aY.Wf...@XR..Y+.4.s...}=.M=$....S{...V>{._.x......C.sd..O10i...?..x..O.'sS.'..R..A.V;.(./jfA.e.\|...cw(.Y....q..9>......Y._A<tw..?..UX'vK..F{..:.?.SWu....\|@..n.=K,..G: ...i.a.Z.}y.....Y.kFf...$.A....>.......39..a.>h5...I$....OlF!....PSV....T...H..f..<0....Z...g.\2....O.....\|.-...i....s....U....m*.E"I......OD.2k}=....C...

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3662
Entropy (8bit):	4.2732147664200655
Encrypted:	false
SSDEEP:	96:/GJ2h3jye5fmtO5N4z6PFmD/OON8cwssX:/GJ2tygxX
MD5:	5607A34E38F494CC9EB8BAE4C20B018B
SHA1:	635BAA522802BDBAD8CDF2EEE76E88855EF944BD
SHA-256:	42B7D8A619BBB33F6AE4F7E2E9FC54959DFA74C0079BA31CF9E7EBB0A08486E7
SHA-512:	E8AD6AA03AB199E9295DFEFB32983DF96269611BDC49E3D2591AD963FF16DA191ABF189237D8FCD5FB6D6A8729C01B0E983DD91B3AEE79AC6167880D8AD4338A
Malicious:	false
Reputation:	low
URL:	https://i.informer.com/js/footer4.js
Preview:	(function() {.. if (typeof jsparams != 'undefined') {. var platform_re = /(software\|linux\|macdownload)\.informer\.com/;. var matches = platform_re.exec(document.domain.toLowerCase());. var platform0 = "software";. if (matches != null). platform0 = matches[1];.. var loader = new Image(),. rarr = platform0 == "software" ?. [8706,8708,2601,3734,8707,8657,8658,8659,8780,8708,245]. :. [8734,2959,3731,8735,8686,8687,8688,8781,8736,2315],. jarr = jsparams.split(',');.. // console.log(rarr). for (var i = 0; i < jarr.length; i++) {. // console.log(jarr[i]). if (rarr.indexOf(parseInt(jarr[i], 10)) > -1) {. // console.log('==='). jarr.splice(i, 1);. }. }. // console.log(platform0);. jsparams = jarr.join(',');. // console.log(jsparams);. // console.log(document.referrer).

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	141707
Entropy (8bit):	5.4473128875543075
Encrypted:	false
SSDEEP:	3072:p660sTPv0WJECBN8/tspu9lHtzkKPS8mKN0WlBz9Gm:SMg6clO4Rrht
MD5:	DBB8A5F0C0779C20B733ECB73A421605
SHA1:	219968A8361A730D30DB9772291D830B75BE526F
SHA-256:	2E7055C6FBE405848AD40D4DDC6F7EA3CAE9DD55F08B8CFB691CCB772DF7C162
SHA-512:	7E3DABC7E7FFDEFB9E32248DAE2A58919DB366866F57EBD70A1255205370FD2F0395C0DA35A9C319E23E8C50A914F439EC52EEFCCEC05854D18D2A5153980A3C
Malicious:	false
Reputation:	low
URL:	https://cdn.bidbrain.app/ng-assets/creative/assets/index-5333d910.js
Preview:	var oi=Object.defineProperty;var si=(e,t,n)=>t in e?oi(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n;var j=(e,t,n)=>(si(e,typeof t!="symbol"?t+"":t,n),n);function Mh(){import.meta.url,import("_").catch(()=>1),async function*(){}().next()}(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const o of document.querySelectorAll('link[rel="modulepreload"]'))r(o);new MutationObserver(o=>{for(const s of o)if(s.type==="childList")for(const i of s.addedNodes)i.tagName==="LINK"&&i.rel==="modulepreload"&&r(i)}).observe(document,{childList:!0,subtree:!0});function n(o){const s={};return o.integrity&&(s.integrity=o.integrity),o.referrerPolicy&&(s.referrerPolicy=o.referrerPolicy),o.crossOrigin==="use-credentials"?s.credentials="include":o.crossOrigin==="anonymous"?s.credentials="omit":s.credentials="same-origin",s}function r(o){if(o.ep)return;o.ep=!0;const s=n(o);fetch(o.href,s)}})();var _n,D,Do,ct,Lr,Vo,jn,cr,Nn,Mn,T

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (5714)
Category:	dropped
Size (bytes):	11080
Entropy (8bit):	5.544394261095977
Encrypted:	false
SSDEEP:	192:mycyWrUID96ePMD12IRNEMJrceuHo87m1r0mZfSTfULiMxt1ETs7WKEvM+xtpLUf:zmK20ofYWn/n9owUSne
MD5:	4C374F1EEB96CC4812F9EF85CF02E990
SHA1:	B61C81CDC14E1DEAF1282F3523BA20C056B7081A
SHA-256:	14AB5266711F31CF4B3D9F5641DA84DB0FDB5BF6A26C7A685747678CA05E9647
SHA-512:	54646DB795AD2A2806DF8B7200BF4CADC0767F8ABD0553A195EEEC7A1061C39A5DD683E57B07DCDDE30C60C2CD53CB26B68094D4A8CB696DF077686ADE060201
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <title>Sign In</title>. <meta name="description" content="">. <meta name="robots" content="noindex,nofollow">. <meta name="viewport" content="width=device-width, initial-scale=1">.. .<meta name="multipassui/config/environment" content="%7B%22modulePrefix%22%3A%22multipassui%22%2C%22environment%22%3A%22production%22%2C%22rootURL%22%3A%22%2F%22%2C%22locationType%22%3A%22auto%22%2C%22captchaKey%22%3A%226LfpJvIaAAAAABzKm7BfQiloQLaQXjjKn9fctiWd%22%2C%22captchaV3Key%22%3A%226LelYfIaAAAAAEbKZf5q2XWYIs5y7_tuIPl2PwXI%22%2C%22oneTrustKey%22%3A%22c4657020-c7d1-4a14-a091-267a7ee4863e%22%2C%22cookieDomain%22%3A%22.squareup.com%22%2C%22EmberENV%22%3A%7B%22FEATURES%22%3A%7B%7D%2C%22EXTEND_PROTOTYPES%22%3A%7B%22Date%22%3Afalse%7D%2C%22_APPLICATION_TEMPLATE_WRAPPER%22%3Afalse%2C%22_DEFAULT_ASYNC_OBSERVERS%22%3Atrue%2C%22_JQUERY_INTEGRATION%22%3Afalse%2C%22_TEMPLATE_ONLY_G

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	17386
Entropy (8bit):	6.016487991761723
Encrypted:	false
SSDEEP:	384:16+pGVrZZio6LowQp/aqm6+MDYGpPjacXhZPCQg/0:E+p+r3io6I/o2YGpecXhZ1j
MD5:	596FD8FDB22800A8157B6BF61AE10375
SHA1:	A987CDFF1319B939A5EE0D778944CBFE38DF7725
SHA-256:	95DA12B8F6056D98B0DF59C5E7CB7353A53D0442774396312B1B5E6E59558B06
SHA-512:	7600C0CB20E48451F211776871E6ABB5CD06ECACE759D549DA8C81AEBB1BB39C419935B1A77BC5BCD6CE48D38C10562A846684FA83AA02ADFC8E081AC791BD56
Malicious:	false
Reputation:	low
Preview:	{"sodar_query_id":"vTSIZ9TlCu6DjuwPzKGiyQg","injector_basename":"sodar2","bg_hash_basename":"dNIx5DWZp-OCvb2UxgrLm6p_sBgxbD3rZA99js5av7Y","bg_binary":"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

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	251467
Entropy (8bit):	5.807955008749221
Encrypted:	false
SSDEEP:	6144:4K46epZ3q78X+1L5a+MplEAD0RNQFujWClHdLxrXt:4xZ3qTMpwQ8WUXt
MD5:	0F5CC7FA3A16AFD6885F7C82E35B1E73
SHA1:	218C5B2AE2FCC22BA27A36F27CD00B8C61B97956
SHA-256:	F384869E2B95DA4DAF7F9857E9A55BCB2801AFE2EEEA1BEDD2367DA4B7000FA1
SHA-512:	4E2B093EE425F3E8FF7FD2B1F3388AA22C2FA2D78265D86D7E499EE363FCF217E855C990733964B93063875661A9F7466F9AF8EF4D3ED5705F4E4B1BA9E332DA
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4821006852914359&output=html&adk=1812271804&adf=3025194257&abgtt=9&lmt=1736870130&plaf=1%3A2%2C7%3A2&plat=1%3A128%2C2%3A128%2C3%3A128%2C4%3A128%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fnuance-pdf-professional2.software.informer.com%2F7.2%2F&pra=7&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~3~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aicel=33~38&aifxl=29_18~30_19&aiixl=29_5~30_6&aiict=1&aiapm=0.2&aiapmi=0.33938&aief=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736979634921&bpp=3&bdt=1622&idt=1657&shv=r20250113&mjsv=m202501090101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=1200x90%2C336x280%2C847x90&nras=1&correlator=4566372036047&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533202%2C31089683%2C95344791%2C95350245%2C95340252%2C95340254&oid=2&pvsid=3788874330487745&tmod=2006592406&uas=3&nvt=1&fsapi=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=4&uci=a!4&fsb=1&dtd=1664
Preview:	<script>window.sra_later_blocks = [];</script><script>window.sra_later_blocks.push({creative:'\x3c!doctype html\x3e\x3chtml \x3e\x3chead\x3e\x3cstyle\x3e* {margin: 0;padding: 0;outline: none;}body {background: rgba(52, 58, 65, 0.600000);backdrop-filter: blur(15px); /potential issue: minimal browser support/-webkit-backdrop-filter: blur(15px); /for safari/height: 100%;}#ad_iframe {box-shadow: 0 !important;display: block;left: auto;margin: 0 auto;position: relative;top: auto;}.creative {transition: opacity 1s;-webkit-transition: opacity 1s;position: relative;}#card {background-color: #fff;border-radius: 6px;padding: 0 6px 1px;position: relative;box-shadow: 0px 8px 12px rgba(60, 64, 67, 0.15), 0px 4px 4px rgba(60, 64, 67, 0.3);}html {height: 100%;}.toprow {width: 100%;display: table;height: 24px;background-color: #fff;}.btn {display: table;transition: opacity 1s, background .75s;-webkit-transition: opacity 1s, background .75s;-moz-transition: opacity 1s, background .75s;-o-transition:

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1955
Entropy (8bit):	7.880068908634466
Encrypted:	false
SSDEEP:	48:FHa1K2+MzesJDDrCK8F1HuB8/EBMUcec3:9t2+SDbY1OB8/qMUcD3
MD5:	20E3B33E017CB69623C7C11E1E6D81F3
SHA1:	880A711CBED7F75DAAABB353418CDF6399CD0C85
SHA-256:	0D8E94A68DCE2AE40160A947B98B92A1FA513D914B0D95C63EB4949BBA37C2A3
SHA-512:	B657024DBF93C1210E0F65124241A673DA6AD99B251CF5E5AAA811C1486B8CACA288201475A77C9FADB334A32970AD12333EBDEE6E3613FA4B229BAEB6D465B7
Malicious:	false
Reputation:	low
URL:	https://img.informer.com/icons/png/48/8336/8336687.png
Preview:	.PNG........IHDR...0...0.....W......jIDATh..kP....../.......r." .r3X...I....L.q.N;.I3m.1m'mc;.6I....t...i.hH..x..E....rW........+...w.e....m.9....=.y.{.s.Y...~.........(.b..4...7M.....Y..~...8...&..pb...j...t.Su...iwY....N.\$...!.......B!`.....V.;..E.n'....;~.<.....@..\|....'......0%....c4..c.M..N.L(p.....3.......... ....E....w.....$5.kym.;\..-p..F.....x}...o...@...d..V3{v....S1.H.V..m..l.....Z..r...S&`I.....E1.[D.:...p....SI1.r..S.]..f.:.M...a.F....^=..IAv^...It..r.l;..v.m..v....&I$. ..r..a+.g..h.@..".h. .':p.m..A.'7...R..07..).h.K..zt:.S\....{....S.+W..e.wH}..n..^.I.....t......;.?3%.u[.O...;9r..H!..'....B..#v..t...Irn<.R...t...O.L..?aY.Wf...@XR..Y+.4.s...}=.M=$....S{...V>{._.x......C.sd..O10i...?..x..O.'sS.'..R..A.V;.(./jfA.e.\|...cw(.Y....q..9>......Y._A<tw..?..UX'vK..F{..:.?.SWu....\|@..n.=K,..G: ...i.a.Z.}y.....Y.kFf...$.A....>.......39..a.>h5...I$....OlF!....PSV....T...H..f..<0....Z...g.\2....O.....\|.-...i....s....U....m*.E"I......OD.2k}=....C...

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 275 x 175, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	23961
Entropy (8bit):	7.975312756400013
Encrypted:	false
SSDEEP:	384:VGbplKwXlmBWNurxfQOt74TqGsoinmEDtmll9Cajb29pGhGb04VmHmv:VaoylmBQurxoOt74TnmRtmll9pipGC0S
MD5:	61942BFA7C9B4263616E70B04BDB7537
SHA1:	4EE1AF37A0028D1E588EBE1385C8D826A6829BC4
SHA-256:	20C03B5390496CD1F596CACF340B271F8658675477E97B525D5576C7EB94DE24
SHA-512:	1580EA6F3CAE7FF016BA265A0A3095584F5FACD9612C9DCA5DB1DAAC1D16F44C4FA73A60B9011A073C0BB24CAC5A2214BE18CCDA02355D072D9156C2D5CDA91D
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/VflcyYKNiX81FYhjH8SofMF0O-CPgL7K-IQ-9eLjJEav9S3ip87NFX2ZPIvH_WJu85srQH4JWVNT35vKe-QfcQce4Q=s275-w275-h175
Preview:	.PNG........IHDR.............Q..U....sBIT.....O... .IDATx..]w\|.7.....u..6.......BHH..r.K...K._.]............fz1..w{..4......[....ga.3..$...4..4.X....(%.........?G.#.:...b...g.5R..H6.....Pr&4^..2...K}...(n,B....?..(...sbH......d.c....}....z..5.}..e..?4...$O..1m...B....m\|........8.'..JQ.O4.9q.......P....1..&..XS...y.4....#..=..S...S`..X..7.W&.t".P,.G..91.M.......!.#..S....;o.zna.aN...D.cq.#m...p,.......c..~.'6..i....&N...^.@.\|.<C2....;;..1...O.'$..6q..!L.Z.;...D.....1......<.3gx.f.pf.}C....\|..O0y..s....5y.aN.i...L@...+.AP...d...?..I....cN..A..b'p.....P..Z.....=.E.\|F3Q...\|..H..%.D-08y.2'6...M.')..z..G...J...p.F.%.&...r`}1._.....!O.3>....5.!...a....[D.7..P..F...X.'......(.N.h.@F..h...0dK(...h.Uq.Bh@.'jE1#O ..9.....[...F..)U.`@.....\.....4......L..K....mb...g..+.W.t.B.._.(......<}R...K.<.t..cF..O..R...=..C.o..=p.N.R..j...Z8.._.R....:..P._....W4b..2.....%...............=.Q...M.8..G.............f....m.z..._....I....a"C`..?...y<`!:..

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53840)
Category:	downloaded
Size (bytes):	55134
Entropy (8bit):	5.720177960293411
Encrypted:	false
SSDEEP:	768:jzkmbXSW2GIQT4If8WT1VzBz3cdBXY5Ker6EMRSdRaeFdg8V2z0RUw:jzkm2WQQT4rE5dMTYX3sGrdgk9RP
MD5:	E1ADB747F3EEC6F6A9B27BBFA3D4B02A
SHA1:	E5399C218B0E904E3EE2F0CD871FE496E0D9FBF5
SHA-256:	74D231E43599A7E382BDBD94C60ACB9BAA7FB018316C3DEB640F7D8ECE5ABFB6
SHA-512:	9478BA3F12D521C9021A82C810294ECDC197A8A716DB1BF024FDA117BEAFE3B45F59F7F2FAC62ADC1CA1D9A58A68DE079A6660B43FCB334CBAC0538BEF13A6D2
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/dNIx5DWZp-OCvb2UxgrLm6p_sBgxbD3rZA99js5av7Y.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function H(a){return a}var E=function(a,p,v,U,m,b,Y,X,A,h,I,R){for(R=99,h=61;;)try{if(R==1)break;else if(R==v)R=l.console?86:a;else if(R==99)A=l.trustedTypes,X=Y,R=p;else{if(R==37)return X;if(R==p)R=A&&A.createPolicy?60:37;else if(R==U)h=61,R=v;else{if(R==a)return h=61,X;R==60?(h=91,X=A.createPolicy(b,{createHTML:d,createScript:d,createScriptURL:d}),R=a):R==86&&(l.console[m](I.message),R=a)}}}catch(n){if(h==61)throw n;h==91&&(I=n,R=U)}},l=this\|\|self,d=function(a){return H.call(this,a)};(0,eval)(function(a,p){return(p=E(70,46,53,12,"error","bg",null))&&a.eval(p.createScript("1"))===1?function(v){return p.createScript(v)}:function(v){return""+v}}(l)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;cha

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1055)
Category:	dropped
Size (bytes):	2690
Entropy (8bit):	5.398083497267717
Encrypted:	false
SSDEEP:	48:Otg7xNqHIN7QaE9Fa9FZpPiNmgrZyHicju8m5I0zRHkFRCmTx:rN7Qabhiwdicju8WhRHMnTx
MD5:	2669D16AAE166D157B8434762A199620
SHA1:	CA7E08D45D0D469ED57825C28CB214F421311F97
SHA-256:	944A37F694B55DE268A0BF52DBAE4E12F12C4AE09EE5C8D213BA05075C2865DD
SHA-512:	51CCCC87145F0B0098B81BEA1506C726BB249E65F3B5FCC853F1FC4D4E55716F1F9318E43A2A0B31DFC4C968C14EBAF1EEFB9331C6DCE1B561459883DA7E9432
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';function f(a,b,e){a.addEventListener&&a.addEventListener(b,e,!1)};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a,b,e){if(Array.isArray(b))for(let c=0;c<b.length;c++)g(a,String(b[c]),e);else b!=null&&e.push(a+(b===""?"":"="+encodeURIComponent(String(b))))};function l(a=document){return a.createElement("img")};function m(a,b,e=null,c=!1){n(a,b,e,c)}function n(a,b,e,c){a.google_image_requests\|\|(a.google_image_requests=[]);const d=l(a.document);if(e\|\|c){const k=h=>{e&&e(h);if(c){h=a.google_image_requests;const v=Array.prototype.indexOf.call(h,d,void 0);v>=0&&Array.prototype.splice.call(h,v,1)}d.removeEventListener&&d.removeEventListener("load",k,!1);d.removeEventListener&&d.removeEventListener("error",k,!1)};f(d,"load",k);f(d,"error",k)}d.src=b;a.google_image_requests.push(d)};function p(a=null){return a&&a.getAttribute("data-jc")==="22"?a:document.querySelector('[data-jc="22"]')};var q=document,r=window;functi

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53840)
Category:	dropped
Size (bytes):	55134
Entropy (8bit):	5.720177960293411
Encrypted:	false
SSDEEP:	768:jzkmbXSW2GIQT4If8WT1VzBz3cdBXY5Ker6EMRSdRaeFdg8V2z0RUw:jzkm2WQQT4rE5dMTYX3sGrdgk9RP
MD5:	E1ADB747F3EEC6F6A9B27BBFA3D4B02A
SHA1:	E5399C218B0E904E3EE2F0CD871FE496E0D9FBF5
SHA-256:	74D231E43599A7E382BDBD94C60ACB9BAA7FB018316C3DEB640F7D8ECE5ABFB6
SHA-512:	9478BA3F12D521C9021A82C810294ECDC197A8A716DB1BF024FDA117BEAFE3B45F59F7F2FAC62ADC1CA1D9A58A68DE079A6660B43FCB334CBAC0538BEF13A6D2
Malicious:	false
Reputation:	low
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function H(a){return a}var E=function(a,p,v,U,m,b,Y,X,A,h,I,R){for(R=99,h=61;;)try{if(R==1)break;else if(R==v)R=l.console?86:a;else if(R==99)A=l.trustedTypes,X=Y,R=p;else{if(R==37)return X;if(R==p)R=A&&A.createPolicy?60:37;else if(R==U)h=61,R=v;else{if(R==a)return h=61,X;R==60?(h=91,X=A.createPolicy(b,{createHTML:d,createScript:d,createScriptURL:d}),R=a):R==86&&(l.console[m](I.message),R=a)}}}catch(n){if(h==61)throw n;h==91&&(I=n,R=U)}},l=this\|\|self,d=function(a){return H.call(this,a)};(0,eval)(function(a,p){return(p=E(70,46,53,12,"error","bg",null))&&a.eval(p.createScript("1"))===1?function(v){return p.createScript(v)}:function(v){return""+v}}(l)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;cha

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1395)
Category:	downloaded
Size (bytes):	117446
Entropy (8bit):	5.490775275046353
Encrypted:	false
SSDEEP:	3072:T2yvefrtJUEgK3Cvw3wWs/ZuTZVL/G1kL:T2y4tJbDK0L/G1kL
MD5:	942EA4F96889BAE7D3C59C0724AB2208
SHA1:	033DDF473319500621D8EBB6961C4278E27222A7
SHA-256:	F59F7F32422E311462A6A6307D90CA75FE87FA11E6D481534A6F28BFCCF63B03
SHA-512:	C3F27662D08AA00ECBC910C39F6429C2F4CBC7CB5FC9083F63390047BACAF8CD7A83C3D6BBE7718F699DAE2ADA486F9E0CAED59BC3043491EECD9734EC32D92F
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.l2ZUC8FxqV8.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9xAAkaXO7Lqf7-9uTpZLtrkpWaXQ/cb=gapi.loaded_0"
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([]);.var ca,da,ha,ma,xa,Aa,Ba;ca=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.la=ha(this);ma=function(a,b){if(b)a:{var c=_.la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&da(c,a,{configurable:!0,writable:!0,value:b})}};.ma("Symbol",function(a){if(a)return a;var b

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	604
Entropy (8bit):	7.573620174038291
Encrypted:	false
SSDEEP:	12:6v/7dkfFQPHl09Kor6EHz1g+WVmObBbBbaLPIpTIiVojx5cF8NonhstcAzhu1:CkEl0nr6EHz1VWV33ePIpTzVojx5p6nH
MD5:	7BD42E5A35B5FB3FF852D6EA9191CA83
SHA1:	8A141EB392A05A2DEA3DCD83B97940EF70A81EBC
SHA-256:	5C4A713EE4250851232BE9F9F68D41586BE39B299528CFC7266E0B0E7E582E1B
SHA-512:	6FF31ACB937D6944570A837BB77AED92DAE41D71681440DC4765758FC40585F55999F2CDD78C4CE76A5AB414331BA9959BAFCFEF7E85B756AAB899C247F02890
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/icons/material/system/2x/settings_grey600_24dp.png
Preview:	.PNG........IHDR...0...0.......1....#IDATx...MKTQ...3...K...gP.Eo.Z$..6......"0..."..E-Z...C....+..E.T...JH/.HC.$d...y..."..W...w.3..3..9... ^..Fr4R.Q.....H<...\...V.[...v.L.D...y.wYQ....]....w&...\|F...iz8..b.s.r..[.H..5..5D..[@.ed.-...O..=..G..lpD.R.F".J....... .. y..$>.)V.`..quuP4.W9.}......y......~E}.7....IU.~.!.Ak.>....A..o..._.....7.4...{.K..6o.O..5.0n.`..z...V."^. 0.x=..^M...*t...H..9.B.(UD..>heD......."....W..T.E..0D.fYfI..3.-.G".....#.p....q.......Bv..{5.!u.F.i.......[.s.)....I....v.....Y.P.5?...n.'.......;...T......f......Q...~...8.....h.......T3<........IEND.B`.

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1501
Entropy (8bit):	7.8069101365699645
Encrypted:	false
SSDEEP:	24:USLpWnM5lXW9bsk9bcq1/1v3a9PnPvef6bqiq8eGaa3dpYdXMI8SPk/NIz:UuWM5l/ktc0heHpbY8zKuIDk/NIz
MD5:	75D78A3233B5E0672F48247200DECDB0
SHA1:	DA7E8B9DB98A6950D1637B4DD5E098FA2EC3A02A
SHA-256:	E136AE509E08AC00FB264CB82CFA1081982DDCF775EE058B201FABBCC59B7C8A
SHA-512:	78101831843340D55A22DE928677FCDBC20A66FABB7CF8BC9961EE7AD334286E0C2FF3A10B09785BD84854ED511C6931A2A7CD0E0810C18ADF526EF3619697F0
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/chrome/webstore/images/icon_48px.png
Preview:	.PNG........IHDR...0...0.....W.......sBIT....\|.d.....pHYs...v...v.}......tEXtSoftware.www.inkscape.org..<....ZIDATh..]l.U...wf?..K.B[.+..5 jL..h./.F......G...E\|V.4"P.....\|0.D.%(..U....-.nk.....3;.v..1...C.&=.f.{.9.....sg....,.l......m...<.COO..nv{.../....# ...R.7.q.).)4..VO.b.....VUU.V!G`:...8'.xw....G..../K).M9.r.UTT..u.. .....\|.....EQ&.\|S.c...'.T.x<..}<...d^u#.0s.\.p..#...\WWWX...+`...7e._%.+..(..+`'3u.._.+...k... .g.....$.P.#..@Y.B..F.Bx.......+q.U........i..;.....{.Ej.g.J<..b.C..wrq.....tww;' %.I}u.#._.R.._.W.TQ.y+.....B'.$....H&.....>.~........(-..[d...7......jG{(..M...v....`..Z!..\..'..+Y.s....'.....}..u....o.P=,x.E\|.lrD..1......i6...x.D..#..._lu.mb.F...}.G...^..Q\|.R.....F.o.ae.H$.....\|....23.h.....A..y.&]..8....=..[./.i..g..h#...r..+q:....k..,...!..y.L...B.T..Y.....6,.T'j....Js...F.R9C...X.;[.G......x..n.....j.j....S....)..1.E.rCo.j...X...0....#.#p..\E...<z.*..).x.B`.6...b...VA[/t........k....<...H..2......#.K.r..5.F...C\|..0

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3912
Entropy (8bit):	7.941193907298384
Encrypted:	false
SSDEEP:	96:34QVROtDUatTSdvIkkxAIObrGLCnJh/XMjQB/Q:3T3YpZUZ2HObrGLQTEjQa
MD5:	04051167E9FC5F5A5B4E110AF46592B2
SHA1:	98089905C89149F3E9D226F2B8E07E7028CB5D2D
SHA-256:	7575F5E99A5CBA10D39286F0E7E829496B060B22B8B5AD8F976F2F65FC7B4D71
SHA-512:	F58B92629D8EF3AAE22F587DC3EDB515B10EB7BD1C72D1C718AF1550566FDCA7DA6DFC313B2B53C06CF2221B1DA1B10EDD4631D0CCBC67FAB35D77D74681774F
Malicious:	false
Reputation:	low
URL:	https://img.informer.com/icons/png/48/1866/1866515.png
Preview:	.PNG........IHDR...0...0.....W.......IDATh..{\|..u.wvv..]...$.,$#.c.v...1...$N[.$@.o>.6..C.%\|..M...I.y4..1...h...8.y%D.............3...e=,L...........s.=wf....Y..v......_..K.9..I...h......w^.].R.d....;.w4n..7...A..}i...9...E.5.5p..C.......N...vq.9v..}r.;..k..3?4...#._.n...=..3..._.8\.#....G.A.$.E..B@)..X.f....\e.V...X....ek.OOF......>p.d.V........^,..7.z}R..z....A...Ja.....R....F.2.7._.h2z%]p...^....5...p.\.Z...N.P....H&$P...7\Y...[.c.B....6/.......u..Q.6&5..ROR...1.O.E.._.~...~C..I.E.}.5r..J..{..:..b.....a......0....+.......U.0.p.Ly.s.{.7}.:.4..w.v...[...V.`AE...m...eu..q...\|.w....5k1..>.......,.......Ee.....xzUH]U.........3..{.k?.....V4ry.ZjT4.....N,.........i....,.4....9....._7?n.....G..\....& ../.P.&..!.U.....6.P.y...8fc..M..A=....L.G.(q..\|..\|.}~...B.`q.:.\|.b.2M`.4Z[...tf..%..?..g....`.=.A.w....tP.."(./..W..../........P..........s.....:......J(5......).....ll..7.%.#..W,,?w...........!.....H...z0.." ....}m..L`.u..k.].c..P....

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	615
Entropy (8bit):	6.4948217311323795
Encrypted:	false
SSDEEP:	12:6v/7sAIeCBLnNVE+SLB/AIr8SKE8GVBWbXITQpuWPUMaOVCgS:qIHBxVE+2yE8GVBWb4T6PUMFogS
MD5:	DC7B7E44F47C6E39465452E36E46FB65
SHA1:	4C2C6934965B21574AE3F30B32E20599B4FDE409
SHA-256:	A677E54EBCB87E8AA9349724D4DCDC6C6E74A3D3F2E4FEA58226E225B79C6A8A
SHA-512:	80149BC04571BEC07A00587DE04D4858EE531CE9548611DC9BA28C559688A00966FFFD0462946C44FF15773753EA1A7D1D8409093065BFE7CC769229F6554E34
Malicious:	false
Reputation:	low
URL:	https://cdn.bidbrain.app/download_l_1734165033_64x64.png
Preview:	.PNG........IHDR...@...@............xPLTE..........................................................................................................................H....'tRNS.."......S.Y...b,%....~qG=.2...kO5..s....wIDATX...r. .EO..D.w.......Z@w&..x.....Z..GG.&...8'.x%.Sz...l..W).Z.>..c.,.E..........K...v...@x....~r.. 6.).v#f.V..!x...lV....9.=.N....#.....C.x0..._...0...>.z4.r,...<.........-....h3M'5.....bq_e..9>g...Z.c...#.(.....M.A.{'Q.....'.<...{.o% W...L.H.XB...rL.0..T...g. .jf`....2.3.Ka.e.:....2.j0.......t\|.....I.6".>&.A.............6\|....,..t..^u...q...N...o._..._.....IEND.B`.

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 404 x 280, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	57666
Entropy (8bit):	7.993278661469849
Encrypted:	true
SSDEEP:	1536:Yl4a+rMkzvXSyaf6vg0HXXZI5OTq31AiO/2fgkDFpRdZQ:Yl4bzvXSLf69XZ7f72fg0FQ
MD5:	6C4E9EC43A81C34200DEAE1A6A01C718
SHA1:	0BDD4834C4633873334367CD47E4D1A9EB2586F0
SHA-256:	5401F9C6F4EB9F026B7F3CCFD049D692565A52E2BB72FD4DB6353E3F3731E9D3
SHA-512:	26ADC9EEFD42A70DCEFDBE087D776E4D5344A687405A9B0EBE467BD1E09BEB1A7262D4174240AC5413A30D345F2F156749A339169980B3C80E4D2E7C079B8A8F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............Li.1....gAMA......a.....sRGB........ tEXtjpeg:sampling-factor.2x2,1x1,1x1I.......tEXtjpeg:colorspace.2,uU....%tEXtdate:modify.2016-08-30T11:38:57-04:00=>.T...%tEXtdate:create.2017-11-10T03:39:08-05:00 .m....AtEXtcomment.CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 85.........pHYs...H...H.F.k>....PLTE.............................................................................................................................................................................................................................................::9...uvv...}}\|..................................hii............................oppx{l.......x.....y...qse......p\|}y........T^_.......y..m...q..y.............................itu.........ij]...............\cd.....................p..ec^W...............z...w.......o.....mYWR....!........g...JRR...DFB...1...1.UM@GG X^-....pknsB...Idc....^^hg3{....U37#..}............g......cy.C...{CCSo......

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1001)
Category:	dropped
Size (bytes):	1196
Entropy (8bit):	5.333582724590128
Encrypted:	false
SSDEEP:	24:5RRRxkgItfur7dzmhYtc/FFlvyLYt3dVOVZYOaU/OjRR55+l:fvIA9MvvJO3Gj15I
MD5:	47CB9F7EE4927E0C4FD4EBC61AD18FDD
SHA1:	814310BC2436DBA485B651513DE9AE54222307F2
SHA-256:	128485ACA9E4075332B58355BF06B8C53FEAD880E9E93303E09265FF1C2BCE77
SHA-512:	EDEADD6E233B5C7B96F4C1ABAEFE18BA0FAFB4CAD0067A173646A848FB1A11552A2033BEA5847228401225C427086FCD16C8B0D7DCB969E2CF8A3E33577695B3
Malicious:	false
Reputation:	low
Preview:	var str="TopXNotes";var leftColumn=document.getElementById("leftColumn");if(leftColumn){var clsName='featured block';var div=document.createElement("div");div.className=clsName;div.onclick=function(){window.open("https://software.informer.com/go/g.php?go=https%3A%2F%2Ftopxnotes.software.informer.com%2F&hs=473582134&hilight&id=3948072")};var text=new Array();text.push('<span class="th_img">Today's Highlight</span><div class="th_logo small"><img src="https://img.informer.com/images/default_icon/default_48_0.png" alt="TopXNotes"/></div><a id="featured_name" href="https://software.informer.com/go/g.php?go=https%3A%2F%2Ftopxnotes.software.informer.com%2F&hs=473582134&hilight&id=3948072" onclick="return false;">TopXNotes</a>');text.push('<div id="thdesc"></div>');text.push('<img src="/ajax/th_view.php?id=3948072" width="1" height="1" alt="counter">');div.innerHTML=text.join("");if(leftColumn.childNodes.length){var before1=leftColumn.childNodes[0];leftColumn.insertBefore(div,before1)}els

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1829
Entropy (8bit):	7.853693094963993
Encrypted:	false
SSDEEP:	48:mTVPOydqXt24htj67rYHhbmiNaXb0ahfxYg2Bfdb4i:mIJ567rYMiNaXtxNQ
MD5:	89B3A657B3830E20D67C43067C590D7A
SHA1:	D79C54FFD7EF28BCB1B562B729F44C516EEA81F8
SHA-256:	10BD90B3DCBC40006BD38F883BB23952AEC7488228787B8DF01B3EC10CBA8F12
SHA-512:	28B1B5A7A085B1CB52EFD77056BEC016AA2E401072E5675A5DCE1A93A971006DDA700C17E6F6C77425F87CC051350B70FEC3D553FC75373ED2C8CF839DDCFDC7
Malicious:	false
Reputation:	low
URL:	https://img.informer.com/icons/png/48/3243/3243680.png
Preview:	.PNG........IHDR...0...0.....W.......IDATh..[lT....k...........65..".`b.-bD}1.&b.........`0..!&Z.&$.E.'(O.-.r..CG...03.M.3k....v..[.._..n..._...=B)..B..e...RJ.'....Gv.....T..V..\|.?K_...2.mI.j..R..p.^..LK.....W.M+m..(......B.\|&4.........{...E.P[..oc+.Z.2'.\|.ju....y.././....-..R......F..v.#!.,...6..^......K......@Fs.x.......0.._~!....>`l....,...y.w...2_.a.C.H.w..2.H..x.,....v..dFG....P...L'.e.oT..H....<.@+....l..k....g ...M&.,....m...' [[.... ......+E./....T........H.H..X)_0d.x.......ZZ...CC$.....9..6..k..(..b.....W.]..Oj.~.u.`.j.1......m!.....7m"...vmQ........I....6..@ PR6v...e+!.."...B0...?.]w.2 `.m;r.9..C...:~...@.._...I.)X.y},......r.0..b6.F...0.e...,../>..?..s.........L....f9....b.q.a)%..'..D..!..........2..W....M1..u...0...mh`.....7.0..q5."....!l.A)b.....m..<v...<{...Z.....).<..3......=c...h...+...EfdetpjJ)\........l.Z.NcK....d....MU.?./...d6.@V)f..+.......fff...<..`f'+.V6..K2....M.......id/^dbp...!b.,I.P..,;z.e..

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2731)
Category:	dropped
Size (bytes):	442828
Entropy (8bit):	5.579893166721979
Encrypted:	false
SSDEEP:	12288:c0r0Kinb77jT2gCJ73jZr6BliV0CorajmE9FUVbCaO8M2rWPCkXiWAdYUtFGTiDn:c0r0Kinb77jT2gCJLjZr6BliV0brajmx
MD5:	21126DA023904D636F635D16EBDAD753
SHA1:	673F7AD4B65F293669DC3D44FB2F1F9110787AF6
SHA-256:	3D97FFA7779F82C00A3A44FF7E9373A8126135A00B4632D7D9D3DEC8AB5AD20D
SHA-512:	3EA8524E474645982C9E1CBEDD04A560A0E68723139732A58379FEFBCA10207DC7BB01EE32333C6EE031CF2995158DB1BA73501002056D1B1AB6886DC4E34315
Malicious:	false
Reputation:	low
Preview:	(function(sttc){'use strict';var q,aa=Object.defineProperty;function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this),ea=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",fa={},ha={};function ia(a,b,c){if(!c\|\|a!=null){c=ha[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ka(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in fa?f=fa:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=ea&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(fa,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ha[d]===void 0&&(a=Math.random()*1E9>>>0,ha[d]=ea?ca.Symbol(d):"$jscp$"+a+"$"+d),aa(f,ha[d],{configurable:!0,writable:!0,value:b})))}}var la=Object.create,ma=Object.setPrototypeOf; .function oa(a,b){a.prototype=

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (11822)
Category:	dropped
Size (bytes):	11824
Entropy (8bit):	5.2927390094370335
Encrypted:	false
SSDEEP:	192:O9d9uZiYB+zsjBHN5whvID3YMYSPSWQ55aTkcfChQY+DdlZ7hJfLHmJIBu:Ee2zsNHHwlIDhPSZ550kcfChQtvJfxBu
MD5:	659A1EC658C77B9C936C856B9B72A548
SHA1:	C1076FE1A694D561FFAA673793CB6418763FA1E4
SHA-256:	B2D12B381E4F471679E903D6C8FE634AB8DDA43764168C8F3C1EE1269FE7EDAB
SHA-512:	77F2057B03E14C9378F6C6CB087263D7239EDA44D57104DF48105B88938656F594BD68DCAD9CDA0409AFDB78205C872B65F63816146923676F522C3626232558
Malicious:	false
Reputation:	low
Preview:	export function __vite_legacy_guard(){import.meta.url;import("_").catch(()=>1);(async function*(){})().next()};var t="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},n=function(t){return t&&t.Math===Math&&t},r=n("object"==typeof globalThis&&globalThis)\|\|n("object"==typeof window&&window)\|\|n("object"==typeof self&&self)\|\|n("object"==typeof t&&t)\|\|n("object"==typeof t&&t)\|\|function(){return this}()\|\|Function("return this")(),e={},o=function(t){try{return!!t()}catch(n){return!0}},i=!o((function(){return 7!==Object.defineProperty({},1,{get:function(){return 7}})[1]})),u=!o((function(){var t=function(){}.bind();return"function"!=typeof t\|\|t.hasOwnProperty("prototype")})),c=u,a=Function.prototype.call,f=c?a.bind(a):function(){return a.apply(a,arguments)},l={},s={}.propertyIsEnumerable,p=Object.getOwnPropertyDescriptor,y=p&&!s.call({1:2},1);l.f=y?function(t){var n=p(this,t);return!!n&&n.enumerable}:s

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3717
Entropy (8bit):	5.085610573430758
Encrypted:	false
SSDEEP:	96:D0S01JSv5+YnlNDVOph14/QtvCGhz5UlsJS:D0SaJSx+YnltVOpXhoGhE
MD5:	7A0E59BE630D5BCDC0345F8AC003108E
SHA1:	7245E769C7E1C90B9C95FEFAEA68C48C3DAA4350
SHA-256:	8F0BFDCC102C25AD095AAE209612915020E33323777D21C1504DC99057137893
SHA-512:	C37BC91764B7810CC6624F70DBCC2E77DCC24D4DF8434350FE16F2EC5E2C4AA48A7BFA243B8929E1869AEDFBC7C30E4CFEBD1DFCC83913C648B9E794E3F6C6E2
Malicious:	false
Reputation:	low
URL:	https://software.informer.com/style/onexit9.css
Preview:	/Modal/..layout_pop_up {. position: fixed;. top: 0;. bottom: 0;. left: 0;. right: 0;. background: url(https://img.informer.com/images/v2/bgfrm.png) repeat 0 0;. z-index: 1000;.}..layout_pop_up .pop_up {. position: relative;. width: 520px;..padding:10px 80px 0 80px;. background:url(https://img.informer.com/images/v2/pop_up_bg2_1.png) repeat-y #00A3E3;. /top: 15%;/..margin:7% auto 0;./* left: 50%;. margin-top: -232px;. margin-left: -365px;/.}. .layout_pop_up .pop_up::before{.. content: '';.. height: 100%;.. width: 10px;.. position: absolute;.. z-index: 90;.. right: 0;.. top: 0;.. bottom: 0;.. background:url(https://img.informer.com/images/v2/pop_up_bg2_1.png) repeat-y #00A3E3;. }....pop_up_top, .pop_up_bottom {../width:760px;/..height:10px;..position:absolute;..left:20px;..top:0;..background:url(https://img.informer.com/images/v2/pop_up_bg2_2.png) 0 0 repeat-x;.}..pop_up_bottom {..top: auto;..bottom:0;..left:0;../width:800px;*/.}..pop_up

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1134
Entropy (8bit):	5.2605067914352714
Encrypted:	false
SSDEEP:	24:2dHAlKLfETCWJJ0urvFLzAfa/qzKKI+vRxGBkH5vudCcMH/SuvI:cHAlOfETCWguVz5q+KII0kAdF0/Q
MD5:	2B0098859FC5FB668666110052E089CD
SHA1:	C869C06542CEB53946DF8E468EA153B179B7B2B7
SHA-256:	D0D44F21B71E6A47B3637E38F2A240694BBB73721D213D953D180219320D0038
SHA-512:	DA382DBE707CC07D55862E7975AA961FF5AF20C63D7B5217BA0F46CA23B08E3EE49F29EDD7A3F3D819664EBEEDD9366B6A09A021D4CA21732D9C152DE4588B3A
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 24.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="...._1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 344 53" style="enable-background:new 0 0 344 53;" xml:space="preserve">..<style type="text/css">....st0{fill:#F06666;}....st1{fill:#E3ECF1;}..</style>..<g>...<polygon class="st0" points="27.9,0 36.5,17.4 55.7,20.2 41.8,33.8 45.1,53 27.9,43.9 10.6,53 13.9,33.8 0,20.2 19.3,17.4 ."/>...<polygon class="st0" points="99.9,0 108.5,17.4 127.8,20.2 113.9,33.8 117.2,53 99.9,43.9 82.7,53 86,33.8 72.1,20.2 91.3,17.4 ....."/>...<polygon class="st1" points="172,0 180.6,17.4 199.9,20.2 185.9,33.8 189.2,53 172,43.9 154.8,53 158.1,33.8 144.1,20.2 ....163.4,17.4 ."/>...<polygon class="st1" points="244.1,0 252.7,17.4 271.9,20.2 258,33.8 261.3,53 244.1,43.9 226.8,53 230.1,33.8 216.2,20.2 ....235.5,17.4 ."/>...<polygon class="st1"

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1596
Entropy (8bit):	5.310732495106702
Encrypted:	false
SSDEEP:	48:QOLEJc+ukOLgN0xsOxTWxJc+ukOxTW4RN0xD:QOLEJc+ukOLgN/OxTqJc+ukOxTdNE
MD5:	7FA18E429A4E743112E4933DF4047688
SHA1:	33CA13508C4ACE8873E23367E895B4F6D3B67B66
SHA-256:	F67464284A348162F2476F94FFE70C19B096312EC5CDA153505B04F79B520189
SHA-512:	9E368D1D06E35EEC0369CA0BE7357D4DF0DAEDDFB32349155B41A6486FAD4E37C55A802350B35A57B38FE2D92FBF9309EB615446246B45BD70DAE18A8FB61839
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Poppins%3A400%2C600
Preview:	/* latin-ext /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJnecmNE.woff2) format('woff2');. unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJfecg.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 600;. src: url(https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2) format('woff2');. uni

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 275 x 175, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	27916
Entropy (8bit):	7.969710247228562
Encrypted:	false
SSDEEP:	768:xw6DpSWHX8/W6XfeurPznFe2zoMmEsSmVj:S2X8+6veurjboJEJmVj
MD5:	87BCCA66C3B126C0B7489D9CC545A42F
SHA1:	2C16B9D7C29B4624D1941FFD5ABB938BF28739F6
SHA-256:	FE475911F71FD40519F80426050F19B641701EBA0C1E9695F1744C9B33053906
SHA-512:	75DE1766A83461FF93B7FDEADD0E26F833BB06653C635546E4C6E11E8717B4C8777DC65829C62C067EF8FE4D0671C82B749D631587F33F63DB04B5C9D7AA9478
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/49X_jZPODshK81NcE2VTAn7jtIuCGi3bo2PH8UdQ8YV-X-3W8ik7UDMK1DFB7HO4uqZPhfZn6pki3HWeE2DMN204tg=s275-w275-h175
Preview:	.PNG........IHDR.............Q..U....sBIT.....O...._zTXtRaw profile type APP1.....JO.K-.LV((.O..I.R..c...K.K.D......04006..F@.9T(......Y......1....H...:.C2.. .IDATx..w.$Yu'zn...TVu....nfz,.....JX.].V...=..'..7.}.,.V..!a..'......f.`.Ow..&+....w...*.TV.....}....q.{.=..cH.....n........w.}s...Y...&!.....d2.$.={..8.i...,.;w...a.,...%......U.V...Y....'N....Baeeedd.....IR$..y.4..9M...D ..4.\..b1A.VWW..vrss.X,NOO..x].......Phpp.:P.........!.2.$p6A3...8 ...m=.!....0.._nR,.../..9....p .....r.R.eY..x<.v...V....'Of2.r.<>>..\|.T*...f..p.b1.....f...$.a.`0..x666(....iNLL.<..z6...j,..b1.....F#.J......J.288.p8..\|.T...\.h4.p8.ox..B.Z.6.M.....N..W..i?.....D...A..e9.L....F.. ...............$Ij6..b.......Q..r^...v.R).s.E..Z...z.n......H$...(z<...../.J..;...>d.l6[..)..`0..0....R\|.<.G".b.(.i...Z..0L__..=D.X.f....,.j.....q....!.^.'...oq...R...{.F..OF.......Q.(.....2._.RL6.-...`P....EQ..L&c........aT...%\|.....J..!.PH.....UU.@U../V..`0(..i..i2.C.....`.a..B......A..J.RY]].d2.

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2246
Entropy (8bit):	7.885788754986282
Encrypted:	false
SSDEEP:	48:EYhMnUgu5emJ0wjd715c98XqiPCchGStMIHvCKJM4TLJB:z0W8+0OtLcXcCRilP
MD5:	E8412F0DF0980711CA73CBD375949375
SHA1:	64A3D8DD7FAB9FE97D746ACDC66E8EBAF1D23B81
SHA-256:	DCE4BF579B21644447F7AB1F895E9E3443040D39D1140DEED5AB66ED3C69AFBA
SHA-512:	2AAB5FD16C07F9D067B1044BC568AE91A0C10B3453209BF2EB0AC7E4B978E72EAF3F10DBC10FC4D8507D3CC1B95FA0BF7C7849B3D83E1BFD236CE427871FFC38
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...<.....:..r....sBIT....\|.d....}IDATh..{.T...?.sw....>..Q.sQ..5i.....@.VM.V.4.mljM........j.j.....X[.Y.5Vd....V,U..!.....{..cv.a..efX%\|...=..~...s...9s...7RJ.v]..1f....x..R../.......}..J...(.`x..o#DK.N.tH.7SC.IF...S....(}..+.P...-..X......f.._....gz..B...!....+.2..J...3..9.g......-.......P.9@.......et.G@_...Z....\|.x....a..}.......7l'\|...n.s..U..a1\|.....f.+..}w..b..\S..<...yU.........O.mU.Eyo.c9..JL.....p@,...y.I...T..[y..s...u...?..g..h^.qN...>..q..yE](}....e........6s...ON.a.V}.2....*.k.V.....;...1 ......>@......5...o.H+.[.....s@..=.BT..........;Gj`...ST.F,Y.<.r&K.~..N..JSO..J.....6..i.U?8.........`Z.a."...6........v!r.Q.......K...!.fi7...H.........}.w.{....o.>'s8T.y.cpz]Cu.a..@M.&..\|..\../}?].k-...l'\|9.#>T..........!w.....W8...-/6...........C0.vA...W.I..D..`.L.#..u..EXS..Q.n...[. .". ..D<r.`.3......X.lm....y.@.U..XdL....=..h..!.JD.Ou.I.c........)....>...Y....c...}..B{x>..v...Y`.p...r..u?>..y.8. jUN..n..

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	dropped
Size (bytes):	141707
Entropy (8bit):	5.4473128875543075
Encrypted:	false
SSDEEP:	3072:p660sTPv0WJECBN8/tspu9lHtzkKPS8mKN0WlBz9Gm:SMg6clO4Rrht
MD5:	DBB8A5F0C0779C20B733ECB73A421605
SHA1:	219968A8361A730D30DB9772291D830B75BE526F
SHA-256:	2E7055C6FBE405848AD40D4DDC6F7EA3CAE9DD55F08B8CFB691CCB772DF7C162
SHA-512:	7E3DABC7E7FFDEFB9E32248DAE2A58919DB366866F57EBD70A1255205370FD2F0395C0DA35A9C319E23E8C50A914F439EC52EEFCCEC05854D18D2A5153980A3C
Malicious:	false
Reputation:	low
Preview:	var oi=Object.defineProperty;var si=(e,t,n)=>t in e?oi(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n;var j=(e,t,n)=>(si(e,typeof t!="symbol"?t+"":t,n),n);function Mh(){import.meta.url,import("_").catch(()=>1),async function*(){}().next()}(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const o of document.querySelectorAll('link[rel="modulepreload"]'))r(o);new MutationObserver(o=>{for(const s of o)if(s.type==="childList")for(const i of s.addedNodes)i.tagName==="LINK"&&i.rel==="modulepreload"&&r(i)}).observe(document,{childList:!0,subtree:!0});function n(o){const s={};return o.integrity&&(s.integrity=o.integrity),o.referrerPolicy&&(s.referrerPolicy=o.referrerPolicy),o.crossOrigin==="use-credentials"?s.credentials="include":o.crossOrigin==="anonymous"?s.credentials="omit":s.credentials="same-origin",s}function r(o){if(o.ep)return;o.ep=!0;const s=n(o);fetch(o.href,s)}})();var _n,D,Do,ct,Lr,Vo,jn,cr,Nn,Mn,T

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1683
Entropy (8bit):	4.319930928270355
Encrypted:	false
SSDEEP:	48:cMLj8NejIhj8NBLbUI7j8NBLbUIMj8NBLbUIxj8NBLbUE:r8Ney8NBH78NBHG8NBHh8NBHp
MD5:	1C7B758561931664DB7A21BDED0EBE69
SHA1:	343E93FE3944C374F93E3464C54BE0B2B93B48E2
SHA-256:	BD003AEBE4D1DA00DAE333E2A2AB8964806D0467287D9523727A7FAD1C09C3DA
SHA-512:	7F0050C6C3718951E7A870251DA3C2BCD73A67523D225D0EE83E73D1611866A542EA1788F49F6993D05AC1786EE57785306EE0A7D0C666C0FA954FCF9E64A39F
Malicious:	false
Reputation:	low
URL:	https://software.informer.com/images/v4/empty_stars.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?><svg id="a" xmlns="http://www.w3.org/2000/svg" width="121" height="20" viewBox="0 0 121 20"><path d="m10.58,3.38l1.84,3.85.31.77.77.15,4.14.62-2.91,2.92-.61.46.15.77.77,4.15-3.68-1.85-.77-.31-.77.31-3.83,2,.77-4.15.15-.77-.61-.62-3.07-2.92,4.14-.62.77-.15.31-.77,2.15-3.85Zm0-3.38l-3.37,6.62L0,7.69l5.21,5.08-1.23,7.23,6.59-3.38,6.44,3.38-1.23-7.23,5.21-5.08-7.2-1.08L10.58,0Z" style="fill:#f66;"/><path d="m35.58,3.38l1.84,3.85.31.77.77.15,4.14.62-2.91,2.92-.61.46.15.77.77,4.15-3.68-1.85-.77-.31-.77.31-3.83,2,.77-4.15.15-.77-.61-.62-3.07-2.92,4.14-.62.77-.15.31-.77,2.15-3.85Zm0-3.38l-3.37,6.62-7.2,1.08,5.21,5.08-1.23,7.23,6.59-3.38,6.44,3.38-1.23-7.23,5.21-5.08-7.2-1.08-3.22-6.62Z" style="fill:#f66;"/><path d="m60.58,3.38l1.84,3.85.31.77.77.15,4.14.62-2.91,2.92-.61.46.15.77.77,4.15-3.68-1.85-.77-.31-.77.31-3.83,2,.77-4.15.15-.77-.61-.62-3.07-2.92,4.14-.62.77-.15.31-.77,2.15-3.85Zm0-3.38l-3.37,6.62-7.2,1.08,5.21,5.08-1.23,7.23,6.59-3.38,6.44,3.38-1.23-

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3627
Entropy (8bit):	7.922163655046567
Encrypted:	false
SSDEEP:	96:jqZDae+Vvm3uGBb8Ay7jGu5pStEGEtLSDTMqr5YUZ:Wa7e3uGZ8lGApSuGFZYm
MD5:	ED7857CDE53A27D11087C3780D83682C
SHA1:	FE4BFD58B0ACAFD04235F14BE3A8B364B52C0091
SHA-256:	D7088968D5997B8322CB12BAB6CB29647E99F588014FF9AA34F9E84EE40530B7
SHA-512:	1A80AD16E6F99D96F9A0A2BAD855FE5F2740C6C17C5737A17F4005FA57A2206526197E335CD30CEC3AAB268EB8A7B1DD488D6F75044478F2CC6C4243CF97F54D
Malicious:	false
Reputation:	low
URL:	https://img.informer.com/icons/png/48/5524/5524797.png
Preview:	.PNG........IHDR...0...0.....W.......IDATh..{l\..?.{.<..;6&..V.....i...$@)....v.]..../..J...-..".XmZu...+.H.b. -..E.8e......U.y...'~...9..sg.......s......L.1..z........hs.6....a.c..?..~..7..0...............b.......d..H ...l.m.#......>~..[...\0f.....{[....S..'4.^..N2..LG..Y...&.....F....45Iir...~`...D.?...7j.wIeu....,..A...P......:..1.F.......q..{.1..IB.c.<....kc...dI.2...@.c....j.P...a...F........o....~...] z.sy.e.3^e..cX..S.F..M%..\.p'.(M...l.g...>3...7v).z.sM.3...]c..T..dU.Aa.....wf.Sy.+NQ....tW..y!....K.;......5a....mA..\.........;.pzilH.zu.SE.3..91<...t.7..^....8Q(`.;..2g8......[@<..C)5...,....9{...5/...o......x>...^....v.z...Jn...x...F.s&.;5.751``...vs...p........m.)c.-..K[../.....<..A.%p]..G.z..G..h.....A..R.q.f...orl.C..\|8g.....x.w..7..../.<....L..n.&...K[x.7........W,.J..R..^p}.....Bo....\...'..-L..wO.z...:.(.>............^...CI.mh@J..2..H!...:Z...>.<.:%#..I.d.+.@%....rl,..r,.c...a[H[!..<..._^.?c#....).wH).R..,R...y`.....T*..

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2107)
Category:	dropped
Size (bytes):	23460
Entropy (8bit):	5.513572686461823
Encrypted:	false
SSDEEP:	384:0NeDv+qLamAjjyo7pg/ho3Ylku7Rx/NXaQ6qIQB9Gv8fYQuUn0zabpGJC2omywtD:OeDv+qemijjq/y3Y2u73lXaQjfjYQuUW
MD5:	DC4520E2AA214C20E286694B3F95B21B
SHA1:	427318F9305A6026E6E13083B3E282713C8F28E3
SHA-256:	7A4326A32204366C74DD84AD9A1E6B0FC7315A5193E4EBA3C0DBF982A6884709
SHA-512:	081CF2931B43A4C63DD6A8445BF129F3473334CFB7FBA5538F8D1D0BB5A9B9A845D01E7AA272408937490AE3F4EB2B909956A7899422574454154ADBE9A6054A
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';var ba=Object.defineProperty;function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this); .function ea(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}ea("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")});/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var n=this\|\|self;function fa(a,b,c){return a.call.apply(a.bind,arguments)}function p(a,b,c){p=fa;return p.apply(null,arguments)}function ha(a){return a};var ia,r;a:{for(var ja=["CLOSURE_FLAGS"],t=n,ka=0;ka<ja.length;ka++)if(t=t[ja[ka]],t==null){r=null;break a}r=t}var la=r&&r[610401301];ia=la!=nul

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	475
Entropy (8bit):	5.183028407326297
Encrypted:	false
SSDEEP:	12:ky5UFOyvsIDNlb4XIiqsyt9t8kbRNced0:knEyUUl4Yyyt9Trcn
MD5:	6BA0E7C6B0717F55BC4FAAC358FFB06D
SHA1:	6EB2000BC4742C7065B91F964687989D09206B2D
SHA-256:	AE9353511B408B5A83B1C262628F49B61E1F83003DD5A15459B5956C936922B9
SHA-512:	7F7CFD7B429272E3728CC79321E4DB8E45C8C4D2ECE680C318D0DEF13685A473EE1DF353FF2DF89205E2DB0A42F5CBBE03529A8AC67BE2E51EA25D041522F3E6
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-chrome-webstore/_/js/k=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.en_US.lwRYVOpsj_w.es5.O/ck=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.oit6mfZoPW0.L.B1.O/am=WGow4BY/d=1/exm=A7fCU,AWpPDd,BBI74,BVgquf,CfLNpd,DNlSjf,EFQ78c,EKHvcb,FdMhB,Fu7Bjd,HsQQib,IZT63,JNoxi,KUM7Z,L1AAkb,LBaJxb,LEikZe,LcrBLd,LvGhrf,M0x0ie,MH0hJe,MI6k7c,MT4Hub,MdUzUe,MpJwZc,NwH0H,O1Gjze,O626Fe,O6y8ed,OTA3Ae,OhgRI,P6sQOc,PIVayb,PrPYRd,QIhFr,QVysJe,QvLWAb,Qy2cOb,R6rk4,RMhBfe,RiINWe,RqjULd,RyvaUb,SdcwHb,SpsfSb,UUJqVe,Uas9Hd,UkbOSe,Ulmmrd,V3dDOb,V9amgb,VBl5Ff,XVMNvd,YA1iG,YYmHzb,Z5uLle,ZDZcre,ZvHseb,ZwDk9d,_b,_tp,aW3pY,bZ0mod,byfTOb,cephkf,dsBBae,duFQFc,e5qFLc,ebZ3mb,gIl2M,gychg,h4ilFc,hKSk3e,hc6Ubd,i8oNZb,kBpGk,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mUxuKd,mdR7q,n73qwf,o2G9me,p3hmRc,p8L0ob,pjICDe,pw70Gc,q0xTif,qv5bsb,ri2s0b,rm99Nc,s39S4,sI9bWe,sOXFj,sQ8PT,tw4SJc,w9C4d,w9hDv,ws9Tlc,xQtZb,xUdipf,zKiH5d,zbML3c,zr1jrb/excm=_b,_tp,itemdetailview/ed=1/wt=2/ujg=1/rs=AEP720JOa-HBKdRRZPKO8sen3KFm9_9RpQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:QIhFr;lOO0Vd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;wR5FRb:YA1iG;xqZiqf:BBI74;yEQyxe:p8L0ob;yxTchf:KUM7Z;zxnPse:duFQFc/m=ld80Uc"
Preview:	"use strict";this.default_ChromeWebStoreConsumerFeUi=this.default_ChromeWebStoreConsumerFeUi\|\|{};(function(_){var window=this;.try{._.n("ld80Uc");.var e4=function(a){_.tB.call(this,a.Oa)};_.F(e4,_.tB);e4.Ea=_.tB.Ea;e4.prototype.Ve=function(){return"ld80Uc"};e4.prototype.Se=function(){return!0};e4.prototype.We=function(){return _.c4};_.rB(_.NF,e4);_.IA.ld80Uc=_.RF;._.r();.}catch(e){_._DumpException(e)}.}).call(this,this.default_ChromeWebStoreConsumerFeUi);.// Google Inc..

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	143
Entropy (8bit):	5.079318363208902
Encrypted:	false
SSDEEP:	3:PIy9JL/ZSGKHjJMzVJu+1vK3VYrSLIzECAXhxMAFjWAEtv0Gb:TJL/sGeMRJVSOGLIoDXhxVFjWAEd0Gb
MD5:	E4E31B474D3E0B577B3C8856E91F8659
SHA1:	A81311F7FCFA9B6B23A24D4E5C976D5F75B1B9B7
SHA-256:	18088C10E79C926292732AF98A0CE470E90F3FBCBA4BB4896AB3310C2D94E421
SHA-512:	A07961EB39C4CD4E39EE19E2C675E64E5BA5367DAA18E2F76A23772ABD62F46B002E6BE8FB0F35A70616941178FACC8DF579C4A68E5811B74313C12806AAFAE3
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/drt/s?v=r20120211
Preview:	<!DOCTYPE HTML PUBLIC>.<html>. <head>. <meta http-equiv="refresh" content="0;url=https://www.google.com/pagead/drt/ui" />. </head>.</html>

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2246
Entropy (8bit):	7.885788754986282
Encrypted:	false
SSDEEP:	48:EYhMnUgu5emJ0wjd715c98XqiPCchGStMIHvCKJM4TLJB:z0W8+0OtLcXcCRilP
MD5:	E8412F0DF0980711CA73CBD375949375
SHA1:	64A3D8DD7FAB9FE97D746ACDC66E8EBAF1D23B81
SHA-256:	DCE4BF579B21644447F7AB1F895E9E3443040D39D1140DEED5AB66ED3C69AFBA
SHA-512:	2AAB5FD16C07F9D067B1044BC568AE91A0C10B3453209BF2EB0AC7E4B978E72EAF3F10DBC10FC4D8507D3CC1B95FA0BF7C7849B3D83E1BFD236CE427871FFC38
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/nN2TcE8GMLPezErz6w5W-PB6k8tpgqYQwDK_ztbu5-RW9t4BvzG1t6GlJ6YelK4_4REzeFOihB5lhTt5VRGZd_is=s60
Preview:	.PNG........IHDR...<...<.....:..r....sBIT....\|.d....}IDATh..{.T...?.sw....>..Q.sQ..5i.....@.VM.V.4.mljM........j.j.....X[.Y.5Vd....V,U..!.....{..cv.a..efX%\|...=..~...s...9s...7RJ.v]..1f....x..R../.......}..J...(.`x..o#DK.N.tH.7SC.IF...S....(}..+.P...-..X......f.._....gz..B...!....+.2..J...3..9.g......-.......P.9@.......et.G@_...Z....\|.x....a..}.......7l'\|...n.s..U..a1\|.....f.+..}w..b..\S..<...yU.........O.mU.Eyo.c9..JL.....p@,...y.I...T..[y..s...u...?..g..h^.qN...>..q..yE](}....e........6s...ON.a.V}.2....*.k.V.....;...1 ......>@......5...o.H+.[.....s@..=.BT..........;Gj`...ST.F,Y.<.r&K.~..N..JSO..J.....6..i.U?8.........`Z.a."...6........v!r.Q.......K...!.fi7...H.........}.w.{....o.>'s8T.y.cpz]Cu.a..@M.&..\|..\../}?].k-...l'\|9.#>T..........!w.....W8...-/6...........C0.vA...W.I..D..`.L.#..u..EXS..Q.n...[. .". ..D<r.`.3......X.lm....y.@.U..XdL....=..h..!.JD.Ou.I.c........)....>...Y....c...}..B{x>..v...Y`.p...r..u?>..y.8. jUN..n..

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7680)
Category:	downloaded
Size (bytes):	158315
Entropy (8bit):	5.565418499488023
Encrypted:	false
SSDEEP:	1536:WBytLwDOKkPOkj4LDy3QGqr0ynYxQfDIbRToFNnNV6/2iDM:qyBjKkPOkj4LDCByvDIq1
MD5:	B4FBDA64B67839DB3F05726F43B788B3
SHA1:	66FDFCDC66656148577F497D1D727169EB6E044D
SHA-256:	567A8B9C517366A4460E2C29D6196AD9DD4E61A8524E275F9EFB68553E59C708
SHA-512:	3934C23D332DCF1FB145DBCD162D13C16A886FCB49061218A4A0180217D597523FC0B5D415A127C0767B0BB36D5D8A5B88CF2EA93F7591D42C96005366131B1E
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-chrome-webstore/_/js/k=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.en_US.lwRYVOpsj_w.es5.O/ck=boq-chrome-webstore.ChromeWebStoreConsumerFeUi.oit6mfZoPW0.L.B1.O/am=WGow4BY/d=1/exm=A7fCU,BBI74,BVgquf,CfLNpd,DNlSjf,EFQ78c,FdMhB,Fu7Bjd,IZT63,JNoxi,KUM7Z,L1AAkb,LEikZe,M0x0ie,MI6k7c,MT4Hub,MdUzUe,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,PrPYRd,QIhFr,QvLWAb,RMhBfe,RyvaUb,SdcwHb,SpsfSb,UUJqVe,Uas9Hd,UkbOSe,Ulmmrd,V3dDOb,V9amgb,XVMNvd,YA1iG,YYmHzb,Z5uLle,ZDZcre,ZwDk9d,_b,_tp,aW3pY,byfTOb,duFQFc,e5qFLc,ebZ3mb,gIl2M,gychg,h4ilFc,hKSk3e,hc6Ubd,kBpGk,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mUxuKd,mdR7q,n73qwf,o2G9me,p8L0ob,pjICDe,pw70Gc,qv5bsb,ri2s0b,s39S4,sI9bWe,w9hDv,ws9Tlc,xQtZb,xUdipf,zKiH5d,zbML3c,zr1jrb/excm=_b,_tp,itemdetailview/ed=1/wt=2/ujg=1/rs=AEP720JOa-HBKdRRZPKO8sen3KFm9_9RpQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;Uvc8o:VDovNc;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:QIhFr;lOO0Vd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qafBPd:yDVVkb;qddgKe:xQtZb;wR5FRb:YA1iG;xqZiqf:BBI74;yEQyxe:p8L0ob;yxTchf:KUM7Z;zxnPse:duFQFc/m=HsQQib,cephkf,i8oNZb,RiINWe,MH0hJe,AWpPDd,QVysJe,rm99Nc,ZvHseb,PIVayb,LBaJxb,bZ0mod,sQ8PT,tw4SJc,dsBBae,OhgRI,EKHvcb,VBl5Ff,R6rk4,O626Fe,w9C4d,LcrBLd"
Preview:	"use strict";_F_installCss(".rtaOSd-AznF2e-ZMv3u.rtaOSd-AznF2e-ZMv3u{border-bottom:var(--gm3-tabs-secondary-divider-height,1px) solid var(--gm3-tabs-secondary-divider-color,var(--gm3-sys-color-surface-variant,#e1e3e1))}.rtaOSd-AznF2e{min-width:90px;padding:0 24px;display:flex;flex:1 0 auto;justify-content:center;box-sizing:border-box;margin:0;border:none;outline:none;text-align:center;white-space:nowrap;text-transform:none;cursor:pointer;-webkit-appearance:none;width:auto;font-size:.875rem;z-index:unset;position:relative;background-color:var(--gm3-tabs-secondary-container-color,var(--gm3-sys-color-surface,#fff));border-radius:var(--gm3-tabs-secondary-container-shape,0);--gm3-focus-ring-inward-color:var(--gm3-tabs-secondary-focus-indicator-color,var(--gm3-sys-color-secondary,#00639b));--gm3-focus-ring-inward-offset:var(--gm3-tabs-secondary-focus-indicator-outline-offset,-3px);--gm3-focus-ring-inward-track-width:var(--gm3-tabs-secondary-focus-indicator-thickness,3px);--gm3-focus-ring-inw

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 275 x 175, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	63911
Entropy (8bit):	7.993904967351629
Encrypted:	true
SSDEEP:	1536:KvS9fzC8iuWegwGMHP7dEzy3G0TyUZdkQtab4CR8Twgx:KYf+LzzAhEzy3GMQ9BKx
MD5:	845B78379543107DF9D4D14D88ACD628
SHA1:	757A8CC66BE0ABEB61624903C9EFB0FFDE21A572
SHA-256:	1854A7F8872C27A2845A98E2D6A0F2361C23A374F3D1688C42C88458B9317D39
SHA-512:	3329B223874FAD84F0CF8AFA8AA6B23DDF9ADF46AF056362E3DD53CE0C19DD649C8FBAA5F8CECC8C20FE0A955D0F6CF2D781E010D7BC56DB804318DE7D659A55
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/sXqrFJhwlJsMvvJjhSVy2ykEBnWq07nXuJOjNVx4MMRRZAM-lD49906qnccjpcuacrYtAzt05oXRzYzEIQR7p-qfWw=s275-w275-h175
Preview:	.PNG........IHDR.............Q..U....sBIT.....O... .IDATx...].u_.....c.......+....I..c..BB .r!..QT....D.QI_.7J..`$hD/..o..D.....t.$..t7$&.I.N.....{.^k...x.>oa..}(....>....c<.3.1...........2L.I..e\|.....`.Jo0.2;y.....S6.`\P.pg:..`.t.. ..F........K...u....c........s2.3RZ....w'9......~..}0'.....>.....I.1.1.....@.L._..9.\|b..&...;......>..>..A)8...I..T.....\I.9....O.I......3'e.'..0.@..+q...$g..(......5&.aF.18O...~et....I.~..s.....3V..d.I2z.V.:HFJ...A.....8..$..R.go.9..2..../..m....Xb:...'...q.s.8.j.. a.{X7Fg....q..v+Z+V..hZ.~b....ba...N......;)3Nm.w.9.$U...s.}.\|c:.2.v.....Bo..O....N....V.R.I..\i..........+t..\(...K..'...S.6..l....C...>.....Q..q.wp@73.t.+L..je.]a<.1.'f0H.....Sv\|j.....A.....wf'U}S..`F;.YW.....n..t.....Z\v.!.F.Bl.8....~......F...p-..>.M.`...9.E.c.O.F6..Z.'...6....0.c4...9..s.m....9...10#eE.....7}L.3'.....9........8.Z..........{.J..~..$.x.2.I.7..0....~b..........2..k{....K.q)....`\|.7.....7FgtR.+.l.1....8.. '... ...HF0.'...A......

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1314
Entropy (8bit):	5.197367126177473
Encrypted:	false
SSDEEP:	24:2dnNAlKLfLITgHRWMEiPNzWfn0xFDiU14Yd0LiWtCyrDAbwaMMbGI:cNAlOfMTgxWMDVcESYd0LhCyrcbw7Uh
MD5:	1031D42AE78229B952ACEC5FDE50B235
SHA1:	7A6D7405F87F2A29AA772DC4B1677BE996D44BBC
SHA-256:	4CA25780BE24C966C322BF9965F491CD2BF78908588BDE07EB5C6E91A899224C
SHA-512:	43415D02019B98631AC11A01E07BFCFF5041727CD44D1EC429962804CD36C30D688A1CC5007BEBA7C5E49D55ADA1EE41FB7BF901BFF7777D739322C89AD0D9CC
Malicious:	false
Reputation:	low
URL:	https://img.informer.com/images/v4/4stars.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 24.1.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="...._1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="344px" height="53px" viewBox="0 0 344 53" style="enable-background:new 0 0 344 53;" xml:space="preserve">..<style type="text/css">....st0{fill:#f06666;}....st1{fill:#e3ecf1;}..</style>..<g>...<polygon class="st0" points="27.867,0 36.478,17.447 55.734,20.244 41.8,33.824 45.09,53 27.867,43.947 10.644,53 13.933,33.824 ....0,20.244 19.256,17.447 ."/>...<polygon class="st0" points="99.933,0 108.545,17.447 127.8,20.244 113.867,33.824 117.156,53 99.933,43.947 82.711,53 86,33.824 ....72.067,20.244 91.322,17.447 ."/>...<polygon class="st0" points="172,0 180.611,17.447 199.867,20.244 185.933,33.824 189.223,53 172,43.947 154.777,53 ....158.067,33.824 144.133,20.244 163.389,17.447 ."/>...<polygon class="st0" points="244.067,0 2

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	47
Entropy (8bit):	4.453005074851736
Encrypted:	false
SSDEEP:	3:m8ZJV7NInL5A0IMAr:m+ElA0IMAr
MD5:	7F5F2BE159837D73B72A4B37616BCE44
SHA1:	C93D7F25B530B05C26440D3352213B683D03DCC3
SHA-256:	CCECD185AC16BA0A538840F37701053FBB861F7FBBDD86039C7415FCD924D1F2
SHA-512:	A1002883CA1DD74080546C6D34A38144B867A8E8A22E4BAD80EB1D221A86FE9EDEA81A5F12D3CA6B2BF29E686FC80CC32B06E37B83381750B6E773A62052A0A8
Malicious:	false
Reputation:	low
Preview:	window['google_empty_script_included'] = true;.

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	6354
Entropy (8bit):	5.281564480340138
Encrypted:	false
SSDEEP:	96:bIYQ4TPvcsr0t4Rbf1LDad7wbIRYCoY4/cqsTRU+R/4miWMKB64usiZJ:bIw7kobtuwbgYC2/XhrKB64usiZJ
MD5:	FF3F4B9DED7DC9111FAAA6D9F51C0B3B
SHA1:	725C22FF6BE7CF293C388B253248CA7CDF4E330F
SHA-256:	C48A1EE09680B829E3129C7CFBB0063C926940D80D74219F3585B38C0579C6A8
SHA-512:	49F672F4B2C60CA85E603D81F18B4F83D3D717A990DAD5A211D1269D3B7EB7EF8C143D9CFEA290087AB133A60F182A6DE044759FF180D7403C9237B94C82AA85
Malicious:	false
Reputation:	low
URL:	https://i.informer.com/js/onexit9.js
Preview:	var eg_width=254;.var eg_height=345;.var eg_bordercolor='#e4e4e4';.var eg_bgTitle='#f0f0f0';.var eg_timeout=0;.var eg_disable_scrollbar=false;.var myWidth=0;.var myHeight=0;.var opened=false;.var is_in=false;.var egwind=null;.var eg_x=100;.var eg_y=100;.var nrp=-1;.var nrp_show=1;.var autoclose=null;.var onexitheight = 15;.var cookiename = 'onexit9_2';.var posy_p=0;.var movetop = false;..function show_close().{..$j("#exit_close").css({'display':'block'});.}..function mmove(e){..if(opened)return true;..if(typeof(window.innerWidth)=='number'){...myWidth=window.innerWidth;...myHeight=window.innerHeight..}..else if(document.documentElement&&(document.documentElement.clientWidth\|\|document.documentElement.clientHeight)){...myWidth=document.documentElement.clientWidth;...myHeight=document.documentElement.clientHeight..}..else if(document.body&&(document.body.clientWidth\|\|document.body.clientHeight))..{...myWidth=document.body.clientWidth;...myHeight=document.body.clientHeight..}..var posx=0;.

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4434)
Category:	dropped
Size (bytes):	74412
Entropy (8bit):	5.584975491478061
Encrypted:	false
SSDEEP:	1536:ON+4tY0S2yvGnf4vA6s/RXHUJGokpuv+S9cOTm7IWOByK:T2yvefHfotP9ti7IyK
MD5:	604305B4C6768309AFD161FB4765ED1D
SHA1:	8BA0E9078CDD729A55C99B8C81EFB10C77B0C7A4
SHA-256:	10F2C1A783A6BCA723B2E7F96579FDED43E7CF14A032CC593E67AFCE3AE458FA
SHA-512:	9F8A6218A096397C5E379C6A31A580FD598E59EA291A283BC64AD4C2B83B60D0CEE74643DB0279AFBBC77C8FB8EEB7E9DFDBA6A02DA344806FA6AAA21FFFD3DD
Malicious:	false
Reputation:	low
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([]);.var ca,da,ha,ma,xa,Aa,Ba;ca=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.la=ha(this);ma=function(a,b){if(b)a:{var c=_.la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&da(c,a,{configurable:!0,writable:!0,value:b})}};.ma("Symbol",function(a){if(a)return a;var b

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2107)
Category:	downloaded
Size (bytes):	23460
Entropy (8bit):	5.513572686461823
Encrypted:	false
SSDEEP:	384:0NeDv+qLamAjjyo7pg/ho3Ylku7Rx/NXaQ6qIQB9Gv8fYQuUn0zabpGJC2omywtD:OeDv+qemijjq/y3Y2u73lXaQjfjYQuUW
MD5:	DC4520E2AA214C20E286694B3F95B21B
SHA1:	427318F9305A6026E6E13083B3E282713C8F28E3
SHA-256:	7A4326A32204366C74DD84AD9A1E6B0FC7315A5193E4EBA3C0DBF982A6884709
SHA-512:	081CF2931B43A4C63DD6A8445BF129F3473334CFB7FBA5538F8D1D0BB5A9B9A845D01E7AA272408937490AE3F4EB2B909956A7899422574454154ADBE9A6054A
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20250114/r20110914/elements/html/interstitial_ad_frame_fy2021.js
Preview:	(function(){'use strict';var ba=Object.defineProperty;function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this); .function ea(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}ea("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")});/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var n=this\|\|self;function fa(a,b,c){return a.call.apply(a.bind,arguments)}function p(a,b,c){p=fa;return p.apply(null,arguments)}function ha(a){return a};var ia,r;a:{for(var ja=["CLOSURE_FLAGS"],t=n,ka=0;ka<ja.length;ka++)if(t=t[ja[ka]],t==null){r=null;break a}r=t}var la=r&&r[610401301];ia=la!=nul

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	469
Entropy (8bit):	4.889487192217403
Encrypted:	false
SSDEEP:	12:trIoqCtuCV9/K4KiwXl69on6kAHFjhllR:tcoqAuui4KiwX96kajhllR
MD5:	6974AEE9AF84143B4AC5C739F1707C95
SHA1:	B0E39311591AA75BF203BC7ABDF64FDAF7B05797
SHA-256:	E8B2FE0CAF115F14D018B7064E8F710521D4C284263A7AE2922FEEC272961DA6
SHA-512:	4788601CCA97E02AEFD465BAA0872171A47330E22761CA9BA5B7C14FE006E9C88E03F4E7A9DE4A9850EE9BFBA530ED0E437B42C13FECA604818D5C52EEF3259A
Malicious:	false
Reputation:	low
Preview:	<svg width="19" height="21" viewBox="0 0 19 21" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M1 13.2632L1 16.9691C1 17.5307 1.22125 18.0693 1.61508 18.4665C2.0089 18.8636 2.54305 19.0867 3.1 19.0867H15.7C16.257 19.0867 16.7911 18.8636 17.1849 18.4665C17.5787 18.0693 17.8 17.5307 17.8 16.9691V13.2632M9.40117 1V13M9.40117 13L14.2012 8.41485M9.40117 13L4.60117 8.41485" stroke="white" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"/>.</svg>.

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3160)
Category:	downloaded
Size (bytes):	20762
Entropy (8bit):	5.534161653662071
Encrypted:	false
SSDEEP:	384:ElV/MfTqRhG/rVBnnksgmca0ha5WpZbTNinUm0fBC08er7ODgUR5KAC+P8aqWahC:ElV/MrqRc/rznAkLEpNTNiUz5C0Lr70X
MD5:	DF8C7196958168C2B6E10F4D2306BEF3
SHA1:	5AEAB2C4B37035DE83839EBAC95C471E8EA132F2
SHA-256:	6617311ECE84D2511297F47001AA93FB5F171F4DAF874472913F3FE78C00653B
SHA-512:	36BA3A8E074C9F88CCF33F6F9FA433AC9A0A3D2C2EABDA87790FE17E55BAAFAD8A70F4D2E040D393DBCE01833A774EAC0B79A30AF64C0589C389C6859BEF933C
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20250114/r20110914/client/qs_click_protection_fy2021.js
Preview:	(function(){'use strict';var aa=Object.defineProperty;function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this); .function da(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var f=a[d];if(!(f in c))break a;c=c[f]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}}da("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")});/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var n=this\|\|self;function ka(a,b,c){return a.call.apply(a.bind,arguments)}function p(a,b,c){p=ka;return p.apply(null,arguments)}function la(a){return a}function ma(a,b){function c(){}c.prototype=b.prototype;a.N=b.prototype;a.prototype=new c;a.prototype.constructor=a;a.O=function(d,f,g){for(var e=

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1112
Entropy (8bit):	5.226747956858278
Encrypted:	false
SSDEEP:	24:2dHAlKLfETBJJ0urvFLzAf5/qzKKI+v6xGBkH5vNdCcMH/SuvI:cHAlOfETBguVzAq+KIZ0k/dF0/Q
MD5:	653A262EFB7C3D165CA018B361E990F3
SHA1:	23004A64D0CAD55C7A286FF65DCC00BE54600674
SHA-256:	89EB8DBD23124FA5BB72DEFFFD16ABCEA55BB06A40C1EA0256E90B0EEEFC6DD9
SHA-512:	23199F4C36D562736447CC0EB826C7BFCC375F82C9C9B1F56453D482C7115ACFFB4EFFF258194E90B6F20D24C067001A14BC72074FA7BA686F7339C96F5B0FA0
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 24.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="...._1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 344 53" style="enable-background:new 0 0 344 53;" xml:space="preserve">..<style type="text/css">....st0{fill:#F06666;}..</style>..<g>...<polygon class="st0" points="27.9,0 36.5,17.4 55.7,20.2 41.8,33.8 45.1,53 27.9,43.9 10.6,53 13.9,33.8 0,20.2 19.3,17.4 ."/>...<polygon class="st0" points="99.9,0 108.5,17.4 127.8,20.2 113.9,33.8 117.2,53 99.9,43.9 82.7,53 86,33.8 72.1,20.2 91.3,17.4 ....."/>...<polygon class="st0" points="172,0 180.6,17.4 199.9,20.2 185.9,33.8 189.2,53 172,43.9 154.8,53 158.1,33.8 144.1,20.2 ....163.4,17.4 ."/>...<polygon class="st0" points="244.1,0 252.7,17.4 271.9,20.2 258,33.8 261.3,53 244.1,43.9 226.8,53 230.1,33.8 216.2,20.2 ....235.5,17.4 ."/>...<polygon class="st0" points="316.1,0 324.7

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1112
Entropy (8bit):	5.226747956858278
Encrypted:	false
SSDEEP:	24:2dHAlKLfETBJJ0urvFLzAf5/qzKKI+v6xGBkH5vNdCcMH/SuvI:cHAlOfETBguVzAq+KIZ0k/dF0/Q
MD5:	653A262EFB7C3D165CA018B361E990F3
SHA1:	23004A64D0CAD55C7A286FF65DCC00BE54600674
SHA-256:	89EB8DBD23124FA5BB72DEFFFD16ABCEA55BB06A40C1EA0256E90B0EEEFC6DD9
SHA-512:	23199F4C36D562736447CC0EB826C7BFCC375F82C9C9B1F56453D482C7115ACFFB4EFFF258194E90B6F20D24C067001A14BC72074FA7BA686F7339C96F5B0FA0
Malicious:	false
Reputation:	low
URL:	https://img.informer.com/images/v4/5stars.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 24.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="...._1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 344 53" style="enable-background:new 0 0 344 53;" xml:space="preserve">..<style type="text/css">....st0{fill:#F06666;}..</style>..<g>...<polygon class="st0" points="27.9,0 36.5,17.4 55.7,20.2 41.8,33.8 45.1,53 27.9,43.9 10.6,53 13.9,33.8 0,20.2 19.3,17.4 ."/>...<polygon class="st0" points="99.9,0 108.5,17.4 127.8,20.2 113.9,33.8 117.2,53 99.9,43.9 82.7,53 86,33.8 72.1,20.2 91.3,17.4 ....."/>...<polygon class="st0" points="172,0 180.6,17.4 199.9,20.2 185.9,33.8 189.2,53 172,43.9 154.8,53 158.1,33.8 144.1,20.2 ....163.4,17.4 ."/>...<polygon class="st0" points="244.1,0 252.7,17.4 271.9,20.2 258,33.8 261.3,53 244.1,43.9 226.8,53 230.1,33.8 216.2,20.2 ....235.5,17.4 ."/>...<polygon class="st0" points="316.1,0 324.7

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 61628, version 1.0
Category:	downloaded
Size (bytes):	61628
Entropy (8bit):	7.996560994602728
Encrypted:	true
SSDEEP:	1536:D0bcbU0BkgaaHDF868T5Io63Udr9xCHGD1AMYN4+:gbcbUq5a4x8VV63ErD1g
MD5:	1033A47731E45F7BD46A1962359E96B4
SHA1:	AC6ABEF8D1819A685DB48A9515F77A24A153E2A0
SHA-256:	61C412FBDBBF1417355373A80125C8CF7E5CBAAB4218BAE0316FE6EF917BF798
SHA-512:	84CA95F89E0A16EFD962B44BD3F7FFE09B328F33C068ACD8A1FEFD08101D824929E8B9EECCB0786483AA2FD2C60BD0B76FC2242479268D69FAAB72C48902E34B
Malicious:	false
Reputation:	low
URL:	https://cdn.bidbrain.app/compressedFonts/RobotoBold.woff2
Preview:	wOF2.............~....U..........................D...\|..h.`..H.B..<.....l.....F...l.6.$.... ..". .."[.B...r...`..v..-.8.ko.0.W....)...B.........4..wf.......J&2.IZ.i)E.........FP.".Z.%j(...<...,.c..).5..bW.h..}......Mv.......,....7H...&...G..x..SzA.V.....}.. ..!s..H....:.....YZ.4.......~....@..T.WOK.?.k....".{..".R.><Tf.&.\|..r..F..z..I.+.5.\|=. l..J...A..&.^g/..#......O6..XS...r.g.}...._3....l..\.V.Nw...c...i.<.()..l4.3.2<...h}U. ........:7._...(S.AU..P.....bg...8..a./.x..oy............?UH...#.T.Tl.../..Z....f~..% .[/.D.6".2v97[.'...p...'a....i...x,.....@..vrq.kO....f..@2..5...U=..,.A.....]t.[d..".B ..,b..#J..q....'..E......8.........M.c....5....~.....g.....I...l..$.DM.$.B..wrM.;..p!#W..c....FTNO.P.@......WU...-...'.gB7........#......P.ItzxW..[*....R."/.....SV..&{......r+M...P..C..7.>E..kS.T.\...=s..I...Fh.4......gp..KJ..v...Y.....p"...i.I.d....jwH...t).cG.......>....^6..@.&\|....G......U..{.........$..7..]..r.2`..9..~....;....Y...g

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	205
Entropy (8bit):	6.471232950817362
Encrypted:	false
SSDEEP:	6:6v/lhPmvbPM6ArwrgPowQka3cQhWb8i4NI1Q/2up:6v/7OvzZ6IRwIcQEb7461Q2c
MD5:	4087858E2C9DB9AA8F6A840AEDCFB533
SHA1:	D1FFE861DA6BD0E95FD1A365B0C3D3CEB6CD58A3
SHA-256:	4D45982F2DC34F36C9045EE46A75A1943666BB7FD64E103CAC8C7429E7012840
SHA-512:	541228667C513266FFAC017AA43CCACEA410E20BF27D30599276E9984FAC2C433AC58288C19F7A5BFEB1C9B4074B8C9C472080BF1C706303F97B2CE73DBD634F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....IDATx...1..1.DQ.f....@H.....%`..j.M&"....5....;...;.......\.....\..U.4..pe.<.P.....%... ...@....p.....@...X...5..{.$.x^....y=..z.......\|.......+.........IEND.B`.

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 16396, version 1.0
Category:	downloaded
Size (bytes):	16396
Entropy (8bit):	7.985827035156134
Encrypted:	false
SSDEEP:	384:Lha7McMVhiB+XmITjsy+wHXjov+sc8idzmAKUcLIS:Va7McSPXpjsy+wHzu+nZdKDUcLr
MD5:	A2EDB5C7EB3C7EF98D0EB329C6FB268F
SHA1:	5F3037DC517AFD44B644C712C5966BFE3289354C
SHA-256:	BA191BF3B5C39A50676E4ECAE47ADFF7F404F9481890530CDBF64252FBB1A57E
SHA-512:	CC5644CAF32302521CA5D6FD3C8CC81A6BBF0C44A56C00F0A19996610D65CF40D5BAE6446610F05A601F63DEA343A9000E76F93A0680CFBF1E4CF15A3563A62C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmhjtg.woff2
Preview:	wOF2......@...........?...........................<..l..:.`..:........d.....6.$..(. .....N.....5x.-.v.?..,...<Sn..O/.<.... ......{r2D!v@..?...."..F..\3...-5B....x.).x.$ze._c.l.)~Y..YE.J.e.uW.%).?..T.].q_7y.4...$....t.F #t8.j...GO..k..&.Ecb.X..m#.........k.s.Fr...<q~.@].PHN?..w.h.f...!h..A,H......H.R.T.R.......)...m..}u...".)(J.......>!. .V-....E^.bQ.....U.....u.s?$3.L$...y.........LpB.H.=...."R]\|=..._.o..W....N.j2.L.D.....{.<..s.W1I. zHx:..I.......G..~.6..E.&I4.J..h.Y...uM..D.z.u..)......<...T.......U...k...O......C.!vCy....&..y......t....e...(#.......%v..;.XTS...,....A.w.....K...vv.AI..~y..t..f.....D!...h.."e...h.pQ..{...\..G.......K.[.R....{.%]].0...!i.. ....w......4...`G.2...GD.wZV"...I.......tGQ.<..d..P...o.{......].hI#.....(..0_d..%....E.....?.\|...)...U."b....1bT.....~.U.[.NJ%....hW....s.;.Vm.}]..2............<...\|q.yW.x....sar!.J. .D...z..GcH.~k.r. >..kY...$2D..B@0.5.6.:...T.xr.~. `M...;.?..b6.Puc,.P.....F.pU.a.f_.xS.....IV.r~......6"..AX.

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1436
Entropy (8bit):	7.66616417060062
Encrypted:	false
SSDEEP:	24:pN4EWfyvL7A2rDdswLoFNtDD6BODSEgB95vKHeUt+8w66W+r7EnCkz3sfwaEEuhl:AXyvLDrQoY94CHewSWE4Jn
MD5:	9BA7EED2E720DB5DDBF21025DE7F32A2
SHA1:	D3FFF365965E7C13EBD043A82F52E9172D912D9F
SHA-256:	B9D11E4CB730E64C4D6BB4FBAFE33264AFCF0627A20BC4EC53A20420D25829F5
SHA-512:	933456EEF3AF8AD79E6ABFBAA53CF7EEC3C96332E1599E3D22E341D5E21D7668B786FD24CF9CBDCF53625BFB882720A376DF82FD6AA277887797CD48E510FE88
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz....cIDATx....TE.......aaEY"".B.E.....h................aa..<..3..].f.].:..L...U.N.m$..(.....].h..x.~...Y......%IYq...I....-.m...(.c.VI[....0...#.P..,l.......@.x...l{.X.......m..`70.........4j{HR.vYR.+.mI......Vm/Jz.<......m/.5...AI3.........W..X.7..l+"....I....`V.y.W...Q.3....J.f.&..0.,.^..f..4m.$ul[.lg.......c....).;b~A.5...v.D.AIS...$7%]....@'...N......HK'R....>........`.(I.C..m?...N..mW$..&%M...4l{@R.y..Kj.K..K.........G$...J...F....A...80.......)......u...........H..L..h...=,.=.+.;.[.\|.hGA..8D-....OI..<......7.4....9$."......m..}3...x..MI...(...y(.k....;.Ic$.5#.y..-R..$..j......{u..].}.:..H..Z.H....Z,..........t....W.(.d..P....J.R...^...$..c.Y.z..6..F<.=...(.J.@...j.V..Dlh.\|...h....:)..aW..Z....k$.p,....B~{..*...Su...q.....5..z.c.p.EU.r................^.OH..r5..y.6.N.....X.}.X.;.$r...z.....P..H..&.{..........Y.+.&H.M%..?.]..x...w...[./..............O...!`O.<..u...c.e.;%...@..3....ld..uI....o.......2.

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	11924
Entropy (8bit):	7.956780561744912
Encrypted:	false
SSDEEP:	192:93GfpzKfGyVP3lPh9ADcYYI2Bs0ZxkDrwPUtmF2Wxh8OgADH8EGg:9322fGyBVh9AYYYI2s0ZxUrHtmYY07g
MD5:	2489B7B052799C0F523D53AE2724D3E2
SHA1:	5A088AD33E294FE2DAB5E28E18D89B14CA0E1B4B
SHA-256:	EC84957C9B592ADDC25F99249D79E0945A39063F46F361722C7CD634A0887188
SHA-512:	09BC3A48AAD28AB8A23B46E46953F293590842C9D925E7223889B2A7BCD487C8528B8D9ADA43AF6A9CF10C1960D9E166F0D4811E862A6277C7B3906F7ADBB1C9
Malicious:	false
Reputation:	low
URL:	https://img.informer.com/icons/png/128/3439/3439369.png
Preview:	.PNG........IHDR..............>a.....gAMA......a.....sRGB........ cHRM..z&..............u0...`..:....p..Q<....bKGD..............pHYs...H...H.F.k>..-.IDATx..kp[.y../. ...H@......e[.d..[rm)I.{.3.tw.Oz.v...o;..e..mvg.f&.S.u...Z..X.c.D+.u.h.w.".;.."......px ..)R.HJ......s..^...?....>..>..>..>..>..>..>..>..>.....N>.[....H.d...%EEE........^...Z..N...z....\|......./.v..T.........{.....`8"....-//'....d.........N.....;?22....c.......r..p....,.]...,SVV..{7,M.........>..,......n..pG..?..?'.J9KKK.e......;.;.!..$...........W]]=..nk;4...---X.V...X..gu.;&...!.F.......h..h.ZdYF..RWW.^......O.._.u..........E..N..'.5.F....t...:......:...0...d2.L&.555....../~...^xa.....N.*... .r.F..{...TEE.v>~.e...y"..>..p.x<.$I..f.V+.x.h4.....@2.....W...?\|...&....u.<.....9......o0..+^+.@...w.G.....b1..0.P.....dff.d2.^.G..3;;[..d..\|.....m..mS..W......{...v..e.. ..$..).............Y.`6.innfrr.k....d......=VRR._..t...e..-:@KK.......=o.X..\.....~!4LMu10..........`.PW.?p:}$.....

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (11822)
Category:	downloaded
Size (bytes):	11824
Entropy (8bit):	5.2927390094370335
Encrypted:	false
SSDEEP:	192:O9d9uZiYB+zsjBHN5whvID3YMYSPSWQ55aTkcfChQY+DdlZ7hJfLHmJIBu:Ee2zsNHHwlIDhPSZ550kcfChQtvJfxBu
MD5:	659A1EC658C77B9C936C856B9B72A548
SHA1:	C1076FE1A694D561FFAA673793CB6418763FA1E4
SHA-256:	B2D12B381E4F471679E903D6C8FE634AB8DDA43764168C8F3C1EE1269FE7EDAB
SHA-512:	77F2057B03E14C9378F6C6CB087263D7239EDA44D57104DF48105B88938656F594BD68DCAD9CDA0409AFDB78205C872B65F63816146923676F522C3626232558
Malicious:	false
Reputation:	low
URL:	https://cdn.bidbrain.app/ng-assets/creative/assets/polyfills-a3f452c3.js
Preview:	export function __vite_legacy_guard(){import.meta.url;import("_").catch(()=>1);(async function*(){})().next()};var t="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},n=function(t){return t&&t.Math===Math&&t},r=n("object"==typeof globalThis&&globalThis)\|\|n("object"==typeof window&&window)\|\|n("object"==typeof self&&self)\|\|n("object"==typeof t&&t)\|\|n("object"==typeof t&&t)\|\|function(){return this}()\|\|Function("return this")(),e={},o=function(t){try{return!!t()}catch(n){return!0}},i=!o((function(){return 7!==Object.defineProperty({},1,{get:function(){return 7}})[1]})),u=!o((function(){var t=function(){}.bind();return"function"!=typeof t\|\|t.hasOwnProperty("prototype")})),c=u,a=Function.prototype.call,f=c?a.bind(a):function(){return a.apply(a,arguments)},l={},s={}.propertyIsEnumerable,p=Object.getOwnPropertyDescriptor,y=p&&!s.call({1:2},1);l.f=y?function(t){var n=p(this,t);return!!n&&n.enumerable}:s

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5685
Entropy (8bit):	5.417847317797427
Encrypted:	false
SSDEEP:	96:GhOLzFZMOLK3qOLnOLjJc+u+OL7NMhOg7FZMOg93qOggOgEJc+u+OgjNMhOCzFZk:GEdK3PC3W+vi93kaAJmJY132g4vK
MD5:	2F4390015925BE2DBF2F216A486759B5
SHA1:	5D4872433FBD0F82A8FFE267C0D88431779EF303
SHA-256:	E1B5A501FC26EB56E0B99CD686A022BFAD51B34E3942E51170473CBE4FDECAF1
SHA-512:	101A1CD7B9AF83581E0EBFF3B94C423BD48F7EC71803BAA1B15D740DBC0823BC1CB51126B5C8C597417C4260C5589BC08DCDC07BEA4855808693BD5EF5EFCF96
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Google+Sans+Text_old:wght@400;500;700
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ cyrillic /.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qE52i1dC.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek /.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEl2i1dC.woff2) format('woff2');. unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;.}./ vietnamese */.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEV2i1dC.woff2) format('woff2');. unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	140180
Entropy (8bit):	1.7234218829858372
Encrypted:	false
SSDEEP:	192:XZaqH1/Bk1od1Q21sc1FC1JvL92ugYC92ugnC92ub9hxxTnUT90Dth+FF/Atln5J:JaSUiLy9xGbY2jEPMAUWRbB2C4VUr+
MD5:	A41AF0DE1C8133E81BF550BE486FC07B
SHA1:	E68C0B7F822E92E141D23BAB6CA91F16B7088898
SHA-256:	C1613494BAD1F29831E921AF1FC5BF209A0FB84B21B1A618C124F23A0B07E086
SHA-512:	F11BEBF01087AB6F915233B270AFCAF922C8EC300CB65ED962BB8F0E3CBA69A7183C136B36C8FB2E6BCECFC960DC5CEC56EEDF7655773DE475949882F00CADC5
Malicious:	false
Reputation:	low
Preview:	{. "v": "4.8.0",. "meta": {. "g": "LottieFiles AE 3.4.5",. "a": "",. "k": "",. "d": "",. "tc": "#FFFFFF". },. "fr": 29.9700012207031,. "ip": 0,. "op": 41.0000016699642,. "w": 319,. "h": 111,. "nm": "1step",. "ddd": 0,. "assets": [],. "fonts": {. "list": [. {. "fName": "Roboto-Medium",. "fFamily": "Roboto",. "fStyle": "Medium",. "ascent": 75. }. ]. },. "layers": [. {. "ddd": 0,. "ind": 1,. "ty": 5,. "nm": "4",. "sr": 1,. "ks": {. "o": {. "a": 0,. "k": 100,. "ix": 11. },. "r": {. "a": 0,. "k": 0,. "ix": 10. },. "p": {. "a": 0,. "k": [. 252.865,. 44.023,. 0. ],. "ix": 2. },. "a": {. "a": 0,. "k": [. -4.135,. -4.977,. 0. ],. "ix": 1. },.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 15, 2025 23:20:31.178577900 CET	49737	443	192.168.2.4	142.250.186.164
Jan 15, 2025 23:20:31.178620100 CET	443	49737	142.250.186.164	192.168.2.4
Jan 15, 2025 23:20:31.178680897 CET	49737	443	192.168.2.4	142.250.186.164
Jan 15, 2025 23:20:31.178885937 CET	49737	443	192.168.2.4	142.250.186.164
Jan 15, 2025 23:20:31.178900957 CET	443	49737	142.250.186.164	192.168.2.4
Jan 15, 2025 23:20:31.820533991 CET	443	49737	142.250.186.164	192.168.2.4
Jan 15, 2025 23:20:31.820853949 CET	49737	443	192.168.2.4	142.250.186.164
Jan 15, 2025 23:20:31.820872068 CET	443	49737	142.250.186.164	192.168.2.4
Jan 15, 2025 23:20:31.822510958 CET	443	49737	142.250.186.164	192.168.2.4
Jan 15, 2025 23:20:31.822588921 CET	49737	443	192.168.2.4	142.250.186.164
Jan 15, 2025 23:20:31.823582888 CET	49737	443	192.168.2.4	142.250.186.164
Jan 15, 2025 23:20:31.823674917 CET	443	49737	142.250.186.164	192.168.2.4
Jan 15, 2025 23:20:31.873651981 CET	49737	443	192.168.2.4	142.250.186.164
Jan 15, 2025 23:20:31.873681068 CET	443	49737	142.250.186.164	192.168.2.4
Jan 15, 2025 23:20:31.920382977 CET	49737	443	192.168.2.4	142.250.186.164
Jan 15, 2025 23:20:33.098716021 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:33.098793983 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.098829031 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:33.098865986 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.098875999 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:33.098944902 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:33.099205971 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:33.099237919 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.099601984 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:33.099617958 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.648149014 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.648400068 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:33.648416996 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.650054932 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.650130033 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:33.651454926 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.651892900 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:33.651941061 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.653575897 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.653654099 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:33.654975891 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:33.655069113 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.655471087 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:33.655563116 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.655630112 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:33.655644894 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.710021019 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:33.710041046 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.710042000 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:33.755660057 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:33.862884045 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.863023996 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.863075972 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:33.863104105 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.863223076 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.863270044 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:33.863279104 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.863398075 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.863444090 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:33.863451004 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.863545895 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.863589048 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:33.863595009 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.867832899 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.867887020 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:33.867899895 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.908843994 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:33.908864021 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.914246082 CET	49743	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:33.914335012 CET	443	49743	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:33.914421082 CET	49743	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:33.917566061 CET	49743	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:33.917594910 CET	443	49743	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:33.922244072 CET	49744	443	192.168.2.4	204.155.159.109
Jan 15, 2025 23:20:33.922298908 CET	443	49744	204.155.159.109	192.168.2.4
Jan 15, 2025 23:20:33.922368050 CET	49744	443	192.168.2.4	204.155.159.109
Jan 15, 2025 23:20:33.926598072 CET	49744	443	192.168.2.4	204.155.159.109
Jan 15, 2025 23:20:33.926630974 CET	443	49744	204.155.159.109	192.168.2.4
Jan 15, 2025 23:20:33.950849056 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.950881958 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.950911045 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.950917959 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:33.950934887 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.950964928 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:33.951530933 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.951550961 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.951577902 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:33.951585054 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.951627970 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:33.951880932 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.951915979 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.951940060 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.951953888 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:33.951961040 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.952006102 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:33.952193975 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.952227116 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.952249050 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.952271938 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.952282906 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:33.952289104 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.952327967 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:33.952334881 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.952384949 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:33.953113079 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.953147888 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.953188896 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:33.953196049 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.953677893 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.953702927 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.953727007 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:33.953733921 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.953778028 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:33.955461025 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:33.989286900 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.000823975 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.031392097 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.039760113 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.039932966 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.040019989 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.040041924 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.040091038 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.040154934 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.040169954 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.040270090 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.040335894 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.040348053 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.040369034 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.040431023 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.040441990 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.040497065 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.040508986 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.040667057 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.040776968 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.040787935 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.040812016 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.040844917 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.040855885 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.040885925 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.041907072 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.042016983 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.042026043 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.042045116 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.042084932 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.042129040 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.042190075 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.042201042 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.042264938 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.042349100 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.042496920 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.042560101 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.071963072 CET	49739	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.072005987 CET	443	49739	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.090780020 CET	49747	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.090878963 CET	443	49747	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.090961933 CET	49747	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.091622114 CET	49747	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.091651917 CET	443	49747	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.091922045 CET	49748	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.091989994 CET	443	49748	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.092067957 CET	49748	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.092482090 CET	49748	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.092509985 CET	443	49748	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.093293905 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.093322992 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.093390942 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.094062090 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.094077110 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.147151947 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.147279024 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.147350073 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.147361994 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.147475958 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.147530079 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.147537947 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.147690058 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.147748947 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.147756100 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.147803068 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.147819996 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.147929907 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.147978067 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.147984982 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.168864965 CET	49751	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.168948889 CET	443	49751	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.169033051 CET	49751	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.169549942 CET	49752	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.169635057 CET	443	49752	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.169739962 CET	49752	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.170224905 CET	49751	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.170262098 CET	443	49751	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.170562029 CET	49752	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.170649052 CET	443	49752	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.170924902 CET	49753	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.170981884 CET	443	49753	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.171061993 CET	49753	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.171217918 CET	49753	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.171251059 CET	443	49753	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.171854973 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.171942949 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.172024965 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.172192097 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.172211885 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.172684908 CET	49755	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.172729015 CET	443	49755	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.172786951 CET	49755	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.173075914 CET	49755	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.173089981 CET	443	49755	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.193506956 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.193519115 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.221869946 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.222011089 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.222012043 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.222043991 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.222246885 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.222284079 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.222296953 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.222364902 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.222492933 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.222661972 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.222719908 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.222727060 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.222985029 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.223037004 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.223042965 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.223136902 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.223192930 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.223198891 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.223290920 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.223341942 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.223349094 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.223803043 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.223867893 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.223875046 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.223927021 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.224189997 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.224195957 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.231177092 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.231232882 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.231329918 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.231566906 CET	49757	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.231664896 CET	443	49757	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.231807947 CET	49757	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.232986927 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.233009100 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.233014107 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.233076096 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.233083010 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.233222961 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.233268976 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.233279943 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.233285904 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.233409882 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.233416080 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.234010935 CET	49758	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.234095097 CET	443	49758	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.234184980 CET	49758	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.234359980 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.234448910 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.234513998 CET	49760	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.234538078 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.234538078 CET	443	49760	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.234600067 CET	49760	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.234675884 CET	49761	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.234688044 CET	443	49761	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.234743118 CET	49761	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.235090971 CET	49757	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.235115051 CET	443	49757	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.235282898 CET	49761	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.235297918 CET	443	49761	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.235419035 CET	49760	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.235444069 CET	443	49760	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.235547066 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.235580921 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.235711098 CET	49758	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.235749960 CET	443	49758	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.281127930 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.308887959 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.309066057 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.309153080 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.309170008 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.309180021 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.309223890 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.309241056 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.309461117 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.309485912 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.309524059 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.309530973 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.309557915 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.309694052 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.309767008 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.309775114 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.309938908 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.309993029 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.310000896 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.310038090 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.310664892 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.310739994 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.310756922 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.310813904 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.311374903 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.311453104 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.311736107 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.311798096 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.311817884 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.311871052 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.312280893 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.312356949 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.319689035 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.319763899 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.319820881 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.319871902 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.320266008 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.320322037 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.320353985 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.320430994 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.395262957 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.395361900 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.395536900 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.395593882 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.395632029 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.395694017 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.395720959 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.395780087 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.395824909 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.396044970 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.396104097 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.396198034 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.396214008 CET	443	49740	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.396224976 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.396388054 CET	49740	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.587407112 CET	443	49743	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.633124113 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.634232998 CET	49743	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.641534090 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.658385992 CET	443	49755	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.684820890 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.685704947 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.710185051 CET	443	49758	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.716873884 CET	49755	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.725157976 CET	443	49744	204.155.159.109	192.168.2.4
Jan 15, 2025 23:20:34.728564978 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.735358953 CET	443	49761	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.746442080 CET	49743	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.746479988 CET	443	49743	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.746853113 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.746907949 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.747569084 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.748084068 CET	443	49743	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.748158932 CET	49743	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.755462885 CET	443	49748	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.766302109 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.767749071 CET	49758	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.769752026 CET	49744	443	192.168.2.4	204.155.159.109
Jan 15, 2025 23:20:34.772064924 CET	443	49760	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.780421019 CET	443	49747	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.782690048 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.784998894 CET	443	49757	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.795743942 CET	49761	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.798300028 CET	49748	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.798316002 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.814188957 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.814193010 CET	49760	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.821707964 CET	49747	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.822413921 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.822422981 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.822920084 CET	49755	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.822946072 CET	443	49755	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.823066950 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.823765993 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.823821068 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.824213028 CET	49744	443	192.168.2.4	204.155.159.109
Jan 15, 2025 23:20:34.824244022 CET	443	49744	204.155.159.109	192.168.2.4
Jan 15, 2025 23:20:34.824506998 CET	49758	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.824561119 CET	443	49758	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.824577093 CET	49761	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.824584007 CET	443	49755	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.824592113 CET	443	49761	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.824600935 CET	443	49755	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.824635983 CET	49755	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.825162888 CET	49757	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.825176954 CET	443	49757	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.825493097 CET	49747	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.825505018 CET	443	49747	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.826663971 CET	443	49757	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.826740026 CET	49757	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.827707052 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.827790976 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.827888012 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.827934027 CET	443	49744	204.155.159.109	192.168.2.4
Jan 15, 2025 23:20:34.828036070 CET	49744	443	192.168.2.4	204.155.159.109
Jan 15, 2025 23:20:34.828238010 CET	49760	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.828246117 CET	443	49760	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.828433990 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.828439951 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.828460932 CET	443	49758	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.828475952 CET	443	49761	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.828496933 CET	443	49758	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.828505039 CET	443	49761	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.828533888 CET	49758	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.828597069 CET	49761	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.829016924 CET	49748	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.829021931 CET	443	49748	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.829334974 CET	443	49747	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.829416037 CET	49747	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.829909086 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.830104113 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.830260992 CET	443	49748	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.830322027 CET	49748	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.832091093 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.832161903 CET	443	49760	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.832233906 CET	49760	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.832294941 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.833498955 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.833559036 CET	443	49753	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.833590984 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.834790945 CET	49755	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.834876060 CET	443	49755	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.835787058 CET	49743	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.836002111 CET	443	49743	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.836838961 CET	49757	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.836915970 CET	443	49757	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.836932898 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.837115049 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.837529898 CET	49747	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.837677956 CET	443	49752	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.837723017 CET	443	49747	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.837965012 CET	49744	443	192.168.2.4	204.155.159.109
Jan 15, 2025 23:20:34.838145018 CET	443	49744	204.155.159.109	192.168.2.4
Jan 15, 2025 23:20:34.838412046 CET	49748	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.838514090 CET	443	49748	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.838820934 CET	49761	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.838936090 CET	49758	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.838969946 CET	443	49761	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.839039087 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.839154005 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.839286089 CET	443	49758	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.839694023 CET	49760	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.839859962 CET	49753	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.839881897 CET	443	49760	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.839888096 CET	443	49753	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.840445042 CET	49752	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.840462923 CET	443	49752	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.841028929 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.841139078 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.841295958 CET	49755	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.841308117 CET	443	49755	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.841315031 CET	443	49753	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.841377974 CET	49753	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.841392994 CET	49743	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.841422081 CET	443	49743	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.841466904 CET	49757	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.841476917 CET	443	49757	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.841525078 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.841538906 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.841583014 CET	49747	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.841599941 CET	443	49747	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.841655970 CET	49748	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.841665030 CET	443	49748	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.841944933 CET	443	49752	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.842017889 CET	49752	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.843846083 CET	49761	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.843852997 CET	443	49761	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.843960047 CET	49758	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.843991041 CET	443	49758	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.844060898 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.844074011 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.844250917 CET	49760	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.844258070 CET	443	49760	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.844717979 CET	49753	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.844815969 CET	443	49753	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.845289946 CET	49752	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.845395088 CET	443	49752	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.845482111 CET	49753	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.845500946 CET	443	49753	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.845532894 CET	49752	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.845549107 CET	443	49752	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.859193087 CET	443	49751	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.859606981 CET	49751	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.859620094 CET	443	49751	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.863169909 CET	443	49751	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.863253117 CET	49751	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.863537073 CET	49751	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.863646030 CET	49751	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.863651037 CET	443	49751	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.863708019 CET	443	49751	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.883327961 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.883333921 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.889786959 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.889789104 CET	49744	443	192.168.2.4	204.155.159.109
Jan 15, 2025 23:20:34.889816046 CET	49743	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.889816999 CET	49755	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.889821053 CET	443	49744	204.155.159.109	192.168.2.4
Jan 15, 2025 23:20:34.889816046 CET	49760	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.889816046 CET	49757	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.889816999 CET	49748	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.889820099 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.889870882 CET	49747	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.889893055 CET	49753	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.889894009 CET	49752	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.889894962 CET	49761	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.889894009 CET	49758	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.904908895 CET	49751	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.904923916 CET	443	49751	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.935420036 CET	49744	443	192.168.2.4	204.155.159.109
Jan 15, 2025 23:20:34.951086998 CET	49751	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.952148914 CET	443	49758	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.952275038 CET	443	49758	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.952359915 CET	443	49758	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.952428102 CET	49758	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.952446938 CET	443	49758	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.952500105 CET	49758	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.952512026 CET	443	49758	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.952581882 CET	443	49758	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.952649117 CET	49758	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.953017950 CET	49758	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.953058958 CET	443	49758	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.955863953 CET	49762	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.955898046 CET	443	49762	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.956001997 CET	49762	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.956124067 CET	443	49755	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.956182957 CET	443	49755	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.956223965 CET	49755	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.956233978 CET	443	49755	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.956324100 CET	443	49755	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.956398964 CET	49755	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.956731081 CET	49762	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.956746101 CET	443	49762	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.958002090 CET	49755	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.958014965 CET	443	49755	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.963022947 CET	443	49761	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.963143110 CET	443	49761	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.963205099 CET	49761	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.963246107 CET	443	49761	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.963359118 CET	443	49761	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.963435888 CET	443	49761	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.963479042 CET	49761	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.963499069 CET	443	49761	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.963551044 CET	49761	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.963565111 CET	443	49761	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.963629961 CET	443	49761	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.963834047 CET	49761	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.965058088 CET	49761	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.965085983 CET	443	49761	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.968575954 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.968704939 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.968795061 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.968811989 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.968831062 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.968887091 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.968899965 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.969048977 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.969108105 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.969120026 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.969202995 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.969275951 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.969286919 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.972290993 CET	49763	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.972335100 CET	443	49763	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.972409010 CET	49763	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.972417116 CET	443	49748	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.972440958 CET	443	49748	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.972501040 CET	443	49748	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.972508907 CET	49748	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.972552061 CET	49748	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.972963095 CET	443	49743	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.973017931 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.973042011 CET	443	49743	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.973108053 CET	49763	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.973108053 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.973110914 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.973144054 CET	443	49763	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.973146915 CET	49743	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.973167896 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.973218918 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.973229885 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.974639893 CET	49748	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.974651098 CET	443	49748	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.977020025 CET	443	49747	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.977170944 CET	443	49747	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.977242947 CET	49747	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.977483034 CET	49743	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.977488995 CET	443	49743	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.977518082 CET	443	49752	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.977559090 CET	443	49752	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.977646112 CET	49752	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.977660894 CET	443	49752	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.977699041 CET	443	49752	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.977770090 CET	49752	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.978030920 CET	443	49753	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.978180885 CET	443	49753	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.978293896 CET	49753	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.981339931 CET	49764	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.981357098 CET	443	49764	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.981410027 CET	49764	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.982424021 CET	49764	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.982438087 CET	443	49764	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.983643055 CET	49765	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.983675957 CET	443	49765	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.983757019 CET	49765	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.987580061 CET	49765	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.987607956 CET	443	49765	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.988430977 CET	49747	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.988464117 CET	443	49747	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.988595009 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.988651037 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.988689899 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.988722086 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.988724947 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.988738060 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.988780975 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.988801003 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.988919973 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.988944054 CET	49753	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.988966942 CET	443	49753	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.988985062 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.989353895 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.989391088 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.989411116 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.989425898 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.989494085 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.990150928 CET	49752	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.990184069 CET	443	49752	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.992273092 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.992398024 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.992449999 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.992460012 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.992552996 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.992611885 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.992619038 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.992707968 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.992795944 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.992850065 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.992856979 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.992899895 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.992906094 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.993247986 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.993309021 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.993369102 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:34.993381023 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:34.996551037 CET	49766	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.996563911 CET	443	49766	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.996661901 CET	49766	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.996752977 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.996825933 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.996833086 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.996921062 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.997045994 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:34.997052908 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:34.997100115 CET	49766	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.997112036 CET	443	49766	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.998481989 CET	49767	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.998492002 CET	443	49767	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.998564959 CET	49767	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.998810053 CET	443	49751	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.998852968 CET	443	49751	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.998913050 CET	49751	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:34.998922110 CET	443	49751	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.998980999 CET	443	49751	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:34.999059916 CET	49751	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.002146959 CET	49767	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.002159119 CET	443	49767	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.004756927 CET	443	49760	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.005053043 CET	443	49760	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.005223036 CET	49760	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.005578995 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.005639076 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.005678892 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.005703926 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.005732059 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.005803108 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.005804062 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.005815983 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.005862951 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.005876064 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.006448030 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.006489992 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.006540060 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.006557941 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.006634951 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.010231018 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.011636972 CET	49751	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.011642933 CET	443	49751	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.015459061 CET	49760	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.015467882 CET	443	49760	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.017869949 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.018802881 CET	443	49757	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.018851042 CET	443	49757	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.018877029 CET	443	49757	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.018923044 CET	49757	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.018932104 CET	443	49757	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.018973112 CET	49757	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.018992901 CET	443	49757	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.019037962 CET	49757	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.027925968 CET	49757	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.027940989 CET	443	49757	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.036138058 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.037631035 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.052390099 CET	49744	443	192.168.2.4	204.155.159.109
Jan 15, 2025 23:20:35.053327084 CET	49768	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.053389072 CET	443	49768	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.053474903 CET	49768	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.054225922 CET	49768	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.054255009 CET	443	49768	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.056709051 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.056724072 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.057122946 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.057286978 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.057358027 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.057374001 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.057401896 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.057463884 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.057523966 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.057677984 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.057765007 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.057796955 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.057815075 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.057931900 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.057991982 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.058003902 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.058057070 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.058068037 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.058152914 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.058209896 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.058221102 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.058540106 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.058604956 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.058617115 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.058706999 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.058794975 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.058855057 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.058866978 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.058954000 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.059011936 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.059022903 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.059076071 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.059355021 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.059516907 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.059581995 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.059593916 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.071000099 CET	49770	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.071027994 CET	443	49770	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.071144104 CET	49770	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.071367025 CET	49770	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.071382046 CET	443	49770	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.075351000 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.075443983 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.075493097 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.075495958 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.075512886 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.075603008 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.075613976 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.075973988 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.076010942 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.076051950 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.076064110 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.076122046 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.076133013 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.076700926 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.076754093 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.076766968 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.076778889 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.076824903 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.076883078 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.076894045 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.076951981 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.077486992 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.077549934 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.077584982 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.077620029 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.077651978 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.077667952 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.077691078 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.078375101 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.078412056 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.078435898 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.078447104 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.078499079 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.078510046 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.078833103 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.079041004 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.079096079 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.079103947 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.079195023 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.079278946 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.079332113 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.079339981 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.079391003 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.079401970 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.079525948 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.079583883 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.079590082 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.079675913 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.079741955 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.079749107 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.079898119 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.079982042 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.080034971 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.080043077 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.080089092 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.080269098 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.080420017 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.080498934 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.080524921 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.080533028 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.080574036 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.080600023 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.080885887 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.080939054 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.080945969 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.082082033 CET	49771	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:35.082098007 CET	443	49771	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:35.082164049 CET	49771	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:35.082979918 CET	49771	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:35.082992077 CET	443	49771	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:35.094264030 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.094314098 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.094332933 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.094348907 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.094384909 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.094403982 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.094414949 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.094511986 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.094551086 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.094569921 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.094583035 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.094635963 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.094645977 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.094696999 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.095330954 CET	443	49744	204.155.159.109	192.168.2.4
Jan 15, 2025 23:20:35.095571041 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.095771074 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.095825911 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.095838070 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.095927000 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.096004963 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.096014023 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.096041918 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.096230030 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.096286058 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.096298933 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.096348047 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.096358061 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.096472025 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.096569061 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.096623898 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.096636057 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.096731901 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.096741915 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.106928110 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.106942892 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.124430895 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.124439955 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.125027895 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.125039101 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.133837938 CET	49772	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.133888006 CET	443	49772	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.134097099 CET	49772	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.134305954 CET	49772	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.134335041 CET	443	49772	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.136050940 CET	49773	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.136121035 CET	443	49773	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.136189938 CET	49773	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.136287928 CET	49774	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.136307955 CET	443	49774	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.136365891 CET	49774	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.136478901 CET	49775	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.136498928 CET	443	49775	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.136559010 CET	49775	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.136610031 CET	49776	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.136661053 CET	443	49776	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.136703968 CET	49777	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.136734962 CET	49776	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.136744976 CET	443	49777	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.136811018 CET	49777	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.136914015 CET	49778	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.136931896 CET	443	49778	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.136996984 CET	49778	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.137226105 CET	49773	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.137255907 CET	443	49773	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.137522936 CET	49774	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.137537003 CET	443	49774	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.137727976 CET	49775	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.137757063 CET	443	49775	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.137969017 CET	49776	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.137996912 CET	443	49776	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.138628006 CET	49777	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.138653994 CET	443	49777	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.138788939 CET	49778	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.138812065 CET	443	49778	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.141381025 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.143403053 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.143462896 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.143471956 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.144222975 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.146728039 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.146804094 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.146823883 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.146914959 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.146976948 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.146981955 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.147108078 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.147128105 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.147176981 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.147181988 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.147212029 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.147218943 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.147280931 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.147284985 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.147346020 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.147366047 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.147471905 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.147526026 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.147531033 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.147586107 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.147620916 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.147625923 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.147659063 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.147746086 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.147804976 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.147809029 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.147850037 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.147902966 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.147908926 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.147943974 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.148004055 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.148008108 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.148051977 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.149688005 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.149758101 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.149796009 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.149854898 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.149882078 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.149945021 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.149981022 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.150028944 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.150087118 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.150141954 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.150182009 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.150238037 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.162424088 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.162462950 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.162518978 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.162533998 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.162586927 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.162594080 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.162606955 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.162647963 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.162673950 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.162687063 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.162727118 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.163068056 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.163110971 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.163144112 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.163144112 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.163157940 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.163249016 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.163311958 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.163326025 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.163389921 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.163851976 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.163908958 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.163929939 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.163940907 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.163961887 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.163965940 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.164021015 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.164031029 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.164118052 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.164782047 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.164825916 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.164839983 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.164849997 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.164870977 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.164879084 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.164897919 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.164906979 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.164935112 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.165328026 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.165421963 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.165435076 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.165574074 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.165637016 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.165644884 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.165750027 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.165829897 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.165877104 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.165877104 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.165888071 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.165899992 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.165926933 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.165936947 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.165946960 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.165957928 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.165988922 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.166024923 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.166054964 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.166121006 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.166208029 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.166237116 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.166244984 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.166270018 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.166444063 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.166502953 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.166510105 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.166558981 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.166562080 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.166584015 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.166615009 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.166672945 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.166724920 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.166732073 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.166775942 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.167339087 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.167407990 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.167561054 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.167618990 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.167650938 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.167725086 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.168145895 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.168215036 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.168234110 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.168292046 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.168716908 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.168792009 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.168812990 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.168874979 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.168901920 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.168956995 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.183115959 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.183166981 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.183192015 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.183219910 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.183276892 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.183336973 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.183341980 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.183367014 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.183435917 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.183522940 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.183593988 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.183623075 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.183640957 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.183681965 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.183732033 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.183795929 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.183828115 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.183847904 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.183885098 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.183907986 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.184084892 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.184148073 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.184184074 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.184237003 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.184981108 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.185019970 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.185045004 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.185056925 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.185076952 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.185081959 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.185112953 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.185123920 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.185142994 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.185148001 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.185201883 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.185213089 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.185295105 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.185951948 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.185992956 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.186043978 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.186227083 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.186227083 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.186227083 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.186244011 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.187906027 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.187962055 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.187974930 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.188129902 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.231235027 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.231307983 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.233031988 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.233107090 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.235178947 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.235271931 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.235285044 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.235347986 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.235390902 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.235456944 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.235893965 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.235965967 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.235990047 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.236042023 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.236083984 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.236145973 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.236183882 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.236231089 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.236258984 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.236293077 CET	443	49744	204.155.159.109	192.168.2.4
Jan 15, 2025 23:20:35.236325026 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.236351967 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.236409903 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.236470938 CET	443	49744	204.155.159.109	192.168.2.4
Jan 15, 2025 23:20:35.236514091 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.236550093 CET	49744	443	192.168.2.4	204.155.159.109
Jan 15, 2025 23:20:35.236578941 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.236613035 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.236673117 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.236711979 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.236776114 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.236787081 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.236862898 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.236876965 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.236932039 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.237346888 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.237416029 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.237462044 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.237543106 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.237561941 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.237616062 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.237659931 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.237728119 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.237751961 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.237807035 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.238852024 CET	49744	443	192.168.2.4	204.155.159.109
Jan 15, 2025 23:20:35.238877058 CET	443	49744	204.155.159.109	192.168.2.4
Jan 15, 2025 23:20:35.241744995 CET	49779	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.241794109 CET	443	49779	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.241868019 CET	49779	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.242414951 CET	49779	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.242441893 CET	443	49779	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.249298096 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.249370098 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.249381065 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.249392986 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.249424934 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.249430895 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.249456882 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.249468088 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.249489069 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.249494076 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.249550104 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.249560118 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.249607086 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.249643087 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.249660015 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.249670982 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.249696016 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.249787092 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.249911070 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.249963999 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.249965906 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.249989986 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.250035048 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.250035048 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.250071049 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.250130892 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.250142097 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.250184059 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.250194073 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.250202894 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.250243902 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.250446081 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.250507116 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.250567913 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.250580072 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.250590086 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.250622034 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.250623941 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.250659943 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.250669956 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.250694990 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.250710964 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.251264095 CET	49780	443	192.168.2.4	204.155.159.109
Jan 15, 2025 23:20:35.251286030 CET	443	49780	204.155.159.109	192.168.2.4
Jan 15, 2025 23:20:35.251365900 CET	49780	443	192.168.2.4	204.155.159.109
Jan 15, 2025 23:20:35.251657009 CET	49780	443	192.168.2.4	204.155.159.109
Jan 15, 2025 23:20:35.251667976 CET	443	49780	204.155.159.109	192.168.2.4
Jan 15, 2025 23:20:35.251846075 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.251905918 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.251957893 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.252012014 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.252330065 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.252399921 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.252429962 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.252480030 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.252485991 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.252532959 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.252578974 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.252648115 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.253520012 CET	49749	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.253530025 CET	443	49749	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.254164934 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.254203081 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.254225969 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.254235983 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.254266024 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.254281998 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.254312992 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.254352093 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.254362106 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.254371881 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.254401922 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.254417896 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.254611015 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.254647017 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.254666090 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.254676104 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.254697084 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.254702091 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.254722118 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.254731894 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.254775047 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.254863977 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.254899979 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.254915953 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.254940033 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.254954100 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.255006075 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.255055904 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.255067110 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.255126953 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.273724079 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.273823977 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.273878098 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.273880005 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.273880959 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.273945093 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.273979902 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.274013042 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.274045944 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.274775982 CET	49754	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.274806023 CET	443	49754	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.278434992 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.278515100 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.324083090 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.324157000 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.324186087 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.324245930 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.324304104 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.324366093 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.324451923 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.324523926 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.324572086 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.324640036 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.324723005 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.324784994 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.324881077 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.324898958 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.324944973 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.324947119 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.324995995 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.325006962 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.325030088 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.325042963 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.325082064 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.325278997 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.325325012 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.325354099 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.325370073 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.325407028 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.325407028 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.326071024 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.326114893 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.326138973 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.326149940 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.326179028 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.326219082 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.326251984 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.326395035 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.326436996 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.326461077 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.326472044 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.326507092 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.326522112 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.326630116 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.326664925 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.326735973 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.326814890 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.328237057 CET	49756	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.328263998 CET	443	49756	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.336287975 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.336330891 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.336366892 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.336378098 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.336431026 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.336446047 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.336473942 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.336483955 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.336505890 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.336646080 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.336687088 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.336714029 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.336726904 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.336781979 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.336853027 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.336872101 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.336910963 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.336921930 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.336971998 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.337014914 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.337069988 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.337486982 CET	49759	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.337515116 CET	443	49759	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.345798969 CET	49781	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.345813990 CET	443	49781	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.345887899 CET	49781	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.346113920 CET	49781	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.346127033 CET	443	49781	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.354657888 CET	49782	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.354736090 CET	443	49782	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.354806900 CET	49782	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.355191946 CET	49782	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.355223894 CET	443	49782	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.381475925 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.381510019 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.381706953 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.382230997 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.382257938 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.432676077 CET	443	49762	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.448777914 CET	49762	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.448821068 CET	443	49762	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.450206041 CET	443	49762	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.450541973 CET	49762	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.450671911 CET	49762	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.450737000 CET	443	49762	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.464760065 CET	443	49763	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.465048075 CET	49763	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.465087891 CET	443	49763	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.466516018 CET	443	49763	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.466623068 CET	49763	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.468004942 CET	49763	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.468096018 CET	443	49763	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.468285084 CET	49763	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.468302011 CET	443	49763	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.471894026 CET	49785	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.471925020 CET	443	49785	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.472223997 CET	49785	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.472785950 CET	49785	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.472807884 CET	443	49785	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.498888969 CET	49762	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.509850979 CET	443	49764	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.510144949 CET	49764	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.510166883 CET	443	49764	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.510742903 CET	443	49764	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.511044025 CET	49764	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.511132956 CET	443	49764	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.511143923 CET	49764	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.511464119 CET	443	49765	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.511656046 CET	49765	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.511674881 CET	443	49765	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.512815952 CET	443	49765	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.513998985 CET	49763	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.515131950 CET	49765	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.515294075 CET	49765	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.515305996 CET	443	49765	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.515347004 CET	443	49765	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.520632029 CET	443	49766	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.524209976 CET	49766	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.524226904 CET	443	49766	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.527806997 CET	443	49766	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.527885914 CET	49766	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.528433084 CET	49766	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.528609037 CET	443	49766	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.529256105 CET	49766	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.529272079 CET	443	49766	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.541132927 CET	443	49767	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.541306973 CET	49767	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.541316032 CET	443	49767	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.544900894 CET	443	49767	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.545005083 CET	49767	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.546688080 CET	49767	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.546785116 CET	49767	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.546789885 CET	443	49767	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.546864986 CET	443	49767	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.549110889 CET	443	49768	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.549834013 CET	49768	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.549896955 CET	443	49768	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.551106930 CET	443	49768	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.551331043 CET	443	49764	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.551415920 CET	49768	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.551512003 CET	49768	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.551525116 CET	443	49768	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.551604033 CET	443	49768	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.553553104 CET	443	49771	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:35.553761005 CET	49771	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:35.553772926 CET	443	49771	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:35.555269957 CET	443	49771	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:35.555339098 CET	49771	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:35.555707932 CET	49771	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:35.555787086 CET	443	49771	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:35.555814028 CET	49771	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:35.562172890 CET	49765	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.562202930 CET	49764	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.576575041 CET	49766	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.584534883 CET	443	49762	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.584645987 CET	443	49762	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.584712982 CET	49762	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.584721088 CET	443	49762	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.584928989 CET	443	49762	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.585125923 CET	49762	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.586070061 CET	49762	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.586080074 CET	443	49762	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.592266083 CET	49788	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.592288971 CET	443	49788	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.592351913 CET	49788	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.592570066 CET	49788	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.592582941 CET	443	49788	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.594527960 CET	49767	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.594543934 CET	49768	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.594546080 CET	443	49767	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.599334002 CET	443	49771	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:35.608769894 CET	443	49770	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.609153986 CET	49771	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:35.609162092 CET	443	49771	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:35.610507965 CET	49770	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.610517025 CET	443	49770	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.610858917 CET	49790	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.610904932 CET	443	49790	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.610990047 CET	49790	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.611342907 CET	49790	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.611375093 CET	443	49790	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.612003088 CET	443	49770	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.612096071 CET	49770	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.613074064 CET	49770	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.613152981 CET	443	49770	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.613531113 CET	49770	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.613538980 CET	443	49770	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.630950928 CET	443	49763	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.631074905 CET	443	49763	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.631139994 CET	49763	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.631150961 CET	443	49763	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.631366968 CET	443	49763	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.631740093 CET	49763	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.632603884 CET	49763	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.632612944 CET	443	49763	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.639408112 CET	49767	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.654541969 CET	49770	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.654661894 CET	49771	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:35.668154001 CET	443	49774	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.668365955 CET	49774	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.668375015 CET	443	49774	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.669069052 CET	443	49776	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.669246912 CET	49776	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.669272900 CET	443	49776	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.671945095 CET	443	49774	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.672065020 CET	49774	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.672863960 CET	443	49776	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.672960043 CET	49776	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.673135042 CET	49774	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.673305035 CET	443	49774	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.673820019 CET	49776	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.673996925 CET	443	49776	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.674571037 CET	49774	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.674578905 CET	443	49774	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.675122976 CET	49776	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.675136089 CET	443	49776	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.709187031 CET	443	49771	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:35.709304094 CET	443	49771	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:35.709368944 CET	49771	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:35.709377050 CET	443	49771	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:35.709511042 CET	443	49771	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:35.709665060 CET	49771	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:35.710057020 CET	49771	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:35.710068941 CET	443	49771	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:35.717991114 CET	443	49765	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.718034983 CET	443	49765	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.718122959 CET	49765	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.718152046 CET	49774	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.718163967 CET	443	49765	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.718195915 CET	49776	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.718225002 CET	49765	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.719844103 CET	49765	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.719904900 CET	443	49765	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.720395088 CET	49792	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.720462084 CET	443	49792	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.720539093 CET	49792	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.721147060 CET	49792	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.721172094 CET	443	49792	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.728662014 CET	443	49766	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.728683949 CET	443	49766	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.728735924 CET	443	49766	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.728754997 CET	49766	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.728816032 CET	49766	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.729543924 CET	49766	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.729567051 CET	443	49766	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.739113092 CET	49793	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.739146948 CET	443	49793	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.739392042 CET	49793	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.739598036 CET	443	49773	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.739869118 CET	443	49778	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.740077972 CET	443	49775	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.740514994 CET	443	49777	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.740653992 CET	49793	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.740673065 CET	443	49793	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.740828991 CET	49775	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.740890980 CET	443	49775	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.741318941 CET	49778	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.741334915 CET	443	49778	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.741461039 CET	49773	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.741478920 CET	443	49773	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.741611004 CET	49777	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.741647005 CET	443	49777	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.744378090 CET	443	49775	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.744473934 CET	49775	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.745136023 CET	443	49778	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.745209932 CET	49778	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.745362997 CET	49775	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.745454073 CET	443	49775	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.745537043 CET	49775	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.745554924 CET	443	49775	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.746185064 CET	49778	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.746254921 CET	443	49773	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.746324062 CET	443	49777	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.746331930 CET	49773	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.746387959 CET	49777	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.746444941 CET	443	49778	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.746449947 CET	49778	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.746774912 CET	49777	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.746953964 CET	443	49777	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.747872114 CET	49773	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.748054028 CET	443	49773	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.748176098 CET	49777	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.748193026 CET	443	49777	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.748548031 CET	49773	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.748563051 CET	443	49773	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.750130892 CET	443	49767	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.750183105 CET	443	49767	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.750232935 CET	49767	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.750245094 CET	443	49767	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.750330925 CET	443	49767	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.750387907 CET	49767	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.751178026 CET	49767	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.751184940 CET	443	49767	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.754884958 CET	443	49772	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.786647081 CET	49775	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.786653042 CET	49778	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.786706924 CET	443	49778	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.800596952 CET	49772	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.800618887 CET	443	49772	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.801445961 CET	49794	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.801544905 CET	443	49794	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.801621914 CET	49794	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.802030087 CET	49794	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.802066088 CET	443	49794	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.802630901 CET	49777	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.803388119 CET	49773	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.804485083 CET	443	49772	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.804601908 CET	49772	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.805267096 CET	49772	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.805421114 CET	49772	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.805480957 CET	443	49772	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.829153061 CET	49778	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.846939087 CET	49772	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.846999884 CET	443	49772	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.890718937 CET	49772	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.974853039 CET	443	49764	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.974870920 CET	443	49764	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.974951982 CET	443	49764	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.974957943 CET	49764	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.975023985 CET	49764	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.975188971 CET	443	49768	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.975285053 CET	443	49770	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.975348949 CET	443	49770	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.975378990 CET	443	49770	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.975393057 CET	443	49774	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.975408077 CET	443	49770	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.975425959 CET	49770	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.975428104 CET	443	49768	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.975441933 CET	443	49770	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.975450039 CET	443	49774	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.975472927 CET	49770	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.975518942 CET	49774	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.975527048 CET	443	49774	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.975538969 CET	49768	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.975579023 CET	443	49770	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.975600004 CET	49774	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.975605011 CET	443	49774	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.975637913 CET	49770	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.975657940 CET	49774	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.975869894 CET	443	49780	204.155.159.109	192.168.2.4
Jan 15, 2025 23:20:35.976315975 CET	49780	443	192.168.2.4	204.155.159.109
Jan 15, 2025 23:20:35.976324081 CET	443	49780	204.155.159.109	192.168.2.4
Jan 15, 2025 23:20:35.976691961 CET	443	49776	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.976919889 CET	443	49776	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.976963043 CET	443	49779	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.976994038 CET	49776	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.977489948 CET	49779	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.977551937 CET	443	49779	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.978065968 CET	49764	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.978079081 CET	443	49780	204.155.159.109	192.168.2.4
Jan 15, 2025 23:20:35.978081942 CET	443	49764	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.978163958 CET	49780	443	192.168.2.4	204.155.159.109
Jan 15, 2025 23:20:35.978579998 CET	49780	443	192.168.2.4	204.155.159.109
Jan 15, 2025 23:20:35.978682995 CET	443	49780	204.155.159.109	192.168.2.4
Jan 15, 2025 23:20:35.978991985 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.979969978 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.979989052 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.980300903 CET	49780	443	192.168.2.4	204.155.159.109
Jan 15, 2025 23:20:35.980309010 CET	443	49780	204.155.159.109	192.168.2.4
Jan 15, 2025 23:20:35.980994940 CET	49768	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.981031895 CET	443	49768	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.981281042 CET	443	49779	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.981369019 CET	49779	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.981465101 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.981534004 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.981822014 CET	49779	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.982059956 CET	443	49779	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.982206106 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.982300997 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.984707117 CET	443	49782	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.985028982 CET	49779	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.985049009 CET	443	49779	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.985219955 CET	443	49781	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.986365080 CET	49782	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.986377954 CET	443	49782	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.986803055 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.986819029 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:35.987023115 CET	49781	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.987051964 CET	443	49782	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.987082958 CET	443	49781	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.987587929 CET	443	49781	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.988259077 CET	49782	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.988347054 CET	443	49782	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.988723040 CET	49781	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.988878012 CET	49782	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.989103079 CET	443	49781	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:35.989756107 CET	49781	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:35.990626097 CET	49774	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.990638018 CET	443	49774	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.990906954 CET	49796	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.990957975 CET	443	49796	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.991039991 CET	49796	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.991498947 CET	49796	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.991528034 CET	443	49796	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.993720055 CET	49797	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.993747950 CET	443	49797	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.994178057 CET	49797	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.994503021 CET	49797	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:35.994517088 CET	443	49797	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:35.994777918 CET	49770	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:35.994785070 CET	443	49770	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.003170967 CET	49776	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.003215075 CET	443	49776	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.003767014 CET	49798	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.003789902 CET	443	49798	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.004002094 CET	49798	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.005681992 CET	49798	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.005709887 CET	443	49798	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.009804964 CET	443	49785	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.010413885 CET	49785	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.010438919 CET	443	49785	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.014106989 CET	443	49785	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.014190912 CET	49785	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.016856909 CET	49785	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.016949892 CET	443	49785	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.017018080 CET	49785	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.023330927 CET	49800	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:36.023354053 CET	443	49800	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.023418903 CET	49780	443	192.168.2.4	204.155.159.109
Jan 15, 2025 23:20:36.023441076 CET	49800	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:36.023972034 CET	49800	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:36.023984909 CET	443	49800	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.033575058 CET	49779	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.033756971 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.035331964 CET	443	49781	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:36.035350084 CET	443	49782	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:36.063343048 CET	443	49785	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.065676928 CET	49785	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.065692902 CET	443	49785	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.075056076 CET	443	49788	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:36.075367928 CET	49788	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:36.075377941 CET	443	49788	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:36.075831890 CET	443	49788	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:36.079582930 CET	49788	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:36.079660892 CET	443	49788	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:36.080008984 CET	49788	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:36.109584093 CET	49785	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.123334885 CET	443	49788	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:36.151705027 CET	443	49778	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.151750088 CET	443	49777	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.151783943 CET	443	49775	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.151798964 CET	443	49777	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.151843071 CET	443	49773	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.151879072 CET	49777	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.151916981 CET	443	49777	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.151951075 CET	443	49773	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.152005911 CET	443	49778	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.152005911 CET	443	49775	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.152028084 CET	49773	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.152061939 CET	443	49777	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.152096033 CET	443	49773	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.152122021 CET	49778	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.152132034 CET	49775	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.152134895 CET	49777	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.152182102 CET	443	49773	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.152204990 CET	443	49790	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.152246952 CET	49773	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.159667015 CET	49790	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.159703970 CET	443	49790	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.160005093 CET	443	49790	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.160692930 CET	49790	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.160757065 CET	443	49790	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.160938025 CET	49790	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.163566113 CET	49773	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.163595915 CET	443	49773	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.163942099 CET	49803	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.163991928 CET	443	49803	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.164094925 CET	49803	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.164848089 CET	49803	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.164877892 CET	443	49803	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.165348053 CET	49775	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.165361881 CET	443	49775	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.165586948 CET	49804	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.165627956 CET	443	49804	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.165822983 CET	49804	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.166408062 CET	49804	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.166440964 CET	443	49804	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.166995049 CET	49777	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.167013884 CET	443	49777	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.167824030 CET	49778	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.167855024 CET	443	49778	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.183445930 CET	443	49781	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:36.183600903 CET	443	49781	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:36.183903933 CET	49781	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:36.184355021 CET	443	49779	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.184402943 CET	443	49779	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.184467077 CET	49779	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.184484005 CET	443	49779	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.184525013 CET	443	49779	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.184583902 CET	49779	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.190995932 CET	49781	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:36.191024065 CET	443	49781	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:36.203353882 CET	443	49790	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.205733061 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.205787897 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.205825090 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.205846071 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.205862999 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.205976009 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.205988884 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.206130981 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.206161976 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.206212044 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.206226110 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.206321955 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.206392050 CET	49779	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.206404924 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.206406116 CET	443	49779	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.206459045 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.206506968 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.206521988 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.210422993 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.210494041 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.210508108 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.211208105 CET	49806	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.211230040 CET	443	49806	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.211343050 CET	49806	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.211649895 CET	49806	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.211675882 CET	443	49806	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.218648911 CET	443	49785	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.218703985 CET	443	49785	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.218780041 CET	49785	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.218795061 CET	443	49785	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.218847036 CET	443	49785	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.218897104 CET	49785	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.222342968 CET	49785	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.222357035 CET	443	49785	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.223875046 CET	443	49780	204.155.159.109	192.168.2.4
Jan 15, 2025 23:20:36.224036932 CET	443	49780	204.155.159.109	192.168.2.4
Jan 15, 2025 23:20:36.224088907 CET	49780	443	192.168.2.4	204.155.159.109
Jan 15, 2025 23:20:36.237035036 CET	49807	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.237056971 CET	443	49807	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.237112999 CET	49807	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.237629890 CET	49807	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.237642050 CET	443	49807	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.239809036 CET	49780	443	192.168.2.4	204.155.159.109
Jan 15, 2025 23:20:36.239818096 CET	443	49780	204.155.159.109	192.168.2.4
Jan 15, 2025 23:20:36.246397972 CET	443	49792	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.246661901 CET	49792	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.246701002 CET	443	49792	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.247847080 CET	443	49792	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.249574900 CET	49792	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.249732971 CET	49792	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.249747992 CET	443	49792	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.249802113 CET	443	49792	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.260924101 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.268712997 CET	443	49772	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.268978119 CET	443	49772	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.269043922 CET	49772	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.271461010 CET	49808	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:36.271486044 CET	443	49808	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.271663904 CET	49808	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:36.271971941 CET	49808	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:36.272012949 CET	443	49808	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.272962093 CET	49772	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.273000002 CET	443	49772	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.276849985 CET	443	49788	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:36.276994944 CET	443	49788	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:36.277053118 CET	49788	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:36.278270006 CET	49809	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.278328896 CET	443	49809	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.278469086 CET	49809	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.278758049 CET	49809	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.278778076 CET	443	49809	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.280917883 CET	443	49782	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:36.281040907 CET	443	49782	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:36.281115055 CET	49782	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:36.281122923 CET	443	49782	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:36.281259060 CET	443	49782	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:36.281693935 CET	49782	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:36.284353971 CET	49788	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:36.284364939 CET	443	49788	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:36.288765907 CET	49782	443	192.168.2.4	104.22.17.194
Jan 15, 2025 23:20:36.288798094 CET	443	49782	104.22.17.194	192.168.2.4
Jan 15, 2025 23:20:36.294152021 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.294245958 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.294286013 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.294354916 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.294368029 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.294408083 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.294440985 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.294579029 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.294619083 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.294641972 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.294656992 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.294713020 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.294723034 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.294737101 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.294787884 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.294842005 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.294857025 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.294975996 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.295484066 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.295816898 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.295859098 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.295878887 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.295893908 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.295947075 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.295988083 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.296008110 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.296026945 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.296052933 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.296602011 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.296648979 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.296668053 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.296681881 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.296730995 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.296786070 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.296801090 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.296895981 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.299148083 CET	49792	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.307996035 CET	49810	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.308079004 CET	443	49810	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.308171988 CET	49810	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.308418036 CET	49810	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.308454990 CET	443	49810	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.318886042 CET	49811	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:36.318906069 CET	443	49811	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.319096088 CET	49811	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:36.319420099 CET	49811	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:36.319430113 CET	443	49811	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.325160027 CET	49812	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:36.325203896 CET	443	49812	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.325767040 CET	49812	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:36.326544046 CET	49812	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:36.326567888 CET	443	49812	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.372694016 CET	443	49790	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.372731924 CET	443	49790	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.372812033 CET	443	49790	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.372910023 CET	49790	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.372978926 CET	49790	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.376024961 CET	49790	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.376066923 CET	443	49790	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.382637978 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.382730007 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.382770061 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.382842064 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.382904053 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.382967949 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.383047104 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.383209944 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.383280039 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.383508921 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.383563042 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.383570910 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.383585930 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.383614063 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.383619070 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.383680105 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.383692980 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.383804083 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.384376049 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.384435892 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.384463072 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.384521008 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.385149956 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.385188103 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.385215998 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.385226965 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.385240078 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.385282993 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.385282993 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.386153936 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.386193991 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.386213064 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.386226892 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.386246920 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.386260986 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.386312008 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.386323929 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.386954069 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.386969090 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.387023926 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.453125954 CET	443	49792	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.453190088 CET	443	49792	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.453275919 CET	49792	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.453309059 CET	443	49792	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.453329086 CET	443	49792	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.453399897 CET	49792	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.453496933 CET	443	49792	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.453771114 CET	49792	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.471307993 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.471398115 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.471452951 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.471494913 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.471523046 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.471524000 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.471524000 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.471589088 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.471646070 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.471762896 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.471839905 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.471858025 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.472055912 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.472124100 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.472136974 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.472162962 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.472234011 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.472248077 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.472301006 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.472484112 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.472554922 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.472606897 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.472672939 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.472706079 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.472774982 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.472804070 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.472877026 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.473298073 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.473371029 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.473402023 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.473488092 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.473504066 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.473576069 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.473603964 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.473675013 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.473694086 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.473772049 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.474276066 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.474339008 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.474359035 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.474379063 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.474404097 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.474411011 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.474455118 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.474459887 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.474473953 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.474500895 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.474510908 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.474562883 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.474575043 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.474626064 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.475003004 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.475179911 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.475219965 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.475251913 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.475265026 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.475291967 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.475311995 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.475414991 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.475450993 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.475475073 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.475486994 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.475517035 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.475554943 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.488118887 CET	49792	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.488148928 CET	443	49792	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.500475883 CET	443	49794	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.504506111 CET	49794	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.504533052 CET	443	49794	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.508305073 CET	443	49794	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.508425951 CET	49794	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.508950949 CET	49794	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.509140015 CET	443	49794	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.509303093 CET	49794	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.509318113 CET	443	49794	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.510339022 CET	49813	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.510422945 CET	443	49813	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.510720968 CET	49813	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.511229038 CET	49813	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.511265039 CET	443	49813	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.515784979 CET	443	49796	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.517436981 CET	49796	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.517477989 CET	443	49796	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.518651962 CET	443	49796	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.519088030 CET	49796	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.519224882 CET	49796	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.519279003 CET	443	49796	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.519618034 CET	443	49793	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.520000935 CET	443	49800	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.520153046 CET	49793	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.520169020 CET	443	49793	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.520513058 CET	49800	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:36.520524025 CET	443	49800	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.521313906 CET	443	49793	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.521416903 CET	443	49800	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.521481037 CET	49800	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:36.522232056 CET	49800	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:36.522298098 CET	443	49800	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.522432089 CET	443	49797	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.522722960 CET	49793	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.522898912 CET	443	49793	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.523087978 CET	49800	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:36.523096085 CET	443	49800	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.523175001 CET	49793	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.523973942 CET	49797	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.523992062 CET	443	49797	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.525127888 CET	443	49797	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.526026011 CET	49797	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.526170969 CET	49797	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.526181936 CET	443	49797	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.526202917 CET	443	49797	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.534699917 CET	443	49798	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.535372019 CET	49798	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.535403013 CET	443	49798	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.535868883 CET	443	49798	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.536708117 CET	49798	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.536798000 CET	443	49798	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.536958933 CET	49798	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.551166058 CET	49794	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.559938908 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.560005903 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.560055017 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.560121059 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.560158014 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.560229063 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.560271025 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.560410023 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.560410023 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.560475111 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.560525894 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.560534000 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.560559034 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.560601950 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.560604095 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.560643911 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.560656071 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.560688972 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.560776949 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.560842037 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.560858011 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.561012983 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.561177969 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.563026905 CET	49783	443	192.168.2.4	172.67.43.115
Jan 15, 2025 23:20:36.563052893 CET	443	49783	172.67.43.115	192.168.2.4
Jan 15, 2025 23:20:36.563330889 CET	443	49793	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.564026117 CET	49800	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:36.564026117 CET	49796	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.578617096 CET	49797	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.579363108 CET	443	49798	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.691036940 CET	443	49803	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.691636086 CET	49803	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.691699982 CET	443	49803	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.693053961 CET	443	49804	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.693315029 CET	49804	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.693347931 CET	443	49804	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.695395947 CET	443	49803	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.695488930 CET	49803	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.695979118 CET	49803	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.696131945 CET	49803	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.696172953 CET	443	49803	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.696969032 CET	443	49804	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.697046995 CET	49804	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.697444916 CET	49804	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.697571039 CET	49804	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.697587013 CET	443	49804	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.697627068 CET	443	49804	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.708897114 CET	443	49794	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.708950996 CET	443	49794	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.708971977 CET	443	49794	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.709024906 CET	443	49794	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.709054947 CET	49794	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.709109068 CET	443	49794	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.709140062 CET	443	49794	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.709141016 CET	49794	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.709161997 CET	49794	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.709206104 CET	49794	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.711241961 CET	49794	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.711271048 CET	443	49794	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.711411953 CET	443	49800	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.711453915 CET	443	49800	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.712810040 CET	49800	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:36.717180014 CET	49814	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.717206001 CET	443	49814	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.717818022 CET	49814	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.719911098 CET	49814	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.719923973 CET	443	49814	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.721081972 CET	49800	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:36.721091032 CET	443	49800	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.722944975 CET	443	49796	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.722989082 CET	443	49796	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.723063946 CET	49796	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.723108053 CET	443	49796	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.723134995 CET	443	49796	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.723201990 CET	49796	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.727068901 CET	49796	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.727097034 CET	443	49796	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.727328062 CET	49815	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.727370024 CET	443	49815	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.727458000 CET	49815	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.728178024 CET	49815	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.728207111 CET	443	49815	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.733197927 CET	443	49793	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.733374119 CET	443	49793	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.733469009 CET	49793	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.738003969 CET	49793	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.738012075 CET	443	49793	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.740431070 CET	443	49808	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.741432905 CET	49808	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:36.741451025 CET	443	49808	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.742213011 CET	443	49798	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.742239952 CET	443	49798	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.742310047 CET	49798	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.742320061 CET	443	49798	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.742331982 CET	443	49798	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.742381096 CET	49798	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.742625952 CET	443	49808	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.743767977 CET	49816	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.743808031 CET	443	49816	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.744401932 CET	49808	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:36.744440079 CET	49816	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.744494915 CET	443	49808	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.744760990 CET	49808	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:36.745085955 CET	49816	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.745106936 CET	443	49816	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.747303009 CET	49798	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.747309923 CET	443	49798	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.748541117 CET	49803	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.748600960 CET	443	49803	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.750247955 CET	49804	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.750266075 CET	443	49804	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.766968966 CET	443	49806	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.771279097 CET	49806	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.771296024 CET	443	49806	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.772454023 CET	443	49806	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.772849083 CET	49806	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.772988081 CET	49806	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.772998095 CET	443	49806	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.773024082 CET	443	49806	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.773468018 CET	443	49807	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.773927927 CET	49807	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.773937941 CET	443	49807	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.774745941 CET	443	49807	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.775500059 CET	49807	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.775578976 CET	443	49807	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.775639057 CET	49807	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.787353039 CET	443	49808	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.796428919 CET	49803	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.796747923 CET	49804	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.805105925 CET	443	49809	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.806401968 CET	443	49812	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.807307005 CET	49809	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.807344913 CET	443	49809	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.808182955 CET	49812	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:36.808203936 CET	443	49812	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.810409069 CET	49817	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.810506105 CET	443	49817	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.810652971 CET	49817	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.811148882 CET	443	49809	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.811218977 CET	49809	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.811753035 CET	443	49812	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.811847925 CET	49812	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:36.817837000 CET	443	49797	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.817888975 CET	443	49797	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.817907095 CET	443	49797	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.817945004 CET	443	49797	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.817959070 CET	49797	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.817962885 CET	443	49797	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.817981005 CET	443	49797	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.818001032 CET	49797	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.818001032 CET	49797	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.818006992 CET	443	49797	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.818053961 CET	49797	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.818089962 CET	49797	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.818728924 CET	443	49797	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.818774939 CET	443	49797	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.818810940 CET	49797	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.818834066 CET	443	49797	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.818861008 CET	49797	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.819329977 CET	443	49807	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.823151112 CET	49817	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.823189020 CET	443	49817	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.823659897 CET	49812	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:36.823863029 CET	443	49812	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.824043989 CET	49809	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.824197054 CET	49812	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:36.824223042 CET	443	49812	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.824274063 CET	443	49809	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.824518919 CET	49809	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.824537992 CET	443	49809	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.825503111 CET	49807	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.825531006 CET	49806	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.834069967 CET	443	49810	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.856632948 CET	443	49811	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.863449097 CET	49797	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.879451990 CET	49809	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.879883051 CET	49810	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.881448984 CET	49812	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:36.896085024 CET	443	49808	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.896239042 CET	443	49808	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.896308899 CET	49808	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:36.898866892 CET	443	49803	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.898926020 CET	443	49803	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.899013996 CET	49803	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.899053097 CET	443	49803	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.899096012 CET	443	49803	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.899152040 CET	49803	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.899557114 CET	443	49804	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.899607897 CET	443	49804	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.899753094 CET	443	49804	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.899774075 CET	49804	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.899810076 CET	49804	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.900532007 CET	49811	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:36.904316902 CET	443	49797	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.904339075 CET	443	49797	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.904403925 CET	443	49797	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.904407024 CET	49797	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.904457092 CET	49797	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.904476881 CET	443	49797	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.904501915 CET	49797	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.904587984 CET	49797	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.904634953 CET	443	49797	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.904716015 CET	49797	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.904730082 CET	443	49797	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.904793024 CET	443	49797	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.904854059 CET	49797	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.922730923 CET	49811	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:36.922739029 CET	443	49811	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.924395084 CET	443	49811	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.924751997 CET	49810	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.924766064 CET	443	49810	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.927980900 CET	443	49810	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.928087950 CET	49810	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.930748940 CET	49811	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:36.930973053 CET	443	49811	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.941699028 CET	49810	443	192.168.2.4	74.117.179.70
Jan 15, 2025 23:20:36.942070961 CET	443	49810	74.117.179.70	192.168.2.4
Jan 15, 2025 23:20:36.957441092 CET	443	49812	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.957570076 CET	443	49812	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.957623005 CET	49812	443	192.168.2.4	104.22.16.194
Jan 15, 2025 23:20:36.957634926 CET	443	49812	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.957818031 CET	443	49812	104.22.16.194	192.168.2.4
Jan 15, 2025 23:20:36.958122969 CET	49812	443	192.168.2.4	104.22.16.194

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 15, 2025 23:20:31.170387983 CET	192.168.2.4	1.1.1.1	0x11ad	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:31.170490026 CET	192.168.2.4	1.1.1.1	0x99ae	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 15, 2025 23:20:33.087093115 CET	192.168.2.4	1.1.1.1	0x6d26	Standard query (0)	nuance-pdf-professional2.software.informer.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:33.087533951 CET	192.168.2.4	1.1.1.1	0x6d05	Standard query (0)	nuance-pdf-professional2.software.informer.com	65	IN (0x0001)	false
Jan 15, 2025 23:20:33.900011063 CET	192.168.2.4	1.1.1.1	0x45aa	Standard query (0)	img.informer.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:33.900290966 CET	192.168.2.4	1.1.1.1	0xfd39	Standard query (0)	img.informer.com	65	IN (0x0001)	false
Jan 15, 2025 23:20:33.911552906 CET	192.168.2.4	1.1.1.1	0x3cd9	Standard query (0)	hits.informer.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:33.911830902 CET	192.168.2.4	1.1.1.1	0xe9c7	Standard query (0)	hits.informer.com	65	IN (0x0001)	false
Jan 15, 2025 23:20:34.221143961 CET	192.168.2.4	1.1.1.1	0x2c48	Standard query (0)	software.informer.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:34.221143961 CET	192.168.2.4	1.1.1.1	0xfdf5	Standard query (0)	software.informer.com	65	IN (0x0001)	false
Jan 15, 2025 23:20:34.221982956 CET	192.168.2.4	1.1.1.1	0x2344	Standard query (0)	i.informer.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:34.222265959 CET	192.168.2.4	1.1.1.1	0x5298	Standard query (0)	i.informer.com	65	IN (0x0001)	false
Jan 15, 2025 23:20:34.962485075 CET	192.168.2.4	1.1.1.1	0xc6c5	Standard query (0)	i.informer.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:34.962692022 CET	192.168.2.4	1.1.1.1	0x8e93	Standard query (0)	i.informer.com	65	IN (0x0001)	false
Jan 15, 2025 23:20:35.060338974 CET	192.168.2.4	1.1.1.1	0x26e4	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:35.060610056 CET	192.168.2.4	1.1.1.1	0x7a1f	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jan 15, 2025 23:20:35.067581892 CET	192.168.2.4	1.1.1.1	0xcdbe	Standard query (0)	nuance-pdf-professional2.software.informer.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:35.067711115 CET	192.168.2.4	1.1.1.1	0xa0a0	Standard query (0)	nuance-pdf-professional2.software.informer.com	65	IN (0x0001)	false
Jan 15, 2025 23:20:35.126966953 CET	192.168.2.4	1.1.1.1	0x80b5	Standard query (0)	img.informer.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:35.127182961 CET	192.168.2.4	1.1.1.1	0x3384	Standard query (0)	img.informer.com	65	IN (0x0001)	false
Jan 15, 2025 23:20:35.243305922 CET	192.168.2.4	1.1.1.1	0x1e6f	Standard query (0)	hits.informer.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:35.243438005 CET	192.168.2.4	1.1.1.1	0xafa	Standard query (0)	hits.informer.com	65	IN (0x0001)	false
Jan 15, 2025 23:20:36.011612892 CET	192.168.2.4	1.1.1.1	0xed09	Standard query (0)	software.informer.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:36.012002945 CET	192.168.2.4	1.1.1.1	0xd0d4	Standard query (0)	software.informer.com	65	IN (0x0001)	false
Jan 15, 2025 23:20:37.050519943 CET	192.168.2.4	1.1.1.1	0x93bf	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:37.050663948 CET	192.168.2.4	1.1.1.1	0x4992	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jan 15, 2025 23:20:38.625139952 CET	192.168.2.4	1.1.1.1	0x5a2b	Standard query (0)	g.bidbrain.app	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:38.625332117 CET	192.168.2.4	1.1.1.1	0x5490	Standard query (0)	g.bidbrain.app	65	IN (0x0001)	false
Jan 15, 2025 23:20:38.625546932 CET	192.168.2.4	1.1.1.1	0x14b5	Standard query (0)	cdn.bidbrain.app	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:38.625654936 CET	192.168.2.4	1.1.1.1	0xaf48	Standard query (0)	cdn.bidbrain.app	65	IN (0x0001)	false
Jan 15, 2025 23:20:38.800810099 CET	192.168.2.4	1.1.1.1	0xf323	Standard query (0)	serve.bidbrain.app	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:38.801100016 CET	192.168.2.4	1.1.1.1	0x7da4	Standard query (0)	serve.bidbrain.app	65	IN (0x0001)	false
Jan 15, 2025 23:20:39.129882097 CET	192.168.2.4	1.1.1.1	0x159b	Standard query (0)	fundingchoicesmessages.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:39.129997015 CET	192.168.2.4	1.1.1.1	0x9d34	Standard query (0)	fundingchoicesmessages.google.com	65	IN (0x0001)	false
Jan 15, 2025 23:20:39.520215988 CET	192.168.2.4	1.1.1.1	0x4743	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:39.520371914 CET	192.168.2.4	1.1.1.1	0xb526	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 15, 2025 23:20:39.637485981 CET	192.168.2.4	1.1.1.1	0x2e80	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:39.637602091 CET	192.168.2.4	1.1.1.1	0x3494	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jan 15, 2025 23:20:41.095427036 CET	192.168.2.4	1.1.1.1	0x9348	Standard query (0)	cdn.bidbrain.app	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:41.095773935 CET	192.168.2.4	1.1.1.1	0x1d44	Standard query (0)	cdn.bidbrain.app	65	IN (0x0001)	false
Jan 15, 2025 23:20:41.097923040 CET	192.168.2.4	1.1.1.1	0x6330	Standard query (0)	serve.bidbrain.app	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:41.098128080 CET	192.168.2.4	1.1.1.1	0xeace	Standard query (0)	serve.bidbrain.app	65	IN (0x0001)	false
Jan 15, 2025 23:20:41.104618073 CET	192.168.2.4	1.1.1.1	0x4b28	Standard query (0)	fundingchoicesmessages.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:41.104857922 CET	192.168.2.4	1.1.1.1	0xa056	Standard query (0)	fundingchoicesmessages.google.com	65	IN (0x0001)	false
Jan 15, 2025 23:20:42.219630003 CET	192.168.2.4	1.1.1.1	0x3c2b	Standard query (0)	g4.bidbrain.app	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:42.219876051 CET	192.168.2.4	1.1.1.1	0x8265	Standard query (0)	g4.bidbrain.app	65	IN (0x0001)	false
Jan 15, 2025 23:20:42.222292900 CET	192.168.2.4	1.1.1.1	0x1b45	Standard query (0)	g6.bidbrain.app	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:42.222450018 CET	192.168.2.4	1.1.1.1	0x7f9c	Standard query (0)	g6.bidbrain.app	65	IN (0x0001)	false
Jan 15, 2025 23:20:42.305121899 CET	192.168.2.4	1.1.1.1	0xe4bc	Standard query (0)	g6.bidbrain.app	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:43.196294069 CET	192.168.2.4	1.1.1.1	0x91c3	Standard query (0)	ep1.adtrafficquality.google	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:43.197242975 CET	192.168.2.4	1.1.1.1	0x5b88	Standard query (0)	ep1.adtrafficquality.google	65	IN (0x0001)	false
Jan 15, 2025 23:20:44.241935968 CET	192.168.2.4	1.1.1.1	0x94ea	Standard query (0)	ep2.adtrafficquality.google	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:44.242229939 CET	192.168.2.4	1.1.1.1	0xfab6	Standard query (0)	ep2.adtrafficquality.google	65	IN (0x0001)	false
Jan 15, 2025 23:20:44.351056099 CET	192.168.2.4	1.1.1.1	0x350a	Standard query (0)	ep1.adtrafficquality.google	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:44.351461887 CET	192.168.2.4	1.1.1.1	0x5b9f	Standard query (0)	ep1.adtrafficquality.google	65	IN (0x0001)	false
Jan 15, 2025 23:20:45.783457041 CET	192.168.2.4	1.1.1.1	0x13ea	Standard query (0)	ep2.adtrafficquality.google	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:45.783595085 CET	192.168.2.4	1.1.1.1	0xf6a5	Standard query (0)	ep2.adtrafficquality.google	65	IN (0x0001)	false
Jan 15, 2025 23:20:46.076283932 CET	192.168.2.4	1.1.1.1	0x255f	Standard query (0)	ep2.adtrafficquality.google	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:46.076392889 CET	192.168.2.4	1.1.1.1	0x6e37	Standard query (0)	ep2.adtrafficquality.google	65	IN (0x0001)	false
Jan 15, 2025 23:20:55.933083057 CET	192.168.2.4	1.1.1.1	0x5c04	Standard query (0)	get4.protectonow.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:55.936372042 CET	192.168.2.4	1.1.1.1	0x3a8c	Standard query (0)	get4.protectonow.com	65	IN (0x0001)	false
Jan 15, 2025 23:20:55.940757036 CET	192.168.2.4	1.1.1.1	0x5f15	Standard query (0)	adclick.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:55.943859100 CET	192.168.2.4	1.1.1.1	0x292d	Standard query (0)	adclick.g.doubleclick.net	65	IN (0x0001)	false
Jan 15, 2025 23:20:55.988763094 CET	192.168.2.4	1.1.1.1	0x777b	Standard query (0)	get4.protectonow.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:55.989723921 CET	192.168.2.4	1.1.1.1	0xdb8	Standard query (0)	get4.protectonow.com	65	IN (0x0001)	false
Jan 15, 2025 23:20:56.732295036 CET	192.168.2.4	1.1.1.1	0xa475	Standard query (0)	cdn.protectonow.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:56.732666969 CET	192.168.2.4	1.1.1.1	0x8de3	Standard query (0)	cdn.protectonow.com	65	IN (0x0001)	false
Jan 15, 2025 23:20:56.797787905 CET	192.168.2.4	1.1.1.1	0xde9f	Standard query (0)	cdn.protectonow.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:56.812758923 CET	192.168.2.4	1.1.1.1	0x2613	Standard query (0)	g.protectonow.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:56.813179016 CET	192.168.2.4	1.1.1.1	0x9a33	Standard query (0)	g.protectonow.com	65	IN (0x0001)	false
Jan 15, 2025 23:20:56.823263884 CET	192.168.2.4	1.1.1.1	0xdd29	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:56.823455095 CET	192.168.2.4	1.1.1.1	0xca33	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 15, 2025 23:20:56.824091911 CET	192.168.2.4	1.1.1.1	0xa83b	Standard query (0)	euob.7roundprince.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:56.824220896 CET	192.168.2.4	1.1.1.1	0xf913	Standard query (0)	euob.7roundprince.com	65	IN (0x0001)	false
Jan 15, 2025 23:20:56.830506086 CET	192.168.2.4	1.1.1.1	0x447f	Standard query (0)	get4.protectonow.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:56.830746889 CET	192.168.2.4	1.1.1.1	0xc989	Standard query (0)	get4.protectonow.com	65	IN (0x0001)	false
Jan 15, 2025 23:20:56.880793095 CET	192.168.2.4	1.1.1.1	0x78db	Standard query (0)	g.protectonow.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:57.080236912 CET	192.168.2.4	1.1.1.1	0xb5f2	Standard query (0)	get4.protectonow.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:57.080461979 CET	192.168.2.4	1.1.1.1	0x90b	Standard query (0)	get4.protectonow.com	65	IN (0x0001)	false
Jan 15, 2025 23:20:57.185949087 CET	192.168.2.4	1.1.1.1	0xcbc9	Standard query (0)	get4.protectonow.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:57.564490080 CET	192.168.2.4	1.1.1.1	0x8f9f	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:57.564692020 CET	192.168.2.4	1.1.1.1	0xfd1	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jan 15, 2025 23:20:57.772563934 CET	192.168.2.4	1.1.1.1	0x3947	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:57.772799969 CET	192.168.2.4	1.1.1.1	0x1c49	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 15, 2025 23:20:57.972589016 CET	192.168.2.4	1.1.1.1	0x248f	Standard query (0)	cdn.protectonow.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:57.972846031 CET	192.168.2.4	1.1.1.1	0x272e	Standard query (0)	cdn.protectonow.com	65	IN (0x0001)	false
Jan 15, 2025 23:20:58.103425026 CET	192.168.2.4	1.1.1.1	0xe9c9	Standard query (0)	euob.7roundprince.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:58.103527069 CET	192.168.2.4	1.1.1.1	0x4f11	Standard query (0)	euob.7roundprince.com	65	IN (0x0001)	false
Jan 15, 2025 23:20:58.395998955 CET	192.168.2.4	1.1.1.1	0x180c	Standard query (0)	obseu.7roundprince.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:58.396151066 CET	192.168.2.4	1.1.1.1	0x5c25	Standard query (0)	obseu.7roundprince.com	65	IN (0x0001)	false
Jan 15, 2025 23:20:59.356170893 CET	192.168.2.4	1.1.1.1	0x3dde	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:59.356285095 CET	192.168.2.4	1.1.1.1	0xb2b8	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 15, 2025 23:20:59.865319967 CET	192.168.2.4	1.1.1.1	0x9253	Standard query (0)	obseu.7roundprince.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:59.865453005 CET	192.168.2.4	1.1.1.1	0x2b1a	Standard query (0)	obseu.7roundprince.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:03.612624884 CET	192.168.2.4	1.1.1.1	0xa8cc	Standard query (0)	m.facebook.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:03.613038063 CET	192.168.2.4	1.1.1.1	0x2baa	Standard query (0)	m.facebook.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:03.614707947 CET	192.168.2.4	1.1.1.1	0x31cb	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:03.615417004 CET	192.168.2.4	1.1.1.1	0x10d9	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:03.616607904 CET	192.168.2.4	1.1.1.1	0xac8d	Standard query (0)	ws-broker-service.us-east-1.amazonaws.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:03.617088079 CET	192.168.2.4	1.1.1.1	0x5e4c	Standard query (0)	ws-broker-service.us-east-1.amazonaws.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:03.617718935 CET	192.168.2.4	1.1.1.1	0x101	Standard query (0)	ws-broker-service.us-west-2.amazonaws.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:03.617854118 CET	192.168.2.4	1.1.1.1	0xd842	Standard query (0)	ws-broker-service.us-west-2.amazonaws.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:03.705868006 CET	192.168.2.4	1.1.1.1	0xc2ff	Standard query (0)	stun.l.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:03.706079006 CET	192.168.2.4	1.1.1.1	0xbec1	Standard query (0)	stun.l.google.com	28	IN (0x0001)	false
Jan 15, 2025 23:21:03.712151051 CET	192.168.2.4	1.1.1.1	0x6731	Standard query (0)	medium.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:03.712323904 CET	192.168.2.4	1.1.1.1	0x19ce	Standard query (0)	medium.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:03.712897062 CET	192.168.2.4	1.1.1.1	0xa6f6	Standard query (0)	squareup.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:03.713001013 CET	192.168.2.4	1.1.1.1	0xbf41	Standard query (0)	squareup.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:03.713279963 CET	192.168.2.4	1.1.1.1	0x4875	Standard query (0)	twitter.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:03.713373899 CET	192.168.2.4	1.1.1.1	0xb129	Standard query (0)	twitter.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:03.714137077 CET	192.168.2.4	1.1.1.1	0xc5b7	Standard query (0)	plus.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:03.714370966 CET	192.168.2.4	1.1.1.1	0xb2e0	Standard query (0)	plus.google.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:03.714698076 CET	192.168.2.4	1.1.1.1	0x8097	Standard query (0)	login.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:03.714807034 CET	192.168.2.4	1.1.1.1	0x2435	Standard query (0)	login.yahoo.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:03.716363907 CET	192.168.2.4	1.1.1.1	0x32d0	Standard query (0)	stun.l.google.com	28	IN (0x0001)	false
Jan 15, 2025 23:21:04.383682966 CET	192.168.2.4	1.1.1.1	0x5cd6	Standard query (0)	app.squareup.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:04.383800983 CET	192.168.2.4	1.1.1.1	0x9c29	Standard query (0)	app.squareup.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:04.424716949 CET	192.168.2.4	1.1.1.1	0xbac7	Standard query (0)	www.reddit.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:04.425005913 CET	192.168.2.4	1.1.1.1	0x9ebb	Standard query (0)	www.reddit.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:04.438779116 CET	192.168.2.4	1.1.1.1	0xd5f3	Standard query (0)	ws-broker-service.us-east-1.amazonaws.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:04.439040899 CET	192.168.2.4	1.1.1.1	0x5258	Standard query (0)	ws-broker-service.us-east-1.amazonaws.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:04.463011026 CET	192.168.2.4	1.1.1.1	0x4c12	Standard query (0)	medium.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:04.463011026 CET	192.168.2.4	1.1.1.1	0x9bdf	Standard query (0)	medium.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:04.534884930 CET	192.168.2.4	1.1.1.1	0x1acf	Standard query (0)	x.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:04.535713911 CET	192.168.2.4	1.1.1.1	0xbe9a	Standard query (0)	x.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:04.565618992 CET	192.168.2.4	1.1.1.1	0x832	Standard query (0)	www.tumblr.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:04.565821886 CET	192.168.2.4	1.1.1.1	0x9807	Standard query (0)	www.tumblr.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:04.652960062 CET	192.168.2.4	1.1.1.1	0x598f	Standard query (0)	www.expedia.de	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:04.652960062 CET	192.168.2.4	1.1.1.1	0x9672	Standard query (0)	www.expedia.de	65	IN (0x0001)	false
Jan 15, 2025 23:21:04.746047974 CET	192.168.2.4	1.1.1.1	0x35d4	Standard query (0)	workspaceupdates.googleblog.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:04.746047974 CET	192.168.2.4	1.1.1.1	0x6f9c	Standard query (0)	workspaceupdates.googleblog.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:04.950572968 CET	192.168.2.4	1.1.1.1	0x4b3d	Standard query (0)	www.dropbox.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:04.950711966 CET	192.168.2.4	1.1.1.1	0xc21	Standard query (0)	www.dropbox.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:05.028147936 CET	192.168.2.4	1.1.1.1	0xfb0c	Standard query (0)	ws-broker-service.us-west-2.amazonaws.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:05.028372049 CET	192.168.2.4	1.1.1.1	0x9f78	Standard query (0)	ws-broker-service.us-west-2.amazonaws.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:05.119863033 CET	192.168.2.4	1.1.1.1	0x7e29	Standard query (0)	www.amazon.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:05.120012999 CET	192.168.2.4	1.1.1.1	0xa222	Standard query (0)	www.amazon.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:05.134591103 CET	192.168.2.4	1.1.1.1	0x2e76	Standard query (0)	app.squareup.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:05.134591103 CET	192.168.2.4	1.1.1.1	0xf70	Standard query (0)	app.squareup.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:05.176848888 CET	192.168.2.4	1.1.1.1	0x300c	Standard query (0)	www.pinterest.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:05.177267075 CET	192.168.2.4	1.1.1.1	0x8362	Standard query (0)	www.pinterest.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:05.304045916 CET	192.168.2.4	1.1.1.1	0xc477	Standard query (0)	eu.battle.net	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:05.304256916 CET	192.168.2.4	1.1.1.1	0x6944	Standard query (0)	eu.battle.net	65	IN (0x0001)	false
Jan 15, 2025 23:21:05.305634022 CET	192.168.2.4	1.1.1.1	0xdfe1	Standard query (0)	x.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:05.305768013 CET	192.168.2.4	1.1.1.1	0xd6c7	Standard query (0)	x.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:05.831090927 CET	192.168.2.4	1.1.1.1	0xe700	Standard query (0)	store.steampowered.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:05.831198931 CET	192.168.2.4	1.1.1.1	0x7579	Standard query (0)	store.steampowered.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:05.977087975 CET	192.168.2.4	1.1.1.1	0x59b1	Standard query (0)	login.yahoo.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:05.977391958 CET	192.168.2.4	1.1.1.1	0x7b30	Standard query (0)	login.yahoo.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:05.993062973 CET	192.168.2.4	1.1.1.1	0xa14	Standard query (0)	github.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:05.993299007 CET	192.168.2.4	1.1.1.1	0xe7e4	Standard query (0)	github.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:05.994260073 CET	192.168.2.4	1.1.1.1	0x27a6	Standard query (0)	workspaceupdates.googleblog.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:05.994429111 CET	192.168.2.4	1.1.1.1	0x3f4b	Standard query (0)	workspaceupdates.googleblog.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:06.110645056 CET	192.168.2.4	1.1.1.1	0x2f33	Standard query (0)	slack.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.110958099 CET	192.168.2.4	1.1.1.1	0xe2ce	Standard query (0)	slack.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:06.112179995 CET	192.168.2.4	1.1.1.1	0xc477	Standard query (0)	www.dropbox.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.112344980 CET	192.168.2.4	1.1.1.1	0xaee4	Standard query (0)	www.dropbox.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:06.227650881 CET	192.168.2.4	1.1.1.1	0x6225	Standard query (0)	www.paypal.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.227906942 CET	192.168.2.4	1.1.1.1	0xcba4	Standard query (0)	www.paypal.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:06.231146097 CET	192.168.2.4	1.1.1.1	0xcf81	Standard query (0)	www.reddit.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.231415987 CET	192.168.2.4	1.1.1.1	0xd274	Standard query (0)	www.reddit.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:06.338001013 CET	192.168.2.4	1.1.1.1	0xf203	Standard query (0)	500px.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.338259935 CET	192.168.2.4	1.1.1.1	0x105d	Standard query (0)	500px.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:06.506164074 CET	192.168.2.4	1.1.1.1	0xf207	Standard query (0)	www.airbnb.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.506501913 CET	192.168.2.4	1.1.1.1	0x5fd7	Standard query (0)	www.airbnb.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:06.507822037 CET	192.168.2.4	1.1.1.1	0x10f9	Standard query (0)	www.amazon.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.507822037 CET	192.168.2.4	1.1.1.1	0x68b7	Standard query (0)	www.amazon.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:06.512031078 CET	192.168.2.4	1.1.1.1	0xcd05	Standard query (0)	disqus.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.512031078 CET	192.168.2.4	1.1.1.1	0x4d26	Standard query (0)	disqus.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:06.811114073 CET	192.168.2.4	1.1.1.1	0x1619	Standard query (0)	secure.meetup.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:06.811115026 CET	192.168.2.4	1.1.1.1	0xe65e	Standard query (0)	secure.meetup.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.912843943 CET	192.168.2.4	1.1.1.1	0xf0d2	Standard query (0)	bitbucket.org	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.913089991 CET	192.168.2.4	1.1.1.1	0xbf05	Standard query (0)	bitbucket.org	65	IN (0x0001)	false
Jan 15, 2025 23:21:06.914176941 CET	192.168.2.4	1.1.1.1	0x977f	Standard query (0)	github.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.914355993 CET	192.168.2.4	1.1.1.1	0xc14c	Standard query (0)	github.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:07.000950098 CET	192.168.2.4	1.1.1.1	0x1d8d	Standard query (0)	secure.indeed.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:07.000950098 CET	192.168.2.4	1.1.1.1	0x7ad0	Standard query (0)	secure.indeed.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.005867958 CET	192.168.2.4	1.1.1.1	0xdc81	Standard query (0)	store.steampowered.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.006161928 CET	192.168.2.4	1.1.1.1	0xc016	Standard query (0)	store.steampowered.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:07.091044903 CET	192.168.2.4	1.1.1.1	0x9077	Standard query (0)	vk.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:07.091044903 CET	192.168.2.4	1.1.1.1	0xd213	Standard query (0)	vk.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.097039938 CET	192.168.2.4	1.1.1.1	0x1e5e	Standard query (0)	www.paypal.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.097234964 CET	192.168.2.4	1.1.1.1	0x7760	Standard query (0)	www.paypal.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:07.158631086 CET	192.168.2.4	1.1.1.1	0xd508	Standard query (0)	www.twitch.tv	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.158631086 CET	192.168.2.4	1.1.1.1	0xb5ed	Standard query (0)	www.twitch.tv	65	IN (0x0001)	false
Jan 15, 2025 23:21:07.160990000 CET	192.168.2.4	1.1.1.1	0xb0fd	Standard query (0)	disqus.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.161308050 CET	192.168.2.4	1.1.1.1	0x2732	Standard query (0)	disqus.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:07.483305931 CET	192.168.2.4	1.1.1.1	0xf34c	Standard query (0)	accounts.craigslist.org	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.483412027 CET	192.168.2.4	1.1.1.1	0x7d1e	Standard query (0)	accounts.craigslist.org	65	IN (0x0001)	false
Jan 15, 2025 23:21:07.483880043 CET	192.168.2.4	1.1.1.1	0x7b62	Standard query (0)	www.imdb.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.483971119 CET	192.168.2.4	1.1.1.1	0x5bcc	Standard query (0)	www.imdb.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:07.497347116 CET	192.168.2.4	1.1.1.1	0xa189	Standard query (0)	slack.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.497483969 CET	192.168.2.4	1.1.1.1	0x7aea	Standard query (0)	slack.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:07.500104904 CET	192.168.2.4	1.1.1.1	0x7bd5	Standard query (0)	500px.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.500255108 CET	192.168.2.4	1.1.1.1	0x9f57	Standard query (0)	500px.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:07.553011894 CET	192.168.2.4	1.1.1.1	0xb13f	Standard query (0)	www.meetup.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.553199053 CET	192.168.2.4	1.1.1.1	0xa0e1	Standard query (0)	www.meetup.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:07.566829920 CET	192.168.2.4	1.1.1.1	0x3524	Standard query (0)	www.expedia.de	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.566956043 CET	192.168.2.4	1.1.1.1	0xe32e	Standard query (0)	www.expedia.de	65	IN (0x0001)	false
Jan 15, 2025 23:21:07.787820101 CET	192.168.2.4	1.1.1.1	0x2bdb	Standard query (0)	www.twitch.tv	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.787976980 CET	192.168.2.4	1.1.1.1	0x4b4c	Standard query (0)	www.twitch.tv	65	IN (0x0001)	false
Jan 15, 2025 23:21:07.837306976 CET	192.168.2.4	1.1.1.1	0xf09c	Standard query (0)	www.airbnb.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.837512016 CET	192.168.2.4	1.1.1.1	0xdade	Standard query (0)	www.airbnb.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:08.300314903 CET	192.168.2.4	1.1.1.1	0xe490	Standard query (0)	www.meetup.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:08.300461054 CET	192.168.2.4	1.1.1.1	0x5921	Standard query (0)	www.meetup.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:08.689171076 CET	192.168.2.4	1.1.1.1	0x3044	Standard query (0)	www.imdb.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:08.689346075 CET	192.168.2.4	1.1.1.1	0xa119	Standard query (0)	www.imdb.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:08.720873117 CET	192.168.2.4	1.1.1.1	0x3101	Standard query (0)	accounts.craigslist.org	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:08.721009970 CET	192.168.2.4	1.1.1.1	0xb4e9	Standard query (0)	accounts.craigslist.org	65	IN (0x0001)	false
Jan 15, 2025 23:21:08.920866966 CET	192.168.2.4	1.1.1.1	0x24	Standard query (0)	accounts.craigslist.org	65	IN (0x0001)	false
Jan 15, 2025 23:21:09.959392071 CET	192.168.2.4	1.1.1.1	0xfc92	Standard query (0)	vk.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:09.959538937 CET	192.168.2.4	1.1.1.1	0x7a86	Standard query (0)	vk.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:24.892888069 CET	192.168.2.4	1.1.1.1	0x61e8	Standard query (0)	chromewebstore.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:24.893201113 CET	192.168.2.4	1.1.1.1	0xe85e	Standard query (0)	chromewebstore.google.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:26.998862028 CET	192.168.2.4	1.1.1.1	0xf562	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:26.999099970 CET	192.168.2.4	1.1.1.1	0x52ef	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:28.855784893 CET	192.168.2.4	1.1.1.1	0x520a	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:28.855920076 CET	192.168.2.4	1.1.1.1	0x58b6	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:29.694422960 CET	192.168.2.4	1.1.1.1	0xb81f	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:29.694547892 CET	192.168.2.4	1.1.1.1	0xb4e8	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:32.987679958 CET	192.168.2.4	1.1.1.1	0x9079	Standard query (0)	scone-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:32.987848997 CET	192.168.2.4	1.1.1.1	0xebd1	Standard query (0)	scone-pa.clients6.google.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:34.956444025 CET	192.168.2.4	1.1.1.1	0xa57e	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:34.956574917 CET	192.168.2.4	1.1.1.1	0xd0af	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:37.159532070 CET	192.168.2.4	1.1.1.1	0xbf2d	Standard query (0)	scone-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:37.159899950 CET	192.168.2.4	1.1.1.1	0x670f	Standard query (0)	scone-pa.clients6.google.com	65	IN (0x0001)	false
Jan 15, 2025 23:21:38.872785091 CET	192.168.2.4	1.1.1.1	0x7052	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:38.872891903 CET	192.168.2.4	1.1.1.1	0x6e	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 15, 2025 23:20:31.177642107 CET	1.1.1.1	192.168.2.4	0x99ae	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 15, 2025 23:20:31.177695990 CET	1.1.1.1	192.168.2.4	0x11ad	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:33.097261906 CET	1.1.1.1	192.168.2.4	0x6d26	No error (0)	nuance-pdf-professional2.software.informer.com		104.22.17.194	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:33.097261906 CET	1.1.1.1	192.168.2.4	0x6d26	No error (0)	nuance-pdf-professional2.software.informer.com		104.22.16.194	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:33.097261906 CET	1.1.1.1	192.168.2.4	0x6d26	No error (0)	nuance-pdf-professional2.software.informer.com		172.67.43.115	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:33.097594976 CET	1.1.1.1	192.168.2.4	0x6d05	No error (0)	nuance-pdf-professional2.software.informer.com			65	IN (0x0001)	false
Jan 15, 2025 23:20:33.908838034 CET	1.1.1.1	192.168.2.4	0x45aa	No error (0)	img.informer.com		74.117.179.70	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:33.920342922 CET	1.1.1.1	192.168.2.4	0x3cd9	No error (0)	hits.informer.com		204.155.159.109	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:34.229046106 CET	1.1.1.1	192.168.2.4	0x2c48	No error (0)	software.informer.com		104.22.17.194	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:34.229046106 CET	1.1.1.1	192.168.2.4	0x2c48	No error (0)	software.informer.com		172.67.43.115	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:34.229046106 CET	1.1.1.1	192.168.2.4	0x2c48	No error (0)	software.informer.com		104.22.16.194	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:34.230465889 CET	1.1.1.1	192.168.2.4	0xfdf5	No error (0)	software.informer.com			65	IN (0x0001)	false
Jan 15, 2025 23:20:34.230762005 CET	1.1.1.1	192.168.2.4	0x2344	No error (0)	i.informer.com		172.67.43.115	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:34.230762005 CET	1.1.1.1	192.168.2.4	0x2344	No error (0)	i.informer.com		104.22.17.194	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:34.230762005 CET	1.1.1.1	192.168.2.4	0x2344	No error (0)	i.informer.com		104.22.16.194	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:34.231741905 CET	1.1.1.1	192.168.2.4	0x5298	No error (0)	i.informer.com			65	IN (0x0001)	false
Jan 15, 2025 23:20:34.971337080 CET	1.1.1.1	192.168.2.4	0xc6c5	No error (0)	i.informer.com		172.67.43.115	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:34.971337080 CET	1.1.1.1	192.168.2.4	0xc6c5	No error (0)	i.informer.com		104.22.16.194	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:34.971337080 CET	1.1.1.1	192.168.2.4	0xc6c5	No error (0)	i.informer.com		104.22.17.194	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:34.971364021 CET	1.1.1.1	192.168.2.4	0x8e93	No error (0)	i.informer.com			65	IN (0x0001)	false
Jan 15, 2025 23:20:35.066996098 CET	1.1.1.1	192.168.2.4	0x26e4	No error (0)	googleads.g.doubleclick.net		142.250.185.226	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:35.067281008 CET	1.1.1.1	192.168.2.4	0x7a1f	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jan 15, 2025 23:20:35.074872971 CET	1.1.1.1	192.168.2.4	0xcdbe	No error (0)	nuance-pdf-professional2.software.informer.com		104.22.16.194	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:35.074872971 CET	1.1.1.1	192.168.2.4	0xcdbe	No error (0)	nuance-pdf-professional2.software.informer.com		172.67.43.115	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:35.074872971 CET	1.1.1.1	192.168.2.4	0xcdbe	No error (0)	nuance-pdf-professional2.software.informer.com		104.22.17.194	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:35.077661991 CET	1.1.1.1	192.168.2.4	0xa0a0	No error (0)	nuance-pdf-professional2.software.informer.com			65	IN (0x0001)	false
Jan 15, 2025 23:20:35.134100914 CET	1.1.1.1	192.168.2.4	0x80b5	No error (0)	img.informer.com		74.117.179.70	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:35.250426054 CET	1.1.1.1	192.168.2.4	0x1e6f	No error (0)	hits.informer.com		204.155.159.109	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:36.020354033 CET	1.1.1.1	192.168.2.4	0xed09	No error (0)	software.informer.com		104.22.16.194	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:36.020354033 CET	1.1.1.1	192.168.2.4	0xed09	No error (0)	software.informer.com		172.67.43.115	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:36.020354033 CET	1.1.1.1	192.168.2.4	0xed09	No error (0)	software.informer.com		104.22.17.194	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:36.020946026 CET	1.1.1.1	192.168.2.4	0xd0d4	No error (0)	software.informer.com			65	IN (0x0001)	false
Jan 15, 2025 23:20:37.057116032 CET	1.1.1.1	192.168.2.4	0x93bf	No error (0)	googleads.g.doubleclick.net		142.250.185.162	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:37.057260036 CET	1.1.1.1	192.168.2.4	0x4992	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jan 15, 2025 23:20:38.633848906 CET	1.1.1.1	192.168.2.4	0x5a2b	No error (0)	g.bidbrain.app		104.21.80.92	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:38.633848906 CET	1.1.1.1	192.168.2.4	0x5a2b	No error (0)	g.bidbrain.app		172.67.176.164	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:38.634346008 CET	1.1.1.1	192.168.2.4	0x5490	No error (0)	g.bidbrain.app			65	IN (0x0001)	false
Jan 15, 2025 23:20:38.635528088 CET	1.1.1.1	192.168.2.4	0xaf48	No error (0)	cdn.bidbrain.app			65	IN (0x0001)	false
Jan 15, 2025 23:20:38.647072077 CET	1.1.1.1	192.168.2.4	0x14b5	No error (0)	cdn.bidbrain.app		104.21.80.92	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:38.647072077 CET	1.1.1.1	192.168.2.4	0x14b5	No error (0)	cdn.bidbrain.app		172.67.176.164	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:38.809907913 CET	1.1.1.1	192.168.2.4	0x7da4	No error (0)	serve.bidbrain.app			65	IN (0x0001)	false
Jan 15, 2025 23:20:38.810374022 CET	1.1.1.1	192.168.2.4	0xf323	No error (0)	serve.bidbrain.app		172.67.176.164	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:38.810374022 CET	1.1.1.1	192.168.2.4	0xf323	No error (0)	serve.bidbrain.app		104.21.80.92	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:39.136534929 CET	1.1.1.1	192.168.2.4	0x159b	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:20:39.136534929 CET	1.1.1.1	192.168.2.4	0x159b	No error (0)	www3.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:39.137027025 CET	1.1.1.1	192.168.2.4	0x9d34	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:20:39.527143955 CET	1.1.1.1	192.168.2.4	0x4743	No error (0)	www.google.com		172.217.16.196	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:39.527343988 CET	1.1.1.1	192.168.2.4	0xb526	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 15, 2025 23:20:39.644145966 CET	1.1.1.1	192.168.2.4	0x3494	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jan 15, 2025 23:20:39.644207954 CET	1.1.1.1	192.168.2.4	0x2e80	No error (0)	googleads.g.doubleclick.net		142.250.185.98	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:41.104391098 CET	1.1.1.1	192.168.2.4	0x9348	No error (0)	cdn.bidbrain.app		104.21.80.92	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:41.104391098 CET	1.1.1.1	192.168.2.4	0x9348	No error (0)	cdn.bidbrain.app		172.67.176.164	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:41.105767965 CET	1.1.1.1	192.168.2.4	0x1d44	No error (0)	cdn.bidbrain.app			65	IN (0x0001)	false
Jan 15, 2025 23:20:41.112440109 CET	1.1.1.1	192.168.2.4	0x4b28	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:20:41.112440109 CET	1.1.1.1	192.168.2.4	0x4b28	No error (0)	www3.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:41.112469912 CET	1.1.1.1	192.168.2.4	0xa056	No error (0)	fundingchoicesmessages.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:20:41.120105028 CET	1.1.1.1	192.168.2.4	0xeace	No error (0)	serve.bidbrain.app			65	IN (0x0001)	false
Jan 15, 2025 23:20:41.120207071 CET	1.1.1.1	192.168.2.4	0x6330	No error (0)	serve.bidbrain.app		104.21.80.92	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:41.120207071 CET	1.1.1.1	192.168.2.4	0x6330	No error (0)	serve.bidbrain.app		172.67.176.164	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:42.257049084 CET	1.1.1.1	192.168.2.4	0x3c2b	No error (0)	g4.bidbrain.app		34.8.123.242	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:43.202856064 CET	1.1.1.1	192.168.2.4	0x91c3	No error (0)	ep1.adtrafficquality.google		172.217.18.2	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:43.203975916 CET	1.1.1.1	192.168.2.4	0x5b88	No error (0)	ep1.adtrafficquality.google			65	IN (0x0001)	false
Jan 15, 2025 23:20:44.248723030 CET	1.1.1.1	192.168.2.4	0x94ea	No error (0)	ep2.adtrafficquality.google		142.250.184.225	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:44.357798100 CET	1.1.1.1	192.168.2.4	0x350a	No error (0)	ep1.adtrafficquality.google		142.250.186.34	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:44.358175039 CET	1.1.1.1	192.168.2.4	0x5b9f	No error (0)	ep1.adtrafficquality.google			65	IN (0x0001)	false
Jan 15, 2025 23:20:45.790285110 CET	1.1.1.1	192.168.2.4	0x13ea	No error (0)	ep2.adtrafficquality.google		142.250.184.225	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:46.083093882 CET	1.1.1.1	192.168.2.4	0x255f	No error (0)	ep2.adtrafficquality.google		142.250.185.193	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:55.947828054 CET	1.1.1.1	192.168.2.4	0x5f15	No error (0)	adclick.g.doubleclick.net		142.250.186.162	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:55.952306986 CET	1.1.1.1	192.168.2.4	0x292d	No error (0)	adclick.g.doubleclick.net			65	IN (0x0001)	false
Jan 15, 2025 23:20:56.003726006 CET	1.1.1.1	192.168.2.4	0x777b	No error (0)	get4.protectonow.com		104.21.50.45	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:56.003726006 CET	1.1.1.1	192.168.2.4	0x777b	No error (0)	get4.protectonow.com		172.67.200.191	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:56.157227993 CET	1.1.1.1	192.168.2.4	0xdb8	No error (0)	get4.protectonow.com			65	IN (0x0001)	false
Jan 15, 2025 23:20:56.246467113 CET	1.1.1.1	192.168.2.4	0x3a8c	No error (0)	get4.protectonow.com			65	IN (0x0001)	false
Jan 15, 2025 23:20:56.246871948 CET	1.1.1.1	192.168.2.4	0x5c04	No error (0)	get4.protectonow.com		104.21.50.45	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:56.246871948 CET	1.1.1.1	192.168.2.4	0x5c04	No error (0)	get4.protectonow.com		172.67.200.191	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:56.745697975 CET	1.1.1.1	192.168.2.4	0x8de3	No error (0)	cdn.protectonow.com			65	IN (0x0001)	false
Jan 15, 2025 23:20:56.811425924 CET	1.1.1.1	192.168.2.4	0xde9f	No error (0)	cdn.protectonow.com		172.67.200.191	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:56.811425924 CET	1.1.1.1	192.168.2.4	0xde9f	No error (0)	cdn.protectonow.com		104.21.50.45	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:56.826765060 CET	1.1.1.1	192.168.2.4	0x9a33	No error (0)	g.protectonow.com			65	IN (0x0001)	false
Jan 15, 2025 23:20:56.829765081 CET	1.1.1.1	192.168.2.4	0xdd29	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:56.830715895 CET	1.1.1.1	192.168.2.4	0xca33	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 15, 2025 23:20:56.844126940 CET	1.1.1.1	192.168.2.4	0x447f	No error (0)	get4.protectonow.com		104.21.50.45	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:56.844126940 CET	1.1.1.1	192.168.2.4	0x447f	No error (0)	get4.protectonow.com		172.67.200.191	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:56.854717970 CET	1.1.1.1	192.168.2.4	0xa83b	No error (0)	euob.7roundprince.com		13.32.121.16	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:56.854717970 CET	1.1.1.1	192.168.2.4	0xa83b	No error (0)	euob.7roundprince.com		13.32.121.92	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:56.854717970 CET	1.1.1.1	192.168.2.4	0xa83b	No error (0)	euob.7roundprince.com		13.32.121.54	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:56.854717970 CET	1.1.1.1	192.168.2.4	0xa83b	No error (0)	euob.7roundprince.com		13.32.121.103	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:56.890642881 CET	1.1.1.1	192.168.2.4	0x78db	No error (0)	g.protectonow.com		104.21.50.45	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:56.890642881 CET	1.1.1.1	192.168.2.4	0x78db	No error (0)	g.protectonow.com		172.67.200.191	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:56.971259117 CET	1.1.1.1	192.168.2.4	0x2613	No error (0)	g.protectonow.com		172.67.200.191	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:56.971259117 CET	1.1.1.1	192.168.2.4	0x2613	No error (0)	g.protectonow.com		104.21.50.45	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:57.008341074 CET	1.1.1.1	192.168.2.4	0xc989	No error (0)	get4.protectonow.com			65	IN (0x0001)	false
Jan 15, 2025 23:20:57.039083958 CET	1.1.1.1	192.168.2.4	0xa475	No error (0)	cdn.protectonow.com		172.67.200.191	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:57.039083958 CET	1.1.1.1	192.168.2.4	0xa475	No error (0)	cdn.protectonow.com		104.21.50.45	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:57.089122057 CET	1.1.1.1	192.168.2.4	0x90b	No error (0)	get4.protectonow.com			65	IN (0x0001)	false
Jan 15, 2025 23:20:57.225552082 CET	1.1.1.1	192.168.2.4	0xcbc9	No error (0)	get4.protectonow.com		104.21.50.45	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:57.225552082 CET	1.1.1.1	192.168.2.4	0xcbc9	No error (0)	get4.protectonow.com		172.67.200.191	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:57.243392944 CET	1.1.1.1	192.168.2.4	0xb5f2	No error (0)	get4.protectonow.com		104.21.50.45	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:57.243392944 CET	1.1.1.1	192.168.2.4	0xb5f2	No error (0)	get4.protectonow.com		172.67.200.191	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:57.571228981 CET	1.1.1.1	192.168.2.4	0x8f9f	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:57.779431105 CET	1.1.1.1	192.168.2.4	0x3947	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:57.779539108 CET	1.1.1.1	192.168.2.4	0x1c49	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 15, 2025 23:20:57.983033895 CET	1.1.1.1	192.168.2.4	0x248f	No error (0)	cdn.protectonow.com		172.67.200.191	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:57.983033895 CET	1.1.1.1	192.168.2.4	0x248f	No error (0)	cdn.protectonow.com		104.21.50.45	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:57.983220100 CET	1.1.1.1	192.168.2.4	0x272e	No error (0)	cdn.protectonow.com			65	IN (0x0001)	false
Jan 15, 2025 23:20:58.134650946 CET	1.1.1.1	192.168.2.4	0xe9c9	No error (0)	euob.7roundprince.com		13.32.121.54	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:58.134650946 CET	1.1.1.1	192.168.2.4	0xe9c9	No error (0)	euob.7roundprince.com		13.32.121.103	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:58.134650946 CET	1.1.1.1	192.168.2.4	0xe9c9	No error (0)	euob.7roundprince.com		13.32.121.92	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:58.134650946 CET	1.1.1.1	192.168.2.4	0xe9c9	No error (0)	euob.7roundprince.com		13.32.121.16	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:58.419446945 CET	1.1.1.1	192.168.2.4	0x180c	No error (0)	obseu.7roundprince.com		34.251.101.162	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:58.419446945 CET	1.1.1.1	192.168.2.4	0x180c	No error (0)	obseu.7roundprince.com		3.248.162.96	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:58.419446945 CET	1.1.1.1	192.168.2.4	0x180c	No error (0)	obseu.7roundprince.com		54.75.69.192	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:59.363221884 CET	1.1.1.1	192.168.2.4	0x3dde	No error (0)	www.google.com		216.58.206.36	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:59.367305994 CET	1.1.1.1	192.168.2.4	0xb2b8	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 15, 2025 23:20:59.893187046 CET	1.1.1.1	192.168.2.4	0x9253	No error (0)	obseu.7roundprince.com		3.248.162.96	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:59.893187046 CET	1.1.1.1	192.168.2.4	0x9253	No error (0)	obseu.7roundprince.com		34.251.101.162	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:20:59.893187046 CET	1.1.1.1	192.168.2.4	0x9253	No error (0)	obseu.7roundprince.com		54.75.69.192	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:03.620268106 CET	1.1.1.1	192.168.2.4	0x2baa	No error (0)	m.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:03.620268106 CET	1.1.1.1	192.168.2.4	0x2baa	No error (0)	star-mini.c10r.facebook.com			65	IN (0x0001)	false
Jan 15, 2025 23:21:03.620268106 CET	1.1.1.1	192.168.2.4	0x2baa	No error (0)	star-mini.c10r.facebook.com			65	IN (0x0001)	false
Jan 15, 2025 23:21:03.620587111 CET	1.1.1.1	192.168.2.4	0xa8cc	No error (0)	m.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:03.620587111 CET	1.1.1.1	192.168.2.4	0xa8cc	No error (0)	star-mini.c10r.facebook.com		157.240.253.35	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:03.622144938 CET	1.1.1.1	192.168.2.4	0x31cb	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:03.622144938 CET	1.1.1.1	192.168.2.4	0x31cb	No error (0)	star-mini.c10r.facebook.com		157.240.0.35	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:03.623022079 CET	1.1.1.1	192.168.2.4	0x10d9	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:03.623022079 CET	1.1.1.1	192.168.2.4	0x10d9	No error (0)	star-mini.c10r.facebook.com			65	IN (0x0001)	false
Jan 15, 2025 23:21:03.623022079 CET	1.1.1.1	192.168.2.4	0x10d9	No error (0)	star-mini.c10r.facebook.com			65	IN (0x0001)	false
Jan 15, 2025 23:21:03.627490044 CET	1.1.1.1	192.168.2.4	0xac8d	No error (0)	ws-broker-service.us-east-1.amazonaws.com		44.216.185.77	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:03.640098095 CET	1.1.1.1	192.168.2.4	0x101	No error (0)	ws-broker-service.us-west-2.amazonaws.com		18.246.119.221	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:03.712929964 CET	1.1.1.1	192.168.2.4	0xc2ff	No error (0)	stun.l.google.com		74.125.250.129	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:03.713145018 CET	1.1.1.1	192.168.2.4	0xbec1	No error (0)	stun.l.google.com			28	IN (0x0001)	false
Jan 15, 2025 23:21:03.718930006 CET	1.1.1.1	192.168.2.4	0x6731	No error (0)	medium.com		162.159.153.4	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:03.718930006 CET	1.1.1.1	192.168.2.4	0x6731	No error (0)	medium.com		162.159.152.4	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:03.719818115 CET	1.1.1.1	192.168.2.4	0xa6f6	No error (0)	squareup.com		162.159.137.66	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:03.719818115 CET	1.1.1.1	192.168.2.4	0xa6f6	No error (0)	squareup.com		162.159.136.66	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:03.719867945 CET	1.1.1.1	192.168.2.4	0x4875	No error (0)	twitter.com		104.244.42.65	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:03.720890999 CET	1.1.1.1	192.168.2.4	0xc5b7	No error (0)	plus.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:03.721959114 CET	1.1.1.1	192.168.2.4	0x2435	No error (0)	login.yahoo.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:03.722167015 CET	1.1.1.1	192.168.2.4	0x8097	No error (0)	login.yahoo.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:03.722167015 CET	1.1.1.1	192.168.2.4	0x8097	No error (0)	ds-ats.member.g02.yahoodns.net		212.82.100.140	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:03.723793983 CET	1.1.1.1	192.168.2.4	0x32d0	No error (0)	stun.l.google.com			28	IN (0x0001)	false
Jan 15, 2025 23:21:04.413065910 CET	1.1.1.1	192.168.2.4	0x9c29	No error (0)	app.squareup.com	cdn.app.squareup.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:04.414125919 CET	1.1.1.1	192.168.2.4	0x5cd6	No error (0)	app.squareup.com	cdn.app.squareup.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:04.414125919 CET	1.1.1.1	192.168.2.4	0x5cd6	No error (0)	cdn.app.squareup.com		162.159.140.28	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:04.414125919 CET	1.1.1.1	192.168.2.4	0x5cd6	No error (0)	cdn.app.squareup.com		172.66.0.28	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:04.431548119 CET	1.1.1.1	192.168.2.4	0xbac7	No error (0)	www.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:04.431548119 CET	1.1.1.1	192.168.2.4	0xbac7	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:04.431548119 CET	1.1.1.1	192.168.2.4	0xbac7	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:04.431548119 CET	1.1.1.1	192.168.2.4	0xbac7	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:04.431548119 CET	1.1.1.1	192.168.2.4	0xbac7	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:04.432344913 CET	1.1.1.1	192.168.2.4	0x9ebb	No error (0)	www.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:04.447308064 CET	1.1.1.1	192.168.2.4	0xd5f3	No error (0)	ws-broker-service.us-east-1.amazonaws.com		44.216.185.77	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:04.469778061 CET	1.1.1.1	192.168.2.4	0x9bdf	No error (0)	medium.com		162.159.153.4	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:04.469778061 CET	1.1.1.1	192.168.2.4	0x9bdf	No error (0)	medium.com		162.159.152.4	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:04.541752100 CET	1.1.1.1	192.168.2.4	0x1acf	No error (0)	x.com		104.244.42.1	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:04.572901964 CET	1.1.1.1	192.168.2.4	0x832	No error (0)	www.tumblr.com		192.0.77.40	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:04.660727024 CET	1.1.1.1	192.168.2.4	0x598f	No error (0)	www.expedia.de	www.expedia.de.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:04.664504051 CET	1.1.1.1	192.168.2.4	0x9672	No error (0)	www.expedia.de	www.expedia.de.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:04.752877951 CET	1.1.1.1	192.168.2.4	0x6f9c	No error (0)	workspaceupdates.googleblog.com	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:04.752877951 CET	1.1.1.1	192.168.2.4	0x6f9c	No error (0)	blogspot.l.googleusercontent.com		172.217.16.193	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:04.755016088 CET	1.1.1.1	192.168.2.4	0x35d4	No error (0)	workspaceupdates.googleblog.com	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:04.957165003 CET	1.1.1.1	192.168.2.4	0x4b3d	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:04.957165003 CET	1.1.1.1	192.168.2.4	0x4b3d	No error (0)	www-env.dropbox-dns.com		162.125.66.18	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:04.957803011 CET	1.1.1.1	192.168.2.4	0xc21	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:05.050242901 CET	1.1.1.1	192.168.2.4	0xfb0c	No error (0)	ws-broker-service.us-west-2.amazonaws.com		18.246.122.98	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:05.126832008 CET	1.1.1.1	192.168.2.4	0x7e29	No error (0)	www.amazon.com	tp.47cf2c8c9-frontier.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:05.126832008 CET	1.1.1.1	192.168.2.4	0x7e29	No error (0)	tp.47cf2c8c9-frontier.amazon.com	d3ag4hukkh62yn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:05.126832008 CET	1.1.1.1	192.168.2.4	0x7e29	No error (0)	d3ag4hukkh62yn.cloudfront.net		99.86.8.42	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:05.127038956 CET	1.1.1.1	192.168.2.4	0xa222	No error (0)	www.amazon.com	tp.47cf2c8c9-frontier.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:05.127038956 CET	1.1.1.1	192.168.2.4	0xa222	No error (0)	tp.47cf2c8c9-frontier.amazon.com	d3ag4hukkh62yn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:05.157840014 CET	1.1.1.1	192.168.2.4	0x2e76	No error (0)	app.squareup.com	cdn.app.squareup.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:05.157840014 CET	1.1.1.1	192.168.2.4	0x2e76	No error (0)	cdn.app.squareup.com		162.159.140.28	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:05.157840014 CET	1.1.1.1	192.168.2.4	0x2e76	No error (0)	cdn.app.squareup.com		172.66.0.28	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:05.161696911 CET	1.1.1.1	192.168.2.4	0xf70	No error (0)	app.squareup.com	cdn.app.squareup.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:05.183913946 CET	1.1.1.1	192.168.2.4	0x300c	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:05.183913946 CET	1.1.1.1	192.168.2.4	0x300c	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:05.183913946 CET	1.1.1.1	192.168.2.4	0x300c	No error (0)	prod.pinterest.global.map.fastly.net		151.101.128.84	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:05.183913946 CET	1.1.1.1	192.168.2.4	0x300c	No error (0)	prod.pinterest.global.map.fastly.net		151.101.64.84	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:05.183913946 CET	1.1.1.1	192.168.2.4	0x300c	No error (0)	prod.pinterest.global.map.fastly.net		151.101.192.84	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:05.183913946 CET	1.1.1.1	192.168.2.4	0x300c	No error (0)	prod.pinterest.global.map.fastly.net		151.101.0.84	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:05.185516119 CET	1.1.1.1	192.168.2.4	0x8362	No error (0)	www.pinterest.com	www-pinterest-com.gslb.pinterest.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:05.185516119 CET	1.1.1.1	192.168.2.4	0x8362	No error (0)	www-pinterest-com.gslb.pinterest.com	2-01-37d2-0018.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:05.311254978 CET	1.1.1.1	192.168.2.4	0xc477	No error (0)	eu.battle.net		37.244.28.102	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:05.312186003 CET	1.1.1.1	192.168.2.4	0xdfe1	No error (0)	x.com		104.244.42.65	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:05.837718964 CET	1.1.1.1	192.168.2.4	0xe700	No error (0)	store.steampowered.com		95.101.149.47	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:05.984797001 CET	1.1.1.1	192.168.2.4	0x59b1	No error (0)	login.yahoo.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:05.984797001 CET	1.1.1.1	192.168.2.4	0x59b1	No error (0)	ds-ats.member.g02.yahoodns.net		212.82.100.140	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.000124931 CET	1.1.1.1	192.168.2.4	0xa14	No error (0)	github.com		140.82.121.3	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.000924110 CET	1.1.1.1	192.168.2.4	0x27a6	No error (0)	workspaceupdates.googleblog.com	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:06.000924110 CET	1.1.1.1	192.168.2.4	0x27a6	No error (0)	blogspot.l.googleusercontent.com		172.217.16.193	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.007750034 CET	1.1.1.1	192.168.2.4	0x7b30	No error (0)	login.yahoo.com	ds-ats.member.g02.yahoodns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:06.014719009 CET	1.1.1.1	192.168.2.4	0x3f4b	No error (0)	workspaceupdates.googleblog.com	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:06.117305040 CET	1.1.1.1	192.168.2.4	0x2f33	No error (0)	slack.com		3.68.124.95	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.117305040 CET	1.1.1.1	192.168.2.4	0x2f33	No error (0)	slack.com		3.68.124.168	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.117305040 CET	1.1.1.1	192.168.2.4	0x2f33	No error (0)	slack.com		3.68.175.98	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.117305040 CET	1.1.1.1	192.168.2.4	0x2f33	No error (0)	slack.com		3.68.170.153	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.117305040 CET	1.1.1.1	192.168.2.4	0x2f33	No error (0)	slack.com		18.159.197.225	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.117305040 CET	1.1.1.1	192.168.2.4	0x2f33	No error (0)	slack.com		52.29.238.212	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.119121075 CET	1.1.1.1	192.168.2.4	0xc477	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:06.119121075 CET	1.1.1.1	192.168.2.4	0xc477	No error (0)	www-env.dropbox-dns.com		162.125.66.18	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.119149923 CET	1.1.1.1	192.168.2.4	0xaee4	No error (0)	www.dropbox.com	www-env.dropbox-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:06.237591028 CET	1.1.1.1	192.168.2.4	0x6225	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:06.237591028 CET	1.1.1.1	192.168.2.4	0x6225	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:06.237591028 CET	1.1.1.1	192.168.2.4	0x6225	No error (0)	paypal-dynamic.map.fastly.net		151.101.1.21	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.237591028 CET	1.1.1.1	192.168.2.4	0x6225	No error (0)	paypal-dynamic.map.fastly.net		151.101.193.21	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.237591028 CET	1.1.1.1	192.168.2.4	0x6225	No error (0)	paypal-dynamic.map.fastly.net		151.101.65.21	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.237591028 CET	1.1.1.1	192.168.2.4	0x6225	No error (0)	paypal-dynamic.map.fastly.net		151.101.129.21	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.237622976 CET	1.1.1.1	192.168.2.4	0xcba4	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:06.237622976 CET	1.1.1.1	192.168.2.4	0xcba4	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:06.238632917 CET	1.1.1.1	192.168.2.4	0xcf81	No error (0)	www.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:06.238632917 CET	1.1.1.1	192.168.2.4	0xcf81	No error (0)	reddit.map.fastly.net		151.101.1.140	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.238632917 CET	1.1.1.1	192.168.2.4	0xcf81	No error (0)	reddit.map.fastly.net		151.101.193.140	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.238632917 CET	1.1.1.1	192.168.2.4	0xcf81	No error (0)	reddit.map.fastly.net		151.101.65.140	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.238632917 CET	1.1.1.1	192.168.2.4	0xcf81	No error (0)	reddit.map.fastly.net		151.101.129.140	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.240453005 CET	1.1.1.1	192.168.2.4	0xd274	No error (0)	www.reddit.com	reddit.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:06.344461918 CET	1.1.1.1	192.168.2.4	0xf203	No error (0)	500px.com		18.172.112.18	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.344461918 CET	1.1.1.1	192.168.2.4	0xf203	No error (0)	500px.com		18.172.112.126	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.344461918 CET	1.1.1.1	192.168.2.4	0xf203	No error (0)	500px.com		18.172.112.4	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.344461918 CET	1.1.1.1	192.168.2.4	0xf203	No error (0)	500px.com		18.172.112.107	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.513581991 CET	1.1.1.1	192.168.2.4	0x5fd7	No error (0)	www.airbnb.com	san.airbnb.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:06.514261961 CET	1.1.1.1	192.168.2.4	0xf207	No error (0)	www.airbnb.com	san.airbnb.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:06.514689922 CET	1.1.1.1	192.168.2.4	0x10f9	No error (0)	www.amazon.com	tp.47cf2c8c9-frontier.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:06.514689922 CET	1.1.1.1	192.168.2.4	0x10f9	No error (0)	tp.47cf2c8c9-frontier.amazon.com	d3ag4hukkh62yn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:06.514689922 CET	1.1.1.1	192.168.2.4	0x10f9	No error (0)	d3ag4hukkh62yn.cloudfront.net		99.86.8.42	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.515002966 CET	1.1.1.1	192.168.2.4	0x68b7	No error (0)	www.amazon.com	tp.47cf2c8c9-frontier.amazon.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:06.515002966 CET	1.1.1.1	192.168.2.4	0x68b7	No error (0)	tp.47cf2c8c9-frontier.amazon.com	d3ag4hukkh62yn.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:06.518882990 CET	1.1.1.1	192.168.2.4	0xcd05	No error (0)	disqus.com		151.101.64.134	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.518882990 CET	1.1.1.1	192.168.2.4	0xcd05	No error (0)	disqus.com		151.101.192.134	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.518882990 CET	1.1.1.1	192.168.2.4	0xcd05	No error (0)	disqus.com		151.101.0.134	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.518882990 CET	1.1.1.1	192.168.2.4	0xcd05	No error (0)	disqus.com		151.101.128.134	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.827975988 CET	1.1.1.1	192.168.2.4	0x1619	No error (0)	secure.meetup.com	p3.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:06.830641985 CET	1.1.1.1	192.168.2.4	0xe65e	No error (0)	secure.meetup.com	p3.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:06.920993090 CET	1.1.1.1	192.168.2.4	0x977f	No error (0)	github.com		140.82.121.4	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.921005011 CET	1.1.1.1	192.168.2.4	0xf0d2	No error (0)	bitbucket.org		185.166.143.50	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.921005011 CET	1.1.1.1	192.168.2.4	0xf0d2	No error (0)	bitbucket.org		185.166.143.49	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:06.921005011 CET	1.1.1.1	192.168.2.4	0xf0d2	No error (0)	bitbucket.org		185.166.143.48	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.008335114 CET	1.1.1.1	192.168.2.4	0x1d8d	No error (0)	secure.indeed.com			65	IN (0x0001)	false
Jan 15, 2025 23:21:07.009763002 CET	1.1.1.1	192.168.2.4	0x7ad0	No error (0)	secure.indeed.com		162.159.129.67	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.009763002 CET	1.1.1.1	192.168.2.4	0x7ad0	No error (0)	secure.indeed.com		162.159.130.67	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.012670994 CET	1.1.1.1	192.168.2.4	0xdc81	No error (0)	store.steampowered.com		95.101.149.47	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.097676992 CET	1.1.1.1	192.168.2.4	0xd213	No error (0)	vk.com		87.240.132.67	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.097676992 CET	1.1.1.1	192.168.2.4	0xd213	No error (0)	vk.com		87.240.132.78	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.097676992 CET	1.1.1.1	192.168.2.4	0xd213	No error (0)	vk.com		87.240.132.72	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.097676992 CET	1.1.1.1	192.168.2.4	0xd213	No error (0)	vk.com		93.186.225.194	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.097676992 CET	1.1.1.1	192.168.2.4	0xd213	No error (0)	vk.com		87.240.137.164	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.097676992 CET	1.1.1.1	192.168.2.4	0xd213	No error (0)	vk.com		87.240.129.133	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.103635073 CET	1.1.1.1	192.168.2.4	0x1e5e	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:07.103635073 CET	1.1.1.1	192.168.2.4	0x1e5e	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:07.103635073 CET	1.1.1.1	192.168.2.4	0x1e5e	No error (0)	paypal-dynamic.map.fastly.net		151.101.1.21	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.103635073 CET	1.1.1.1	192.168.2.4	0x1e5e	No error (0)	paypal-dynamic.map.fastly.net		151.101.129.21	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.103635073 CET	1.1.1.1	192.168.2.4	0x1e5e	No error (0)	paypal-dynamic.map.fastly.net		151.101.65.21	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.103635073 CET	1.1.1.1	192.168.2.4	0x1e5e	No error (0)	paypal-dynamic.map.fastly.net		151.101.193.21	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.105489969 CET	1.1.1.1	192.168.2.4	0x7760	No error (0)	www.paypal.com	www.glb.paypal.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:07.105489969 CET	1.1.1.1	192.168.2.4	0x7760	No error (0)	www.glb.paypal.com	paypal-dynamic.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:07.165985107 CET	1.1.1.1	192.168.2.4	0xd508	No error (0)	www.twitch.tv	h2.twitch.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:07.165985107 CET	1.1.1.1	192.168.2.4	0xd508	No error (0)	h2.twitch.map.fastly.net		151.101.2.214	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.165985107 CET	1.1.1.1	192.168.2.4	0xd508	No error (0)	h2.twitch.map.fastly.net		151.101.130.214	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.165985107 CET	1.1.1.1	192.168.2.4	0xd508	No error (0)	h2.twitch.map.fastly.net		151.101.66.214	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.165985107 CET	1.1.1.1	192.168.2.4	0xd508	No error (0)	h2.twitch.map.fastly.net		151.101.194.214	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.166300058 CET	1.1.1.1	192.168.2.4	0xb5ed	No error (0)	www.twitch.tv	h2.twitch.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:07.167633057 CET	1.1.1.1	192.168.2.4	0xb0fd	No error (0)	disqus.com		151.101.192.134	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.167633057 CET	1.1.1.1	192.168.2.4	0xb0fd	No error (0)	disqus.com		151.101.128.134	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.167633057 CET	1.1.1.1	192.168.2.4	0xb0fd	No error (0)	disqus.com		151.101.0.134	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.167633057 CET	1.1.1.1	192.168.2.4	0xb0fd	No error (0)	disqus.com		151.101.64.134	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.491079092 CET	1.1.1.1	192.168.2.4	0x5bcc	No error (0)	www.imdb.com	tp.391b988c0-frontier.imdb.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:07.491079092 CET	1.1.1.1	192.168.2.4	0x5bcc	No error (0)	tp.391b988c0-frontier.imdb.com	d2bytcopxu066p.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:07.491215944 CET	1.1.1.1	192.168.2.4	0x7b62	No error (0)	www.imdb.com	tp.391b988c0-frontier.imdb.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:07.491215944 CET	1.1.1.1	192.168.2.4	0x7b62	No error (0)	tp.391b988c0-frontier.imdb.com	d2bytcopxu066p.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:07.491215944 CET	1.1.1.1	192.168.2.4	0x7b62	No error (0)	d2bytcopxu066p.cloudfront.net		18.245.39.216	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.505475044 CET	1.1.1.1	192.168.2.4	0xa189	No error (0)	slack.com		3.68.124.168	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.505475044 CET	1.1.1.1	192.168.2.4	0xa189	No error (0)	slack.com		18.159.197.225	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.505475044 CET	1.1.1.1	192.168.2.4	0xa189	No error (0)	slack.com		52.29.238.212	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.505475044 CET	1.1.1.1	192.168.2.4	0xa189	No error (0)	slack.com		3.68.175.98	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.505475044 CET	1.1.1.1	192.168.2.4	0xa189	No error (0)	slack.com		3.68.124.95	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.505475044 CET	1.1.1.1	192.168.2.4	0xa189	No error (0)	slack.com		3.68.170.153	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.506738901 CET	1.1.1.1	192.168.2.4	0x7bd5	No error (0)	500px.com		18.172.112.126	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.506738901 CET	1.1.1.1	192.168.2.4	0x7bd5	No error (0)	500px.com		18.172.112.107	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.506738901 CET	1.1.1.1	192.168.2.4	0x7bd5	No error (0)	500px.com		18.172.112.18	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.506738901 CET	1.1.1.1	192.168.2.4	0x7bd5	No error (0)	500px.com		18.172.112.4	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.560405016 CET	1.1.1.1	192.168.2.4	0xb13f	No error (0)	www.meetup.com	p3.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:07.569550991 CET	1.1.1.1	192.168.2.4	0xa0e1	No error (0)	www.meetup.com	p3.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:07.575812101 CET	1.1.1.1	192.168.2.4	0xe32e	No error (0)	www.expedia.de	www.expedia.de.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:07.576983929 CET	1.1.1.1	192.168.2.4	0x3524	No error (0)	www.expedia.de	www.expedia.de.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:07.662065029 CET	1.1.1.1	192.168.2.4	0x7d1e	No error (0)	accounts.craigslist.org	post.g.craigslist.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:07.663137913 CET	1.1.1.1	192.168.2.4	0xf34c	No error (0)	accounts.craigslist.org	post.g.craigslist.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:07.663137913 CET	1.1.1.1	192.168.2.4	0xf34c	No error (0)	post.g.craigslist.org		208.82.238.246	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.794487953 CET	1.1.1.1	192.168.2.4	0x4b4c	No error (0)	www.twitch.tv	h2.twitch.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:07.794867992 CET	1.1.1.1	192.168.2.4	0x2bdb	No error (0)	www.twitch.tv	h2.twitch.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:07.794867992 CET	1.1.1.1	192.168.2.4	0x2bdb	No error (0)	h2.twitch.map.fastly.net		151.101.194.214	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.794867992 CET	1.1.1.1	192.168.2.4	0x2bdb	No error (0)	h2.twitch.map.fastly.net		151.101.130.214	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.794867992 CET	1.1.1.1	192.168.2.4	0x2bdb	No error (0)	h2.twitch.map.fastly.net		151.101.66.214	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.794867992 CET	1.1.1.1	192.168.2.4	0x2bdb	No error (0)	h2.twitch.map.fastly.net		151.101.2.214	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:07.844536066 CET	1.1.1.1	192.168.2.4	0xf09c	No error (0)	www.airbnb.com	san.airbnb.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:07.844897985 CET	1.1.1.1	192.168.2.4	0xdade	No error (0)	www.airbnb.com	san.airbnb.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:08.307878017 CET	1.1.1.1	192.168.2.4	0xe490	No error (0)	www.meetup.com	p3.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:08.308307886 CET	1.1.1.1	192.168.2.4	0x5921	No error (0)	www.meetup.com	p3.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:08.696304083 CET	1.1.1.1	192.168.2.4	0xa119	No error (0)	www.imdb.com	tp.391b988c0-frontier.imdb.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:08.696304083 CET	1.1.1.1	192.168.2.4	0xa119	No error (0)	tp.391b988c0-frontier.imdb.com	d2bytcopxu066p.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:08.697192907 CET	1.1.1.1	192.168.2.4	0x3044	No error (0)	www.imdb.com	tp.391b988c0-frontier.imdb.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:08.697192907 CET	1.1.1.1	192.168.2.4	0x3044	No error (0)	tp.391b988c0-frontier.imdb.com	d2bytcopxu066p.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:08.697192907 CET	1.1.1.1	192.168.2.4	0x3044	No error (0)	d2bytcopxu066p.cloudfront.net		18.245.39.216	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:08.900954962 CET	1.1.1.1	192.168.2.4	0x3101	No error (0)	accounts.craigslist.org	post.g.craigslist.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:08.900954962 CET	1.1.1.1	192.168.2.4	0x3101	No error (0)	post.g.craigslist.org		208.82.238.230	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:08.969630003 CET	1.1.1.1	192.168.2.4	0xb4e9	No error (0)	accounts.craigslist.org	post.g.craigslist.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:09.098263979 CET	1.1.1.1	192.168.2.4	0x24	No error (0)	accounts.craigslist.org	post.g.craigslist.org		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:09.966144085 CET	1.1.1.1	192.168.2.4	0xfc92	No error (0)	vk.com		87.240.132.67	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:09.966144085 CET	1.1.1.1	192.168.2.4	0xfc92	No error (0)	vk.com		87.240.132.78	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:09.966144085 CET	1.1.1.1	192.168.2.4	0xfc92	No error (0)	vk.com		93.186.225.194	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:09.966144085 CET	1.1.1.1	192.168.2.4	0xfc92	No error (0)	vk.com		87.240.129.133	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:09.966144085 CET	1.1.1.1	192.168.2.4	0xfc92	No error (0)	vk.com		87.240.137.164	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:09.966144085 CET	1.1.1.1	192.168.2.4	0xfc92	No error (0)	vk.com		87.240.132.72	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:24.899987936 CET	1.1.1.1	192.168.2.4	0x61e8	No error (0)	chromewebstore.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:27.005470991 CET	1.1.1.1	192.168.2.4	0xf562	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:27.005470991 CET	1.1.1.1	192.168.2.4	0xf562	No error (0)	googlehosted.l.googleusercontent.com		172.217.18.1	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:27.006650925 CET	1.1.1.1	192.168.2.4	0x52ef	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:28.863413095 CET	1.1.1.1	192.168.2.4	0x520a	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:28.863413095 CET	1.1.1.1	192.168.2.4	0x520a	No error (0)	plus.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:28.864643097 CET	1.1.1.1	192.168.2.4	0x58b6	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:29.704600096 CET	1.1.1.1	192.168.2.4	0xb81f	No error (0)	play.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:32.995522976 CET	1.1.1.1	192.168.2.4	0x9079	No error (0)	scone-pa.clients6.google.com		142.250.185.234	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:34.963263988 CET	1.1.1.1	192.168.2.4	0xa57e	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:34.963263988 CET	1.1.1.1	192.168.2.4	0xa57e	No error (0)	plus.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:34.964581013 CET	1.1.1.1	192.168.2.4	0xd0af	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:37.166202068 CET	1.1.1.1	192.168.2.4	0xbf2d	No error (0)	scone-pa.clients6.google.com		142.250.185.74	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:38.879538059 CET	1.1.1.1	192.168.2.4	0x7052	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 23:21:38.879538059 CET	1.1.1.1	192.168.2.4	0x7052	No error (0)	googlehosted.l.googleusercontent.com		142.250.185.97	A (IP address)	IN (0x0001)	false
Jan 15, 2025 23:21:38.879825115 CET	1.1.1.1	192.168.2.4	0x6e	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49739	104.22.17.194	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:33 UTC	693	OUT	GET /7.2/ HTTP/1.1 Host: nuance-pdf-professional2.software.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:33 UTC	336	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: DENY Cache-Control: public, max-age=604800 CF-Cache-Status: HIT Age: 109503 Last-Modified: Tue, 14 Jan 2025 15:55:30 GMT Server: cloudflare CF-RAY: 902940f72d4ff0b9-DFW
2025-01-15 22:20:33 UTC	1033	IN	Data Raw: 37 65 34 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 4e 75 61 6e 63 65 20 50 44 46 20 43 6f 6e 76 65 72 74 65 72 20 50 72 6f 66 65 73 73 69 6f 6e 61 6c 20 37 2e 32 20 44 6f 77 6e 6c 6f 61 64 20 28 46 72 65 65 20 74 72 69 61 6c 29 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4e 75 61 6e 63 65 20 50 44 46 20 43 6f 6e 76 65 72 74 65 72 20 50 72 6f 66 65 73 73 69 6f 6e 61 6c 20 76 65 72 73 69 6f 6e 20 37 2e 32 20 28 50 44 46 50 6c 75 73 2e 65 78 65 29 2e 20 50 44 46 20 43 6f 6e 76 65 72 Data Ascii: 7e4e<!DOCTYPE html><html lang="en-US"><head><meta charset="UTF-8"><title>Nuance PDF Converter Professional 7.2 Download (Free trial)...</title><meta name="description" content="Nuance PDF Converter Professional version 7.2 (PDFPlus.exe). PDF Conver
2025-01-15 22:20:33 UTC	1369	IN	Data Raw: 2f 68 69 74 73 2e 69 6e 66 6f 72 6d 65 72 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 2f 2f 68 69 74 73 2e 69 6e 66 6f 72 6d 65 72 2e 63 6f 6d 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 34 38 78 34 38 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 67 2e 69 6e 66 6f 72 6d 65 72 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 76 33 2f 73 69 5f 69 63 6f 6e 2e 70 6e 67 22 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 35 37 78 35 37 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 67 2e 69 6e 66 6f 72 6d 65 72 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 76 33 Data Ascii: /hits.informer.com"><link rel="dns-prefetch" href="//hits.informer.com"><link rel="apple-touch-icon" sizes="48x48" href="https://img.informer.com/images/v3/si_icon.png"><link rel="apple-touch-icon" sizes="57x57" href="https://img.informer.com/images/v3
2025-01-15 22:20:33 UTC	1369	IN	Data Raw: 2f 70 6e 67 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6d 67 2e 69 6e 66 6f 72 6d 65 72 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 76 33 2f 73 69 5f 69 63 6f 6e 5f 31 39 32 2e 70 6e 67 22 3e 0a 3c 73 63 72 69 70 74 3e 0a 73 6f 66 74 61 64 76 69 63 65 5f 63 6f 6f 6b 69 65 5f 6e 61 6d 65 20 3d 20 27 5f 67 73 69 64 27 3b 0a 73 6f 66 74 61 64 76 69 63 65 5f 63 6f 6f 6b 69 65 5f 6e 61 6d 65 5f 73 65 6e 67 69 6e 65 20 3d 20 27 5f 66 72 6f 6d 5f 73 65 6e 67 69 6e 65 27 3b 76 61 72 20 61 75 74 68 5f 63 62 5f 64 61 74 61 20 3d 20 7b 62 6c 6f 63 6b 73 3a 7b 7d 2c 20 68 61 6e 64 6c 65 72 73 3a 7b 7d 7d 3b 77 69 6e 64 6f 77 2e 77 69 6e 64 6f 77 49 73 4c 6f 61 64 65 64 20 3d 20 66 61 6c 73 65 3b 0a 77 69 6e 64 6f 77 2e 77 69 6e 64 6f 77 49 73 4c 6f 61 64 65 64 46 75 Data Ascii: /png" href="https://img.informer.com/images/v3/si_icon_192.png"><script>softadvice_cookie_name = '_gsid';softadvice_cookie_name_sengine = '_from_sengine';var auth_cb_data = {blocks:{}, handlers:{}};window.windowIsLoaded = false;window.windowIsLoadedFu
2025-01-15 22:20:33 UTC	1369	IN	Data Raw: 66 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 20 3d 3d 3d 20 27 6f 62 6a 65 63 74 27 20 26 26 20 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 5b 22 6f 66 66 73 65 74 57 69 64 74 68 22 5d 20 21 3d 3d 20 27 6e 75 6c 6c 27 20 3f 20 70 61 72 73 65 49 6e 74 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 5b 22 6f 66 66 73 65 74 57 69 64 74 68 22 5d 29 20 3a 20 30 3b 72 65 74 75 72 6e 20 4d 61 74 68 2e 6d 61 78 28 63 6c 69 65 6e 74 57 69 64 74 68 2c 20 64 5f 73 63 72 6f 6c 6c 57 69 64 74 68 2c 20 64 5f 6f 66 66 73 65 74 57 69 64 74 68 2c 20 62 5f 73 63 72 6f 6c 6c 57 69 64 74 68 2c 20 62 5f 6f 66 66 73 65 74 57 69 64 74 68 29 3b 0a 7d 66 75 6e 63 74 69 6f 6e 20 73 69 74 65 5f 6c 6f 67 69 6e 5f 63 61 6c 6c 62 61 63 6b 28 29 7b 7d 66 75 6e 63 74 69 6f 6e Data Ascii: f document.body === 'object' && typeof document.body["offsetWidth"] !== 'null' ? parseInt(document.body["offsetWidth"]) : 0;return Math.max(clientWidth, d_scrollWidth, d_offsetWidth, b_scrollWidth, b_offsetWidth);}function site_login_callback(){}function
2025-01-15 22:20:33 UTC	1369	IN	Data Raw: 69 67 68 74 3a 34 30 30 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 7d 2a 2c 3a 3a 61 66 74 65 72 2c 3a 3a 62 65 66 6f 72 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 72 69 67 68 74 20 6e 61 76 2c 62 6f 64 79 2c 68 31 2c 68 32 2c 70 2c 75 6c 7b 6d 61 72 67 69 6e 3a 30 7d 62 6f 64 79 2c 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 66 6f 6e 74 2d 73 79 6e 74 68 65 73 69 73 3a 6e 6f 6e 65 7d 75 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 7d 62 6f 64 79 2c 68 74 6d 6c 7b 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 7d 68 74 6d 6c 7b 73 63 72 6f 6c 6c 2d 62 65 68 61 76 69 6f 72 3a 73 6d 6f 6f 74 68 7d 62 6f 64 79 7b 6d 69 6e 2d 68 Data Ascii: ight:400;font-style:italic;font-display:swap}*,::after,::before{box-sizing:border-box}.right nav,body,h1,h2,p,ul{margin:0}body,button,input{font-synthesis:none}ul{list-style:none;padding:0}body,html{overflow-x:hidden}html{scroll-behavior:smooth}body{min-h
2025-01-15 22:20:33 UTC	1369	IN	Data Raw: 69 67 68 74 3a 33 32 70 78 3b 63 6f 6c 6f 72 3a 23 35 61 35 61 35 61 21 69 6d 70 6f 72 74 61 6e 74 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 34 64 34 64 34 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 32 70 78 3b 70 61 64 64 69 6e 67 3a 30 20 38 70 78 20 30 20 34 36 70 78 3b 6f 75 74 6c 69 6e 65 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 72 61 70 70 65 72 5f 73 65 61 72 63 68 20 2e 73 65 61 72 63 68 5f 62 74 6e 7b 62 6f 72 64 65 72 3a 30 3b 6f 75 74 6c 69 6e 65 3a 30 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 32 34 70 78 3b 68 65 69 67 68 74 3a 32 34 70 78 Data Ascii: ight:32px;color:#5a5a5a!important;display:block;box-sizing:border-box;font-weight:300;border:1px solid #d4d4d4;border-radius:32px;padding:0 8px 0 46px;outline:0;width:100%}.wrapper_search .search_btn{border:0;outline:0;display:block;width:24px;height:24px
2025-01-15 22:20:33 UTC	1369	IN	Data Raw: 65 72 20 2e 6c 6f 67 69 6e 5f 62 74 6e 7b 77 69 64 74 68 3a 32 34 70 78 3b 68 65 69 67 68 74 3a 32 34 70 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 30 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 68 65 61 64 65 72 20 2e 61 75 74 68 2d 77 72 61 70 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 38 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 2e 68 65 61 64 65 72 20 2e 6c 6f 67 69 6e 5f 75 73 65 72 2c 2e 6e 61 76 69 67 61 74 69 6f 6e 20 61 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e Data Ascii: er .login_btn{width:24px;height:24px;display:block;margin:0;float:left;overflow:hidden;color:transparent}.header .auth-wrap{position:relative;float:right;margin-left:28px;margin-top:0}.header .login_user,.navigation a{display:block;box-sizing:border-box}.
2025-01-15 22:20:33 UTC	1369	IN	Data Raw: 61 70 70 65 72 5f 62 72 65 61 64 63 72 75 6d 62 73 7b 68 65 69 67 68 74 3a 34 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 31 39 35 64 65 7d 2e 62 72 65 61 64 63 72 75 6d 62 73 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 63 6f 6c 6f 72 3a 23 32 33 33 39 36 61 3b 70 61 64 64 69 6e 67 3a 30 20 32 32 70 78 7d 2e 62 72 65 61 64 63 72 75 6d 62 73 20 61 2c 2e 62 72 65 61 64 63 72 75 6d 62 73 20 73 70 61 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 63 6f 6c 6f 72 3a 23 65 Data Ascii: apper_breadcrumbs{height:40px;background-color:#5195de}.breadcrumbs{display:-ms-flexbox;display:flex;-ms-flex-align:center;align-items:center;height:100%;color:#23396a;padding:0 22px}.breadcrumbs a,.breadcrumbs span{font-size:16px;font-weight:400;color:#e
2025-01-15 22:20:33 UTC	1369	IN	Data Raw: 4e 6f 74 6f 20 53 61 6e 73 27 2c 73 61 6e 73 2d 73 65 72 69 66 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 72 69 67 68 74 3a 35 30 70 78 3b 62 6f 74 74 6f 6d 3a 35 30 70 78 3b 7a 2d 69 6e 64 65 78 3a 39 30 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 35 70 78 20 30 20 72 67 62 28 32 35 35 20 32 35 35 Data Ascii: Noto Sans',sans-serif;display:-ms-flexbox;display:flex;-ms-flex-pack:center;justify-content:center;-ms-flex-align:end;align-items:flex-end;padding:10px;text-decoration:none;position:fixed;right:50px;bottom:50px;z-index:900;box-shadow:0 0 5px 0 rgb(255 255
2025-01-15 22:20:33 UTC	1369	IN	Data Raw: 30 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 30 7d 2e 64 6f 77 6e 6c 6f 61 64 5f 62 74 6e 5f 5f 74 69 74 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 32 70 78 7d 2e 6c 65 66 74 5f 63 6f 6c 75 6d 6e 20 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 63 6f 6c 6f 72 3a 23 32 37 32 37 32 37 7d 2e 74 68 5f 62 6c 6f 63 6b 20 2e 74 68 5f 69 6d 67 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 72 69 67 68 74 20 2e 70 6c 61 74 66 6f 72 6d 5f 64 72 6f 70 64 6f 77 6e 20 61 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 20 31 35 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 75 6e 73 65 74 3b 62 6f 72 64 65 72 Data Ascii: 0px;z-index:10}.download_btn__title{font-size:32px}.left_column h2{font-size:26px;line-height:normal;margin-bottom:20px;color:#272727}.th_block .th_img{display:none}.right .platform_dropdown a{text-decoration:none;padding:10px 15px;min-height:unset;border

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49740	104.22.17.194	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:33 UTC	672	OUT	GET /fonts/SourceSansPro-Regular.woff HTTP/1.1 Host: nuance-pdf-professional2.software.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://nuance-pdf-professional2.software.informer.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://nuance-pdf-professional2.software.informer.com/7.2/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:34 UTC	372	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:34 GMT Content-Type: font/woff Content-Length: 127484 Connection: close Last-Modified: Fri, 07 Jun 2024 08:54:12 GMT ETag: "6662cab4-1f1fc" Expires: Sat, 18 Jan 2025 01:10:28 GMT Cache-Control: max-age=604800 CF-Cache-Status: HIT Age: 421806 Accept-Ranges: bytes Server: cloudflare CF-RAY: 902940f8dd472cbe-DFW
2025-01-15 22:20:34 UTC	997	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 01 f1 fc 00 13 00 00 00 04 58 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 42 41 53 45 00 01 f1 94 00 00 00 4a 00 00 00 88 64 cc 5c f4 46 46 54 4d 00 01 f1 e0 00 00 00 1c 00 00 00 1c 7c ed 9c b4 47 44 45 46 00 01 69 6c 00 00 01 62 00 00 01 fc 52 a0 56 4c 47 50 4f 53 00 01 8b f8 00 00 65 99 00 01 1e 14 98 8b 8e 42 47 53 55 42 00 01 6a d0 00 00 21 27 00 00 3c 52 ac 54 19 53 4f 53 2f 32 00 00 02 24 00 00 00 59 00 00 00 60 5d dd d7 c2 63 6d 61 70 00 00 0f 44 00 00 0a 87 00 00 11 6a 15 11 b3 e6 63 76 74 20 00 00 1b 24 00 00 00 2a 00 00 00 2a 01 22 0d ca 66 70 67 6d 00 00 19 cc 00 00 01 02 00 00 01 73 06 59 9c 37 67 61 73 70 00 01 69 64 00 00 00 08 00 00 00 08 ff ff 00 03 67 6c 79 66 00 00 2e 10 00 01 13 Data Ascii: wOFFXBASEJd\FFTM\|GDEFilbRVLGPOSeBGSUBj!'<RTSOS/2$Y`]cmapDjcvt $**"fpgmsY7gaspidglyf.
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 28 50 1e e4 d7 d1 da ec 63 ee 7c 59 ee b7 cb 60 37 53 7a b9 87 59 bf ca 0c d9 bb 07 d9 57 be fc c2 9d 6d b2 ed e1 ae 96 be a0 88 b2 f7 7c 19 eb 19 94 d6 0f ef 4f 50 5e ed ae 62 2f 0f 4b 45 d4 52 aa a2 be a0 2b 7a ae 91 41 26 f7 3a 10 55 48 33 d3 45 eb b4 2e 12 b8 dc f8 1b 74 31 19 de 0b 76 f9 1b a5 30 a3 87 2c b0 ae 32 b8 cc 74 51 0b a6 8b 09 f4 a9 42 5e c8 bd 2e 44 6d b1 35 74 61 7a a8 05 39 18 ef 36 5d 1c 8c 37 83 1d be 50 ca 33 7a c8 82 ca c5 9e d1 45 6d 98 5e d0 99 31 7b 35 dd 67 33 7b 37 5b a8 8f d5 46 47 49 a9 ed 1f dd 9b 6c 58 5f a3 7c b9 ed af a4 5e c6 d6 7d 41 bc dd af 97 02 d6 d2 0c 19 bf cd 3e df 80 8f c2 07 e1 7d ba 77 74 d0 1f 39 f4 86 27 c1 29 df 8a f1 f7 c8 38 3d 23 6a a7 76 4e b0 55 c3 36 99 86 cd 8e d5 73 03 8f 56 76 ad ac 7c 96 bb 02 de Data Ascii: (Pc\|Y`7SzYWm\|OP^b/KER+zA&:UH3E.t1v0,2tQB^.Dm5taz96]7P3zEm^1{5g3{7[FGIlX_\|^}A>}wt9')8=#jvNU6sVv\|
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 1a 3e 00 ab ff 6f 00 91 8f 0f 80 fd d1 12 f8 7a f8 7a 78 21 7c 56 bc 5d 41 dc 18 06 06 e0 fb 37 83 f7 03 7f 0a f6 1a 96 c7 07 c0 7e 77 00 de 07 7f 01 ef 86 ff 46 5f 60 f1 a5 2e 1c 66 7d bb 98 67 11 f3 2d 86 af 81 af a4 1f 71 a5 21 e8 1e 23 c7 be 8e 82 37 18 5f 63 50 03 88 9a 32 cf 21 fa fc 9c f1 6f 86 6f 82 97 c1 83 d9 1f 48 e4 9e 91 63 90 0b 7b db c3 be c7 27 eb cd cc 9f 8c dd 88 1e a3 09 f1 91 a8 8a 79 36 31 df 46 78 23 fc 77 f8 32 e6 05 8d e9 a5 49 93 f8 00 d8 df e4 a7 f0 4f e0 1b e0 45 f0 a4 78 bb a2 b1 7d 37 c9 65 be 23 b4 bf 8d 7e b7 c2 b7 c0 37 c2 15 f4 af 38 be ef 3a 91 7c e7 56 18 72 a2 1e 70 be bc a6 39 84 72 c8 ff 16 d7 b9 f6 a9 f1 ce 90 23 ed d4 3c 29 fa 25 3e 2e 9d 3f 2a 6e 09 f6 73 48 f3 a5 80 37 c1 56 fd 6e d3 6f 38 f2 aa 9d 96 5b e5 cb 55 Data Ascii: >ozzx!\|V]A7~wF_`.f}g-q!#7_cP2!ooHc{'y61Fx#w2IOEx}7e#~78:\|Vrp9r#<)%>.?*nsH7Vno8[U
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 58 f4 75 2b 7c 26 d8 06 d6 83 0d d4 ff cc b8 bb 5b 01 cf c5 c6 e6 12 83 d6 f3 2d 38 2b 3e 86 ed b5 74 b3 90 7b 15 fe 6e 1e b9 6c 72 07 a3 d0 e7 25 e4 69 0f c8 50 5b cb 6e 64 74 01 b2 2a b3 98 d5 51 f3 37 91 78 09 f8 53 b8 c3 fd 18 5c 09 a6 82 a5 01 17 87 bb dd cb c1 cb e0 b2 70 67 7c 2f f8 9d b5 6f 17 6f 85 cb 42 bb 47 42 fd 63 b5 ee 81 75 bc 6b c3 d8 97 64 3d 5f 5a eb 3d 61 9d f7 26 d0 1c 94 d4 7a bf 01 5c 1d ee 91 17 d4 c1 d7 84 fa a4 ed b2 d0 57 d7 3c 07 5c 57 eb 1e fa 3a 59 a9 19 e1 7f 01 80 a4 0a 9a 00 00 00 78 da ed 97 69 74 15 45 16 c7 6f 57 dd 04 17 30 24 31 21 2c af ab 5e 87 97 28 60 54 16 1d 16 45 09 0c c4 11 8d 41 11 45 01 45 67 98 88 8a 0a 08 68 32 88 ec b2 c9 a2 08 01 03 88 8a 20 02 61 11 42 d4 20 e0 86 68 06 45 39 18 22 ef 55 40 65 dc d1 11 Data Ascii: Xu+\|&[-8+>t{nlr%iP[ndt*Q7xS\pg\|/ooBGBcukd=_Z=a&z\W<\W:YxitEoW0$1!,^(`TEAEEgh2 aB hE9"U@e
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 24 f8 09 0c 03 bf 80 53 20 bc 9f df c0 19 70 17 91 c0 de 26 5a 23 fe 33 f4 72 8b 53 0c cd b7 38 f7 40 0b 41 78 ed 91 50 5c 57 8c 40 3c 1e 5a 6c 71 26 43 c3 63 63 11 4f 81 8e 03 8f 20 9e 07 2d 01 c8 83 b3 10 8a 1c 08 fc d6 79 0a 3a 1d 84 eb 5f 0a 0d 8f 2d 42 fc 3c 74 31 78 06 f1 8b d0 32 b0 0c f1 4b d0 67 2d ce 3a 28 f2 24 56 22 7e 19 ba c1 12 e6 4c 6c 02 15 36 77 62 1b d8 8e 38 fc ae 12 ec 44 bc 05 fa 1a 78 1d 71 78 bc da e2 e0 77 62 2f d8 87 78 07 f4 43 50 83 38 3c fe 29 38 82 f8 4d e8 e7 20 cc f9 bb d6 62 89 0a 70 f6 43 53 2c ce 61 68 2a 48 b7 3e 49 e4 56 a2 26 9c 3a 68 36 68 87 f8 0b 68 07 8b f3 1d 34 0f 5c 8a f8 7b 68 67 4b e8 99 ec 0a ae 40 fc 33 b4 97 c5 39 0d ed 63 09 3d 94 77 58 42 2f e5 68 30 06 b1 0f 9d 60 11 e1 3d 96 5a 04 26 86 44 ee e5 4c c4 Data Ascii: $S p&Z#3rS8@AxP\W@<Zlq&CccO -y:_-B<t1x2Kg-:($V"~Ll6wb8Dxqxwb/xCP8<)8M bpCS,ah*H>IV&:h6hh4\{hgK@39c=wXB/h0`=Z&DL
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 30 1f 65 c3 09 d1 1d 75 38 92 1e 15 6d e9 45 da 41 8f d1 70 ba 8f bf 70 f2 f9 04 ea fc 5e 2a c1 e4 b9 93 26 d1 14 7a da 39 df c9 e0 c7 78 12 4f e7 19 3c 85 a7 d2 76 f6 a9 da e9 c6 4b 78 27 2f e4 45 49 e7 25 a5 f0 2c 1a cf d3 78 26 f6 e4 c9 34 8b 1e a7 d9 34 93 e6 d2 3c 7a 92 e6 d0 22 c2 24 a2 85 54 46 cb 68 29 fd e8 ec 70 de a2 07 9c 37 9d dd ce 1e 9a e0 bc ed ec 75 2a ff 05 81 17 9f b6 00 78 da 5d 90 3d 4e c4 30 10 85 c7 38 2c e4 06 48 16 92 2d 2b 14 2b af e8 a9 52 38 91 50 9a 40 28 3c 0d 3f d2 ae 44 f6 0e 48 69 68 5c 70 96 a1 33 5d 2e 86 60 92 8d b6 d8 c6 33 ef cd e8 f3 b3 13 80 6b 12 e4 6d f8 16 e2 0b 93 f8 fb 4c e0 af 7f 20 07 f9 f2 bc 49 20 9c d6 55 ef 49 bc b2 38 73 6c ac 0d 77 d2 e9 9a 64 51 3f 06 8b 3a ea 78 bf 8d ba d6 ef 6f 5b ca 8a b9 f2 60 17 Data Ascii: 0eu8mEApp^&z9xO<vKx'/EI%,x&44<z"$TFh)p7ux]=N08,H-++R8P@(<?DHih\p3].`3kmL I UI8slwdQ?:xo[`
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 5c 0b a7 1e 4e 3d 9c 7a 38 f5 70 ea e1 d4 c3 a9 87 53 0f a7 1e ce 75 76 60 96 f7 d7 c3 b8 81 27 b3 f5 99 4d f7 0f 70 fe 21 df 7f a8 4f 83 3e 0d fa 34 e8 d3 a0 4f 83 3e 0d fa 34 a8 6b d0 a7 41 9f 06 7c 1b d4 35 f2 ab 11 e7 46 fd 1a 71 6e c4 b9 11 e7 46 9c 1b 71 6e c4 f9 46 1c e7 d8 a7 39 bc 9c 83 f3 1c 5e ce e5 e5 5c 5e ce e5 e5 5c 5e ce 85 3d d7 cc e7 9a f9 4d f0 6f a2 f3 3f cc f0 47 7a dc ac d7 2d 5e 6f b5 77 b7 c1 98 c7 a7 1f c3 b9 1d ee ed f2 7e 82 f3 1d 3e d3 77 e2 37 df f3 9f aa 5f e0 6c a1 d9 2c 74 be c8 d9 5d a2 89 8e c5 34 df 4d db dd f8 dc e3 f5 1e 3b b2 04 87 9f c9 fd 39 4e ff 69 5f 96 9a fb 52 1a 7f 41 c7 2f e5 fc 92 67 f7 c2 bf 4f dc 2f f7 7e 9a 7e 65 87 1e f0 19 7a 00 e7 07 bd 3e 68 e7 7e 0d e3 bf f8 f5 10 4f 1e c2 e5 61 9a 1e b1 73 8f f8 cc Data Ascii: \N=z8pSuv`'Mp!O>4O>4kA\|5FqnFqnF9^\^\^=Mo?Gz-^ow~>w7_l,t]4M;9Ni_RA/gO/~~ez>h~Oas
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 55 5e 2a 0f 52 79 90 ca 83 54 1e a4 f2 20 0d 76 1a 0f d2 78 90 06 3b 4d 5e 9a bc 34 79 69 f2 d2 e4 a5 c9 4b 97 97 2e 2f 5d 5e 3a af d2 79 95 ce ab 74 d8 e9 bc 4a e7 8f 3b 4b 94 ce 9f 0c fe 64 d0 93 41 4f 86 9e 19 f4 64 d0 93 41 4f 06 9e 19 78 66 e0 39 1c cf e1 78 0e c7 73 38 9e c3 f1 1c 0e 7f 38 fc e1 f0 dd 7b a2 e1 f0 87 c3 cf 84 9f 09 3f 13 7e 26 fc 4c f8 99 f0 33 e1 67 c2 cf 84 9f 09 3f 13 7e 16 fc 2c f8 59 f0 b3 e0 67 c1 cf 82 9f 05 3f 0b 7e 16 fc 2c f8 be 42 a2 6c f8 d9 f0 b3 e1 67 c3 cf 86 9f 0d 3f 1b 7e 36 fc 6c f8 d9 f0 47 c0 1f 01 7f 04 fc 11 f0 47 c0 77 ef 8a 46 c0 1f 01 7f 04 7c 77 b0 68 04 fc 1c f8 39 f0 73 e0 e7 c0 cf 81 9f 03 3f 07 7e 0e fc 1c f8 39 f0 73 e1 e7 c2 cf 85 9f 0b 3f 17 7e 2e fc 5c f8 b9 f0 73 e1 e7 c2 cf 85 9f 07 3f 0f 7e 1e fc Data Ascii: U^*RyT vx;M^4yiK./]^:ytJ;KdAOdAOxf9xs88{?~&L3g?~,Yg?~,Blg?~6lGGwF\|wh9s?~9s?~.\s?~
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: da 6a cf dd 21 23 77 c8 68 1b 2d db e0 be a8 df 8b f2 5e c2 f3 25 73 de 4e b7 fb 61 f4 32 0d 2f e3 f0 8a 3e af 78 e6 9e 18 bd 2a ff 77 fe fe bd 19 fc de 1c ff 80 cf 0e cf 77 c8 7b 4d bf d7 f0 fa 23 cd af fb fb 75 7b d7 4c 63 33 cc 66 3d 9a e1 37 d3 d2 ac be f9 f4 99 d9 35 fb 1c 37 9b ef 4e be ec 34 9f 9d f4 ef e4 f9 4e ba 77 fa 0e df c9 87 9d bc dd 49 c3 4e 1e ee f4 d9 f9 93 bc 3f f1 f2 0d cf df f0 fc 0d cf df f4 fa e6 e9 57 e7 2d 30 5b 60 b6 c0 6c 81 d9 02 b3 05 66 0b cc 16 35 2d 72 5b e4 b6 c8 dd 25 77 97 dc 5d 72 77 c9 dd 25 77 97 dc 5d 72 77 e1 b7 0b bf 5d f8 bd 85 df 5b 70 df b2 03 6f a9 6b 55 d7 aa ae 55 5d ab ba 56 75 ad ea 5a d5 b5 aa 6b 55 f7 b6 79 bc 6d 6e 6f db e9 b7 f9 bb db bc 76 db a3 dd 7c db cd c7 3d 3c dc 63 5e 7b ec cd 1e 1e ee 31 df 3d Data Ascii: j!#wh-^%sNa2/>x*ww{M#u{Lc3f=757N4NwIN?W-0[`lf5-r[%w]rw%w]rw][pokUU]VuZkUymnov\|=<c^{1=
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: c2 28 19 f0 da a3 8c 16 fe 09 cc 96 de 47 19 1d bd 82 3f 33 3d c2 74 e1 6f 4d d2 b7 16 e9 ca 2a 5d d9 e8 55 be bb 68 e6 cd 11 3e 07 04 4d b5 d8 00 02 a7 a8 c6 80 59 b3 0c 4e 37 6f 01 60 aa a4 ac 54 94 dd c3 2f 0f 5f 7d c3 0d 60 df f5 ec 87 ce 5c dc 77 d3 89 13 df 3c 78 d5 55 cd 0f bc f0 62 b3 00 1e 7f 11 de 8a 61 99 3d eb af 31 df 65 ef 60 54 8c 99 f1 8a bd 50 a3 46 ab 51 a3 1f 66 f4 a7 61 e1 e9 7c 77 55 11 2b 6a 14 9a 50 b4 5c aa 14 0b 0e bb 4d 7d 85 8e 5d 64 75 5e 97 20 b8 9c 82 f0 2d 70 cd c1 83 cd 77 3d 25 78 7c 82 e0 f3 08 eb eb cc 3c b8 0f ec 63 bf 60 8a 32 9d 0c 63 d2 c0 f7 fb f1 33 05 d8 89 7f 63 df c7 78 98 00 73 bb f8 cc 0e f4 4c 48 4f 89 72 5d a8 a0 4b 56 d0 22 25 2d e0 50 01 87 0a 4e 21 da c2 ff 95 a9 53 90 be 00 f6 46 99 7a 98 d1 9a 1e 66 74 Data Ascii: (G?3=toM*]Uh>MYN7o`T/_}`\w<xUba=1e`TPFQfa\|wU+jP\M}]du^ -pw=%x\|<c`2c3cxsLHOr]KV"%-PN!SFzft

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49754	104.22.17.194	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:34 UTC	669	OUT	GET /fonts/SourceSansPro-Bold.woff HTTP/1.1 Host: nuance-pdf-professional2.software.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://nuance-pdf-professional2.software.informer.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://nuance-pdf-professional2.software.informer.com/7.2/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:35 UTC	359	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:34 GMT Content-Type: font/woff Content-Length: 126204 Connection: close Last-Modified: Fri, 07 Jun 2024 08:54:12 GMT ETag: "6662cab4-1ecfc" Expires: Sat, 18 Jan 2025 01:10:28 GMT Cache-Control: max-age=604800 CF-Cache-Status: HIT Accept-Ranges: bytes Server: cloudflare CF-RAY: 902940fe0b998c84-EWR
2025-01-15 22:20:35 UTC	1010	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 01 ec fc 00 13 00 00 00 04 4d e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 42 41 53 45 00 01 ec 94 00 00 00 4a 00 00 00 88 64 cc 5c f4 46 46 54 4d 00 01 ec e0 00 00 00 1c 00 00 00 1c 7c ed 9c ad 47 44 45 46 00 01 65 70 00 00 01 62 00 00 01 fc 52 a0 56 4c 47 50 4f 53 00 01 87 fc 00 00 64 98 00 01 1c 3a e5 19 f2 29 47 53 55 42 00 01 66 d4 00 00 21 27 00 00 3c 52 ac 54 19 53 4f 53 2f 32 00 00 02 24 00 00 00 59 00 00 00 60 5f 0f d9 cf 63 6d 61 70 00 00 0f 40 00 00 0a 87 00 00 11 6a 15 11 b3 e6 63 76 74 20 00 00 1b 20 00 00 00 2a 00 00 00 2a 01 8c 0e 39 66 70 67 6d 00 00 19 c8 00 00 01 02 00 00 01 73 06 59 9c 37 67 61 73 70 00 01 65 68 00 00 00 08 00 00 00 08 ff ff 00 03 67 6c 79 66 00 00 2e 10 00 01 0f Data Ascii: wOFFMBASEJd\FFTM\|GDEFepbRVLGPOSd:)GSUBf!'<RTSOS/2$Y`_cmap@jcvt **9fpgmsY7gaspehglyf.
2025-01-15 22:20:35 UTC	1369	IN	Data Raw: 1e 90 72 b3 40 7a 99 77 91 93 ca 4c 65 bf 55 fa 52 77 ab 59 c8 5a b5 6c 91 f4 50 50 f6 b6 3d 97 f5 2c 61 3d c8 9b ef c7 28 9f 6a 7e 28 b9 f4 1f 19 95 48 45 74 0e 18 86 6e b7 e9 9e 91 7b 13 88 aa dd 7f bd 2e 8a 82 2e 02 4c b9 fb 08 5d 9c 0d ef 03 bb ec 0a ec 24 d6 43 63 e8 7e 9e 94 81 5e 17 0d a1 ba a8 a5 cf 22 d6 a9 72 6f 02 d1 29 52 e1 75 91 7e 22 4c 57 f7 32 ba 40 1f ee 75 f0 86 1d 42 fb 58 0f 8d a1 36 a6 ac ba 68 08 74 e1 75 e6 99 fd 76 0e 72 68 c8 ec dd cf df 1c ab 8d 5e 8e ec 75 ff 6a 2f 45 de 2e 8b 5a 65 b5 67 b5 a9 e6 18 5b b7 63 dd 3b 76 33 36 3c d6 7d 89 8c b7 b3 cf 57 60 07 1f 82 0f c2 bb d0 c1 20 e4 50 02 ab 6d 26 ec 1c fa 0d c2 46 39 23 de 4e 2f f7 fa 4a 78 70 5e d4 66 4f e0 09 81 5f 82 b3 d0 69 85 db eb f5 a8 b2 6c c4 d1 4c 99 62 1f 0c 65 aa Data Ascii: r@zwLeURwYZlPP=,a=(j~(HEtn{..L]$Cc~^"ro)Ru~"LW2@uBX6htuvrh^uj/E.Zeg[c;v36<}W` Pm&F9#N/Jxp^fO_ilLbe
2025-01-15 22:20:35 UTC	1369	IN	Data Raw: 43 f8 03 f8 1d 78 07 bc cc ed 56 20 6f 95 39 79 b4 db 0c 36 05 7e 15 1c f0 d8 ee ea 41 9d bd 96 f9 7f 00 d7 c2 57 c0 59 ac 57 a1 b1 a2 09 44 63 99 67 20 f3 bc 0d ff 07 de 0a 6f a1 9f c6 95 96 f0 2f da 2e 07 3f 06 f9 8c af 31 a8 05 44 b3 18 77 22 6d 8f c2 47 e0 4f e0 8f e1 85 ec 0f c4 72 4f c9 31 c8 85 bd bd ec 63 66 bc e6 78 fe 78 ec 56 f4 18 6d e0 6e bd c6 d5 a5 cd 75 f5 69 17 c0 e7 c2 d3 99 77 0b f3 82 d6 f4 92 76 25 ed af 74 75 ed 3a b9 fa 76 1d e1 34 38 62 9c c7 dc 6e 45 6b fb 4e 5b 4c 7f ec a0 5d 01 fd fa c0 dd e1 1c fa af a0 ff 8a e3 fb 6e 12 f1 3d f7 6a f7 a9 e6 3d d1 a5 fc 2e 95 67 bc 3c e0 90 ff 5d d9 e4 da 57 ba 3d 21 47 da a3 79 52 b4 d9 c7 f2 99 01 37 f9 98 5f ee ef 69 5b 02 f4 ee b6 d3 df db f4 0e b7 da ed d1 dc 8a b6 33 c0 3c ed 73 92 0d 90 Data Ascii: CxV o9y6~AWYWDcg o/.?1Dw"mGOrO1cfxxVmnuiwv%tu:v48bnEkN[L]n=j=.g<]W=!GyR7_i[3<s
2025-01-15 22:20:35 UTC	1369	IN	Data Raw: be 5e 72 98 23 db 6c 64 9f 37 21 f3 fe d2 c1 dc 2a ed cd 7c fc f7 55 d2 3d f5 06 33 c7 bf bb e4 9b 9f 4a 6f 72 d8 41 7e 2d 9f 23 a3 79 c8 6a 38 c8 26 e7 25 7f 13 71 33 c0 ed e1 5d f7 1f e0 3c 30 06 d4 06 cc 04 f3 c0 39 60 6d 83 37 e3 e5 e0 46 df be c4 bd 0f 67 84 76 bf 09 f5 0f 87 77 e0 c7 c3 78 b3 c2 58 13 9b f8 1d 7f c7 ac f3 2e 20 27 ff 10 8e 8e 7f a7 78 76 98 ab 31 cf 07 97 82 eb c0 65 e1 9d 59 fb 4c 01 55 a1 7e 7c c0 7c b9 53 33 c2 ff 01 7e 21 d1 08 00 00 00 78 da ed 97 69 74 15 45 16 c7 6f 57 dd 04 17 30 24 31 21 2c af ab 5e 87 97 28 60 54 16 1d 16 45 09 0c c4 11 8d 41 11 45 01 45 67 98 88 8a 0a 08 68 32 88 ec b2 c9 a2 08 01 03 88 8a 20 02 61 11 42 d4 20 e0 86 68 06 45 39 18 22 ef 55 40 65 dc d1 11 91 ee f9 77 2a c7 73 66 be cc c7 f9 32 ef 9c 1f ff Data Ascii: ^r#ld7!\|U=3JorA~-#yj8&%q3]<09`m7FgvwxX. 'xv1eYLU~\|\|S3~!xitEoW0$1!,^(`TEAEEgh2 aB hE9"U@ewsf2
2025-01-15 22:20:35 UTC	1369	IN	Data Raw: c0 de 26 5a 23 fe 33 f4 72 8b 53 0c cd b7 38 f7 40 0b 41 78 ed 91 50 5c 57 8c 40 3c 1e 5a 6c 71 26 43 c3 63 63 11 4f 81 8e 03 8f 20 9e 07 2d 01 c8 83 b3 10 8a 1c 08 fc d6 79 0a 3a 1d 84 eb 5f 0a 0d 8f 2d 42 fc 3c 74 31 78 06 f1 8b d0 32 b0 0c f1 4b d0 67 2d ce 3a 28 f2 24 56 22 7e 19 ba c1 12 e6 4c 6c 02 15 36 77 62 1b d8 8e 38 fc ae 12 ec 44 bc 05 fa 1a 78 1d 71 78 bc da e2 e0 77 62 2f d8 87 78 07 f4 43 50 83 38 3c fe 29 38 82 f8 4d e8 e7 20 cc f9 bb d6 62 89 0a 70 f6 43 53 2c ce 61 68 2a 48 b7 3e 49 e4 56 a2 26 9c 3a 68 36 68 87 f8 0b 68 07 8b f3 1d 34 0f 5c 8a f8 7b 68 67 4b e8 99 ec 0a ae 40 fc 33 b4 97 c5 39 0d ed 63 09 3d 94 77 58 42 2f e5 68 30 06 b1 0f 9d 60 11 e1 3d 96 5a 04 26 86 44 ee e5 4c c4 38 20 67 59 c4 d9 d0 39 20 cc 29 9e 77 e4 2a 80 35 Data Ascii: &Z#3rS8@AxP\W@<Zlq&CccO -y:_-B<t1x2Kg-:($V"~Ll6wb8Dxqxwb/xCP8<)8M bpCS,ahH>IV&:h6hh4\{hgK@39c=wXB/h0`=Z&DL8 gY9 )w5
2025-01-15 22:20:35 UTC	1369	IN	Data Raw: 8f d1 70 ba 8f bf 70 f2 f9 04 ea fc 5e 2a c1 e4 b9 93 26 d1 14 7a da 39 df c9 e0 c7 78 12 4f e7 19 3c 85 a7 d2 76 f6 a9 da e9 c6 4b 78 27 2f e4 45 49 e7 25 a5 f0 2c 1a cf d3 78 26 f6 e4 c9 34 8b 1e a7 d9 34 93 e6 d2 3c 7a 92 e6 d0 22 c2 24 a2 85 54 46 cb 68 29 fd e8 ec 70 de a2 07 9c 37 9d dd ce 1e 9a e0 bc ed ec 75 2a ff 05 81 17 9f b6 00 78 da 5d 90 3d 4e c4 30 10 85 c7 38 2c e4 06 48 16 92 2d 2b 14 2b af e8 a9 52 38 91 50 9a 40 28 3c 0d 3f d2 ae 44 f6 0e 48 69 68 5c 70 96 a1 33 5d 2e 86 60 92 8d b6 d8 c6 33 ef cd e8 f3 b3 13 80 6b 12 e4 6d f8 16 e2 0b 93 f8 fb 4c e0 af 7f 20 07 f9 f2 bc 49 20 9c d6 55 ef 49 bc b2 38 73 6c ac 0d 77 d2 e9 9a 64 51 3f 06 8b 3a ea 78 bf 8d ba d6 ef 6f 5b ca 8a b9 f2 60 17 f1 56 13 74 a1 e7 f3 29 18 2a 51 1d db 1d e2 1d 73 Data Ascii: pp^&z9xO<vKx'/EI%,x&44<z"$TFh)p7ux]=N08,H-++R8P@(<?DHih\p3].`3kmL I UI8slwdQ?:xo[`Vt)*Qs
2025-01-15 22:20:35 UTC	1369	IN	Data Raw: 69 22 4e 13 71 9a 88 d3 b5 f4 4c a2 ff 67 74 5c 67 ff af 73 2f 4c c6 61 0a 6f a6 da ed a9 3c 9f ca f3 a9 3c 9c ca c3 a9 3c 9c ca c3 06 1e 36 f0 b0 41 5e 03 0f 1b f4 68 30 f7 06 73 6f 30 f7 06 73 6f d0 6b 1a cf a6 e9 3b cd 7d 35 cd 2e 4e b3 ab 3f c7 65 3a 5d d3 e9 9a 4e d7 74 ba a6 d3 35 9d ae e9 f8 4f c7 7f 3a fe d3 f1 bf 1e ff eb 79 73 03 ee 37 f2 79 86 ba 19 f0 67 ba 3e 93 86 5f 9a d9 4d 3e 7f 85 df cd fa dc 42 c7 2c 39 b3 60 df ea da 6c fc e7 f8 7d 1b cc db 71 bd 5d cf b9 bc 9d 27 ee 70 cf dc 89 d3 7c d7 e7 fb fd 6b 9f bf a1 eb 37 76 ed bf cc e5 2e fa ee c6 fd 1e 3d ef a1 fb b7 b4 dd 8b c3 bd ee fb df e1 f8 7b 3a ef 93 77 1f ad f7 c3 79 c0 3c 1f c0 e5 41 5a 1f e4 d5 1f cc 63 01 4e 0f b9 fe 10 af 1f c6 f5 bf e9 5f c8 d7 85 fc 7a 44 af 47 ec c3 a3 fc 7b Data Ascii: i"NqLgt\gs/Lao<<<6A^h0so0sok;}5.N?e:]Nt5O:ys7yg>_M>B,9`l}q]'p\|k7v.={:wy<AZcN_zDG{
2025-01-15 22:20:35 UTC	1369	IN	Data Raw: 1a 0f d2 78 90 c6 83 34 d8 69 3c 48 e3 41 1a ec 34 79 69 f2 d2 e4 a5 cb 4b 97 97 2e 2f 5d 5e ba bc 74 79 e9 bc 4a e7 55 3a af d2 61 a7 f3 2a 83 3f 19 fc c9 e0 4f 06 7f 32 e8 c9 a0 27 43 cf 0c 7a 32 e8 c9 a0 27 03 cf 9e 78 7a d7 89 7a e2 d9 13 cf 9e 78 f6 c4 b3 27 9e 3d e1 f7 84 df 13 7e 26 fc 4c f8 99 f0 33 e1 67 c2 cf 84 9f 09 3f 13 7e 26 fc 4c f8 99 f0 b3 e0 67 c1 cf 82 9f 05 3f 0b 7e 16 fc 2c f8 59 f0 b3 e0 67 c1 cf 82 9f 0d 3f 1b 7e 36 fc 6c f8 d9 f0 b3 e1 67 c3 cf 86 9f 0d 3f 1b 7e 0e fc 1c f8 39 f0 73 e0 e7 c0 cf 81 9f 03 3f 07 7e 0e fc 1c f8 39 f0 73 e1 e7 c2 cf 85 9f 0b 3f 17 7e 2e fc 5c f8 b9 f0 73 e1 e7 c2 cf 85 df 0b 7e 2f f8 bd e0 f7 82 ef 7d 2e ea 05 bf 17 fc 5e f0 7b c1 ef 05 3f 0f 7e 1e fc 3c f8 79 f0 f3 e0 e7 c1 cf 83 9f 07 3f 0f 7e 1e fc Data Ascii: x4i<HA4yiK./]^tyJU:a*?O2'Cz2'xzzx'=~&L3g?~&Lg?~,Yg?~6lg?~9s?~9s?~.\s~/}.^{?~<y?~
2025-01-15 22:20:35 UTC	1369	IN	Data Raw: 8d eb 6b e4 be e2 6c ad ba b5 6a d6 f2 e4 55 bb f0 aa 6b 7f 56 bf 8e c6 75 f2 5f e3 ef 6b 70 fe 82 cf eb b4 bf ce e3 37 cc eb 0d 9e bc 29 ff 2d 9c de f2 7d 3d 5d eb f5 5a 8f df 7a dc d6 e3 b4 9e 8e f5 74 af a7 61 bd fe eb f1 5e cf cf 0d 76 61 83 ba 0d 78 6d e0 f1 06 fb b2 41 ff 0d e6 b3 81 d6 0d ee f9 0d 30 37 ca db e8 f3 6d f5 6f ab 7f 5b fd 5f 7d fe f5 bb 4f 7d 36 39 df a4 cf 26 7d 36 e9 b3 49 9f 4d e6 b7 09 ef 4d 6a 36 c9 dd 24 77 93 dc 26 b9 4d 72 9b e4 36 c9 6d 92 db 24 b7 49 6e 13 4d 4d f6 b1 c9 cc 9b 3c 87 de e1 f5 3b 74 bc 63 0f 36 db a5 cd f4 6e e6 e7 66 7a 37 9b d3 66 bb b5 99 4f 9b dd 2b 9b cd f9 5d 9c df c5 f9 5d 5c bd ce 45 5b f4 db a2 df 16 fd b6 e8 b7 55 bf ad 9e e5 5b ed c7 56 5e 6f 75 bf 6f a5 77 2b bd db f4 de a6 f7 36 bd b7 e9 bd 4d ef Data Ascii: kljUkVu_kp7)-}=]Zzta^vaxmA07mo[_}O}69&}6IMMj6$w&Mr6m$InMM<;tc6nfz7fO+]]\E[U[V^ouow+6M
2025-01-15 22:20:35 UTC	1369	IN	Data Raw: cc f4 38 a3 c7 df 9a c4 6f 2d e2 95 55 bc b2 d1 ab 7c 4b d1 1c 32 47 8b 39 c0 ab aa c5 1e c0 73 b2 6a 1c 98 55 9b 58 4b ed 2b 5f 8e 27 e5 c9 a4 3c 15 bc 3b 70 f5 9e 3d 60 62 37 7b f2 ec 91 5d 13 fb f7 ff 69 4f 47 47 ed be c7 4f d5 ee 00 47 4f 31 2c 33 bd fc 0e 90 b1 f7 31 0a c6 cc 78 85 19 28 d1 80 95 68 c0 8f 31 ba 25 d8 b8 94 6f a9 ca e2 45 95 4c 15 8e 95 4b 95 62 c1 61 b7 29 af b6 2b 4e 2a ec f9 58 b1 18 83 af 37 41 e1 a6 9b 6a 3f fe 63 39 9e 28 97 13 f1 f2 f2 32 33 0e f6 83 67 d9 07 4d 31 a6 89 61 4c 2a f8 f7 d7 70 ec 2c 13 86 13 f8 03 fb 31 c6 c3 04 98 cf 0b cf 54 a1 67 aa 18 8d 08 35 2d 6a d0 4a 1a 8c a8 c1 28 69 a8 c3 95 36 70 a8 81 43 0d a7 11 a0 e1 7f f2 34 bc 33 04 ac 02 02 f6 31 c6 bc f8 18 63 81 2f b9 e9 31 c6 ba 88 40 fe 18 63 a7 ef 2e da ee Data Ascii: 8o-U\|K2G9sjUXK+_'<;p=`b7{]iOGGOGO1,31x(h1%oELKba)+NX7Aj?c9(23gM1aLp,1Tg5-jJ(i6pC431c/1@c.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49749	104.22.17.194	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:34 UTC	673	OUT	GET /fonts/SourceSansPro-SemiBold.woff HTTP/1.1 Host: nuance-pdf-professional2.software.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://nuance-pdf-professional2.software.informer.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://nuance-pdf-professional2.software.informer.com/7.2/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:34 UTC	372	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:34 GMT Content-Type: font/woff Content-Length: 126516 Connection: close Last-Modified: Fri, 07 Jun 2024 08:54:12 GMT ETag: "6662cab4-1ee34" Expires: Sun, 19 Jan 2025 20:17:55 GMT Cache-Control: max-age=604800 CF-Cache-Status: HIT Age: 266559 Accept-Ranges: bytes Server: cloudflare CF-RAY: 902940fe3cfe4758-DFW
2025-01-15 22:20:34 UTC	997	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 01 ee 34 00 13 00 00 00 04 51 a4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 42 41 53 45 00 01 ed cc 00 00 00 4a 00 00 00 88 64 cc 5c f4 46 46 54 4d 00 01 ee 18 00 00 00 1c 00 00 00 1c 7c ed 9c b6 47 44 45 46 00 01 66 e4 00 00 01 62 00 00 01 fc 52 a0 56 4c 47 50 4f 53 00 01 89 70 00 00 64 5a 00 01 1d 86 f0 91 e7 7f 47 53 55 42 00 01 68 48 00 00 21 27 00 00 3c 52 ac 54 19 53 4f 53 2f 32 00 00 02 24 00 00 00 58 00 00 00 60 5e a8 d8 d9 63 6d 61 70 00 00 0f 40 00 00 0a 87 00 00 11 6a 15 11 b3 e6 63 76 74 20 00 00 1b 20 00 00 00 2a 00 00 00 2a 01 58 0e 03 66 70 67 6d 00 00 19 c8 00 00 01 02 00 00 01 73 06 59 9c 37 67 61 73 70 00 01 66 dc 00 00 00 08 00 00 00 08 ff ff 00 03 67 6c 79 66 00 00 2e 18 00 01 11 Data Ascii: wOFF4QBASEJd\FFTM\|GDEFfbRVLGPOSpdZGSUBhH!'<RTSOS/2$X`^cmap@jcvt **XfpgmsY7gaspfglyf.
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 5e e5 a7 75 4c 6e c5 72 95 ff 10 79 cf 95 b3 dc b6 94 ec 4c f6 9b a4 80 b2 15 6e 8e c9 be b3 5b 42 f9 12 e9 c4 b7 57 7d 05 f3 39 9f b5 22 6f de d7 f2 7d aa 5b 24 f9 b4 1f 14 e5 4b 79 34 14 74 93 42 64 df cb e4 5e 0f a2 8a f8 98 e9 22 2f a5 8b 04 2e 2f ae 46 17 13 e0 8f c1 6e 7f 2b 76 92 e8 21 13 ce b8 97 e9 a2 0e 4c 17 33 69 33 87 79 aa dc eb 41 d4 4a 06 aa 2e 4c 0f 75 91 1d bf 8e 2e c6 c1 af 81 b7 7d 09 36 99 e8 21 13 6a 63 ca e8 a2 2e 4c 2f e8 cc 58 d7 ab 63 66 32 6b 37 5b 68 88 d5 46 a7 4a 0f 5b 3f ba 37 d9 30 bf 46 59 ed 59 6d aa 21 c6 d6 99 c3 bf fc 66 f4 db 5b 3c 32 de c1 3a 5f 80 6b e1 83 f0 67 f0 3b e8 a0 07 72 28 81 c7 c2 95 be 8c 76 cd b1 51 f6 88 d9 a9 ee 25 6c d5 ec b5 46 ce c5 66 bf a9 fb 06 1e 6d dc cd be 4f 73 ab e0 23 f1 a7 2e 3f 3e 60 7a Data Ascii: ^uLnryLn[BW}9"o}[$Ky4tBd^"/./Fn+v!L3i3yAJ.Lu.}6!jc.L/Xcf2k7[hFJ[?70FYYm!f[<2:_kg;r(vQ%lFfmOs#.?>`z
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: ff 3f 09 a2 2e d4 eb 42 fd 75 f0 23 f0 c3 f0 1f e0 cb e2 3d 0a e4 ad 32 2f c5 57 bf 04 fe 11 f8 35 b0 cf b0 26 ae 01 d5 be 8c f1 19 17 7d d7 f8 1e 9c 81 f6 d0 16 58 ac a8 07 51 1e e3 e4 30 0e ed a3 b5 f0 fd f0 6f 68 af 71 e5 64 58 47 dd 4a 50 41 dd 03 f4 af 31 e8 24 88 98 4f 54 48 fd a7 e1 27 e1 8d f0 06 f8 5c d6 07 12 b9 a7 e5 18 e4 c2 da 5e 67 dd e3 d2 73 4e c6 4f fa 6e 44 8f d1 cd f1 e1 e8 ea b8 3a ab 5d 5c 93 d5 06 3e 03 6e ce b8 f7 32 2e 68 4c 2f 59 e5 d4 2f a7 dd 56 f8 19 f8 29 78 33 7c 7d bc 47 d1 d8 ba b3 2a a8 8f 3e b2 5e 86 77 c2 db e1 e7 e0 f9 b4 9f 7f 7c dd f5 22 39 e7 4e c5 16 c9 7b a2 51 3c 17 cb 16 cb 21 e0 90 ff 2d ad 77 ee 4b e3 bd 21 47 da ab 79 52 f4 27 7c 5c b1 5c 1a 70 13 72 e5 6c 66 e7 b4 57 03 5e b0 3c 40 cf 6d 7a 86 a3 bd e5 56 c5 Data Ascii: ?.Bu#=2/W5&}XQ0ohqdXGJPA1$OTH'\^gsNOnD:]\>n2.hL/Y/V)x3\|}G*>^w\|"9N{Q<!-wK!GyR'\|\\prlfW^<@mzV
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: fb c1 06 f0 0c e5 b7 19 77 74 bf 80 af 94 5c 77 95 b4 24 f7 1b e8 aa d0 45 9e e4 f0 de d4 4d 8d 8f b8 05 d2 21 7d 07 a3 d0 e7 1f b0 ee 75 d2 c7 e6 b2 9f f9 5d 88 ac 06 58 4e d9 5a f3 37 91 78 3e f8 15 78 0a bc 04 2e 06 a3 c1 a2 00 bd d7 9d 07 66 87 bb df 59 e1 ce f8 2e 70 ab d5 2f 8c df 83 3b 86 7a 6b 42 f9 43 e1 1e f8 d1 d0 df 65 60 2e 98 5e cf 73 f2 9e b0 8e 7b 35 39 f9 21 38 f7 f8 bb f1 c2 70 8f 3c af 1e d6 b2 2a 70 03 b8 2a dc 33 2f 0a f7 cf 13 c1 15 60 4a c0 15 72 ab 66 84 ff 05 62 76 f8 55 00 00 78 da ed 97 69 74 15 45 16 c7 6f 57 dd 04 17 30 24 31 21 2c af ab 5e 87 97 28 60 54 16 1d 16 45 09 0c c4 11 8d 41 11 45 01 45 67 98 88 8a 0a 08 68 32 88 ec b2 c9 a2 08 01 03 88 8a 20 02 61 11 42 d4 20 e0 86 68 06 45 39 18 22 ef 55 40 65 dc d1 11 91 ee f9 77 Data Ascii: wt\w$EM!}u]XNZ7x>x.fY.p/;zkBCe`.^s{59!8p<p3/`JrfbvUxitEoW0$1!,^(`TEAEEgh2 aB hE9"U@ew
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 03 bf 80 53 20 bc 9f df c0 19 70 17 91 c0 de 26 5a 23 fe 33 f4 72 8b 53 0c cd b7 38 f7 40 0b 41 78 ed 91 50 5c 57 8c 40 3c 1e 5a 6c 71 26 43 c3 63 63 11 4f 81 8e 03 8f 20 9e 07 2d 01 c8 83 b3 10 8a 1c 08 fc d6 79 0a 3a 1d 84 eb 5f 0a 0d 8f 2d 42 fc 3c 74 31 78 06 f1 8b d0 32 b0 0c f1 4b d0 67 2d ce 3a 28 f2 24 56 22 7e 19 ba c1 12 e6 4c 6c 02 15 36 77 62 1b d8 8e 38 fc ae 12 ec 44 bc 05 fa 1a 78 1d 71 78 bc da e2 e0 77 62 2f d8 87 78 07 f4 43 50 83 38 3c fe 29 38 82 f8 4d e8 e7 20 cc f9 bb d6 62 89 0a 70 f6 43 53 2c ce 61 68 2a 48 b7 3e 49 e4 56 a2 26 9c 3a 68 36 68 87 f8 0b 68 07 8b f3 1d 34 0f 5c 8a f8 7b 68 67 4b e8 99 ec 0a ae 40 fc 33 b4 97 c5 39 0d ed 63 09 3d 94 77 58 42 2f e5 68 30 06 b1 0f 9d 60 11 e1 3d 96 5a 04 26 86 44 ee e5 4c c4 38 20 67 59 Data Ascii: S p&Z#3rS8@AxP\W@<Zlq&CccO -y:_-B<t1x2Kg-:($V"~Ll6wb8Dxqxwb/xCP8<)8M bpCS,ah*H>IV&:h6hh4\{hgK@39c=wXB/h0`=Z&DL8 gY
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 09 d1 1d 75 38 92 1e 15 6d e9 45 da 41 8f d1 70 ba 8f bf 70 f2 f9 04 ea fc 5e 2a c1 e4 b9 93 26 d1 14 7a da 39 df c9 e0 c7 78 12 4f e7 19 3c 85 a7 d2 76 f6 a9 da e9 c6 4b 78 27 2f e4 45 49 e7 25 a5 f0 2c 1a cf d3 78 26 f6 e4 c9 34 8b 1e a7 d9 34 93 e6 d2 3c 7a 92 e6 d0 22 c2 24 a2 85 54 46 cb 68 29 fd e8 ec 70 de a2 07 9c 37 9d dd ce 1e 9a e0 bc ed ec 75 2a ff 05 81 17 9f b6 00 78 da 5d 90 3d 4e c4 30 10 85 c7 38 2c e4 06 48 16 92 2d 2b 14 2b af e8 a9 52 38 91 50 9a 40 28 3c 0d 3f d2 ae 44 f6 0e 48 69 68 5c 70 96 a1 33 5d 2e 86 60 92 8d b6 d8 c6 33 ef cd e8 f3 b3 13 80 6b 12 e4 6d f8 16 e2 0b 93 f8 fb 4c e0 af 7f 20 07 f9 f2 bc 49 20 9c d6 55 ef 49 bc b2 38 73 6c ac 0d 77 d2 e9 9a 64 51 3f 06 8b 3a ea 78 bf 8d ba d6 ef 6f 5b ca 8a b9 f2 60 17 f1 56 13 74 Data Ascii: u8mEApp^&z9xO<vKx'/EI%,x&44<z"$TFh)p7ux]=N08,H-++R8P@(<?DHih\p3].`3kmL I UI8slwdQ?:xo[`Vt
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 4e 7e 9d fc 3a f9 75 f2 eb e4 8f f3 2e df 64 ff 6e c6 e5 16 f3 b8 45 cf e3 bd 53 b7 8a 9d e0 d9 04 71 13 c4 4d 50 7b 02 9c 7a 38 f5 f4 ab a7 5f 3d fd ea e9 57 4f bf 7a ef 63 bd bc 7a f5 ea bd 7b 1e 87 89 de 9f 89 de 9f 89 de 9f 89 f6 70 a2 5d 9f 08 eb 36 d7 49 72 27 09 9a 24 77 92 dc 49 72 27 c9 9d 24 f7 76 b9 b7 cb bd 5d ee ed 72 6f c7 e1 0e b3 f9 19 ee 77 d2 64 b2 9d b9 4b 3f 77 89 bd db 9c 7e ee 7a 8f 9d ba d7 3b f4 5f b4 bc 0f f7 29 b8 4f d1 cb fd 66 39 d5 fd 34 73 78 80 be d3 e9 3d 83 26 0f d2 ff 41 5a 3d e4 f9 c3 ea 3e 62 76 8f b8 3e 6a 76 8f e2 f3 0b bf 1f 53 eb 97 76 f3 71 98 4f 88 7f 82 06 4f e2 fe 2b b5 7f 4d 87 df 98 e3 6f f4 33 93 6f 26 9c df f2 fd 16 97 df c9 fd 3d fe b3 e0 cc d2 d7 53 ee 9f 16 fb b4 fc 67 dc 3f 4b 8b 67 c5 ff 01 9f e7 e8 f8 Data Ascii: N~:u.dnESqMP{z8_=WOzcz{p]6Ir'$wIr'$v]rowdK?w~z;_)Of94sx=&AZ=>bv>jvSvqOO+Mo3o&=Sg?Kg
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 71 29 76 31 c5 4e a4 d8 83 14 7b 92 62 4f 52 60 a7 6c 62 f6 b0 27 ec 9e e2 7a 8a eb 29 ae a7 b8 9e e2 7a 8a eb 29 ae a7 b8 9e e2 bc 52 51 aa bd 49 b5 cb a9 b0 53 ed 75 2a 7d 52 e9 93 4a 9f 54 fa a4 ea 27 55 3f bd d4 ec a5 9f 5e fa e9 a5 9f 5e 78 f6 c2 d3 39 27 ea 85 67 2f 3c 7b e1 d9 0b cf de 78 f6 86 df 1b 7e 6f f8 bd e1 f7 86 df 1b 7e 6f f8 bd e1 f7 86 9f 06 3f 0d 7e 1a fc 34 f8 69 f0 d3 e0 a7 c1 4f 83 9f 06 3f 0d 7e 1a fc 74 f8 e9 f0 d3 e1 a7 c3 4f 87 9f 0e 3f 1d 7e 3a fc 74 f8 e9 f0 d3 e1 f7 81 df 07 7e 1f f8 7d e0 f7 81 df 07 7e 1f f8 7d e0 f7 81 df 07 7e 06 fc 0c f8 19 f0 33 e0 67 c0 cf 80 9f 01 3f 03 7e 06 fc 0c f8 19 f0 33 e1 67 c2 cf 84 9f 09 3f 13 7e 26 fc 4c f8 99 f0 33 e1 67 c2 cf 84 9f 05 3f 0b 7e 16 fc 2c f8 59 f0 b3 e0 67 c1 cf 82 9f 05 3f Data Ascii: q)v1N{bOR`lb'z)z)RQISu*}RJT'U?^^x9'g/<{x~o~o?~4iO?~tO?~:t~}~}~3g?~3g?~&L3g?~,Yg?
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 39 1e af c3 7c 43 bd 37 68 be c2 ef 95 f8 ac c4 f9 4d bb fe a6 5e 57 a9 b1 ca bd f3 65 b4 da 6e bc 65 76 6f e1 f7 96 67 6f 7b 6f de b1 87 ef c8 5f c3 ff ae 79 bd 4b b7 f7 f8 df 53 ef 7d 58 ef e3 f8 81 bc 3f 9b 89 73 64 b4 56 fc 5a fa ae 35 83 b5 38 ae 55 63 2d 1e 6b f9 1a cc b7 41 1f 0d de 8b 06 fd 35 98 4b 83 1a 0d fa 69 50 b3 81 0e 0d 38 35 e8 79 9d 77 7e 9d 9e d6 e1 b7 4e 9c f3 68 f4 17 98 ce a4 d1 87 66 b3 9e 7f 3d ff 7a fe f5 30 d7 c3 5c 0f 73 3d cc f5 30 d7 c3 5c 0f 73 bd 5a 8d 62 1b c5 36 8a 6d 14 db 28 b6 51 6c a3 d8 46 b1 8d 62 1b c5 6e c0 6f 03 7e 1b f0 db 80 df 06 b8 1b e8 bd 91 9e 1b e9 b6 51 8f 1b ed c6 46 bb b0 d1 ae 6d a4 c5 46 da 7c 64 b6 1f d9 e7 4d ae 9b 4e 5d e9 b4 c9 4c 36 e1 bb 19 df cd f8 6e 56 63 b3 1a 9b d5 d8 ac c6 66 35 36 ab b1 Data Ascii: 9\|C7hM^Wenevogo{o_yKS}X?sdVZ58Uc-kA5KiP85yw~Nhf=z0\s=0\sZb6m(QlFbno~QFmF\|dMN]L6nVcf56
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 60 18 45 ef f2 19 46 ce 80 d7 ce 32 2a f8 11 18 4d 9d 67 19 0d bd 82 3f 33 9c 61 da f0 b7 06 f1 5b 93 78 65 16 af 2c f4 2a 97 2f 1a 03 c6 70 31 0b 78 65 a5 d8 07 78 4e 56 89 02 a3 72 11 fc b1 76 cf 33 1d 19 79 36 2b cf e4 be 96 bf fe 9a 6b c0 c2 d5 ec 5d e7 af 9c 3a 7e c9 25 3f 3a b0 bc 5c fb f0 53 4f d7 0e 81 8f 3d cd b0 cc c2 c6 6b cc 2f d9 fb 18 05 63 64 dc 42 0b 5a 10 c1 2d 88 e0 87 19 ed 3a 2c 5c cf e5 2b b2 68 51 29 53 06 23 a5 f6 72 b1 60 b3 5a 5a 4e 19 64 27 e5 86 88 3f 99 f4 fb 13 89 ef 81 5d d7 5e 5b fb ec 8b a9 60 30 85 5e 1b 1b cc 2c b8 15 fc 0d fb 05 43 84 69 65 18 83 12 fe 7d 0a d2 ce 32 3c 6c c0 8b ec fb 19 17 e3 63 4e 33 5b 3a 89 16 70 a8 80 43 05 8f a0 5e 83 ff cb 93 8f c0 9e 03 90 56 79 f2 61 46 65 78 98 d1 ac 91 77 3d 7c 57 c0 77 23 7c Data Ascii: `EF2Mg?3a[xe,/p1xexNVrv3y6+k]:~%?:\SO=k/cdBZ-:,\+hQ)S#r`ZZNd'?]^[`0^,Cie}2<lcN3[:pC^VyaFexw=\|Ww#\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49755	104.22.17.194	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:34 UTC	666	OUT	GET /images/v4/empty_stars.svg HTTP/1.1 Host: nuance-pdf-professional2.software.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nuance-pdf-professional2.software.informer.com/7.2/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:34 UTC	381	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:34 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 07 Jun 2024 08:54:12 GMT Vary: Accept-Encoding ETag: W/"6662cab4-693" Expires: Wed, 15 Jan 2025 19:05:00 GMT Cache-Control: max-age=604800 CF-Cache-Status: HIT Age: 397536 Server: cloudflare CF-RAY: 902940fe1853c998-IAD
2025-01-15 22:20:34 UTC	988	IN	Data Raw: 36 39 33 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 61 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 31 22 20 68 65 69 67 68 74 3d 22 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 31 20 32 30 22 3e 3c 70 61 74 68 20 64 3d 22 6d 31 30 2e 35 38 2c 33 2e 33 38 6c 31 2e 38 34 2c 33 2e 38 35 2e 33 31 2e 37 37 2e 37 37 2e 31 35 2c 34 2e 31 34 2e 36 32 2d 32 2e 39 31 2c 32 2e 39 32 2d 2e 36 31 2e 34 36 2e 31 35 2e 37 37 2e 37 37 2c 34 2e 31 35 2d 33 2e 36 38 2d 31 2e 38 35 2d 2e 37 37 2d 2e 33 31 2d 2e 37 37 2e 33 31 2d 33 2e 38 33 2c 32 2c 2e 37 37 2d 34 2e Data Ascii: 693<?xml version="1.0" encoding="UTF-8"?><svg id="a" xmlns="http://www.w3.org/2000/svg" width="121" height="20" viewBox="0 0 121 20"><path d="m10.58,3.38l1.84,3.85.31.77.77.15,4.14.62-2.91,2.92-.61.46.15.77.77,4.15-3.68-1.85-.77-.31-.77.31-3.83,2,.77-4.
2025-01-15 22:20:34 UTC	702	IN	Data Raw: 38 2c 36 2e 34 34 2c 33 2e 33 38 2d 31 2e 32 33 2d 37 2e 32 33 2c 35 2e 32 31 2d 35 2e 30 38 2d 37 2e 32 2d 31 2e 30 38 2d 33 2e 32 32 2d 36 2e 36 32 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 66 36 36 3b 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 38 35 2e 35 38 2c 33 2e 33 38 6c 31 2e 38 34 2c 33 2e 38 35 2e 33 31 2e 37 37 2e 37 37 2e 31 35 2c 34 2e 31 34 2e 36 32 2d 32 2e 39 31 2c 32 2e 39 32 2d 2e 36 31 2e 34 36 2e 31 35 2e 37 37 2e 37 37 2c 34 2e 31 35 2d 33 2e 36 38 2d 31 2e 38 35 2d 2e 37 37 2d 2e 33 31 2d 2e 37 37 2e 33 31 2d 33 2e 38 33 2c 32 2c 2e 37 37 2d 34 2e 31 35 2e 31 35 2d 2e 37 37 2d 2e 36 31 2d 2e 36 32 2d 33 2e 30 37 2d 32 2e 39 32 2c 34 2e 31 34 2d 2e 36 32 2e 37 37 2d 2e 31 35 2e 33 31 2d 2e 37 37 2c 32 2e 31 35 2d 33 2e 38 35 5a 6d Data Ascii: 8,6.44,3.38-1.23-7.23,5.21-5.08-7.2-1.08-3.22-6.62Z" style="fill:#f66;"/><path d="m85.58,3.38l1.84,3.85.31.77.77.15,4.14.62-2.91,2.92-.61.46.15.77.77,4.15-3.68-1.85-.77-.31-.77.31-3.83,2,.77-4.15.15-.77-.61-.62-3.07-2.92,4.14-.62.77-.15.31-.77,2.15-3.85Zm
2025-01-15 22:20:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49743	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:34 UTC	621	OUT	GET /images/empty.gif HTTP/1.1 Host: img.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:34 UTC	297	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:24 GMT Content-Type: image/gif Content-Length: 43 Last-Modified: Fri, 24 Aug 2018 10:02:53 GMT Connection: close ETag: "5b7fd7cd-2b" Expires: Thu, 15 Jan 2026 21:59:24 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:34 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49757	104.22.17.194	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:34 UTC	581	OUT	GET /style/onexit9.css HTTP/1.1 Host: software.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:35 UTC	376	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:34 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 07 Jun 2024 08:54:13 GMT Vary: Accept-Encoding ETag: W/"6662cab5-e85" Expires: Thu, 16 Jan 2025 01:06:28 GMT Cache-Control: max-age=604800 CF-Cache-Status: HIT Age: 594846 Server: cloudflare CF-RAY: 902940fe5d16345b-DFW
2025-01-15 22:20:35 UTC	993	IN	Data Raw: 65 38 35 0d 0a 20 2f 2a 4d 6f 64 61 6c 2a 2f 0a 2e 6c 61 79 6f 75 74 5f 70 6f 70 5f 75 70 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 20 20 74 6f 70 3a 20 30 3b 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 72 69 67 68 74 3a 20 30 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 69 6d 67 2e 69 6e 66 6f 72 6d 65 72 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 76 32 2f 62 67 66 72 6d 2e 70 6e 67 29 20 72 65 70 65 61 74 20 30 20 30 3b 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 30 30 3b 0a 7d 0a 2e 6c 61 79 6f 75 74 5f 70 6f 70 5f 75 70 20 2e 70 6f 70 5f 75 70 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b Data Ascii: e85 /Modal/.layout_pop_up { position: fixed; top: 0; bottom: 0; left: 0; right: 0; background: url(https://img.informer.com/images/v2/bgfrm.png) repeat 0 0; z-index: 1000;}.layout_pop_up .pop_up { position: relative;
2025-01-15 22:20:35 UTC	1369	IN	Data Raw: 2a 2f 0a 7d 0a 2e 70 6f 70 5f 75 70 5f 6c 6f 67 6f 20 7b 0a 09 6d 61 72 67 69 6e 3a 34 30 70 78 20 61 75 74 6f 20 30 3b 0a 09 77 69 64 74 68 3a 32 34 31 70 78 3b 0a 09 68 65 69 67 68 74 3a 32 35 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 69 6d 67 2e 69 6e 66 6f 72 6d 65 72 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 76 32 2f 70 6f 70 5f 75 70 5f 73 70 72 69 74 65 2e 70 6e 67 29 20 30 20 30 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 7d 0a 2e 70 6f 70 5f 75 70 20 68 31 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 35 30 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 34 35 70 78 20 61 75 74 6f 20 31 30 70 78 3b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 69 Data Ascii: */}.pop_up_logo {margin:40px auto 0;width:241px;height:25px;background:url(https://img.informer.com/images/v2/pop_up_sprite.png) 0 0 no-repeat;}.pop_up h1 {color: #fff;font-size: 50px;margin: 45px auto 10px;display: block;overflow: i
2025-01-15 22:20:35 UTC	1362	IN	Data Raw: 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 33 36 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 34 70 78 20 30 20 38 70 78 3b 0a 7d 0a 2e 6c 69 6e 6b 73 5f 77 72 61 70 70 65 72 20 2e 62 74 6e 5f 66 69 6e 64 20 61 3a 68 6f 76 65 72 7b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 39 34 63 63 30 65 3b 0a 7d 0a 2e 6c 69 6e 6b 73 5f 77 72 61 70 70 65 72 20 61 2e 6c 69 6e 6b 5f 64 65 63 6c 69 6e 65 20 7b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 20 20 20 20 66 6f 6e 74 2d Data Ascii: webkit-box-sizing: content-box; overflow: hidden; height: 36px; padding: 4px 0 8px;}.links_wrapper .btn_find a:hover{ text-decoration: none;background:#94cc0e;}.links_wrapper a.link_decline { text-decoration: underline; font-
2025-01-15 22:20:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49748	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:34 UTC	634	OUT	GET /icons/png/48/5524/5524797.png HTTP/1.1 Host: img.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:34 UTC	300	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:24 GMT Content-Type: image/png Content-Length: 3627 Last-Modified: Thu, 25 Jan 2024 22:39:18 GMT Connection: close ETag: "65b2e316-e2b" Expires: Thu, 15 Jan 2026 21:59:24 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:34 UTC	3627	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 0d f2 49 44 41 54 68 81 cd 9a 7b 6c 5c d5 9d c7 3f e7 9c 7b ef 3c ed 19 3b 36 26 09 0e 56 1c 88 93 90 c4 69 03 d9 a5 15 24 40 29 94 14 92 ae 76 b5 5d c5 c1 fb 14 2f 01 d1 4a bb a2 ab 2d b0 ea 22 fe 58 6d 5a 75 a5 ee 1f 2b 05 48 0a 62 fb 20 2d a4 bb 45 a4 38 65 05 14 c2 c6 84 90 00 55 c0 79 d8 b1 09 89 27 7e ce dc c7 39 fb c7 bd 73 67 c6 1e bb bc b4 ea 95 ae c6 b9 73 ef b9 bf cf f9 bd be e7 4c 84 31 86 cf 7a ec fa d1 0b dd 06 b3 d5 68 73 8d 36 ba c3 18 d3 61 00 63 0c c6 94 3f 0d c6 98 7e 8c e9 37 c6 1c 30 b0 f7 de de db 0a 9f f5 dd e2 d3 02 ec d9 fb 62 de 18 b3 c3 18 b3 1d 64 87 95 48 20 95 85 b2 6c 94 6d a3 23 c3 cb 9f 81 ef e3 fb 3e 7e a9 88 5b 9c c2 Data Ascii: PNGIHDR00WIDATh{l\?{<;6&Vi$@)v]/J-"XmZu+Hb -E8eUy'~9sgsL1zhs6ac?~70bdH lm#>~[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49747	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:34 UTC	621	OUT	GET /images/blank.gif HTTP/1.1 Host: img.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:34 UTC	297	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:24 GMT Content-Type: image/gif Content-Length: 43 Last-Modified: Fri, 24 Aug 2018 10:02:53 GMT Connection: close ETag: "5b7fd7cd-2b" Expires: Thu, 15 Jan 2026 21:59:24 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:34 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49756	104.22.17.194	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:34 UTC	592	OUT	GET /style/v4/min/program.min.css HTTP/1.1 Host: software.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:34 UTC	378	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:34 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Last-Modified: Thu, 26 Sep 2024 07:45:54 GMT Vary: Accept-Encoding ETag: W/"66f51132-45e13" Expires: Tue, 14 Jan 2025 07:56:43 GMT Cache-Control: max-age=604800 CF-Cache-Status: HIT Age: 478139 Server: cloudflare CF-RAY: 902940fe1cc205dc-IAD
2025-01-15 22:20:34 UTC	991	IN	Data Raw: 37 65 32 34 0d 0a 2a 2c 3a 3a 62 65 66 6f 72 65 2c 3a 3a 61 66 74 65 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 62 6f 64 79 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 70 2c 66 69 67 75 72 65 2c 62 6c 6f 63 6b 71 75 6f 74 65 2c 64 6c 2c 64 64 7b 6d 61 72 67 69 6e 3a 30 7d 62 6f 64 79 2c 69 6e 70 75 74 2c 74 65 78 74 61 72 65 61 2c 73 65 6c 65 63 74 2c 62 75 74 74 6f 6e 7b 66 6f 6e 74 2d 73 79 6e 74 68 65 73 69 73 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 7d 75 6c 2c 6f 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 3b 6d Data Ascii: 7e24*,::before,::after{box-sizing:border-box}body,h1,h2,h3,h4,p,figure,blockquote,dl,dd{margin:0}body,input,textarea,select,button{font-synthesis:none;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}ul,ol{list-style:none;padding:0;m
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 73 7b 68 65 69 67 68 74 3a 31 30 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 69 6e 66 5f 62 6e 72 5f 30 3e 61 2c 23 69 6e 66 5f 62 6e 72 5f 31 3e 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 78 6d 61 73 5f 73 74 79 6c 65 20 2e 6c 6f 67 6f 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 78 6d 61 73 5f 73 74 79 6c 65 20 2e 6c 6f 67 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 27 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 37 30 70 78 3b 68 65 69 67 68 74 3a 34 36 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 31 30 70 78 3b 6c 65 Data Ascii: s{height:100px!important;max-height:100px!important;text-align:center}#inf_bnr_0>a,#inf_bnr_1>a{display:inline-block}.xmas_style .logo{position:relative}.xmas_style .logo:before{content:'';display:block;width:70px;height:46px;position:absolute;top:10px;le
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 2e 33 32 41 31 33 2e 33 38 25 32 43 31 33 2e 33 38 25 32 43 30 25 32 43 30 25 32 43 31 25 32 43 33 30 25 32 43 34 32 2e 31 37 25 32 43 31 37 2e 36 38 25 32 43 31 37 2e 36 38 25 32 43 30 25 32 43 30 25 32 43 31 25 32 43 32 36 25 32 43 34 33 63 31 2e 32 36 2d 2e 35 31 25 32 43 32 2e 34 39 2d 31 25 32 43 33 2e 36 39 2d 31 2e 36 61 31 39 2e 35 31 25 32 43 31 39 2e 35 31 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 33 2e 33 38 2d 32 25 32 43 39 2e 35 36 25 32 43 39 2e 35 36 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 32 2e 34 36 2d 32 2e 38 37 41 31 32 25 32 43 31 32 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 33 37 25 32 43 33 32 2e 39 34 5a 25 32 32 25 32 30 73 74 79 6c 65 25 33 44 25 32 32 66 69 6c 6c 25 33 41 25 32 33 66 66 66 25 33 42 6f 70 61 63 69 74 Data Ascii: .32A13.38%2C13.38%2C0%2C0%2C1%2C30%2C42.17%2C17.68%2C17.68%2C0%2C0%2C1%2C26%2C43c1.26-.51%2C2.49-1%2C3.69-1.6a19.51%2C19.51%2C0%2C0%2C0%2C3.38-2%2C9.56%2C9.56%2C0%2C0%2C0%2C2.46-2.87A12%2C12%2C0%2C0%2C0%2C37%2C32.94Z%22%20style%3D%22fill%3A%23fff%3Bopacit
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 36 25 32 43 31 30 2e 33 36 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 31 2e 36 34 2d 31 2e 38 36 25 32 43 38 2e 31 25 32 43 38 2e 31 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 31 2d 32 2e 32 41 38 2e 31 39 25 32 43 38 2e 31 39 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 32 37 2e 36 32 25 32 43 32 35 76 2d 2e 34 32 6c 2e 34 31 2d 2e 31 61 32 2e 32 39 25 32 43 32 2e 32 39 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 2e 37 33 2d 2e 34 31 25 32 43 34 2e 35 31 25 32 43 34 2e 35 31 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 2e 37 31 2d 2e 36 37 25 32 43 39 2e 31 38 25 32 43 39 2e 31 38 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 31 2e 31 31 2d 31 2e 37 32 25 32 43 35 25 32 43 35 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 2e 33 39 2d 2e 39 32 63 2e 30 Data Ascii: 6%2C10.36%2C0%2C0%2C0%2C1.64-1.86%2C8.1%2C8.1%2C0%2C0%2C0%2C1-2.2A8.19%2C8.19%2C0%2C0%2C0%2C27.62%2C25v-.42l.41-.1a2.29%2C2.29%2C0%2C0%2C0%2C.73-.41%2C4.51%2C4.51%2C0%2C0%2C0%2C.71-.67%2C9.18%2C9.18%2C0%2C0%2C0%2C1.11-1.72%2C5%2C5%2C0%2C0%2C0%2C.39-.92c.0
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 32 30 31 33 2e 35 34 25 32 30 32 35 2e 36 39 25 32 30 31 31 2e 36 35 25 32 30 32 38 2e 32 33 25 32 30 31 31 2e 36 38 25 32 30 32 39 2e 33 33 25 32 30 39 25 32 32 25 32 30 73 74 79 6c 65 25 33 44 25 32 32 66 69 6c 6c 25 33 41 25 32 33 65 36 61 37 33 30 25 32 32 25 32 46 25 33 45 25 33 43 70 6f 6c 79 67 6f 6e 25 32 30 70 6f 69 6e 74 73 25 33 44 25 32 32 33 31 2e 36 36 25 32 30 31 36 2e 30 34 25 32 30 32 39 2e 35 31 25 32 30 31 33 2e 32 33 25 32 30 33 30 2e 38 37 25 32 30 31 32 2e 35 32 25 32 30 32 39 2e 35 31 25 32 30 31 32 2e 31 36 25 32 30 32 39 2e 33 33 25 32 30 39 25 32 30 33 30 2e 35 38 25 32 30 31 31 2e 36 35 25 32 30 33 32 2e 37 39 25 32 30 31 31 2e 36 37 25 32 30 33 31 2e 30 37 25 32 30 31 33 2e 36 32 25 32 30 33 31 2e 36 36 25 32 30 31 36 2e 30 34 Data Ascii: 2013.54%2025.69%2011.65%2028.23%2011.68%2029.33%209%22%20style%3D%22fill%3A%23e6a730%22%2F%3E%3Cpolygon%20points%3D%2231.66%2016.04%2029.51%2013.23%2030.87%2012.52%2029.51%2012.16%2029.33%209%2030.58%2011.65%2032.79%2011.67%2031.07%2013.62%2031.66%2016.04
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 43 30 25 32 43 31 25 32 43 36 35 25 32 43 34 2e 35 34 5a 6d 2d 32 2e 38 34 2d 2e 39 33 56 36 2e 37 38 4c 35 39 2e 38 38 25 32 43 34 2e 35 34 61 33 2e 38 37 25 32 43 33 2e 38 37 25 32 43 30 25 32 43 30 25 32 43 31 25 32 43 32 2e 32 34 2d 2e 39 33 5a 4d 35 39 2e 34 36 25 32 43 35 25 32 43 36 31 2e 37 25 32 43 37 2e 32 48 35 38 2e 35 33 41 33 2e 39 31 25 32 43 33 2e 39 31 25 32 43 30 25 32 43 30 25 32 43 31 25 32 43 35 39 2e 34 36 25 32 43 35 5a 6d 2d 2e 39 33 25 32 43 32 2e 38 48 36 31 2e 37 4c 35 39 2e 34 36 25 32 43 31 30 41 33 2e 39 31 25 32 43 33 2e 39 31 25 32 43 30 25 32 43 30 25 32 43 31 25 32 43 35 38 2e 35 33 25 32 43 37 2e 38 5a 6d 31 2e 33 35 25 32 43 32 2e 36 36 25 32 43 32 2e 32 34 2d 32 2e 32 34 76 33 2e 31 37 41 33 2e 38 37 25 32 43 33 2e 38 Data Ascii: C0%2C1%2C65%2C4.54Zm-2.84-.93V6.78L59.88%2C4.54a3.87%2C3.87%2C0%2C0%2C1%2C2.24-.93ZM59.46%2C5%2C61.7%2C7.2H58.53A3.91%2C3.91%2C0%2C0%2C1%2C59.46%2C5Zm-.93%2C2.8H61.7L59.46%2C10A3.91%2C3.91%2C0%2C0%2C1%2C58.53%2C7.8Zm1.35%2C2.66%2C2.24-2.24v3.17A3.87%2C3.8
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 2d 2e 35 39 2d 32 25 32 43 2e 32 32 2d 2e 36 31 2d 2e 36 31 41 34 2e 34 37 25 32 43 34 2e 34 37 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 31 32 25 32 43 31 37 68 31 2e 31 6c 31 2e 32 25 32 43 31 2e 36 2e 34 37 2d 2e 33 37 4c 31 33 2e 38 34 25 32 43 31 37 48 31 35 5a 6d 2d 33 2e 36 31 25 32 43 30 48 38 2e 32 32 6c 32 2e 32 34 2d 32 2e 32 34 41 33 2e 38 37 25 32 43 33 2e 38 37 25 32 43 30 25 32 43 30 25 32 43 31 25 32 43 31 31 2e 33 39 25 32 43 31 36 2e 34 35 5a 4d 31 30 25 32 43 31 33 2e 37 39 25 32 43 37 2e 38 25 32 43 31 36 56 31 32 2e 38 36 41 33 2e 39 31 25 32 43 33 2e 39 31 25 32 43 30 25 32 43 30 25 32 43 31 25 32 43 31 30 25 32 43 31 33 2e 37 39 5a 6d 2d 32 2e 38 2d 2e 39 33 56 31 36 4c 35 25 32 43 31 33 2e 37 39 41 33 2e 39 31 25 32 43 33 2e 39 Data Ascii: -.59-2%2C.22-.61-.61A4.47%2C4.47%2C0%2C0%2C0%2C12%2C17h1.1l1.2%2C1.6.47-.37L13.84%2C17H15Zm-3.61%2C0H8.22l2.24-2.24A3.87%2C3.87%2C0%2C0%2C1%2C11.39%2C16.45ZM10%2C13.79%2C7.8%2C16V12.86A3.91%2C3.91%2C0%2C0%2C1%2C10%2C13.79Zm-2.8-.93V16L5%2C13.79A3.91%2C3.9
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 33 2e 6f 72 67 25 32 46 32 30 30 30 25 32 46 73 76 67 25 32 32 25 32 30 76 69 65 77 42 6f 78 25 33 44 25 32 32 30 25 32 30 30 25 32 30 33 36 25 32 30 32 37 25 32 32 25 33 45 25 33 43 74 69 74 6c 65 25 33 45 63 68 72 69 73 74 6d 61 73 5f 68 61 74 5f 69 6e 6b 25 33 43 25 32 46 74 69 74 6c 65 25 33 45 25 33 43 70 61 74 68 25 32 30 64 25 33 44 25 32 32 4d 32 25 32 43 35 2e 31 36 25 32 43 32 30 2e 34 25 32 43 32 33 53 32 35 2e 35 25 32 43 39 25 32 43 32 37 2e 33 25 32 43 38 2e 34 37 63 2e 39 2d 2e 32 25 32 43 34 2e 37 25 32 43 32 2e 36 31 25 32 43 34 2e 37 25 32 43 32 2e 36 31 53 33 31 25 32 43 31 2e 38 36 25 32 43 32 33 2e 32 2e 31 35 43 31 37 2e 39 2d 31 25 32 43 32 25 32 43 35 2e 31 36 25 32 43 32 25 32 43 35 2e 31 36 5a 25 32 32 25 32 30 74 72 61 6e 73 66 Data Ascii: 3.org%2F2000%2Fsvg%22%20viewBox%3D%220%200%2036%2027%22%3E%3Ctitle%3Echristmas_hat_ink%3C%2Ftitle%3E%3Cpath%20d%3D%22M2%2C5.16%2C20.4%2C23S25.5%2C9%2C27.3%2C8.47c.9-.2%2C4.7%2C2.61%2C4.7%2C2.61S31%2C1.86%2C23.2.15C17.9-1%2C2%2C5.16%2C2%2C5.16Z%22%20transf
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 2e 33 37 25 32 43 32 2e 33 37 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 31 2e 36 2d 2e 36 39 6c 2e 34 2e 34 4c 32 30 2e 36 25 32 43 31 30 48 32 31 56 39 2e 31 32 6c 2e 36 2e 35 39 2e 33 2d 2e 33 2d 2e 37 2d 2e 34 39 2e 39 2d 2e 31 76 2d 2e 34 6c 2d 31 2e 32 2e 31 2d 2e 34 2d 2e 34 61 32 2e 38 38 25 32 43 32 2e 38 38 25 32 43 30 25 32 43 30 25 32 43 30 25 32 43 2e 37 2d 31 2e 35 38 68 2e 37 6c 2e 37 2e 38 39 2e 33 2d 2e 32 2d 2e 36 2d 2e 36 39 48 32 33 5a 6d 2d 32 2e 32 25 32 43 30 48 31 38 2e 39 4c 32 30 2e 33 25 32 43 35 41 32 2e 30 37 25 32 43 32 2e 30 37 25 32 43 30 25 32 43 30 25 32 43 31 25 32 43 32 30 2e 38 25 32 43 36 2e 32 35 5a 4d 32 30 25 32 43 34 2e 36 37 25 32 43 31 38 2e 37 25 32 43 36 2e 30 35 56 34 2e 31 38 41 32 2e 31 32 25 32 43 32 2e Data Ascii: .37%2C2.37%2C0%2C0%2C0%2C1.6-.69l.4.4L20.6%2C10H21V9.12l.6.59.3-.3-.7-.49.9-.1v-.4l-1.2.1-.4-.4a2.88%2C2.88%2C0%2C0%2C0%2C.7-1.58h.7l.7.89.3-.2-.6-.69H23Zm-2.2%2C0H18.9L20.3%2C5A2.07%2C2.07%2C0%2C0%2C1%2C20.8%2C6.25ZM20%2C4.67%2C18.7%2C6.05V4.18A2.12%2C2.
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 34 64 34 64 34 7d 2e 77 72 61 70 70 65 72 5f 73 65 61 72 63 68 20 2e 73 65 61 72 63 68 5f 62 74 6e 7b 62 6f 72 64 65 72 3a 30 3b 6f 75 74 6c 69 6e 65 3a 30 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 32 34 70 78 3b 68 65 69 67 68 74 3a 32 34 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 2c 25 33 43 73 76 67 25 32 30 78 6d 6c 6e 73 25 33 44 25 Data Ascii: border-radius:4px;border:1px solid #d4d4d4}.wrapper_search .search_btn{border:0;outline:0;display:block;width:24px;height:24px;position:absolute;cursor:pointer;background-color:transparent;background:url(data:image/svg+xml;charset=utf-8,%3Csvg%20xmlns%3D%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49761	172.67.43.115	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:34 UTC	556	OUT	GET /js/onexit9.js HTTP/1.1 Host: i.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:34 UTC	394	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:34 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 07 Jun 2024 08:54:12 GMT Vary: Accept-Encoding ETag: W/"6662cab4-18d2" Expires: Thu, 27 Nov 2025 22:42:10 GMT Cache-Control: max-age=31536000 CF-Cache-Status: HIT Age: 3515060 Server: cloudflare CF-RAY: 902940fe1e69c5b9-IAD
2025-01-15 22:20:34 UTC	975	IN	Data Raw: 31 38 64 32 0d 0a 76 61 72 20 65 67 5f 77 69 64 74 68 3d 32 35 34 3b 0a 76 61 72 20 65 67 5f 68 65 69 67 68 74 3d 33 34 35 3b 0a 76 61 72 20 65 67 5f 62 6f 72 64 65 72 63 6f 6c 6f 72 3d 27 23 65 34 65 34 65 34 27 3b 0a 76 61 72 20 65 67 5f 62 67 54 69 74 6c 65 3d 27 23 66 30 66 30 66 30 27 3b 0a 76 61 72 20 65 67 5f 74 69 6d 65 6f 75 74 3d 30 3b 0a 76 61 72 20 65 67 5f 64 69 73 61 62 6c 65 5f 73 63 72 6f 6c 6c 62 61 72 3d 66 61 6c 73 65 3b 0a 76 61 72 20 6d 79 57 69 64 74 68 3d 30 3b 0a 76 61 72 20 6d 79 48 65 69 67 68 74 3d 30 3b 0a 76 61 72 20 6f 70 65 6e 65 64 3d 66 61 6c 73 65 3b 0a 76 61 72 20 69 73 5f 69 6e 3d 66 61 6c 73 65 3b 0a 76 61 72 20 65 67 77 69 6e 64 3d 6e 75 6c 6c 3b 0a 76 61 72 20 65 67 5f 78 3d 31 30 30 3b 0a 76 61 72 20 65 67 5f 79 3d Data Ascii: 18d2var eg_width=254;var eg_height=345;var eg_bordercolor='#e4e4e4';var eg_bgTitle='#f0f0f0';var eg_timeout=0;var eg_disable_scrollbar=false;var myWidth=0;var myHeight=0;var opened=false;var is_in=false;var egwind=null;var eg_x=100;var eg_y=
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 79 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 0a 09 7d 0a 09 76 61 72 20 70 6f 73 78 3d 30 3b 0a 09 76 61 72 20 70 6f 73 79 3d 30 3b 0a 09 69 66 28 21 65 29 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 65 76 65 6e 74 3b 0a 0a 09 73 63 72 6f 6c 6c 54 6f 70 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 54 6f 70 0a 0a 09 69 66 20 28 2f 53 61 66 61 72 69 2f 69 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 29 0a 09 7b 0a 09 09 73 63 72 6f 6c 6c 54 6f 70 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 54 6f 70 0a 09 09 70 6f 73 78 3d 65 2e 70 61 67 65 58 2d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 4c 65 66 74 3b 0a 09 09 70 6f 73 79 3d 65 2e 70 Data Ascii: y.clientHeight}var posx=0;var posy=0;if(!e)var e=window.event;scrollTop = document.body.scrollTopif (/Safari/i.test(navigator.userAgent)){scrollTop = document.documentElement.scrollTopposx=e.pageX-document.body.scrollLeft;posy=e.p
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 29 20 7b 20 65 67 5f 69 6e 69 74 28 29 20 7d 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 65 67 5f 69 6e 69 74 28 29 0a 7b 0a 09 76 61 72 20 73 74 6f 72 65 64 48 61 73 68 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 3b 0a 09 69 66 20 28 73 74 6f 72 65 64 48 61 73 68 20 3d 3d 20 27 23 67 6f 6f 67 6c 65 5f 76 69 67 6e 65 74 74 65 27 29 20 72 65 74 75 72 6e 3b 0a 0a 09 24 6a 28 22 62 6f 64 79 22 29 2e 6b 65 79 64 6f 77 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 0a 09 09 76 61 72 20 63 6f 64 65 20 3d 20 65 2e 6b 65 79 43 6f 64 65 20 7c 7c 20 65 2e 77 68 69 63 68 3b 0a 09 09 69 66 28 63 6f 64 65 20 3d 3d 20 32 37 29 20 7b 20 2f 2f 65 73 63 61 70 65 20 70 72 65 73 73 65 64 0a 09 09 09 63 6c 6f 73 65 57 69 6e 64 6f 77 28 29 0a 09 09 7d 0a 09 7d Data Ascii: ) { eg_init() });function eg_init(){var storedHash = window.location.hash;if (storedHash == '#google_vignette') return;$j("body").keydown(function(e){var code = e.keyCode \|\| e.which;if(code == 27) { //escape pressedcloseWindow()}}
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 76 61 73 63 72 69 70 74 3a 76 6f 69 64 28 30 29 22 20 6f 6e 63 6c 69 63 6b 3d 22 63 6c 6f 73 65 57 69 6e 64 6f 77 28 29 3b 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 5f 64 65 63 6c 69 6e 65 22 3e 4e 6f 20 74 68 61 6e 6b 73 2c 20 49 20 64 6f 6e 5c 27 74 20 77 61 6e 74 20 74 6f 20 6c 6f 6f 6b 20 61 6e 79 20 66 75 72 74 68 65 72 3c 2f 61 3e 27 0a 2b 20 27 09 09 09 3c 2f 64 69 76 3e 27 0a 2b 20 27 09 09 09 3c 61 20 68 72 65 66 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 76 6f 69 64 28 30 29 22 20 6f 6e 63 6c 69 63 6b 3d 22 63 6c 6f 73 65 57 69 6e 64 6f 77 28 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 20 63 6c 61 73 73 3d 22 63 6c 6f 73 65 5f 62 74 6e 22 3e 3c 2f 61 3e 27 0a 2b 20 27 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 6f 70 5f 75 70 5f 62 6f 74 74 Data Ascii: vascript:void(0)" onclick="closeWindow();" class="link_decline">No thanks, I don\'t want to look any further</a>'+ '</div>'+ '<a href="javascript:void(0)" onclick="closeWindow(); return false;" class="close_btn"></a>'+ '<div class="pop_up_bott
2025-01-15 22:20:34 UTC	1280	IN	Data Raw: 29 2e 66 61 64 65 49 6e 28 31 30 30 29 3b 0a 09 24 6a 28 22 68 74 6d 6c 22 29 2e 63 73 73 28 22 6f 76 65 72 66 6c 6f 77 22 2c 22 68 69 64 64 65 6e 22 29 3b 0a 0a 09 69 66 28 65 67 5f 64 69 73 61 62 6c 65 5f 73 63 72 6f 6c 6c 62 61 72 29 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 3d 27 68 69 64 64 65 6e 27 3b 0a 09 69 66 28 65 67 5f 74 69 6d 65 6f 75 74 3e 30 29 7b 0a 09 09 61 75 74 6f 63 6c 6f 73 65 3d 73 65 74 54 69 6d 65 6f 75 74 28 22 63 6c 6f 73 65 57 69 6e 64 6f 77 28 29 22 2c 65 67 5f 74 69 6d 65 6f 75 74 29 0a 09 7d 0a 09 63 68 65 63 6b 5f 76 69 67 6e 65 74 74 65 28 29 3b 0a 09 72 65 74 75 72 6e 20 66 61 6c 73 65 0a 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 63 6c 6f 73 65 57 69 6e 64 6f 77 28 29 0a 7b 0a Data Ascii: ).fadeIn(100);$j("html").css("overflow","hidden");if(eg_disable_scrollbar)document.body.style.overflow='hidden';if(eg_timeout>0){autoclose=setTimeout("closeWindow()",eg_timeout)}check_vignette();return false};function closeWindow(){
2025-01-15 22:20:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49758	172.67.43.115	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:34 UTC	556	OUT	GET /js/footer4.js HTTP/1.1 Host: i.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:34 UTC	393	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:34 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 27 Nov 2024 14:00:37 GMT Vary: Accept-Encoding ETag: W/"67472605-e4e" Expires: Thu, 27 Nov 2025 14:01:57 GMT Cache-Control: max-age=31536000 CF-Cache-Status: HIT Age: 4263494 Server: cloudflare CF-RAY: 902940fe1a7942b2-EWR
2025-01-15 22:20:34 UTC	976	IN	Data Raw: 65 34 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 6a 73 70 61 72 61 6d 73 20 21 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 70 6c 61 74 66 6f 72 6d 5f 72 65 20 3d 20 2f 28 73 6f 66 74 77 61 72 65 7c 6c 69 6e 75 78 7c 6d 61 63 64 6f 77 6e 6c 6f 61 64 29 5c 2e 69 6e 66 6f 72 6d 65 72 5c 2e 63 6f 6d 2f 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6d 61 74 63 68 65 73 20 3d 20 70 6c 61 74 66 6f 72 6d 5f 72 65 2e 65 78 65 63 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 6d 61 69 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 70 6c 61 74 66 6f 72 6d 30 20 3d 20 22 73 6f 66 74 77 61 72 65 22 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 6d Data Ascii: e4e(function() { if (typeof jsparams != 'undefined') { var platform_re = /(software\|linux\|macdownload)\.informer\.com/; var matches = platform_re.exec(document.domain.toLowerCase()); var platform0 = "software"; if (m
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 6f 6c 65 2e 6c 6f 67 28 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 29 0a 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 27 27 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 72 2e 69 6e 64 65 78 4f 66 28 22 67 6f 6f 67 6c 65 2e 22 29 20 3e 20 30 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 70 6c 61 74 66 6f 72 6d 30 20 3d 3d 20 27 73 6f 66 74 77 61 72 65 27 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 73 70 61 72 61 6d 73 20 2b 3d 20 22 2c 38 37 30 36 22 3b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: ole.log(document.referrer) var r = ''; if (document.referrer) { r = document.referrer; if (r.indexOf("google.") > 0) { if (platform0 == 'software') jsparams += ",8706";
2025-01-15 22:20:34 UTC	1324	IN	Data Raw: 69 6e 64 65 78 4f 66 28 22 79 61 6e 64 65 78 2e 22 29 20 3e 20 30 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 70 6c 61 74 66 6f 72 6d 30 20 3d 3d 20 27 73 6f 66 74 77 61 72 65 27 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 73 70 61 72 61 6d 73 20 2b 3d 20 22 2c 38 36 35 37 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 70 6c 61 74 66 6f 72 6d 30 20 3d 3d 20 27 6d 61 63 64 6f 77 6e 6c 6f 61 64 27 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 73 70 61 72 61 6d 73 20 2b 3d 20 22 2c 38 36 38 36 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 72 2e 69 6e 64 65 78 4f 66 28 22 62 69 6e 67 2e 63 6f 6d 22 29 20 3e 20 30 29 20 7b 0a 20 20 Data Ascii: indexOf("yandex.") > 0) { if (platform0 == 'software') jsparams += ",8657"; if (platform0 == 'macdownload') jsparams += ",8686"; } else if (r.indexOf("bing.com") > 0) {
2025-01-15 22:20:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49759	172.67.43.115	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:34 UTC	564	OUT	GET /js/program-mac.min.js HTTP/1.1 Host: i.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:34 UTC	395	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:34 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Thu, 12 Sep 2024 12:10:08 GMT Vary: Accept-Encoding ETag: W/"66e2da20-40e89" Expires: Wed, 24 Dec 2025 12:25:40 GMT Cache-Control: max-age=31536000 CF-Cache-Status: HIT Age: 1936494 Server: cloudflare CF-RAY: 902940fe39e7e81b-DFW
2025-01-15 22:20:34 UTC	974	IN	Data Raw: 37 65 31 33 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 2e 64 6f 63 75 6d 65 6e 74 29 72 65 74 75 72 6e 20 74 28 65 29 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 7d 3a 74 28 65 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f Data Ascii: 7e13!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(e.document)return t(e);throw new Error("jQuery requires a window with a document")}:t(e)}("undefined"!=typeof windo
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 3d 74 79 70 65 6f 66 20 65 3f 7a 5b 48 2e 63 61 6c 6c 28 65 29 5d 7c 7c 22 6f 62 6a 65 63 74 22 3a 74 79 70 65 6f 66 20 65 7d 76 61 72 20 65 3d 22 33 2e 37 2e 31 22 2c 59 3d 2f 48 54 4d 4c 24 2f 69 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 43 2e 66 6e 2e 69 6e 69 74 28 65 2c 74 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 65 29 7b 76 61 72 20 74 3d 21 21 65 26 26 22 6c 65 6e 67 74 68 22 69 6e 20 65 26 26 65 2e 6c 65 6e 67 74 68 2c 6e 3d 58 28 65 29 3b 72 65 74 75 72 6e 21 76 28 65 29 26 26 21 50 28 65 29 26 26 28 22 61 72 72 61 79 22 3d 3d 3d 6e 7c 7c 30 3d 3d 3d 74 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 30 3c 74 26 26 74 2d 31 20 69 6e 20 65 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 Data Ascii: =typeof e?z[H.call(e)]\|\|"object":typeof e}var e="3.7.1",Y=/HTML$/i,C=function(e,t){return new C.fn.init(e,t)};function G(e){var t=!!e&&"length"in e&&e.length,n=X(e);return!v(e)&&!P(e)&&("array"===n\|\|0===t\|\|"number"==typeof t&&0<t&&t-1 in e)}function b(e,t
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 26 28 6f 3d 74 68 69 73 2c 61 2d 2d 29 3b 61 3c 73 3b 61 2b 2b 29 69 66 28 6e 75 6c 6c 21 3d 28 65 3d 61 72 67 75 6d 65 6e 74 73 5b 61 5d 29 29 66 6f 72 28 74 20 69 6e 20 65 29 6e 3d 65 5b 74 5d 2c 22 5f 5f 70 72 6f 74 6f 5f 5f 22 21 3d 3d 74 26 26 6f 21 3d 3d 6e 26 26 28 6c 26 26 6e 26 26 28 43 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 6e 29 7c 7c 28 69 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 29 29 3f 28 72 3d 6f 5b 74 5d 2c 72 3d 69 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 3f 5b 5d 3a 69 7c 7c 43 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 72 29 3f 72 3a 7b 7d 2c 69 3d 21 31 2c 6f 5b 74 5d 3d 43 2e 65 78 74 65 6e 64 28 6c 2c 72 2c 6e 29 29 3a 76 6f 69 64 20 30 21 3d 3d 6e 26 26 28 6f 5b 74 5d 3d 6e 29 29 3b 72 65 74 75 72 Data Ascii: &(o=this,a--);a<s;a++)if(null!=(e=arguments[a]))for(t in e)n=e[t],"__proto__"!==t&&o!==n&&(l&&n&&(C.isPlainObject(n)\|\|(i=Array.isArray(n)))?(r=o[t],r=i&&!Array.isArray(r)?[]:i\|\|C.isPlainObject(r)?r:{},i=!1,o[t]=C.extend(l,r,n)):void 0!==n&&(o[t]=n));retur
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 65 2e 6c 65 6e 67 74 68 3d 72 2c 65 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 72 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 2c 61 3d 21 6e 3b 72 3c 6f 3b 72 2b 2b 29 21 74 28 65 5b 72 5d 2c 72 29 21 3d 61 26 26 69 2e 70 75 73 68 28 65 5b 72 5d 29 3b 72 65 74 75 72 6e 20 69 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 2c 72 2c 6f 3d 30 2c 61 3d 5b 5d 3b 69 66 28 47 28 65 29 29 66 6f 72 28 69 3d 65 2e 6c 65 6e 67 74 68 3b 6f 3c 69 3b 6f 2b 2b 29 6e 75 6c 6c 21 3d 28 72 3d 74 28 65 5b 6f 5d 2c 6f 2c 6e 29 29 26 26 61 2e 70 75 73 68 28 72 29 3b 65 6c 73 65 20 66 6f 72 28 6f 20 69 6e 20 65 29 6e 75 6c 6c 21 3d 28 72 3d 74 28 65 5b 6f 5d 2c 6f 2c 6e 29 29 26 26 61 Data Ascii: e.length=r,e},grep:function(e,t,n){for(var i=[],r=0,o=e.length,a=!n;r<o;r++)!t(e[r],r)!=a&&i.push(e[r]);return i},map:function(e,t,n){var i,r,o=0,a=[];if(G(e))for(i=e.length;o<i;o++)null!=(r=t(e[o],o,n))&&a.push(r);else for(o in e)null!=(r=t(e[o],o,n))&&a
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 28 3f 3a 22 2b 6e 2b 22 2a 28 5b 2a 5e 24 7c 21 7e 5d 3f 3d 29 22 2b 6e 2b 22 2a 28 3f 3a 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 65 2b 22 29 29 7c 29 22 2b 6e 2b 22 2a 5c 5c 5d 22 2c 61 3d 22 3a 28 22 2b 65 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 6f 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 5f 65 3d 6e 65 77 20 52 65 67 45 78 70 28 6e 2b 22 2b 22 2c 22 67 22 29 2c 67 65 3d 6e 65 77 20 52 65 67 45 78 70 28 Data Ascii: (?:"+n+"([^$\|!~]?=)"+n+"(?:'((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+e+"))\|)"+n+"\\]",a=":("+e+")(?:\$(('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+o+"))\|.)\$\|)",_e=new RegExp(n+"+","g"),ge=new RegExp(
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 2e 61 70 70 6c 79 28 65 2c 73 2e 63 61 6c 6c 28 74 29 29 7d 2c 63 61 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 65 2e 61 70 70 6c 79 28 65 2c 73 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 28 65 2c 74 2c 6e 2c 69 29 7b 76 61 72 20 72 2c 6f 2c 61 2c 73 2c 6c 2c 63 2c 75 3d 74 26 26 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 64 3d 74 3f 74 2e 6e 6f 64 65 54 79 70 65 3a 39 3b 69 66 28 6e 3d 6e 7c 7c 5b 5d 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 7c 7c 21 65 7c 7c 31 21 3d 3d 64 26 26 39 21 3d 3d 64 26 26 31 31 21 3d 3d 64 29 72 65 74 75 72 6e 20 6e 3b 69 66 28 21 69 26 26 28 4c 65 28 74 29 2c 74 3d 74 7c 7c 54 2c 6b 29 29 7b 69 66 28 31 31 21 3d 3d 64 26 26 28 73 3d 54 65 2e 65 78 Data Ascii: .apply(e,s.call(t))},call:function(e){le.apply(e,s.call(arguments,1))}}}function I(e,t,n,i){var r,o,a,s,l,c,u=t&&t.ownerDocument,d=t?t.nodeType:9;if(n=n\|\|[],"string"!=typeof e\|\|!e\|\|1!==d&&9!==d&&11!==d)return n;if(!i&&(Le(t),t=t\|\|T,k)){if(11!==d&&(s=Te.ex
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 20 65 3f 22 6c 61 62 65 6c 22 69 6e 20 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 3a 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 3a 65 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 74 7c 7c 65 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 74 26 26 45 65 28 65 29 3d 3d 3d 74 3a 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 3a 22 6c 61 62 65 6c 22 69 6e 20 65 26 26 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 61 29 7b 72 65 74 75 72 6e 20 44 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6f 3d 2b 6f 2c 44 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 2c 69 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 72 3d 69 2e Data Ascii: e?"label"in e.parentNode?e.parentNode.disabled===t:e.disabled===t:e.isDisabled===t\|\|e.isDisabled!==!t&&Ee(e)===t:e.disabled===t:"label"in e&&e.disabled===t}}function Ae(a){return D(function(o){return o=+o,D(function(e,t){for(var n,i=a([],e.length,o),r=i.
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 6b 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 6e 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 29 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 65 29 72 65 74 75 72 6e 5b 6f 5d 3b 66 6f 72 28 72 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 65 29 2c 69 3d 30 3b 6f 3d 72 5b 69 2b 2b 5d 3b 29 69 66 28 28 6e 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 29 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 65 29 72 65 74 75 72 6e 5b 6f 5d 7d 72 65 74 75 72 6e 5b 5d 7d 7d 29 2c 77 2e 66 69 6e 64 2e 54 41 47 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 Data Ascii: tElementById&&k){var n,i,r,o=t.getElementById(e);if(o){if((n=o.getAttributeNode("id"))&&n.value===e)return[o];for(r=t.getElementsByName(e),i=0;o=r[i++];)if((n=o.getAttributeNode("id"))&&n.value===e)return[o]}return[]}}),w.find.TAG=function(e,t){return voi
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 6d 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 3d 54 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 72 26 26 49 2e 63 6f 6e 74 61 69 6e 73 28 72 2c 65 29 3f 2d 31 3a 74 3d 3d 3d 54 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 72 26 26 49 2e 63 6f 6e 74 61 69 6e 73 28 72 2c 74 29 3f 31 3a 6f 65 3f 79 Data Ascii: !t.compareDocumentPosition\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!m.sortDetached&&t.compareDocumentPosition(e)===n?e===T\|\|e.ownerDocument==r&&I.contains(r,e)?-1:t===T\|\|t.ownerDocument==r&&I.contains(r,t)?1:oe?y
2025-01-15 22:20:34 UTC	1369	IN	Data Raw: 2c 22 7e 22 3a 7b 64 69 72 3a 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 7d 7d 2c 70 72 65 46 69 6c 74 65 72 3a 7b 41 54 54 52 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 31 5d 3d 65 5b 31 5d 2e 72 65 70 6c 61 63 65 28 64 2c 70 29 2c 65 5b 33 5d 3d 28 65 5b 33 5d 7c 7c 65 5b 34 5d 7c 7c 65 5b 35 5d 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 64 2c 70 29 2c 22 7e 3d 22 3d 3d 3d 65 5b 32 5d 26 26 28 65 5b 33 5d 3d 22 20 22 2b 65 5b 33 5d 2b 22 20 22 29 2c 65 2e 73 6c 69 63 65 28 30 2c 34 29 7d 2c 43 48 49 4c 44 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 31 5d 3d 65 5b 31 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 22 6e 74 68 22 3d 3d 3d 65 5b 31 5d 2e 73 6c 69 63 65 28 30 2c 33 29 3f 28 65 5b 33 5d 7c Data Ascii: ,"~":{dir:"previousSibling"}},preFilter:{ATTR:function(e){return e[1]=e[1].replace(d,p),e[3]=(e[3]\|\|e[4]\|\|e[5]\|\|"").replace(d,p),"~="===e[2]&&(e[3]=" "+e[3]+" "),e.slice(0,4)},CHILD:function(e){return e[1]=e[1].toLowerCase(),"nth"===e[1].slice(0,3)?(e[3]\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49760	172.67.43.115	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:34 UTC	588	OUT	GET /js/cache/hilight_software_v4.js?rnd=824406174 HTTP/1.1 Host: i.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:35 UTC	325	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:34 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 15 Jan 2025 22:20:02 GMT ETag: W/"67883492-4ac" X-Robots-Tag: noindex CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 902940fe4d90467e-DFW
2025-01-15 22:20:35 UTC	1044	IN	Data Raw: 34 61 63 0d 0a 76 61 72 20 73 74 72 3d 22 54 6f 70 58 4e 6f 74 65 73 22 3b 76 61 72 20 6c 65 66 74 43 6f 6c 75 6d 6e 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6c 65 66 74 43 6f 6c 75 6d 6e 22 29 3b 69 66 28 6c 65 66 74 43 6f 6c 75 6d 6e 29 7b 76 61 72 20 63 6c 73 4e 61 6d 65 3d 27 66 65 61 74 75 72 65 64 20 62 6c 6f 63 6b 27 3b 76 61 72 20 64 69 76 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 64 69 76 2e 63 6c 61 73 73 4e 61 6d 65 3d 63 6c 73 4e 61 6d 65 3b 64 69 76 2e 6f 6e 63 6c 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 22 68 74 74 70 73 3a 2f 2f 73 6f 66 74 77 61 72 65 2e 69 6e 66 6f 72 6d 65 72 2e 63 6f 6d 2f 67 6f 2f 67 2e 70 68 Data Ascii: 4acvar str="TopXNotes";var leftColumn=document.getElementById("leftColumn");if(leftColumn){var clsName='featured block';var div=document.createElement("div");div.className=clsName;div.onclick=function(){window.open("https://software.informer.com/go/g.ph
2025-01-15 22:20:35 UTC	159	IN	Data Raw: 76 29 3b 76 61 72 20 74 68 64 65 73 63 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 74 68 64 65 73 63 22 29 3b 69 66 28 74 68 64 65 73 63 29 74 68 64 65 73 63 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 43 72 65 61 74 65 2c 20 76 69 65 77 2c 20 6f 72 67 61 6e 69 7a 65 2c 20 73 65 63 75 72 65 2c 20 61 6e 64 20 69 6e 73 74 61 6e 74 6c 79 20 61 63 63 65 73 73 20 79 6f 75 72 20 69 6d 70 6f 72 74 61 6e 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 22 7d 0d 0a Data Ascii: v);var thdesc=document.getElementById("thdesc");if(thdesc)thdesc.innerHTML="Create, view, organize, secure, and instantly access your important information"}
2025-01-15 22:20:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49753	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:34 UTC	644	OUT	GET /images/comments-module/smiles/smile.gif HTTP/1.1 Host: img.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:34 UTC	300	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:24 GMT Content-Type: image/gif Content-Length: 1065 Last-Modified: Fri, 24 Aug 2018 10:02:54 GMT Connection: close ETag: "5b7fd7ce-429" Expires: Thu, 15 Jan 2026 21:59:24 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:34 UTC	1065	IN	Data Raw: 47 49 46 38 39 61 14 00 18 00 e6 02 00 40 34 10 ff e6 20 ff ff ff ff e2 20 fa da 1c fa de 1c ee ce 18 f6 d6 1c f2 ce 18 ee f2 f2 79 65 3c 69 55 20 e6 be 14 a1 99 7d e6 ba 14 ea c6 18 ea c2 14 a1 95 79 6d 55 08 e6 e6 e2 de de da d6 a1 0c ce 99 08 e2 b6 10 de ae 10 f2 d6 1c d2 ce c6 d6 d2 ca 91 85 61 65 50 1c 99 71 04 d6 d6 ce be 91 08 da a5 0c a5 81 0c 5d 48 14 79 69 40 9d 75 08 da ae 10 da da d2 f2 d2 18 75 65 38 d2 b2 14 61 4c 18 b6 8d 0c 6d 50 08 89 65 04 71 5d 30 69 48 08 ba 89 08 ee d2 1c c2 a5 14 da b6 14 a5 9d 85 ae 8d 10 99 7d 10 a5 99 81 a5 89 10 91 85 65 91 71 0c ae 7d 04 a1 7d 08 8d 6d 08 75 61 34 ce aa 14 de b2 10 b2 91 10 aa 85 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: GIF89a@4 ye<iU }ymUaePq]Hyi@uue8aLmPeq]0iH}eq}}mua4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49752	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:34 UTC	634	OUT	GET /icons/png/48/7048/7048274.png HTTP/1.1 Host: img.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:34 UTC	300	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:24 GMT Content-Type: image/png Content-Length: 1613 Last-Modified: Mon, 15 Jan 2024 01:24:50 GMT Connection: close ETag: "65a48962-64d" Expires: Thu, 15 Jan 2026 21:59:24 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:34 UTC	1613	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 06 14 49 44 41 54 68 81 cd 99 4f 6c 14 55 1c c7 3f 6f 66 77 0a 76 f8 23 04 e9 22 b2 8d b0 1e 84 84 c5 7a 10 b0 12 48 40 1a 4f 1a 2a 24 1e 20 c2 11 0d 26 9a 90 48 24 18 0e 16 3c 18 c5 93 46 e0 62 50 88 27 b1 55 8c d0 50 01 8d d8 c6 a0 89 2d 24 2c 25 74 11 aa 40 07 4a 67 67 e6 79 98 ee b2 cb ce df 6d 69 f8 9d 76 e7 fd e6 bd ef e7 bd df fb bd 3f 23 ee ec 99 d7 0d 64 79 78 6c e5 e4 77 72 27 86 f7 a6 bb 47 7f df 08 72 56 78 b8 c4 97 5b 16 38 3e bc 37 3d 3d c8 49 99 20 31 b5 5a 28 c4 c3 0e 00 21 10 13 07 a0 e9 88 e9 8d a0 6a b5 bc ed 0b 31 31 00 9a 8e a8 9f 05 42 20 a6 cc 19 57 88 07 0f a0 6a ae f8 a2 8d 33 c4 83 05 50 35 57 ec fd 36 8e 10 89 31 09 f4 30 51 Data Ascii: PNGIHDR00WIDAThOlU?ofwv#"zH@O*$ &H$<FbP'UP-$,%t@Jggymiv?#dyxlwr'GrVx[8>7==I 1Z(!j11B Wj3P5W610Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49751	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:34 UTC	634	OUT	GET /icons/png/48/8509/8509758.png HTTP/1.1 Host: img.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:34 UTC	300	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:24 GMT Content-Type: image/png Content-Length: 1986 Last-Modified: Fri, 02 Feb 2024 12:43:28 GMT Connection: close ETag: "65bce370-7c2" Expires: Thu, 15 Jan 2026 21:59:24 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:34 UTC	1986	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 07 89 49 44 41 54 68 81 b5 9a 6b 8c 5d 55 15 c7 7f eb 9c 73 5f bd ed 4c df 9d 76 fa a2 a6 90 88 48 31 35 12 ab c6 47 52 45 e1 83 1a c0 84 20 1a db 04 14 d4 68 30 34 25 1a 1a 49 b0 6a 7c c4 f8 45 3f 54 3f 99 f8 0d d0 00 42 42 d2 da 02 9a 14 5a 48 d4 0a 05 86 99 4e ef d8 79 76 ee bd bd f7 dc b3 fc 70 5e fb dc e7 39 d3 e9 4a ce 9c ff 3d 77 ef bd d6 da eb bf d7 5e fb dc 91 d9 fd a3 8a 08 be 28 60 e2 2e 12 3d 16 e3 43 1f 2c 5c 53 71 62 e3 43 e5 ed 06 b6 39 97 30 a8 5f df b0 5b e0 8c 5c 1b 4f ac 48 0f c9 39 d7 c0 10 6d c3 dd 5a f5 c4 aa 58 a3 d7 61 df b8 17 29 0f a1 aa 91 43 aa 71 fb ab c1 8e 39 cb 82 a2 1a 4e 56 f7 19 f3 fb a6 73 c2 b9 e5 e3 94 8f 1c 43 72 Data Ascii: PNGIHDR00WIDAThk]Us_LvH15GRE h04%Ij\|E?T?BBZHNyvp^9J=w^(`.=C,\SqbC90_[\OH9mZXa)Cq9NVsCr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49744	204.155.159.109	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:35 UTC	772	OUT	GET /log.php?id=67,70,204,8551,3957,1,8597,8691,50,46,7667,6523,6343,6385,6512,6504,9163,9561,8713,4543,291,6321,140,7241,7242,8043,6142,7117,9497,8431&urlid=&ref=&r=86110 HTTP/1.1 Host: hits.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:35 UTC	160	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 22:20:35 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-Powered-By: PHP/8.3.7
2025-01-15 22:20:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49762	172.67.43.115	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:35 UTC	558	OUT	GET /js/achecker3.js HTTP/1.1 Host: i.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:35 UTC	393	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:35 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 07 Jun 2024 08:54:12 GMT Vary: Accept-Encoding ETag: W/"6662cab4-a30" Expires: Wed, 26 Nov 2025 12:17:22 GMT Cache-Control: max-age=31536000 CF-Cache-Status: HIT Age: 1776594 Server: cloudflare CF-RAY: 90294102094cd6b1-IAD
2025-01-15 22:20:35 UTC	976	IN	Data Raw: 61 33 30 0d 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 53 74 79 6c 65 28 61 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3f 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 61 2c 22 22 29 3a 61 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 7d 66 75 6e 63 74 69 6f 6e 20 67 65 74 5f 6c 61 73 74 5f 62 6c 6f 63 6b 5f 65 6c 65 6d 65 6e 74 28 61 29 7b 76 61 72 20 65 3d 61 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 20 65 26 26 22 6e 6f 6e 65 22 3d 3d 67 65 74 53 74 79 6c 65 28 65 29 2e 64 69 73 70 6c 61 79 3f 67 65 74 5f 6c 61 73 74 5f 62 6c 6f 63 6b 5f 65 6c 65 6d 65 6e 74 28 65 29 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 73 68 6f 77 5f 70 61 72 65 6e 74 28 61 29 7b 61 2e 73 74 79 6c 65 2e 73 65 74 50 72 Data Ascii: a30function getStyle(a){return window.getComputedStyle?getComputedStyle(a,""):a.currentStyle}function get_last_block_element(a){var e=a.parentElement;return e&&"none"==getStyle(e).display?get_last_block_element(e):a}function show_parent(a){a.style.setPr
2025-01-15 22:20:35 UTC	1369	IN	Data Raw: 29 2f 2c 66 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 69 65 6e 74 57 69 64 74 68 3b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 61 63 68 65 63 6b 65 72 3a 22 2b 61 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 69 66 28 21 61 5b 62 5d 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 63 6c 61 73 73 4e 61 6d 65 2e 69 6e 63 6c 75 64 65 73 28 22 61 61 2d 22 29 29 7b 61 5b 62 5d 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 26 26 28 61 5b 62 5d 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 61 75 74 6f 22 29 3b 76 61 72 20 67 3d 30 3c 3d 61 5b 62 5d Data Ascii: )/,f=window.innerWidth\|\|document.documentElement.clientWidth\|\|document.body.clientWidth;console.log("achecker:"+a.length);for(var b=0;b<a.length;b++)if(!a[b].parentNode.className.includes("aa-")){a[b].style.height&&(a[b].style.height="auto");var g=0<=a[b]
2025-01-15 22:20:35 UTC	270	IN	Data Raw: 72 61 6d 65 22 29 3b 65 2e 6c 65 6e 67 74 68 26 26 28 24 6a 28 22 2e 74 6f 70 5f 62 22 29 2e 63 73 73 28 7b 6f 76 65 72 66 6c 6f 77 3a 22 76 69 73 69 62 6c 65 22 7d 29 2c 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 66 29 7b 6e 75 6c 6c 21 3d 3d 66 26 26 28 66 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 39 30 70 78 22 2c 66 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 28 66 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 66 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 2b 22 70 78 22 29 7d 29 29 7d 24 6a 28 77 69 6e 64 6f 77 29 2e 72 65 73 69 7a 65 28 61 29 3b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 Data Ascii: rame");e.length&&($j(".top_b").css({overflow:"visible"}),e.forEach(function(f){null!==f&&(f.style.height="90px",f.style.height=(f.contentDocument\|\|f.contentWindow.document).documentElement.scrollHeight+"px")}))}$j(window).resize(a);setTimeout(function(){a
2025-01-15 22:20:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49763	172.67.43.115	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:35 UTC	351	OUT	GET /js/footer4.js HTTP/1.1 Host: i.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:35 UTC	393	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:35 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 27 Nov 2024 14:00:37 GMT Vary: Accept-Encoding ETag: W/"67472605-e4e" Expires: Fri, 19 Dec 2025 12:46:52 GMT Cache-Control: max-age=31536000 CF-Cache-Status: HIT Age: 1679948 Server: cloudflare CF-RAY: 9029410249943b0b-IAD
2025-01-15 22:20:35 UTC	976	IN	Data Raw: 65 34 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 0a 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 6a 73 70 61 72 61 6d 73 20 21 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 70 6c 61 74 66 6f 72 6d 5f 72 65 20 3d 20 2f 28 73 6f 66 74 77 61 72 65 7c 6c 69 6e 75 78 7c 6d 61 63 64 6f 77 6e 6c 6f 61 64 29 5c 2e 69 6e 66 6f 72 6d 65 72 5c 2e 63 6f 6d 2f 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6d 61 74 63 68 65 73 20 3d 20 70 6c 61 74 66 6f 72 6d 5f 72 65 2e 65 78 65 63 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 6d 61 69 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 70 6c 61 74 66 6f 72 6d 30 20 3d 20 22 73 6f 66 74 77 61 72 65 22 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 6d Data Ascii: e4e(function() { if (typeof jsparams != 'undefined') { var platform_re = /(software\|linux\|macdownload)\.informer\.com/; var matches = platform_re.exec(document.domain.toLowerCase()); var platform0 = "software"; if (m
2025-01-15 22:20:35 UTC	1369	IN	Data Raw: 6f 6c 65 2e 6c 6f 67 28 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 29 0a 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 27 27 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 72 2e 69 6e 64 65 78 4f 66 28 22 67 6f 6f 67 6c 65 2e 22 29 20 3e 20 30 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 70 6c 61 74 66 6f 72 6d 30 20 3d 3d 20 27 73 6f 66 74 77 61 72 65 27 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 73 70 61 72 61 6d 73 20 2b 3d 20 22 2c 38 37 30 36 22 3b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: ole.log(document.referrer) var r = ''; if (document.referrer) { r = document.referrer; if (r.indexOf("google.") > 0) { if (platform0 == 'software') jsparams += ",8706";
2025-01-15 22:20:35 UTC	1324	IN	Data Raw: 69 6e 64 65 78 4f 66 28 22 79 61 6e 64 65 78 2e 22 29 20 3e 20 30 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 70 6c 61 74 66 6f 72 6d 30 20 3d 3d 20 27 73 6f 66 74 77 61 72 65 27 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 73 70 61 72 61 6d 73 20 2b 3d 20 22 2c 38 36 35 37 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 70 6c 61 74 66 6f 72 6d 30 20 3d 3d 20 27 6d 61 63 64 6f 77 6e 6c 6f 61 64 27 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 73 70 61 72 61 6d 73 20 2b 3d 20 22 2c 38 36 38 36 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 72 2e 69 6e 64 65 78 4f 66 28 22 62 69 6e 67 2e 63 6f 6d 22 29 20 3e 20 30 29 20 7b 0a 20 20 Data Ascii: indexOf("yandex.") > 0) { if (platform0 == 'software') jsparams += ",8657"; if (platform0 == 'macdownload') jsparams += ",8686"; } else if (r.indexOf("bing.com") > 0) {
2025-01-15 22:20:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49764	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:35 UTC	634	OUT	GET /icons/png/48/3243/3243680.png HTTP/1.1 Host: img.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:35 UTC	300	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:25 GMT Content-Type: image/png Content-Length: 1829 Last-Modified: Thu, 25 Jan 2024 08:16:56 GMT Connection: close ETag: "65b218f8-725" Expires: Thu, 15 Jan 2026 21:59:25 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:35 UTC	1829	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 06 ec 49 44 41 54 68 81 d5 9a 5b 6c 54 d5 1a c7 7f 6b cf a5 d7 99 81 ca c5 d2 82 9e 07 0a e9 d8 36 35 f1 98 2a fa 22 97 60 62 e2 2d 62 44 7d 31 a2 26 62 cd a1 be 8c 07 1f 14 c5 8c 94 f8 60 30 fa a0 21 26 5a ad 26 24 a6 45 d4 27 28 4f c4 a0 2d 87 72 92 92 43 47 d4 02 ce 30 33 bd 4d a7 33 6b 9d 87 ce 1e 76 f7 ec 99 bd 5b 06 a9 5f b2 b2 6e df ac ef ff 5f df 7f ed b5 93 3d 42 29 85 10 42 03 8c 65 a9 99 d4 8b 52 4a 1a 27 04 e0 06 bc 47 76 ec 98 dc d2 d7 87 04 54 ce bb a0 56 aa f4 7c 09 3f 4b 5f a5 ec d7 32 f8 6d 49 a5 6a 80 b4 52 2a a3 13 70 03 5e a0 fa 4c 4b 0b 0a d8 dc d7 57 a6 4d 2b 6d 2a 07 2a df b7 28 ba 1f d7 fa d5 00 42 88 7c 26 34 e6 08 f8 a5 94 0c Data Ascii: PNGIHDR00WIDATh[lTk65"`b-bD}1&b`0!&Z&$E'(O-rCG03M3kv[_n_=B)BeRJ'GvTV\|?K_2mIjRp^LKWM+m**(B\|&4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49765	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:35 UTC	634	OUT	GET /icons/png/48/8336/8336687.png HTTP/1.1 Host: img.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:35 UTC	300	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:25 GMT Content-Type: image/png Content-Length: 1955 Last-Modified: Wed, 24 Jan 2024 09:58:12 GMT Connection: close ETag: "65b0df34-7a3" Expires: Thu, 15 Jan 2026 21:59:25 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:35 UTC	1955	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 07 6a 49 44 41 54 68 81 ed 9a 6b 50 94 d7 19 c7 7f ef be 2f bb 0b ec c2 e2 02 0b 72 df 88 22 20 97 72 33 58 11 b1 c5 49 1b b5 1d db 4c f2 a1 93 71 f2 a1 4e 3b d3 49 33 6d d2 31 6d 27 6d 63 3b cd 87 36 49 a7 9d 90 d6 74 88 b5 8e 69 9a 68 48 c6 c6 78 01 15 45 bc a1 ae ca a0 72 57 b9 2e f7 bd c1 ee db 0f 2b 8b 94 05 77 97 65 92 ce e4 ff 6d cf 39 cf f3 7f 9e 3d e7 79 ce 7b ce 73 04 59 96 01 c8 7e f9 a4 06 f8 11 f0 0c 90 09 28 f8 62 c1 05 34 03 fb 80 37 4d bb cb c6 01 04 59 96 c9 7e f9 a4 11 38 0c ac 0c 26 e3 b2 e8 70 62 0d 11 dc 6a ee c5 e9 74 05 53 75 0b f0 84 69 77 59 ab 90 b5 ab 4e 03 5c 24 88 c6 ab d5 21 14 94 a4 90 91 1d 8f 42 21 60 1e 9c e0 dc e9 56 Data Ascii: PNGIHDR00WjIDAThkP/r" r3XILqN;I3m1m'mc;6ItihHxErW.+wem9=y{sY~(b47MY~8&pbjtSuiwYN\$!B!`V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49766	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:35 UTC	602	OUT	GET /images/v2/elements.png HTTP/1.1 Host: img.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:35 UTC	300	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:25 GMT Content-Type: image/png Content-Length: 2983 Last-Modified: Wed, 17 Apr 2019 08:41:52 GMT Connection: close ETag: "5cb6e6d0-ba7" Expires: Thu, 15 Jan 2026 21:59:25 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:35 UTC	2983	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 02 fa 08 03 00 00 00 96 d7 21 3e 00 00 01 17 50 4c 54 45 00 00 00 95 9a a0 96 9a a0 96 9a a0 96 9a a0 95 9a a0 96 9a a0 95 9a a0 96 9a a0 96 9a a0 96 9a a0 96 9a a0 95 9a a0 1c 58 a2 f8 30 29 7b 00 98 2a a9 e0 ff ff ff 96 9a a0 34 54 8f 39 5a 95 27 54 a1 c4 c4 c5 cb d6 e9 ff 92 89 ff f3 f2 f2 f7 fb fa 41 38 e5 ee f7 e3 c2 e7 2e 62 a8 a1 b5 d6 ff ea e9 ff 9e 97 ff 77 6e f8 ef fa fe 5c 52 ff f9 f9 cc e3 f3 87 a1 cc 40 6d af fe 69 5f ff ce ca 5d 82 ba a1 46 b2 ff 85 7d 79 96 c5 fc 4e 45 ff ad a6 45 b1 e3 ff b6 b1 8f 99 ae ff da d7 b0 da f2 ff c1 bd 81 0b 9b 6e 8d c1 8c 20 a3 68 bc e7 b3 b7 c0 a9 55 b9 d6 eb f8 ea d3 ee 2f 4e 85 f1 e1 f4 95 31 aa 97 cf ee be cc e5 ff e1 df 6d 7f a4 54 6b 9b 83 Data Ascii: PNGIHDRP!>PLTEX0){*4T9Z'TA8.bwn\R@mi_]F}yNEEn hU/N1mTk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49767	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:35 UTC	634	OUT	GET /icons/png/48/5860/5860964.png HTTP/1.1 Host: img.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:35 UTC	300	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:25 GMT Content-Type: image/png Content-Length: 1954 Last-Modified: Sun, 14 Jan 2024 07:38:23 GMT Connection: close ETag: "65a38f6f-7a2" Expires: Thu, 15 Jan 2026 21:59:25 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:35 UTC	1954	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 07 69 49 44 41 54 68 81 d5 9a 5d 6c 53 e7 19 c7 7f fe ca f1 39 0e 87 13 d3 60 60 a1 81 0e 13 26 54 27 51 d5 40 2b 8a 42 53 50 a2 56 6a 57 35 6d b7 31 4a b5 0b c4 87 26 34 a6 49 88 7d 65 dd 2e 7a 31 41 41 59 97 9b 8e 44 dd 45 05 0b aa 56 a2 08 51 b2 69 ac c4 48 15 d8 ad 6a 42 54 5a 0b 87 26 6b 62 8c e3 cf c4 c6 bb f0 ec e6 cc c7 c7 76 12 10 fd 5f f9 bc cf 7b de f3 fc df af ff fb 3c af 0d fb d6 ed bb 02 34 f1 e0 60 5b f7 68 f7 3f f6 3b f7 5f f9 df ef 90 5e 65 23 0f 96 f3 73 d1 04 0c ed 77 ee 57 f4 2a 19 ef 93 33 f3 45 49 12 0f 3a 01 28 41 42 45 a0 b6 be 16 f9 21 99 2a b1 ea be 78 56 01 8a 92 50 11 08 7f 1d c6 5a 6d 45 71 28 d4 ac ac 79 d0 88 68 92 50 11 Data Ascii: PNGIHDR00WiIDATh]lS9``&T'Q@+BSPVjW5m1J&4I}e.z1AAYDEVQiHjBTZ&kbv_{<4`[h?;_^e#swW3EI:(ABE!xVPZmEq(yhP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49768	104.22.17.194	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:35 UTC	635	OUT	GET /ajax/log_hit4.php?r=20025 HTTP/1.1 Host: software.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:35 UTC	381	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:35 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-Robots-Tag: noindex, nofollow Expires: Wed, 14 Jan 2026 10:25:41 GMT Pragma: cache Cache-Control: max-age=31622400 Last-Modified: Mon, 13 Jan 2025 10:25:41 GMT CF-Cache-Status: HIT Accept-Ranges: bytes Server: cloudflare CF-RAY: 90294102c9d03afa-IAD
2025-01-15 22:20:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49771	104.22.16.194	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:35 UTC	395	OUT	GET /images/v4/empty_stars.svg HTTP/1.1 Host: nuance-pdf-professional2.software.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:35 UTC	381	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:35 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 07 Jun 2024 08:54:12 GMT Vary: Accept-Encoding ETag: W/"6662cab4-693" Expires: Wed, 15 Jan 2025 19:05:00 GMT Cache-Control: max-age=604800 CF-Cache-Status: HIT Age: 397537 Server: cloudflare CF-RAY: 90294102cbb2c985-IAD
2025-01-15 22:20:35 UTC	988	IN	Data Raw: 36 39 33 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 61 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 31 22 20 68 65 69 67 68 74 3d 22 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 31 20 32 30 22 3e 3c 70 61 74 68 20 64 3d 22 6d 31 30 2e 35 38 2c 33 2e 33 38 6c 31 2e 38 34 2c 33 2e 38 35 2e 33 31 2e 37 37 2e 37 37 2e 31 35 2c 34 2e 31 34 2e 36 32 2d 32 2e 39 31 2c 32 2e 39 32 2d 2e 36 31 2e 34 36 2e 31 35 2e 37 37 2e 37 37 2c 34 2e 31 35 2d 33 2e 36 38 2d 31 2e 38 35 2d 2e 37 37 2d 2e 33 31 2d 2e 37 37 2e 33 31 2d 33 2e 38 33 2c 32 2c 2e 37 37 2d 34 2e Data Ascii: 693<?xml version="1.0" encoding="UTF-8"?><svg id="a" xmlns="http://www.w3.org/2000/svg" width="121" height="20" viewBox="0 0 121 20"><path d="m10.58,3.38l1.84,3.85.31.77.77.15,4.14.62-2.91,2.92-.61.46.15.77.77,4.15-3.68-1.85-.77-.31-.77.31-3.83,2,.77-4.
2025-01-15 22:20:35 UTC	702	IN	Data Raw: 38 2c 36 2e 34 34 2c 33 2e 33 38 2d 31 2e 32 33 2d 37 2e 32 33 2c 35 2e 32 31 2d 35 2e 30 38 2d 37 2e 32 2d 31 2e 30 38 2d 33 2e 32 32 2d 36 2e 36 32 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 66 36 36 3b 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 38 35 2e 35 38 2c 33 2e 33 38 6c 31 2e 38 34 2c 33 2e 38 35 2e 33 31 2e 37 37 2e 37 37 2e 31 35 2c 34 2e 31 34 2e 36 32 2d 32 2e 39 31 2c 32 2e 39 32 2d 2e 36 31 2e 34 36 2e 31 35 2e 37 37 2e 37 37 2c 34 2e 31 35 2d 33 2e 36 38 2d 31 2e 38 35 2d 2e 37 37 2d 2e 33 31 2d 2e 37 37 2e 33 31 2d 33 2e 38 33 2c 32 2c 2e 37 37 2d 34 2e 31 35 2e 31 35 2d 2e 37 37 2d 2e 36 31 2d 2e 36 32 2d 33 2e 30 37 2d 32 2e 39 32 2c 34 2e 31 34 2d 2e 36 32 2e 37 37 2d 2e 31 35 2e 33 31 2d 2e 37 37 2c 32 2e 31 35 2d 33 2e 38 35 5a 6d Data Ascii: 8,6.44,3.38-1.23-7.23,5.21-5.08-7.2-1.08-3.22-6.62Z" style="fill:#f66;"/><path d="m85.58,3.38l1.84,3.85.31.77.77.15,4.14.62-2.91,2.92-.61.46.15.77.77,4.15-3.68-1.85-.77-.31-.77.31-3.83,2,.77-4.15.15-.77-.61-.62-3.07-2.92,4.14-.62.77-.15.31-.77,2.15-3.85Zm
2025-01-15 22:20:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49770	172.67.43.115	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:35 UTC	351	OUT	GET /js/onexit9.js HTTP/1.1 Host: i.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:35 UTC	394	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:35 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 07 Jun 2024 08:54:12 GMT Vary: Accept-Encoding ETag: W/"6662cab4-18d2" Expires: Thu, 27 Nov 2025 22:42:10 GMT Cache-Control: max-age=31536000 CF-Cache-Status: HIT Age: 4232305 Server: cloudflare CF-RAY: 902941037adf2fe8-DFW
2025-01-15 22:20:35 UTC	975	IN	Data Raw: 31 38 64 32 0d 0a 76 61 72 20 65 67 5f 77 69 64 74 68 3d 32 35 34 3b 0a 76 61 72 20 65 67 5f 68 65 69 67 68 74 3d 33 34 35 3b 0a 76 61 72 20 65 67 5f 62 6f 72 64 65 72 63 6f 6c 6f 72 3d 27 23 65 34 65 34 65 34 27 3b 0a 76 61 72 20 65 67 5f 62 67 54 69 74 6c 65 3d 27 23 66 30 66 30 66 30 27 3b 0a 76 61 72 20 65 67 5f 74 69 6d 65 6f 75 74 3d 30 3b 0a 76 61 72 20 65 67 5f 64 69 73 61 62 6c 65 5f 73 63 72 6f 6c 6c 62 61 72 3d 66 61 6c 73 65 3b 0a 76 61 72 20 6d 79 57 69 64 74 68 3d 30 3b 0a 76 61 72 20 6d 79 48 65 69 67 68 74 3d 30 3b 0a 76 61 72 20 6f 70 65 6e 65 64 3d 66 61 6c 73 65 3b 0a 76 61 72 20 69 73 5f 69 6e 3d 66 61 6c 73 65 3b 0a 76 61 72 20 65 67 77 69 6e 64 3d 6e 75 6c 6c 3b 0a 76 61 72 20 65 67 5f 78 3d 31 30 30 3b 0a 76 61 72 20 65 67 5f 79 3d Data Ascii: 18d2var eg_width=254;var eg_height=345;var eg_bordercolor='#e4e4e4';var eg_bgTitle='#f0f0f0';var eg_timeout=0;var eg_disable_scrollbar=false;var myWidth=0;var myHeight=0;var opened=false;var is_in=false;var egwind=null;var eg_x=100;var eg_y=
2025-01-15 22:20:35 UTC	1369	IN	Data Raw: 79 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 0a 09 7d 0a 09 76 61 72 20 70 6f 73 78 3d 30 3b 0a 09 76 61 72 20 70 6f 73 79 3d 30 3b 0a 09 69 66 28 21 65 29 76 61 72 20 65 3d 77 69 6e 64 6f 77 2e 65 76 65 6e 74 3b 0a 0a 09 73 63 72 6f 6c 6c 54 6f 70 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 54 6f 70 0a 0a 09 69 66 20 28 2f 53 61 66 61 72 69 2f 69 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 29 0a 09 7b 0a 09 09 73 63 72 6f 6c 6c 54 6f 70 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 54 6f 70 0a 09 09 70 6f 73 78 3d 65 2e 70 61 67 65 58 2d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 4c 65 66 74 3b 0a 09 09 70 6f 73 79 3d 65 2e 70 Data Ascii: y.clientHeight}var posx=0;var posy=0;if(!e)var e=window.event;scrollTop = document.body.scrollTopif (/Safari/i.test(navigator.userAgent)){scrollTop = document.documentElement.scrollTopposx=e.pageX-document.body.scrollLeft;posy=e.p
2025-01-15 22:20:35 UTC	1369	IN	Data Raw: 29 20 7b 20 65 67 5f 69 6e 69 74 28 29 20 7d 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 65 67 5f 69 6e 69 74 28 29 0a 7b 0a 09 76 61 72 20 73 74 6f 72 65 64 48 61 73 68 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 3b 0a 09 69 66 20 28 73 74 6f 72 65 64 48 61 73 68 20 3d 3d 20 27 23 67 6f 6f 67 6c 65 5f 76 69 67 6e 65 74 74 65 27 29 20 72 65 74 75 72 6e 3b 0a 0a 09 24 6a 28 22 62 6f 64 79 22 29 2e 6b 65 79 64 6f 77 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 0a 09 09 76 61 72 20 63 6f 64 65 20 3d 20 65 2e 6b 65 79 43 6f 64 65 20 7c 7c 20 65 2e 77 68 69 63 68 3b 0a 09 09 69 66 28 63 6f 64 65 20 3d 3d 20 32 37 29 20 7b 20 2f 2f 65 73 63 61 70 65 20 70 72 65 73 73 65 64 0a 09 09 09 63 6c 6f 73 65 57 69 6e 64 6f 77 28 29 0a 09 09 7d 0a 09 7d Data Ascii: ) { eg_init() });function eg_init(){var storedHash = window.location.hash;if (storedHash == '#google_vignette') return;$j("body").keydown(function(e){var code = e.keyCode \|\| e.which;if(code == 27) { //escape pressedcloseWindow()}}
2025-01-15 22:20:35 UTC	1369	IN	Data Raw: 76 61 73 63 72 69 70 74 3a 76 6f 69 64 28 30 29 22 20 6f 6e 63 6c 69 63 6b 3d 22 63 6c 6f 73 65 57 69 6e 64 6f 77 28 29 3b 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 5f 64 65 63 6c 69 6e 65 22 3e 4e 6f 20 74 68 61 6e 6b 73 2c 20 49 20 64 6f 6e 5c 27 74 20 77 61 6e 74 20 74 6f 20 6c 6f 6f 6b 20 61 6e 79 20 66 75 72 74 68 65 72 3c 2f 61 3e 27 0a 2b 20 27 09 09 09 3c 2f 64 69 76 3e 27 0a 2b 20 27 09 09 09 3c 61 20 68 72 65 66 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 76 6f 69 64 28 30 29 22 20 6f 6e 63 6c 69 63 6b 3d 22 63 6c 6f 73 65 57 69 6e 64 6f 77 28 29 3b 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 20 63 6c 61 73 73 3d 22 63 6c 6f 73 65 5f 62 74 6e 22 3e 3c 2f 61 3e 27 0a 2b 20 27 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 6f 70 5f 75 70 5f 62 6f 74 74 Data Ascii: vascript:void(0)" onclick="closeWindow();" class="link_decline">No thanks, I don\'t want to look any further</a>'+ '</div>'+ '<a href="javascript:void(0)" onclick="closeWindow(); return false;" class="close_btn"></a>'+ '<div class="pop_up_bott
2025-01-15 22:20:35 UTC	1280	IN	Data Raw: 29 2e 66 61 64 65 49 6e 28 31 30 30 29 3b 0a 09 24 6a 28 22 68 74 6d 6c 22 29 2e 63 73 73 28 22 6f 76 65 72 66 6c 6f 77 22 2c 22 68 69 64 64 65 6e 22 29 3b 0a 0a 09 69 66 28 65 67 5f 64 69 73 61 62 6c 65 5f 73 63 72 6f 6c 6c 62 61 72 29 0a 09 09 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 3d 27 68 69 64 64 65 6e 27 3b 0a 09 69 66 28 65 67 5f 74 69 6d 65 6f 75 74 3e 30 29 7b 0a 09 09 61 75 74 6f 63 6c 6f 73 65 3d 73 65 74 54 69 6d 65 6f 75 74 28 22 63 6c 6f 73 65 57 69 6e 64 6f 77 28 29 22 2c 65 67 5f 74 69 6d 65 6f 75 74 29 0a 09 7d 0a 09 63 68 65 63 6b 5f 76 69 67 6e 65 74 74 65 28 29 3b 0a 09 72 65 74 75 72 6e 20 66 61 6c 73 65 0a 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 63 6c 6f 73 65 57 69 6e 64 6f 77 28 29 0a 7b 0a Data Ascii: ).fadeIn(100);$j("html").css("overflow","hidden");if(eg_disable_scrollbar)document.body.style.overflow='hidden';if(eg_timeout>0){autoclose=setTimeout("closeWindow()",eg_timeout)}check_vignette();return false};function closeWindow(){
2025-01-15 22:20:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49774	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:35 UTC	369	OUT	GET /icons/png/48/5524/5524797.png HTTP/1.1 Host: img.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:35 UTC	300	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:25 GMT Content-Type: image/png Content-Length: 3627 Last-Modified: Thu, 25 Jan 2024 22:39:18 GMT Connection: close ETag: "65b2e316-e2b" Expires: Thu, 15 Jan 2026 21:59:25 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:35 UTC	3627	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 0d f2 49 44 41 54 68 81 cd 9a 7b 6c 5c d5 9d c7 3f e7 9c 7b ef 3c ed 19 3b 36 26 09 0e 56 1c 88 93 90 c4 69 03 d9 a5 15 24 40 29 94 14 92 ae 76 b5 5d c5 c1 fb 14 2f 01 d1 4a bb a2 ab 2d b0 ea 22 fe 58 6d 5a 75 a5 ee 1f 2b 05 48 0a 62 fb 20 2d a4 bb 45 a4 38 65 05 14 c2 c6 84 90 00 55 c0 79 d8 b1 09 89 27 7e ce dc c7 39 fb c7 bd 73 67 c6 1e bb bc b4 ea 95 ae c6 b9 73 ef b9 bf cf f9 bd be e7 4c 84 31 86 cf 7a ec fa d1 0b dd 06 b3 d5 68 73 8d 36 ba c3 18 d3 61 00 63 0c c6 94 3f 0d c6 98 7e 8c e9 37 c6 1c 30 b0 f7 de de db 0a 9f f5 dd e2 d3 02 ec d9 fb 62 de 18 b3 c3 18 b3 1d 64 87 95 48 20 95 85 b2 6c 94 6d a3 23 c3 cb 9f 81 ef e3 fb 3e 7e a9 88 5b 9c c2 Data Ascii: PNGIHDR00WIDATh{l\?{<;6&Vi$@)v]/J-"XmZu+Hb -E8eUy'~9sgsL1zhs6ac?~70bdH lm#>~[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49776	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:35 UTC	356	OUT	GET /images/empty.gif HTTP/1.1 Host: img.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:35 UTC	297	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:25 GMT Content-Type: image/gif Content-Length: 43 Last-Modified: Fri, 24 Aug 2018 10:02:53 GMT Connection: close ETag: "5b7fd7cd-2b" Expires: Thu, 15 Jan 2026 21:59:25 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49775	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:35 UTC	356	OUT	GET /images/blank.gif HTTP/1.1 Host: img.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:36 UTC	297	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:25 GMT Content-Type: image/gif Content-Length: 43 Last-Modified: Fri, 24 Aug 2018 10:02:53 GMT Connection: close ETag: "5b7fd7cd-2b" Expires: Thu, 15 Jan 2026 21:59:25 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49778	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:35 UTC	379	OUT	GET /images/comments-module/smiles/smile.gif HTTP/1.1 Host: img.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:36 UTC	300	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:25 GMT Content-Type: image/gif Content-Length: 1065 Last-Modified: Fri, 24 Aug 2018 10:02:54 GMT Connection: close ETag: "5b7fd7ce-429" Expires: Thu, 15 Jan 2026 21:59:25 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:36 UTC	1065	IN	Data Raw: 47 49 46 38 39 61 14 00 18 00 e6 02 00 40 34 10 ff e6 20 ff ff ff ff e2 20 fa da 1c fa de 1c ee ce 18 f6 d6 1c f2 ce 18 ee f2 f2 79 65 3c 69 55 20 e6 be 14 a1 99 7d e6 ba 14 ea c6 18 ea c2 14 a1 95 79 6d 55 08 e6 e6 e2 de de da d6 a1 0c ce 99 08 e2 b6 10 de ae 10 f2 d6 1c d2 ce c6 d6 d2 ca 91 85 61 65 50 1c 99 71 04 d6 d6 ce be 91 08 da a5 0c a5 81 0c 5d 48 14 79 69 40 9d 75 08 da ae 10 da da d2 f2 d2 18 75 65 38 d2 b2 14 61 4c 18 b6 8d 0c 6d 50 08 89 65 04 71 5d 30 69 48 08 ba 89 08 ee d2 1c c2 a5 14 da b6 14 a5 9d 85 ae 8d 10 99 7d 10 a5 99 81 a5 89 10 91 85 65 91 71 0c ae 7d 04 a1 7d 08 8d 6d 08 75 61 34 ce aa 14 de b2 10 b2 91 10 aa 85 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: GIF89a@4 ye<iU }ymUaePq]Hyi@uue8aLmPeq]0iH}eq}}mua4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49777	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:35 UTC	369	OUT	GET /icons/png/48/7048/7048274.png HTTP/1.1 Host: img.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:36 UTC	300	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:25 GMT Content-Type: image/png Content-Length: 1613 Last-Modified: Mon, 15 Jan 2024 01:24:50 GMT Connection: close ETag: "65a48962-64d" Expires: Thu, 15 Jan 2026 21:59:25 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:36 UTC	1613	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 06 14 49 44 41 54 68 81 cd 99 4f 6c 14 55 1c c7 3f 6f 66 77 0a 76 f8 23 04 e9 22 b2 8d b0 1e 84 84 c5 7a 10 b0 12 48 40 1a 4f 1a 2a 24 1e 20 c2 11 0d 26 9a 90 48 24 18 0e 16 3c 18 c5 93 46 e0 62 50 88 27 b1 55 8c d0 50 01 8d d8 c6 a0 89 2d 24 2c 25 74 11 aa 40 07 4a 67 67 e6 79 98 ee b2 cb ce df 6d 69 f8 9d 76 e7 fd e6 bd ef e7 bd df fb bd 3f 23 ee ec 99 d7 0d 64 79 78 6c e5 e4 77 72 27 86 f7 a6 bb 47 7f df 08 72 56 78 b8 c4 97 5b 16 38 3e bc 37 3d 3d c8 49 99 20 31 b5 5a 28 c4 c3 0e 00 21 10 13 07 a0 e9 88 e9 8d a0 6a b5 bc ed 0b 31 31 00 9a 8e a8 9f 05 42 20 a6 cc 19 57 88 07 0f a0 6a ae f8 a2 8d 33 c4 83 05 50 35 57 ec fd 36 8e 10 89 31 09 f4 30 51 Data Ascii: PNGIHDR00WIDAThOlU?ofwv#"zH@O*$ &H$<FbP'UP-$,%t@Jggymiv?#dyxlwr'GrVx[8>7==I 1Z(!j11B Wj3P5W610Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49773	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:35 UTC	369	OUT	GET /icons/png/48/8509/8509758.png HTTP/1.1 Host: img.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:36 UTC	300	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:25 GMT Content-Type: image/png Content-Length: 1986 Last-Modified: Fri, 02 Feb 2024 12:43:28 GMT Connection: close ETag: "65bce370-7c2" Expires: Thu, 15 Jan 2026 21:59:25 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:36 UTC	1986	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 07 89 49 44 41 54 68 81 b5 9a 6b 8c 5d 55 15 c7 7f eb 9c 73 5f bd ed 4c df 9d 76 fa a2 a6 90 88 48 31 35 12 ab c6 47 52 45 e1 83 1a c0 84 20 1a db 04 14 d4 68 30 34 25 1a 1a 49 b0 6a 7c c4 f8 45 3f 54 3f 99 f8 0d d0 00 42 42 d2 da 02 9a 14 5a 48 d4 0a 05 86 99 4e ef d8 79 76 ee bd bd f7 dc b3 fc 70 5e fb dc e7 39 d3 e9 4a ce 9c ff 3d 77 ef bd d6 da eb bf d7 5e fb dc 91 d9 fd a3 8a 08 be 28 60 e2 2e 12 3d 16 e3 43 1f 2c 5c 53 71 62 e3 43 e5 ed 06 b6 39 97 30 a8 5f df b0 5b e0 8c 5c 1b 4f ac 48 0f c9 39 d7 c0 10 6d c3 dd 5a f5 c4 aa 58 a3 d7 61 df b8 17 29 0f a1 aa 91 43 aa 71 fb ab c1 8e 39 cb 82 a2 1a 4e 56 f7 19 f3 fb a6 73 c2 b9 e5 e3 94 8f 1c 43 72 Data Ascii: PNGIHDR00WIDAThk]Us_LvH15GRE h04%Ij\|E?T?BBZHNyvp^9J=w^(`.=C,\SqbC90_[\OH9mZXa)Cq9NVsCr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49772	172.67.43.115	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:35 UTC	383	OUT	GET /js/cache/hilight_software_v4.js?rnd=824406174 HTTP/1.1 Host: i.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:36 UTC	325	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:36 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 15 Jan 2025 22:20:02 GMT ETag: W/"67883492-4ac" X-Robots-Tag: noindex CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 902941062e556b2f-DFW
2025-01-15 22:20:36 UTC	1044	IN	Data Raw: 34 61 63 0d 0a 76 61 72 20 73 74 72 3d 22 54 6f 70 58 4e 6f 74 65 73 22 3b 76 61 72 20 6c 65 66 74 43 6f 6c 75 6d 6e 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6c 65 66 74 43 6f 6c 75 6d 6e 22 29 3b 69 66 28 6c 65 66 74 43 6f 6c 75 6d 6e 29 7b 76 61 72 20 63 6c 73 4e 61 6d 65 3d 27 66 65 61 74 75 72 65 64 20 62 6c 6f 63 6b 27 3b 76 61 72 20 64 69 76 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 64 69 76 2e 63 6c 61 73 73 4e 61 6d 65 3d 63 6c 73 4e 61 6d 65 3b 64 69 76 2e 6f 6e 63 6c 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 22 68 74 74 70 73 3a 2f 2f 73 6f 66 74 77 61 72 65 2e 69 6e 66 6f 72 6d 65 72 2e 63 6f 6d 2f 67 6f 2f 67 2e 70 68 Data Ascii: 4acvar str="TopXNotes";var leftColumn=document.getElementById("leftColumn");if(leftColumn){var clsName='featured block';var div=document.createElement("div");div.className=clsName;div.onclick=function(){window.open("https://software.informer.com/go/g.ph
2025-01-15 22:20:36 UTC	159	IN	Data Raw: 76 29 3b 76 61 72 20 74 68 64 65 73 63 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 74 68 64 65 73 63 22 29 3b 69 66 28 74 68 64 65 73 63 29 74 68 64 65 73 63 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 43 72 65 61 74 65 2c 20 76 69 65 77 2c 20 6f 72 67 61 6e 69 7a 65 2c 20 73 65 63 75 72 65 2c 20 61 6e 64 20 69 6e 73 74 61 6e 74 6c 79 20 61 63 63 65 73 73 20 79 6f 75 72 20 69 6d 70 6f 72 74 61 6e 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 22 7d 0d 0a Data Ascii: v);var thdesc=document.getElementById("thdesc");if(thdesc)thdesc.innerHTML="Create, view, organize, secure, and instantly access your important information"}
2025-01-15 22:20:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49780	204.155.159.109	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:35 UTC	507	OUT	GET /log.php?id=67,70,204,8551,3957,1,8597,8691,50,46,7667,6523,6343,6385,6512,6504,9163,9561,8713,4543,291,6321,140,7241,7242,8043,6142,7117,9497,8431&urlid=&ref=&r=86110 HTTP/1.1 Host: hits.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:36 UTC	160	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 22:20:36 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-Powered-By: PHP/8.3.7
2025-01-15 22:20:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49779	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:35 UTC	634	OUT	GET /icons/png/48/1866/1866515.png HTTP/1.1 Host: img.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:36 UTC	300	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:25 GMT Content-Type: image/png Content-Length: 3912 Last-Modified: Sat, 22 Jul 2023 05:17:57 GMT Connection: close ETag: "64bb6685-f48" Expires: Thu, 15 Jan 2026 21:59:25 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:36 UTC	3912	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 0f 0f 49 44 41 54 68 81 d5 9a 7b 7c 1c d5 75 c7 bf 77 76 76 b5 da 5d ad a4 b5 24 cb b2 2c 24 23 0b 63 0c 76 8c 01 c7 31 cf d8 0e 24 4e 5b c0 24 40 08 6f 3e d0 36 09 10 43 09 25 7c 1c c7 4d 93 b8 e4 49 02 79 34 01 0c 31 a1 84 06 68 08 04 02 38 89 79 25 44 96 1f c8 d8 c8 c6 c8 92 ad b7 f6 bd b3 b3 33 f7 f4 8f 91 8c 65 3d 2c 4c 93 b6 e7 f3 b9 9f dd 9d b9 f7 9c df ef dc 73 cf 3d 77 66 95 88 f0 ff 59 8c c9 76 bc f1 f2 b2 05 a7 1c 5f 14 fa 4b 82 39 2a 11 91 49 b5 dd 7f 68 f8 8d f5 c7 fa cd 77 5e 12 5d 11 2a 52 c6 64 c7 fd a5 db a4 3b c6 77 34 6e 2e b4 37 89 b5 a9 41 ba ef a9 7d 69 d5 d2 e8 39 ff db e0 45 04 35 99 35 70 c6 07 43 c1 17 1f 9b b1 13 a1 4e b4 e0 Data Ascii: PNGIHDR00WIDATh{\|uwvv]$,$#cv1$N[$@o>6C%\|MIy41h8y%D3e=,Ls=wfYv_K9Ihw^]Rd;w4n.7A}i9E55pCN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49783	172.67.43.115	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:35 UTC	359	OUT	GET /js/program-mac.min.js HTTP/1.1 Host: i.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:36 UTC	395	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:36 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Thu, 12 Sep 2024 12:10:08 GMT Vary: Accept-Encoding ETag: W/"66e2da20-40e89" Expires: Wed, 24 Dec 2025 12:25:40 GMT Cache-Control: max-age=31536000 CF-Cache-Status: HIT Age: 1936496 Server: cloudflare CF-RAY: 90294105cdf8e7bb-DFW
2025-01-15 22:20:36 UTC	974	IN	Data Raw: 37 65 31 33 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 2e 64 6f 63 75 6d 65 6e 74 29 72 65 74 75 72 6e 20 74 28 65 29 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 7d 3a 74 28 65 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f Data Ascii: 7e13!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(e.document)return t(e);throw new Error("jQuery requires a window with a document")}:t(e)}("undefined"!=typeof windo
2025-01-15 22:20:36 UTC	1369	IN	Data Raw: 3d 74 79 70 65 6f 66 20 65 3f 7a 5b 48 2e 63 61 6c 6c 28 65 29 5d 7c 7c 22 6f 62 6a 65 63 74 22 3a 74 79 70 65 6f 66 20 65 7d 76 61 72 20 65 3d 22 33 2e 37 2e 31 22 2c 59 3d 2f 48 54 4d 4c 24 2f 69 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 43 2e 66 6e 2e 69 6e 69 74 28 65 2c 74 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 65 29 7b 76 61 72 20 74 3d 21 21 65 26 26 22 6c 65 6e 67 74 68 22 69 6e 20 65 26 26 65 2e 6c 65 6e 67 74 68 2c 6e 3d 58 28 65 29 3b 72 65 74 75 72 6e 21 76 28 65 29 26 26 21 50 28 65 29 26 26 28 22 61 72 72 61 79 22 3d 3d 3d 6e 7c 7c 30 3d 3d 3d 74 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 30 3c 74 26 26 74 2d 31 20 69 6e 20 65 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 Data Ascii: =typeof e?z[H.call(e)]\|\|"object":typeof e}var e="3.7.1",Y=/HTML$/i,C=function(e,t){return new C.fn.init(e,t)};function G(e){var t=!!e&&"length"in e&&e.length,n=X(e);return!v(e)&&!P(e)&&("array"===n\|\|0===t\|\|"number"==typeof t&&0<t&&t-1 in e)}function b(e,t
2025-01-15 22:20:36 UTC	1369	IN	Data Raw: 26 28 6f 3d 74 68 69 73 2c 61 2d 2d 29 3b 61 3c 73 3b 61 2b 2b 29 69 66 28 6e 75 6c 6c 21 3d 28 65 3d 61 72 67 75 6d 65 6e 74 73 5b 61 5d 29 29 66 6f 72 28 74 20 69 6e 20 65 29 6e 3d 65 5b 74 5d 2c 22 5f 5f 70 72 6f 74 6f 5f 5f 22 21 3d 3d 74 26 26 6f 21 3d 3d 6e 26 26 28 6c 26 26 6e 26 26 28 43 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 6e 29 7c 7c 28 69 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 29 29 3f 28 72 3d 6f 5b 74 5d 2c 72 3d 69 26 26 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 3f 5b 5d 3a 69 7c 7c 43 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 72 29 3f 72 3a 7b 7d 2c 69 3d 21 31 2c 6f 5b 74 5d 3d 43 2e 65 78 74 65 6e 64 28 6c 2c 72 2c 6e 29 29 3a 76 6f 69 64 20 30 21 3d 3d 6e 26 26 28 6f 5b 74 5d 3d 6e 29 29 3b 72 65 74 75 72 Data Ascii: &(o=this,a--);a<s;a++)if(null!=(e=arguments[a]))for(t in e)n=e[t],"__proto__"!==t&&o!==n&&(l&&n&&(C.isPlainObject(n)\|\|(i=Array.isArray(n)))?(r=o[t],r=i&&!Array.isArray(r)?[]:i\|\|C.isPlainObject(r)?r:{},i=!1,o[t]=C.extend(l,r,n)):void 0!==n&&(o[t]=n));retur
2025-01-15 22:20:36 UTC	1369	IN	Data Raw: 65 2e 6c 65 6e 67 74 68 3d 72 2c 65 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 72 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 2c 61 3d 21 6e 3b 72 3c 6f 3b 72 2b 2b 29 21 74 28 65 5b 72 5d 2c 72 29 21 3d 61 26 26 69 2e 70 75 73 68 28 65 5b 72 5d 29 3b 72 65 74 75 72 6e 20 69 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 2c 72 2c 6f 3d 30 2c 61 3d 5b 5d 3b 69 66 28 47 28 65 29 29 66 6f 72 28 69 3d 65 2e 6c 65 6e 67 74 68 3b 6f 3c 69 3b 6f 2b 2b 29 6e 75 6c 6c 21 3d 28 72 3d 74 28 65 5b 6f 5d 2c 6f 2c 6e 29 29 26 26 61 2e 70 75 73 68 28 72 29 3b 65 6c 73 65 20 66 6f 72 28 6f 20 69 6e 20 65 29 6e 75 6c 6c 21 3d 28 72 3d 74 28 65 5b 6f 5d 2c 6f 2c 6e 29 29 26 26 61 Data Ascii: e.length=r,e},grep:function(e,t,n){for(var i=[],r=0,o=e.length,a=!n;r<o;r++)!t(e[r],r)!=a&&i.push(e[r]);return i},map:function(e,t,n){var i,r,o=0,a=[];if(G(e))for(i=e.length;o<i;o++)null!=(r=t(e[o],o,n))&&a.push(r);else for(o in e)null!=(r=t(e[o],o,n))&&a
2025-01-15 22:20:36 UTC	1369	IN	Data Raw: 28 3f 3a 22 2b 6e 2b 22 2a 28 5b 2a 5e 24 7c 21 7e 5d 3f 3d 29 22 2b 6e 2b 22 2a 28 3f 3a 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 65 2b 22 29 29 7c 29 22 2b 6e 2b 22 2a 5c 5c 5d 22 2c 61 3d 22 3a 28 22 2b 65 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 6f 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 5f 65 3d 6e 65 77 20 52 65 67 45 78 70 28 6e 2b 22 2b 22 2c 22 67 22 29 2c 67 65 3d 6e 65 77 20 52 65 67 45 78 70 28 Data Ascii: (?:"+n+"([^$\|!~]?=)"+n+"(?:'((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+e+"))\|)"+n+"\\]",a=":("+e+")(?:\$(('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+o+"))\|.)\$\|)",_e=new RegExp(n+"+","g"),ge=new RegExp(
2025-01-15 22:20:36 UTC	1369	IN	Data Raw: 2e 61 70 70 6c 79 28 65 2c 73 2e 63 61 6c 6c 28 74 29 29 7d 2c 63 61 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 65 2e 61 70 70 6c 79 28 65 2c 73 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 28 65 2c 74 2c 6e 2c 69 29 7b 76 61 72 20 72 2c 6f 2c 61 2c 73 2c 6c 2c 63 2c 75 3d 74 26 26 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 64 3d 74 3f 74 2e 6e 6f 64 65 54 79 70 65 3a 39 3b 69 66 28 6e 3d 6e 7c 7c 5b 5d 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 7c 7c 21 65 7c 7c 31 21 3d 3d 64 26 26 39 21 3d 3d 64 26 26 31 31 21 3d 3d 64 29 72 65 74 75 72 6e 20 6e 3b 69 66 28 21 69 26 26 28 4c 65 28 74 29 2c 74 3d 74 7c 7c 54 2c 6b 29 29 7b 69 66 28 31 31 21 3d 3d 64 26 26 28 73 3d 54 65 2e 65 78 Data Ascii: .apply(e,s.call(t))},call:function(e){le.apply(e,s.call(arguments,1))}}}function I(e,t,n,i){var r,o,a,s,l,c,u=t&&t.ownerDocument,d=t?t.nodeType:9;if(n=n\|\|[],"string"!=typeof e\|\|!e\|\|1!==d&&9!==d&&11!==d)return n;if(!i&&(Le(t),t=t\|\|T,k)){if(11!==d&&(s=Te.ex
2025-01-15 22:20:36 UTC	1369	IN	Data Raw: 20 65 3f 22 6c 61 62 65 6c 22 69 6e 20 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 3a 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 3a 65 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 74 7c 7c 65 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 74 26 26 45 65 28 65 29 3d 3d 3d 74 3a 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 3a 22 6c 61 62 65 6c 22 69 6e 20 65 26 26 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 61 29 7b 72 65 74 75 72 6e 20 44 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6f 3d 2b 6f 2c 44 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 2c 69 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 72 3d 69 2e Data Ascii: e?"label"in e.parentNode?e.parentNode.disabled===t:e.disabled===t:e.isDisabled===t\|\|e.isDisabled!==!t&&Ee(e)===t:e.disabled===t:"label"in e&&e.disabled===t}}function Ae(a){return D(function(o){return o=+o,D(function(e,t){for(var n,i=a([],e.length,o),r=i.
2025-01-15 22:20:36 UTC	1369	IN	Data Raw: 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 6b 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 6e 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 29 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 65 29 72 65 74 75 72 6e 5b 6f 5d 3b 66 6f 72 28 72 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 65 29 2c 69 3d 30 3b 6f 3d 72 5b 69 2b 2b 5d 3b 29 69 66 28 28 6e 3d 6f 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 29 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 65 29 72 65 74 75 72 6e 5b 6f 5d 7d 72 65 74 75 72 6e 5b 5d 7d 7d 29 2c 77 2e 66 69 6e 64 2e 54 41 47 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 Data Ascii: tElementById&&k){var n,i,r,o=t.getElementById(e);if(o){if((n=o.getAttributeNode("id"))&&n.value===e)return[o];for(r=t.getElementsByName(e),i=0;o=r[i++];)if((n=o.getAttributeNode("id"))&&n.value===e)return[o]}return[]}}),w.find.TAG=function(e,t){return voi
2025-01-15 22:20:36 UTC	1369	IN	Data Raw: 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 6d 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 3d 54 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 72 26 26 49 2e 63 6f 6e 74 61 69 6e 73 28 72 2c 65 29 3f 2d 31 3a 74 3d 3d 3d 54 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 72 26 26 49 2e 63 6f 6e 74 61 69 6e 73 28 72 2c 74 29 3f 31 3a 6f 65 3f 79 Data Ascii: !t.compareDocumentPosition\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!m.sortDetached&&t.compareDocumentPosition(e)===n?e===T\|\|e.ownerDocument==r&&I.contains(r,e)?-1:t===T\|\|t.ownerDocument==r&&I.contains(r,t)?1:oe?y
2025-01-15 22:20:36 UTC	1369	IN	Data Raw: 2c 22 7e 22 3a 7b 64 69 72 3a 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 7d 7d 2c 70 72 65 46 69 6c 74 65 72 3a 7b 41 54 54 52 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 31 5d 3d 65 5b 31 5d 2e 72 65 70 6c 61 63 65 28 64 2c 70 29 2c 65 5b 33 5d 3d 28 65 5b 33 5d 7c 7c 65 5b 34 5d 7c 7c 65 5b 35 5d 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 64 2c 70 29 2c 22 7e 3d 22 3d 3d 3d 65 5b 32 5d 26 26 28 65 5b 33 5d 3d 22 20 22 2b 65 5b 33 5d 2b 22 20 22 29 2c 65 2e 73 6c 69 63 65 28 30 2c 34 29 7d 2c 43 48 49 4c 44 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 31 5d 3d 65 5b 31 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 22 6e 74 68 22 3d 3d 3d 65 5b 31 5d 2e 73 6c 69 63 65 28 30 2c 33 29 3f 28 65 5b 33 5d 7c Data Ascii: ,"~":{dir:"previousSibling"}},preFilter:{ATTR:function(e){return e[1]=e[1].replace(d,p),e[3]=(e[3]\|\|e[4]\|\|e[5]\|\|"").replace(d,p),"~="===e[2]&&(e[3]=" "+e[3]+" "),e.slice(0,4)},CHILD:function(e){return e[1]=e[1].toLowerCase(),"nth"===e[1].slice(0,3)?(e[3]\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49782	104.22.17.194	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:35 UTC	638	OUT	GET /images/v4/empty_stars.svg HTTP/1.1 Host: software.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://software.informer.com/style/v4/min/program.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:36 UTC	381	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:36 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 07 Jun 2024 08:54:12 GMT Vary: Accept-Encoding ETag: W/"6662cab4-693" Expires: Thu, 16 Jan 2025 12:48:20 GMT Cache-Control: max-age=604800 CF-Cache-Status: HIT Age: 552736 Server: cloudflare CF-RAY: 902941063af56c51-DFW
2025-01-15 22:20:36 UTC	988	IN	Data Raw: 36 39 33 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 61 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 31 22 20 68 65 69 67 68 74 3d 22 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 31 20 32 30 22 3e 3c 70 61 74 68 20 64 3d 22 6d 31 30 2e 35 38 2c 33 2e 33 38 6c 31 2e 38 34 2c 33 2e 38 35 2e 33 31 2e 37 37 2e 37 37 2e 31 35 2c 34 2e 31 34 2e 36 32 2d 32 2e 39 31 2c 32 2e 39 32 2d 2e 36 31 2e 34 36 2e 31 35 2e 37 37 2e 37 37 2c 34 2e 31 35 2d 33 2e 36 38 2d 31 2e 38 35 2d 2e 37 37 2d 2e 33 31 2d 2e 37 37 2e 33 31 2d 33 2e 38 33 2c 32 2c 2e 37 37 2d 34 2e Data Ascii: 693<?xml version="1.0" encoding="UTF-8"?><svg id="a" xmlns="http://www.w3.org/2000/svg" width="121" height="20" viewBox="0 0 121 20"><path d="m10.58,3.38l1.84,3.85.31.77.77.15,4.14.62-2.91,2.92-.61.46.15.77.77,4.15-3.68-1.85-.77-.31-.77.31-3.83,2,.77-4.
2025-01-15 22:20:36 UTC	702	IN	Data Raw: 38 2c 36 2e 34 34 2c 33 2e 33 38 2d 31 2e 32 33 2d 37 2e 32 33 2c 35 2e 32 31 2d 35 2e 30 38 2d 37 2e 32 2d 31 2e 30 38 2d 33 2e 32 32 2d 36 2e 36 32 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 66 36 36 3b 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 38 35 2e 35 38 2c 33 2e 33 38 6c 31 2e 38 34 2c 33 2e 38 35 2e 33 31 2e 37 37 2e 37 37 2e 31 35 2c 34 2e 31 34 2e 36 32 2d 32 2e 39 31 2c 32 2e 39 32 2d 2e 36 31 2e 34 36 2e 31 35 2e 37 37 2e 37 37 2c 34 2e 31 35 2d 33 2e 36 38 2d 31 2e 38 35 2d 2e 37 37 2d 2e 33 31 2d 2e 37 37 2e 33 31 2d 33 2e 38 33 2c 32 2c 2e 37 37 2d 34 2e 31 35 2e 31 35 2d 2e 37 37 2d 2e 36 31 2d 2e 36 32 2d 33 2e 30 37 2d 32 2e 39 32 2c 34 2e 31 34 2d 2e 36 32 2e 37 37 2d 2e 31 35 2e 33 31 2d 2e 37 37 2c 32 2e 31 35 2d 33 2e 38 35 5a 6d Data Ascii: 8,6.44,3.38-1.23-7.23,5.21-5.08-7.2-1.08-3.22-6.62Z" style="fill:#f66;"/><path d="m85.58,3.38l1.84,3.85.31.77.77.15,4.14.62-2.91,2.92-.61.46.15.77.77,4.15-3.68-1.85-.77-.31-.77.31-3.83,2,.77-4.15.15-.77-.61-.62-3.07-2.92,4.14-.62.77-.15.31-.77,2.15-3.85Zm
2025-01-15 22:20:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49781	104.22.17.194	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:35 UTC	730	OUT	GET /ajax/login_menu.php?ref= HTTP/1.1 Host: nuance-pdf-professional2.software.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://nuance-pdf-professional2.software.informer.com/7.2/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
2025-01-15 22:20:36 UTC	298	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Robots-Tag: noindex, nofollow Last-Modified: Wed, 15 Jan 2025 22:20:36 GMT CF-Cache-Status: EXPIRED Server: cloudflare CF-RAY: 902941056a16c93f-IAD
2025-01-15 22:20:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49785	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:36 UTC	641	OUT	GET /images/default_icon/default_48_0.png HTTP/1.1 Host: img.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:36 UTC	300	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:25 GMT Content-Type: image/png Content-Length: 2217 Last-Modified: Fri, 24 Aug 2018 10:02:54 GMT Connection: close ETag: "5b7fd7ce-8a9" Expires: Thu, 15 Jan 2026 21:59:25 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:36 UTC	2217	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 03 00 00 00 60 dc 09 b5 00 00 02 f7 50 4c 54 45 4c 69 71 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 73 7f 93 76 82 96 78 84 98 7b 87 9b 7c 88 9c 7d 89 9d 7e 8a 9e 7f 8a 9e 7f 8b 9f 80 8c a0 81 8d a1 82 8e a2 83 8f a3 84 90 a3 85 91 a5 86 91 a5 87 93 a6 87 93 a7 88 94 a8 89 95 a9 8a 96 a9 8c 96 a6 8c 96 a7 8b 96 aa 8b 97 aa 8b 97 ab 8d 97 a7 8d 97 a8 8c 98 ab 8c 98 ac 8e 98 a9 8d 99 ad 8f 99 aa 90 99 aa 90 99 ab 8e 9a ad 8e 9a ae 90 9a ab 90 9b ac 8f 9b af 91 9b ac 91 9c ad 90 9c b0 92 9c ae 91 9d b1 93 9d ae 93 9d af 92 9e b1 92 9e b2 94 9e b0 94 9f b0 94 9f b3 95 9f b1 94 a0 b4 96 a0 b2 97 a0 b1 96 a1 b2 95 a1 b5 96 a1 b3 97 a2 b3 96 a2 b6 97 a2 b4 98 a2 b5 99 a2 b3 97 Data Ascii: PNGIHDR00`PLTELiqsvx{\|}~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49788	104.22.17.194	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:36 UTC	668	OUT	GET /ajax/th_view.php?id=3948072 HTTP/1.1 Host: nuance-pdf-professional2.software.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nuance-pdf-professional2.software.informer.com/7.2/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:36 UTC	382	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:36 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-Robots-Tag: noindex, nofollow Expires: Fri, 16 Jan 2026 22:20:36 GMT Pragma: cache Cache-Control: max-age=31622400 Last-Modified: Wed, 15 Jan 2025 22:20:36 GMT CF-Cache-Status: MISS Accept-Ranges: bytes Server: cloudflare CF-RAY: 902941060fcd2078-IAD
2025-01-15 22:20:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49790	172.67.43.115	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:36 UTC	448	OUT	GET /js/achecker3.js HTTP/1.1 Host: i.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
2025-01-15 22:20:36 UTC	393	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:36 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 07 Jun 2024 08:54:12 GMT Vary: Accept-Encoding ETag: W/"6662cab4-a30" Expires: Wed, 26 Nov 2025 12:17:22 GMT Cache-Control: max-age=31536000 CF-Cache-Status: HIT Age: 4356194 Server: cloudflare CF-RAY: 90294106d9a8677a-DFW
2025-01-15 22:20:36 UTC	976	IN	Data Raw: 61 33 30 0d 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 53 74 79 6c 65 28 61 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3f 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 61 2c 22 22 29 3a 61 2e 63 75 72 72 65 6e 74 53 74 79 6c 65 7d 66 75 6e 63 74 69 6f 6e 20 67 65 74 5f 6c 61 73 74 5f 62 6c 6f 63 6b 5f 65 6c 65 6d 65 6e 74 28 61 29 7b 76 61 72 20 65 3d 61 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 20 65 26 26 22 6e 6f 6e 65 22 3d 3d 67 65 74 53 74 79 6c 65 28 65 29 2e 64 69 73 70 6c 61 79 3f 67 65 74 5f 6c 61 73 74 5f 62 6c 6f 63 6b 5f 65 6c 65 6d 65 6e 74 28 65 29 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 73 68 6f 77 5f 70 61 72 65 6e 74 28 61 29 7b 61 2e 73 74 79 6c 65 2e 73 65 74 50 72 Data Ascii: a30function getStyle(a){return window.getComputedStyle?getComputedStyle(a,""):a.currentStyle}function get_last_block_element(a){var e=a.parentElement;return e&&"none"==getStyle(e).display?get_last_block_element(e):a}function show_parent(a){a.style.setPr
2025-01-15 22:20:36 UTC	1369	IN	Data Raw: 29 2f 2c 66 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 69 65 6e 74 57 69 64 74 68 3b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 61 63 68 65 63 6b 65 72 3a 22 2b 61 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 69 66 28 21 61 5b 62 5d 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 63 6c 61 73 73 4e 61 6d 65 2e 69 6e 63 6c 75 64 65 73 28 22 61 61 2d 22 29 29 7b 61 5b 62 5d 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 26 26 28 61 5b 62 5d 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 61 75 74 6f 22 29 3b 76 61 72 20 67 3d 30 3c 3d 61 5b 62 5d Data Ascii: )/,f=window.innerWidth\|\|document.documentElement.clientWidth\|\|document.body.clientWidth;console.log("achecker:"+a.length);for(var b=0;b<a.length;b++)if(!a[b].parentNode.className.includes("aa-")){a[b].style.height&&(a[b].style.height="auto");var g=0<=a[b]
2025-01-15 22:20:36 UTC	270	IN	Data Raw: 72 61 6d 65 22 29 3b 65 2e 6c 65 6e 67 74 68 26 26 28 24 6a 28 22 2e 74 6f 70 5f 62 22 29 2e 63 73 73 28 7b 6f 76 65 72 66 6c 6f 77 3a 22 76 69 73 69 62 6c 65 22 7d 29 2c 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 66 29 7b 6e 75 6c 6c 21 3d 3d 66 26 26 28 66 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 39 30 70 78 22 2c 66 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 28 66 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 66 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 2b 22 70 78 22 29 7d 29 29 7d 24 6a 28 77 69 6e 64 6f 77 29 2e 72 65 73 69 7a 65 28 61 29 3b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 Data Ascii: rame");e.length&&($j(".top_b").css({overflow:"visible"}),e.forEach(function(f){null!==f&&(f.style.height="90px",f.style.height=(f.contentDocument\|\|f.contentWindow.document).documentElement.scrollHeight+"px")}))}$j(window).resize(a);setTimeout(function(){a
2025-01-15 22:20:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49792	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:36 UTC	632	OUT	GET /images/v3/logo_si_white.svg HTTP/1.1 Host: img.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:36 UTC	305	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:26 GMT Content-Type: image/svg+xml Content-Length: 6399 Last-Modified: Fri, 24 Aug 2018 10:02:56 GMT Connection: close ETag: "5b7fd7d0-18ff" Expires: Thu, 15 Jan 2026 21:59:26 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:36 UTC	6399	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 38 34 20 32 36 2e 30 31 22 3e 3c 74 69 74 6c 65 3e 6c 6f 67 6f 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 31 32 2e 34 36 2c 30 61 31 32 2e 35 2c 31 32 2e 35 2c 30 2c 31 2c 30 2c 36 2e 32 31 2c 32 33 2e 33 35 63 32 2c 31 2c 33 2e 30 37 2c 31 2e 33 38 2c 35 2e 34 39 2c 32 2e 36 35 2d 2e 37 34 2d 32 2e 34 34 2d 31 2d 33 2e 39 2d 31 2e 35 34 2d 36 2e 30 36 61 31 33 2e 31 2c 31 33 2e 31 2c 30 2c 30 2c 30 2c 32 2e 33 32 2d 37 2e 34 32 41 31 32 2e 35 32 2c 31 32 2e 35 32 2c 30 2c 30 2c 30 2c 31 32 2e 34 36 2c 30 5a 6d 30 2c 32 32 2e 35 61 31 30 2c 31 30 2c 30 2c 31 2c 31 2c 31 30 2d 31 30 41 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 284 26.01"><title>logo</title><path d="M12.46,0a12.5,12.5,0,1,0,6.21,23.35c2,1,3.07,1.38,5.49,2.65-.74-2.44-1-3.9-1.54-6.06a13.1,13.1,0,0,0,2.32-7.42A12.52,12.52,0,0,0,12.46,0Zm0,22.5a10,10,0,1,1,10-10A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49794	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:36 UTC	730	OUT	GET /icons/png/128/3439/3439369.png HTTP/1.1 Host: img.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
2025-01-15 22:20:36 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:26 GMT Content-Type: image/png Content-Length: 11924 Last-Modified: Tue, 08 Mar 2022 21:53:27 GMT Connection: close ETag: "6227d057-2e94" Expires: Thu, 15 Jan 2026 21:59:26 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:36 UTC	11924	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 80 08 06 00 00 00 c3 3e 61 cb 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 00 48 00 00 00 48 00 46 c9 6b 3e 00 00 2d 89 49 44 41 54 78 da ed 9d 6b 70 5b e7 79 e7 7f 2f ee 20 08 92 00 48 40 04 c0 0b 08 91 14 65 5b 94 64 f9 12 5b 72 6d 29 49 13 7b eb 89 33 9d 74 77 13 4f 7a db 76 bb 1f d2 6f 3b 99 cc ba 65 eb e9 6d 76 67 9a 66 26 c9 a4 53 b7 75 ec cd a5 de 5a 89 e2 58 b1 63 d9 96 44 2b 12 75 a3 68 99 77 82 22 c5 3b 01 82 22 88 0b 01 1c Data Ascii: PNGIHDR>agAMAasRGB cHRMz&u0`:pQ<bKGDpHYsHHFk>-IDATxkp[y/ H@e[d[rm)I{3twOzvo;emvgf&SuZXcD+uhw";"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49796	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:36 UTC	464	OUT	GET /icons/png/48/8336/8336687.png HTTP/1.1 Host: img.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
2025-01-15 22:20:36 UTC	300	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:26 GMT Content-Type: image/png Content-Length: 1955 Last-Modified: Wed, 24 Jan 2024 09:58:12 GMT Connection: close ETag: "65b0df34-7a3" Expires: Thu, 15 Jan 2026 21:59:26 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:36 UTC	1955	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 07 6a 49 44 41 54 68 81 ed 9a 6b 50 94 d7 19 c7 7f ef be 2f bb 0b ec c2 e2 02 0b 72 df 88 22 20 97 72 33 58 11 b1 c5 49 1b b5 1d db 4c f2 a1 93 71 f2 a1 4e 3b d3 49 33 6d d2 31 6d 27 6d 63 3b cd 87 36 49 a7 9d 90 d6 74 88 b5 8e 69 9a 68 48 c6 c6 78 01 15 45 bc a1 ae ca a0 72 57 b9 2e f7 bd c1 ee db 0f 2b 8b 94 05 77 97 65 92 ce e4 ff 6d cf 39 cf f3 7f 9e 3d e7 79 ce 7b ce 73 04 59 96 01 c8 7e f9 a4 06 f8 11 f0 0c 90 09 28 f8 62 c1 05 34 03 fb 80 37 4d bb cb c6 01 04 59 96 c9 7e f9 a4 11 38 0c ac 0c 26 e3 b2 e8 70 62 0d 11 dc 6a ee c5 e9 74 05 53 75 0b f0 84 69 77 59 ab 90 b5 ab 4e 03 5c 24 88 c6 ab d5 21 14 94 a4 90 91 1d 8f 42 21 60 1e 9c e0 dc e9 56 Data Ascii: PNGIHDR00WjIDAThkP/r" r3XILqN;I3m1m'mc;6ItihHxErW.+wem9=y{sY~(b47MY~8&pbjtSuiwYN\$!B!`V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49800	104.22.16.194	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:36 UTC	465	OUT	GET /ajax/log_hit4.php?r=20025 HTTP/1.1 Host: software.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
2025-01-15 22:20:36 UTC	381	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:36 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-Robots-Tag: noindex, nofollow Expires: Wed, 14 Jan 2026 10:25:41 GMT Pragma: cache Cache-Control: max-age=31622400 Last-Modified: Mon, 13 Jan 2025 10:25:41 GMT CF-Cache-Status: HIT Accept-Ranges: bytes Server: cloudflare CF-RAY: 90294108b9328c29-EWR
2025-01-15 22:20:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49793	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:36 UTC	724	OUT	GET /images/v4/fill_stars.svg HTTP/1.1 Host: img.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
2025-01-15 22:20:36 UTC	303	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:26 GMT Content-Type: image/svg+xml Content-Length: 899 Last-Modified: Tue, 17 Jan 2023 10:34:57 GMT Connection: close ETag: "63c679d1-383" Expires: Thu, 15 Jan 2026 21:59:26 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:36 UTC	899	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 61 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 31 22 20 68 65 69 67 68 74 3d 22 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 31 20 32 30 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 6d 31 30 2e 35 38 2c 30 6c 33 2e 32 32 2c 36 2e 36 32 2c 37 2e 32 2c 31 2e 30 38 2d 35 2e 32 31 2c 35 2e 30 38 2c 31 2e 32 33 2c 37 2e 32 33 2d 36 2e 34 34 2d 33 2e 33 38 2d 36 2e 35 39 2c 33 2e 33 38 2c 31 2e 32 33 2d 37 2e 32 33 4c 30 2c 37 2e 36 39 6c 37 2e 32 2d 31 2e 30 38 4c 31 30 2e 35 38 2c 30 5a 22 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="a" xmlns="http://www.w3.org/2000/svg" width="121" height="20" viewBox="0 0 121 20"> <path d="m10.58,0l3.22,6.62,7.2,1.08-5.21,5.08,1.23,7.23-6.44-3.38-6.59,3.38,1.23-7.23L0,7.69l7.2-1.08L10.58,0Z"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49797	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:36 UTC	763	OUT	GET /p5/nuance-pdf-converter-professional-v8-main-window-display.png HTTP/1.1 Host: img.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
2025-01-15 22:20:36 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:26 GMT Content-Type: image/png Content-Length: 57666 Last-Modified: Mon, 20 Aug 2018 15:30:24 GMT Connection: close ETag: "5b7ade90-e142" Expires: Thu, 15 Jan 2026 21:59:26 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:36 UTC	16082	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 94 00 00 01 18 08 03 00 00 00 4c 69 f0 31 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 20 74 45 58 74 6a 70 65 67 3a 73 61 6d 70 6c 69 6e 67 2d 66 61 63 74 6f 72 00 32 78 32 2c 31 78 31 2c 31 78 31 49 fa a6 b4 00 00 00 11 74 45 58 74 6a 70 65 67 3a 63 6f 6c 6f 72 73 70 61 63 65 00 32 2c 75 55 9f 00 00 00 25 74 45 58 74 64 61 74 65 3a 6d 6f 64 69 66 79 00 32 30 31 36 2d 30 38 2d 33 30 54 31 31 3a 33 38 3a 35 37 2d 30 34 3a 30 30 3d 3e a1 54 00 00 00 25 74 45 58 74 64 61 74 65 3a 63 72 65 61 74 65 00 32 30 31 37 2d 31 31 2d 31 30 54 30 33 3a 33 39 3a 30 38 2d 30 35 3a 30 30 20 d6 6d 9f 00 00 00 41 74 45 58 74 63 6f 6d 6d 65 6e 74 00 43 52 45 41 54 4f Data Ascii: PNGIHDRLi1gAMAasRGB tEXtjpeg:sampling-factor2x2,1x1,1x1ItEXtjpeg:colorspace2,uU%tEXtdate:modify2016-08-30T11:38:57-04:00=>T%tEXtdate:create2017-11-10T03:39:08-05:00 mAtEXtcommentCREATO
2025-01-15 22:20:36 UTC	16384	IN	Data Raw: b9 60 4a 55 d7 2f 2e 2e 02 ed 99 bd af cf 66 af f0 d8 c1 7b d8 26 25 b8 ea 6e 36 b8 ec 46 a3 89 36 e9 8d 46 29 ef ad ac da 64 aa 9e 9a 9b 33 56 1b cb 8c 4d 98 47 86 99 6c 26 bd 98 ec c6 eb 74 a6 b0 91 10 d3 34 31 11 15 5d 79 ac d2 74 8b 76 47 1a 75 a9 c4 89 44 42 c5 03 92 49 9a 60 ba d9 4c ca d0 b4 d0 bd 50 3a 37 37 d5 9f 48 c8 e4 8d 47 92 3d 24 31 d4 2f c7 36 c6 ee 26 d8 52 e9 f5 d2 9e 4b 8e a1 8b 79 a3 68 95 98 a2 88 9b f5 a8 0c 1e c9 31 d8 57 e9 0f 27 08 6d 4e 2e 9f 39 f5 f2 e5 0f 2f 5f 7e 8b 80 f3 cb 6f cf 2e b6 ef d3 d4 58 cb b4 45 3b ee 0b ec 20 80 f3 2a ca 4d 67 41 48 0b 39 14 58 00 e9 8b f9 95 91 4e 5f 4c 83 73 03 3f 85 cb e6 64 01 2e 2b 74 52 69 75 1a 2d 87 46 51 a0 59 73 be eb 27 2b 45 f6 c0 59 e5 e0 02 9a 00 13 8f 6b f0 4e 88 eb c4 01 66 01 38 Data Ascii: `JU/..f{&%n6F6F)d3VMGl&t41]ytvGuDBI`LP:77HG=$1/6&RKyh1W'mN.9/_~o.XE; *MgAH9XN_Ls?d.+tRiu-FQYs'+EYkNf8
2025-01-15 22:20:36 UTC	16384	IN	Data Raw: bd f7 7e ef bd ff fb bd 64 5b 30 08 eb 8c 90 d4 28 f8 8e 49 99 67 b1 76 0f 11 1d c8 72 43 61 90 34 bc 21 28 8f 01 13 78 fd e7 bf f7 bf fa fa eb af bf fa fc 6f 7f 5e 39 a7 0d fd 24 bd d1 24 81 82 53 4b 1a cf ab 1c a3 a0 36 2d ad 88 0a 77 14 28 f1 c8 36 52 e2 4b db 93 23 95 14 bd dc a6 57 47 fc 19 ef 6c be eb 95 cc 5a d1 75 6d 36 2c 97 17 c2 a8 44 45 5e 39 63 8c 94 16 eb be 58 2c f5 0a 0b d5 28 5a b0 47 5d 7b b5 3e 5c 0a 2f 19 ee c2 e2 70 b5 2b 8d 75 dd b0 d1 2b 3a 35 42 53 4f a0 1d fc 04 94 8a 39 f3 04 94 89 e6 00 94 e6 a9 53 12 d3 0a c7 46 cd c0 6a 4d 77 fc 4e d4 30 80 31 59 9d 5b b9 75 73 7c 24 33 ec 39 a5 6e b5 16 8d f3 ed 67 85 c5 ac 4e 85 e5 c9 88 c8 09 bc 95 05 32 66 93 81 2d 5a 56 c7 ca 86 a3 b9 86 dd 08 53 b2 99 13 cd ac dd 82 07 33 f1 a6 a0 3c 8a Data Ascii: ~d[0(IgvrCa4!(xo^9$$SK6-w(6RK#WGlZum6,DE^9cX,(ZG]{>\/p+u+:5BSO9SFjMwN01Y[us\|$39ngN2f-ZVS3<
2025-01-15 22:20:36 UTC	8816	IN	Data Raw: 0a 77 f7 11 d9 07 9b 19 6f 44 1d f4 f3 ab 0b a1 d0 7c e4 83 7f 4c b8 22 21 1c 29 54 69 57 1d fb 42 47 9e da 3c 2f 74 c7 4d a8 2e 8f ba f0 7c 47 82 41 c9 84 5a 40 4e 12 3e f6 7d 70 ab fa a4 4b c7 78 4d b9 e7 9f d7 80 e0 47 43 89 f3 55 65 29 0a 8a a2 31 51 f5 37 3b d8 fd d6 c3 c7 0f bf 79 fe fa f9 64 c0 ed ef e1 cf 3f 5f 4f 8e 61 fc eb 61 f9 ee dd 2f 76 57 ce 40 c1 bc 33 9f db ab 34 72 a5 5c 69 a3 d1 ed 56 e0 a6 5b da 28 e5 ba a5 4a 69 2f 1d 23 36 59 75 3f 3a 5c db 0c f6 98 66 20 df 51 dd 50 b8 c4 98 eb a1 e4 28 87 4d dd 72 ba a1 0f 39 0b c3 3a 24 2b 06 18 aa e7 99 3e e4 97 de 9d 08 bc 38 f6 19 a4 98 e3 62 46 aa 02 6e 04 d6 2c dc f3 97 ae fe e8 40 1f 17 fb 10 e8 6f af 37 15 95 8f 03 ca dd 3f de fd e9 fd af ff fb fa 3f 6f 8d 7f 7f ef f8 ef c7 3d 80 c2 56 56 Data Ascii: woD\|L"!)TiWBG</tM.\|GAZ@N>}pKxMGCUe)1Q7;yd?_Oaa/vW@34r\iV[(Ji/#6Yu?:\f QP(Mr9:$+>8bFn,@o7??o=VV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49798	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:36 UTC	457	OUT	GET /images/v2/elements.png HTTP/1.1 Host: img.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
2025-01-15 22:20:36 UTC	300	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:26 GMT Content-Type: image/png Content-Length: 2983 Last-Modified: Wed, 17 Apr 2019 08:41:52 GMT Connection: close ETag: "5cb6e6d0-ba7" Expires: Thu, 15 Jan 2026 21:59:26 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:36 UTC	2983	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 02 fa 08 03 00 00 00 96 d7 21 3e 00 00 01 17 50 4c 54 45 00 00 00 95 9a a0 96 9a a0 96 9a a0 96 9a a0 95 9a a0 96 9a a0 95 9a a0 96 9a a0 96 9a a0 96 9a a0 96 9a a0 95 9a a0 1c 58 a2 f8 30 29 7b 00 98 2a a9 e0 ff ff ff 96 9a a0 34 54 8f 39 5a 95 27 54 a1 c4 c4 c5 cb d6 e9 ff 92 89 ff f3 f2 f2 f7 fb fa 41 38 e5 ee f7 e3 c2 e7 2e 62 a8 a1 b5 d6 ff ea e9 ff 9e 97 ff 77 6e f8 ef fa fe 5c 52 ff f9 f9 cc e3 f3 87 a1 cc 40 6d af fe 69 5f ff ce ca 5d 82 ba a1 46 b2 ff 85 7d 79 96 c5 fc 4e 45 ff ad a6 45 b1 e3 ff b6 b1 8f 99 ae ff da d7 b0 da f2 ff c1 bd 81 0b 9b 6e 8d c1 8c 20 a3 68 bc e7 b3 b7 c0 a9 55 b9 d6 eb f8 ea d3 ee 2f 4e 85 f1 e1 f4 95 31 aa 97 cf ee be cc e5 ff e1 df 6d 7f a4 54 6b 9b 83 Data Ascii: PNGIHDRP!>PLTEX0){*4T9Z'TA8.bwn\R@mi_]F}yNEEn hU/N1mTk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49803	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:36 UTC	464	OUT	GET /icons/png/48/5860/5860964.png HTTP/1.1 Host: img.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
2025-01-15 22:20:36 UTC	300	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:26 GMT Content-Type: image/png Content-Length: 1954 Last-Modified: Sun, 14 Jan 2024 07:38:23 GMT Connection: close ETag: "65a38f6f-7a2" Expires: Thu, 15 Jan 2026 21:59:26 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:36 UTC	1954	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 07 69 49 44 41 54 68 81 d5 9a 5d 6c 53 e7 19 c7 7f fe ca f1 39 0e 87 13 d3 60 60 a1 81 0e 13 26 54 27 51 d5 40 2b 8a 42 53 50 a2 56 6a 57 35 6d b7 31 4a b5 0b c4 87 26 34 a6 49 88 7d 65 dd 2e 7a 31 41 41 59 97 9b 8e 44 dd 45 05 0b aa 56 a2 08 51 b2 69 ac c4 48 15 d8 ad 6a 42 54 5a 0b 87 26 6b 62 8c e3 cf c4 c6 bb f0 ec e6 cc c7 c7 76 12 10 fd 5f f9 bc cf 7b de f3 fc df af ff fb 3c af 0d fb d6 ed bb 02 34 f1 e0 60 5b f7 68 f7 3f f6 3b f7 5f f9 df ef 90 5e 65 23 0f 96 f3 73 d1 04 0c ed 77 ee 57 f4 2a 19 ef 93 33 f3 45 49 12 0f 3a 01 28 41 42 45 a0 b6 be 16 f9 21 99 2a b1 ea be 78 56 01 8a 92 50 11 08 7f 1d c6 5a 6d 45 71 28 d4 ac ac 79 d0 88 68 92 50 11 Data Ascii: PNGIHDR00WiIDATh]lS9``&T'Q@+BSPVjW5m1J&4I}e.z1AAYDEVQiHjBTZ&kbv_{<4`[h?;_^e#swW3EI:(ABE!xVPZmEq(yhP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49804	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:36 UTC	464	OUT	GET /icons/png/48/3243/3243680.png HTTP/1.1 Host: img.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
2025-01-15 22:20:36 UTC	300	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:26 GMT Content-Type: image/png Content-Length: 1829 Last-Modified: Thu, 25 Jan 2024 08:16:56 GMT Connection: close ETag: "65b218f8-725" Expires: Thu, 15 Jan 2026 21:59:26 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:36 UTC	1829	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 06 ec 49 44 41 54 68 81 d5 9a 5b 6c 54 d5 1a c7 7f 6b cf a5 d7 99 81 ca c5 d2 82 9e 07 0a e9 d8 36 35 f1 98 2a fa 22 97 60 62 e2 2d 62 44 7d 31 a2 26 62 cd a1 be 8c 07 1f 14 c5 8c 94 f8 60 30 fa a0 21 26 5a ad 26 24 a6 45 d4 27 28 4f c4 a0 2d 87 72 92 92 43 47 d4 02 ce 30 33 bd 4d a7 33 6b 9d 87 ce 1e 76 f7 ec 99 bd 5b 06 a9 5f b2 b2 6e df ac ef ff 5f df 7f ed b5 93 3d 42 29 85 10 42 03 8c 65 a9 99 d4 8b 52 4a 1a 27 04 e0 06 bc 47 76 ec 98 dc d2 d7 87 04 54 ce bb a0 56 aa f4 7c 09 3f 4b 5f a5 ec d7 32 f8 6d 49 a5 6a 80 b4 52 2a a3 13 70 03 5e a0 fa 4c 4b 0b 0a d8 dc d7 57 a6 4d 2b 6d 2a 07 2a df b7 28 ba 1f d7 fa d5 00 42 88 7c 26 34 e6 08 f8 a5 94 0c Data Ascii: PNGIHDR00WIDATh[lTk65"`b-bD}1&b`0!&Z&$E'(O-rCG03M3kv[_n_=B)BeRJ'GvTV\|?K_2mIjRp^LKWM+m**(B\|&4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49808	104.22.16.194	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:36 UTC	489	OUT	GET /ajax/login_menu.php?ref= HTTP/1.1 Host: nuance-pdf-professional2.software.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
2025-01-15 22:20:36 UTC	302	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Robots-Tag: noindex, nofollow Last-Modified: Wed, 15 Jan 2025 22:20:36 GMT CF-Cache-Status: HIT Age: 0 Server: cloudflare CF-RAY: 9029410a39eb822c-IAD
2025-01-15 22:20:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49806	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:36 UTC	726	OUT	GET /awards/si-award-epick4.png HTTP/1.1 Host: img.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
2025-01-15 22:20:37 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:26 GMT Content-Type: image/png Content-Length: 36766 Last-Modified: Fri, 24 Aug 2018 10:00:07 GMT Connection: close ETag: "5b7fd727-8f9e" Expires: Thu, 15 Jan 2026 21:59:26 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:37 UTC	16082	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 aa 00 00 00 aa 08 06 00 00 00 3d 76 d4 82 00 00 8f 65 49 44 41 54 78 da ed 5d 05 78 55 57 b6 7e 9d 99 37 d3 d2 16 27 38 81 20 2d 54 a1 b8 bb 26 41 12 08 31 20 46 02 24 b8 bb bb bb bb bb bb bb bb 15 87 e2 5a 28 95 99 e9 cc 7a ff bf ce 39 97 9b 9b 1b 21 49 3b ed 9b e6 fb 16 37 dc 5c d9 67 af ff 2c 5f 6b ff 8f 88 fc cf 1f f4 07 fd d6 49 ff 29 9c f3 7f fe 20 e7 f4 0e e8 4f a0 bf 80 fe 06 4a 01 fa 00 94 12 94 1a 94 06 94 0e 94 de a4 0c 0e 64 3d 9f ce 7c 6d 6a f3 bd 1f 98 9f f5 37 f3 b3 ff 64 7e d7 1f 7b ee 84 fe 00 6a 4c 50 5a 80 7c df 04 15 41 96 19 94 03 94 1b f4 31 e8 73 50 41 50 11 50 71 50 29 50 19 50 59 50 39 50 79 93 ca 99 cf 95 31 5f 53 dc 7c 4f 41 f3 33 f2 83 f2 98 9f 9d d9 fc ae d4 e6 77 5b 00 Data Ascii: PNGIHDR=veIDATx]xUW~7'8 -T&A1 F$Z(z9!I;7\g,_kI) OJd=\|mj7d~{jLPZ\|A1sPAPPqP)PPYP9Py1_S\|OA3w[
2025-01-15 22:20:37 UTC	16384	IN	Data Raw: a7 18 13 a8 47 30 1d 8e 53 df 0e e1 30 5b 7b a0 96 a8 51 5f de 2f 50 5a b2 74 5c 27 99 a1 52 b2 d8 51 66 93 b2 f0 2e ee b0 56 0a 76 5b 29 b7 1f 19 55 51 5d a7 ae 91 74 7e 83 24 43 f8 34 c9 d4 6a 89 64 6a b7 ca 70 22 00 42 4a 49 02 96 aa 9d 95 43 73 57 ec b2 05 b6 d5 0e c5 6b 12 03 4e 7b ca d1 6c 65 b4 75 3a 5f b7 f3 bf db bf 26 73 2c 7f cf 81 9e ff 10 cc 18 b0 c5 3b 11 0b 2d 56 b6 b3 e4 af 33 29 d1 6b e6 35 e7 f2 9e ae fb d3 77 d2 56 09 ef 35 5f 9d ab 0c 70 2e 09 d2 dc 95 db cb e6 bd e7 b4 4d dc fe e7 11 bc ff c7 66 dd ab 66 f9 10 fc a7 9f 50 08 15 60 99 c1 1b c7 6b b6 5d 0f 78 4a de 92 c7 f6 40 1d 81 ee 63 fa 2c 14 5e ce 80 ca ee 64 2d 15 55 87 ca b0 53 17 22 f3 39 1d d5 56 c4 9e 5d 96 ea 1d 67 40 65 95 75 e6 52 9f a6 ad 1b 1a 1a aa e1 26 8d 9f e2 03 e9 Data Ascii: G0S0[{Q_/PZt\'RQf.Vv[)UQ]t~$C4jdjp"BJICsWkN{leu:_&s,;-V3)k5wV5_p.MffP`k]xJ@c,^d-US"9V]g@euR&
2025-01-15 22:20:37 UTC	4300	IN	Data Raw: 67 bc eb 59 08 13 17 50 2d c6 ad df b4 4d 7c 1a a3 e0 39 4b 01 83 d9 e8 b2 fc 20 6f 0d c4 2a 5b 39 4d 51 fe a7 81 ca 35 71 6d 5c 23 d7 aa e9 e3 ac 05 a4 61 93 16 38 80 6c 97 7c 73 f7 9e dc f9 e6 ae 53 a0 5e bb 7e 53 23 27 b1 39 53 fd 50 f1 c6 61 bb 23 e1 ec 96 85 09 c0 d4 b7 7d ae 7f e7 ae dd 6a 7e 59 76 29 41 ca 58 37 bb 3a 28 49 01 d2 f1 66 ac 34 7d 42 40 fa 9b 06 aa 43 8c 95 17 f4 65 b5 f2 5f 8d 0e 6c dc e8 df 53 a6 4d 53 63 9c 92 95 2a 85 9b 61 6f a3 52 72 5a 40 8d 6a d5 46 e7 b0 52 fd 70 03 2d b0 32 b8 1c 1e d1 3c 56 d5 ef 08 54 32 91 cc 64 a8 a5 df e0 d1 52 a8 74 0d 9b 74 e2 34 90 0f 72 57 51 a9 95 1e bd 49 ff 29 a0 f2 bb b9 06 ae 85 6b b2 d6 f7 15 d6 3a 60 d8 58 b9 08 c9 77 f7 de 7d a5 b8 80 ca 69 cf 91 51 ad 9d 02 95 85 eb 81 48 59 b3 20 88 fb c8 Data Ascii: gYP-M\|9K o[9MQ5qm\#a8l\|sS^~S#'9SPa#}j~Yv)AX7:(If4}B@Ce_lSMScaoRrZ@jFRp-2<VT2dRtt4rWQI)k:`Xw}iQHY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49807	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:36 UTC	726	OUT	GET /images/v4/filled_stars.svg HTTP/1.1 Host: img.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
2025-01-15 22:20:36 UTC	303	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:26 GMT Content-Type: image/svg+xml Content-Length: 883 Last-Modified: Mon, 16 Jan 2023 12:19:37 GMT Connection: close ETag: "63c540d9-373" Expires: Thu, 15 Jan 2026 21:59:26 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:36 UTC	883	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 61 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 30 20 31 33 22 3e 3c 64 65 66 73 3e 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 62 22 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 38 30 22 20 68 65 69 67 68 74 3d 22 31 33 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 6e 6f 6e 65 3b 22 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 3e 3c 2f 64 65 66 73 3e 3c 67 20 73 74 79 6c 65 3d 22 63 6c 69 70 2d 70 61 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="a" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 80 13"><defs><clipPath id="b"><rect width="80" height="13" style="fill:none;"/></clipPath></defs><g style="clip-pa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49812	104.22.16.194	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:36 UTC	465	OUT	GET /images/v4/empty_stars.svg HTTP/1.1 Host: software.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
2025-01-15 22:20:36 UTC	381	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:36 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 07 Jun 2024 08:54:12 GMT Vary: Accept-Encoding ETag: W/"6662cab4-693" Expires: Thu, 16 Jan 2025 12:48:20 GMT Cache-Control: max-age=604800 CF-Cache-Status: HIT Age: 141430 Server: cloudflare CF-RAY: 9029410a9d7d7c94-EWR
2025-01-15 22:20:36 UTC	988	IN	Data Raw: 36 39 33 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 61 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 31 22 20 68 65 69 67 68 74 3d 22 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 31 20 32 30 22 3e 3c 70 61 74 68 20 64 3d 22 6d 31 30 2e 35 38 2c 33 2e 33 38 6c 31 2e 38 34 2c 33 2e 38 35 2e 33 31 2e 37 37 2e 37 37 2e 31 35 2c 34 2e 31 34 2e 36 32 2d 32 2e 39 31 2c 32 2e 39 32 2d 2e 36 31 2e 34 36 2e 31 35 2e 37 37 2e 37 37 2c 34 2e 31 35 2d 33 2e 36 38 2d 31 2e 38 35 2d 2e 37 37 2d 2e 33 31 2d 2e 37 37 2e 33 31 2d 33 2e 38 33 2c 32 2c 2e 37 37 2d 34 2e Data Ascii: 693<?xml version="1.0" encoding="UTF-8"?><svg id="a" xmlns="http://www.w3.org/2000/svg" width="121" height="20" viewBox="0 0 121 20"><path d="m10.58,3.38l1.84,3.85.31.77.77.15,4.14.62-2.91,2.92-.61.46.15.77.77,4.15-3.68-1.85-.77-.31-.77.31-3.83,2,.77-4.
2025-01-15 22:20:36 UTC	702	IN	Data Raw: 38 2c 36 2e 34 34 2c 33 2e 33 38 2d 31 2e 32 33 2d 37 2e 32 33 2c 35 2e 32 31 2d 35 2e 30 38 2d 37 2e 32 2d 31 2e 30 38 2d 33 2e 32 32 2d 36 2e 36 32 5a 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 23 66 36 36 3b 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 38 35 2e 35 38 2c 33 2e 33 38 6c 31 2e 38 34 2c 33 2e 38 35 2e 33 31 2e 37 37 2e 37 37 2e 31 35 2c 34 2e 31 34 2e 36 32 2d 32 2e 39 31 2c 32 2e 39 32 2d 2e 36 31 2e 34 36 2e 31 35 2e 37 37 2e 37 37 2c 34 2e 31 35 2d 33 2e 36 38 2d 31 2e 38 35 2d 2e 37 37 2d 2e 33 31 2d 2e 37 37 2e 33 31 2d 33 2e 38 33 2c 32 2c 2e 37 37 2d 34 2e 31 35 2e 31 35 2d 2e 37 37 2d 2e 36 31 2d 2e 36 32 2d 33 2e 30 37 2d 32 2e 39 32 2c 34 2e 31 34 2d 2e 36 32 2e 37 37 2d 2e 31 35 2e 33 31 2d 2e 37 37 2c 32 2e 31 35 2d 33 2e 38 35 5a 6d Data Ascii: 8,6.44,3.38-1.23-7.23,5.21-5.08-7.2-1.08-3.22-6.62Z" style="fill:#f66;"/><path d="m85.58,3.38l1.84,3.85.31.77.77.15,4.14.62-2.91,2.92-.61.46.15.77.77,4.15-3.68-1.85-.77-.31-.77.31-3.83,2,.77-4.15.15-.77-.61-.62-3.07-2.92,4.14-.62.77-.15.31-.77,2.15-3.85Zm
2025-01-15 22:20:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49809	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:36 UTC	464	OUT	GET /icons/png/48/1866/1866515.png HTTP/1.1 Host: img.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
2025-01-15 22:20:37 UTC	300	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:26 GMT Content-Type: image/png Content-Length: 3912 Last-Modified: Sat, 22 Jul 2023 05:17:57 GMT Connection: close ETag: "64bb6685-f48" Expires: Thu, 15 Jan 2026 21:59:26 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:37 UTC	3912	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 06 00 00 00 57 02 f9 87 00 00 0f 0f 49 44 41 54 68 81 d5 9a 7b 7c 1c d5 75 c7 bf 77 76 76 b5 da 5d ad a4 b5 24 cb b2 2c 24 23 0b 63 0c 76 8c 01 c7 31 cf d8 0e 24 4e 5b c0 24 40 08 6f 3e d0 36 09 10 43 09 25 7c 1c c7 4d 93 b8 e4 49 02 79 34 01 0c 31 a1 84 06 68 08 04 02 38 89 79 25 44 96 1f c8 d8 c8 c6 c8 92 ad b7 f6 bd b3 b3 33 f7 f4 8f 91 8c 65 3d 2c 4c 93 b6 e7 f3 b9 9f dd 9d b9 f7 9c df ef dc 73 cf 3d 77 66 95 88 f0 ff 59 8c c9 76 bc f1 f2 b2 05 a7 1c 5f 14 fa 4b 82 39 2a 11 91 49 b5 dd 7f 68 f8 8d f5 c7 fa cd 77 5e 12 5d 11 2a 52 c6 64 c7 fd a5 db a4 3b c6 77 34 6e 2e b4 37 89 b5 a9 41 ba ef a9 7d 69 d5 d2 e8 39 ff db e0 45 04 35 99 35 70 c6 07 43 c1 17 1f 9b b1 13 a1 4e b4 e0 Data Ascii: PNGIHDR00WIDATh{\|uwvv]$,$#cv1$N[$@o>6C%\|MIy41h8y%D3e=,Ls=wfYv_K9Ihw^]Rd;w4n.7A}i9E55pCN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49811	104.22.16.194	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:36 UTC	492	OUT	GET /ajax/th_view.php?id=3948072 HTTP/1.1 Host: nuance-pdf-professional2.software.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
2025-01-15 22:20:37 UTC	389	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:37 GMT Content-Type: image/gif Content-Length: 43 Connection: close X-Robots-Tag: noindex, nofollow Expires: Fri, 16 Jan 2026 22:20:36 GMT Pragma: cache Cache-Control: max-age=31622400 CF-Cache-Status: HIT Age: 1 Last-Modified: Wed, 15 Jan 2025 22:20:36 GMT Accept-Ranges: bytes Server: cloudflare CF-RAY: 9029410b7ffe47a4-DFW
2025-01-15 22:20:37 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49810	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:36 UTC	471	OUT	GET /images/default_icon/default_48_0.png HTTP/1.1 Host: img.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
2025-01-15 22:20:37 UTC	300	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:26 GMT Content-Type: image/png Content-Length: 2217 Last-Modified: Fri, 24 Aug 2018 10:02:54 GMT Connection: close ETag: "5b7fd7ce-8a9" Expires: Thu, 15 Jan 2026 21:59:26 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:37 UTC	2217	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 03 00 00 00 60 dc 09 b5 00 00 02 f7 50 4c 54 45 4c 69 71 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 73 7f 93 76 82 96 78 84 98 7b 87 9b 7c 88 9c 7d 89 9d 7e 8a 9e 7f 8a 9e 7f 8b 9f 80 8c a0 81 8d a1 82 8e a2 83 8f a3 84 90 a3 85 91 a5 86 91 a5 87 93 a6 87 93 a7 88 94 a8 89 95 a9 8a 96 a9 8c 96 a6 8c 96 a7 8b 96 aa 8b 97 aa 8b 97 ab 8d 97 a7 8d 97 a8 8c 98 ab 8c 98 ac 8e 98 a9 8d 99 ad 8f 99 aa 90 99 aa 90 99 ab 8e 9a ad 8e 9a ae 90 9a ab 90 9b ac 8f 9b af 91 9b ac 91 9c ad 90 9c b0 92 9c ae 91 9d b1 93 9d ae 93 9d af 92 9e b1 92 9e b2 94 9e b0 94 9f b0 94 9f b3 95 9f b1 94 a0 b4 96 a0 b2 97 a0 b1 96 a1 b2 95 a1 b5 96 a1 b3 97 a2 b3 96 a2 b6 97 a2 b4 98 a2 b5 99 a2 b3 97 Data Ascii: PNGIHDR00`PLTELiqsvx{\|}~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49813	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:37 UTC	720	OUT	GET /images/v4/5stars.svg HTTP/1.1 Host: img.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
2025-01-15 22:20:37 UTC	304	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:26 GMT Content-Type: image/svg+xml Content-Length: 1112 Last-Modified: Wed, 02 Jun 2021 11:45:16 GMT Connection: close ETag: "60b76f4c-458" Expires: Thu, 15 Jan 2026 21:59:26 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:37 UTC	1112	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 30 2e 32 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 d0 a1 d0 bb d0 be d0 b9 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49814	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:37 UTC	720	OUT	GET /images/v4/4stars.svg HTTP/1.1 Host: img.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
2025-01-15 22:20:37 UTC	304	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:27 GMT Content-Type: image/svg+xml Content-Length: 1314 Last-Modified: Wed, 02 Jun 2021 11:47:04 GMT Connection: close ETag: "60b76fb8-522" Expires: Thu, 15 Jan 2026 21:59:27 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:37 UTC	1314	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 31 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 d0 a1 d0 bb d0 be d0 b9 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.1.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49815	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:37 UTC	462	OUT	GET /images/v3/logo_si_white.svg HTTP/1.1 Host: img.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
2025-01-15 22:20:37 UTC	305	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:27 GMT Content-Type: image/svg+xml Content-Length: 6399 Last-Modified: Fri, 24 Aug 2018 10:02:56 GMT Connection: close ETag: "5b7fd7d0-18ff" Expires: Thu, 15 Jan 2026 21:59:27 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:37 UTC	6399	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 38 34 20 32 36 2e 30 31 22 3e 3c 74 69 74 6c 65 3e 6c 6f 67 6f 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 31 32 2e 34 36 2c 30 61 31 32 2e 35 2c 31 32 2e 35 2c 30 2c 31 2c 30 2c 36 2e 32 31 2c 32 33 2e 33 35 63 32 2c 31 2c 33 2e 30 37 2c 31 2e 33 38 2c 35 2e 34 39 2c 32 2e 36 35 2d 2e 37 34 2d 32 2e 34 34 2d 31 2d 33 2e 39 2d 31 2e 35 34 2d 36 2e 30 36 61 31 33 2e 31 2c 31 33 2e 31 2c 30 2c 30 2c 30 2c 32 2e 33 32 2d 37 2e 34 32 41 31 32 2e 35 32 2c 31 32 2e 35 32 2c 30 2c 30 2c 30 2c 31 32 2e 34 36 2c 30 5a 6d 30 2c 32 32 2e 35 61 31 30 2c 31 30 2c 30 2c 31 2c 31 2c 31 30 2d 31 30 41 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 284 26.01"><title>logo</title><path d="M12.46,0a12.5,12.5,0,1,0,6.21,23.35c2,1,3.07,1.38,5.49,2.65-.74-2.44-1-3.9-1.54-6.06a13.1,13.1,0,0,0,2.32-7.42A12.52,12.52,0,0,0,12.46,0Zm0,22.5a10,10,0,1,1,10-10A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49816	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:37 UTC	720	OUT	GET /images/v4/3stars.svg HTTP/1.1 Host: img.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
2025-01-15 22:20:37 UTC	304	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:27 GMT Content-Type: image/svg+xml Content-Length: 1134 Last-Modified: Wed, 02 Jun 2021 11:45:16 GMT Connection: close ETag: "60b76f4c-46e" Expires: Thu, 15 Jan 2026 21:59:27 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:37 UTC	1134	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 30 2e 32 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 d0 a1 d0 bb d0 be d0 b9 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49817	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:37 UTC	465	OUT	GET /icons/png/128/3439/3439369.png HTTP/1.1 Host: img.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
2025-01-15 22:20:37 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:27 GMT Content-Type: image/png Content-Length: 11924 Last-Modified: Tue, 08 Mar 2022 21:53:27 GMT Connection: close ETag: "6227d057-2e94" Expires: Thu, 15 Jan 2026 21:59:27 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:37 UTC	11924	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 80 08 06 00 00 00 c3 3e 61 cb 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 00 48 00 00 00 48 00 46 c9 6b 3e 00 00 2d 89 49 44 41 54 78 da ed 9d 6b 70 5b e7 79 e7 7f 2f ee 20 08 92 00 48 40 04 c0 0b 08 91 14 65 5b 94 64 f9 12 5b 72 6d 29 49 13 7b eb 89 33 9d 74 77 13 4f 7a db 76 bb 1f d2 6f 3b 99 cc ba 65 eb e9 6d 76 67 9a 66 26 c9 a4 53 b7 75 ec cd a5 de 5a 89 e2 58 b1 63 d9 96 44 2b 12 75 a3 68 99 77 82 22 c5 3b 01 82 22 88 0b 01 1c Data Ascii: PNGIHDR>agAMAasRGB cHRMz&u0`:pQ<bKGDpHYsHHFk>-IDATxkp[y/ H@e[d[rm)I{3twOzvo;emvgf&SuZXcD+uhw";"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49819	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:37 UTC	720	OUT	GET /images/v4/2stars.svg HTTP/1.1 Host: img.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
2025-01-15 22:20:37 UTC	304	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:27 GMT Content-Type: image/svg+xml Content-Length: 1134 Last-Modified: Wed, 02 Jun 2021 11:45:16 GMT Connection: close ETag: "60b76f4c-46e" Expires: Thu, 15 Jan 2026 21:59:27 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:37 UTC	1134	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 30 2e 32 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 d0 a1 d0 bb d0 be d0 b9 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49818	142.250.185.162	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:37 UTC	871	OUT	GET /pagead/html/r20250113/r20190131/zrt_lookup_fy2021.html HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:37 UTC	638	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: cafe Content-Length: 9061 X-XSS-Protection: 0 Date: Wed, 15 Jan 2025 18:46:58 GMT Expires: Wed, 29 Jan 2025 18:46:58 GMT Cache-Control: public, max-age=1209600 Age: 12819 ETag: 7793694970870604198 Content-Type: text/html; charset=UTF-8 Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-15 22:20:37 UTC	752	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 6c 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 6e 2c 70 3b 61 3a 7b 66 6f 72 28 76 61 72 20 61 61 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 77 3d 6c 2c 7a 3d 30 3b 7a 3c 61 61 2e 6c 65 6e 67 74 68 3b 7a 2b 2b 29 69 66 28 77 3d 77 5b 61 61 5b 7a 5d 5d 2c 77 3d 3d 6e 75 6c 6c 29 7b 70 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 70 3d 77 Data Ascii: <!DOCTYPE html><script>(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var l=this\|\|self;var n,p;a:{for(var aa=["CLOSURE_FLAGS"],w=l,z=0;z<aa.length;z++)if(w=w[aa[z]],w==null){p=null;break a}p=w
2025-01-15 22:20:37 UTC	1390	IN	Data Raw: 47 28 61 29 7b 47 5b 22 20 22 5d 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 47 5b 22 20 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 76 61 72 20 66 61 3d 63 61 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 77 65 62 6b 69 74 22 29 21 3d 2d 31 26 26 21 43 28 22 45 64 67 65 22 29 3b 21 43 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 46 28 29 3b 46 28 29 3b 43 28 22 53 61 66 61 72 69 22 29 26 26 28 46 28 29 7c 7c 28 45 28 29 3f 30 3a 43 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 45 28 29 3f 30 3a 43 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 45 28 29 3f 30 3a 43 28 22 45 64 67 65 22 29 29 7c 7c 28 45 28 29 3f 42 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 43 28 22 45 64 67 2f 22 29 29 7c 7c 45 28 29 26 26 42 28 22 4f 70 65 72 61 Data Ascii: G(a){G[" "](a);return a}G[" "]=function(){};var fa=ca().toLowerCase().indexOf("webkit")!=-1&&!C("Edge");!C("Android")\|\|F();F();C("Safari")&&(F()\|\|(E()?0:C("Coast"))\|\|(E()?0:C("Opera"))\|\|(E()?0:C("Edge"))\|\|(E()?B("Microsoft Edge"):C("Edg/"))\|\|E()&&B("Opera
2025-01-15 22:20:37 UTC	1390	IN	Data Raw: 72 65 71 75 65 73 74 73 3d 5b 5d 29 3b 63 6f 6e 73 74 20 62 3d 70 61 28 6c 2e 64 6f 63 75 6d 65 6e 74 29 3b 62 2e 73 72 63 3d 61 3b 6c 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 2e 70 75 73 68 28 62 29 7d 3b 6c 65 74 20 4a 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 72 61 28 29 7b 69 66 28 21 4a 29 62 3a 7b 76 61 72 20 61 3d 6e 61 28 29 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 74 72 79 7b 63 6f 6e 73 74 20 63 3d 61 5b 62 5d 2e 66 72 61 6d 65 73 2e 67 6f 6f 67 6c 65 5f 65 73 66 3b 69 66 28 63 26 26 49 28 63 29 29 7b 4a 3d 63 3b 62 72 65 61 6b 20 62 7d 7d 63 61 74 63 68 28 63 29 7b 7d 4a 3d 6e 75 6c 6c 7d 28 61 3d 4a 29 3f 28 28 62 3d 61 2e 65 73 66 5f 70 72 6f 70 41 72 72 61 79 29 7c 7c 28 Data Ascii: requests=[]);const b=pa(l.document);b.src=a;l.google_image_requests.push(b)};let J=null;function ra(){if(!J)b:{var a=na();for(var b=0;b<a.length;b++)try{const c=a[b].frames.google_esf;if(c&&I(c)){J=c;break b}}catch(c){}J=null}(a=J)?((b=a.esf_propArray)\|\|(
2025-01-15 22:20:37 UTC	1390	IN	Data Raw: 69 71 75 65 49 64 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7d 7d 3b 63 6f 6e 73 74 20 4f 3d 6c 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2c 46 61 3d 21 21 28 4f 26 26 4f 2e 6d 61 72 6b 26 26 4f 2e 6d 65 61 73 75 72 65 26 26 4f 2e 63 6c 65 61 72 4d 61 72 6b 73 29 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6c 65 74 20 62 3d 21 31 2c 63 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 62 7c 7c 28 63 3d 61 28 29 2c 62 3d 21 30 29 3b 72 65 74 75 72 6e 20 63 7d 7d 28 28 29 3d 3e 7b 76 61 72 20 61 3b 69 66 28 61 3d 46 61 29 7b 76 61 72 20 62 3b 69 66 28 4d 3d 3d 3d 6e 75 6c 6c 29 7b 4d 3d 22 22 3b 74 72 79 7b 61 3d 22 22 3b 74 72 79 7b 61 3d 6c 2e 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 7d 63 61 74 63 68 28 63 29 7b 61 3d 6c 2e 6c 6f 63 61 74 69 Data Ascii: iqueId=Math.random()}};const O=l.performance,Fa=!!(O&&O.mark&&O.measure&&O.clearMarks),P=function(a){let b=!1,c;return function(){b\|\|(c=a(),b=!0);return c}}(()=>{var a;if(a=Fa){var b;if(M===null){M="";try{a="";try{a=l.top.location.hash}catch(c){a=l.locati
2025-01-15 22:20:37 UTC	1390	IN	Data Raw: 3e 3d 67 2e 6c 65 6e 67 74 68 29 7b 64 2d 3d 67 2e 6c 65 6e 67 74 68 3b 63 2b 3d 67 3b 66 3d 61 2e 69 3b 62 72 65 61 6b 7d 62 3d 62 3d 3d 6e 75 6c 6c 3f 68 3a 62 7d 7d 7d 61 3d 22 22 3b 62 21 3d 6e 75 6c 6c 26 26 28 61 3d 60 24 7b 66 7d 24 7b 22 74 72 6e 22 7d 3d 24 7b 62 7d 60 29 3b 72 65 74 75 72 6e 20 63 2b 61 7d 76 61 72 20 52 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 69 3d 22 26 22 3b 74 68 69 73 2e 68 3d 7b 7d 3b 74 68 69 73 2e 6a 3d 30 3b 74 68 69 73 2e 67 3d 5b 5d 7d 7d 3b 76 61 72 20 4d 61 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 3d 6e 75 6c 6c 29 7b 74 68 69 73 2e 6d 3d 53 3b 74 68 69 73 2e 68 3d 61 3b 74 68 69 73 2e 67 3d 6e 75 6c 6c 3b 74 68 69 73 2e 69 3d 21 31 3b 74 68 69 73 2e 6f 3d 74 Data Ascii: >=g.length){d-=g.length;c+=g;f=a.i;break}b=b==null?h:b}}}a="";b!=null&&(a=`${f}${"trn"}=${b}`);return c+a}var R=class{constructor(){this.i="&";this.h={};this.j=0;this.g=[]}};var Ma=class{constructor(a=null){this.m=S;this.h=a;this.g=null;this.i=!1;this.o=t
2025-01-15 22:20:37 UTC	1390	IN	Data Raw: 3d 71 5b 34 5d 3b 79 3d 22 22 3b 44 26 26 28 79 2b 3d 44 2b 22 3a 22 29 3b 76 61 26 26 28 79 2b 3d 22 2f 2f 22 2c 79 2b 3d 76 61 2c 77 61 26 26 28 79 2b 3d 22 3a 22 2b 77 61 29 29 3b 76 61 72 20 78 61 3d 79 7d 65 6c 73 65 20 78 61 3d 22 22 3b 44 3d 74 3b 59 3d 5b 59 2c 7b 75 72 6c 3a 78 61 7d 5d 3b 44 2e 67 2e 70 75 73 68 28 35 29 3b 44 2e 68 5b 35 5d 3d 59 3b 4c 61 28 74 68 69 73 2e 6d 2c 66 2c 74 2c 74 68 69 73 2e 69 2c 63 29 7d 63 61 74 63 68 28 74 29 7b 74 72 79 7b 4c 61 28 74 68 69 73 2e 6d 2c 66 2c 7b 63 6f 6e 74 65 78 74 3a 22 65 63 6d 73 65 72 72 22 2c 72 63 74 78 3a 61 2c 6d 73 67 3a 4c 28 74 29 2c 75 72 6c 3a 65 3f 2e 67 2e 75 72 6c 3f 3f 22 22 7d 2c 74 68 69 73 2e 69 2c 63 29 7d 63 61 74 63 68 28 4e 29 7b 7d 7d 72 65 74 75 72 6e 21 30 7d 7d 3b Data Ascii: =q[4];y="";D&&(y+=D+":");va&&(y+="//",y+=va,wa&&(y+=":"+wa));var xa=y}else xa="";D=t;Y=[Y,{url:xa}];D.g.push(5);D.h[5]=Y;La(this.m,f,t,this.i,c)}catch(t){try{La(this.m,f,{context:"ecmserr",rctx:a,msg:L(t),url:e?.g.url??""},this.i,c)}catch(N){}}return!0}};
2025-01-15 22:20:37 UTC	1359	IN	Data Raw: 21 30 3b 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 22 63 6f 6d 70 6c 65 74 65 22 3f 50 61 28 29 3a 55 2e 67 26 26 68 61 28 28 29 3d 3e 7b 50 61 28 29 7d 29 7d 29 28 29 3b 76 61 72 20 51 61 3d 61 3d 3e 7b 54 2e 67 3d 62 3d 3e 7b 65 61 28 61 2c 63 3d 3e 7b 63 28 62 29 7d 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 52 61 28 61 29 7b 61 3d 61 3d 3d 3d 6e 75 6c 6c 3f 22 6e 75 6c 6c 22 3a 61 3d 3d 3d 76 6f 69 64 20 30 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 61 3b 48 3d 3d 3d 76 6f 69 64 20 30 26 26 28 48 3d 6a 61 28 29 29 3b 76 61 72 20 62 3d 48 3b 72 65 74 75 72 6e 20 6e 65 77 20 6b 61 28 62 3f 62 2e 63 72 65 61 74 65 48 54 4d 4c 28 61 29 3a 61 29 7d 3b 76 61 72 20 56 3b 69 66 28 56 3d 66 61 29 7b 76 61 72 20 57 3d 22 49 46 Data Ascii: !0;window.document.readyState=="complete"?Pa():U.g&&ha(()=>{Pa()})})();var Qa=a=>{T.g=b=>{ea(a,c=>{c(b)})}};function Ra(a){a=a===null?"null":a===void 0?"undefined":a;H===void 0&&(H=ja());var b=H;return new ka(b?b.createHTML(a):a)};var V;if(V=fa){var W="IF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49824	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:37 UTC	720	OUT	GET /images/v4/1stars.svg HTTP/1.1 Host: img.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
2025-01-15 22:20:37 UTC	304	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:27 GMT Content-Type: image/svg+xml Content-Length: 1134 Last-Modified: Wed, 02 Jun 2021 11:45:16 GMT Connection: close ETag: "60b76f4c-46e" Expires: Thu, 15 Jan 2026 21:59:27 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:37 UTC	1134	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 30 2e 32 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 d0 a1 d0 bb d0 be d0 b9 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49820	142.250.185.162	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:37 UTC	1952	OUT	GET /pagead/ads?client=ca-pub-4821006852914359&output=html&h=90&slotname=7854405427&adk=4056614258&adf=1706824535&pi=t.ma~as.7854405427&w=1200&abgtt=9&fwrn=4&fwrnh=100&lmt=1736870130&rafmt=2&format=1200x90&url=https%3A%2F%2Fnuance-pdf-professional2.software.informer.com%2F7.2%2F&fwr=0&fwrattr=true&rpe=1&resp_fmts=2&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736979634915&bpp=4&bdt=1617&idt=1532&shv=r20250113&mjsv=m202501090101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&correlator=4566372036047&frm=20&pv=2&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=311&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533202%2C31089683%2C95344791%2C95350245%2C95340252%2C95340254&oid=2&pvsid=3788874330487745&tmod=2006592406&uas=0&nvt=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=o [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:38 UTC	788	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 15 Jan 2025 22:20:38 GMT Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 15-Jan-2025 22:35:37 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 15 Jan 2025 22:20:38 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2025-01-15 22:20:38 UTC	602	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 35 30 31 31 34 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 3d 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 6c 65 66 74 4d 61 72 67 69 6e 3d 22 30 22 20 74 6f 70 4d 61 72 67 69 6e 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 64 69 63 6e 66 20 3d 20 7b 7d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 6a 63 3d 22 34 32 22 20 64 61 74 61 2d 6a 63 2d 76 Data Ascii: 8000<!doctype html><html><head><script>var jscVersion = 'r20250114';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {};</script><script data-jc="42" data-jc-v
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 2f 20 76 61 72 20 75 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 77 2c 78 3b 61 3a 7b 66 6f 72 28 76 61 72 20 62 61 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 79 3d 75 2c 7a 3d 30 3b 7a 3c 62 61 2e 6c 65 6e 67 74 68 3b 7a 2b 2b 29 69 66 28 79 3d 79 5b 62 61 5b 7a 5d 5d 2c 79 3d 3d 6e 75 6c 6c 29 7b 78 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 78 3d 79 7d 76 61 72 20 63 61 3d 78 26 26 78 5b 36 31 30 34 30 31 33 30 31 5d 3b 77 3d 63 61 21 3d 6e 75 6c 6c 3f 63 61 3a 21 31 3b 76 61 72 20 42 3b 63 6f 6e 73 74 20 64 61 3d 75 2e 6e 61 76 69 67 61 74 6f 72 3b 42 3d 64 61 3f 64 61 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 Data Ascii: / var u=this\|\|self;function aa(a){return a};var w,x;a:{for(var ba=["CLOSURE_FLAGS"],y=u,z=0;z<ba.length;z++)if(y=y[ba[z]],y==null){x=null;break a}x=y}var ca=x&&x[610401301];w=ca!=null?ca:!1;var B;const da=u.navigator;B=da?da.userAgentData\|\|null:null;funct
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 3a 62 3a 22 6e 75 6c 6c 22 7d 3a 20 24 7b 61 7d 60 29 3b 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 69 66 28 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 76 61 28 62 29 7d 66 75 6e 63 74 69 6f 6e 20 76 61 28 61 29 7b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 61 29 7b 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 61 29 3f 61 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 65 20 22 62 69 67 69 6e 74 22 3a 72 65 74 75 72 6e 20 61 3e 3d 72 61 26 26 61 3c 3d 73 61 3f 4e 75 6d 62 65 72 28 61 29 3a 53 74 72 69 6e Data Ascii: :b:"null"}: ${a}`);}return a}function K(a){if(a!=null&&typeof a!=="string")throw Error();return a};function ua(a,b){return va(b)}function va(a){switch(typeof a){case "number":return isFinite(a)?a:String(a);case "bigint":return a>=ra&&a<=sa?Number(a):Strin
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 62 7c 32 35 36 29 3a 61 5b 66 5d 3d 64 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 42 61 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 6c 65 74 20 4d 3b 76 61 72 20 4e 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 61 3a 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 7b 76 61 72 20 62 3d 39 36 3b 61 3d 5b 5d 7d 65 6c 73 65 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6e 61 72 72 22 29 3b 62 3d 61 5b 49 5d 7c 30 3b 69 66 28 62 26 32 30 34 38 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 61 72 72 22 29 3b 69 66 28 62 26 36 34 29 62 72 65 61 6b 20 61 3b 76 61 72 20 63 3d 61 3b 62 7c 3d 36 34 3b 76 61 72 20 64 3d 63 2e 6c 65 6e 67 74 68 3b 69 66 28 64 26 26 28 2d 2d 64 2c 71 61 28 63 5b 64 5d 29 29 29 7b 62 Data Ascii: b\|256):a[f]=d)};function Ba(a){return a}let M;var N=class{constructor(a){a:{if(a==null){var b=96;a=[]}else{if(!Array.isArray(a))throw Error("narr");b=a[I]\|0;if(b&2048)throw Error("farr");if(b&64)break a;var c=a;b\|=64;var d=c.length;if(d&&(--d,qa(c[d]))){b
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 29 3b 76 61 72 20 50 3d 28 61 2c 62 29 3d 3e 61 2e 73 75 62 73 74 72 69 6e 67 28 61 2e 6c 65 6e 67 74 68 2d 37 29 3d 3d 22 26 61 64 75 72 6c 3d 22 3f 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 61 2e 6c 65 6e 67 74 68 2d 37 29 2b 62 2b 22 26 61 64 75 72 6c 3d 22 3a 61 2b 62 3b 66 75 6e 63 74 69 6f 6e 20 51 28 61 2c 62 2c 63 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 61 28 61 2c 62 2c 63 29 7b 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 7d 3b 76 61 72 20 4c 61 3d 52 65 67 45 78 70 28 22 5e 28 3f 3a 28 5b 5e 3a 2f 3f Data Ascii: );var P=(a,b)=>a.substring(a.length-7)=="&adurl="?a.substring(0,a.length-7)+b+"&adurl=":a+b;function Q(a,b,c){a.addEventListener&&a.addEventListener(b,c,!1)}function Ka(a,b,c){a.removeEventListener&&a.removeEventListener(b,c,!1)};var La=RegExp("^(?:([^:/?
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 57 61 28 61 2c 62 29 7b 69 66 28 61 29 66 6f 72 28 63 6f 6e 73 74 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 28 61 5b 63 5d 2c 63 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 58 61 28 61 3d 64 6f 63 75 6d 65 6e 74 29 7b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 59 61 28 61 2c 62 3d 6e 75 6c 6c 29 7b 5a 61 28 61 2c 62 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 61 28 61 2c 62 29 7b 75 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 7c 7c 28 75 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 Data Ascii: Math.random()}}function Wa(a,b){if(a)for(const c in a)Object.prototype.hasOwnProperty.call(a,c)&&b(a[c],c,a)}function Xa(a=document){return a.createElement("img")};function Ya(a,b=null){Za(a,b)}function Za(a,b){u.google_image_requests\|\|(u.google_image_req
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 62 2b 3d 22 3a 20 22 2b 61 2e 6d 65 73 73 61 67 65 29 3b 69 66 28 61 2e 73 74 61 63 6b 29 61 3a 7b 61 3d 61 2e 73 74 61 63 6b 3b 76 61 72 20 63 3d 62 3b 74 72 79 7b 61 2e 69 6e 64 65 78 4f 66 28 63 29 3d 3d 2d 31 26 26 28 61 3d 63 2b 22 5c 6e 22 2b 61 29 3b 6c 65 74 20 64 3b 66 6f 72 28 3b 61 21 3d 64 3b 29 64 3d 61 2c 61 3d 61 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 28 28 68 74 74 70 73 3f 3a 2f 2e 2e 2a 2f 29 5b 5e 2f 3a 5d 2a 3a 5c 5c 64 2b 28 3f 3a 2e 7c 5c 6e 29 2a 29 5c 5c 32 22 29 2c 22 24 31 22 29 3b 62 3d 61 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 5c 6e 20 2a 22 2c 22 67 22 29 2c 22 5c 6e 22 29 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 64 29 7b 62 3d 63 3b 62 72 65 61 6b 20 61 7d 62 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 Data Ascii: b+=": "+a.message);if(a.stack)a:{a=a.stack;var c=b;try{a.indexOf(c)==-1&&(a=c+"\n"+a);let d;for(;a!=d;)d=a,a=a.replace(RegExp("((https?:/../)[^/:]:\\d+(?:.\|\n))\\2"),"$1");b=a.replace(RegExp("\n ","g"),"\n");break a}catch(d){b=c;break a}b=void 0}retur
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 2c 63 2c 64 2c 65 29 29 26 26 66 2e 70 75 73 68 28 60 24 7b 6c 7d 3d 24 7b 67 7d 60 29 7d 29 3b 72 65 74 75 72 6e 20 66 2e 6a 6f 69 6e 28 62 29 7d 20 66 75 6e 63 74 69 6f 6e 20 70 62 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 22 22 3b 62 3d 62 7c 7c 22 26 22 3b 63 3d 63 7c 7c 22 2c 24 22 3b 74 79 70 65 6f 66 20 63 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 28 63 3d 63 2e 73 70 6c 69 74 28 22 22 29 29 3b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 7b 69 66 28 64 7c 7c 28 64 3d 30 29 2c 64 3c 63 2e 6c 65 6e 67 74 68 29 7b 63 6f 6e 73 74 20 66 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 67 3d 30 3b 67 3c 61 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 66 2e 70 75 73 68 28 70 62 28 61 5b 67 5d 2c 62 2c 63 2c 64 2b Data Ascii: ,c,d,e))&&f.push(`${l}=${g}`)});return f.join(b)} function pb(a,b,c,d,e){if(a==null)return"";b=b\|\|"&";c=c\|\|",$";typeof c==="string"&&(c=c.split(""));if(a instanceof Array){if(d\|\|(d=0),d<c.length){const f=[];for(let g=0;g<a.length;g++)f.push(pb(a[g],b,c,d+
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 65 74 20 66 3d 76 6f 69 64 20 30 3b 74 72 79 7b 63 6f 6e 73 74 20 45 3d 6e 65 77 20 73 62 3b 76 61 72 20 67 3d 45 3b 67 2e 67 2e 70 75 73 68 28 31 29 3b 67 2e 69 5b 31 5d 3d 56 28 22 63 6f 6e 74 65 78 74 22 2c 61 29 3b 62 2e 65 72 72 6f 72 26 26 62 2e 6d 65 74 61 26 26 62 2e 69 64 7c 7c 28 62 3d 6e 65 77 20 65 62 28 62 2c 7b 6d 65 73 73 61 67 65 3a 66 62 28 62 29 7d 29 29 3b 67 3d 62 3b 69 66 28 67 2e 6d 73 67 29 7b 62 3d 45 3b 76 61 72 20 6c 3d 67 2e 6d 73 67 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 35 31 32 29 3b 62 2e 67 2e 70 75 73 68 28 32 29 3b 62 2e 69 5b 32 5d 3d 56 28 22 6d 73 67 22 2c 6c 29 7d 76 61 72 20 6b 3d 67 2e 6d 65 74 61 7c 7c 7b 7d 3b 6c 3d 6b 3b 69 66 28 74 68 69 73 2e 69 29 74 72 79 7b 74 68 69 73 2e 69 28 6c 29 7d 63 61 74 63 68 28 76 Data Ascii: et f=void 0;try{const E=new sb;var g=E;g.g.push(1);g.i[1]=V("context",a);b.error&&b.meta&&b.id\|\|(b=new eb(b,{message:fb(b)}));g=b;if(g.msg){b=E;var l=g.msg.substring(0,512);b.g.push(2);b.i[2]=V("msg",l)}var k=g.meta\|\|{};l=k;if(this.i)try{this.i(l)}catch(v
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 65 63 6d 73 65 72 72 22 2c 72 63 74 78 3a 61 2c 6d 73 67 3a 66 62 28 45 29 2c 20 75 72 6c 3a 66 3f 2e 67 2e 75 72 6c 3f 3f 22 22 7d 2c 74 68 69 73 2e 6a 2c 63 29 7d 63 61 74 63 68 28 57 29 7b 7d 7d 72 65 74 75 72 6e 21 30 7d 7d 3b 63 6c 61 73 73 20 78 62 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 76 62 28 61 2c 62 2c 63 2c 64 3d 21 31 2c 65 2c 66 29 7b 69 66 28 28 64 3f 61 2e 67 3a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 3c 28 65 7c 7c 2e 30 31 29 29 74 72 79 7b 6c 65 74 20 67 3b 63 20 69 6e 73 74 61 6e 63 65 6f 66 20 73 62 3f 67 3d 63 3a 28 67 3d 6e 65 77 20 73 62 2c 57 61 28 63 2c 28 6b 2c 68 29 3d 3e 7b 76 61 72 20 6d 3d 67 3b 63 6f 6e 73 74 20 6e 3d 6d 2e 6d 2b 2b 3b 6b 3d 56 28 68 2c 6b 29 3b 6d 2e 67 2e 70 75 73 68 28 6e 29 3b 6d 2e 69 5b 6e 5d 3d 6b 7d Data Ascii: ecmserr",rctx:a,msg:fb(E), url:f?.g.url??""},this.j,c)}catch(W){}}return!0}};class xb{};function vb(a,b,c,d=!1,e,f){if((d?a.g:Math.random())<(e\|\|.01))try{let g;c instanceof sb?g=c:(g=new sb,Wa(c,(k,h)=>{var m=g;const n=m.m++;k=V(h,k);m.g.push(n);m.i[n]=k}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49821	142.250.185.162	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:37 UTC	1970	OUT	GET /pagead/ads?client=ca-pub-4821006852914359&output=html&h=280&slotname=9917528229&adk=658919145&adf=3882744954&pi=t.ma~as.9917528229&w=336&abgtt=9&fwrn=4&fwrnh=100&lmt=1736870130&rafmt=3&format=336x280&url=https%3A%2F%2Fnuance-pdf-professional2.software.informer.com%2F7.2%2F&fwr=0&fwrattr=true&rpe=1&resp_fmts=1&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736979634919&bpp=1&bdt=1620&idt=1594&shv=r20250113&mjsv=m202501090101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=1200x90&correlator=4566372036047&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=15&ady=550&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533202%2C31089683%2C95344791%2C95350245%2C95340252%2C95340254&oid=2&pvsid=3788874330487745&tmod=2006592406&uas=0&nvt=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280% [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:38 UTC	788	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 15 Jan 2025 22:20:38 GMT Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 15-Jan-2025 22:35:37 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 15 Jan 2025 22:20:38 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2025-01-15 22:20:38 UTC	602	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 35 30 31 31 34 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 3d 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 6c 65 66 74 4d 61 72 67 69 6e 3d 22 30 22 20 74 6f 70 4d 61 72 67 69 6e 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 64 69 63 6e 66 20 3d 20 7b 7d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 6a 63 3d 22 34 32 22 20 64 61 74 61 2d 6a 63 2d 76 Data Ascii: 8000<!doctype html><html><head><script>var jscVersion = 'r20250114';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {};</script><script data-jc="42" data-jc-v
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 2f 20 76 61 72 20 75 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 77 2c 78 3b 61 3a 7b 66 6f 72 28 76 61 72 20 62 61 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 79 3d 75 2c 7a 3d 30 3b 7a 3c 62 61 2e 6c 65 6e 67 74 68 3b 7a 2b 2b 29 69 66 28 79 3d 79 5b 62 61 5b 7a 5d 5d 2c 79 3d 3d 6e 75 6c 6c 29 7b 78 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 78 3d 79 7d 76 61 72 20 63 61 3d 78 26 26 78 5b 36 31 30 34 30 31 33 30 31 5d 3b 77 3d 63 61 21 3d 6e 75 6c 6c 3f 63 61 3a 21 31 3b 76 61 72 20 42 3b 63 6f 6e 73 74 20 64 61 3d 75 2e 6e 61 76 69 67 61 74 6f 72 3b 42 3d 64 61 3f 64 61 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 Data Ascii: / var u=this\|\|self;function aa(a){return a};var w,x;a:{for(var ba=["CLOSURE_FLAGS"],y=u,z=0;z<ba.length;z++)if(y=y[ba[z]],y==null){x=null;break a}x=y}var ca=x&&x[610401301];w=ca!=null?ca:!1;var B;const da=u.navigator;B=da?da.userAgentData\|\|null:null;funct
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 3a 62 3a 22 6e 75 6c 6c 22 7d 3a 20 24 7b 61 7d 60 29 3b 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 69 66 28 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 76 61 28 62 29 7d 66 75 6e 63 74 69 6f 6e 20 76 61 28 61 29 7b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 61 29 7b 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 61 29 3f 61 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 65 20 22 62 69 67 69 6e 74 22 3a 72 65 74 75 72 6e 20 61 3e 3d 72 61 26 26 61 3c 3d 73 61 3f 4e 75 6d 62 65 72 28 61 29 3a 53 74 72 69 6e Data Ascii: :b:"null"}: ${a}`);}return a}function K(a){if(a!=null&&typeof a!=="string")throw Error();return a};function ua(a,b){return va(b)}function va(a){switch(typeof a){case "number":return isFinite(a)?a:String(a);case "bigint":return a>=ra&&a<=sa?Number(a):Strin
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 62 7c 32 35 36 29 3a 61 5b 66 5d 3d 64 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 42 61 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 6c 65 74 20 4d 3b 76 61 72 20 4e 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 61 3a 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 7b 76 61 72 20 62 3d 39 36 3b 61 3d 5b 5d 7d 65 6c 73 65 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6e 61 72 72 22 29 3b 62 3d 61 5b 49 5d 7c 30 3b 69 66 28 62 26 32 30 34 38 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 61 72 72 22 29 3b 69 66 28 62 26 36 34 29 62 72 65 61 6b 20 61 3b 76 61 72 20 63 3d 61 3b 62 7c 3d 36 34 3b 76 61 72 20 64 3d 63 2e 6c 65 6e 67 74 68 3b 69 66 28 64 26 26 28 2d 2d 64 2c 71 61 28 63 5b 64 5d 29 29 29 7b 62 Data Ascii: b\|256):a[f]=d)};function Ba(a){return a}let M;var N=class{constructor(a){a:{if(a==null){var b=96;a=[]}else{if(!Array.isArray(a))throw Error("narr");b=a[I]\|0;if(b&2048)throw Error("farr");if(b&64)break a;var c=a;b\|=64;var d=c.length;if(d&&(--d,qa(c[d]))){b
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 29 3b 76 61 72 20 50 3d 28 61 2c 62 29 3d 3e 61 2e 73 75 62 73 74 72 69 6e 67 28 61 2e 6c 65 6e 67 74 68 2d 37 29 3d 3d 22 26 61 64 75 72 6c 3d 22 3f 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 61 2e 6c 65 6e 67 74 68 2d 37 29 2b 62 2b 22 26 61 64 75 72 6c 3d 22 3a 61 2b 62 3b 66 75 6e 63 74 69 6f 6e 20 51 28 61 2c 62 2c 63 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 61 28 61 2c 62 2c 63 29 7b 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 7d 3b 76 61 72 20 4c 61 3d 52 65 67 45 78 70 28 22 5e 28 3f 3a 28 5b 5e 3a 2f 3f Data Ascii: );var P=(a,b)=>a.substring(a.length-7)=="&adurl="?a.substring(0,a.length-7)+b+"&adurl=":a+b;function Q(a,b,c){a.addEventListener&&a.addEventListener(b,c,!1)}function Ka(a,b,c){a.removeEventListener&&a.removeEventListener(b,c,!1)};var La=RegExp("^(?:([^:/?
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 57 61 28 61 2c 62 29 7b 69 66 28 61 29 66 6f 72 28 63 6f 6e 73 74 20 63 20 69 6e 20 61 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 63 29 26 26 62 28 61 5b 63 5d 2c 63 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 58 61 28 61 3d 64 6f 63 75 6d 65 6e 74 29 7b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 59 61 28 61 2c 62 3d 6e 75 6c 6c 29 7b 5a 61 28 61 2c 62 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 61 28 61 2c 62 29 7b 75 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 7c 7c 28 75 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 Data Ascii: Math.random()}}function Wa(a,b){if(a)for(const c in a)Object.prototype.hasOwnProperty.call(a,c)&&b(a[c],c,a)}function Xa(a=document){return a.createElement("img")};function Ya(a,b=null){Za(a,b)}function Za(a,b){u.google_image_requests\|\|(u.google_image_req
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 62 2b 3d 22 3a 20 22 2b 61 2e 6d 65 73 73 61 67 65 29 3b 69 66 28 61 2e 73 74 61 63 6b 29 61 3a 7b 61 3d 61 2e 73 74 61 63 6b 3b 76 61 72 20 63 3d 62 3b 74 72 79 7b 61 2e 69 6e 64 65 78 4f 66 28 63 29 3d 3d 2d 31 26 26 28 61 3d 63 2b 22 5c 6e 22 2b 61 29 3b 6c 65 74 20 64 3b 66 6f 72 28 3b 61 21 3d 64 3b 29 64 3d 61 2c 61 3d 61 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 28 28 68 74 74 70 73 3f 3a 2f 2e 2e 2a 2f 29 5b 5e 2f 3a 5d 2a 3a 5c 5c 64 2b 28 3f 3a 2e 7c 5c 6e 29 2a 29 5c 5c 32 22 29 2c 22 24 31 22 29 3b 62 3d 61 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 5c 6e 20 2a 22 2c 22 67 22 29 2c 22 5c 6e 22 29 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 64 29 7b 62 3d 63 3b 62 72 65 61 6b 20 61 7d 62 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 Data Ascii: b+=": "+a.message);if(a.stack)a:{a=a.stack;var c=b;try{a.indexOf(c)==-1&&(a=c+"\n"+a);let d;for(;a!=d;)d=a,a=a.replace(RegExp("((https?:/../)[^/:]:\\d+(?:.\|\n))\\2"),"$1");b=a.replace(RegExp("\n ","g"),"\n");break a}catch(d){b=c;break a}b=void 0}retur
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 2c 63 2c 64 2c 65 29 29 26 26 66 2e 70 75 73 68 28 60 24 7b 6c 7d 3d 24 7b 67 7d 60 29 7d 29 3b 72 65 74 75 72 6e 20 66 2e 6a 6f 69 6e 28 62 29 7d 20 66 75 6e 63 74 69 6f 6e 20 70 62 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 22 22 3b 62 3d 62 7c 7c 22 26 22 3b 63 3d 63 7c 7c 22 2c 24 22 3b 74 79 70 65 6f 66 20 63 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 28 63 3d 63 2e 73 70 6c 69 74 28 22 22 29 29 3b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 7b 69 66 28 64 7c 7c 28 64 3d 30 29 2c 64 3c 63 2e 6c 65 6e 67 74 68 29 7b 63 6f 6e 73 74 20 66 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 67 3d 30 3b 67 3c 61 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 66 2e 70 75 73 68 28 70 62 28 61 5b 67 5d 2c 62 2c 63 2c 64 2b Data Ascii: ,c,d,e))&&f.push(`${l}=${g}`)});return f.join(b)} function pb(a,b,c,d,e){if(a==null)return"";b=b\|\|"&";c=c\|\|",$";typeof c==="string"&&(c=c.split(""));if(a instanceof Array){if(d\|\|(d=0),d<c.length){const f=[];for(let g=0;g<a.length;g++)f.push(pb(a[g],b,c,d+
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 65 74 20 66 3d 76 6f 69 64 20 30 3b 74 72 79 7b 63 6f 6e 73 74 20 45 3d 6e 65 77 20 73 62 3b 76 61 72 20 67 3d 45 3b 67 2e 67 2e 70 75 73 68 28 31 29 3b 67 2e 69 5b 31 5d 3d 56 28 22 63 6f 6e 74 65 78 74 22 2c 61 29 3b 62 2e 65 72 72 6f 72 26 26 62 2e 6d 65 74 61 26 26 62 2e 69 64 7c 7c 28 62 3d 6e 65 77 20 65 62 28 62 2c 7b 6d 65 73 73 61 67 65 3a 66 62 28 62 29 7d 29 29 3b 67 3d 62 3b 69 66 28 67 2e 6d 73 67 29 7b 62 3d 45 3b 76 61 72 20 6c 3d 67 2e 6d 73 67 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 35 31 32 29 3b 62 2e 67 2e 70 75 73 68 28 32 29 3b 62 2e 69 5b 32 5d 3d 56 28 22 6d 73 67 22 2c 6c 29 7d 76 61 72 20 6b 3d 67 2e 6d 65 74 61 7c 7c 7b 7d 3b 6c 3d 6b 3b 69 66 28 74 68 69 73 2e 69 29 74 72 79 7b 74 68 69 73 2e 69 28 6c 29 7d 63 61 74 63 68 28 76 Data Ascii: et f=void 0;try{const E=new sb;var g=E;g.g.push(1);g.i[1]=V("context",a);b.error&&b.meta&&b.id\|\|(b=new eb(b,{message:fb(b)}));g=b;if(g.msg){b=E;var l=g.msg.substring(0,512);b.g.push(2);b.i[2]=V("msg",l)}var k=g.meta\|\|{};l=k;if(this.i)try{this.i(l)}catch(v
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 65 63 6d 73 65 72 72 22 2c 72 63 74 78 3a 61 2c 6d 73 67 3a 66 62 28 45 29 2c 20 75 72 6c 3a 66 3f 2e 67 2e 75 72 6c 3f 3f 22 22 7d 2c 74 68 69 73 2e 6a 2c 63 29 7d 63 61 74 63 68 28 57 29 7b 7d 7d 72 65 74 75 72 6e 21 30 7d 7d 3b 63 6c 61 73 73 20 78 62 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 76 62 28 61 2c 62 2c 63 2c 64 3d 21 31 2c 65 2c 66 29 7b 69 66 28 28 64 3f 61 2e 67 3a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 3c 28 65 7c 7c 2e 30 31 29 29 74 72 79 7b 6c 65 74 20 67 3b 63 20 69 6e 73 74 61 6e 63 65 6f 66 20 73 62 3f 67 3d 63 3a 28 67 3d 6e 65 77 20 73 62 2c 57 61 28 63 2c 28 6b 2c 68 29 3d 3e 7b 76 61 72 20 6d 3d 67 3b 63 6f 6e 73 74 20 6e 3d 6d 2e 6d 2b 2b 3b 6b 3d 56 28 68 2c 6b 29 3b 6d 2e 67 2e 70 75 73 68 28 6e 29 3b 6d 2e 69 5b 6e 5d 3d 6b 7d Data Ascii: ecmserr",rctx:a,msg:fb(E), url:f?.g.url??""},this.j,c)}catch(W){}}return!0}};class xb{};function vb(a,b,c,d=!1,e,f){if((d?a.g:Math.random())<(e\|\|.01))try{let g;c instanceof sb?g=c:(g=new sb,Wa(c,(k,h)=>{var m=g;const n=m.m++;k=V(h,k);m.g.push(n);m.i[n]=k}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49825	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:37 UTC	459	OUT	GET /images/v4/fill_stars.svg HTTP/1.1 Host: img.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
2025-01-15 22:20:37 UTC	303	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:27 GMT Content-Type: image/svg+xml Content-Length: 899 Last-Modified: Tue, 17 Jan 2023 10:34:57 GMT Connection: close ETag: "63c679d1-383" Expires: Thu, 15 Jan 2026 21:59:27 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:37 UTC	899	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 61 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 32 31 22 20 68 65 69 67 68 74 3d 22 32 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 31 20 32 30 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 64 3d 22 6d 31 30 2e 35 38 2c 30 6c 33 2e 32 32 2c 36 2e 36 32 2c 37 2e 32 2c 31 2e 30 38 2d 35 2e 32 31 2c 35 2e 30 38 2c 31 2e 32 33 2c 37 2e 32 33 2d 36 2e 34 34 2d 33 2e 33 38 2d 36 2e 35 39 2c 33 2e 33 38 2c 31 2e 32 33 2d 37 2e 32 33 4c 30 2c 37 2e 36 39 6c 37 2e 32 2d 31 2e 30 38 4c 31 30 2e 35 38 2c 30 5a 22 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="a" xmlns="http://www.w3.org/2000/svg" width="121" height="20" viewBox="0 0 121 20"> <path d="m10.58,0l3.22,6.62,7.2,1.08-5.21,5.08,1.23,7.23-6.44-3.38-6.59,3.38,1.23-7.23L0,7.69l7.2-1.08L10.58,0Z"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49823	142.250.185.162	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:37 UTC	1978	OUT	GET /pagead/ads?client=ca-pub-4821006852914359&output=html&h=90&slotname=4034399826&adk=3689936537&adf=2221415025&pi=t.ma~as.4034399826&w=847&abgtt=9&fwrn=4&fwrnh=100&lmt=1736870130&rafmt=2&format=847x90&url=https%3A%2F%2Fnuance-pdf-professional2.software.informer.com%2F7.2%2F&fwr=0&fwrattr=true&rpe=1&resp_fmts=2&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736979634920&bpp=1&bdt=1621&idt=1620&shv=r20250113&mjsv=m202501090101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=1200x90%2C336x280&correlator=4566372036047&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=15&ady=860&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533202%2C31089683%2C95344791%2C95350245%2C95340252%2C95340254&oid=2&pvsid=3788874330487745&tmod=2006592406&uas=0&nvt=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C98 [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:38 UTC	788	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 15 Jan 2025 22:20:38 GMT Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 15-Jan-2025 22:35:37 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 15 Jan 2025 22:20:38 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2025-01-15 22:20:38 UTC	602	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 35 30 31 31 34 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 3d 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 3e 61 20 7b 20 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 20 7d 2e 69 6d 67 5f 61 64 3a 68 6f 76 65 72 20 7b 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 72 3a 20 62 72 69 67 68 74 6e 65 73 73 28 31 32 30 25 29 7d 3c 2f 73 74 79 6c 65 3e 3c 73 63 72 69 70 74 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 64 69 63 6e 66 20 3d 20 7b 69 6d 70 72 74 79 70 65 3a 20 32 2c 7d 3b 3c 2f Data Ascii: 8000<!doctype html><html><head><script>var jscVersion = 'r20250114';</script><script>var google_casm=[];</script><style>a { color: #000000 }.img_ad:hover {-webkit-filter: brightness(120%)}</style><script></script><script>window.dicnf = {imprtype: 2,};</
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 71 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 62 61 2c 74 3b 61 3a 7b 66 6f 72 28 76 61 72 20 63 61 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 76 3d 71 2c 65 61 3d 30 3b 65 61 3c 63 61 2e 6c 65 6e 67 74 68 3b 65 61 2b 2b 29 69 66 28 76 3d 76 5b 63 61 5b 65 61 5d 5d 2c 76 3d 3d 6e 75 6c 6c 29 7b 74 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 74 3d 76 7d 76 61 72 20 66 61 3d 74 26 26 74 5b 36 31 30 34 30 31 33 30 31 5d 3b 62 61 3d 66 61 21 3d 6e 75 6c 6c 3f 66 61 3a 21 31 3b 76 61 72 20 77 3b 63 6f 6e 73 74 20 68 61 3d 71 2e 6e 61 76 69 67 Data Ascii: SPDX-License-Identifier: Apache-2.0 */ var q=this\|\|self;function aa(a){return a};var ba,t;a:{for(var ca=["CLOSURE_FLAGS"],v=q,ea=0;ea<ca.length;ea++)if(v=v[ca[ea]],v==null){t=null;break a}t=v}var fa=t&&t[610401301];ba=fa!=null?fa:!1;var w;const ha=q.navig
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 45 72 72 6f 72 28 60 45 78 70 65 63 74 65 64 20 62 6f 6f 6c 65 61 6e 20 62 75 74 20 67 6f 74 20 24 7b 62 21 3d 22 6f 62 6a 65 63 74 22 3f 62 3a 61 3f 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 3f 22 61 72 72 61 79 22 3a 62 3a 22 6e 75 6c 6c 22 7d 3a 20 24 7b 61 7d 60 29 3b 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 44 28 61 29 7b 69 66 28 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 78 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 79 61 28 62 29 7d 66 75 6e 63 74 69 6f 6e 20 79 61 28 61 29 7b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 61 29 7b 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e Data Ascii: Error(`Expected boolean but got ${b!="object"?b:a?Array.isArray(a)?"array":b:"null"}: ${a}`);}return a}function D(a){if(a!=null&&typeof a!=="string")throw Error();return a};function xa(a,b){return ya(b)}function ya(a){switch(typeof a){case "number":return
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 29 3a 64 21 3d 3d 76 6f 69 64 20 30 26 26 28 66 3d 62 3e 3e 31 35 26 31 30 32 33 7c 7c 35 33 36 38 37 30 39 31 32 2c 63 3e 3d 66 3f 64 21 3d 6e 75 6c 6c 26 26 28 61 5b 66 2b 67 5d 3d 7b 5b 63 5d 3a 64 7d 2c 61 5b 42 5d 3d 62 7c 32 35 36 29 3a 61 5b 65 5d 3d 64 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 61 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 6c 65 74 20 48 3b 66 75 6e 63 74 69 6f 6e 20 48 61 28 61 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 48 3d 47 61 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 49 61 28 61 29 2c 78 61 29 7d 66 69 6e 61 6c 6c 79 7b 48 3d 76 6f 69 64 20 30 7d 7d 76 61 72 20 49 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 61 3a 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 7b 76 61 72 20 62 3d 39 36 3b 61 3d 5b 5d 7d 65 6c 73 65 7b Data Ascii: ):d!==void 0&&(f=b>>15&1023\|\|536870912,c>=f?d!=null&&(a[f+g]={[c]:d},a[B]=b\|256):a[e]=d)};function Ga(a){return a}let H;function Ha(a){try{return H=Ga,JSON.stringify(Ia(a),xa)}finally{H=void 0}}var I=class{constructor(a){a:{if(a==null){var b=96;a=[]}else{
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 61 3d 6e 65 77 20 4a 28 22 34 35 33 36 38 32 35 39 22 29 2c 4d 61 3d 6e 65 77 20 4a 28 22 34 35 33 35 37 31 35 36 22 2c 21 30 29 2c 4e 61 3d 6e 65 77 20 4a 28 22 34 35 33 35 30 38 39 30 22 29 2c 4f 61 3d 6e 65 77 20 4a 28 22 34 35 36 32 38 37 34 35 22 2c 21 30 29 2c 50 61 3d 6e 65 77 20 4a 28 22 34 35 34 31 34 38 39 32 22 29 2c 51 61 3d 6e 65 77 20 4a 28 22 34 35 36 32 30 38 33 32 22 29 3b 63 6f 6e 73 74 20 52 61 3d 52 65 67 45 78 70 28 22 61 64 5c 5c 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 5c 5c 2e 6e 65 74 2f 28 64 64 6d 2f 74 72 61 63 6b 69 6d 70 7c 70 63 73 2f 76 69 65 77 29 22 29 3b 76 61 72 20 4b 3d 28 61 2c 62 29 3d 3e 61 2e 73 75 62 73 74 72 69 6e 67 28 61 2e 6c 65 6e 67 74 68 2d 37 29 3d 3d 22 26 61 64 75 72 6c 3d 22 3f 61 2e 73 75 62 73 74 72 69 6e Data Ascii: a=new J("45368259"),Ma=new J("45357156",!0),Na=new J("45350890"),Oa=new J("45628745",!0),Pa=new J("45414892"),Qa=new J("45620832");const Ra=RegExp("ad\\.doubleclick\\.net/(ddm/trackimp\|pcs/view)");var K=(a,b)=>a.substring(a.length-7)=="&adurl="?a.substrin
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 61 29 74 72 79 7b 62 28 29 7d 63 61 74 63 68 7b 7d 7d 3b 20 76 61 72 20 62 62 3d 28 61 2c 62 29 3d 3e 7b 61 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 3d 22 63 6f 6d 70 6c 65 74 65 22 7c 7c 61 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 3d 22 69 6e 74 65 72 61 63 74 69 76 65 22 3f 28 50 2e 70 75 73 68 28 62 29 2c 50 2e 6c 65 6e 67 74 68 3d 3d 31 26 26 28 77 69 6e 64 6f 77 2e 50 72 6f 6d 69 73 65 3f 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 61 62 29 3a 77 69 6e 64 6f 77 2e 73 65 74 49 6d 6d 65 64 69 61 74 65 3f 73 65 74 49 6d 6d 65 64 69 61 74 65 28 61 62 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 61 62 2c 30 29 29 29 3a 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 62 29 7d Data Ascii: a)try{b()}catch{}}; var bb=(a,b)=>{a.readyState==="complete"\|\|a.readyState==="interactive"?(P.push(b),P.length==1&&(window.Promise?Promise.resolve().then(ab):window.setImmediate?setImmediate(ab):setTimeout(ab,0))):a.addEventListener("DOMContentLoaded",b)}
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 6f 6e 73 74 20 62 3d 6d 62 2e 67 5b 61 2e 6b 65 79 5d 3b 69 66 28 61 2e 76 61 6c 75 65 54 79 70 65 3d 3d 3d 22 70 72 6f 74 6f 22 29 7b 74 72 79 7b 63 6f 6e 73 74 20 63 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 62 29 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 63 29 29 72 65 74 75 72 6e 20 63 7d 63 61 74 63 68 28 63 29 7b 7d 72 65 74 75 72 6e 20 61 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 7d 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 62 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3f 62 3a 61 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 7d 76 61 72 20 6f 62 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 67 3d 7b 7d 7d 7d 3b 76 61 72 20 6e 62 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 6f 62 7b 63 6f 6e Data Ascii: onst b=mb.g[a.key];if(a.valueType==="proto"){try{const c=JSON.parse(b);if(Array.isArray(c))return c}catch(c){}return a.defaultValue}return typeof b===typeof a.defaultValue?b:a.defaultValue}var ob=class{constructor(){this.g={}}};var nb=class extends ob{con
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 6e 6f 77 28 29 7d 66 75 6e 63 74 69 6f 6e 20 76 62 28 29 7b 63 6f 6e 73 74 20 61 3d 71 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3b 72 65 74 75 72 6e 20 61 26 26 61 2e 6e 6f 77 3f 61 2e 6e 6f 77 28 29 3a 6e 75 6c 6c 7d 3b 76 61 72 20 77 62 3d 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 76 61 72 20 63 3d 76 62 28 29 7c 7c 75 62 28 29 3b 74 68 69 73 2e 6c 61 62 65 6c 3d 61 3b 74 68 69 73 2e 74 79 70 65 3d 62 3b 74 68 69 73 2e 76 61 6c 75 65 3d 63 3b 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 3d 30 3b 74 68 69 73 2e 74 61 73 6b 49 64 3d 74 68 69 73 2e 73 6c 6f 74 49 64 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 75 6e 69 71 75 65 49 64 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7d 7d 3b 63 6f 6e 73 74 20 55 3d 71 2e 70 65 72 66 6f 72 6d 61 6e 63 65 Data Ascii: now()}function vb(){const a=q.performance;return a&&a.now?a.now():null};var wb=class{constructor(a,b){var c=vb()\|\|ub();this.label=a;this.type=b;this.value=c;this.duration=0;this.taskId=this.slotId=void 0;this.uniqueId=Math.random()}};const U=q.performance
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 28 6c 65 74 20 65 3d 30 3b 65 3c 61 2e 67 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 63 6f 6e 73 74 20 66 3d 61 2e 67 5b 65 5d 2c 68 3d 61 2e 69 5b 66 5d 3b 66 6f 72 28 6c 65 74 20 6c 3d 30 3b 6c 3c 68 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 7b 69 66 28 21 64 29 7b 62 3d 62 3d 3d 6e 75 6c 6c 3f 66 3a 62 3b 62 72 65 61 6b 7d 6c 65 74 20 6b 3d 7a 62 28 68 5b 6c 5d 2c 61 2e 6a 2c 22 2c 24 22 29 3b 69 66 28 6b 29 7b 6b 3d 67 2b 6b 3b 69 66 28 64 3e 3d 6b 2e 6c 65 6e 67 74 68 29 7b 64 2d 3d 6b 2e 6c 65 6e 67 74 68 3b 63 2b 3d 6b 3b 67 3d 61 2e 6a 3b 62 72 65 61 6b 7d 62 3d 62 3d 3d 6e 75 6c 6c 3f 66 3a 62 7d 7d 7d 61 3d 22 22 3b 62 21 3d 6e 75 6c 6c 26 26 28 61 3d 60 24 7b 67 7d 24 7b 22 74 72 6e 22 7d 3d 24 7b 62 7d 60 29 3b 72 65 74 75 72 6e 20 63 2b 61 7d 76 61 72 Data Ascii: (let e=0;e<a.g.length;e++){const f=a.g[e],h=a.i[f];for(let l=0;l<h.length;l++){if(!d){b=b==null?f:b;break}let k=zb(h[l],a.j,",$");if(k){k=g+k;if(d>=k.length){d-=k.length;c+=k;g=a.j;break}b=b==null?f:b}}}a="";b!=null&&(a=`${g}${"trn"}=${b}`);return c+a}var
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 75 3d 30 2c 66 62 3d 6c 2e 6c 65 6e 67 74 68 2d 31 3b 75 3c 3d 66 62 3b 2b 2b 75 29 6c 5b 75 5d 2e 64 65 70 74 68 3d 66 62 2d 75 3b 6b 3d 71 3b 69 66 28 6b 2e 6c 6f 63 61 74 69 6f 6e 26 26 6b 2e 6c 6f 63 61 74 69 6f 6e 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 26 26 6b 2e 6c 6f 63 61 74 69 6f 6e 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 2e 6c 65 6e 67 74 68 3d 3d 6c 2e 6c 65 6e 67 74 68 2d 31 29 66 6f 72 28 6d 3d 31 3b 6d 3c 6c 2e 6c 65 6e 67 74 68 3b 2b 2b 6d 29 7b 76 61 72 20 6e 3d 6c 5b 6d 5d 3b 6e 2e 75 72 6c 7c 7c 28 6e 2e 75 72 6c 3d 6b 2e 6c 6f 63 61 74 69 6f 6e 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 5b 6d 2d 31 5d 7c 7c 22 22 2c 6e 2e 41 3d 21 30 29 7d 76 61 72 20 70 3d 6c 3b 6c 65 74 20 7a 61 3d 6e 65 77 20 74 62 28 71 2e 6c Data Ascii: u=0,fb=l.length-1;u<=fb;++u)l[u].depth=fb-u;k=q;if(k.location&&k.location.ancestorOrigins&&k.location.ancestorOrigins.length==l.length-1)for(m=1;m<l.length;++m){var n=l[m];n.url\|\|(n.url=k.location.ancestorOrigins[m-1]\|\|"",n.A=!0)}var p=l;let za=new tb(q.l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49822	142.250.185.162	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:37 UTC	2319	OUT	GET /pagead/ads?client=ca-pub-4821006852914359&output=html&adk=1812271804&adf=3025194257&abgtt=9&lmt=1736870130&plaf=1%3A2%2C7%3A2&plat=1%3A128%2C2%3A128%2C3%3A128%2C4%3A128%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&format=0x0&url=https%3A%2F%2Fnuance-pdf-professional2.software.informer.com%2F7.2%2F&pra=7&wgl=1&aihb=0&asro=0&ailel=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aiael=1~2~3~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24~29~30~34&aicel=33~38&aifxl=29_18~30_19&aiixl=29_5~30_6&aiict=1&aiapm=0.2&aiapmi=0.33938&aief=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736979634921&bpp=3&bdt=1622&idt=1657&shv=r20250113&mjsv=m202501090101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=1200x90%2C336x280%2C847x90&nras=1&correlator=4566372036047&frm= [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:38 UTC	788	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 15 Jan 2025 22:20:38 GMT Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 15-Jan-2025 22:35:37 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 15 Jan 2025 22:20:38 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2025-01-15 22:20:38 UTC	602	IN	Data Raw: 38 30 30 30 0d 0a 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 73 72 61 5f 6c 61 74 65 72 5f 62 6c 6f 63 6b 73 20 3d 20 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 73 72 61 5f 6c 61 74 65 72 5f 62 6c 6f 63 6b 73 2e 70 75 73 68 28 7b 63 72 65 61 74 69 76 65 3a 27 5c 78 33 63 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 5c 78 33 65 5c 78 33 63 68 74 6d 6c 20 5c 78 33 65 5c 78 33 63 68 65 61 64 5c 78 33 65 5c 78 33 63 73 74 79 6c 65 5c 78 33 65 2a 20 7b 6d 61 72 67 69 6e 3a 20 30 3b 70 61 64 64 69 6e 67 3a 20 30 3b 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 7d 62 6f 64 79 20 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 35 32 2c 20 35 38 2c 20 36 35 2c 20 30 2e 36 30 30 30 30 30 29 3b 62 61 63 6b 64 72 6f 70 2d 66 69 6c Data Ascii: 8000<script>window.sra_later_blocks = [];</script><script>window.sra_later_blocks.push({creative:'\x3c!doctype html\x3e\x3chtml \x3e\x3chead\x3e\x3cstyle\x3e* {margin: 0;padding: 0;outline: none;}body {background: rgba(52, 58, 65, 0.600000);backdrop-fil
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 70 61 64 64 69 6e 67 3a 20 30 20 36 70 78 20 31 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 38 70 78 20 31 32 70 78 20 72 67 62 61 28 36 30 2c 20 36 34 2c 20 36 37 2c 20 30 2e 31 35 29 2c 20 30 70 78 20 34 70 78 20 34 70 78 20 72 67 62 61 28 36 30 2c 20 36 34 2c 20 36 37 2c 20 30 2e 33 29 3b 7d 68 74 6d 6c 20 7b 68 65 69 67 68 74 3a 20 31 30 30 25 3b 7d 2e 74 6f 70 72 6f 77 20 7b 77 69 64 74 68 3a 20 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 68 65 69 67 68 74 3a 20 32 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 7d 2e 62 74 6e 20 7b 64 69 73 70 6c 61 79 3a 20 74 61 62 6c Data Ascii: f;border-radius: 6px;padding: 0 6px 1px;position: relative;box-shadow: 0px 8px 12px rgba(60, 64, 67, 0.15), 0px 4px 4px rgba(60, 64, 67, 0.3);}html {height: 100%;}.toprow {width: 100%;display: table;height: 24px;background-color: #fff;}.btn {display: tabl
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 65 61 64 5c 78 33 65 5c 78 33 63 62 6f 64 79 5c 78 33 65 5c 78 33 63 64 69 76 20 69 64 5c 78 33 64 5c 78 32 32 61 64 5f 70 6f 73 69 74 69 6f 6e 5f 62 6f 78 5c 78 32 32 20 64 61 74 61 2d 6d 61 67 69 63 77 6f 72 64 5c 78 33 64 5c 78 32 32 30 34 33 66 31 30 34 62 2d 30 36 34 62 2d 34 38 65 66 2d 38 39 39 38 5c 78 32 32 5c 78 33 65 5c 78 33 63 64 69 76 20 69 64 5c 78 33 64 5c 78 32 32 63 61 72 64 5c 78 32 32 5c 78 33 65 5c 78 33 63 64 69 76 20 63 6c 61 73 73 5c 78 33 64 5c 78 32 32 74 6f 70 72 6f 77 5c 78 32 32 5c 78 33 65 5c 78 33 63 64 69 76 20 69 64 5c 78 33 64 5c 78 32 32 64 69 73 6d 69 73 73 2d 62 75 74 74 6f 6e 5c 78 32 32 20 63 6c 61 73 73 5c 78 33 64 5c 78 32 32 62 74 6e 20 73 6b 69 70 5c 78 32 32 5c 78 33 65 5c 78 33 63 64 69 76 20 73 74 79 6c 65 5c Data Ascii: ead\x3e\x3cbody\x3e\x3cdiv id\x3d\x22ad_position_box\x22 data-magicword\x3d\x22043f104b-064b-48ef-8998\x22\x3e\x3cdiv id\x3d\x22card\x22\x3e\x3cdiv class\x3d\x22toprow\x22\x3e\x3cdiv id\x3d\x22dismiss-button\x22 class\x3d\x22btn skip\x22\x3e\x3cdiv style\
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 32 32 20 69 64 5c 78 33 64 5c 78 32 32 61 64 5f 69 66 72 61 6d 65 5c 78 32 32 20 6e 61 6d 65 5c 78 33 64 5c 78 32 32 61 64 5f 69 66 72 61 6d 65 5c 78 32 32 20 73 63 72 6f 6c 6c 69 6e 67 5c 78 33 64 5c 78 32 32 6e 6f 5c 78 32 32 20 73 72 63 5c 78 33 64 5c 78 32 32 61 62 6f 75 74 3a 62 6c 61 6e 6b 5c 78 32 32 66 72 61 6d 65 62 6f 72 64 65 72 5c 78 33 64 5c 78 32 32 30 5c 78 32 32 77 69 64 74 68 5c 78 33 64 5c 78 32 32 31 30 33 39 70 78 5c 78 32 32 20 68 65 69 67 68 74 5c 78 33 64 5c 78 32 32 36 34 30 70 78 5c 78 32 32 73 74 79 6c 65 5c 78 33 64 5c 78 32 32 62 6f 72 64 65 72 3a 20 30 70 78 3b 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 6f 74 74 6f 6d 3b 20 77 69 64 74 68 3a 20 31 30 33 39 70 78 3b 20 68 65 69 67 68 74 3a 20 36 34 30 70 78 3b 5c 78 Data Ascii: 22 id\x3d\x22ad_iframe\x22 name\x3d\x22ad_iframe\x22 scrolling\x3d\x22no\x22 src\x3d\x22about:blank\x22frameborder\x3d\x220\x22width\x3d\x221039px\x22 height\x3d\x22640px\x22style\x3d\x22border: 0px; vertical-align: bottom; width: 1039px; height: 640px;\x
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 74 2d 61 75 74 6f 70 6c 61 79 2d 69 6e 2d 6d 6f 74 69 6f 6e 5c 5c 78 32 32 20 64 61 74 61 2d 6e 73 5c 5c 78 33 64 5c 5c 78 32 32 6e 73 2d 30 69 35 68 77 5c 5c 78 32 32 20 78 2d 70 68 61 73 65 5c 5c 78 33 64 5c 5c 78 32 32 61 73 73 65 6d 62 6c 65 5c 5c 78 32 32 5c 5c 78 33 65 2e 6e 73 2d 30 69 35 68 77 2d 6c 2d 66 75 6c 6c 2d 73 6c 6f 74 2d 61 75 74 6f 70 6c 61 79 2d 69 6e 2d 6d 6f 74 69 6f 6e 7b 6f 70 61 63 69 74 79 3a 2e 30 31 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 33 39 70 78 3b 68 65 69 67 68 74 3a 36 34 30 70 78 3b 7d 2e 6e 73 2d 30 69 35 68 77 2d 65 2d 30 7b 2d 6d 79 73 2d 73 63 6f 72 65 3a 32 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 Data Ascii: t-autoplay-in-motion\\x22 data-ns\\x3d\\x22ns-0i5hw\\x22 x-phase\\x3d\\x22assemble\\x22\\x3e.ns-0i5hw-l-full-slot-autoplay-in-motion{opacity:.01;position:absolute;top:0;left:0;display:block;width:1039px;height:640px;}.ns-0i5hw-e-0{-mys-score:2;font-family
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 34 30 25 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 30 2e 30 36 65 6d 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 31 32 70 78 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 6c 65 66 74 3a 37 32 38 2e 33 34 70 78 3b 74 6f 70 3a 32 32 39 2e 37 36 70 78 3b 7d 2e 6e 73 2d 30 69 35 68 77 2d 65 2d 31 38 7b 68 65 69 67 68 74 3a 33 39 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 31 33 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 Data Ascii: ms:center;justify-content:center;font-size:20px;font-weight:600;line-height:140%;letter-spacing:0.06em;padding:6px 12px;white-space:nowrap;left:728.34px;top:229.76px;}.ns-0i5hw-e-18{height:39px;min-width:130px;position:absolute;display:flex;align-items:ce
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 2d 37 31 2e 36 39 70 78 3b 74 6f 70 3a 34 38 39 2e 36 70 78 3b 7d 2e 6e 73 2d 30 69 35 68 77 2d 65 2d 33 33 7b 68 65 69 67 68 74 3a 33 39 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 31 33 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 34 30 25 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 30 2e 30 36 65 6d 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 31 32 70 78 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 6c 65 66 74 3a 35 39 31 2e 31 39 Data Ascii: -71.69px;top:489.6px;}.ns-0i5hw-e-33{height:39px;min-width:130px;position:absolute;display:flex;align-items:center;justify-content:center;font-size:20px;font-weight:600;line-height:140%;letter-spacing:0.06em;padding:6px 12px;white-space:nowrap;left:591.19
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 6c 65 66 74 3a 33 70 78 20 73 6f 6c 69 64 20 23 30 30 30 3b 6c 65 66 74 3a 31 34 37 2e 35 34 70 78 3b 68 65 69 67 68 74 3a 30 3b 7d 2e 6e 73 2d 30 69 35 68 77 2d 65 2d 34 38 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 33 70 78 20 73 6f 6c 69 64 20 23 30 30 30 3b 6c 65 66 74 3a 32 39 36 2e 31 32 70 78 3b 68 65 69 67 68 74 3a 30 3b 7d 2e 6e 73 2d 30 69 35 68 77 2d 65 2d 34 39 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 33 70 78 20 73 6f 6c 69 64 20 23 30 30 30 3b 6c 65 66 74 3a 34 34 34 2e 36 39 70 78 3b 68 65 69 67 68 74 3a 30 3b 7d 2e 6e 73 2d 30 69 35 68 77 2d 65 2d 35 30 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 Data Ascii: left:3px solid #000;left:147.54px;height:0;}.ns-0i5hw-e-48{position:absolute;top:0;border-left:3px solid #000;left:296.12px;height:0;}.ns-0i5hw-e-49{position:absolute;top:0;border-left:3px solid #000;left:444.69px;height:0;}.ns-0i5hw-e-50{position:absolut
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 2d 77 65 69 67 68 74 3a 36 30 30 3b 70 61 64 64 69 6e 67 3a 30 20 35 31 2e 39 35 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 31 30 25 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 30 2e 31 38 65 6d 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 33 30 30 2e 38 70 78 3b 7d 2e 6e 73 2d 30 69 35 68 77 2d 65 2d 36 37 7b 68 65 69 67 68 74 3a 34 34 38 70 78 3b 77 69 64 74 68 3a 39 33 35 2e 31 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 65 76 65 6e 6c 79 3b Data Ascii: -weight:600;padding:0 51.95px;font-size:26px;line-height:110%;letter-spacing:0.18em;position:absolute;left:0;right:0;top:300.8px;}.ns-0i5hw-e-67{height:448px;width:935.1px;display:flex;flex-direction:column;align-items:center;justify-content:space-evenly;
2025-01-15 22:20:38 UTC	1390	IN	Data Raw: 74 79 3a 76 69 73 69 62 6c 65 3b 6f 70 61 63 69 74 79 3a 31 3b 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 6f 75 74 7b 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 62 61 63 6b 67 72 6f 75 6e 64 2d 66 72 61 6d 65 2d 31 7b 31 30 30 25 7b 66 69 6c 74 65 72 3a 62 6c 75 72 28 31 30 30 70 78 29 20 62 72 69 67 68 74 6e 65 73 73 28 31 2e 32 29 3b 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 72 3a 62 6c 75 72 28 31 30 30 70 78 29 20 62 72 69 67 68 74 6e 65 73 73 28 31 2e 32 29 3b 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 62 61 63 6b 67 72 6f 75 6e 64 2d 66 72 61 6d 65 2d 32 7b 31 30 30 25 7b 66 69 6c 74 65 72 3a 62 6c 75 72 28 31 35 70 78 29 20 62 72 69 67 68 74 6e 65 73 73 Data Ascii: ty:visible;opacity:1;}}@keyframes fadeout{100%{opacity:0;visibility:hidden;}}@keyframes background-frame-1{100%{filter:blur(100px) brightness(1.2);-webkit-filter:blur(100px) brightness(1.2);}}@keyframes background-frame-2{100%{filter:blur(15px) brightness

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49828	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:37 UTC	461	OUT	GET /images/v4/filled_stars.svg HTTP/1.1 Host: img.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
2025-01-15 22:20:38 UTC	303	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:27 GMT Content-Type: image/svg+xml Content-Length: 883 Last-Modified: Mon, 16 Jan 2023 12:19:37 GMT Connection: close ETag: "63c540d9-373" Expires: Thu, 15 Jan 2026 21:59:27 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:38 UTC	883	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 76 67 20 69 64 3d 22 61 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 30 20 31 33 22 3e 3c 64 65 66 73 3e 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 62 22 3e 3c 72 65 63 74 20 77 69 64 74 68 3d 22 38 30 22 20 68 65 69 67 68 74 3d 22 31 33 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 6e 6f 6e 65 3b 22 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 3e 3c 2f 64 65 66 73 3e 3c 67 20 73 74 79 6c 65 3d 22 63 6c 69 70 2d 70 61 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="a" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 80 13"><defs><clipPath id="b"><rect width="80" height="13" style="fill:none;"/></clipPath></defs><g style="clip-pa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49829	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:37 UTC	498	OUT	GET /p5/nuance-pdf-converter-professional-v8-main-window-display.png HTTP/1.1 Host: img.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
2025-01-15 22:20:38 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:27 GMT Content-Type: image/png Content-Length: 57666 Last-Modified: Mon, 20 Aug 2018 15:30:24 GMT Connection: close ETag: "5b7ade90-e142" Expires: Thu, 15 Jan 2026 21:59:27 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:38 UTC	16082	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 94 00 00 01 18 08 03 00 00 00 4c 69 f0 31 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 20 74 45 58 74 6a 70 65 67 3a 73 61 6d 70 6c 69 6e 67 2d 66 61 63 74 6f 72 00 32 78 32 2c 31 78 31 2c 31 78 31 49 fa a6 b4 00 00 00 11 74 45 58 74 6a 70 65 67 3a 63 6f 6c 6f 72 73 70 61 63 65 00 32 2c 75 55 9f 00 00 00 25 74 45 58 74 64 61 74 65 3a 6d 6f 64 69 66 79 00 32 30 31 36 2d 30 38 2d 33 30 54 31 31 3a 33 38 3a 35 37 2d 30 34 3a 30 30 3d 3e a1 54 00 00 00 25 74 45 58 74 64 61 74 65 3a 63 72 65 61 74 65 00 32 30 31 37 2d 31 31 2d 31 30 54 30 33 3a 33 39 3a 30 38 2d 30 35 3a 30 30 20 d6 6d 9f 00 00 00 41 74 45 58 74 63 6f 6d 6d 65 6e 74 00 43 52 45 41 54 4f Data Ascii: PNGIHDRLi1gAMAasRGB tEXtjpeg:sampling-factor2x2,1x1,1x1ItEXtjpeg:colorspace2,uU%tEXtdate:modify2016-08-30T11:38:57-04:00=>T%tEXtdate:create2017-11-10T03:39:08-05:00 mAtEXtcommentCREATO
2025-01-15 22:20:38 UTC	16384	IN	Data Raw: b9 60 4a 55 d7 2f 2e 2e 02 ed 99 bd af cf 66 af f0 d8 c1 7b d8 26 25 b8 ea 6e 36 b8 ec 46 a3 89 36 e9 8d 46 29 ef ad ac da 64 aa 9e 9a 9b 33 56 1b cb 8c 4d 98 47 86 99 6c 26 bd 98 ec c6 eb 74 a6 b0 91 10 d3 34 31 11 15 5d 79 ac d2 74 8b 76 47 1a 75 a9 c4 89 44 42 c5 03 92 49 9a 60 ba d9 4c ca d0 b4 d0 bd 50 3a 37 37 d5 9f 48 c8 e4 8d 47 92 3d 24 31 d4 2f c7 36 c6 ee 26 d8 52 e9 f5 d2 9e 4b 8e a1 8b 79 a3 68 95 98 a2 88 9b f5 a8 0c 1e c9 31 d8 57 e9 0f 27 08 6d 4e 2e 9f 39 f5 f2 e5 0f 2f 5f 7e 8b 80 f3 cb 6f cf 2e b6 ef d3 d4 58 cb b4 45 3b ee 0b ec 20 80 f3 2a ca 4d 67 41 48 0b 39 14 58 00 e9 8b f9 95 91 4e 5f 4c 83 73 03 3f 85 cb e6 64 01 2e 2b 74 52 69 75 1a 2d 87 46 51 a0 59 73 be eb 27 2b 45 f6 c0 59 e5 e0 02 9a 00 13 8f 6b f0 4e 88 eb c4 01 66 01 38 Data Ascii: `JU/..f{&%n6F6F)d3VMGl&t41]ytvGuDBI`LP:77HG=$1/6&RKyh1W'mN.9/_~o.XE; *MgAH9XN_Ls?d.+tRiu-FQYs'+EYkNf8
2025-01-15 22:20:38 UTC	16384	IN	Data Raw: bd f7 7e ef bd ff fb bd 64 5b 30 08 eb 8c 90 d4 28 f8 8e 49 99 67 b1 76 0f 11 1d c8 72 43 61 90 34 bc 21 28 8f 01 13 78 fd e7 bf f7 bf fa fa eb af bf fa fc 6f 7f 5e 39 a7 0d fd 24 bd d1 24 81 82 53 4b 1a cf ab 1c a3 a0 36 2d ad 88 0a 77 14 28 f1 c8 36 52 e2 4b db 93 23 95 14 bd dc a6 57 47 fc 19 ef 6c be eb 95 cc 5a d1 75 6d 36 2c 97 17 c2 a8 44 45 5e 39 63 8c 94 16 eb be 58 2c f5 0a 0b d5 28 5a b0 47 5d 7b b5 3e 5c 0a 2f 19 ee c2 e2 70 b5 2b 8d 75 dd b0 d1 2b 3a 35 42 53 4f a0 1d fc 04 94 8a 39 f3 04 94 89 e6 00 94 e6 a9 53 12 d3 0a c7 46 cd c0 6a 4d 77 fc 4e d4 30 80 31 59 9d 5b b9 75 73 7c 24 33 ec 39 a5 6e b5 16 8d f3 ed 67 85 c5 ac 4e 85 e5 c9 88 c8 09 bc 95 05 32 66 93 81 2d 5a 56 c7 ca 86 a3 b9 86 dd 08 53 b2 99 13 cd ac dd 82 07 33 f1 a6 a0 3c 8a Data Ascii: ~d[0(IgvrCa4!(xo^9$$SK6-w(6RK#WGlZum6,DE^9cX,(ZG]{>\/p+u+:5BSO9SFjMwN01Y[us\|$39ngN2f-ZVS3<
2025-01-15 22:20:38 UTC	8816	IN	Data Raw: 0a 77 f7 11 d9 07 9b 19 6f 44 1d f4 f3 ab 0b a1 d0 7c e4 83 7f 4c b8 22 21 1c 29 54 69 57 1d fb 42 47 9e da 3c 2f 74 c7 4d a8 2e 8f ba f0 7c 47 82 41 c9 84 5a 40 4e 12 3e f6 7d 70 ab fa a4 4b c7 78 4d b9 e7 9f d7 80 e0 47 43 89 f3 55 65 29 0a 8a a2 31 51 f5 37 3b d8 fd d6 c3 c7 0f bf 79 fe fa f9 64 c0 ed ef e1 cf 3f 5f 4f 8e 61 fc eb 61 f9 ee dd 2f 76 57 ce 40 c1 bc 33 9f db ab 34 72 a5 5c 69 a3 d1 ed 56 e0 a6 5b da 28 e5 ba a5 4a 69 2f 1d 23 36 59 75 3f 3a 5c db 0c f6 98 66 20 df 51 dd 50 b8 c4 98 eb a1 e4 28 87 4d dd 72 ba a1 0f 39 0b c3 3a 24 2b 06 18 aa e7 99 3e e4 97 de 9d 08 bc 38 f6 19 a4 98 e3 62 46 aa 02 6e 04 d6 2c dc f3 97 ae fe e8 40 1f 17 fb 10 e8 6f af 37 15 95 8f 03 ca dd 3f de fd e9 fd af ff fb fa 3f 6f 8d 7f 7f ef f8 ef c7 3d 80 c2 56 56 Data Ascii: woD\|L"!)TiWBG</tM.\|GAZ@N>}pKxMGCUe)1Q7;yd?_Oaa/vW@34r\iV[(Ji/#6Yu?:\f QP(Mr9:$+>8bFn,@o7??o=VV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49827	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:37 UTC	461	OUT	GET /awards/si-award-epick4.png HTTP/1.1 Host: img.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
2025-01-15 22:20:38 UTC	302	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:27 GMT Content-Type: image/png Content-Length: 36766 Last-Modified: Fri, 24 Aug 2018 10:00:07 GMT Connection: close ETag: "5b7fd727-8f9e" Expires: Thu, 15 Jan 2026 21:59:27 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:38 UTC	16082	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 aa 00 00 00 aa 08 06 00 00 00 3d 76 d4 82 00 00 8f 65 49 44 41 54 78 da ed 5d 05 78 55 57 b6 7e 9d 99 37 d3 d2 16 27 38 81 20 2d 54 a1 b8 bb 26 41 12 08 31 20 46 02 24 b8 bb bb bb bb bb bb bb bb 15 87 e2 5a 28 95 99 e9 cc 7a ff bf ce 39 97 9b 9b 1b 21 49 3b ed 9b e6 fb 16 37 dc 5c d9 67 af ff 2c 5f 6b ff 8f 88 fc cf 1f f4 07 fd d6 49 ff 29 9c f3 7f fe 20 e7 f4 0e e8 4f a0 bf 80 fe 06 4a 01 fa 00 94 12 94 1a 94 06 94 0e 94 de a4 0c 0e 64 3d 9f ce 7c 6d 6a f3 bd 1f 98 9f f5 37 f3 b3 ff 64 7e d7 1f 7b ee 84 fe 00 6a 4c 50 5a 80 7c df 04 15 41 96 19 94 03 94 1b f4 31 e8 73 50 41 50 11 50 71 50 29 50 19 50 59 50 39 50 79 93 ca 99 cf 95 31 5f 53 dc 7c 4f 41 f3 33 f2 83 f2 98 9f 9d d9 fc ae d4 e6 77 5b 00 Data Ascii: PNGIHDR=veIDATx]xUW~7'8 -T&A1 F$Z(z9!I;7\g,_kI) OJd=\|mj7d~{jLPZ\|A1sPAPPqP)PPYP9Py1_S\|OA3w[
2025-01-15 22:20:38 UTC	16384	IN	Data Raw: a7 18 13 a8 47 30 1d 8e 53 df 0e e1 30 5b 7b a0 96 a8 51 5f de 2f 50 5a b2 74 5c 27 99 a1 52 b2 d8 51 66 93 b2 f0 2e ee b0 56 0a 76 5b 29 b7 1f 19 55 51 5d a7 ae 91 74 7e 83 24 43 f8 34 c9 d4 6a 89 64 6a b7 ca 70 22 00 42 4a 49 02 96 aa 9d 95 43 73 57 ec b2 05 b6 d5 0e c5 6b 12 03 4e 7b ca d1 6c 65 b4 75 3a 5f b7 f3 bf db bf 26 73 2c 7f cf 81 9e ff 10 cc 18 b0 c5 3b 11 0b 2d 56 b6 b3 e4 af 33 29 d1 6b e6 35 e7 f2 9e ae fb d3 77 d2 56 09 ef 35 5f 9d ab 0c 70 2e 09 d2 dc 95 db cb e6 bd e7 b4 4d dc fe e7 11 bc ff c7 66 dd ab 66 f9 10 fc a7 9f 50 08 15 60 99 c1 1b c7 6b b6 5d 0f 78 4a de 92 c7 f6 40 1d 81 ee 63 fa 2c 14 5e ce 80 ca ee 64 2d 15 55 87 ca b0 53 17 22 f3 39 1d d5 56 c4 9e 5d 96 ea 1d 67 40 65 95 75 e6 52 9f a6 ad 1b 1a 1a aa e1 26 8d 9f e2 03 e9 Data Ascii: G0S0[{Q_/PZt\'RQf.Vv[)UQ]t~$C4jdjp"BJICsWkN{leu:_&s,;-V3)k5wV5_p.MffP`k]xJ@c,^d-US"9V]g@euR&
2025-01-15 22:20:38 UTC	4300	IN	Data Raw: 67 bc eb 59 08 13 17 50 2d c6 ad df b4 4d 7c 1a a3 e0 39 4b 01 83 d9 e8 b2 fc 20 6f 0d c4 2a 5b 39 4d 51 fe a7 81 ca 35 71 6d 5c 23 d7 aa e9 e3 ac 05 a4 61 93 16 38 80 6c 97 7c 73 f7 9e dc f9 e6 ae 53 a0 5e bb 7e 53 23 27 b1 39 53 fd 50 f1 c6 61 bb 23 e1 ec 96 85 09 c0 d4 b7 7d ae 7f e7 ae dd 6a 7e 59 76 29 41 ca 58 37 bb 3a 28 49 01 d2 f1 66 ac 34 7d 42 40 fa 9b 06 aa 43 8c 95 17 f4 65 b5 f2 5f 8d 0e 6c dc e8 df 53 a6 4d 53 63 9c 92 95 2a 85 9b 61 6f a3 52 72 5a 40 8d 6a d5 46 e7 b0 52 fd 70 03 2d b0 32 b8 1c 1e d1 3c 56 d5 ef 08 54 32 91 cc 64 a8 a5 df e0 d1 52 a8 74 0d 9b 74 e2 34 90 0f 72 57 51 a9 95 1e bd 49 ff 29 a0 f2 bb b9 06 ae 85 6b b2 d6 f7 15 d6 3a 60 d8 58 b9 08 c9 77 f7 de 7d a5 b8 80 ca 69 cf 91 51 ad 9d 02 95 85 eb 81 48 59 b3 20 88 fb c8 Data Ascii: gYP-M\|9K o[9MQ5qm\#a8l\|sS^~S#'9SPa#}j~Yv)AX7:(If4}B@Ce_lSMScaoRrZ@jFRp-2<VT2dRtt4rWQI)k:`Xw}iQHY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49830	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:38 UTC	455	OUT	GET /images/v4/5stars.svg HTTP/1.1 Host: img.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
2025-01-15 22:20:38 UTC	304	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:27 GMT Content-Type: image/svg+xml Content-Length: 1112 Last-Modified: Wed, 02 Jun 2021 11:45:16 GMT Connection: close ETag: "60b76f4c-458" Expires: Thu, 15 Jan 2026 21:59:27 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:38 UTC	1112	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 30 2e 32 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 d0 a1 d0 bb d0 be d0 b9 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49831	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:38 UTC	455	OUT	GET /images/v4/4stars.svg HTTP/1.1 Host: img.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
2025-01-15 22:20:38 UTC	304	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:27 GMT Content-Type: image/svg+xml Content-Length: 1314 Last-Modified: Wed, 02 Jun 2021 11:47:04 GMT Connection: close ETag: "60b76fb8-522" Expires: Thu, 15 Jan 2026 21:59:27 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:38 UTC	1314	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 31 2e 31 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 d0 a1 d0 bb d0 be d0 b9 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.1.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49833	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:38 UTC	455	OUT	GET /images/v4/3stars.svg HTTP/1.1 Host: img.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
2025-01-15 22:20:38 UTC	304	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:28 GMT Content-Type: image/svg+xml Content-Length: 1134 Last-Modified: Wed, 02 Jun 2021 11:45:16 GMT Connection: close ETag: "60b76f4c-46e" Expires: Thu, 15 Jan 2026 21:59:28 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:38 UTC	1134	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 30 2e 32 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 d0 a1 d0 bb d0 be d0 b9 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49834	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:38 UTC	455	OUT	GET /images/v4/1stars.svg HTTP/1.1 Host: img.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
2025-01-15 22:20:38 UTC	304	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:28 GMT Content-Type: image/svg+xml Content-Length: 1134 Last-Modified: Wed, 02 Jun 2021 11:45:16 GMT Connection: close ETag: "60b76f4c-46e" Expires: Thu, 15 Jan 2026 21:59:28 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:38 UTC	1134	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 30 2e 32 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 d0 a1 d0 bb d0 be d0 b9 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49835	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:38 UTC	455	OUT	GET /images/v4/2stars.svg HTTP/1.1 Host: img.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635
2025-01-15 22:20:39 UTC	304	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:28 GMT Content-Type: image/svg+xml Content-Length: 1134 Last-Modified: Wed, 02 Jun 2021 11:45:16 GMT Connection: close ETag: "60b76f4c-46e" Expires: Thu, 15 Jan 2026 21:59:28 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:39 UTC	1134	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 30 2e 32 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 d0 a1 d0 bb d0 be d0 b9 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49836	142.250.185.162	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:39 UTC	2024	OUT	GET /pagead/drt/s?v=r20120211 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4821006852914359&output=html&h=90&slotname=4034399826&adk=3689936537&adf=2221415025&pi=t.ma~as.4034399826&w=847&abgtt=9&fwrn=4&fwrnh=100&lmt=1736870130&rafmt=2&format=847x90&url=https%3A%2F%2Fnuance-pdf-professional2.software.informer.com%2F7.2%2F&fwr=0&fwrattr=true&rpe=1&resp_fmts=2&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736979634920&bpp=1&bdt=1621&idt=1620&shv=r20250113&mjsv=m202501090101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=1200x90%2C336x280&correlator=4566372036047&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=15&ady=860&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533202%2C31089683%2C95344791%2C95350245%2C95340252%2C95340254&oid=2&pvsid=3788874330487745&tmod=2006592406&uas=0&nvt=1&fc=896&br [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2025-01-15 22:20:39 UTC	428	IN	HTTP/1.1 200 OK Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Date: Wed, 15 Jan 2025 21:39:56 GMT Cache-Control: public, max-age=3600 Content-Type: text/html; charset=UTF-8 Age: 2443 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 22:20:39 UTC	154	IN	Data Raw: 38 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 64 72 74 2f 75 69 22 20 2f 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 3c 2f 68 74 6d 6c 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: 8f<!DOCTYPE HTML PUBLIC><html> <head> <meta http-equiv="refresh" content="0;url=https://www.google.com/pagead/drt/ui" /> </head></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49839	142.250.185.162	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:39 UTC	2628	OUT	GET /pagead/adview?ai=CcowAtTSIZ5nPM7qSjuwPsJeGsAe9qs_Ndemi3NbEEsCNtwEQASAAYMmWy4vEpPwPggEXY2EtcHViLTQ4MjEwMDY4NTI5MTQzNTnIAQmoAwHIAwKqBIICT9DUYKjKI4pQraEcfrh6m7h9bplWrkbPj_91eeUOpJhdu9KpO0_XYY-cFu19QnZyNheKNP9npaVhnppps6EXhc3BzLo3anLFZHbeg9orLOvmqDeb92XzJ9zmloLoNmP_QdruBQ3lrp4hdP1u3o5ziALuCeqfDUCAk3nMPyRGcGzELC11L3Li97soOg-L0FVd1MKKdwSb3JXcm9Jc4SzAnkh4e7olKZznc1bs88r2I5yWFLGbTgw6FY7xoSlUEd1JBSESOIhUn4RAQ2j7Ze9B0WVkDsyfWXvNgTvg5yey5YKtS_bWmlwrK3xttOT7-OwGuzjn-WXBxYdZQ4iA7PJcsyxzgAaarO2X-f_z_OUBoAYhqAemvhuoB5bYG6gHqpuxAqgH_56xAqgH35-xAqgHrb6xAtgHANIIJAiAYRABMgKKAjoLgECAwICAgKCogAJIvf3BOljj466y4fiKA4AKAfoLAggBgAwB0BUBgBcBshccChgSFHB1Yi00ODIxMDA2ODUyOTE0MzU5GAAYDA&sigh=1sAzvU4xCKM&uach_m=%5BUACH%5D&cid=CAQSTwCa7L7dQq7Ua8LJPgiEu7R4dxu7VSCDaaBZxHkFM4asi_fnDbC-VtJCptQoPfsZc_9JBcL2RZCBBo0g6gLsCb51Y4n2HKxUL6PsZw0IKKMYAQ HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4821006852914359&output=html&h=90&slotname=7854405427&adk=4056614258&adf=1706824535&pi=t.ma~as.7854405427&w=1200&abgtt=9&fwrn=4&fwrnh=100&lmt=1736870130&rafmt=2&format=1200x90&url=https%3A%2F%2Fnuance-pdf-professional2.software.informer.com%2F7.2%2F&fwr=0&fwrattr=true&rpe=1&resp_fmts=2&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736979634915&bpp=4&bdt=1617&idt=1532&shv=r20250113&mjsv=m202501090101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&correlator=4566372036047&frm=20&pv=2&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=311&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533202%2C31089683%2C95344791%2C95350245%2C95340252%2C95340254&oid=2&pvsid=3788874330487745&tmod=2006592406&uas=0&nvt=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2025-01-15 22:20:39 UTC	1013	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 15 Jan 2025 22:20:39 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUlPbqVqjUCM5MRgGSpz8z-07qXlfZwNkJwQUlbQxq3vbOeObDwuexVBZjgodxY; expires=Fri, 15-Jan-2027 22:20:39 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Wed, 15 Jan 2025 22:20:39 GMT Cache-Control: private Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49843	142.250.185.162	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:39 UTC	2962	OUT	GET /pagead/adview?ai=CFlzftTSIZ7fqNvicjuwP6qqliQyW75bOfLntip-hE-iin8aRDhABIOPuhSVgyZbLi8Sk_A-gAZPCv5A-yAECqAMByAPJBKoEjQJP0CL5SLOELaIQSqv0YIbDE8pOSbgr22jlHHBjjvufLioiWQD0qy5QZ63BY74A0vox_NruVSkZofwTOaw4ZX4--HDB5YWFIJft_oiYIPFrFuRGbt_LpG9JRyvxC5uwc2yi2Uyz3KdpR1li7oUfANKZ_S77aEEq26oHgYDYQzaz2ZTJP64pzZOxSktqkFuOahg1x3py7XiJm_yNyrAkQDR_ddhv30tgcROq6HoPe_QtpIdqxYlDxhWX7sDCyRWuNpMsGj4_OQ1X9ByemvAeYXnC17BOnu4_ao4Yu6J4z3M_UgR9Cx34rXaJtRmjRKbRKBDtLBH6isuKog6ayRvEJZo1YXmItnJIWEB1POvJR8AE9IPAwv8EiAWpyvnHUJIFBAgEGAGSBQQIBRgEoAYCgAeT-o_wGKgH1ckbqAfZtrECqAemvhuoB47OG6gHk9gbqAfw4BuoB-6WsQKoB_6esQKoB6--sQKoB_fCsQLYBwHyBwQQz9dm0ggmCIBhEAEYHzICigI6C4BAgMCAgICgqIACSL39wTpYjv-xsuH4igOaCUpodHRwczovL3BjYXBwc3RvcmUuY29tLz9hcD1hZHdwJmFzPWdfZF9hbGxfbmV3X3VzX2NhX2F1X2diX2luJmdhZF9zb3VyY2U9NYAKAcgLAdoMEQoLEJC4hu_4vLX3zQESAgED2BMN0BUBmBYBgBcBshceChoIABIUcHViLTQ4MjEwMDY4NTI5MTQzNTkYABgBuhcCOAGyGAkSArBTGAIiAQDQGAHoGAE&sigh=IhB1dc_aNk8&uach_m=%5BUACH%5D&ase=2&cid=CAQSTgCa7L7dHFLM9IPFcD6ghiOIXDaBWC3kpV_PFb9R9pCIrNFE7BSHF3RZLGlcutaAcbdRcj-G [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: trigger, event-source Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4821006852914359&output=html&h=90&slotname=4034399826&adk=3689936537&adf=2221415025&pi=t.ma~as.4034399826&w=847&abgtt=9&fwrn=4&fwrnh=100&lmt=1736870130&rafmt=2&format=847x90&url=https%3A%2F%2Fnuance-pdf-professional2.software.informer.com%2F7.2%2F&fwr=0&fwrattr=true&rpe=1&resp_fmts=2&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736979634920&bpp=1&bdt=1621&idt=1620&shv=r20250113&mjsv=m202501090101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=1200x90%2C336x280&correlator=4566372036047&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=15&ady=860&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533202%2C31089683%2C95344791%2C95350245%2C95340252%2C95340254&oid=2&pvsid=3788874330487745&tmod=2006592406&uas=0&nvt=1&fc=896&br [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2025-01-15 22:20:39 UTC	1536	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://www.googleadservices.com/pagead/ar-adview/?nrh={"aggregation_keys":{"1":"0xb8aa076932132e7b0000000000000000","2":"0x7890887edf2603520000000000000000","3":"0x43b9ae1e82460f4e0000000000000000","4":"0xb8f03915f6f480590000000000000000","5":"0xcf752887919c703a0000000000000000"},"debug_key":"242222837105438970","debug_reporting":true,"destination":"https://pcappstore.com","event_report_window":"259200","expiry":"2592000","filter_data":{"2":["16677593363"],"22":["true"],"4":["01-15"],"6":["true"]},"priority":"500","source_event_id":"10983798551977907073"}&andc=true Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 15 Jan 2025 22:20:39 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUmZg9NtzbT6dCmVr2Qffhn9iWeWHrGurF3UynVHeRkuzLw8iE2ifGLG4Vhv3O4; expires=Fri, 15-Jan-2027 22:20:39 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49845	142.250.185.162	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:39 UTC	2646	OUT	GET /pagead/adview?ai=Cdz3WtTSIZ6qiNLaTjuwP-pCXuQK9qs_Ndemi3NbEEsCNtwEQASAAYMmWy4vEpPwPggEXY2EtcHViLTQ4MjEwMDY4NTI5MTQzNTnIAQmoAwHIAwKqBIICT9Cmv1-2FEzbw3G2tBIb1haRxDRSLz7yOGGQqurLUK5Np7iNGFjAafY9HpC_nPbw3M7sTsD6v3dvLEFcHabJAb-buCaAMTRI4sunpsadyoaGR6fbysEVdjp7jeFr4gJpxdXuV35NN6NhJ67MEb7qs9dPLNjiiILm0M97azcJR5ooAuQEZrU62Tag7v5OrPIQI7foZsuoKigmXsT1AVD4Gfr9u-OtT-yKfjMps-zpcMLnS1F7UWICa_rzqnICn9zRcNUe9S5dC9O8PT8ibVCcU1mUVl1VBC1VHgUhQl7T_cEJaUKBjLnwMeA3OKC41A45IsL2EbR2qiohd5sFWv8sReb_gAaarO2X-f_z_OUBoAYhqAemvhuoB5bYG6gHqpuxAqgH_56xAqgH35-xAqgHrb6xAtgHANIIJAiAYRABMgKKAjoLgECAwICAgKCogAJIvf3BOliOqq-y4fiKA4AKAfoLAggBgAwB0BUBgBcBshccChgSFHB1Yi00ODIxMDA2ODUyOTE0MzU5GAAYDA&sigh=lSXLiM_1JWU&uach_m=%5BUACH%5D&cid=CAQSTwCa7L7dauW-cuQWFi659Ps5JSAeXiroZyXANVgbnX4d8B4rLsxr6OWlefLHzaaO0oxkwYBW3LA5y6QsF-eog1jrg8xThFmwIVNMUpPZxvcYAQ HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4821006852914359&output=html&h=280&slotname=9917528229&adk=658919145&adf=3882744954&pi=t.ma~as.9917528229&w=336&abgtt=9&fwrn=4&fwrnh=100&lmt=1736870130&rafmt=3&format=336x280&url=https%3A%2F%2Fnuance-pdf-professional2.software.informer.com%2F7.2%2F&fwr=0&fwrattr=true&rpe=1&resp_fmts=1&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736979634919&bpp=1&bdt=1620&idt=1594&shv=r20250113&mjsv=m202501090101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=1200x90&correlator=4566372036047&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=15&ady=550&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533202%2C31089683%2C95344791%2C95350245%2C95340252%2C95340254&oid=2&pvsid=3788874330487745&tmod=2006592406&uas=0&nvt=1&fc=896&brdim=0%2C0 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2025-01-15 22:20:39 UTC	1013	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 15 Jan 2025 22:20:39 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUnp6e8q3Hn02qx9nr5ulHgfqaOhOFhnsIORFFJRHSgAHbZOc4nFtnhzzAgnkCg; expires=Fri, 15-Jan-2027 22:20:39 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Wed, 15 Jan 2025 22:20:39 GMT Cache-Control: private Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49857	104.21.80.92	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:39 UTC	616	OUT	GET /ng-assets/creative/assets/polyfills-a3f452c3.js HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://googleads.g.doubleclick.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:39 UTC	1276	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:39 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close X-GUploader-UploadID: AFiumC442B6f5WCnh0ITGZ0DNOSCyX2gOmsad_jqlmJwNlRbihh_bLAoF_DgstF1WHf54LtcfoLC5sU x-goog-generation: 1735054804845868 x-goog-metageneration: 2 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 11824 x-goog-hash: crc32c=i96MsA== x-goog-hash: md5=ZZoexljHe5yTbIVrm3KlSA== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Wed, 15 Jan 2025 22:41:18 GMT Cache-Control: public, max-age=14400 Last-Modified: Tue, 24 Dec 2024 15:40:04 GMT ETag: W/"659a1ec658c77b9c936c856b9b72a548" Vary: Accept-Encoding Age: 995 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zaaReCgsiHCW6jvKW8SNoPR9Ntl2Qj45dvnz7r6CAGC2lQbQuKJ%2BRGxacwHCpSK8LlxvR71UXK9ExmELVrtoQA%2B99iff0Y0SL%2F0rmYqWTmL%2B6hL07OZvs2qUeaivB31J3ly%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9029411c4ba9dda5-IAD alt-svc: h3=":443"; ma=86400
2025-01-15 22:20:39 UTC	215	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 38 35 34 37 26 6d 69 6e 5f 72 74 74 3d 38 34 38 34 26 72 74 74 5f 76 61 72 3d 33 32 32 37 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 33 33 39 26 72 65 63 76 5f 62 79 74 65 73 3d 31 31 39 34 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 33 34 34 31 37 37 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 30 62 66 39 64 66 38 36 31 37 65 39 32 33 62 34 26 74 73 3d 32 30 38 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=8547&min_rtt=8484&rtt_var=3227&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2339&recv_bytes=1194&delivery_rate=344177&cwnd=32&unsent_bytes=0&cid=0bf9df8617e923b4&ts=208&x=0"
2025-01-15 22:20:39 UTC	1247	IN	Data Raw: 32 65 33 30 0d 0a 65 78 70 6f 72 74 20 66 75 6e 63 74 69 6f 6e 20 5f 5f 76 69 74 65 5f 6c 65 67 61 63 79 5f 67 75 61 72 64 28 29 7b 69 6d 70 6f 72 74 2e 6d 65 74 61 2e 75 72 6c 3b 69 6d 70 6f 72 74 28 22 5f 22 29 2e 63 61 74 63 68 28 28 29 3d 3e 31 29 3b 28 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 7d 29 28 29 2e 6e 65 78 74 28 29 7d 3b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 Data Ascii: 2e30export function __vite_legacy_guard(){import.meta.url;import("_").catch(()=>1);(async function*(){})().next()};var t="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof se
2025-01-15 22:20:39 UTC	1369	IN	Data Raw: 53 28 22 22 2e 73 6c 69 63 65 29 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 50 28 6a 28 74 29 2c 38 2c 2d 31 29 7d 2c 54 3d 6f 2c 41 3d 45 2c 46 3d 4f 62 6a 65 63 74 2c 78 3d 4f 28 22 22 2e 73 70 6c 69 74 29 2c 4d 3d 54 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 46 28 22 7a 22 29 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 28 30 29 7d 29 29 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 53 74 72 69 6e 67 22 3d 3d 3d 41 28 74 29 3f 78 28 74 2c 22 22 29 3a 46 28 74 29 7d 3a 46 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 7d 2c 49 3d 43 2c 6b 3d 54 79 70 65 45 72 72 6f 72 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 49 28 74 29 29 74 68 Data Ascii: S("".slice),E=function(t){return P(j(t),8,-1)},T=o,A=E,F=Object,x=O("".split),M=T((function(){return!F("z").propertyIsEnumerable(0)}))?function(t){return"String"===A(t)?x(t,""):F(t)}:F,C=function(t){return null==t},I=C,k=TypeError,z=function(t){if(I(t))th
2025-01-15 22:20:39 UTC	1369	IN	Data Raw: 4f 62 6a 65 63 74 22 7d 7d 2c 73 74 3d 54 79 70 65 45 72 72 6f 72 2c 70 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 66 74 28 74 29 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 6e 65 77 20 73 74 28 6c 74 28 74 29 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 2c 79 74 3d 70 74 2c 62 74 3d 43 2c 76 74 3d 66 2c 67 74 3d 5f 2c 68 74 3d 55 2c 64 74 3d 54 79 70 65 45 72 72 6f 72 2c 6d 74 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 77 74 3d 72 2c 4f 74 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 53 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 74 72 79 7b 4f 74 28 77 74 2c 74 2c 7b 76 61 6c 75 65 3a 6e 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 7d 63 61 74 63 Data Ascii: Object"}},st=TypeError,pt=function(t){if(ft(t))return t;throw new st(lt(t)+" is not a function")},yt=pt,bt=C,vt=f,gt=_,ht=U,dt=TypeError,mt={exports:{}},wt=r,Ot=Object.defineProperty,St=function(t,n){try{Ot(wt,t,{value:n,configurable:!0,writable:!0})}catc
2025-01-15 22:20:39 UTC	1369	IN	Data Raw: 74 20 74 6f 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 22 29 7d 2c 6e 6e 3d 54 79 70 65 45 72 72 6f 72 2c 72 6e 3d 59 74 28 22 74 6f 50 72 69 6d 69 74 69 76 65 22 29 2c 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 69 66 28 21 4a 74 28 74 29 7c 7c 51 74 28 74 29 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 72 2c 65 3d 5a 74 28 74 2c 72 6e 29 3b 69 66 28 65 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 22 64 65 66 61 75 6c 74 22 29 2c 72 3d 48 74 28 65 2c 74 2c 6e 29 2c 21 4a 74 28 72 29 7c 7c 51 74 28 72 29 29 72 65 74 75 72 6e 20 72 3b 74 68 72 6f 77 20 6e 65 77 20 6e 6e 28 22 43 61 6e 27 74 20 63 6f 6e 76 65 72 74 20 6f 62 6a 65 63 74 20 74 6f 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 22 29 7d 72 65 74 75 72 6e 20 76 6f 69 64 Data Ascii: t to primitive value")},nn=TypeError,rn=Yt("toPrimitive"),en=function(t,n){if(!Jt(t)\|\|Qt(t))return t;var r,e=Zt(t,rn);if(e){if(void 0===n&&(n="default"),r=Ht(e,t,n),!Jt(r)\|\|Qt(r))return r;throw new nn("Can't convert object to primitive value")}return void
2025-01-15 22:20:39 UTC	1369	IN	Data Raw: 20 6b 6e 28 74 2c 6e 2c 72 29 7d 3a 6b 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 69 66 28 4d 6e 28 74 29 2c 6e 3d 43 6e 28 6e 29 2c 4d 6e 28 72 29 2c 46 6e 29 74 72 79 7b 72 65 74 75 72 6e 20 6b 6e 28 74 2c 6e 2c 72 29 7d 63 61 74 63 68 28 65 29 7b 7d 69 66 28 22 67 65 74 22 69 6e 20 72 7c 7c 22 73 65 74 22 69 6e 20 72 29 74 68 72 6f 77 20 6e 65 77 20 49 6e 28 22 41 63 63 65 73 73 6f 72 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 29 3b 72 65 74 75 72 6e 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 74 5b 6e 5d 3d 72 2e 76 61 6c 75 65 29 2c 74 7d 3b 76 61 72 20 52 6e 3d 4f 6e 2c 5f 6e 3d 67 2c 47 6e 3d 69 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 52 6e 2e 66 28 74 2c 6e 2c 5f 6e 28 31 2c 72 29 29 7d 3a 66 75 6e 63 Data Ascii: kn(t,n,r)}:kn:function(t,n,r){if(Mn(t),n=Cn(n),Mn(r),Fn)try{return kn(t,n,r)}catch(e){}if("get"in r\|\|"set"in r)throw new In("Accessors not supported");return"value"in r&&(t[n]=r.value),t};var Rn=On,_n=g,Gn=i?function(t,n,r){return Rn.f(t,n,_n(1,r))}:func
2025-01-15 22:20:39 UTC	1369	IN	Data Raw: 74 2c 7b 7d 29 7d 2c 67 65 74 74 65 72 46 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3b 69 66 28 21 66 72 28 6e 29 7c 7c 28 72 3d 51 6e 28 6e 29 29 2e 74 79 70 65 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 67 72 28 22 49 6e 63 6f 6d 70 61 74 69 62 6c 65 20 72 65 63 65 69 76 65 72 2c 20 22 2b 74 2b 22 20 72 65 71 75 69 72 65 64 22 29 3b 72 65 74 75 72 6e 20 72 7d 7d 7d 2c 4f 72 3d 4f 2c 53 72 3d 6f 2c 6a 72 3d 5f 2c 50 72 3d 4c 74 2c 45 72 3d 69 2c 54 72 3d 56 6e 2e 43 4f 4e 46 49 47 55 52 41 42 4c 45 2c 41 72 3d 74 72 2c 46 72 3d 77 72 2e 65 6e 66 6f 72 63 65 2c 78 72 3d 77 72 2e 67 65 74 2c 4d 72 3d 53 74 72 69 6e 67 2c 43 72 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 Data Ascii: t,{})},getterFor:function(t){return function(n){var r;if(!fr(n)\|\|(r=Qn(n)).type!==t)throw new gr("Incompatible receiver, "+t+" required");return r}}},Or=O,Sr=o,jr=_,Pr=Lt,Er=i,Tr=Vn.CONFIGURABLE,Ar=tr,Fr=wr.enforce,xr=wr.get,Mr=String,Cr=Object.defineProp
2025-01-15 22:20:39 UTC	1369	IN	Data Raw: 6c 65 6e 67 74 68 29 7d 2c 6e 65 3d 44 2c 72 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 58 72 28 74 29 3b 72 65 74 75 72 6e 20 72 3c 30 3f 59 72 28 72 2b 6e 2c 30 29 3a 48 72 28 72 2c 6e 29 7d 2c 65 65 3d 74 65 2c 6f 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 65 29 7b 76 61 72 20 6f 3d 6e 65 28 6e 29 2c 69 3d 65 65 28 6f 29 3b 69 66 28 30 3d 3d 3d 69 29 72 65 74 75 72 6e 21 74 26 26 2d 31 3b 76 61 72 20 75 2c 63 3d 72 65 28 65 2c 69 29 3b 69 66 28 74 26 26 72 21 3d 72 29 7b 66 6f 72 28 3b 69 3e 63 3b 29 69 66 28 28 75 3d 6f 5b 63 2b 2b 5d 29 21 3d 75 29 72 65 74 75 72 6e 21 30 7d 65 6c 73 65 20 66 6f 72 28 3b 69 3e 63 3b 63 2b 2b 29 69 66 28 28 74 7c 7c 63 20 69 6e 20 6f 29 Data Ascii: length)},ne=D,re=function(t,n){var r=Xr(t);return r<0?Yr(r+n,0):Hr(r,n)},ee=te,oe=function(t){return function(n,r,e){var o=ne(n),i=ee(o);if(0===i)return!t&&-1;var u,c=re(e,i);if(t&&r!=r){for(;i>c;)if((u=o[c++])!=u)return!0}else for(;i>c;c++)if((t\|\|c in o)
2025-01-15 22:20:39 UTC	1369	IN	Data Raw: 6e 2c 7b 76 61 6c 75 65 3a 72 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 65 2e 6e 6f 6e 43 6f 6e 66 69 67 75 72 61 62 6c 65 2c 77 72 69 74 61 62 6c 65 3a 21 65 2e 6e 6f 6e 57 72 69 74 61 62 6c 65 7d 29 7d 72 65 74 75 72 6e 20 74 7d 2c 44 65 3d 53 74 2c 52 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 66 6f 72 28 76 61 72 20 65 3d 4f 65 28 6e 29 2c 6f 3d 6a 65 2e 66 2c 69 3d 53 65 2e 66 2c 75 3d 30 3b 75 3c 65 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 7b 76 61 72 20 63 3d 65 5b 75 5d 3b 77 65 28 74 2c 63 29 7c 7c 72 26 26 77 65 28 72 2c 63 29 7c 7c 6f 28 74 2c 63 2c 69 28 6e 2c 63 29 29 7d 7d 2c 5f 65 3d 49 65 2c 47 65 3d 45 2c 55 65 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: n,{value:r,enumerable:!1,configurable:!e.nonConfigurable,writable:!e.nonWritable})}return t},De=St,Re=function(t,n,r){for(var e=Oe(n),o=je.f,i=Se.f,u=0;u<e.length;u++){var c=e[u];we(t,c)\|\|r&&we(r,c)\|\|o(t,c,i(n,c))}},_e=Ie,Ge=E,Ue=Array.isArray\|\|function(t
2025-01-15 22:20:39 UTC	1002	IN	Data Raw: 31 3b 73 77 69 74 63 68 28 73 6f 28 74 29 29 7b 63 61 73 65 22 41 73 79 6e 63 46 75 6e 63 74 69 6f 6e 22 3a 63 61 73 65 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 3a 63 61 73 65 22 41 73 79 6e 63 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 3a 72 65 74 75 72 6e 21 31 7d 74 72 79 7b 72 65 74 75 72 6e 20 68 6f 7c 7c 21 21 67 6f 28 76 6f 2c 70 6f 28 74 29 29 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 21 30 7d 7d 3b 77 6f 2e 73 68 61 6d 3d 21 30 3b 76 61 72 20 4f 6f 3d 21 62 6f 7c 7c 66 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 6d 6f 28 6d 6f 2e 63 61 6c 6c 29 7c 7c 21 6d 6f 28 4f 62 6a 65 63 74 29 7c 7c 21 6d 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 3d 21 30 7d 29 29 7c 7c 74 7d 29 29 3f Data Ascii: 1;switch(so(t)){case"AsyncFunction":case"GeneratorFunction":case"AsyncGeneratorFunction":return!1}try{return ho\|\|!!go(vo,po(t))}catch(n){return!0}};wo.sham=!0;var Oo=!bo\|\|fo((function(){var t;return mo(mo.call)\|\|!mo(Object)\|\|!mo((function(){t=!0}))\|\|t}))?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49858	104.21.80.92	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:39 UTC	1151	OUT	GET /rtimp?a=imp&cr=ext_download_prot_smrtsp&d=nuance-pdf-professional2.software.informer.com&gid=&im=Nb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkPejZgAKFm3ZlUxHBNGiYcbgU5DmL2JgBOnA6uq5HqYXDGOAkkcHp77mTvilkZ5d9Q2rpDl_8WOAn-k2Y5V9CBXA9Hn2pQTPVn67DMY2sybqayiZvf5flizO3fgV6Cw9N2-R52IBOSmAosKxVeFWSaITqzx-S70fbalfXf6j_MGyOC9eAxeZ7JGLaNEYTuDszAbHweW2Joh-qvwh3aS1didawvBHLOP-V2AJ9n6wIzxxqj8vOzYkgNldKNUmJt1QcCV7gcheIGQeY618UdBWcgJbQ4H-Y9TkqHO2sUSV-RHzJCsRWDjhnFAPFm7pN506i_DH--SzmnConwZt5nHCFtvPxN2SulUo9&p=Z4g0tQAM55kHg4k6AAGLsDXa4KrzOKSPp000GA&sid=f28d8534-d38e-11ef-93a7-aab196f2f20d HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:39 UTC	1358	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 22:20:39 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=f39e4a20-d38e-11ef-8c3c-f6e6bcc2e01b; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: uid_cross=f39e4a20-d38e-11ef-8c3c-f6e6bcc2e01b; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/; SameSite=none; Secure Set-Cookie: sid=f28d8534-d38e-11ef-93a7-aab196f2f20d; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure
2025-01-15 22:20:39 UTC	671	IN	Data Raw: 56 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c 65 0d 0a 63 66 2d 63 61 63 68 65 2d 73 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 47 57 76 64 64 72 25 32 42 61 6e 39 35 41 33 64 71 74 56 79 6f 49 25 32 42 58 70 62 31 6c 25 32 46 7a 68 4e 31 50 48 34 69 34 46 4f 30 69 63 52 64 73 59 77 46 50 35 36 30 4b 25 32 42 6d 35 77 54 48 52 30 4a 6c 45 4d 53 78 57 44 76 62 4f 53 4d 73 4d 35 6c 37 59 4f 25 32 42 4f 56 64 6a 39 7a 35 4d 50 57 74 66 6d 6d 42 35 49 7a 62 6a 31 73 39 6f 48 4d 30 64 45 59 48 4b 5a 5a 69 63 6b 62 6c 50 73 33 38 Data Ascii: Via: 1.1 googlecf-cache-status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GWvddr%2Ban95A3dqtVyoI%2BXpb1l%2FzhN1PH4i4FO0icRdsYwFP560K%2Bm5wTHR0JlEMSxWDvbOSMsM5l7YO%2BOVdj9z5MPWtfmmB5Izbj1s9oHM0dEYHKZZickblPs38

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49860	104.21.80.92	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:39 UTC	1151	OUT	GET /rtimp?a=imp&cr=ext_download_prot_smrtsp&d=nuance-pdf-professional2.software.informer.com&gid=&im=FD4w747ub408eaM-61M3wJ3qfK7ErWHy518FlRGHao3f2PgYtkrU2HX0FFqbUAk8GJ00NxtW6WbXQuI8X1R_UXehWD3jEYZp8ei2zrBAxLF_eC2lrTItLT6yz_yg3qTdqPt-cj1efdGND7MZs7ZsJRipunhgT1FJD1LmFwmpi2OQr3jTzQR9zLhN6QczGb3mADM0t22ZeO2Xg8vOdZ1mlHLLgV4JF8Ewi3eE2AqQEV5caCIffDgbT78Fp5xkdUBCPKbARqx_8dnDHiOjCvOSb8zgsh2ZWSOtPn8Jt3midXYsYSKsXfbpaFDmrS7in6m-SbDqI-7b6lnILvGIshUNqXmndP6THKiDOHkNtxfBm68RZWVMHDodxBN1AQoMoSIGhvlBVALm3I3Zh-sHGXHJLE1ypsFqtnfq3svddbFFasOB2kyZpEryAs4P90VcBWSq&p=Z4g0tQANESoHg4m2ACXIeoWRGUCrQlQ9M1dJjA&sid=f2906c3b-d38e-11ef-93a7-aab196f2f20d HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:39 UTC	1358	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 22:20:39 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=f3a17e8e-d38e-11ef-aabf-6ad66283bdd7; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: uid_cross=f3a17e8e-d38e-11ef-aabf-6ad66283bdd7; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/; SameSite=none; Secure Set-Cookie: sid=f2906c3b-d38e-11ef-93a7-aab196f2f20d; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=f2906c3b-d38e-11ef-93a7-aab196f2f20d; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure
2025-01-15 22:20:39 UTC	669	IN	Data Raw: 56 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c 65 0d 0a 63 66 2d 63 61 63 68 65 2d 73 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 4b 78 6d 49 55 76 6b 4b 31 52 6c 78 37 25 32 42 34 66 67 4c 34 38 69 56 46 67 36 53 63 6f 57 48 79 45 54 59 66 50 6e 44 77 4a 53 7a 50 4d 67 4c 41 68 38 57 75 6b 4e 25 32 42 25 32 42 74 42 59 66 4c 47 45 4b 39 4a 62 61 4c 76 66 4f 31 68 32 77 49 25 32 46 48 7a 43 62 6e 54 33 72 6d 52 55 57 45 61 4c 6a 43 45 47 6b 25 32 46 39 31 68 38 64 6e 51 59 65 55 44 72 32 37 33 63 76 53 4b 53 55 53 79 4e 4e 46 Data Ascii: Via: 1.1 googlecf-cache-status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KxmIUvkK1Rlx7%2B4fgL48iVFg6ScoWHyETYfPnDwJSzPMgLAh8WukN%2B%2BtBYfLGEK9JbaLvfO1h2wI%2FHzCbnT3rmRUWEaLjCEGk%2F91h8dnQYeUDr273cvSKSUSyNNF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49861	172.67.176.164	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:39 UTC	1035	OUT	GET /sig.js?rpclid=f28d8534-d38e-11ef-93a7-aab196f2f20d&params=Nb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkPejZgAKFm3ZlUxHBNGiYcbgU5DmL2JgBOnA6uq5HqYXDGOAkkcHp77mTvilkZ5d9Q2rpDl_8WOAn-k2Y5V9CBXA9Hn2pQTPVn67DMY2sybqayiZvf5flizO3fgV6Cw9N2-R52IBOSmAosKxVeFWSaITqzx-S70fbalfXf6j_MGyOC9eAxeZ7JGLaNEYTuDszAbHweW2Joh-qvwh3aS1didawvBHLOP-V2AJ9n6wIzxxqj8vOzYkgNldKNUmJt1QcCV7gcheIGQeY618UdBWcgJbQ4H-Y9TkqHO2sUSV-RHzJCsRWDjhnFAPFm7pN506i_DH--SzmnConwZt5nHCFtvPxN2SulUo9 HTTP/1.1 Host: serve.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:39 UTC	1321	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:39 GMT Content-Type: text/javascript Content-Length: 9486 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Via: 1.1 google CF-Cache-Status: BYPASS Set-Cookie: uid=f3aa7002-d38e-11ef-be83-1e32fb8f298a; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: uid_cross=f3aa7002-d38e-11ef-be83-1e32fb8f298a; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/; SameSite=none; Secure Set-Cookie: mid=f28d8534-d38e-11ef-93a7-aab196f2f20d; Domain=.bidbrain.app; Max-Age=7200; Path=/ Accept-Ranges: bytes
2025-01-15 22:20:39 UTC	629	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 56 74 65 70 68 78 6c 69 62 58 77 6a 35 6c 62 69 4a 37 32 72 6b 74 76 33 4a 35 56 5a 41 79 64 56 56 4f 76 4b 69 54 46 55 4b 53 62 43 44 39 39 64 30 46 25 32 42 68 6a 68 59 36 48 43 48 4e 63 49 45 56 56 6e 4f 42 75 38 7a 70 59 43 33 72 31 62 61 46 25 32 46 25 32 42 54 4a 66 48 4c 79 49 4e 35 5a 75 67 76 25 32 42 56 43 77 75 78 51 33 61 52 7a 44 71 6c 41 48 38 71 6e 51 74 72 38 55 64 37 51 77 6d 53 4c 41 25 32 46 43 76 5a 52 76 51 45 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VtephxlibXwj5lbiJ72rktv3J5VZAydVVOvKiTFUKSbCD99d0F%2BhjhY6HCHNcIEVVnOBu8zpYC3r1baF%2F%2BTJfHLyIN5Zugv%2BVCwuxQ3aRzDqlAH8qnQtr8Ud7QwmSLA%2FCvZRvQE%3D"}],"group":"cf-nel","max_age
2025-01-15 22:20:39 UTC	788	IN	Data Raw: 76 61 72 20 70 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 66 3d 28 6d 2c 71 2c 6e 29 3d 3e 71 20 69 6e 20 6d 3f 70 28 6d 2c 71 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 6d 5b 71 5d 3d 6e 2c 68 3d 28 6d 2c 71 2c 6e 29 3d 3e 28 66 28 6d 2c 22 73 79 6d 62 6f 6c 22 21 3d 74 79 70 65 6f 66 20 71 3f 71 2b 22 22 3a 71 2c 6e 29 2c 6e 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 3f 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 28 22 66 6c 5f 22 2b 61 2c 62 29 3a 28 44 7c 7c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 71 2c 31 30 Data Ascii: var p=Object.defineProperty,f=(m,q,n)=>q in m?p(m,q,{enumerable:!0,configurable:!0,writable:!0,value:n}):m[q]=n,h=(m,q,n)=>(f(m,"symbol"!=typeof q?q+"":q,n),n);(function(){function m(a,b){window.sendEvent?window.sendEvent("fl_"+a,b):(D\|\|=setInterval(q,10
2025-01-15 22:20:39 UTC	1369	IN	Data Raw: 2c 63 29 3d 3e 62 2b 63 2c 30 29 2f 61 2e 6c 65 6e 67 74 68 7d 66 75 6e 63 74 69 6f 6e 20 46 28 61 29 7b 63 6f 6e 73 74 20 62 3d 76 28 61 29 3b 72 65 74 75 72 6e 20 4d 61 74 68 2e 73 71 72 74 28 61 2e 72 65 64 75 63 65 28 28 63 2c 64 29 3d 3e 63 2b 4d 61 74 68 2e 70 6f 77 28 64 2d 62 2c 32 29 2c 30 29 2f 61 2e 6c 65 6e 67 74 68 29 7d 66 75 6e 63 74 69 6f 6e 20 49 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 63 2c 64 29 3d 3e 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 64 28 45 72 72 6f 72 28 62 3f 3f 60 74 69 6d 65 6f 75 74 20 24 7b 61 7d 60 29 29 7d 2c 61 29 7d 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4a 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 61 63 65 28 5b 61 2c 49 28 62 Data Ascii: ,c)=>b+c,0)/a.length}function F(a){const b=v(a);return Math.sqrt(a.reduce((c,d)=>c+Math.pow(d-b,2),0)/a.length)}function I(a,b){return new Promise((c,d)=>{setTimeout(()=>{d(Error(b??`timeout ${a}`))},a)})}async function J(a,b,c){return Promise.race([a,I(b
2025-01-15 22:20:39 UTC	1369	IN	Data Raw: 2e 72 65 70 6f 72 74 45 72 72 6f 72 28 22 65 72 72 6f 72 20 69 6e 69 74 69 61 6c 69 7a 69 6e 67 22 2c 0a 63 29 7d 22 63 6f 6d 70 6c 65 74 65 22 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 29 3d 3e 7b 74 72 79 7b 74 68 69 73 2e 72 65 61 64 79 28 29 7d 63 61 74 63 68 28 63 29 7b 74 68 69 73 2e 72 65 70 6f 72 74 45 72 72 6f 72 28 22 65 72 72 6f 72 20 69 6e 76 6f 6b 69 6e 67 20 72 65 61 64 79 22 2c 63 29 7d 7d 29 3a 74 68 69 73 2e 72 65 61 64 79 28 29 7d 69 6e 69 74 69 61 6c 69 7a 65 28 29 7b 7d 72 65 61 64 79 28 29 7b 7d 72 65 70 6f 72 74 28 61 2c 62 29 7b 6d 28 75 2e 53 69 67 6e 61 6c 2c 7b 6e 61 6d 65 3a 74 68 69 73 2e 6e 61 6d 65 2c 73 Data Ascii: .reportError("error initializing",c)}"complete"!==document.readyState?window.addEventListener("load",()=>{try{this.ready()}catch(c){this.reportError("error invoking ready",c)}}):this.ready()}initialize(){}ready(){}report(a,b){m(u.Signal,{name:this.name,s
2025-01-15 22:20:39 UTC	1369	IN	Data Raw: 67 6e 28 67 2c 65 29 3b 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 67 2e 73 74 79 6c 65 2c 72 29 3b 67 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 74 68 69 73 2e 6f 6e 45 6c 65 6d 65 6e 74 43 6c 69 63 6b 29 3b 74 68 69 73 2e 69 6e 73 65 72 74 45 6c 65 6d 65 6e 74 28 67 2c 62 2c 6e 75 6c 6c 3d 3d 64 3f 76 6f 69 64 20 30 3a 64 2e 70 72 65 70 65 6e 64 29 7d 69 6e 73 65 72 74 45 6c 65 6d 65 6e 74 28 61 2c 62 2c 63 29 7b 63 3f 62 2e 70 72 65 70 65 6e 64 28 61 29 3a 62 2e 61 70 70 65 6e 64 28 61 29 7d 67 65 74 50 61 72 65 6e 74 45 6c 65 6d 65 6e 74 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 0a 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 61 29 3a 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 7d 6f 6e 45 6c 65 6d 65 Data Ascii: gn(g,e);Object.assign(g.style,r);g.addEventListener("click",this.onElementClick);this.insertElement(g,b,null==d?void 0:d.prepend)}insertElement(a,b,c){c?b.prepend(a):b.append(a)}getParentElement(a){return a?document.querySelector(a):document.body}onEleme
2025-01-15 22:20:39 UTC	1369	IN	Data Raw: 64 20 30 3a 62 2e 6d 65 73 73 61 67 65 29 7d 7d 63 6c 61 73 73 20 52 20 65 78 74 65 6e 64 73 20 78 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 73 75 70 65 72 28 61 2c 62 29 3b 68 28 74 68 69 73 2c 22 65 76 65 6e 74 73 57 69 6e 64 6f 77 22 29 3b 68 28 74 68 69 73 2c 22 6d 69 6e 54 69 6d 65 44 65 6c 74 61 4d 73 22 29 3b 68 28 74 68 69 73 2c 22 6d 69 6e 44 69 73 74 61 6e 63 65 50 78 22 29 3b 68 28 74 68 69 73 2c 22 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 22 29 3b 68 28 74 68 69 73 2c 22 61 6e 67 6c 65 52 65 73 6f 6c 75 74 69 6f 6e 22 29 3b 68 28 74 68 69 73 2c 22 6d 6f 75 73 65 44 61 74 61 41 72 72 61 79 22 29 3b 74 68 69 73 2e 65 76 65 6e 74 73 57 69 6e 64 6f 77 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 65 76 65 6e 74 73 57 69 6e 64 6f Data Ascii: d 0:b.message)}}class R extends x{constructor(a,b){super(a,b);h(this,"eventsWindow");h(this,"minTimeDeltaMs");h(this,"minDistancePx");h(this,"velocityResolution");h(this,"angleResolution");h(this,"mouseDataArray");this.eventsWindow=this.config.eventsWindo
2025-01-15 22:20:39 UTC	1369	IN	Data Raw: 7b 63 6f 6e 73 74 20 7b 76 65 6c 6f 63 69 74 79 58 3a 41 2c 0a 76 65 6c 6f 63 69 74 79 59 3a 42 2c 61 6e 67 6c 65 3a 47 7d 3d 74 68 69 73 2e 63 61 6c 63 75 6c 61 74 65 28 61 5b 79 5d 2c 61 5b 79 2d 31 5d 29 3b 28 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 4d 61 74 68 2e 61 62 73 28 41 2d 65 29 3e 3d 74 68 69 73 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 29 26 26 28 62 2e 78 2e 63 6f 75 6e 74 55 6e 69 71 75 65 2b 2b 2c 65 3d 41 29 3b 28 76 6f 69 64 20 30 3d 3d 3d 6b 7c 7c 4d 61 74 68 2e 61 62 73 28 42 2d 6b 29 3e 3d 74 68 69 73 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 29 26 26 28 62 2e 79 2e 63 6f 75 6e 74 55 6e 69 71 75 65 2b 2b 2c 6b 3d 42 29 3b 63 2e 70 75 73 68 28 41 29 3b 64 2e 70 75 73 68 28 42 29 3b 76 61 72 20 74 3d 47 2c 54 Data Ascii: {const {velocityX:A,velocityY:B,angle:G}=this.calculate(a[y],a[y-1]);(void 0===e\|\|Math.abs(A-e)>=this.velocityResolution)&&(b.x.countUnique++,e=A);(void 0===k\|\|Math.abs(B-k)>=this.velocityResolution)&&(b.y.countUnique++,k=B);c.push(A);d.push(B);var t=G,T
2025-01-15 22:20:39 UTC	1369	IN	Data Raw: 69 74 20 4a 28 74 68 69 73 2e 63 6f 6c 6c 65 63 74 53 69 6e 67 6c 65 28 72 2c 63 29 2c 6b 29 7d 63 61 74 63 68 28 74 29 7b 65 5b 67 5d 3d 60 24 7b 72 7d 3a 20 24 7b 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 6d 65 73 73 61 67 65 7d 60 7d 7d 29 29 3b 74 68 69 73 2e 72 65 70 6f 72 74 28 64 2c 65 29 7d 7d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 32 33 34 5e 45 28 22 32 32 22 2c 32 33 34 29 3b 63 6f 6e 73 74 20 62 3d 30 21 3d 3d 61 3b 6c 65 74 20 63 3d 22 68 39 36 66 6b 35 43 51 6d 5a 2b 49 6b 34 36 50 33 73 61 48 33 70 47 52 33 73 61 48 33 70 32 66 69 4a 57 4b 6d 64 37 47 69 49 36 4a 6d 64 44 65 6b 5a 32 45 72 70 6d 4d 6b 34 36 49 33 73 62 4a 30 4e 36 49 68 59 79 5a 33 73 62 65 6b 5a 4f 4a 6a 35 6e 65 67 64 44 65 6b 5a 4f 4a 6a 35 6e 65 Data Ascii: it J(this.collectSingle(r,c),k)}catch(t){e[g]=`${r}: ${null==t?void 0:t.message}`}}));this.report(d,e)}}(function(){var a=234^E("22",234);const b=0!==a;let c="h96fk5CQmZ+Ik46P3saH3pGR3saH3p2fiJWKmd7GiI6JmdDekZ2ErpmMk46I3sbJ0N6IhYyZ3sbekZOJj5negdDekZOJj5ne
2025-01-15 22:20:39 UTC	484	IN	Data Raw: 37 47 33 70 4b 64 69 70 57 62 6e 59 69 54 6a 74 4b 51 6e 5a 4b 62 69 5a 32 62 6d 64 37 51 33 70 43 64 6b 70 75 50 33 73 62 65 6b 70 32 4b 6c 5a 75 64 69 4a 4f 4f 30 70 43 64 6b 70 75 4a 6e 5a 75 5a 6a 39 37 51 33 6f 75 59 33 73 62 65 6b 70 32 4b 6c 5a 75 64 69 4a 4f 4f 30 6f 75 5a 6e 70 69 4f 6c 59 71 5a 6a 74 36 42 67 64 44 65 69 49 57 4d 6d 64 37 47 33 6f 2b 49 6e 59 69 56 6e 39 36 42 30 4e 36 4c 6d 4e 37 47 68 39 36 64 6e 34 69 56 69 70 6e 65 78 6f 69 4f 69 5a 6e 51 33 70 6d 4b 6d 5a 4b 49 72 4a 32 4f 6e 5a 47 50 33 73 61 48 33 70 43 54 6e 5a 6a 65 78 6f 66 65 69 35 6a 65 78 74 36 53 6e 59 71 56 6d 35 32 49 6b 34 37 53 69 35 6d 65 6d 49 36 56 69 70 6d 4f 33 49 43 41 33 49 6d 53 6d 4a 6d 61 6c 5a 4b 5a 6d 4e 36 42 67 64 44 65 69 49 57 4d 6d 64 37 47 33 Data Ascii: 7G3pKdipWbnYiTjtKQnZKbiZ2bmd7Q3pCdkpuP3sbekp2KlZudiJOO0pCdkpuJnZuZj97Q3ouY3sbekp2KlZudiJOO0ouZnpiOlYqZjt6BgdDeiIWMmd7G3o+InYiVn96B0N6LmN7Gh96dn4iVipnexoiOiZnQ3pmKmZKIrJ2OnZGP3saH3pCTnZjexofei5jext6SnYqVm52Ik47Si5memI6VipmO3ICA3ImSmJmalZKZmN6BgdDeiIWMmd7G3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49864	104.21.80.92	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:39 UTC	637	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 2036 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:39 UTC	2036	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 66 32 38 64 38 35 33 34 2d 64 33 38 65 2d 31 31 65 66 2d 39 33 61 37 2d 61 61 62 31 39 36 66 32 66 32 30 64 22 2c 22 64 22 3a 22 6e 75 61 6e 63 65 2d 70 64 66 2d 70 72 6f 66 65 73 73 69 6f 6e 61 6c 32 2e 73 6f 66 74 77 61 72 65 2e 69 6e 66 6f 72 6d 65 72 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 4e 62 34 4a 50 52 52 6e 59 56 69 38 6b 62 6a 30 63 31 46 49 5f 46 4e 4b 5a 35 39 78 6e 44 4f 6c 69 56 78 63 49 4d 38 35 6e 32 71 73 35 79 38 67 76 31 75 56 67 33 52 62 6a 5a 57 35 5f 46 72 56 6c 59 47 57 50 7a 44 39 4e 49 73 4c 57 4e 45 4f 48 7a 75 34 59 4f 6d 44 38 4f 75 69 53 38 55 6b 50 Data Ascii: {"entries":[{"sid":"f28d8534-d38e-11ef-93a7-aab196f2f20d","d":"nuance-pdf-professional2.software.informer.com","cr":"ext_download_prot_smrtsp","gid":"","im":"Nb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkP
2025-01-15 22:20:39 UTC	1265	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 22:20:39 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=f3aaf87e-d38e-11ef-8844-6640aa8b48e9; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: uid_cross=f3aaf87e-d38e-11ef-8844-6640aa8b48e9; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/; SameSite=none; Secure Set-Cookie: sid=f28d8534-d38e-11ef-93a7-aab196f2f20d; Domain=.bidbrain.app; Max-Age=7200; Path=/
2025-01-15 22:20:39 UTC	792	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 73 69 64 5f 63 72 6f 73 73 3d 66 32 38 64 38 35 33 34 2d 64 33 38 65 2d 31 31 65 66 2d 39 33 61 37 2d 61 61 62 31 39 36 66 32 66 32 30 64 3b 20 44 6f 6d 61 69 6e 3d 2e 62 69 64 62 72 61 69 6e 2e 61 70 70 3b 20 4d 61 78 2d 41 67 65 3d 37 32 30 30 3b 20 50 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 6e 6f 6e 65 3b 20 53 65 63 75 72 65 0d 0a 56 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c 65 0d 0a 63 66 2d 63 61 63 68 65 2d 73 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 46 4d 74 69 32 66 65 Data Ascii: Set-Cookie: sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; SecureVia: 1.1 googlecf-cache-status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FMti2fe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49862	104.21.80.92	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:39 UTC	637	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 2054 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:39 UTC	2054	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 66 32 39 30 36 63 33 62 2d 64 33 38 65 2d 31 31 65 66 2d 39 33 61 37 2d 61 61 62 31 39 36 66 32 66 32 30 64 22 2c 22 64 22 3a 22 6e 75 61 6e 63 65 2d 70 64 66 2d 70 72 6f 66 65 73 73 69 6f 6e 61 6c 32 2e 73 6f 66 74 77 61 72 65 2e 69 6e 66 6f 72 6d 65 72 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 46 44 34 77 37 34 37 75 62 34 30 38 65 61 4d 2d 36 31 4d 33 77 4a 33 71 66 4b 37 45 72 57 48 79 35 31 38 46 6c 52 47 48 61 6f 33 66 32 50 67 59 74 6b 72 55 32 48 58 30 46 46 71 62 55 41 6b 38 47 4a 30 30 4e 78 74 57 36 57 62 58 51 75 49 38 58 31 52 5f 55 58 65 68 57 44 33 6a 45 59 5a 70 38 Data Ascii: {"entries":[{"sid":"f2906c3b-d38e-11ef-93a7-aab196f2f20d","d":"nuance-pdf-professional2.software.informer.com","cr":"ext_download_prot_smrtsp","gid":"","im":"FD4w747ub408eaM-61M3wJ3qfK7ErWHy518FlRGHao3f2PgYtkrU2HX0FFqbUAk8GJ00NxtW6WbXQuI8X1R_UXehWD3jEYZp8
2025-01-15 22:20:39 UTC	1265	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 22:20:39 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=f3abe978-d38e-11ef-9be3-06ea00a66b0e; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: uid_cross=f3abe978-d38e-11ef-9be3-06ea00a66b0e; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/; SameSite=none; Secure Set-Cookie: sid=f2906c3b-d38e-11ef-93a7-aab196f2f20d; Domain=.bidbrain.app; Max-Age=7200; Path=/
2025-01-15 22:20:39 UTC	796	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 73 69 64 5f 63 72 6f 73 73 3d 66 32 39 30 36 63 33 62 2d 64 33 38 65 2d 31 31 65 66 2d 39 33 61 37 2d 61 61 62 31 39 36 66 32 66 32 30 64 3b 20 44 6f 6d 61 69 6e 3d 2e 62 69 64 62 72 61 69 6e 2e 61 70 70 3b 20 4d 61 78 2d 41 67 65 3d 37 32 30 30 3b 20 50 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 6e 6f 6e 65 3b 20 53 65 63 75 72 65 0d 0a 56 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c 65 0d 0a 63 66 2d 63 61 63 68 65 2d 73 74 61 74 75 73 3a 20 44 59 4e 41 4d 49 43 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 54 6c 77 6f 25 32 46 Data Ascii: Set-Cookie: sid_cross=f2906c3b-d38e-11ef-93a7-aab196f2f20d; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; SecureVia: 1.1 googlecf-cache-status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Tlwo%2F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49865	104.21.80.92	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:39 UTC	585	OUT	GET /ng-assets/creative/assets/index-127e2d55.css HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:39 UTC	1173	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:39 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close X-GUploader-UploadID: AFiumC4nmN8U6JcOv7Bd8sWvK-bTLiqAgt2LnFGA76hoV2zjHWl5hnRPa6Ekn4kwBrvuJdAV x-goog-generation: 1735210649393029 x-goog-metageneration: 2 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 15324 x-goog-hash: crc32c=Rp60hA== x-goog-hash: md5=UDGZhDiAVKAK5jBbtt/nvw== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type Expires: Wed, 15 Jan 2025 22:20:03 GMT Cache-Control: public, max-age=14400 Last-Modified: Thu, 26 Dec 2024 10:57:29 GMT ETag: W/"50319984388054a00ae6305bb6dfe7bf" Vary: Accept-Encoding Age: 772 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K6ZzifQlNOJ80SHKAQR5%2B9ZsCJXl21fE%2FAv6E0bInmjwFuQ9mnNdvHSovPVqm0nTtutRJ7cWU8rDxN%2FtYYUOhUs6sI%2BZXXl6RPuN8SdmR85mf2Ikd6QNV6GFniLSydAXm5Pd"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9029411d5c44ab4e-YYZ alt-svc: h3=":443"; ma=86400
2025-01-15 22:20:39 UTC	217	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 34 31 37 30 26 6d 69 6e 5f 72 74 74 3d 31 34 30 37 32 26 72 74 74 5f 76 61 72 3d 35 33 34 37 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 33 33 39 26 72 65 63 76 5f 62 79 74 65 73 3d 31 31 36 33 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 32 30 37 35 30 34 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 61 62 32 35 36 64 39 66 65 37 66 65 36 33 65 36 26 74 73 3d 31 38 31 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=14170&min_rtt=14072&rtt_var=5347&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2339&recv_bytes=1163&delivery_rate=207504&cwnd=32&unsent_bytes=0&cid=ab256d9fe7fe63e6&ts=181&x=0"
2025-01-15 22:20:39 UTC	1348	IN	Data Raw: 33 62 64 63 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 5f 61 64 76 65 72 74 69 73 65 72 5f 31 6a 6c 63 76 5f 31 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 35 30 31 3b 77 69 64 74 68 3a 66 69 74 2d 63 6f 6e 74 65 6e 74 3b 68 65 69 67 68 74 3a 66 69 74 2d 63 6f 6e 74 65 6e 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 5f 61 64 76 65 72 74 69 73 65 72 4e 61 6d 65 5f 31 6a 6c 63 76 5f 31 31 7b 7a 2d 69 6e 64 65 78 3a 35 30 34 3b 63 6f 6c 6f 72 3a 23 62 39 62 38 62 38 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a Data Ascii: 3bdc@charset "UTF-8";._advertiser_1jlcv_1{position:absolute;z-index:501;width:fit-content;height:fit-content;font-size:12px;font-weight:700;background-color:transparent}._advertiserName_1jlcv_11{z-index:504;color:#b9b8b8;user-select:none;pointer-events:
2025-01-15 22:20:39 UTC	1369	IN	Data Raw: 37 7b 6c 65 66 74 3a 30 7d 2e 5f 63 6c 6f 73 65 42 75 74 74 6f 6e 52 69 67 68 74 5f 35 62 34 77 62 5f 37 31 7b 74 6f 70 3a 31 32 70 78 3b 72 69 67 68 74 3a 31 35 70 78 7d 2e 5f 63 6c 6f 73 65 42 75 74 74 6f 6e 4c 65 66 74 5f 35 62 34 77 62 5f 37 36 7b 74 6f 70 3a 31 32 70 78 3b 6c 65 66 74 3a 31 35 70 78 7d 2e 5f 61 6c 74 43 6c 6f 73 65 42 75 74 74 6f 6e 52 69 67 68 74 5f 35 62 34 77 62 5f 38 31 7b 74 6f 70 3a 31 36 70 78 3b 72 69 67 68 74 3a 33 30 70 78 7d 2e 5f 61 6c 74 43 6c 6f 73 65 42 75 74 74 6f 6e 4c 65 66 74 5f 35 62 34 77 62 5f 38 36 7b 74 6f 70 3a 31 36 70 78 3b 6c 65 66 74 3a 33 30 70 78 7d 2e 5f 63 6f 75 6e 74 64 6f 77 6e 43 6c 6f 73 65 5f 35 62 34 77 62 5f 39 31 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 Data Ascii: 7{left:0}._closeButtonRight_5b4wb_71{top:12px;right:15px}._closeButtonLeft_5b4wb_76{top:12px;left:15px}._altCloseButtonRight_5b4wb_81{top:16px;right:30px}._altCloseButtonLeft_5b4wb_86{top:16px;left:30px}._countdownClose_5b4wb_91{background-color:#fff;bord
2025-01-15 22:20:39 UTC	1369	IN	Data Raw: 70 72 6f 67 72 65 73 73 56 61 6c 75 65 5f 31 69 35 38 38 5f 31 32 7b 61 6e 69 6d 61 74 69 6f 6e 3a 5f 6c 6f 61 64 5f 31 69 35 38 38 5f 31 20 6e 6f 72 6d 61 6c 20 66 6f 72 77 61 72 64 73 20 6c 69 6e 65 61 72 20 70 61 75 73 65 64 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 30 70 78 20 34 30 70 78 20 2d 31 30 70 78 20 23 30 30 37 37 63 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 37 37 63 65 3b 68 65 69 67 68 74 3a 31 30 70 78 3b 77 69 64 74 68 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 63 6f 6e 74 65 6e 74 3a 22 22 7d 40 6b 65 79 66 72 61 6d 65 73 20 5f 6c 6f 61 64 5f 31 69 35 38 38 5f 31 7b 30 25 7b 77 69 64 74 68 3a 30 7d 74 6f 7b 77 69 Data Ascii: progressValue_1i588_12{animation:_load_1i588_1 normal forwards linear paused;box-shadow:0 10px 40px -10px #0077ce;border-radius:0;background:#0077ce;height:10px;width:0;position:relative;bottom:0;left:0;content:""}@keyframes _load_1i588_1{0%{width:0}to{wi
2025-01-15 22:20:39 UTC	1369	IN	Data Raw: 67 69 6e 2d 62 6f 74 74 6f 6d 3a 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 7d 2e 5f 62 75 74 74 6f 6e 5f 64 6e 7a 72 36 5f 32 32 7b 70 61 64 64 69 6e 67 3a 31 34 70 78 20 34 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 31 66 38 39 66 35 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 30 70 78 7d 2e 5f 69 6d 61 67 65 5f 64 6e 7a 72 36 5f 33 31 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 32 35 76 77 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 32 70 78 7d 2e 5f 69 6e 70 75 74 5f 6d 76 39 35 36 5f 31 7b 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: gin-bottom:4px;font-weight:500}._button_dnzr6_22{padding:14px 40px;background:#1f89f5;color:#fff;font-size:30px;border-radius:30px;margin-bottom:50px}._image_dnzr6_31{margin-bottom:20px;width:auto;height:25vw;border-radius:12px}._input_mv956_1{background-
2025-01-15 22:20:39 UTC	1369	IN	Data Raw: 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 2e 5f 73 6c 69 64 65 72 54 68 75 6d 62 5f 39 38 72 75 7a 5f 31 35 7b 77 69 64 74 68 3a 35 30 70 78 3b 68 65 69 67 68 74 3a 35 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 3a 30 20 35 70 78 3b 7a 2d 69 6e 64 65 78 3a 32 7d 2e 5f 73 6c 69 64 65 72 54 68 75 6d 62 5f 39 38 72 75 7a 5f 31 35 20 69 6d 67 7b 77 69 64 74 68 3a 31 Data Ascii: ;pointer-events:none}._sliderThumb_98ruz_15{width:50px;height:50px;background-color:#fff;border-radius:50%;color:#fff;display:flex;align-items:center;justify-content:center;position:absolute;left:0;margin:0 5px;z-index:2}._sliderThumb_98ruz_15 img{width:1
2025-01-15 22:20:39 UTC	1369	IN	Data Raw: 77 6a 6a 5f 37 35 7b 61 6e 69 6d 61 74 69 6f 6e 3a 5f 72 65 76 65 72 73 65 53 6c 69 64 65 4c 65 66 74 5f 6c 31 77 6a 6a 5f 37 35 20 2e 34 73 20 65 61 73 65 20 66 6f 72 77 61 72 64 73 7d 40 6b 65 79 66 72 61 6d 65 73 20 5f 72 65 76 65 72 73 65 53 6c 69 64 65 4c 65 66 74 5f 6c 31 77 6a 6a 5f 37 35 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 30 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 31 30 30 76 68 29 7d 7d 2e 5f 73 6c 69 64 65 52 69 67 68 74 5f 6c 31 77 6a 6a 5f 38 37 7b 61 6e 69 6d 61 74 69 6f 6e 3a 5f 73 6c 69 64 65 52 69 67 68 74 5f 6c 31 77 6a 6a 5f 38 37 20 2e 34 73 20 65 61 73 65 20 66 6f 72 77 61 72 64 73 7d 40 6b 65 79 66 72 61 6d 65 73 20 5f 73 6c 69 64 65 52 69 67 68 74 5f 6c 31 77 6a Data Ascii: wjj_75{animation:_reverseSlideLeft_l1wjj_75 .4s ease forwards}@keyframes _reverseSlideLeft_l1wjj_75{0%{transform:translate(0)}to{transform:translate(100vh)}}._slideRight_l1wjj_87{animation:_slideRight_l1wjj_87 .4s ease forwards}@keyframes _slideRight_l1wj
2025-01-15 22:20:39 UTC	1369	IN	Data Raw: 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 36 35 2c 2e 38 34 2c 2e 34 34 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 40 6b 65 79 66 72 61 6d 65 73 20 5f 72 65 76 65 72 73 65 55 6e 66 6f 6c 64 56 65 72 74 69 63 61 6c 5f 6c 31 77 6a 6a 5f 31 36 37 7b 35 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 59 28 31 29 20 73 63 61 6c 65 58 28 2e 30 30 35 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 59 28 30 29 20 73 63 61 6c 65 58 28 2e 30 30 35 29 7d 7d 2e 5f 72 65 76 65 72 73 65 55 6e 66 6f 6c 64 48 6f 72 69 7a 6f 6e 74 61 6c 5f 6c 31 77 6a 6a 5f 31 37 39 7b 61 6e 69 6d 61 74 69 6f 6e 3a 5f 72 65 76 65 72 73 65 55 6e 66 6f 6c 64 48 6f 72 69 7a 6f 6e 74 61 6c 5f 6c 31 77 6a 6a 5f 31 37 39 20 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 36 35 Data Ascii: bic-bezier(.165,.84,.44,1) forwards}@keyframes _reverseUnfoldVertical_l1wjj_167{50%{transform:scaleY(1) scaleX(.005)}to{transform:scaleY(0) scaleX(.005)}}._reverseUnfoldHorizontal_l1wjj_179{animation:_reverseUnfoldHorizontal_l1wjj_179 1s cubic-bezier(.165
2025-01-15 22:20:39 UTC	1369	IN	Data Raw: 32 37 34 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 74 6f 70 3a 30 7d 2e 5f 73 74 69 63 6b 79 42 6f 74 74 6f 6d 5f 6c 31 77 6a 6a 5f 32 37 39 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 62 6f 74 74 6f 6d 3a 30 7d 2e 5f 68 69 64 65 44 69 73 70 6c 61 79 5f 6c 31 77 6a 6a 5f 32 38 34 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 5f 68 69 64 65 56 69 73 69 62 69 6c 69 74 79 5f 6c 31 77 6a 6a 5f 32 38 38 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 5f 67 72 69 64 5f 33 67 68 77 34 5f 31 7b 64 69 73 70 6c 61 79 3a 67 72 69 64 7d 2e 5f 72 6f 77 5f 33 67 68 77 34 5f 35 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 5f 63 6f 6c 75 6d 6e 5f 33 67 68 77 34 5f 39 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 5f 67 61 6c 6c 65 72 79 43 6f 6e 74 61 69 6e 65 Data Ascii: 274{position:fixed;top:0}._stickyBottom_l1wjj_279{position:fixed;bottom:0}._hideDisplay_l1wjj_284{display:none}._hideVisibility_l1wjj_288{visibility:hidden}._grid_3ghw4_1{display:grid}._row_3ghw4_5{height:100%}._column_3ghw4_9{width:100%}._galleryContaine
2025-01-15 22:20:39 UTC	1369	IN	Data Raw: 5f 73 74 6f 72 79 42 61 72 57 72 61 70 70 65 72 5f 73 38 37 68 6e 5f 31 32 7b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 6d 61 72 67 69 6e 3a 30 20 34 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 5f 73 74 6f 72 79 42 61 72 5f 73 38 37 68 6e 5f 31 32 7b 77 69 64 74 68 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 5f 73 74 6f 72 79 42 61 72 42 61 63 6b 67 72 6f 75 6e 64 5f 73 38 37 68 6e 5f 32 33 7b 6f 70 61 63 69 74 79 3a 2e 35 7d 2e 5f 73 6c 69 64 65 72 5f 65 6d 77 37 6e 5f 31 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 77 69 64 74 68 3a 31 30 30 25 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 68 65 69 67 68 74 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 Data Ascii: _storyBarWrapper_s87hn_12{flex-grow:1;margin:0 4px;position:relative}._storyBar_s87hn_12{width:100%;position:absolute}._storyBarBackground_s87hn_23{opacity:.5}._slider_emw7n_1{height:100%;margin:auto;width:100%;transition:height .15s ease-in;overflow:hidd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49863	104.21.80.92	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:39 UTC	612	OUT	GET /ng-assets/creative/assets/index-5333d910.js HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://googleads.g.doubleclick.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:39 UTC	1265	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:39 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close X-GUploader-UploadID: AFiumC6KL72pwuS0RhiaPiC-IBJT66o3BLsaGSjaOcwehczGQQbrl1VTWo1LzXhIN6zBlUC7 Expires: Wed, 15 Jan 2025 22:26:49 GMT Cache-Control: public, max-age=14400 Last-Modified: Wed, 25 Dec 2024 12:21:33 GMT ETag: W/"dbb8a5f0c0779c20b733ecb73a421605" x-goog-generation: 1735129293497096 x-goog-metageneration: 2 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 141707 x-goog-hash: crc32c=90RuKA== x-goog-hash: md5=27il8MB3nCC3M+y3OkIWBQ== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Vary: Accept-Encoding CF-Cache-Status: HIT Age: 2700 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nyZJLAmQ9hBzuWlA70yunU312l69fVFrfL38FsSAd9HnuR%2FuLVJsv3EiVtcIxQKO54wCHhQ8ZBLMBbm9KqAEJvkzGkzbsS6q7P9HqVklsZwzGF%2Fs4mrjtl0QyerHXUjPSUmH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9029411d6c28ab42-YYZ alt-svc: h3=":443"; ma=86400
2025-01-15 22:20:39 UTC	217	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 34 32 32 38 26 6d 69 6e 5f 72 74 74 3d 31 34 32 31 39 26 72 74 74 5f 76 61 72 3d 35 33 35 31 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 33 33 38 26 72 65 63 76 5f 62 79 74 65 73 3d 31 31 39 30 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 32 30 34 32 35 32 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 38 30 66 37 33 30 30 65 36 35 34 34 66 62 63 35 26 74 73 3d 31 39 31 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=14228&min_rtt=14219&rtt_var=5351&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2338&recv_bytes=1190&delivery_rate=204252&cwnd=32&unsent_bytes=0&cid=80f7300e6544fbc5&ts=191&x=0"
2025-01-15 22:20:39 UTC	1256	IN	Data Raw: 37 61 61 66 0d 0a 76 61 72 20 6f 69 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 73 69 3d 28 65 2c 74 2c 6e 29 3d 3e 74 20 69 6e 20 65 3f 6f 69 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 65 5b 74 5d 3d 6e 3b 76 61 72 20 6a 3d 28 65 2c 74 2c 6e 29 3d 3e 28 73 69 28 65 2c 74 79 70 65 6f 66 20 74 21 3d 22 73 79 6d 62 6f 6c 22 3f 74 2b 22 22 3a 74 2c 6e 29 2c 6e 29 3b 66 75 6e 63 74 69 6f 6e 20 4d 68 28 29 7b 69 6d 70 6f 72 74 2e 6d 65 74 61 2e 75 72 6c 2c 69 6d 70 6f 72 74 28 22 5f 22 29 2e 63 61 74 63 68 28 28 29 3d 3e 31 29 2c 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 7d 28 29 2e Data Ascii: 7aafvar oi=Object.defineProperty;var si=(e,t,n)=>t in e?oi(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n;var j=(e,t,n)=>(si(e,typeof t!="symbol"?t+"":t,n),n);function Mh(){import.meta.url,import("_").catch(()=>1),async function*(){}().
2025-01-15 22:20:39 UTC	1369	IN	Data Raw: 3d 3d 22 6b 65 79 22 3f 72 3d 74 5b 73 5d 3a 73 3d 3d 22 72 65 66 22 3f 6f 3d 74 5b 73 5d 3a 69 5b 73 5d 3d 74 5b 73 5d 3b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 28 69 2e 63 68 69 6c 64 72 65 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 33 3f 5f 6e 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 32 29 3a 6e 29 2c 74 79 70 65 6f 66 20 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 21 3d 6e 75 6c 6c 29 66 6f 72 28 73 20 69 6e 20 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 29 69 5b 73 5d 3d 3d 3d 76 6f 69 64 20 30 26 26 28 69 5b 73 5d 3d 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 5b 73 5d 29 3b 72 65 74 75 72 6e 20 7a 74 28 65 2c 69 2c 72 2c 6f 2c 6e 75 6c 6c 29 7d 66 75 6e 63 74 Data Ascii: =="key"?r=t[s]:s=="ref"?o=t[s]:i[s]=t[s];if(arguments.length>2&&(i.children=arguments.length>3?_n.call(arguments,2):n),typeof e=="function"&&e.defaultProps!=null)for(s in e.defaultProps)i[s]===void 0&&(i[s]=e.defaultProps[s]);return zt(e,i,r,o,null)}funct
2025-01-15 22:20:39 UTC	1369	IN	Data Raw: 26 48 6f 28 72 29 29 2c 63 74 2e 6c 65 6e 67 74 68 3e 74 26 26 63 74 2e 73 6f 72 74 28 6a 6e 29 29 3b 65 6e 2e 5f 5f 72 3d 30 7d 66 75 6e 63 74 69 6f 6e 20 46 6f 28 65 2c 74 2c 6e 2c 72 2c 6f 2c 73 2c 69 2c 63 2c 75 2c 61 2c 66 29 7b 76 61 72 20 6c 2c 79 2c 68 2c 62 2c 41 2c 53 3d 72 26 26 72 2e 5f 5f 6b 7c 7c 55 6f 2c 45 3d 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 6e 2e 5f 5f 64 3d 75 2c 63 69 28 6e 2c 74 2c 53 29 2c 75 3d 6e 2e 5f 5f 64 2c 6c 3d 30 3b 6c 3c 45 3b 6c 2b 2b 29 28 68 3d 6e 2e 5f 5f 6b 5b 6c 5d 29 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 68 21 3d 22 62 6f 6f 6c 65 61 6e 22 26 26 74 79 70 65 6f 66 20 68 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 79 3d 68 2e 5f 5f 69 3d 3d 3d 2d 31 3f 54 74 3a 53 5b 68 2e 5f 5f 69 5d 7c 7c 54 74 2c 68 2e Data Ascii: &Ho(r)),ct.length>t&&ct.sort(jn));en.__r=0}function Fo(e,t,n,r,o,s,i,c,u,a,f){var l,y,h,b,A,S=r&&r.__k\|\|Uo,E=t.length;for(n.__d=u,ci(n,t,S),u=n.__d,l=0;l<E;l++)(h=n.__k[l])!=null&&typeof h!="boolean"&&typeof h!="function"&&(y=h.__i===-1?Tt:S[h.__i]\|\|Tt,h.
2025-01-15 22:20:39 UTC	1369	IN	Data Raw: 5d 29 21 3d 6e 75 6c 6c 26 26 21 28 31 33 31 30 37 32 26 73 2e 5f 5f 75 29 26 26 28 73 2e 5f 5f 65 3d 3d 65 2e 5f 5f 64 26 26 28 65 2e 5f 5f 64 3d 75 74 28 73 29 29 2c 44 6e 28 73 2c 73 29 29 7d 66 75 6e 63 74 69 6f 6e 20 57 6f 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 6f 3b 69 66 28 74 79 70 65 6f 66 20 65 2e 74 79 70 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 66 6f 72 28 72 3d 65 2e 5f 5f 6b 2c 6f 3d 30 3b 72 26 26 6f 3c 72 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 72 5b 6f 5d 26 26 28 72 5b 6f 5d 2e 5f 5f 3d 65 2c 74 3d 57 6f 28 72 5b 6f 5d 2c 74 2c 6e 29 29 3b 72 65 74 75 72 6e 20 74 7d 65 2e 5f 5f 65 21 3d 74 26 26 28 6e 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2e 5f 5f 65 2c 74 7c 7c 6e 75 6c 6c 29 2c 74 3d 65 2e 5f 5f 65 29 3b 64 6f 20 74 3d 74 26 Data Ascii: ])!=null&&!(131072&s.__u)&&(s.__e==e.__d&&(e.__d=ut(s)),Dn(s,s))}function Wo(e,t,n){var r,o;if(typeof e.type=="function"){for(r=e.__k,o=0;r&&o<r.length;o++)r[o]&&(r[o].__=e,t=Wo(r[o],t,n));return t}e.__e!=t&&(n.insertBefore(e.__e,t\|\|null),t=e.__e);do t=t&
2025-01-15 22:20:39 UTC	1369	IN	Data Raw: 3a 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 73 3f 4d 6e 3a 4e 6e 2c 73 29 3b 65 6c 73 65 7b 69 66 28 6f 3d 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 29 74 3d 74 2e 72 65 70 6c 61 63 65 28 2f 78 6c 69 6e 6b 28 48 7c 3a 68 29 2f 2c 22 68 22 29 2e 72 65 70 6c 61 63 65 28 2f 73 4e 61 6d 65 24 2f 2c 22 73 22 29 3b 65 6c 73 65 20 69 66 28 74 21 3d 22 77 69 64 74 68 22 26 26 74 21 3d 22 68 65 69 67 68 74 22 26 26 74 21 3d 22 68 72 65 66 22 26 26 74 21 3d 22 6c 69 73 74 22 26 26 74 21 3d 22 66 6f 72 6d 22 26 26 74 21 3d 22 74 61 62 49 6e 64 65 78 22 26 26 74 21 3d 22 64 6f 77 6e 6c 6f 61 64 22 26 26 74 21 3d 22 72 6f 77 53 70 61 6e 22 26 26 74 21 3d 22 63 6f 6c 53 70 61 6e 22 26 26 74 21 Data Ascii: :e.removeEventListener(t,s?Mn:Nn,s);else{if(o=="http://www.w3.org/2000/svg")t=t.replace(/xlink(H\|:h)/,"h").replace(/sName$/,"s");else if(t!="width"&&t!="height"&&t!="href"&&t!="list"&&t!="form"&&t!="tabIndex"&&t!="download"&&t!="rowSpan"&&t!="colSpan"&&t!
2025-01-15 22:20:39 UTC	1369	IN	Data Raw: 6d 70 6f 6e 65 6e 74 44 69 64 4d 6f 75 6e 74 29 3b 65 6c 73 65 7b 69 66 28 4b 2e 67 65 74 44 65 72 69 76 65 64 53 74 61 74 65 46 72 6f 6d 50 72 6f 70 73 3d 3d 6e 75 6c 6c 26 26 45 21 3d 3d 68 26 26 6c 2e 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 52 65 63 65 69 76 65 50 72 6f 70 73 21 3d 6e 75 6c 6c 26 26 6c 2e 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 52 65 63 65 69 76 65 50 72 6f 70 73 28 45 2c 58 29 2c 21 6c 2e 5f 5f 65 26 26 28 6c 2e 73 68 6f 75 6c 64 43 6f 6d 70 6f 6e 65 6e 74 55 70 64 61 74 65 21 3d 6e 75 6c 6c 26 26 6c 2e 73 68 6f 75 6c 64 43 6f 6d 70 6f 6e 65 6e 74 55 70 64 61 74 65 28 45 2c 6c 2e 5f 5f 73 2c 58 29 3d 3d 3d 21 31 7c 7c 74 2e 5f 5f 76 3d 3d 3d 6e 2e 5f 5f 76 29 29 7b 66 6f 72 28 74 2e 5f 5f 76 21 3d 3d 6e 2e 5f 5f 76 26 26 28 6c 2e 70 72 Data Ascii: mponentDidMount);else{if(K.getDerivedStateFromProps==null&&E!==h&&l.componentWillReceiveProps!=null&&l.componentWillReceiveProps(E,X),!l.__e&&(l.shouldComponentUpdate!=null&&l.shouldComponentUpdate(E,l.__s,X)===!1\|\|t.__v===n.__v)){for(t.__v!==n.__v&&(l.pr
2025-01-15 22:20:39 UTC	1369	IN	Data Raw: 5f 5f 6b 2c 74 2e 5f 5f 65 3d 6e 2e 5f 5f 65 29 3a 74 2e 5f 5f 65 3d 61 69 28 6e 2e 5f 5f 65 2c 74 2c 6e 2c 72 2c 6f 2c 73 2c 69 2c 75 2c 61 29 3b 28 66 3d 44 2e 64 69 66 66 65 64 29 26 26 66 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 6f 28 65 2c 74 2c 6e 29 7b 74 2e 5f 5f 64 3d 76 6f 69 64 20 30 3b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 6e 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 61 72 28 6e 5b 72 5d 2c 6e 5b 2b 2b 72 5d 2c 6e 5b 2b 2b 72 5d 29 3b 44 2e 5f 5f 63 26 26 44 2e 5f 5f 63 28 74 2c 65 29 2c 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 74 72 79 7b 65 3d 6f 2e 5f 5f 68 2c 6f 2e 5f 5f 68 3d 5b 5d 2c 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 73 29 7b 73 2e 63 61 6c 6c 28 6f 29 7d 29 7d 63 61 74 63 68 28 73 29 7b 44 2e 5f 5f 65 28 73 Data Ascii: __k,t.__e=n.__e):t.__e=ai(n.__e,t,n,r,o,s,i,u,a);(f=D.diffed)&&f(t)}function zo(e,t,n){t.__d=void 0;for(var r=0;r<n.length;r++)ar(n[r],n[++r],n[++r]);D.__c&&D.__c(t,e),e.some(function(o){try{e=o.__h,o.__h=[],e.some(function(s){s.call(o)})}catch(s){D.__e(s
2025-01-15 22:20:39 UTC	1369	IN	Data Raw: 4c 3d 22 22 29 2c 46 6f 28 65 2c 68 6e 28 79 29 3f 79 3a 5b 79 5d 2c 74 2c 6e 2c 72 2c 52 3d 3d 3d 22 66 6f 72 65 69 67 6e 4f 62 6a 65 63 74 22 3f 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3a 6f 2c 73 2c 69 2c 73 3f 73 5b 30 5d 3a 6e 2e 5f 5f 6b 26 26 75 74 28 6e 2c 30 29 2c 63 2c 75 29 2c 73 21 3d 6e 75 6c 6c 29 66 6f 72 28 61 3d 73 2e 6c 65 6e 67 74 68 3b 61 2d 2d 3b 29 73 5b 61 5d 21 3d 6e 75 6c 6c 26 26 42 6f 28 73 5b 61 5d 29 3b 63 7c 7c 28 61 3d 22 76 61 6c 75 65 22 2c 62 21 3d 3d 76 6f 69 64 20 30 26 26 28 62 21 3d 3d 65 5b 61 5d 7c 7c 52 3d 3d 3d 22 70 72 6f 67 72 65 73 73 22 26 26 21 62 7c 7c 52 3d 3d 3d 22 6f 70 74 69 6f 6e 22 26 26 62 21 3d 3d 53 5b 61 5d 29 26 26 50 74 28 65 2c 61 2c 62 2c 53 5b Data Ascii: L=""),Fo(e,hn(y)?y:[y],t,n,r,R==="foreignObject"?"http://www.w3.org/1999/xhtml":o,s,i,s?s[0]:n.__k&&ut(n,0),c,u),s!=null)for(a=s.length;a--;)s[a]!=null&&Bo(s[a]);c\|\|(a="value",b!==void 0&&(b!==e[a]\|\|R==="progress"&&!b\|\|R==="option"&&b!==S[a])&&Pt(e,a,b,S[
2025-01-15 22:20:39 UTC	1369	IN	Data Raw: 20 65 7d 7d 2c 44 6f 3d 30 2c 4a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 53 74 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 6e 3d 74 68 69 73 2e 5f 5f 73 21 3d 6e 75 6c 6c 26 26 74 68 69 73 2e 5f 5f 73 21 3d 3d 74 68 69 73 2e 73 74 61 74 65 3f 74 68 69 73 2e 5f 5f 73 3a 74 68 69 73 2e 5f 5f 73 3d 74 74 28 7b 7d 2c 74 68 69 73 2e 73 74 61 74 65 29 2c 74 79 70 65 6f 66 20 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 65 3d 65 28 74 74 28 7b 7d 2c 6e 29 2c 74 68 69 73 2e 70 72 6f 70 73 29 29 2c 65 26 26 74 74 28 6e 2c 65 29 2c 65 21 3d 6e 75 6c 6c 26 26 74 68 69 73 2e 5f 5f 76 26 26 28 74 26 26 74 68 69 73 2e 5f 73 62 2e 70 75 73 68 28 74 29 2c 4f 72 28 74 68 69 73 29 29 7d 2c 4a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 Data Ascii: e}},Do=0,Je.prototype.setState=function(e,t){var n;n=this.__s!=null&&this.__s!==this.state?this.__s:this.__s=tt({},this.state),typeof e=="function"&&(e=e(tt({},n),this.props)),e&&tt(n,e),e!=null&&this.__v&&(t&&this._sb.push(t),Or(this))},Je.prototype.for

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49866	172.67.176.164	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:39 UTC	1035	OUT	GET /sig.js?rpclid=f2906c3b-d38e-11ef-93a7-aab196f2f20d&params=FD4w747ub408eaM-61M3wJ3qfK7ErWHy518FlRGHao3f2PgYtkrU2HX0FFqbUAk8GJ00NxtW6WbXQuI8X1R_UXehWD3jEYZp8ei2zrBAxLF_eC2lrTItLT6yz_yg3qTdqPt-cj1efdGND7MZs7ZsJRipunhgT1FJD1LmFwmpi2OQr3jTzQR9zLhN6QczGb3mADM0t22ZeO2Xg8vOdZ1mlHLLgV4JF8Ewi3eE2AqQEV5caCIffDgbT78Fp5xkdUBCPKbARqx_8dnDHiOjCvOSb8zgsh2ZWSOtPn8Jt3midXYsYSKsXfbpaFDmrS7in6m-SbDqI-7b6lnILvGIshUNqXmndP6THKiDOHkNtxfBm68RZWVMHDodxBN1AQoMoSIGhvlBVALm3I3Zh-sHGXHJLE1ypsFqtnfq3svddbFFasOB2kyZpEryAs4P90VcBWSq HTTP/1.1 Host: serve.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:40 UTC	1321	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:39 GMT Content-Type: text/javascript Content-Length: 9487 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Via: 1.1 google CF-Cache-Status: BYPASS Set-Cookie: uid=f3b61b5a-d38e-11ef-abcc-b61a6926ccce; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/; SameSite=none; Secure Set-Cookie: mid=f2906c3b-d38e-11ef-93a7-aab196f2f20d; Domain=.bidbrain.app; Max-Age=7200; Path=/ Accept-Ranges: bytes
2025-01-15 22:20:40 UTC	622	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 4c 32 64 52 69 72 77 58 66 34 6d 39 69 45 36 76 59 59 4f 30 76 48 38 4e 78 6b 77 38 51 6c 6f 69 61 44 54 69 46 78 72 39 5a 74 6f 4c 66 58 46 36 4d 67 34 59 53 63 56 37 31 56 30 7a 65 32 4c 65 43 4c 31 35 4a 4c 75 7a 32 39 38 39 75 36 72 67 35 66 25 32 42 55 6e 4c 37 4a 49 49 53 52 79 4b 48 41 34 73 30 72 5a 70 53 31 69 34 53 6e 46 5a 76 61 30 25 32 46 4d 30 50 39 74 74 32 51 50 50 4f 52 4f 61 79 41 43 35 59 70 73 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L2dRirwXf4m9iE6vYYO0vH8Nxkw8QloiaDTiFxr9ZtoLfXF6Mg4YScV71V0ze2LeCL15JLuz2989u6rg5f%2BUnL7JIISRyKHA4s0rZpS1i4SnFZva0%2FM0P9tt2QPPOROayAC5Yps%3D"}],"group":"cf-nel","max_age":6048
2025-01-15 22:20:40 UTC	795	IN	Data Raw: 76 61 72 20 70 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 66 3d 28 6d 2c 71 2c 6e 29 3d 3e 71 20 69 6e 20 6d 3f 70 28 6d 2c 71 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 6d 5b 71 5d 3d 6e 2c 68 3d 28 6d 2c 71 2c 6e 29 3d 3e 28 66 28 6d 2c 22 73 79 6d 62 6f 6c 22 21 3d 74 79 70 65 6f 66 20 71 3f 71 2b 22 22 3a 71 2c 6e 29 2c 6e 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 3f 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 28 22 66 6c 5f 22 2b 61 2c 62 29 3a 28 44 7c 7c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 71 2c 31 30 Data Ascii: var p=Object.defineProperty,f=(m,q,n)=>q in m?p(m,q,{enumerable:!0,configurable:!0,writable:!0,value:n}):m[q]=n,h=(m,q,n)=>(f(m,"symbol"!=typeof q?q+"":q,n),n);(function(){function m(a,b){window.sendEvent?window.sendEvent("fl_"+a,b):(D\|\|=setInterval(q,10
2025-01-15 22:20:40 UTC	1369	IN	Data Raw: 63 2c 30 29 2f 61 2e 6c 65 6e 67 74 68 7d 66 75 6e 63 74 69 6f 6e 20 46 28 61 29 7b 63 6f 6e 73 74 20 62 3d 76 28 61 29 3b 72 65 74 75 72 6e 20 4d 61 74 68 2e 73 71 72 74 28 61 2e 72 65 64 75 63 65 28 28 63 2c 64 29 3d 3e 63 2b 4d 61 74 68 2e 70 6f 77 28 64 2d 62 2c 32 29 2c 30 29 2f 61 2e 6c 65 6e 67 74 68 29 7d 66 75 6e 63 74 69 6f 6e 20 49 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 63 2c 64 29 3d 3e 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 64 28 45 72 72 6f 72 28 62 3f 3f 60 74 69 6d 65 6f 75 74 20 24 7b 61 7d 60 29 29 7d 2c 61 29 7d 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4a 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 61 63 65 28 5b 61 2c 49 28 62 2c 63 29 5d 29 7d 66 Data Ascii: c,0)/a.length}function F(a){const b=v(a);return Math.sqrt(a.reduce((c,d)=>c+Math.pow(d-b,2),0)/a.length)}function I(a,b){return new Promise((c,d)=>{setTimeout(()=>{d(Error(b??`timeout ${a}`))},a)})}async function J(a,b,c){return Promise.race([a,I(b,c)])}f
2025-01-15 22:20:40 UTC	1369	IN	Data Raw: 45 72 72 6f 72 28 22 65 72 72 6f 72 20 69 6e 69 74 69 61 6c 69 7a 69 6e 67 22 2c 0a 63 29 7d 22 63 6f 6d 70 6c 65 74 65 22 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 29 3d 3e 7b 74 72 79 7b 74 68 69 73 2e 72 65 61 64 79 28 29 7d 63 61 74 63 68 28 63 29 7b 74 68 69 73 2e 72 65 70 6f 72 74 45 72 72 6f 72 28 22 65 72 72 6f 72 20 69 6e 76 6f 6b 69 6e 67 20 72 65 61 64 79 22 2c 63 29 7d 7d 29 3a 74 68 69 73 2e 72 65 61 64 79 28 29 7d 69 6e 69 74 69 61 6c 69 7a 65 28 29 7b 7d 72 65 61 64 79 28 29 7b 7d 72 65 70 6f 72 74 28 61 2c 62 29 7b 6d 28 75 2e 53 69 67 6e 61 6c 2c 7b 6e 61 6d 65 3a 74 68 69 73 2e 6e 61 6d 65 2c 73 75 63 63 65 73 73 3a Data Ascii: Error("error initializing",c)}"complete"!==document.readyState?window.addEventListener("load",()=>{try{this.ready()}catch(c){this.reportError("error invoking ready",c)}}):this.ready()}initialize(){}ready(){}report(a,b){m(u.Signal,{name:this.name,success:
2025-01-15 22:20:40 UTC	1369	IN	Data Raw: 3b 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 67 2e 73 74 79 6c 65 2c 72 29 3b 67 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 74 68 69 73 2e 6f 6e 45 6c 65 6d 65 6e 74 43 6c 69 63 6b 29 3b 74 68 69 73 2e 69 6e 73 65 72 74 45 6c 65 6d 65 6e 74 28 67 2c 62 2c 6e 75 6c 6c 3d 3d 64 3f 76 6f 69 64 20 30 3a 64 2e 70 72 65 70 65 6e 64 29 7d 69 6e 73 65 72 74 45 6c 65 6d 65 6e 74 28 61 2c 62 2c 63 29 7b 63 3f 62 2e 70 72 65 70 65 6e 64 28 61 29 3a 62 2e 61 70 70 65 6e 64 28 61 29 7d 67 65 74 50 61 72 65 6e 74 45 6c 65 6d 65 6e 74 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 0a 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 61 29 3a 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 7d 6f 6e 45 6c 65 6d 65 6e 74 43 6c 69 63 6b Data Ascii: ;Object.assign(g.style,r);g.addEventListener("click",this.onElementClick);this.insertElement(g,b,null==d?void 0:d.prepend)}insertElement(a,b,c){c?b.prepend(a):b.append(a)}getParentElement(a){return a?document.querySelector(a):document.body}onElementClick
2025-01-15 22:20:40 UTC	1369	IN	Data Raw: 65 73 73 61 67 65 29 7d 7d 63 6c 61 73 73 20 52 20 65 78 74 65 6e 64 73 20 78 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 73 75 70 65 72 28 61 2c 62 29 3b 68 28 74 68 69 73 2c 22 65 76 65 6e 74 73 57 69 6e 64 6f 77 22 29 3b 68 28 74 68 69 73 2c 22 6d 69 6e 54 69 6d 65 44 65 6c 74 61 4d 73 22 29 3b 68 28 74 68 69 73 2c 22 6d 69 6e 44 69 73 74 61 6e 63 65 50 78 22 29 3b 68 28 74 68 69 73 2c 22 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 22 29 3b 68 28 74 68 69 73 2c 22 61 6e 67 6c 65 52 65 73 6f 6c 75 74 69 6f 6e 22 29 3b 68 28 74 68 69 73 2c 22 6d 6f 75 73 65 44 61 74 61 41 72 72 61 79 22 29 3b 74 68 69 73 2e 65 76 65 6e 74 73 57 69 6e 64 6f 77 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 65 76 65 6e 74 73 57 69 6e 64 6f 77 3f 3f 32 30 30 3b Data Ascii: essage)}}class R extends x{constructor(a,b){super(a,b);h(this,"eventsWindow");h(this,"minTimeDeltaMs");h(this,"minDistancePx");h(this,"velocityResolution");h(this,"angleResolution");h(this,"mouseDataArray");this.eventsWindow=this.config.eventsWindow??200;
2025-01-15 22:20:40 UTC	1369	IN	Data Raw: 7b 76 65 6c 6f 63 69 74 79 58 3a 41 2c 0a 76 65 6c 6f 63 69 74 79 59 3a 42 2c 61 6e 67 6c 65 3a 47 7d 3d 74 68 69 73 2e 63 61 6c 63 75 6c 61 74 65 28 61 5b 79 5d 2c 61 5b 79 2d 31 5d 29 3b 28 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 4d 61 74 68 2e 61 62 73 28 41 2d 65 29 3e 3d 74 68 69 73 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 29 26 26 28 62 2e 78 2e 63 6f 75 6e 74 55 6e 69 71 75 65 2b 2b 2c 65 3d 41 29 3b 28 76 6f 69 64 20 30 3d 3d 3d 6b 7c 7c 4d 61 74 68 2e 61 62 73 28 42 2d 6b 29 3e 3d 74 68 69 73 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 29 26 26 28 62 2e 79 2e 63 6f 75 6e 74 55 6e 69 71 75 65 2b 2b 2c 6b 3d 42 29 3b 63 2e 70 75 73 68 28 41 29 3b 64 2e 70 75 73 68 28 42 29 3b 76 61 72 20 74 3d 47 2c 54 3d 74 68 69 73 2e 61 Data Ascii: {velocityX:A,velocityY:B,angle:G}=this.calculate(a[y],a[y-1]);(void 0===e\|\|Math.abs(A-e)>=this.velocityResolution)&&(b.x.countUnique++,e=A);(void 0===k\|\|Math.abs(B-k)>=this.velocityResolution)&&(b.y.countUnique++,k=B);c.push(A);d.push(B);var t=G,T=this.a
2025-01-15 22:20:40 UTC	1369	IN	Data Raw: 69 73 2e 63 6f 6c 6c 65 63 74 53 69 6e 67 6c 65 28 72 2c 63 29 2c 6b 29 7d 63 61 74 63 68 28 74 29 7b 65 5b 67 5d 3d 60 24 7b 72 7d 3a 20 24 7b 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 6d 65 73 73 61 67 65 7d 60 7d 7d 29 29 3b 74 68 69 73 2e 72 65 70 6f 72 74 28 64 2c 65 29 7d 7d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 32 33 34 5e 45 28 22 32 31 34 22 2c 32 33 34 29 3b 63 6f 6e 73 74 20 62 3d 30 21 3d 3d 61 3b 6c 65 74 20 63 3d 22 52 78 35 66 55 31 42 51 57 56 39 49 55 30 35 50 48 67 5a 48 48 6c 46 52 48 67 5a 48 48 6c 31 66 53 46 56 4b 57 52 34 47 53 45 35 4a 57 52 41 65 55 56 31 45 62 6c 6c 4d 55 30 35 49 48 67 59 4a 45 42 35 49 52 55 78 5a 48 67 59 65 55 56 4e 4a 54 31 6b 65 51 52 41 65 55 56 4e 4a 54 31 6b 65 42 6b 63 65 58 56 Data Ascii: is.collectSingle(r,c),k)}catch(t){e[g]=`${r}: ${null==t?void 0:t.message}`}}));this.report(d,e)}}(function(){var a=234^E("214",234);const b=0!==a;let c="Rx5fU1BQWV9IU05PHgZHHlFRHgZHHl1fSFVKWR4GSE5JWRAeUV1EbllMU05IHgYJEB5IRUxZHgYeUVNJT1keQRAeUVNJT1keBkceXV
2025-01-15 22:20:40 UTC	478	IN	Data Raw: 53 6c 56 62 58 55 68 54 54 68 4a 51 58 56 4a 62 53 56 31 62 57 52 34 51 48 6c 42 64 55 6c 74 50 48 67 59 65 55 6c 31 4b 56 56 74 64 53 46 4e 4f 45 6c 42 64 55 6c 74 4a 58 56 74 5a 54 78 34 51 48 6b 74 59 48 67 59 65 55 6c 31 4b 56 56 74 64 53 46 4e 4f 45 6b 74 5a 58 6c 68 4f 56 55 70 5a 54 68 35 42 51 52 41 65 53 45 56 4d 57 52 34 47 48 6b 39 49 58 55 68 56 58 78 35 42 45 42 35 4c 57 42 34 47 52 78 35 64 58 30 68 56 53 6c 6b 65 42 6b 68 4f 53 56 6b 51 48 6c 6c 4b 57 56 4a 49 62 46 31 4f 58 56 46 50 48 67 5a 48 48 6c 42 54 58 56 67 65 42 6b 63 65 53 31 67 65 42 68 35 53 58 55 70 56 57 31 31 49 55 30 34 53 53 31 6c 65 57 45 35 56 53 6c 6c 4f 48 45 42 41 48 45 6c 53 57 46 6c 61 56 56 4a 5a 57 42 35 42 51 52 41 65 53 45 56 4d 57 52 34 47 48 6b 39 49 58 55 68 Data Ascii: SlVbXUhTThJQXVJbSV1bWR4QHlBdUltPHgYeUl1KVVtdSFNOElBdUltJXVtZTx4QHktYHgYeUl1KVVtdSFNOEktZXlhOVUpZTh5BQRAeSEVMWR4GHk9IXUhVXx5BEB5LWB4GRx5dX0hVSlkeBkhOSVkQHllKWVJIbF1OXVFPHgZHHlBTXVgeBkceS1geBh5SXUpVW11IU04SS1leWE5VSllOHEBAHElSWFlaVVJZWB5BQRAeSEVMWR4GHk9IXUh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49867	172.217.16.196	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:40 UTC	798	OUT	GET /pagead/drt/ui HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:40 UTC	426	IN	HTTP/1.1 302 Found Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Location: https://googleads.g.doubleclick.net/pagead/drt/si?st=NO_DATA Cache-Control: private Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 15 Jan 2025 22:20:40 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49869	142.250.185.98	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:40 UTC	1347	OUT	GET /pagead/adview?ai=CcowAtTSIZ5nPM7qSjuwPsJeGsAe9qs_Ndemi3NbEEsCNtwEQASAAYMmWy4vEpPwPggEXY2EtcHViLTQ4MjEwMDY4NTI5MTQzNTnIAQmoAwHIAwKqBIICT9DUYKjKI4pQraEcfrh6m7h9bplWrkbPj_91eeUOpJhdu9KpO0_XYY-cFu19QnZyNheKNP9npaVhnppps6EXhc3BzLo3anLFZHbeg9orLOvmqDeb92XzJ9zmloLoNmP_QdruBQ3lrp4hdP1u3o5ziALuCeqfDUCAk3nMPyRGcGzELC11L3Li97soOg-L0FVd1MKKdwSb3JXcm9Jc4SzAnkh4e7olKZznc1bs88r2I5yWFLGbTgw6FY7xoSlUEd1JBSESOIhUn4RAQ2j7Ze9B0WVkDsyfWXvNgTvg5yey5YKtS_bWmlwrK3xttOT7-OwGuzjn-WXBxYdZQ4iA7PJcsyxzgAaarO2X-f_z_OUBoAYhqAemvhuoB5bYG6gHqpuxAqgH_56xAqgH35-xAqgHrb6xAtgHANIIJAiAYRABMgKKAjoLgECAwICAgKCogAJIvf3BOljj466y4fiKA4AKAfoLAggBgAwB0BUBgBcBshccChgSFHB1Yi00ODIxMDA2ODUyOTE0MzU5GAAYDA&sigh=1sAzvU4xCKM&uach_m=%5BUACH%5D&cid=CAQSTwCa7L7dQq7Ua8LJPgiEu7R4dxu7VSCDaaBZxHkFM4asi_fnDbC-VtJCptQoPfsZc_9JBcL2RZCBBo0g6gLsCb51Y4n2HKxUL6PsZw0IKKMYAQ HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUlPbqVqjUCM5MRgGSpz8z-07qXlfZwNkJwQUlbQxq3vbOeObDwuexVBZjgodxY
2025-01-15 22:20:40 UTC	628	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 15 Jan 2025 22:20:40 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49871	142.250.185.98	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:40 UTC	1347	OUT	GET /pagead/adview?ai=Cdz3WtTSIZ6qiNLaTjuwP-pCXuQK9qs_Ndemi3NbEEsCNtwEQASAAYMmWy4vEpPwPggEXY2EtcHViLTQ4MjEwMDY4NTI5MTQzNTnIAQmoAwHIAwKqBIICT9Cmv1-2FEzbw3G2tBIb1haRxDRSLz7yOGGQqurLUK5Np7iNGFjAafY9HpC_nPbw3M7sTsD6v3dvLEFcHabJAb-buCaAMTRI4sunpsadyoaGR6fbysEVdjp7jeFr4gJpxdXuV35NN6NhJ67MEb7qs9dPLNjiiILm0M97azcJR5ooAuQEZrU62Tag7v5OrPIQI7foZsuoKigmXsT1AVD4Gfr9u-OtT-yKfjMps-zpcMLnS1F7UWICa_rzqnICn9zRcNUe9S5dC9O8PT8ibVCcU1mUVl1VBC1VHgUhQl7T_cEJaUKBjLnwMeA3OKC41A45IsL2EbR2qiohd5sFWv8sReb_gAaarO2X-f_z_OUBoAYhqAemvhuoB5bYG6gHqpuxAqgH_56xAqgH35-xAqgHrb6xAtgHANIIJAiAYRABMgKKAjoLgECAwICAgKCogAJIvf3BOliOqq-y4fiKA4AKAfoLAggBgAwB0BUBgBcBshccChgSFHB1Yi00ODIxMDA2ODUyOTE0MzU5GAAYDA&sigh=lSXLiM_1JWU&uach_m=%5BUACH%5D&cid=CAQSTwCa7L7dauW-cuQWFi659Ps5JSAeXiroZyXANVgbnX4d8B4rLsxr6OWlefLHzaaO0oxkwYBW3LA5y6QsF-eog1jrg8xThFmwIVNMUpPZxvcYAQ HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnp6e8q3Hn02qx9nr5ulHgfqaOhOFhnsIORFFJRHSgAHbZOc4nFtnhzzAgnkCg
2025-01-15 22:20:40 UTC	628	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 15 Jan 2025 22:20:40 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49874	142.250.185.162	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:40 UTC	903	OUT	GET /pagead/drt/si?st=NO_DATA HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnp6e8q3Hn02qx9nr5ulHgfqaOhOFhnsIORFFJRHSgAHbZOc4nFtnhzzAgnkCg
2025-01-15 22:20:41 UTC	664	IN	HTTP/1.1 200 OK Cross-Origin-Resource-Policy: cross-origin P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 15 Jan 2025 22:20:41 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: DSID=NO_DATA; expires=Wed, 15-Jan-2025 23:20:41 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Wed, 15 Jan 2025 22:20:41 GMT Cache-Control: private Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49887	142.250.185.162	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:41 UTC	3016	OUT	GET /btr/view?ai=CFlzftTSIZ7fqNvicjuwP6qqliQyW75bOfLntip-hE-iin8aRDhABIOPuhSVgyZbLi8Sk_A-gAZPCv5A-yAECqAMByAPJBKoEjQJP0CL5SLOELaIQSqv0YIbDE8pOSbgr22jlHHBjjvufLioiWQD0qy5QZ63BY74A0vox_NruVSkZofwTOaw4ZX4--HDB5YWFIJft_oiYIPFrFuRGbt_LpG9JRyvxC5uwc2yi2Uyz3KdpR1li7oUfANKZ_S77aEEq26oHgYDYQzaz2ZTJP64pzZOxSktqkFuOahg1x3py7XiJm_yNyrAkQDR_ddhv30tgcROq6HoPe_QtpIdqxYlDxhWX7sDCyRWuNpMsGj4_OQ1X9ByemvAeYXnC17BOnu4_ao4Yu6J4z3M_UgR9Cx34rXaJtRmjRKbRKBDtLBH6isuKog6ayRvEJZo1YXmItnJIWEB1POvJR8AE9IPAwv8EiAWpyvnHUJIFBAgEGAGSBQQIBRgEoAYCgAeT-o_wGKgH1ckbqAfZtrECqAemvhuoB47OG6gHk9gbqAfw4BuoB-6WsQKoB_6esQKoB6--sQKoB_fCsQLYBwHyBwQQz9dm0ggmCIBhEAEYHzICigI6C4BAgMCAgICgqIACSL39wTpYjv-xsuH4igOaCUpodHRwczovL3BjYXBwc3RvcmUuY29tLz9hcD1hZHdwJmFzPWdfZF9hbGxfbmV3X3VzX2NhX2F1X2diX2luJmdhZF9zb3VyY2U9NYAKAcgLAdoMEQoLEJC4hu_4vLX3zQESAgED2BMN0BUBmBYBgBcBshceChoIABIUcHViLTQ4MjEwMDY4NTI5MTQzNTkYABgBuhcCOAGyGAkSArBTGAIiAQDQGAHoGAE&sigh=IhB1dc_aNk8&uach_m=%5BUACH%5D&ase=2&cid=CAQSTgCa7L7dHFLM9IPFcD6ghiOIXDaBWC3kpV_PFb9R9pCIrNFE7BSHF3RZLGlcutaAcbdRcj-GmWm9t [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Attribution-Reporting-Eligible: event-source;navigation-source, trigger Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-4821006852914359&output=html&h=90&slotname=4034399826&adk=3689936537&adf=2221415025&pi=t.ma~as.4034399826&w=847&abgtt=9&fwrn=4&fwrnh=100&lmt=1736870130&rafmt=2&format=847x90&url=https%3A%2F%2Fnuance-pdf-professional2.software.informer.com%2F7.2%2F&fwr=0&fwrattr=true&rpe=1&resp_fmts=2&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1736979634920&bpp=1&bdt=1621&idt=1620&shv=r20250113&mjsv=m202501090101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=1200x90%2C336x280&correlator=4566372036047&frm=20&pv=1&u_tz=-300&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=15&ady=860&biw=1263&bih=907&scr_x=0&scr_y=0&eid=42533202%2C31089683%2C95344791%2C95350245%2C95340252%2C95340254&oid=2&pvsid=3788874330487745&tmod=2006592406&uas=0&nvt=1&fc=896&br [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnp6e8q3Hn02qx9nr5ulHgfqaOhOFhnsIORFFJRHSgAHbZOc4nFtnhzzAgnkCg
2025-01-15 22:20:41 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 15 Jan 2025 22:20:41 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49898	104.21.80.92	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:41 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 6498 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce
2025-01-15 22:20:41 UTC	6498	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 66 32 38 64 38 35 33 34 2d 64 33 38 65 2d 31 31 65 66 2d 39 33 61 37 2d 61 61 62 31 39 36 66 32 66 32 30 64 22 2c 22 64 22 3a 22 6e 75 61 6e 63 65 2d 70 64 66 2d 70 72 6f 66 65 73 73 69 6f 6e 61 6c 32 2e 73 6f 66 74 77 61 72 65 2e 69 6e 66 6f 72 6d 65 72 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 4e 62 34 4a 50 52 52 6e 59 56 69 38 6b 62 6a 30 63 31 46 49 5f 46 4e 4b 5a 35 39 78 6e 44 4f 6c 69 56 78 63 49 4d 38 35 6e 32 71 73 35 79 38 67 76 31 75 56 67 33 52 62 6a 5a 57 35 5f 46 72 56 6c 59 47 57 50 7a 44 39 4e 49 73 4c 57 4e 45 4f 48 7a 75 34 59 4f 6d 44 38 4f 75 69 53 38 55 6b 50 Data Ascii: {"entries":[{"sid":"f28d8534-d38e-11ef-93a7-aab196f2f20d","d":"nuance-pdf-professional2.software.informer.com","cr":"ext_download_prot_smrtsp","gid":"","im":"Nb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkP
2025-01-15 22:20:41 UTC	1328	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 22:20:41 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=f3b61b5a-d38e-11ef-abcc-b61a6926ccce; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Via: 1.1 google cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cw12FWO%2FRv19PcySuWpCZLlnNW1h%2Febckc5zlo%2Bt6dR5ltqPqEkOqUDfTevuhCWL%2F0i7TIw%2FiBOOv136p%2BwLNrud%2Fsu%2FRITLKl0lcJ3JLsW1tdPG6K6TM9PRiXvS6CILXg%3D%3D"}],"group":"cf-nel","max_age":604800}
2025-01-15 22:20:41 UTC	363	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 32 39 34 31 32 37 62 62 39 62 35 37 64 63 2d 49 41 44 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 38 35 33 38 26 6d 69 6e 5f 72 74 74 3d 38 35 31 37 26 72 74 74 5f 76 61 72 3d 33 32 30 39 26 73 65 6e 74 3d 36 26 72 65 63 76 3d 31 31 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 Data Ascii: NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 90294127bb9b57dc-IADalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=8538&min_rtt=8517&rtt_var=3209&sent=6&recv=11&lost=0&retrans=0&sent

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49899	104.21.80.92	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:41 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 6552 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce
2025-01-15 22:20:41 UTC	6552	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 66 32 39 30 36 63 33 62 2d 64 33 38 65 2d 31 31 65 66 2d 39 33 61 37 2d 61 61 62 31 39 36 66 32 66 32 30 64 22 2c 22 64 22 3a 22 6e 75 61 6e 63 65 2d 70 64 66 2d 70 72 6f 66 65 73 73 69 6f 6e 61 6c 32 2e 73 6f 66 74 77 61 72 65 2e 69 6e 66 6f 72 6d 65 72 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 46 44 34 77 37 34 37 75 62 34 30 38 65 61 4d 2d 36 31 4d 33 77 4a 33 71 66 4b 37 45 72 57 48 79 35 31 38 46 6c 52 47 48 61 6f 33 66 32 50 67 59 74 6b 72 55 32 48 58 30 46 46 71 62 55 41 6b 38 47 4a 30 30 4e 78 74 57 36 57 62 58 51 75 49 38 58 31 52 5f 55 58 65 68 57 44 33 6a 45 59 5a 70 38 Data Ascii: {"entries":[{"sid":"f2906c3b-d38e-11ef-93a7-aab196f2f20d","d":"nuance-pdf-professional2.software.informer.com","cr":"ext_download_prot_smrtsp","gid":"","im":"FD4w747ub408eaM-61M3wJ3qfK7ErWHy518FlRGHao3f2PgYtkrU2HX0FFqbUAk8GJ00NxtW6WbXQuI8X1R_UXehWD3jEYZp8
2025-01-15 22:20:41 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 22:20:41 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=f3b61b5a-d38e-11ef-abcc-b61a6926ccce; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=f2906c3b-d38e-11ef-93a7-aab196f2f20d; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=f2906c3b-d38e-11ef-93a7-aab196f2f20d; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 22:20:41 UTC	637	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 50 69 58 77 25 32 46 49 6b 51 36 36 6e 65 56 4f 76 77 77 4a 76 33 75 25 32 46 6e 49 66 25 32 46 74 50 76 63 68 58 31 71 49 71 76 30 59 25 32 42 31 38 51 54 56 69 4c 50 70 50 42 75 65 68 35 57 47 4f 50 32 25 32 42 4e 6c 70 78 6f 7a 5a 74 68 6c 55 69 71 32 57 6c 25 32 42 79 4f 25 32 46 74 36 75 32 4d 64 32 4d 38 49 35 4c 66 75 4c 35 42 78 25 32 42 73 61 25 32 46 65 54 71 66 25 32 42 38 6f 56 51 56 6c 54 78 53 47 5a 51 74 49 36 69 46 43 63 71 74 67 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PiXw%2FIkQ66neVOvwwJv3u%2FnIf%2FtPvchX1qIqv0Y%2B18QTViLPpPBueh5WGOP2%2BNlpxozZthlUiq2Wl%2ByO%2Ft6u2Md2M8I5LfuL5Bx%2Bsa%2FeTqf%2B8oVQVlTxSGZQtI6iFCcqtg%3D%3D"}],"group":"cf-nel",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49900	104.21.80.92	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:41 UTC	727	OUT	GET /ext/download-icon_1697445891.svg+xml HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce
2025-01-15 22:20:41 UTC	1163	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:41 GMT Content-Type: image/svg+xml Content-Length: 469 Connection: close X-GUploader-UploadID: AFIdbgQHtOccfJpl0i_QG2R_hJb0ygQsmnZpmy5URqmXbv5VAhBaOmoUty73J9TL3j9cquxh x-goog-generation: 1697445890645515 x-goog-metageneration: 3 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 469 x-goog-hash: crc32c=+dJKLA== x-goog-hash: md5=aXSu6a+EFDtKxcc58XB8lQ== x-goog-storage-class: STANDARD Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type Expires: Wed, 15 Jan 2025 23:07:03 GMT Cache-Control: public, max-age=3600 Age: 818 Last-Modified: Mon, 16 Oct 2023 08:44:50 GMT ETag: "6974aee9af84143b4ac5c739f1707c95" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E5GS9McgD%2BkzeLj80jfX1WPaF2UwECZnUwMmu6WXkIWXVhWR80II8Z1RfySsklGw9yY8OtcO55ubBwvqBqtlzfy5BlU66nHYskSxUVivJs9bZKMskNT3b1GkxK9L5UWmGrBl"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9029412818e7c999-IAD alt-svc: h3=":443"; ma=86400
2025-01-15 22:20:41 UTC	215	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 37 32 30 38 26 6d 69 6e 5f 72 74 74 3d 37 32 30 32 26 72 74 74 5f 76 61 72 3d 32 37 31 33 26 73 65 6e 74 3d 34 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 33 33 39 26 72 65 63 76 5f 62 79 74 65 73 3d 31 33 30 35 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 34 30 32 35 33 36 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 32 37 63 30 62 37 62 36 34 30 62 32 32 34 66 62 26 74 73 3d 31 35 37 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=7208&min_rtt=7202&rtt_var=2713&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2339&recv_bytes=1305&delivery_rate=402536&cwnd=32&unsent_bytes=0&cid=27c0b7b640b224fb&ts=157&x=0"
2025-01-15 22:20:41 UTC	469	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 39 22 20 68 65 69 67 68 74 3d 22 32 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 20 32 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 20 31 33 2e 32 36 33 32 4c 31 20 31 36 2e 39 36 39 31 43 31 20 31 37 2e 35 33 30 37 20 31 2e 32 32 31 32 35 20 31 38 2e 30 36 39 33 20 31 2e 36 31 35 30 38 20 31 38 2e 34 36 36 35 43 32 2e 30 30 38 39 20 31 38 2e 38 36 33 36 20 32 2e 35 34 33 30 35 20 31 39 2e 30 38 36 37 20 33 2e 31 20 31 39 2e 30 38 36 37 48 31 35 2e 37 43 31 36 2e 32 35 37 20 31 39 2e 30 38 36 37 20 31 36 2e 37 39 31 31 20 31 38 2e 38 36 33 36 20 31 37 2e 31 38 34 39 20 Data Ascii: <svg width="19" height="21" viewBox="0 0 19 21" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M1 13.2632L1 16.9691C1 17.5307 1.22125 18.0693 1.61508 18.4665C2.0089 18.8636 2.54305 19.0867 3.1 19.0867H15.7C16.257 19.0867 16.7911 18.8636 17.1849

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49902	104.21.80.92	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:41 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 6604 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce
2025-01-15 22:20:41 UTC	6604	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 66 32 38 64 38 35 33 34 2d 64 33 38 65 2d 31 31 65 66 2d 39 33 61 37 2d 61 61 62 31 39 36 66 32 66 32 30 64 22 2c 22 64 22 3a 22 6e 75 61 6e 63 65 2d 70 64 66 2d 70 72 6f 66 65 73 73 69 6f 6e 61 6c 32 2e 73 6f 66 74 77 61 72 65 2e 69 6e 66 6f 72 6d 65 72 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 4e 62 34 4a 50 52 52 6e 59 56 69 38 6b 62 6a 30 63 31 46 49 5f 46 4e 4b 5a 35 39 78 6e 44 4f 6c 69 56 78 63 49 4d 38 35 6e 32 71 73 35 79 38 67 76 31 75 56 67 33 52 62 6a 5a 57 35 5f 46 72 56 6c 59 47 57 50 7a 44 39 4e 49 73 4c 57 4e 45 4f 48 7a 75 34 59 4f 6d 44 38 4f 75 69 53 38 55 6b 50 Data Ascii: {"entries":[{"sid":"f28d8534-d38e-11ef-93a7-aab196f2f20d","d":"nuance-pdf-professional2.software.informer.com","cr":"ext_download_prot_smrtsp","gid":"","im":"Nb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkP
2025-01-15 22:20:41 UTC	1318	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 22:20:41 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=f3b61b5a-d38e-11ef-abcc-b61a6926ccce; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Via: 1.1 google cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e62DK079UsZ3hominuU8FgMUDjlEZZcQ5jxYnBj3mxUIa8rTxyTq2cMn05W%2F9uX5MqCqCS5oAiuzdBEwmljoamXCnqDRnHIUw2zUYMRihJXG1J%2B4x%2FnKoCfLqROvTpqG5Q%3D%3D"}],"group":"cf-nel","max_age":604800}
2025-01-15 22:20:41 UTC	365	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 32 39 34 31 32 37 66 64 64 61 65 62 63 30 2d 59 59 5a 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 34 31 37 33 26 6d 69 6e 5f 72 74 74 3d 31 34 31 35 33 26 72 74 74 5f 76 61 72 3d 35 33 32 31 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 31 32 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 Data Ascii: NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 90294127fddaebc0-YYZalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=14173&min_rtt=14153&rtt_var=5321&sent=5&recv=12&lost=0&retrans=0&se

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49901	104.21.80.92	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:41 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 6658 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce
2025-01-15 22:20:41 UTC	6658	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 66 32 39 30 36 63 33 62 2d 64 33 38 65 2d 31 31 65 66 2d 39 33 61 37 2d 61 61 62 31 39 36 66 32 66 32 30 64 22 2c 22 64 22 3a 22 6e 75 61 6e 63 65 2d 70 64 66 2d 70 72 6f 66 65 73 73 69 6f 6e 61 6c 32 2e 73 6f 66 74 77 61 72 65 2e 69 6e 66 6f 72 6d 65 72 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 46 44 34 77 37 34 37 75 62 34 30 38 65 61 4d 2d 36 31 4d 33 77 4a 33 71 66 4b 37 45 72 57 48 79 35 31 38 46 6c 52 47 48 61 6f 33 66 32 50 67 59 74 6b 72 55 32 48 58 30 46 46 71 62 55 41 6b 38 47 4a 30 30 4e 78 74 57 36 57 62 58 51 75 49 38 58 31 52 5f 55 58 65 68 57 44 33 6a 45 59 5a 70 38 Data Ascii: {"entries":[{"sid":"f2906c3b-d38e-11ef-93a7-aab196f2f20d","d":"nuance-pdf-professional2.software.informer.com","cr":"ext_download_prot_smrtsp","gid":"","im":"FD4w747ub408eaM-61M3wJ3qfK7ErWHy518FlRGHao3f2PgYtkrU2HX0FFqbUAk8GJ00NxtW6WbXQuI8X1R_UXehWD3jEYZp8
2025-01-15 22:20:41 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 22:20:41 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=f3b61b5a-d38e-11ef-abcc-b61a6926ccce; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=f2906c3b-d38e-11ef-93a7-aab196f2f20d; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=f2906c3b-d38e-11ef-93a7-aab196f2f20d; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 22:20:41 UTC	624	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 32 52 32 75 75 42 75 59 4c 52 64 6b 42 42 43 65 67 53 30 42 49 64 55 49 55 47 74 73 69 47 35 54 59 58 5a 48 35 49 4a 25 32 42 4c 68 6c 51 61 46 35 48 4c 58 71 56 46 37 52 65 6a 58 74 30 74 61 76 56 36 39 5a 42 51 4a 39 4f 39 30 52 72 34 76 69 25 32 42 73 62 61 4a 68 68 56 4a 49 6c 37 41 54 37 32 78 62 4d 75 35 65 69 6b 68 52 6e 58 34 39 4a 6d 33 37 79 30 55 77 25 32 42 4e 76 6f 52 4b 6b 4c 79 58 4c 6d 67 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2R2uuBuYLRdkBBCegS0BIdUIUGtsiG5TYXZH5IJ%2BLhlQaF5HLXqVF7RejXt0tavV69ZBQJ9O90Rr4vi%2BsbaJhhVJIl7AT72xbMu5eikhRnX49Jm37y0Uw%2BNvoRKkLyXLmg%3D%3D"}],"group":"cf-nel","max_age":6048

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49917	104.21.80.92	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:41 UTC	725	OUT	GET /ext/Footer-Logo_1720602781.svg+xml HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce
2025-01-15 22:20:41 UTC	1188	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:41 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close X-GUploader-UploadID: AFIdbgSlruQn_iIHPXzchLGLVq7ObxYNIT9a1Exgw9jzZNK-eqE6xedezMsoyBoj3GokokoQ19TPHHU x-goog-generation: 1720602780982635 x-goog-metageneration: 3 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 7186 x-goog-hash: crc32c=Kc0qjA== x-goog-hash: md5=jGCl//RKIQKXgmNkQtJJ1A== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type Expires: Wed, 15 Jan 2025 23:20:15 GMT Cache-Control: public, max-age=3600 Last-Modified: Wed, 10 Jul 2024 09:13:01 GMT ETag: W/"8c60a5fff44a21029782636442d249d4" Vary: Accept-Encoding Age: 26 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TNtZr5eBLWhnKZ7qrNgG20XVLFqtNM88ZV2G8fe0E%2BEGuTZ%2Ff7oyquGvRlD%2B23%2BaYkJ7F16WCUPRLOMco3j4vFMx4B6hCaS5mqWhyU1DzFS9jeB%2BiQ0y4JzdfGA1Ig3Q521F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 90294128ccb7440d-EWR alt-svc: h3=":443"; ma=86400
2025-01-15 22:20:41 UTC	216	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 36 38 33 26 6d 69 6e 5f 72 74 74 3d 31 36 37 34 26 72 74 74 5f 76 61 72 3d 36 34 37 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 33 34 30 26 72 65 63 76 5f 62 79 74 65 73 3d 31 33 30 33 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 36 36 36 36 36 36 26 63 77 6e 64 3d 31 37 38 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 37 64 66 30 65 63 38 36 30 62 33 30 33 62 65 62 26 74 73 3d 31 35 37 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=1683&min_rtt=1674&rtt_var=647&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2340&recv_bytes=1303&delivery_rate=1666666&cwnd=178&unsent_bytes=0&cid=7df0ec860b303beb&ts=157&x=0"
2025-01-15 22:20:41 UTC	1334	IN	Data Raw: 31 63 31 32 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 39 31 22 20 68 65 69 67 68 74 3d 22 35 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 31 20 35 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 29 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 33 33 2e 35 38 37 39 20 30 43 33 33 2e 35 38 37 39 20 30 20 33 30 2e 38 39 33 35 20 39 2e 32 30 39 31 36 20 32 36 2e 30 35 39 32 20 31 32 2e 37 38 31 37 43 32 34 2e 30 37 38 20 31 35 2e 30 38 34 20 31 33 2e 32 32 30 38 20 32 33 2e 35 37 38 36 20 39 2e 38 31 33 30 32 20 32 31 2e 30 33 38 32 43 35 2e 35 33 33 35 34 20 31 37 2e 36 32 34 34 Data Ascii: 1c12<svg width="191" height="52" viewBox="0 0 191 52" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0)"><path d="M33.5879 0C33.5879 0 30.8935 9.20916 26.0592 12.7817C24.078 15.084 13.2208 23.5786 9.81302 21.0382C5.53354 17.6244
2025-01-15 22:20:41 UTC	1369	IN	Data Raw: 31 34 2e 31 33 31 33 20 32 31 2e 30 36 38 20 31 34 2e 38 34 35 38 43 31 38 2e 33 37 33 35 20 31 35 2e 33 32 32 31 20 31 37 2e 36 36 30 32 20 31 31 2e 35 31 31 35 20 31 37 2e 34 32 32 35 20 31 31 2e 35 31 31 35 43 31 37 2e 34 32 32 35 20 31 31 2e 35 31 31 35 20 31 37 2e 31 30 35 35 20 31 36 2e 35 31 33 20 32 30 2e 39 30 39 35 20 31 36 2e 35 31 33 43 32 37 2e 32 34 39 35 20 31 36 2e 35 39 32 34 20 33 33 2e 35 38 39 34 20 30 20 33 33 2e 35 38 39 34 20 30 5a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 70 61 69 6e 74 33 5f 72 61 64 69 61 6c 29 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 36 2e 33 39 30 36 20 34 30 2e 36 34 37 36 43 31 38 2e 35 33 30 34 20 33 38 2e 35 30 34 31 20 32 31 2e 34 36 32 36 20 33 37 2e 37 38 39 36 20 32 33 2e 30 34 37 36 20 33 37 2e 39 34 Data Ascii: 14.1313 21.068 14.8458C18.3735 15.3221 17.6602 11.5115 17.4225 11.5115C17.4225 11.5115 17.1055 16.513 20.9095 16.513C27.2495 16.5924 33.5894 0 33.5894 0Z" fill="url(#paint3_radial)"/><path d="M16.3906 40.6476C18.5304 38.5041 21.4626 37.7896 23.0476 37.94
2025-01-15 22:20:41 UTC	1369	IN	Data Raw: 30 38 2e 31 36 33 20 33 32 2e 34 32 38 34 20 31 30 34 2e 35 31 37 20 33 35 2e 39 32 31 36 20 39 39 2e 36 38 32 38 20 33 35 2e 39 32 31 36 43 39 34 2e 38 34 38 36 20 33 35 2e 39 32 31 36 20 39 31 2e 32 30 33 31 20 33 32 2e 34 32 38 34 20 39 31 2e 32 30 33 31 20 32 37 2e 36 36 35 31 43 39 31 2e 32 30 33 31 20 32 32 2e 39 38 31 31 20 39 34 2e 38 34 38 36 20 31 39 2e 35 36 37 34 20 39 39 2e 36 38 32 38 20 31 39 2e 35 36 37 34 43 31 30 34 2e 35 31 37 20 31 39 2e 35 36 37 34 20 31 30 38 2e 31 36 33 20 32 32 2e 39 38 31 31 20 31 30 38 2e 31 36 33 20 32 37 2e 36 36 35 31 5a 4d 31 30 33 2e 37 32 35 20 32 37 2e 36 36 35 31 43 31 30 33 2e 37 32 35 20 32 35 2e 33 36 32 38 20 31 30 32 2e 30 36 20 32 33 2e 35 33 36 38 20 39 39 2e 36 38 32 38 20 32 33 2e 35 33 36 38 43 Data Ascii: 08.163 32.4284 104.517 35.9216 99.6828 35.9216C94.8486 35.9216 91.2031 32.4284 91.2031 27.6651C91.2031 22.9811 94.8486 19.5674 99.6828 19.5674C104.517 19.5674 108.163 22.9811 108.163 27.6651ZM103.725 27.6651C103.725 25.3628 102.06 23.5368 99.6828 23.5368C
2025-01-15 22:20:41 UTC	1369	IN	Data Raw: 20 31 34 31 2e 32 38 39 20 32 37 2e 37 34 35 32 43 31 34 31 2e 32 38 39 20 32 33 2e 30 36 31 32 20 31 34 34 2e 37 37 36 20 31 39 2e 36 34 37 35 20 31 34 39 2e 36 31 20 31 39 2e 36 34 37 35 43 31 35 31 2e 31 39 35 20 31 39 2e 36 34 37 35 20 31 35 32 2e 34 36 33 20 32 30 2e 30 34 34 34 20 31 35 33 2e 35 37 33 20 32 30 2e 38 33 38 33 56 31 39 2e 39 36 35 48 31 35 37 2e 36 39 34 56 32 36 2e 30 37 38 48 31 35 33 2e 34 31 34 43 31 35 33 2e 30 31 38 20 32 34 2e 35 36 39 36 20 31 35 31 2e 36 37 31 20 32 33 2e 36 31 36 39 20 31 35 30 2e 30 30 37 20 32 33 2e 36 31 36 39 43 31 34 37 2e 36 32 39 20 32 33 2e 36 31 36 39 20 31 34 35 2e 38 30 36 20 32 35 2e 34 34 32 39 20 31 34 35 2e 38 30 36 20 32 37 2e 37 34 35 32 43 31 34 35 2e 38 30 36 20 33 30 2e 30 34 37 35 20 31 Data Ascii: 141.289 27.7452C141.289 23.0612 144.776 19.6475 149.61 19.6475C151.195 19.6475 152.463 20.0444 153.573 20.8383V19.965H157.694V26.078H153.414C153.018 24.5696 151.671 23.6169 150.007 23.6169C147.629 23.6169 145.806 25.4429 145.806 27.7452C145.806 30.0475 1
2025-01-15 22:20:41 UTC	1369	IN	Data Raw: 74 3d 22 30 2e 31 39 30 36 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 31 37 35 34 32 22 2f 3e 0a 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 46 43 35 39 31 22 2f 3e 0a 3c 2f 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 3e 0a 3c 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 69 64 3d 22 70 61 69 6e 74 31 5f 72 61 64 69 61 6c 22 20 63 78 3d 22 30 22 20 63 79 3d 22 30 22 20 72 3d 22 31 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 32 39 2e 33 33 35 37 20 34 31 2e 34 35 31 33 29 20 72 6f 74 61 74 65 28 2d 32 32 2e 32 30 31 36 29 20 73 63 61 6c 65 28 34 36 2e 33 31 31 32 20 Data Ascii: t="0.1906" stop-color="#F17542"/><stop offset="1" stop-color="#FFC591"/></radialGradient><radialGradient id="paint1_radial" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(29.3357 41.4513) rotate(-22.2016) scale(46.3112
2025-01-15 22:20:41 UTC	384	IN	Data Raw: 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 32 37 2e 39 37 30 34 20 35 32 2e 37 39 34 34 29 20 72 6f 74 61 74 65 28 2d 38 30 2e 34 33 38 34 29 20 73 63 61 6c 65 28 31 35 2e 34 37 34 34 20 34 31 2e 30 33 30 33 29 22 3e 0a 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 46 43 35 39 31 22 2f 3e 0a 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 30 2e 38 30 39 34 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 31 37 35 34 32 22 2f 3e 0a 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 45 44 36 32 32 46 22 2f 3e 0a 3c 2f 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 3e 0a 3c 63 6c Data Ascii: gradientUnits="userSpaceOnUse" gradientTransform="translate(27.9704 52.7944) rotate(-80.4384) scale(15.4744 41.0303)"><stop stop-color="#FFC591"/><stop offset="0.8094" stop-color="#F17542"/><stop offset="1" stop-color="#ED622F"/></radialGradient><cl
2025-01-15 22:20:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49916	104.21.80.92	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:41 UTC	602	OUT	GET /compressedFonts/RobotoRegular.woff2 HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://googleads.g.doubleclick.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:41 UTC	1269	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:41 GMT Content-Type: application/octet-stream Content-Length: 61736 Connection: close X-GUploader-UploadID: AFiumC6W6lnFDP8Y2rnDo1zJuVZT85zeUt_u3W-1NDWt29oKkFRwhNIXSMYehi03URTWLw8RLW25HxY x-goog-generation: 1701252459996546 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 61736 x-goog-hash: crc32c=fte1vA== x-goog-hash: md5=7ehNloCMSG4950y9jyosgA== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Wed, 15 Jan 2025 22:48:39 GMT Cache-Control: public, max-age=14400 Age: 693 Last-Modified: Wed, 29 Nov 2023 10:07:40 GMT ETag: "ede84d96808c486e3de74cbd8f2a2c80" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OCeApbl8CNi1h927V58HJXMLPxbSI9If5b4OXHv45ipKROlMMCnM2iGx7lr7smxMCgAcXGIOQSDwJek%2FAue1eFZrumLivPNYKsrouT9xEMpsQFR5XlyX1W8m4oWue35WCqNd"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 90294128fda0ab6d-YYZ alt-svc: h3=":443"; ma=86400
2025-01-15 22:20:41 UTC	217	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 34 30 35 39 26 6d 69 6e 5f 72 74 74 3d 31 34 30 34 38 26 72 74 74 5f 76 61 72 3d 35 32 39 31 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 33 33 39 26 72 65 63 76 5f 62 79 74 65 73 3d 31 31 38 30 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 32 30 36 34 39 31 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 39 39 34 32 37 36 31 65 64 31 34 35 33 31 31 35 26 74 73 3d 31 38 36 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=14059&min_rtt=14048&rtt_var=5291&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2339&recv_bytes=1180&delivery_rate=206491&cwnd=32&unsent_bytes=0&cid=9942761ed1453115&ts=186&x=0"
2025-01-15 22:20:41 UTC	1252	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 f1 28 00 12 00 00 00 02 80 e4 00 00 f0 c3 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 84 44 1b 81 a4 24 1c af 68 06 60 00 a5 48 08 4c 09 83 3c 11 0c 0a 87 af 60 86 d2 43 0b 93 46 00 12 89 6c 01 36 02 24 03 a7 08 04 20 05 85 18 07 20 0c 81 5b 5b 4f 47 92 aa 2a d7 be b7 e8 ef 04 92 9d d0 6d 08 50 e5 74 aa fe 2f 1e e0 46 34 c7 ee 05 1d 56 e9 3c 6d aa 42 48 37 fa 02 ed f2 0b d3 8d ba eb 2a 6b 0c fe b1 6f f6 ff ff ff ff ff ff 2f 4b 26 32 66 c9 01 97 a6 85 02 20 73 02 3a 15 7f ce df 3b 7f 42 68 01 51 82 47 95 dc a5 d6 34 a2 c6 0c 51 48 89 99 26 c4 6d a7 3a 4a 13 ac d7 0c 83 07 95 58 e7 38 3a 9b 5d ea 53 5b 4f 6f fb f7 24 87 59 96 7d 8c 92 9b f5 d8 c5 f1 f4 01 26 39 ab 8b e6 3a 2f 97 a0 5d ce 88 95 69 Data Ascii: wOF2(D$h`HL<`CFl6$ [[OGmPt/F4V<mBH7ko/K&2f s:;BhQG4QH&m:JX8:]S[Oo$Y}&9:/]i
2025-01-15 22:20:41 UTC	1369	IN	Data Raw: 3c e1 cc ee 11 09 55 40 d5 57 5d a7 aa cb ea 03 cf 2c 1e 85 0b ff ac 0d 4b 33 c7 6b d9 30 ba a9 f9 52 9e 70 61 a8 20 2c 1c fa 87 1f 8e 8f 71 04 6d ce e4 a6 b9 b9 71 95 8f 44 d0 94 2a fe 9f e7 64 ef dc bf 33 c2 11 0f 70 40 14 42 14 47 51 19 30 40 50 02 03 31 f0 da ac c4 6a 48 5e 37 ed 8d 2f 43 f4 67 a2 d3 63 60 76 09 61 8c 89 4e 7f 45 fe d7 d4 fc 5a b9 a8 d8 6a f5 ec 95 dd af a5 36 09 85 9a 5e 10 0f 05 4f 6f 76 84 70 18 8b 7d 7f da 2f 4d 2c a0 e1 08 05 ec 05 ec ed 4c c6 37 a5 5f 23 bd 89 d1 09 1e f1 af 13 75 dc 2a 8e d5 c5 c6 63 6c 78 83 03 88 7c 9d 9e 92 b2 b0 b6 f0 bd db 9a e1 ee fd 93 5e dc 24 45 a5 30 23 bd 3b 78 3e 77 42 7a 26 89 b4 fc 6d 5f ea 2e 64 c8 11 78 81 b6 83 54 00 04 50 d1 9a dd 04 08 3a b5 13 78 22 c5 28 ec 2b cd 42 0a 40 93 4e 93 ef d8 e0 Data Ascii: <U@W],K3k0Rpa ,qmqDd3p@BGQ0@P1jH^7/Cgc`vaNEZj6^Oovp}/M,L7_#uclx\|^$E0#;x>wBz&m_.dxTP:x"(+B@N
2025-01-15 22:20:41 UTC	1369	IN	Data Raw: 58 fd 13 e9 e3 0b 84 22 b1 44 2a 93 2b fc 4c cd 10 a6 19 96 e3 05 bb f6 ec 3b 70 28 57 28 55 6a 8d d6 ff 62 b9 52 6f 34 5b 6d 1e 85 ea 35 53 74 cf 01 c0 21 15 41 c3 c0 c2 29 86 47 40 44 52 82 8c a2 14 15 0d 1d 03 13 0b 1b 07 17 0f 9f 80 50 23 0c 81 c2 e0 08 24 0a 8d c1 b2 b1 73 70 72 71 f3 f0 f2 e1 f0 84 62 a9 5c a9 d6 ea d1 b1 70 74 eb d5 6f 10 d7 08 1e 11 09 29 19 05 15 0d 1d 03 13 80 95 9d c3 b8 09 9a 10 88 a4 12 32 a5 94 46 67 30 59 6c 0e 97 2f 10 8a c4 12 69 55 75 4d 6d 5d bd 31 13 87 cf ca ce c9 cd cb 2f 28 2c 2a 26 10 df be a7 8c 7a ad 6e 6f e3 7d 77 9b ef 87 fb f1 b6 db 5e 50 00 21 3e f6 fd 07 0e b3 ad 00 24 02 10 01 5b cb 2b d7 63 cd 21 d1 49 8a d7 fa 57 07 90 7e 73 f7 31 86 47 96 da 9b ce 97 48 f9 28 4b 42 0c b5 ac ba fa 3d bf 98 de 35 7f dc 30 Data Ascii: X"D+L;p(W(UjbRo4[m5St!A)G@DRP#$sprqb\pto)2Fg0Yl/iUuMm]1/(,&zno}w^P!>$[+c!IW~s1GH(KB=50
2025-01-15 22:20:41 UTC	1369	IN	Data Raw: 8e 5a ba cc 5d 8d a8 5a f1 14 ee 64 38 76 8c a2 89 69 c9 f8 51 2b f5 58 b5 d9 02 dc 2b 1b 6d b1 5d a4 2e df d6 2b ca 84 ea 81 0a 79 8d 95 6c c7 6f 82 da 60 88 64 c5 6f df 90 78 f0 4c e6 e8 10 4a ce 47 b6 9c ca 77 b3 20 6a 21 e6 c2 38 45 08 8b a1 80 81 e5 15 17 28 2b 92 b0 c6 56 be fb d6 4b bc f6 8c 50 70 9a 9a bd 28 f3 6d 23 43 4c 6b f6 db 9a db 8e 09 5c af 58 40 a9 d7 69 56 68 8b e5 e6 e4 6c 8b af ac b1 3b 44 2c 40 e9 b3 3d 86 57 cb b4 b4 4b ac c8 26 5b 41 23 d1 ab 8d 3a 96 9e 13 d0 16 53 2a b3 b3 af 03 a5 a6 35 c4 0d c8 96 66 58 af 49 ea a3 8c c6 dc 7a ff 7a ea a1 8a 61 53 e8 4c d7 45 2d 66 b2 2e 23 a6 37 27 43 5b 74 a9 5a a1 8a ef 0d 88 15 69 cf 78 6c 4a ae 67 44 44 44 9f 17 11 16 c3 b4 ff a7 71 eb 58 c3 00 6f df 7f 74 e8 c8 3d 30 94 27 e3 1e f9 af dd Data Ascii: Z]Zd8viQ+X+m].+ylo`doxLJGw j!8E(+VKPp(m#CLk\X@iVhl;D,@=WK&[A#:S*5fXIzzaSLE-f.#7'C[tZixlJgDDDqXot=0'
2025-01-15 22:20:41 UTC	1369	IN	Data Raw: b6 48 d9 9e 79 d3 03 25 72 50 b2 2a 25 b2 8a b5 cf 76 6a 08 28 d8 4e a0 ea e0 fc a5 12 65 bd 1b 3c 78 bd 06 a5 fe 7e 17 bf b5 43 e5 3f aa d7 5c 77 c3 4d 4f 28 a8 68 e8 18 8a 69 28 bd 7e 6f d9 3f e2 44 ca 6f fd d8 4e f0 9c 74 8a fa f4 10 a8 5c 95 3e 63 c6 cb 52 1d 94 14 39 37 dc 65 ea 41 f3 21 39 be fc 05 94 c0 8d e5 77 9a fe 02 04 0a 92 29 5b 8e 5c 18 f9 b0 f0 0a 15 23 21 2b 2d d4 9a 37 b4 02 f8 56 c5 aa 5a dd d2 e2 0b 6d c2 a4 69 33 d6 ca fb 7a 0e 5c b8 f1 e2 27 48 98 88 f3 2e 52 2e 6a e8 17 10 10 82 22 02 0c 3a 97 e2 f9 b5 64 fd c1 9a ac 7f 77 5e c0 5c bc d8 1b be 9a 7d cd ee ba f5 4d 89 b1 4c 6f c6 de fc 73 fb bf 88 70 d6 96 f5 74 45 45 b6 71 57 53 b8 10 70 b1 67 da a3 94 81 d6 cf ab b1 9f 1e bf 90 9e 84 52 31 0c 4c 46 40 a0 f3 29 a4 f0 a2 ab f5 85 62 Data Ascii: Hy%rP*%vj(Ne<x~C?\wMO(hi(~o?DoNt\>cR97eA!9w)[\#!+-7VZmi3z\'H.R.j":dw^\}MLosptEEqWSpgR1LF@)b
2025-01-15 22:20:41 UTC	1369	IN	Data Raw: ba 5d ee 6d 31 f7 4a 67 06 5d 18 fe 1e d4 bd b0 22 b0 cb 46 b2 33 47 55 34 3f 32 f4 fa 29 b9 34 64 c9 53 74 da d9 ef 41 60 54 3a b5 ae 9b b7 a7 8a f7 48 bd 7f ea 5c 50 b8 54 80 aa 93 ab 4c d6 aa 30 70 8b a9 de af 20 2e 0f 13 42 08 21 84 10 42 de 28 ac ec 9c 71 22 17 b3 5c 22 c2 93 71 72 b7 c5 5a cd 2c 38 b6 e6 d4 75 2d 93 3c 30 96 f1 c5 34 71 15 a7 d3 5e 15 ea e3 09 51 9c a8 44 b3 9d 36 bb 6b bd a7 8a f7 e3 c9 87 89 a9 63 f8 91 63 90 05 b0 8d c3 6c 59 b2 c3 cc c0 25 e0 f8 1c e2 02 e6 62 f2 8e 50 ef 70 b7 e1 29 22 c6 52 05 b9 07 53 80 4d ac 89 cd 1c 9c c6 4d 9a 36 63 be 7c aa fb ea f4 22 db 16 a3 ed b1 6c 7f 0f 58 3c 73 4a 2d 84 59 a8 70 11 25 f2 92 5b 8f e3 cd 66 22 71 84 72 42 03 03 b3 49 2c 4a c9 ba 0d a6 4d 6c 88 6b 01 e2 59 ef 7c 7b 9c 0e 35 17 8d c2 Data Ascii: ]m1Jg]"F3GU4?2)4dStA`T:H\PTL0p .B!B(q"\"qrZ,8u-<04q^QD6kcclY%bPp)"RSMM6c\|"lX<sJ-Yp%[f"qrBI,JMlkY\|{5
2025-01-15 22:20:41 UTC	1369	IN	Data Raw: 55 7c 8c cd 34 49 8e bc 14 ec 52 54 08 4a 90 94 ab 54 ad 56 bd 46 64 2d da be 47 10 af e0 89 3b f5 22 bd 84 2b bd 95 a5 82 2b 7c 7e 20 c4 88 4d 2c 73 8b fd 18 00 c5 6d 72 99 a5 6b d1 00 54 fc bc 0a d1 43 b2 98 b3 6d e3 28 e3 26 4c 99 31 57 16 ea 3f f3 85 af 96 6f 7e 14 00 00 f0 ab a0 88 c0 5d 7e 06 bc be e5 48 cc 04 6f 98 b7 bc 4b 97 ed ad 69 77 38 eb 03 2a 98 f9 f0 7b a5 99 6b a2 b8 81 c5 43 a0 72 55 fa 8c 19 ef 8b 48 96 38 5f 3e cf a0 0f 19 01 48 23 b5 9a 2a 2c 79 f0 2c 41 d5 77 db 23 c9 5e fb e4 e3 28 52 a2 cc 49 15 aa 54 ab 75 46 bd c6 d2 5c 63 87 52 a7 54 69 d7 eb a6 bb ee 7b e0 65 ff 74 9e 66 39 9f 43 da 1c ab 84 21 4a 9c 24 69 b2 e4 69 d3 a5 cf b8 41 0a ef 79 c0 2b 98 2a ca 6f fb 0a e4 87 e6 8b be 2f f5 fd 60 fe dd 18 ff 70 e6 0f e5 df e6 2c fa b3 Data Ascii: U\|4IRTJTVFd-G;"++\|~ M,smrkTCm(&L1W?o~]~HoKiw8{kCrUH8_>H#,y,Aw#^(RITuF\cRTi{etf9C!J$iiAy+*o/`p,
2025-01-15 22:20:41 UTC	1369	IN	Data Raw: b8 9c 30 71 4c 52 55 f4 96 f5 0d 56 f0 f1 39 34 82 09 21 42 22 11 11 41 22 32 58 44 dd 48 55 7e 5c a1 f6 63 47 42 b1 35 e7 38 e2 1c 42 c4 47 24 12 82 47 62 24 62 5b c4 63 7b d0 60 4f 12 e7 10 05 48 28 5e 48 1b c1 e2 c0 8d 40 6d c8 15 6a 1f c6 11 2d 0f f9 9c 12 c7 1c a7 e4 90 c8 8e 14 39 37 58 25 f2 39 88 7c c2 07 27 5a 14 46 88 a2 88 51 1c 23 4a e2 86 8e 5f 5e c2 f2 c3 2a 88 17 36 51 b8 54 c2 c7 8f 10 39 ea 12 45 be b2 be 87 1f 4a 59 cf 58 1b 31 e3 fc 58 fc b0 aa 6a 93 aa 23 93 aa 0f c4 d5 04 d1 e2 d6 14 8c f6 f8 75 44 8f 9e 44 f5 44 88 9b f1 ea 8b 19 03 51 8c 19 34 86 22 1e b7 a2 dc 60 d0 18 8d 4c a3 91 69 22 58 dc fd 11 f9 a6 9b 69 c7 73 22 1e 8f a2 dc 72 08 f1 3c a4 36 42 6a 2b 72 6d 47 ba 9d 28 b6 3b c2 bd f6 dc 6f df 97 bd 3c de 12 f1 f8 12 e5 3e 47 Data Ascii: 0qLRUV94!B"A"2XDHU~\cGB58BG$Gb$b[c{`OH(^H@mj-97X%9\|'ZFQ#J_^*6QT9EJYX1Xj#uDDDQ4"`Li"Xis"r<6Bj+rmG(;o<>G
2025-01-15 22:20:41 UTC	1369	IN	Data Raw: c7 55 31 1a 01 95 4a 8d 90 70 28 6a b5 7d ae 19 01 91 32 0d 06 ac d9 73 83 47 27 a4 56 a5 49 0e bc 52 75 da db 35 23 28 a7 82 ce 90 0d 07 08 04 0c 22 1a d5 9a a1 10 94 a9 d7 d1 b8 90 7f ea 82 4c 93 11 13 b6 dc 11 31 89 69 d5 68 91 ab 10 55 83 4e e0 5f ee af 2a 81 b2 1e 0a 31 16 e6 63 c5 d9 5b 25 7c 28 dc 73 90 3f 16 5c 4f 09 da 45 f5 56 8b 9a c7 8e a6 7e ff 43 c7 2d 66 74 5b 1d 66 3e f6 6c 5f 78 cc c8 9c f7 6d 0b 7b 55 b0 ee 0c 5f 3d 56 bc 23 96 63 0f 9d f7 28 d0 57 9c 12 63 c5 a9 0c af 38 b5 c9 15 a7 31 b7 e2 b4 96 57 84 ce a6 f9 fd e0 6d e1 a5 f4 ba df db bb 0e 88 1a 21 d8 84 d6 46 3e 47 a5 14 52 7e b9 91 a4 de a4 40 71 4c 2b 4a 10 cd c8 58 8e 17 98 dd 30 b9 b4 f2 c5 fe 77 fe a7 7e fa fe af bf 0d 78 fb 2a f8 bd 16 f9 56 7e 5b ff b5 be bf c1 6f c2 c2 30 Data Ascii: U1Jp(j}2sG'VIRu5#("L1ihUN_1c[%\|(s?\OEV~C-ft[f>l_xm{U_=V#c(Wc81Wm!F>GR~@qL+JX0w~xV~[o0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49920	104.21.80.92	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:41 UTC	599	OUT	GET /compressedFonts/RobotoBold.woff2 HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://googleads.g.doubleclick.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:41 UTC	1276	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:41 GMT Content-Type: application/octet-stream Content-Length: 61628 Connection: close X-GUploader-UploadID: AFiumC6f7gQz-AS4_Ivcgb7EKaha-_VW_9Y4iZMjRo2-43DEeVBc0sFuafBqNZvQ55OrbVUaOE2nDr0 x-goog-generation: 1701252540208192 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 61628 x-goog-hash: crc32c=8QCKtg== x-goog-hash: md5=EDOkdzHkX3vUahliNZ6WtA== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Wed, 15 Jan 2025 22:16:48 GMT Cache-Control: public, max-age=14400 Age: 2706 Last-Modified: Wed, 29 Nov 2023 10:09:00 GMT ETag: "1033a47731e45f7bd46a1962359e96b4" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FJmbLtY7qfyG47mZz5PZFn0JtzFowvqsLngXtMBgoe7plKc0T6LBJGab7wiZZVF7HOnON3o8mCYb%2FNjVjM3%2Fscuzb2%2Bl3vaskV85z7C1zx%2B780kHn6l1OUq7UbkWjXcV2J9p"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9029412918acebbd-YYZ alt-svc: h3=":443"; ma=86400
2025-01-15 22:20:41 UTC	217	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 33 36 35 32 26 6d 69 6e 5f 72 74 74 3d 31 33 36 35 31 26 72 74 74 5f 76 61 72 3d 35 31 32 32 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 33 33 38 26 72 65 63 76 5f 62 79 74 65 73 3d 31 31 37 37 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 32 31 33 37 31 35 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 65 62 39 36 36 34 64 35 33 30 66 32 62 30 38 31 26 74 73 3d 31 37 35 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=13652&min_rtt=13651&rtt_var=5122&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2338&recv_bytes=1177&delivery_rate=213715&cwnd=32&unsent_bytes=0&cid=eb9664d530f2b081&ts=175&x=0"
2025-01-15 22:20:41 UTC	1245	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 f0 bc 00 12 00 00 00 02 7e 94 00 00 f0 55 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 84 44 1b 81 b2 7c 1c af 68 06 60 00 a5 48 08 42 09 83 3c 11 0c 0a 87 9c 6c 86 bb 04 0b 93 46 00 12 89 6c 01 36 02 24 03 a7 08 04 20 05 85 22 07 20 0c 81 22 5b af 42 92 08 99 72 d7 b7 2e cb 60 90 07 76 8e b6 2d 95 38 c4 6b 6f e3 88 30 0e 57 89 bb 9f cd a3 29 ef ca d1 9e 42 ba c0 9c 03 d5 ea eb db da 34 1e ec 77 66 ff ff ff ff ff ff ef 4a 26 32 96 49 5a 2e 69 29 45 85 a2 a0 80 a0 fe f6 be db 46 50 83 22 c4 5a 02 25 6a 28 b7 a1 8d 3c a8 c1 0e 2c 1c 63 8c cd 29 b7 35 d5 e8 62 57 c7 68 d4 09 7d 19 ce 07 bb b0 91 4d 76 c2 15 89 82 86 db dc 2c a9 a6 95 dd 37 48 81 ad 2a ec 26 a2 90 09 47 f1 f1 78 d2 95 db 53 7a 41 1c Data Ascii: wOF2~UD\|h`HB<lFl6$ " "[Br.`v-8ko0W)B4wfJ&2IZ.i)EFP"Z%j(<,c)5bWh}Mv,7H*&GxSzA
2025-01-15 22:20:41 UTC	1369	IN	Data Raw: eb 25 d7 a3 8a 53 75 86 08 3a 7e 0c 2c e0 69 91 66 00 7d 0e cc b3 c7 51 b8 4b ff c0 b5 34 7d a2 a9 5f 75 7e b4 6f 54 79 af 9b bf 0f 36 2c 1b ed fa 45 57 ab 4b a8 59 c2 11 24 fa 0e 0e 55 74 5e aa e3 81 43 9d ff ea e2 4e 92 b3 15 11 0e ec e4 03 b1 ca e3 83 69 2b f0 06 00 b2 64 58 cc 61 00 07 43 ee 82 3d cc 7d d1 e9 37 f0 c0 92 2c c9 c6 54 53 42 f2 5b 1b 6f 99 8e e7 f9 ee 35 ce f9 98 36 d7 26 80 c1 47 16 f1 80 64 42 bf 58 42 5b 1a 60 a9 00 18 c0 35 5e 92 05 e2 fd ff 7b 55 6d fb 1e 41 88 00 29 5a 02 9d 82 4c 15 92 a3 33 92 a7 59 d3 d6 b4 3c 75 d7 da 6e 16 fb 39 e7 fd fb de c3 fb ef bf ff 3f 80 ff 01 0a 8d 2a 00 e5 90 a0 14 93 80 0b 8b a2 e0 03 94 03 80 4a 86 94 9d 1c 59 69 d2 d4 a4 73 5a 27 48 37 ca ce 89 c4 b4 2e 3b ad 97 d5 94 d2 f7 b3 9d ed c6 c9 d4 b6 9b Data Ascii: %Su:~,if}QK4}_u~oTy6,EWKY$Ut^CNi+dXaC=}7,TSB[o56&GdBXB[`5^{UmA)ZL3Y<un9?*JYisZ'H7.;
2025-01-15 22:20:41 UTC	1369	IN	Data Raw: 20 04 23 28 86 13 24 45 33 ec e1 74 79 fe fc d7 24 46 d7 d0 d2 da c1 27 88 b8 12 7e ff c1 fd 69 d5 dc 34 1b 41 31 fe f9 8d df 90 a4 4c 96 8a ae 3b 46 a2 a5 d1 e4 5d cc f8 0f 28 f9 20 e7 b3 2c eb 51 e8 74 7b f2 27 e7 13 d3 1c 86 18 cf 3e 76 26 ca 81 0e 26 18 ab 89 9b f9 e8 b5 7f 4e ec 2f 6e 9c fa 74 6a eb 33 65 62 12 f3 d8 c4 2e 8e ec 8f 8b 60 e6 a9 d8 cd aa b1 8d fc a8 4c 58 1e 3f 69 06 e7 e2 91 f6 6e 5b e2 13 24 e6 25 25 73 50 dc f8 18 68 eb 7d db f9 be 60 65 55 b9 b1 29 5f 95 9c ac fd 86 88 7b 2f ee d9 41 f5 0f bf 37 bb 55 17 7b 9c 52 a6 d5 f8 33 2d 79 91 55 fc 1f 7c c8 17 72 62 ee b8 57 7d f3 b7 79 07 f7 9f c4 04 33 36 47 86 af ea 74 65 de 80 ce 90 75 bd bb 66 67 ad 3d bf 6a e7 c6 eb fc 25 28 82 80 f4 67 47 a6 f1 3e cd d1 41 71 b5 5d 2d 1f 6e 14 9f e5 Data Ascii: #($E3ty$F'~i4A1L;F]( ,Qt{'>v&&N/ntj3eb.`LX?in[$%%sPh}`eU)_{/A7U{R3-yU\|rbW}y36Gteufg=j%(gG>Aq]-n
2025-01-15 22:20:41 UTC	1369	IN	Data Raw: 1f d9 80 b5 21 b0 b1 46 58 43 bf 93 87 b9 9b a2 df 98 b0 eb 95 8a 4c b8 7e 46 d4 1b 8e 9a 6d 84 3c c1 61 21 66 d9 93 cc 09 37 80 7f 27 4d e8 f8 75 65 66 71 c5 a6 5b 4d 7b 5c 5f 30 1b 0d 9a 5c f4 4f 2f 43 18 1f 99 d4 78 65 44 52 65 c4 98 66 c9 90 71 72 49 c7 a6 51 0d 15 47 64 20 57 fc 61 84 ad 8e 13 e8 ff 00 c5 a6 f7 d4 81 d9 62 74 dd 10 2b 90 c8 3b 13 cb f3 c6 ec c7 52 a1 ca b0 08 4c 45 58 d0 d3 18 67 35 58 1c 92 11 a5 fd 11 04 66 85 7f 8f 04 89 24 98 cf 20 10 e8 ad 90 fc c5 7a 67 ff a5 9c 5c 4c 18 45 c0 c7 47 f6 45 ee 7a eb 79 ee de 88 8f a7 6f 8c de fc 8f 58 d2 ff d5 96 c5 41 66 9e ec 5a 73 4a e6 ed 09 c7 71 04 0b 6b 2a 4f d3 c5 ee 21 fa 48 98 b2 dc 3b 5b f6 d3 ce 12 73 03 4d 26 43 ce cf 58 8d cb 6c 34 68 66 3c 07 7c 7f ca 03 25 2c 09 39 92 62 69 58 6b Data Ascii: !FXCL~Fm<a!f7'Muefq[M{\_0\O/CxeDRefqrIQGd Wabt+;RLEXg5Xf$ zg\LEGEzyoXAfZsJqk*O!H;[sM&CXl4hf<\|%,9biXk
2025-01-15 22:20:41 UTC	1369	IN	Data Raw: df 35 88 00 71 8b 39 ce ee b2 07 ef e5 cd 00 6e 1e f5 59 db f4 b4 dc f2 77 fb b3 3b 2c af 65 af 4d af fd 5e 9f b5 d3 a9 4c 49 f7 a1 de 18 ff b6 06 75 8d a0 d1 e6 4e c7 84 fb fc 59 fd 8d e9 db 46 26 c1 75 c1 6f fa 3a 8b 25 6b f3 36 6e 65 61 d5 bd 9b b5 fa 6d bd c6 7c 26 20 10 13 49 1c a9 64 90 c3 66 0e 39 96 fd a7 9f e6 2c e7 b9 cc 55 67 96 75 cd 01 00 4f ea be dc 4f a5 fe 65 78 cd 1b de 31 ca 98 34 05 4f 27 a3 16 86 70 44 20 73 b9 10 0e 05 3c 8a 49 84 fb 8f 79 90 a1 39 0c 16 47 36 49 a1 d2 e8 89 3a 30 5a 70 22 54 a9 31 18 e7 48 69 e8 e8 63 58 42 c3 75 e5 c6 9d 87 78 89 50 52 a4 c9 90 25 47 9e 02 45 4a 94 a5 a2 39 4a 95 29 67 6a 22 73 d8 d8 77 ef 56 f3 07 73 16 2c da c9 55 8f 03 17 3e 42 44 48 c0 90 63 c5 8e 23 3c 1b 14 b4 27 0c 16 47 36 49 a1 d2 e8 89 3a Data Ascii: 5q9nYw;,eM^LIuNYF&uo:%k6neam\|& Idf9,UguOOex14O'pD s<Iy9G6I:0Zp"T1HicXBuxPR%GEJ9J)gj"swVs,U>BDHc#<'G6I:
2025-01-15 22:20:41 UTC	1369	IN	Data Raw: 3d 53 78 31 5f 49 b6 72 2e 3b e6 a7 63 b6 f9 b2 70 39 20 9e 8a 4f 02 e3 b0 89 a5 e5 1c 15 ee e5 e0 7d 3e 34 02 e1 10 60 24 ad 48 33 0a d9 61 2f 49 3f c7 40 66 de d5 c0 30 b3 3e dd bd cd 60 e1 94 ee 18 c3 6a cc f5 72 97 95 52 09 a3 e9 d5 a9 2f 0d 17 c2 d6 ba 48 bb a9 36 4c 07 d7 28 6e 49 9d a3 bc 8d b6 91 b6 93 f2 b0 91 ac 9b c9 c0 6c 7c 29 c9 cd 52 e4 62 ce 66 31 ca 1a 86 db 9c 55 f3 e7 28 77 59 f0 bc e4 42 9c 06 d9 6e 6e 26 cf 2d 5e f8 f8 05 9e 0b e2 45 dd 99 9d d0 55 16 79 76 38 02 e1 3e 87 60 17 38 36 cc 4d 84 5f 12 51 74 e8 28 7c fb a3 a1 06 88 6e 06 04 24 f5 49 f3 50 5e e1 31 84 20 59 8e 31 b5 22 c2 cc ac cf d9 aa c3 6d 39 96 18 1b 30 8e 79 7c 81 b2 aa 5a 89 d7 03 1e 32 86 fe 72 05 2b 70 fc 1c 50 e0 e8 8b d1 08 8d e9 d5 a9 2f 0d 7b 6a bd da 2a 64 16 Data Ascii: =Sx1_Ir.;cp9 O}>4`$H3a/I?@f0>`jrR/H6L(nIl\|)Rbf1U(wYBnn&-^EUyv8>`86M_Qt(\|n$IP^1 Y1"m90y\|Z2r+pP/{j*d
2025-01-15 22:20:41 UTC	1369	IN	Data Raw: 89 00 80 b3 ea 08 71 01 45 74 ec d7 50 1c 0a 7c 1b a5 c0 c8 d9 1c 44 55 a5 56 41 51 03 a1 fa 44 47 17 0a 83 37 03 95 89 42 2e 07 c1 06 4d c8 2d 9f 0e b8 15 cf 21 88 d4 fa 79 96 33 36 29 15 c8 89 07 5f a0 ac aa 56 e2 6e 80 02 50 81 3b 5b 91 16 2d 97 95 2e c2 1b ef da 47 be cf f8 91 51 4c 67 f9 cc 36 d9 c7 a1 48 89 6d 0f e7 72 9e 22 2c f2 19 15 6d 8e fb 66 f7 c3 21 84 d0 53 21 84 10 42 e8 89 08 21 84 d0 60 9c c2 ed 71 2d 9e 45 20 59 66 83 1c 1e 5f a0 dc 2a 0c 55 ab 4d 31 dd 00 05 a0 02 77 b6 22 2d 5a 2e 2b 5d 84 37 de f9 ec 87 51 d3 f6 1d f6 43 4c 11 f6 30 5e 15 33 97 46 4e 54 d0 14 ec d3 e8 08 11 48 45 29 07 42 08 8d 39 23 f4 9d 09 c9 f2 7c 86 22 10 fd db 9e 97 56 67 54 dd b3 38 2f ed cd 57 89 d2 ff 97 b7 32 9b 9f 7f fd 43 80 40 41 5f 17 1b 33 13 cf 32 a5 Data Ascii: qEtP\|DUVAQDG7B.M-!y36)_VnP;[-.GQLg6Hmr",mf!S!B!`q-E Yf_*UM1w"-Z.+]7QCL0^3FNTHE)B9#\|"VgT8/W2C@A_32
2025-01-15 22:20:41 UTC	1369	IN	Data Raw: 41 0e 0c a5 23 37 b8 89 13 b7 b9 70 2f 5d 19 66 04 09 8f 78 f0 84 27 cf 78 f1 9c 37 6f 49 79 cf 87 af 7c f9 b5 a7 2e fa 31 81 0a ff d2 40 a0 60 21 64 c2 45 8a 2a d1 af 3d 89 91 af fc 48 ee 0a 28 a4 48 2b 19 cd 83 cc a8 a0 fc d1 52 69 0d 09 6c d4 67 bb 1d 76 da 65 b7 7e 7b ec b5 cf 80 fd 4e 39 6d d0 19 67 9d 73 de 05 43 2e ba e4 72 b9 d2 ee b9 9a 10 b8 19 f7 93 37 c9 db e4 5d f2 3e 19 4d c6 92 9f 87 4c b4 5c 41 fa 01 78 08 10 7a 8a 14 55 a1 6e 53 7a 16 0f 60 c1 8a 03 17 6e 42 44 58 b2 e2 c1 93 17 6f 81 82 04 7b 27 54 a4 28 31 62 c5 89 7f 4e 00 43 d2 ff 99 29 53 02 f0 95 00 e1 07 02 1b 04 88 8c aa c2 d9 26 49 cc 01 c6 11 97 13 16 e7 64 73 e1 0a 23 81 73 c3 e1 85 e2 8d 4b 4a 83 0f 1e 5f 9a fc 68 f1 a7 2d 94 0a d3 84 ab e4 ba e8 1c 12 fc 35 24 99 92 35 0a 2f Data Ascii: A#7p/]fx'x7oIy\|.1@`!dE*=H(H+Rilgve~{N9mgsC.r7]>ML\AxzUnSz`nBDXo{'T(1bNC)S&Ids#sKJ_h-5$5/
2025-01-15 22:20:41 UTC	1369	IN	Data Raw: fc 52 b8 f1 48 af bc 08 75 0d e0 41 ba 21 3c 7a b5 67 9a 13 1f 2c 4c 07 6f 8f e2 e5 61 73 45 89 99 83 24 12 09 01 71 e1 8c 17 af 59 a9 9c 97 7d 66 bb 12 1f ce c2 75 63 7d 3d 89 b0 43 74 24 50 3a 5a 63 e3 4a 65 b6 7b 93 9b 54 ee e7 7b d0 1a 5b b7 f1 36 13 7b 87 ca ee 03 46 db b1 be 8f 89 e0 87 55 4f 06 c9 20 79 c1 9d ee 74 9e c9 cc 2e 12 f3 47 6b ec 0a eb bb 36 d8 67 bb f7 c5 ca be da de 4d 2f 9d 6e 47 be 6d b9 1b fb 3e f1 63 70 bf ed 61 ea e7 8e 5f 33 bf 77 fd 99 fb bb f0 6f e9 ff 5e 79 54 1b 28 02 da 20 81 44 01 85 06 1a 00 60 80 39 42 06 27 14 a5 12 91 88 d2 87 88 43 29 43 64 a1 34 81 1a 6c 05 02 08 20 80 00 02 08 60 98 14 70 7f 1c f2 38 25 6f 2f f9 f8 e4 e7 57 40 40 41 c1 19 c2 81 b0 43 11 a7 14 75 6c 31 27 10 77 6c 09 27 90 72 02 99 8e 72 72 2a 28 a8 Data Ascii: RHuA!<zg,LoasE$qY}fuc}=Ct$P:ZcJe{T{[6{FUO yt.Gk6gM/nGm>cpa_3wo^yT( D`9B'C)Cd4l `p8%o/W@@ACul1'wl'rrr*(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49918	104.21.80.92	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:41 UTC	717	OUT	GET /click_1734018555_64x64.png HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce
2025-01-15 22:20:41 UTC	1176	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:41 GMT Content-Type: image/png Content-Length: 721 Connection: close X-GUploader-UploadID: AFiumC7a8ahKtnZCbsnnmUi-BV081kC_2ESON0XYnHx-JX6hdkARZJvpf4NTB_Ubj8z9CLdV9RVEpc4 x-goog-generation: 1734018555538900 x-goog-metageneration: 3 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 721 x-goog-hash: crc32c=PWgPLA== x-goog-hash: md5=Qx665ft+mV1G29G7lB8NMg== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type Expires: Wed, 15 Jan 2025 22:35:39 GMT Cache-Control: public, max-age=14400 Age: 2702 Last-Modified: Thu, 12 Dec 2024 15:49:15 GMT ETag: "431ebae5fb7e995d46dbd1bb941f0d32" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BQQXOi%2BBz1zuH7RkgYLlF3asySvVXTdp62hNdcczHXbAlHK9ecSvZHWJKPEKu%2FOkFfdt2kBA%2FxF09eO%2BU8ww2cBFn0R0DaODdpFyms92i3bbty%2Fcjs1EAgwzqFby7Mk%2ByB3F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9029412918af74a5-YYZ alt-svc: h3=":443"; ma=86400
2025-01-15 22:20:41 UTC	217	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 34 32 30 39 26 6d 69 6e 5f 72 74 74 3d 31 34 32 30 33 26 72 74 74 5f 76 61 72 3d 35 33 33 39 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 33 33 39 26 72 65 63 76 5f 62 79 74 65 73 3d 31 32 39 35 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 32 30 34 38 32 36 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 62 62 33 64 63 63 61 63 35 32 64 36 62 31 65 65 26 74 73 3d 31 39 35 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=14209&min_rtt=14203&rtt_var=5339&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2339&recv_bytes=1295&delivery_rate=204826&cwnd=32&unsent_bytes=0&cid=bb3dccac52d6b1ee&ts=195&x=0"
2025-01-15 22:20:41 UTC	721	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 03 00 00 00 9d b7 81 ec 00 00 00 78 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 c8 48 88 00 00 00 27 74 52 4e 53 00 ec f2 3f ee 05 32 f6 2e d2 0a 9d 77 58 3a 47 13 80 a2 4d 44 37 67 ac 64 0e c9 16 36 1b cf 6b b9 8b 71 2a c4 ab 21 5f 63 3e 35 00 00 01 e1 49 44 41 54 58 c3 e5 95 d9 76 82 30 14 45 2f 09 20 a0 e0 54 07 50 70 6c f3 ff 7f 58 e2 b2 1e 43 21 de c4 Data Ascii: PNGIHDR@@xPLTEH'tRNS?2.wX:GMD7gd6kq*!_c>5IDATXv0E/ TPplXC!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49919	104.21.80.92	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:41 UTC	722	OUT	GET /download_l_1734165033_64x64.png HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce
2025-01-15 22:20:41 UTC	1172	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:41 GMT Content-Type: image/png Content-Length: 615 Connection: close X-GUploader-UploadID: AFiumC6gNkBytAcZZFDQrgcTSb1Q607zpFi_NUDyuLyUyD6bWsEAywaZlyaJsL9KPex6sdwWhZ1ZEuA x-goog-generation: 1734165033542357 x-goog-metageneration: 3 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 615 x-goog-hash: crc32c=y4TMxQ== x-goog-hash: md5=3Ht+RPR8bjlGVFLjbkb7ZQ== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type Expires: Wed, 15 Jan 2025 22:25:33 GMT Cache-Control: public, max-age=14400 Age: 3308 Last-Modified: Sat, 14 Dec 2024 08:30:33 GMT ETag: "dc7b7e44f47c6e39465452e36e46fb65" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iZD29u0qeTumQzsy%2B%2B%2FbdidbhbLsruUuoSzR%2BMV34FZfsI2G8b6yFXpOCVo4D9SJVEfkq9aEWxRLNNGW8K9J3LEeCVFy2JLR5kOuYQs2WM8gTxR%2BNSndITR687nTRzcRUqqj"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 902941293c7fabfa-YYZ alt-svc: h3=":443"; ma=86400
2025-01-15 22:20:41 UTC	217	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 33 37 32 30 26 6d 69 6e 5f 72 74 74 3d 31 33 37 30 36 26 72 74 74 5f 76 61 72 3d 35 31 36 38 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 33 33 39 26 72 65 63 76 5f 62 79 74 65 73 3d 31 33 30 30 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 32 31 31 33 30 33 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 65 39 31 33 66 30 33 62 61 62 32 34 35 38 37 65 26 74 73 3d 31 38 38 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=13720&min_rtt=13706&rtt_var=5168&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2339&recv_bytes=1300&delivery_rate=211303&cwnd=32&unsent_bytes=0&cid=e913f03bab24587e&ts=188&x=0"
2025-01-15 22:20:41 UTC	615	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 03 00 00 00 9d b7 81 ec 00 00 00 78 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 c8 48 88 00 00 00 27 74 52 4e 53 00 8d 22 b8 fa b4 08 05 ad 53 1b 59 ee 09 dc 9b 62 2c 25 11 d5 cf c5 af 7e 71 47 3d de 32 15 f4 e6 a5 86 6b 4f 35 1e c8 b0 73 06 00 00 01 77 49 44 41 54 58 c3 ed 97 db 72 83 20 14 45 4f 93 a8 44 8d 77 ad 97 dc 93 86 ff ff c3 5a 40 77 26 b5 18 78 Data Ascii: PNGIHDR@@xPLTEH'tRNS"SYb,%~qG=2kO5swIDATXr EODwZ@w&x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49912	142.250.186.142	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:41 UTC	557	OUT	GET /i/ca-pub-4821006852914359?href=https%3A%2F%2Fnuance-pdf-professional2.software.informer.com%2F7.2&ers=2 HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:42 UTC	1970	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 15 Jan 2025 22:20:41 GMT Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-lZu3acd3TLnwFK--CRdgJQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport reporting-endpoints: default="/_/ContributorServingWebSwitchboardHttp/web-reports?context=eJzjamHU4pJi8NCQYljEv4vpxK3bTBeAWOLrSyYNIHZKn8EaBMStN8-xTgVio7XnWZ2AOOnfedYiIDZUuMTqCMJFl1g9gVi15xKrKRDfX3eJ9TkQf6i_zPoDiGecv8y6AIiLJK6wNgExw9crrBxAbMt6jdUViIV4OHa-XLCHTaDh44cLzEoaSfmF8cn5eSVFmUmlJflFaclpqcWpRWWpRfFGBkamBoaGJnoGxvEFBgA7E07Y" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 22:20:42 UTC	1970	IN	Data Raw: 37 30 63 35 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 7c 7c 20 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 5f 46 5f 74 6f 67 Data Ascii: 70c5if (typeof __googlefc === 'undefined' \|\| typeof __googlefc.fcKernelManager === 'undefined') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{_._F_tog
2025-01-15 22:20:42 UTC	1970	IN	Data Raw: 6e 20 61 7d 29 3b 66 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 5f 2e 68 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 3b 69 66 28 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 69 61 3d 4f 62 6a 65 63 74 2e 73 65 74 50 Data Ascii: n a});fa=function(a){a={next:a};a[Symbol.iterator]=function(){return this};return a};_.ha=typeof Object.create=="function"?Object.create:function(a){var b=function(){};b.prototype=a;return new b};if(typeof Object.setPrototypeOf=="function")ia=Object.setP
2025-01-15 22:20:42 UTC	1970	IN	Data Raw: 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 4b 28 67 29 3a 74 68 69 73 2e 41 28 67 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4b 3d 0a 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 75 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 6b 61 28 68 2c 67 29 3a 74 68 69 73 2e 41 28 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 75 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 44 28 32 2c 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 41 Data Ascii: null;break a;case "function":h=!0;break a;default:h=!1}h?this.K(g):this.A(g)}};e.prototype.K=function(g){var h=void 0;try{h=g.then}catch(k){this.u(k);return}typeof h=="function"?this.ka(h,g):this.A(g)};e.prototype.u=function(g){this.D(2,g)};e.prototype.A
2025-01-15 22:20:42 UTC	1970	IN	Data Raw: 6c 28 7a 29 7d 7d 76 61 72 20 7a 3d 5b 5d 2c 44 3d 30 3b 64 6f 20 7a 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 44 2b 2b 2c 63 28 6b 2e 76 61 6c 75 65 29 2e 6e 62 28 76 28 7a 2e 6c 65 6e 67 74 68 2d 31 29 2c 71 29 2c 6b 3d 68 2e 6e 65 78 74 28 29 3b 77 68 69 6c 65 28 21 6b 2e 64 6f 6e 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 65 7d 29 3b 0a 76 61 72 20 72 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6b 60 22 2b 63 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6c 60 22 2b 63 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 6e 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 Data Ascii: l(z)}}var z=[],D=0;do z.push(void 0),D++,c(k.value).nb(v(z.length-1),q),k=h.next();while(!k.done)})};return e});var ra=function(a,b,c){if(a==null)throw new TypeError("k`"+c);if(b instanceof RegExp)throw new TypeError("l`"+c);return a+""};n("String.protot
2025-01-15 22:20:42 UTC	1970	IN	Data Raw: 61 72 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6b 3d 6e 65 77 20 61 28 5f 2e 70 28 5b 5b 68 2c 22 73 22 5d 5d 29 29 3b 69 66 28 6b 2e 67 65 74 28 68 29 21 3d 22 73 22 7c 7c 6b 2e 73 69 7a 65 21 3d 31 7c 7c 6b 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6b 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6b 7c 7c 6b 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6c 3d 6b 2e 65 6e 74 72 69 65 73 28 29 2c 71 3d 6c 2e 6e 65 78 74 28 29 3b 69 66 28 71 2e 64 6f 6e 65 7c 7c 71 2e 76 61 6c 75 65 5b 30 5d 21 3d 68 7c 7c 71 2e 76 61 6c 75 65 5b 31 5d 21 3d 22 73 22 29 72 65 74 75 72 6e 21 31 3b 71 3d 6c 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 71 2e 64 6f 6e 65 7c 7c 71 2e 76 61 6c 75 65 5b 30 5d 2e 78 21 3d 34 7c 7c 71 Data Ascii: ar h=Object.seal({x:4}),k=new a(_.p([[h,"s"]]));if(k.get(h)!="s"\|\|k.size!=1\|\|k.get({x:4})\|\|k.set({x:4},"t")!=k\|\|k.size!=2)return!1;var l=k.entries(),q=l.next();if(q.done\|\|q.value[0]!=h\|\|q.value[1]!="s")return!1;q=l.next();return q.done\|\|q.value[0].x!=4\|\|q
2025-01-15 22:20:42 UTC	1970	IN	Data Raw: 7d 7d 29 7d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 7b 7d 3b 72 65 74 75 72 6e 20 68 2e 71 61 3d 68 2e 6e 65 78 74 3d 68 2e 68 65 61 64 3d 68 7d 2c 67 3d 30 3b 72 65 74 75 72 6e 20 63 7d 29 3b 0a 6e 28 22 53 65 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e 65 77 20 61 28 5f 2e 70 28 5b 63 5d 29 29 3b 69 66 28 21 64 2e 68 61 73 28 63 Data Ascii: }})},f=function(){var h={};return h.qa=h.next=h.head=h},g=0;return c});n("Set",function(a){if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="function")return!1;try{var c=Object.seal({x:4}),d=new a(_.p([c]));if(!d.has(c
2025-01-15 22:20:42 UTC	1970	IN	Data Raw: 66 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 62 3d 66 2e 63 61 6c 6c 28 62 29 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 21 28 66 3d 62 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 66 2e 76 61 6c 75 65 2c 67 2b 2b 29 29 7d 65 6c 73 65 20 66 6f 72 28 66 3d 62 2e 6c 65 6e 67 74 68 2c 67 3d 30 3b 67 3c 66 3b 67 2b 2b 29 65 2e 70 75 73 68 28 63 2e 63 61 6c 6c 28 64 2c 62 5b 67 5d 2c 67 29 29 3b 72 65 74 75 72 6e 20 65 7d 7d 29 3b 6e 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 70 61 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b Data Ascii: f=="function"){b=f.call(b);for(var g=0;!(f=b.next()).done;)e.push(c.call(d,f.value,g++))}else for(f=b.length,g=0;g<f;g++)e.push(c.call(d,b[g],g));return e}});n("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)pa(b,d)&&c.push([d,b[
2025-01-15 22:20:42 UTC	1970	IN	Data Raw: 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 6e 28 22 49 6e 74 31 36 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 6e 28 22 55 69 6e 74 31 36 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 6e 28 22 49 6e 74 33 32 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 0a 6e 28 22 55 69 6e 74 33 32 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 6e 28 22 46 6c 6f 61 74 33 32 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 6e 28 22 46 6c 6f 61 74 36 34 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 22 2c 74 61 29 3b 6e 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 70 Data Ascii: .prototype.fill",ta);n("Int16Array.prototype.fill",ta);n("Uint16Array.prototype.fill",ta);n("Int32Array.prototype.fill",ta);n("Uint32Array.prototype.fill",ta);n("Float32Array.prototype.fill",ta);n("Float64Array.prototype.fill",ta);n("String.prototype.rep
2025-01-15 22:20:42 UTC	1970	IN	Data Raw: 38 32 7c 7c 28 61 2e 5f 5f 63 6c 6f 73 75 72 65 5f 5f 65 72 72 6f 72 5f 5f 63 6f 6e 74 65 78 74 5f 5f 39 38 34 33 38 32 3d 7b 7d 29 3b 61 2e 5f 5f 63 6c 6f 73 75 72 65 5f 5f 65 72 72 6f 72 5f 5f 63 6f 6e 74 65 78 74 5f 5f 39 38 34 33 38 32 2e 73 65 76 65 72 69 74 79 3d 62 7d 3b 4c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 45 72 72 6f 72 28 29 3b 4b 61 28 61 2c 22 69 6e 63 69 64 65 6e 74 22 29 3b 5f 2e 79 61 28 61 29 7d 3b 5f 2e 4d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 45 72 72 6f 72 28 61 29 3b 4b 61 28 61 2c 22 77 61 72 6e 69 6e 67 22 29 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 50 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 63 3d 63 3d 3d 3d 76 6f 69 64 20 30 3f 21 31 3a 63 3b 61 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f Data Ascii: 82\|\|(a.__closure__error__context__984382={});a.__closure__error__context__984382.severity=b};La=function(){var a=Error();Ka(a,"incident");_.ya(a)};_.Ma=function(a){a=Error(a);Ka(a,"warning");return a};Pa=function(a,b,c,d){c=c===void 0?!1:c;a=typeof Symbo
2025-01-15 22:20:42 UTC	1970	IN	Data Raw: 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 63 3f 61 2e 73 75 62 61 72 72 61 79 28 63 29 3a 61 29 3b 61 3d 62 74 6f 61 28 62 29 7d 65 6c 73 65 20 61 3d 5f 2e 78 62 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 7d 72 65 74 75 72 6e 20 61 7d 3b 0a 79 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 5f 2e 56 61 28 61 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 26 32 35 36 3f 64 5b 65 2d 31 5d 3a 76 6f 69 64 20 30 3b 65 2b 3d 66 3f 2d 31 3a 30 3b 66 6f 72 28 62 3d 62 26 35 31 32 3f 31 3a 30 3b 62 3c 65 3b 62 2b 2b 29 64 5b 62 5d 3d 63 28 64 5b 62 5d 29 3b 69 66 28 66 29 7b 62 3d 64 5b 62 5d 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 67 20 69 6e 20 66 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 Data Ascii: fromCharCode.apply(null,c?a.subarray(c):a);a=btoa(b)}else a=_.xb(a);return a}}return a};yb=function(a,b,c){var d=_.Va(a),e=d.length,f=b&256?d[e-1]:void 0;e+=f?-1:0;for(b=b&512?1:0;b<e;b++)d[b]=c(d[b]);if(f){b=d[b]={};for(var g in f)Object.prototype.hasOw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49929	104.21.80.92	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:42 UTC	491	OUT	GET /ng-assets/creative/assets/polyfills-a3f452c3.js HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce
2025-01-15 22:20:42 UTC	1210	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:42 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Expires: Wed, 15 Jan 2025 22:41:18 GMT Cache-Control: public, max-age=14400 Last-Modified: Tue, 12 Nov 2024 19:41:58 GMT ETag: W/"659a1ec658c77b9c936c856b9b72a548" x-goog-generation: 1731440518104785 x-goog-metageneration: 2 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 11824 x-goog-hash: crc32c=i96MsA== x-goog-hash: md5=ZZoexljHe5yTbIVrm3KlSA== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type X-GUploader-UploadID: AHmUCY1_7Cd07aw2aG5E5mTE1auU3-YKC1ZI0E3OwWV4zm-_TUW4rpuvcgoFZWLVnFOVviSc4Id_exDNKQ Vary: Accept-Encoding CF-Cache-Status: HIT Age: 1622 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PV%2F0N%2BolmOZbBtM4PYe0OUHN8vFqvlN%2B6IJAeBBTNTXeSkE6gQchHSqBCkcAyIr2fFi6%2BwJewZjxkux3l4%2FsovMTEv%2FmjZSqBWkp7I1kguHzCS%2F%2FaYvD%2BpTxgc%2BssKuVzS4b"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9029412bad63c936-IAD alt-svc: h3=":443"; ma=86400
2025-01-15 22:20:42 UTC	215	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 38 31 39 34 26 6d 69 6e 5f 72 74 74 3d 38 31 34 33 26 72 74 74 5f 76 61 72 3d 33 30 39 30 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 33 34 30 26 72 65 63 76 5f 62 79 74 65 73 3d 31 30 36 39 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 33 35 38 35 39 30 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 33 61 32 38 63 63 61 32 62 61 38 38 37 36 38 33 26 74 73 3d 31 37 34 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=8194&min_rtt=8143&rtt_var=3090&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2340&recv_bytes=1069&delivery_rate=358590&cwnd=32&unsent_bytes=0&cid=3a28cca2ba887683&ts=174&x=0"
2025-01-15 22:20:42 UTC	1313	IN	Data Raw: 32 65 33 30 0d 0a 65 78 70 6f 72 74 20 66 75 6e 63 74 69 6f 6e 20 5f 5f 76 69 74 65 5f 6c 65 67 61 63 79 5f 67 75 61 72 64 28 29 7b 69 6d 70 6f 72 74 2e 6d 65 74 61 2e 75 72 6c 3b 69 6d 70 6f 72 74 28 22 5f 22 29 2e 63 61 74 63 68 28 28 29 3d 3e 31 29 3b 28 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 7d 29 28 29 2e 6e 65 78 74 28 29 7d 3b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 Data Ascii: 2e30export function __vite_legacy_guard(){import.meta.url;import("_").catch(()=>1);(async function*(){})().next()};var t="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof se
2025-01-15 22:20:42 UTC	1369	IN	Data Raw: 4f 28 22 22 2e 73 70 6c 69 74 29 2c 4d 3d 54 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 46 28 22 7a 22 29 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 28 30 29 7d 29 29 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 53 74 72 69 6e 67 22 3d 3d 3d 41 28 74 29 3f 78 28 74 2c 22 22 29 3a 46 28 74 29 7d 3a 46 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 7d 2c 49 3d 43 2c 6b 3d 54 79 70 65 45 72 72 6f 72 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 49 28 74 29 29 74 68 72 6f 77 20 6e 65 77 20 6b 28 22 43 61 6e 27 74 20 63 61 6c 6c 20 6d 65 74 68 6f 64 20 6f 6e 20 22 2b 74 29 3b 72 65 74 75 72 6e 20 74 7d 2c 4c 3d 4d 2c 4e 3d 7a 2c 44 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: O("".split),M=T((function(){return!F("z").propertyIsEnumerable(0)}))?function(t){return"String"===A(t)?x(t,""):F(t)}:F,C=function(t){return null==t},I=C,k=TypeError,z=function(t){if(I(t))throw new k("Can't call method on "+t);return t},L=M,N=z,D=function(
2025-01-15 22:20:42 UTC	1369	IN	Data Raw: 73 74 28 6c 74 28 74 29 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 2c 79 74 3d 70 74 2c 62 74 3d 43 2c 76 74 3d 66 2c 67 74 3d 5f 2c 68 74 3d 55 2c 64 74 3d 54 79 70 65 45 72 72 6f 72 2c 6d 74 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 77 74 3d 72 2c 4f 74 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 53 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 74 72 79 7b 4f 74 28 77 74 2c 74 2c 7b 76 61 6c 75 65 3a 6e 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 7d 63 61 74 63 68 28 72 29 7b 77 74 5b 74 5d 3d 6e 7d 72 65 74 75 72 6e 20 6e 7d 2c 6a 74 3d 72 2c 50 74 3d 53 74 2c 45 74 3d 22 5f 5f 63 6f 72 65 2d 6a 73 5f 73 68 61 72 65 64 5f 5f 22 2c 54 74 3d 6d 74 2e 65 78 Data Ascii: st(lt(t)+" is not a function")},yt=pt,bt=C,vt=f,gt=_,ht=U,dt=TypeError,mt={exports:{}},wt=r,Ot=Object.defineProperty,St=function(t,n){try{Ot(wt,t,{value:n,configurable:!0,writable:!0})}catch(r){wt[t]=n}return n},jt=r,Pt=St,Et="__core-js_shared__",Tt=mt.ex
2025-01-15 22:20:42 UTC	1369	IN	Data Raw: 69 6f 6e 28 74 2c 6e 29 7b 69 66 28 21 4a 74 28 74 29 7c 7c 51 74 28 74 29 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 72 2c 65 3d 5a 74 28 74 2c 72 6e 29 3b 69 66 28 65 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 22 64 65 66 61 75 6c 74 22 29 2c 72 3d 48 74 28 65 2c 74 2c 6e 29 2c 21 4a 74 28 72 29 7c 7c 51 74 28 72 29 29 72 65 74 75 72 6e 20 72 3b 74 68 72 6f 77 20 6e 65 77 20 6e 6e 28 22 43 61 6e 27 74 20 63 6f 6e 76 65 72 74 20 6f 62 6a 65 63 74 20 74 6f 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 22 29 7d 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 22 6e 75 6d 62 65 72 22 29 2c 74 6e 28 74 2c 6e 29 7d 2c 6f 6e 3d 63 74 2c 75 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 65 6e 28 74 2c 22 73 74 72 Data Ascii: ion(t,n){if(!Jt(t)\|\|Qt(t))return t;var r,e=Zt(t,rn);if(e){if(void 0===n&&(n="default"),r=Ht(e,t,n),!Jt(r)\|\|Qt(r))return r;throw new nn("Can't convert object to primitive value")}return void 0===n&&(n="number"),tn(t,n)},on=ct,un=function(t){var n=en(t,"str
2025-01-15 22:20:42 UTC	1369	IN	Data Raw: 6e 20 6b 6e 28 74 2c 6e 2c 72 29 7d 63 61 74 63 68 28 65 29 7b 7d 69 66 28 22 67 65 74 22 69 6e 20 72 7c 7c 22 73 65 74 22 69 6e 20 72 29 74 68 72 6f 77 20 6e 65 77 20 49 6e 28 22 41 63 63 65 73 73 6f 72 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 29 3b 72 65 74 75 72 6e 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 74 5b 6e 5d 3d 72 2e 76 61 6c 75 65 29 2c 74 7d 3b 76 61 72 20 52 6e 3d 4f 6e 2c 5f 6e 3d 67 2c 47 6e 3d 69 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 52 6e 2e 66 28 74 2c 6e 2c 5f 6e 28 31 2c 72 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 74 5b 6e 5d 3d 72 2c 74 7d 2c 55 6e 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 57 6e 3d 69 2c 42 6e 3d 4c 74 2c 24 6e 3d 46 75 6e 63 74 69 6f Data Ascii: n kn(t,n,r)}catch(e){}if("get"in r\|\|"set"in r)throw new In("Accessors not supported");return"value"in r&&(t[n]=r.value),t};var Rn=On,_n=g,Gn=i?function(t,n,r){return Rn.f(t,n,_n(1,r))}:function(t,n,r){return t[n]=r,t},Un={exports:{}},Wn=i,Bn=Lt,$n=Functio
2025-01-15 22:20:42 UTC	1369	IN	Data Raw: 72 3d 51 6e 28 6e 29 29 2e 74 79 70 65 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 67 72 28 22 49 6e 63 6f 6d 70 61 74 69 62 6c 65 20 72 65 63 65 69 76 65 72 2c 20 22 2b 74 2b 22 20 72 65 71 75 69 72 65 64 22 29 3b 72 65 74 75 72 6e 20 72 7d 7d 7d 2c 4f 72 3d 4f 2c 53 72 3d 6f 2c 6a 72 3d 5f 2c 50 72 3d 4c 74 2c 45 72 3d 69 2c 54 72 3d 56 6e 2e 43 4f 4e 46 49 47 55 52 41 42 4c 45 2c 41 72 3d 74 72 2c 46 72 3d 77 72 2e 65 6e 66 6f 72 63 65 2c 78 72 3d 77 72 2e 67 65 74 2c 4d 72 3d 53 74 72 69 6e 67 2c 43 72 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 49 72 3d 4f 72 28 22 22 2e 73 6c 69 63 65 29 2c 6b 72 3d 4f 72 28 22 22 2e 72 65 70 6c 61 63 65 29 2c 7a 72 3d 4f 72 28 5b 5d 2e 6a 6f 69 6e 29 2c 4c 72 3d 45 72 26 26 21 53 72 28 28 Data Ascii: r=Qn(n)).type!==t)throw new gr("Incompatible receiver, "+t+" required");return r}}},Or=O,Sr=o,jr=_,Pr=Lt,Er=i,Tr=Vn.CONFIGURABLE,Ar=tr,Fr=wr.enforce,xr=wr.get,Mr=String,Cr=Object.defineProperty,Ir=Or("".slice),kr=Or("".replace),zr=Or([].join),Lr=Er&&!Sr((
2025-01-15 22:20:42 UTC	1369	IN	Data Raw: 28 72 2c 6e 29 7d 2c 65 65 3d 74 65 2c 6f 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 65 29 7b 76 61 72 20 6f 3d 6e 65 28 6e 29 2c 69 3d 65 65 28 6f 29 3b 69 66 28 30 3d 3d 3d 69 29 72 65 74 75 72 6e 21 74 26 26 2d 31 3b 76 61 72 20 75 2c 63 3d 72 65 28 65 2c 69 29 3b 69 66 28 74 26 26 72 21 3d 72 29 7b 66 6f 72 28 3b 69 3e 63 3b 29 69 66 28 28 75 3d 6f 5b 63 2b 2b 5d 29 21 3d 75 29 72 65 74 75 72 6e 21 30 7d 65 6c 73 65 20 66 6f 72 28 3b 69 3e 63 3b 63 2b 2b 29 69 66 28 28 74 7c 7c 63 20 69 6e 20 6f 29 26 26 6f 5b 63 5d 3d 3d 3d 72 29 72 65 74 75 72 6e 20 74 7c 7c 63 7c 7c 30 3b 72 65 74 75 72 6e 21 74 26 26 2d 31 7d 7d 2c 69 65 3d 7b 69 6e 63 6c 75 64 65 73 3a 6f 65 28 21 30 29 2c 69 6e 64 65 78 Data Ascii: (r,n)},ee=te,oe=function(t){return function(n,r,e){var o=ne(n),i=ee(o);if(0===i)return!t&&-1;var u,c=re(e,i);if(t&&r!=r){for(;i>c;)if((u=o[c++])!=u)return!0}else for(;i>c;c++)if((t\|\|c in o)&&o[c]===r)return t\|\|c\|\|0;return!t&&-1}},ie={includes:oe(!0),index
2025-01-15 22:20:42 UTC	1369	IN	Data Raw: 21 65 2e 6e 6f 6e 57 72 69 74 61 62 6c 65 7d 29 7d 72 65 74 75 72 6e 20 74 7d 2c 44 65 3d 53 74 2c 52 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 66 6f 72 28 76 61 72 20 65 3d 4f 65 28 6e 29 2c 6f 3d 6a 65 2e 66 2c 69 3d 53 65 2e 66 2c 75 3d 30 3b 75 3c 65 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 7b 76 61 72 20 63 3d 65 5b 75 5d 3b 77 65 28 74 2c 63 29 7c 7c 72 26 26 77 65 28 72 2c 63 29 7c 7c 6f 28 74 2c 63 2c 69 28 6e 2c 63 29 29 7d 7d 2c 5f 65 3d 49 65 2c 47 65 3d 45 2c 55 65 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 41 72 72 61 79 22 3d 3d 3d 47 65 28 74 29 7d 2c 57 65 3d 54 79 70 65 45 72 72 6f 72 2c 42 65 3d 45 2c 24 65 3d 4f 2c 71 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 Data Ascii: !e.nonWritable})}return t},De=St,Re=function(t,n,r){for(var e=Oe(n),o=je.f,i=Se.f,u=0;u<e.length;u++){var c=e[u];we(t,c)\|\|r&&we(r,c)\|\|o(t,c,i(n,c))}},_e=Ie,Ge=E,Ue=Array.isArray\|\|function(t){return"Array"===Ge(t)},We=TypeError,Be=E,$e=O,qe=function(t){if(
2025-01-15 22:20:42 UTC	936	IN	Data Raw: 73 79 6e 63 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 3a 72 65 74 75 72 6e 21 31 7d 74 72 79 7b 72 65 74 75 72 6e 20 68 6f 7c 7c 21 21 67 6f 28 76 6f 2c 70 6f 28 74 29 29 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 21 30 7d 7d 3b 77 6f 2e 73 68 61 6d 3d 21 30 3b 76 61 72 20 4f 6f 3d 21 62 6f 7c 7c 66 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 6d 6f 28 6d 6f 2e 63 61 6c 6c 29 7c 7c 21 6d 6f 28 4f 62 6a 65 63 74 29 7c 7c 21 6d 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 3d 21 30 7d 29 29 7c 7c 74 7d 29 29 3f 77 6f 3a 6d 6f 2c 53 6f 3d 55 65 2c 6a 6f 3d 4f 6f 2c 50 6f 3d 55 2c 45 6f 3d 59 74 28 22 73 70 65 63 69 65 73 22 29 2c 54 6f 3d 41 72 72 61 79 2c 41 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 Data Ascii: syncGeneratorFunction":return!1}try{return ho\|\|!!go(vo,po(t))}catch(n){return!0}};wo.sham=!0;var Oo=!bo\|\|fo((function(){var t;return mo(mo.call)\|\|!mo(Object)\|\|!mo((function(){t=!0}))\|\|t}))?wo:mo,So=Ue,jo=Oo,Po=U,Eo=Yt("species"),To=Array,Ao=function(t){va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49927	104.21.80.92	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:42 UTC	487	OUT	GET /ng-assets/creative/assets/index-5333d910.js HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce
2025-01-15 22:20:42 UTC	1284	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:42 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close X-GUploader-UploadID: AFIdbgQIAoHbEDiNyWhXiIYI1eJnvLlJY_Kr8lTpr0-hSjWEq_NvZ6WqiWGWJnIgj69ruc_9 x-goog-generation: 1736071571089501 x-goog-metageneration: 2 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 141707 x-goog-hash: crc32c=90RuKA== x-goog-hash: md5=27il8MB3nCC3M+y3OkIWBQ== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Wed, 15 Jan 2025 21:45:34 GMT Cache-Control: public, max-age=14400 Last-Modified: Sun, 05 Jan 2025 10:06:11 GMT ETag: W/"dbb8a5f0c0779c20b733ecb73a421605" Vary: Accept-Encoding Age: 2894 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YFXdYeB6oCKR6L038%2FDH8JseSMvTJ7GWbMl8wjQPz5kk2YOhXEU1LNGYRavqMFTW2O9Xi0jwtKSunRY3c3E1rSz%2FUuxP%2FI8jRvb%2Bg%2F%2Bfx2LHxiRn3KcbgUa%2FH%2BUonc7LiXCZ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9029412b8aa387a1-IAD alt-svc: h3=":443"; ma=86400
2025-01-15 22:20:42 UTC	215	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 36 38 34 32 26 6d 69 6e 5f 72 74 74 3d 36 38 33 34 26 72 74 74 5f 76 61 72 3d 32 35 38 30 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 33 33 38 26 72 65 63 76 5f 62 79 74 65 73 3d 31 30 36 35 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 34 32 33 30 30 34 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 33 37 38 38 33 32 65 36 35 38 64 32 39 37 65 33 26 74 73 3d 31 36 35 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=6842&min_rtt=6834&rtt_var=2580&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2338&recv_bytes=1065&delivery_rate=423004&cwnd=32&unsent_bytes=0&cid=378832e658d297e3&ts=165&x=0"
2025-01-15 22:20:42 UTC	1239	IN	Data Raw: 37 61 39 63 0d 0a 76 61 72 20 6f 69 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 73 69 3d 28 65 2c 74 2c 6e 29 3d 3e 74 20 69 6e 20 65 3f 6f 69 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 65 5b 74 5d 3d 6e 3b 76 61 72 20 6a 3d 28 65 2c 74 2c 6e 29 3d 3e 28 73 69 28 65 2c 74 79 70 65 6f 66 20 74 21 3d 22 73 79 6d 62 6f 6c 22 3f 74 2b 22 22 3a 74 2c 6e 29 2c 6e 29 3b 66 75 6e 63 74 69 6f 6e 20 4d 68 28 29 7b 69 6d 70 6f 72 74 2e 6d 65 74 61 2e 75 72 6c 2c 69 6d 70 6f 72 74 28 22 5f 22 29 2e 63 61 74 63 68 28 28 29 3d 3e 31 29 2c 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 7d 28 29 2e Data Ascii: 7a9cvar oi=Object.defineProperty;var si=(e,t,n)=>t in e?oi(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n;var j=(e,t,n)=>(si(e,typeof t!="symbol"?t+"":t,n),n);function Mh(){import.meta.url,import("_").catch(()=>1),async function*(){}().
2025-01-15 22:20:42 UTC	1369	IN	Data Raw: 69 3d 7b 7d 3b 66 6f 72 28 73 20 69 6e 20 74 29 73 3d 3d 22 6b 65 79 22 3f 72 3d 74 5b 73 5d 3a 73 3d 3d 22 72 65 66 22 3f 6f 3d 74 5b 73 5d 3a 69 5b 73 5d 3d 74 5b 73 5d 3b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 28 69 2e 63 68 69 6c 64 72 65 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 33 3f 5f 6e 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 32 29 3a 6e 29 2c 74 79 70 65 6f 66 20 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 21 3d 6e 75 6c 6c 29 66 6f 72 28 73 20 69 6e 20 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 29 69 5b 73 5d 3d 3d 3d 76 6f 69 64 20 30 26 26 28 69 5b 73 5d 3d 65 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 5b 73 5d 29 3b 72 65 74 75 72 6e 20 7a 74 28 65 2c Data Ascii: i={};for(s in t)s=="key"?r=t[s]:s=="ref"?o=t[s]:i[s]=t[s];if(arguments.length>2&&(i.children=arguments.length>3?_n.call(arguments,2):n),typeof e=="function"&&e.defaultProps!=null)for(s in e.defaultProps)i[s]===void 0&&(i[s]=e.defaultProps[s]);return zt(e,
2025-01-15 22:20:42 UTC	1369	IN	Data Raw: 28 69 2c 72 2c 63 29 2c 72 2e 5f 5f 65 21 3d 73 26 26 48 6f 28 72 29 29 2c 63 74 2e 6c 65 6e 67 74 68 3e 74 26 26 63 74 2e 73 6f 72 74 28 6a 6e 29 29 3b 65 6e 2e 5f 5f 72 3d 30 7d 66 75 6e 63 74 69 6f 6e 20 46 6f 28 65 2c 74 2c 6e 2c 72 2c 6f 2c 73 2c 69 2c 63 2c 75 2c 61 2c 66 29 7b 76 61 72 20 6c 2c 79 2c 68 2c 62 2c 41 2c 53 3d 72 26 26 72 2e 5f 5f 6b 7c 7c 55 6f 2c 45 3d 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 6e 2e 5f 5f 64 3d 75 2c 63 69 28 6e 2c 74 2c 53 29 2c 75 3d 6e 2e 5f 5f 64 2c 6c 3d 30 3b 6c 3c 45 3b 6c 2b 2b 29 28 68 3d 6e 2e 5f 5f 6b 5b 6c 5d 29 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 68 21 3d 22 62 6f 6f 6c 65 61 6e 22 26 26 74 79 70 65 6f 66 20 68 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 79 3d 68 2e 5f 5f 69 3d 3d 3d 2d 31 3f 54 Data Ascii: (i,r,c),r.__e!=s&&Ho(r)),ct.length>t&&ct.sort(jn));en.__r=0}function Fo(e,t,n,r,o,s,i,c,u,a,f){var l,y,h,b,A,S=r&&r.__k\|\|Uo,E=t.length;for(n.__d=u,ci(n,t,S),u=n.__d,l=0;l<E;l++)(h=n.__k[l])!=null&&typeof h!="boolean"&&typeof h!="function"&&(y=h.__i===-1?T
2025-01-15 22:20:42 UTC	1369	IN	Data Raw: 3d 30 3b 72 3c 61 3b 72 2b 2b 29 28 73 3d 6e 5b 72 5d 29 21 3d 6e 75 6c 6c 26 26 21 28 31 33 31 30 37 32 26 73 2e 5f 5f 75 29 26 26 28 73 2e 5f 5f 65 3d 3d 65 2e 5f 5f 64 26 26 28 65 2e 5f 5f 64 3d 75 74 28 73 29 29 2c 44 6e 28 73 2c 73 29 29 7d 66 75 6e 63 74 69 6f 6e 20 57 6f 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 6f 3b 69 66 28 74 79 70 65 6f 66 20 65 2e 74 79 70 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 66 6f 72 28 72 3d 65 2e 5f 5f 6b 2c 6f 3d 30 3b 72 26 26 6f 3c 72 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 72 5b 6f 5d 26 26 28 72 5b 6f 5d 2e 5f 5f 3d 65 2c 74 3d 57 6f 28 72 5b 6f 5d 2c 74 2c 6e 29 29 3b 72 65 74 75 72 6e 20 74 7d 65 2e 5f 5f 65 21 3d 74 26 26 28 6e 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2e 5f 5f 65 2c 74 7c 7c 6e 75 6c 6c 29 Data Ascii: =0;r<a;r++)(s=n[r])!=null&&!(131072&s.__u)&&(s.__e==e.__d&&(e.__d=ut(s)),Dn(s,s))}function Wo(e,t,n){var r,o;if(typeof e.type=="function"){for(r=e.__k,o=0;r&&o<r.length;o++)r[o]&&(r[o].__=e,t=Wo(r[o],t,n));return t}e.__e!=t&&(n.insertBefore(e.__e,t\|\|null)
2025-01-15 22:20:42 UTC	1369	IN	Data Raw: 6e 65 72 28 74 2c 73 3f 4d 6e 3a 4e 6e 2c 73 29 29 3a 65 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 73 3f 4d 6e 3a 4e 6e 2c 73 29 3b 65 6c 73 65 7b 69 66 28 6f 3d 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 29 74 3d 74 2e 72 65 70 6c 61 63 65 28 2f 78 6c 69 6e 6b 28 48 7c 3a 68 29 2f 2c 22 68 22 29 2e 72 65 70 6c 61 63 65 28 2f 73 4e 61 6d 65 24 2f 2c 22 73 22 29 3b 65 6c 73 65 20 69 66 28 74 21 3d 22 77 69 64 74 68 22 26 26 74 21 3d 22 68 65 69 67 68 74 22 26 26 74 21 3d 22 68 72 65 66 22 26 26 74 21 3d 22 6c 69 73 74 22 26 26 74 21 3d 22 66 6f 72 6d 22 26 26 74 21 3d 22 74 61 62 49 6e 64 65 78 22 26 26 74 21 3d 22 64 6f 77 6e 6c 6f 61 64 22 26 26 74 21 3d 22 72 6f 77 53 70 61 6e 22 26 Data Ascii: ner(t,s?Mn:Nn,s)):e.removeEventListener(t,s?Mn:Nn,s);else{if(o=="http://www.w3.org/2000/svg")t=t.replace(/xlink(H\|:h)/,"h").replace(/sName$/,"s");else if(t!="width"&&t!="height"&&t!="href"&&t!="list"&&t!="form"&&t!="tabIndex"&&t!="download"&&t!="rowSpan"&
2025-01-15 22:20:42 UTC	1369	IN	Data Raw: 26 26 6c 2e 5f 5f 68 2e 70 75 73 68 28 6c 2e 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 4d 6f 75 6e 74 29 3b 65 6c 73 65 7b 69 66 28 4b 2e 67 65 74 44 65 72 69 76 65 64 53 74 61 74 65 46 72 6f 6d 50 72 6f 70 73 3d 3d 6e 75 6c 6c 26 26 45 21 3d 3d 68 26 26 6c 2e 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 52 65 63 65 69 76 65 50 72 6f 70 73 21 3d 6e 75 6c 6c 26 26 6c 2e 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 52 65 63 65 69 76 65 50 72 6f 70 73 28 45 2c 58 29 2c 21 6c 2e 5f 5f 65 26 26 28 6c 2e 73 68 6f 75 6c 64 43 6f 6d 70 6f 6e 65 6e 74 55 70 64 61 74 65 21 3d 6e 75 6c 6c 26 26 6c 2e 73 68 6f 75 6c 64 43 6f 6d 70 6f 6e 65 6e 74 55 70 64 61 74 65 28 45 2c 6c 2e 5f 5f 73 2c 58 29 3d 3d 3d 21 31 7c 7c 74 2e 5f 5f 76 3d 3d 3d 6e 2e 5f 5f 76 29 29 7b 66 6f 72 28 74 2e 5f Data Ascii: &&l.__h.push(l.componentDidMount);else{if(K.getDerivedStateFromProps==null&&E!==h&&l.componentWillReceiveProps!=null&&l.componentWillReceiveProps(E,X),!l.__e&&(l.shouldComponentUpdate!=null&&l.shouldComponentUpdate(E,l.__s,X)===!1\|\|t.__v===n.__v)){for(t._
2025-01-15 22:20:42 UTC	1369	IN	Data Raw: 3d 3d 6e 2e 5f 5f 76 3f 28 74 2e 5f 5f 6b 3d 6e 2e 5f 5f 6b 2c 74 2e 5f 5f 65 3d 6e 2e 5f 5f 65 29 3a 74 2e 5f 5f 65 3d 61 69 28 6e 2e 5f 5f 65 2c 74 2c 6e 2c 72 2c 6f 2c 73 2c 69 2c 75 2c 61 29 3b 28 66 3d 44 2e 64 69 66 66 65 64 29 26 26 66 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 6f 28 65 2c 74 2c 6e 29 7b 74 2e 5f 5f 64 3d 76 6f 69 64 20 30 3b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 6e 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 61 72 28 6e 5b 72 5d 2c 6e 5b 2b 2b 72 5d 2c 6e 5b 2b 2b 72 5d 29 3b 44 2e 5f 5f 63 26 26 44 2e 5f 5f 63 28 74 2c 65 29 2c 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 74 72 79 7b 65 3d 6f 2e 5f 5f 68 2c 6f 2e 5f 5f 68 3d 5b 5d 2c 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 73 29 7b 73 2e 63 61 6c 6c 28 6f 29 7d 29 Data Ascii: ==n.__v?(t.__k=n.__k,t.__e=n.__e):t.__e=ai(n.__e,t,n,r,o,s,i,u,a);(f=D.diffed)&&f(t)}function zo(e,t,n){t.__d=void 0;for(var r=0;r<n.length;r++)ar(n[r],n[++r],n[++r]);D.__c&&D.__c(t,e),e.some(function(o){try{e=o.__h,o.__h=[],e.some(function(s){s.call(o)})
2025-01-15 22:20:42 UTC	1369	IN	Data Raw: 69 66 28 6c 26 26 28 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 22 29 2c 46 6f 28 65 2c 68 6e 28 79 29 3f 79 3a 5b 79 5d 2c 74 2c 6e 2c 72 2c 52 3d 3d 3d 22 66 6f 72 65 69 67 6e 4f 62 6a 65 63 74 22 3f 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3a 6f 2c 73 2c 69 2c 73 3f 73 5b 30 5d 3a 6e 2e 5f 5f 6b 26 26 75 74 28 6e 2c 30 29 2c 63 2c 75 29 2c 73 21 3d 6e 75 6c 6c 29 66 6f 72 28 61 3d 73 2e 6c 65 6e 67 74 68 3b 61 2d 2d 3b 29 73 5b 61 5d 21 3d 6e 75 6c 6c 26 26 42 6f 28 73 5b 61 5d 29 3b 63 7c 7c 28 61 3d 22 76 61 6c 75 65 22 2c 62 21 3d 3d 76 6f 69 64 20 30 26 26 28 62 21 3d 3d 65 5b 61 5d 7c 7c 52 3d 3d 3d 22 70 72 6f 67 72 65 73 73 22 26 26 21 62 7c 7c 52 3d 3d 3d 22 6f 70 74 69 6f 6e 22 26 26 62 21 3d 3d 53 Data Ascii: if(l&&(e.innerHTML=""),Fo(e,hn(y)?y:[y],t,n,r,R==="foreignObject"?"http://www.w3.org/1999/xhtml":o,s,i,s?s[0]:n.__k&&ut(n,0),c,u),s!=null)for(a=s.length;a--;)s[a]!=null&&Bo(s[a]);c\|\|(a="value",b!==void 0&&(b!==e[a]\|\|R==="progress"&&!b\|\|R==="option"&&b!==S
2025-01-15 22:20:42 UTC	1369	IN	Data Raw: 61 74 63 68 28 63 29 7b 65 3d 63 7d 74 68 72 6f 77 20 65 7d 7d 2c 44 6f 3d 30 2c 4a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 53 74 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 6e 3d 74 68 69 73 2e 5f 5f 73 21 3d 6e 75 6c 6c 26 26 74 68 69 73 2e 5f 5f 73 21 3d 3d 74 68 69 73 2e 73 74 61 74 65 3f 74 68 69 73 2e 5f 5f 73 3a 74 68 69 73 2e 5f 5f 73 3d 74 74 28 7b 7d 2c 74 68 69 73 2e 73 74 61 74 65 29 2c 74 79 70 65 6f 66 20 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 28 65 3d 65 28 74 74 28 7b 7d 2c 6e 29 2c 74 68 69 73 2e 70 72 6f 70 73 29 29 2c 65 26 26 74 74 28 6e 2c 65 29 2c 65 21 3d 6e 75 6c 6c 26 26 74 68 69 73 2e 5f 5f 76 26 26 28 74 26 26 74 68 69 73 2e 5f 73 62 2e 70 75 73 68 28 74 29 2c 4f 72 28 74 68 69 73 29 29 7d Data Ascii: atch(c){e=c}throw e}},Do=0,Je.prototype.setState=function(e,t){var n;n=this.__s!=null&&this.__s!==this.state?this.__s:this.__s=tt({},this.state),typeof e=="function"&&(e=e(tt({},n),this.props)),e&&tt(n,e),e!=null&&this.__v&&(t&&this._sb.push(t),Or(this))}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49930	104.21.80.92	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:42 UTC	952	OUT	GET /sig.js?rpclid=f28d8534-d38e-11ef-93a7-aab196f2f20d&params=Nb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkPejZgAKFm3ZlUxHBNGiYcbgU5DmL2JgBOnA6uq5HqYXDGOAkkcHp77mTvilkZ5d9Q2rpDl_8WOAn-k2Y5V9CBXA9Hn2pQTPVn67DMY2sybqayiZvf5flizO3fgV6Cw9N2-R52IBOSmAosKxVeFWSaITqzx-S70fbalfXf6j_MGyOC9eAxeZ7JGLaNEYTuDszAbHweW2Joh-qvwh3aS1didawvBHLOP-V2AJ9n6wIzxxqj8vOzYkgNldKNUmJt1QcCV7gcheIGQeY618UdBWcgJbQ4H-Y9TkqHO2sUSV-RHzJCsRWDjhnFAPFm7pN506i_DH--SzmnConwZt5nHCFtvPxN2SulUo9 HTTP/1.1 Host: serve.bidbrain.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce
2025-01-15 22:20:42 UTC	1169	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:42 GMT Content-Type: text/javascript Content-Length: 9487 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Via: 1.1 google CF-Cache-Status: BYPASS Set-Cookie: uid=f3b61b5a-d38e-11ef-abcc-b61a6926ccce; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: mid=f28d8534-d38e-11ef-93a7-aab196f2f20d; Domain=.bidbrain.app; Max-Age=7200; Path=/ Accept-Ranges: bytes
2025-01-15 22:20:42 UTC	628	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 71 6c 4c 6f 65 35 69 65 7a 4a 25 32 42 51 79 51 33 78 6c 68 68 71 67 76 25 32 46 71 46 37 39 6b 30 57 33 48 4d 69 61 70 78 4d 57 63 52 4d 25 32 42 35 55 59 56 45 66 70 53 4f 33 77 4a 55 47 77 47 73 57 61 35 64 71 76 4a 41 77 67 7a 69 6c 50 32 58 52 74 77 25 32 46 61 62 67 30 39 47 73 73 72 64 50 63 66 55 75 57 6f 56 6f 79 67 65 6b 65 56 46 46 57 6d 76 4c 70 4f 6a 43 32 73 45 38 25 32 46 67 73 6b 56 47 41 4c 4a 54 51 71 53 44 72 6b 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qlLoe5iezJ%2BQyQ3xlhhqgv%2FqF79k0W3HMiapxMWcRM%2B5UYVEfpSO3wJUGwGsWa5dqvJAwgzilP2XRtw%2Fabg09GssrdPcfUuWoVoygekeVFFWmvLpOjC2sE8%2FgskVGALJTQqSDrk%3D"}],"group":"cf-nel","max_age
2025-01-15 22:20:42 UTC	941	IN	Data Raw: 76 61 72 20 70 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 66 3d 28 6d 2c 71 2c 6e 29 3d 3e 71 20 69 6e 20 6d 3f 70 28 6d 2c 71 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 6d 5b 71 5d 3d 6e 2c 68 3d 28 6d 2c 71 2c 6e 29 3d 3e 28 66 28 6d 2c 22 73 79 6d 62 6f 6c 22 21 3d 74 79 70 65 6f 66 20 71 3f 71 2b 22 22 3a 71 2c 6e 29 2c 6e 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 3f 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 28 22 66 6c 5f 22 2b 61 2c 62 29 3a 28 44 7c 7c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 71 2c 31 30 Data Ascii: var p=Object.defineProperty,f=(m,q,n)=>q in m?p(m,q,{enumerable:!0,configurable:!0,writable:!0,value:n}):m[q]=n,h=(m,q,n)=>(f(m,"symbol"!=typeof q?q+"":q,n),n);(function(){function m(a,b){window.sendEvent?window.sendEvent("fl_"+a,b):(D\|\|=setInterval(q,10
2025-01-15 22:20:42 UTC	1369	IN	Data Raw: 3e 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 64 28 45 72 72 6f 72 28 62 3f 3f 60 74 69 6d 65 6f 75 74 20 24 7b 61 7d 60 29 29 7d 2c 61 29 7d 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4a 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 61 63 65 28 5b 61 2c 49 28 62 2c 63 29 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 62 3d 3e 73 65 74 54 69 6d 65 6f 75 74 28 62 2c 61 29 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4c 28 61 2c 62 2c 63 29 7b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 63 3b 65 2b 2b 29 7b 76 61 72 20 64 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 0a 61 77 61 69 74 20 61 28 29 3b 64 3d 62 2d 28 70 65 72 66 6f 72 6d 61 6e Data Ascii: >{setTimeout(()=>{d(Error(b??`timeout ${a}`))},a)})}async function J(a,b,c){return Promise.race([a,I(b,c)])}function K(a){return new Promise(b=>setTimeout(b,a))}async function L(a,b,c){for(let e=0;e<c;e++){var d=performance.now();await a();d=b-(performan
2025-01-15 22:20:42 UTC	1369	IN	Data Raw: 72 6f 72 20 69 6e 76 6f 6b 69 6e 67 20 72 65 61 64 79 22 2c 63 29 7d 7d 29 3a 74 68 69 73 2e 72 65 61 64 79 28 29 7d 69 6e 69 74 69 61 6c 69 7a 65 28 29 7b 7d 72 65 61 64 79 28 29 7b 7d 72 65 70 6f 72 74 28 61 2c 62 29 7b 6d 28 75 2e 53 69 67 6e 61 6c 2c 7b 6e 61 6d 65 3a 74 68 69 73 2e 6e 61 6d 65 2c 73 75 63 63 65 73 73 3a 61 2c 66 61 69 6c 3a 62 7d 29 7d 72 65 70 6f 72 74 45 72 72 6f 72 28 61 2c 62 29 7b 6e 28 60 24 7b 74 68 69 73 2e 6e 61 6d 65 7d 5b 24 7b 74 68 69 73 2e 63 6f 6e 66 69 67 2e 74 79 70 65 7d 5d 3a 20 24 7b 61 7d 60 2c 62 29 7d 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 6c 65 74 20 6b 3d 30 3b 63 6f 6e 73 74 20 67 3d 72 3d 3e 7b 74 72 79 7b 62 28 72 29 7d 63 61 74 63 68 28 74 29 7b 74 68 69 73 2e Data Ascii: ror invoking ready",c)}}):this.ready()}initialize(){}ready(){}report(a,b){m(u.Signal,{name:this.name,success:a,fail:b})}reportError(a,b){n(`${this.name}[${this.config.type}]: ${a}`,b)}addEventListener(a,b,c,d,e){let k=0;const g=r=>{try{b(r)}catch(t){this.
2025-01-15 22:20:42 UTC	1369	IN	Data Raw: 62 2e 70 72 65 70 65 6e 64 28 61 29 3a 62 2e 61 70 70 65 6e 64 28 61 29 7d 67 65 74 50 61 72 65 6e 74 45 6c 65 6d 65 6e 74 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 0a 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 61 29 3a 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 7d 6f 6e 45 6c 65 6d 65 6e 74 43 6c 69 63 6b 28 61 29 7b 63 6f 6e 73 74 20 62 3d 61 2e 74 61 72 67 65 74 3b 62 2e 73 74 79 6c 65 2e 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3d 22 6e 6f 6e 65 22 3b 63 6f 6e 73 74 20 63 3d 64 6f 63 75 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 46 72 6f 6d 50 6f 69 6e 74 28 61 2e 63 6c 69 65 6e 74 58 2c 61 2e 63 6c 69 65 6e 74 59 29 3b 69 66 28 62 2e 73 74 79 6c 65 2e 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3d 22 61 75 74 6f 22 2c 63 26 26 63 21 3d 3d 62 29 Data Ascii: b.prepend(a):b.append(a)}getParentElement(a){return a?document.querySelector(a):document.body}onElementClick(a){const b=a.target;b.style.pointerEvents="none";const c=document.elementFromPoint(a.clientX,a.clientY);if(b.style.pointerEvents="auto",c&&c!==b)
2025-01-15 22:20:42 UTC	1369	IN	Data Raw: 6f 6c 75 74 69 6f 6e 22 29 3b 68 28 74 68 69 73 2c 22 61 6e 67 6c 65 52 65 73 6f 6c 75 74 69 6f 6e 22 29 3b 68 28 74 68 69 73 2c 22 6d 6f 75 73 65 44 61 74 61 41 72 72 61 79 22 29 3b 74 68 69 73 2e 65 76 65 6e 74 73 57 69 6e 64 6f 77 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 65 76 65 6e 74 73 57 69 6e 64 6f 77 3f 3f 32 30 30 3b 74 68 69 73 2e 6d 69 6e 54 69 6d 65 44 65 6c 74 61 4d 73 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 69 6e 54 69 6d 65 44 65 6c 74 61 4d 73 3f 3f 32 30 3b 74 68 69 73 2e 6d 69 6e 44 69 73 74 61 6e 63 65 50 78 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 69 6e 44 69 73 74 61 6e 63 65 50 78 3f 3f 0a 31 30 3b 74 68 69 73 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 76 65 6c 6f 63 69 74 79 52 Data Ascii: olution");h(this,"angleResolution");h(this,"mouseDataArray");this.eventsWindow=this.config.eventsWindow??200;this.minTimeDeltaMs=this.config.minTimeDeltaMs??20;this.minDistancePx=this.config.minDistancePx??10;this.velocityResolution=this.config.velocityR
2025-01-15 22:20:42 UTC	1369	IN	Data Raw: 20 30 3d 3d 3d 6b 7c 7c 4d 61 74 68 2e 61 62 73 28 42 2d 6b 29 3e 3d 74 68 69 73 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 29 26 26 28 62 2e 79 2e 63 6f 75 6e 74 55 6e 69 71 75 65 2b 2b 2c 6b 3d 42 29 3b 63 2e 70 75 73 68 28 41 29 3b 64 2e 70 75 73 68 28 42 29 3b 76 61 72 20 74 3d 47 2c 54 3d 74 68 69 73 2e 61 6e 67 6c 65 52 65 73 6f 6c 75 74 69 6f 6e 2c 43 3b 28 43 3d 76 6f 69 64 20 30 3d 3d 3d 67 29 7c 7c 28 74 3d 4d 61 74 68 2e 61 62 73 28 74 2d 67 29 25 33 36 30 2c 43 3d 4d 61 74 68 2e 6d 69 6e 28 33 36 30 2d 74 2c 74 29 3e 3d 54 29 3b 43 26 26 28 72 2b 2b 2c 67 3d 47 29 7d 74 68 69 73 2e 72 65 70 6f 72 74 53 69 67 6e 61 6c 73 28 61 2c 62 2c 72 29 7d 7d 63 61 6c 63 75 6c 61 74 65 28 61 2c 62 29 7b 63 6f 6e 73 74 20 63 3d 61 2e 78 2d 62 Data Ascii: 0===k\|\|Math.abs(B-k)>=this.velocityResolution)&&(b.y.countUnique++,k=B);c.push(A);d.push(B);var t=G,T=this.angleResolution,C;(C=void 0===g)\|\|(t=Math.abs(t-g)%360,C=Math.min(360-t,t)>=T);C&&(r++,g=G)}this.reportSignals(a,b,r)}}calculate(a,b){const c=a.x-b
2025-01-15 22:20:42 UTC	1369	IN	Data Raw: 6c 65 74 20 63 3d 22 62 7a 5a 33 65 33 68 34 63 58 64 67 65 32 5a 6e 4e 69 35 76 4e 6e 6c 35 4e 69 35 76 4e 6e 56 33 59 48 31 69 63 54 59 75 59 47 5a 68 63 54 67 32 65 58 56 73 52 6e 46 6b 65 32 5a 67 4e 69 34 68 4f 44 5a 67 62 57 52 78 4e 69 34 32 65 58 74 68 5a 33 45 32 61 54 67 32 65 58 74 68 5a 33 45 32 4c 6d 38 32 64 58 64 67 66 57 4a 78 4e 69 35 67 5a 6d 46 78 4f 44 5a 78 59 6e 46 36 59 45 52 31 5a 6e 56 35 5a 7a 59 75 62 7a 5a 33 65 48 31 33 66 7a 59 75 62 7a 5a 33 62 44 59 75 4e 6e 45 36 64 33 68 39 63 58 70 67 54 44 59 34 4e 6e 64 74 4e 69 34 32 63 54 70 33 65 48 31 78 65 6d 42 4e 4e 6a 67 32 66 58 41 32 4c 6a 5a 78 4f 6d 42 31 5a 6e 4e 78 59 44 70 39 63 44 52 6f 61 44 52 68 65 6e 42 78 63 6e 31 36 63 58 41 32 4f 44 5a 39 5a 30 42 6d 59 57 64 67 Data Ascii: let c="bzZ3e3h4cXdge2ZnNi5vNnl5Ni5vNnV3YH1icTYuYGZhcTg2eXVsRnFke2ZgNi4hODZgbWRxNi42eXthZ3E2aTg2eXthZ3E2Lm82dXdgfWJxNi5gZmFxODZxYnF6YER1ZnV5ZzYubzZ3eH13fzYubzZ3bDYuNnE6d3h9cXpgTDY4NndtNi42cTp3eH1xemBNNjg2fXA2LjZxOmB1ZnNxYDp9cDRoaDRhenBxcn16cXA2ODZ9Z0BmYWdg
2025-01-15 22:20:42 UTC	332	IN	Data Raw: 42 6d 59 58 45 34 4e 6e 46 69 63 58 70 67 52 48 56 6d 64 58 6c 6e 4e 69 35 76 4e 6e 68 37 64 58 41 32 4c 6d 38 32 59 33 41 32 4c 6a 5a 36 64 57 4a 39 63 33 56 67 65 32 59 36 59 33 46 32 63 47 5a 39 59 6e 46 6d 4e 47 68 6f 4e 47 46 36 63 48 46 79 66 58 70 78 63 44 5a 70 61 54 67 32 59 47 31 6b 63 54 59 75 4e 6d 64 67 64 57 42 39 64 7a 5a 70 61 54 67 32 59 6e 46 6d 5a 33 31 37 65 6a 59 75 4a 57 6b 3d 22 3b 61 3d 28 62 26 26 28 63 3d 0a 48 28 63 2c 61 29 29 2c 45 28 63 2c 53 2c 21 62 29 29 3b 66 6f 72 28 63 6f 6e 73 74 20 5b 64 2c 65 5d 6f 66 20 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 61 2e 63 6f 6c 6c 65 63 74 6f 72 73 29 29 74 72 79 7b 65 2e 61 63 74 69 76 65 26 26 4e 28 64 2c 65 29 7d 63 61 74 63 68 28 6b 29 7b 6e 28 60 66 61 69 6c 65 64 20 63 72 65 Data Ascii: BmYXE4NnFicXpgRHVmdXlnNi5vNnh7dXA2Lm82Y3A2LjZ6dWJ9c3Vge2Y6Y3F2cGZ9YnFmNGhoNGF6cHFyfXpxcDZpaTg2YG1kcTYuNmdgdWB9dzZpaTg2YnFmZ317ejYuJWk=";a=(b&&(c=H(c,a)),E(c,S,!b));for(const [d,e]of Object.entries(a.collectors))try{e.active&&N(d,e)}catch(k){n(`failed cre

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49928	104.21.80.92	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:42 UTC	952	OUT	GET /sig.js?rpclid=f2906c3b-d38e-11ef-93a7-aab196f2f20d&params=FD4w747ub408eaM-61M3wJ3qfK7ErWHy518FlRGHao3f2PgYtkrU2HX0FFqbUAk8GJ00NxtW6WbXQuI8X1R_UXehWD3jEYZp8ei2zrBAxLF_eC2lrTItLT6yz_yg3qTdqPt-cj1efdGND7MZs7ZsJRipunhgT1FJD1LmFwmpi2OQr3jTzQR9zLhN6QczGb3mADM0t22ZeO2Xg8vOdZ1mlHLLgV4JF8Ewi3eE2AqQEV5caCIffDgbT78Fp5xkdUBCPKbARqx_8dnDHiOjCvOSb8zgsh2ZWSOtPn8Jt3midXYsYSKsXfbpaFDmrS7in6m-SbDqI-7b6lnILvGIshUNqXmndP6THKiDOHkNtxfBm68RZWVMHDodxBN1AQoMoSIGhvlBVALm3I3Zh-sHGXHJLE1ypsFqtnfq3svddbFFasOB2kyZpEryAs4P90VcBWSq HTTP/1.1 Host: serve.bidbrain.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce
2025-01-15 22:20:42 UTC	1169	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:42 GMT Content-Type: text/javascript Content-Length: 9487 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Via: 1.1 google CF-Cache-Status: BYPASS Set-Cookie: uid=f3b61b5a-d38e-11ef-abcc-b61a6926ccce; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: mid=f2906c3b-d38e-11ef-93a7-aab196f2f20d; Domain=.bidbrain.app; Max-Age=7200; Path=/ Accept-Ranges: bytes
2025-01-15 22:20:42 UTC	630	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6c 42 5a 66 5a 38 42 42 56 43 37 31 71 43 78 57 59 6f 59 6f 51 31 50 61 25 32 46 25 32 42 36 4d 54 61 35 6a 6c 39 4a 25 32 46 31 58 59 70 70 46 66 6e 4e 43 66 62 69 43 79 52 6b 43 67 51 33 4e 56 70 4d 6c 71 25 32 46 49 4e 52 30 79 56 46 45 56 49 5a 74 6d 7a 46 52 36 5a 4e 6f 72 72 63 76 39 68 72 7a 65 47 62 25 32 42 73 46 46 6c 6d 32 76 25 32 42 51 74 68 35 6a 42 6a 33 61 39 71 45 6c 55 55 51 59 6b 76 35 51 49 32 6f 30 4e 75 52 34 54 49 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lBZfZ8BBVC71qCxWYoYoQ1Pa%2F%2B6MTa5jl9J%2F1XYppFfnNCfbiCyRkCgQ3NVpMlq%2FINR0yVFEVIZtmzFR6ZNorrcv9hrzeGb%2BsFFlm2v%2BQth5jBj3a9qElUUQYkv5QI2o0NuR4TI%3D"}],"group":"cf-nel","max_a
2025-01-15 22:20:42 UTC	939	IN	Data Raw: 76 61 72 20 70 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 66 3d 28 6d 2c 71 2c 6e 29 3d 3e 71 20 69 6e 20 6d 3f 70 28 6d 2c 71 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 6d 5b 71 5d 3d 6e 2c 68 3d 28 6d 2c 71 2c 6e 29 3d 3e 28 66 28 6d 2c 22 73 79 6d 62 6f 6c 22 21 3d 74 79 70 65 6f 66 20 71 3f 71 2b 22 22 3a 71 2c 6e 29 2c 6e 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 2c 62 29 7b 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 3f 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 28 22 66 6c 5f 22 2b 61 2c 62 29 3a 28 44 7c 7c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 71 2c 31 30 Data Ascii: var p=Object.defineProperty,f=(m,q,n)=>q in m?p(m,q,{enumerable:!0,configurable:!0,writable:!0,value:n}):m[q]=n,h=(m,q,n)=>(f(m,"symbol"!=typeof q?q+"":q,n),n);(function(){function m(a,b){window.sendEvent?window.sendEvent("fl_"+a,b):(D\|\|=setInterval(q,10
2025-01-15 22:20:42 UTC	1369	IN	Data Raw: 29 3d 3e 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 64 28 45 72 72 6f 72 28 62 3f 3f 60 74 69 6d 65 6f 75 74 20 24 7b 61 7d 60 29 29 7d 2c 61 29 7d 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4a 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 61 63 65 28 5b 61 2c 49 28 62 2c 63 29 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 62 3d 3e 73 65 74 54 69 6d 65 6f 75 74 28 62 2c 61 29 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4c 28 61 2c 62 2c 63 29 7b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 63 3b 65 2b 2b 29 7b 76 61 72 20 64 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 0a 61 77 61 69 74 20 61 28 29 3b 64 3d 62 2d 28 70 65 72 66 6f 72 6d Data Ascii: )=>{setTimeout(()=>{d(Error(b??`timeout ${a}`))},a)})}async function J(a,b,c){return Promise.race([a,I(b,c)])}function K(a){return new Promise(b=>setTimeout(b,a))}async function L(a,b,c){for(let e=0;e<c;e++){var d=performance.now();await a();d=b-(perform
2025-01-15 22:20:42 UTC	1369	IN	Data Raw: 65 72 72 6f 72 20 69 6e 76 6f 6b 69 6e 67 20 72 65 61 64 79 22 2c 63 29 7d 7d 29 3a 74 68 69 73 2e 72 65 61 64 79 28 29 7d 69 6e 69 74 69 61 6c 69 7a 65 28 29 7b 7d 72 65 61 64 79 28 29 7b 7d 72 65 70 6f 72 74 28 61 2c 62 29 7b 6d 28 75 2e 53 69 67 6e 61 6c 2c 7b 6e 61 6d 65 3a 74 68 69 73 2e 6e 61 6d 65 2c 73 75 63 63 65 73 73 3a 61 2c 66 61 69 6c 3a 62 7d 29 7d 72 65 70 6f 72 74 45 72 72 6f 72 28 61 2c 62 29 7b 6e 28 60 24 7b 74 68 69 73 2e 6e 61 6d 65 7d 5b 24 7b 74 68 69 73 2e 63 6f 6e 66 69 67 2e 74 79 70 65 7d 5d 3a 20 24 7b 61 7d 60 2c 62 29 7d 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 6c 65 74 20 6b 3d 30 3b 63 6f 6e 73 74 20 67 3d 72 3d 3e 7b 74 72 79 7b 62 28 72 29 7d 63 61 74 63 68 28 74 29 7b 74 68 69 Data Ascii: error invoking ready",c)}}):this.ready()}initialize(){}ready(){}report(a,b){m(u.Signal,{name:this.name,success:a,fail:b})}reportError(a,b){n(`${this.name}[${this.config.type}]: ${a}`,b)}addEventListener(a,b,c,d,e){let k=0;const g=r=>{try{b(r)}catch(t){thi
2025-01-15 22:20:42 UTC	1369	IN	Data Raw: 63 3f 62 2e 70 72 65 70 65 6e 64 28 61 29 3a 62 2e 61 70 70 65 6e 64 28 61 29 7d 67 65 74 50 61 72 65 6e 74 45 6c 65 6d 65 6e 74 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 0a 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 61 29 3a 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 7d 6f 6e 45 6c 65 6d 65 6e 74 43 6c 69 63 6b 28 61 29 7b 63 6f 6e 73 74 20 62 3d 61 2e 74 61 72 67 65 74 3b 62 2e 73 74 79 6c 65 2e 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3d 22 6e 6f 6e 65 22 3b 63 6f 6e 73 74 20 63 3d 64 6f 63 75 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 46 72 6f 6d 50 6f 69 6e 74 28 61 2e 63 6c 69 65 6e 74 58 2c 61 2e 63 6c 69 65 6e 74 59 29 3b 69 66 28 62 2e 73 74 79 6c 65 2e 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3d 22 61 75 74 6f 22 2c 63 26 26 63 21 3d 3d Data Ascii: c?b.prepend(a):b.append(a)}getParentElement(a){return a?document.querySelector(a):document.body}onElementClick(a){const b=a.target;b.style.pointerEvents="none";const c=document.elementFromPoint(a.clientX,a.clientY);if(b.style.pointerEvents="auto",c&&c!==
2025-01-15 22:20:42 UTC	1369	IN	Data Raw: 65 73 6f 6c 75 74 69 6f 6e 22 29 3b 68 28 74 68 69 73 2c 22 61 6e 67 6c 65 52 65 73 6f 6c 75 74 69 6f 6e 22 29 3b 68 28 74 68 69 73 2c 22 6d 6f 75 73 65 44 61 74 61 41 72 72 61 79 22 29 3b 74 68 69 73 2e 65 76 65 6e 74 73 57 69 6e 64 6f 77 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 65 76 65 6e 74 73 57 69 6e 64 6f 77 3f 3f 32 30 30 3b 74 68 69 73 2e 6d 69 6e 54 69 6d 65 44 65 6c 74 61 4d 73 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 69 6e 54 69 6d 65 44 65 6c 74 61 4d 73 3f 3f 32 30 3b 74 68 69 73 2e 6d 69 6e 44 69 73 74 61 6e 63 65 50 78 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6d 69 6e 44 69 73 74 61 6e 63 65 50 78 3f 3f 0a 31 30 3b 74 68 69 73 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 76 65 6c 6f 63 69 74 Data Ascii: esolution");h(this,"angleResolution");h(this,"mouseDataArray");this.eventsWindow=this.config.eventsWindow??200;this.minTimeDeltaMs=this.config.minTimeDeltaMs??20;this.minDistancePx=this.config.minDistancePx??10;this.velocityResolution=this.config.velocit
2025-01-15 22:20:42 UTC	1369	IN	Data Raw: 69 64 20 30 3d 3d 3d 6b 7c 7c 4d 61 74 68 2e 61 62 73 28 42 2d 6b 29 3e 3d 74 68 69 73 2e 76 65 6c 6f 63 69 74 79 52 65 73 6f 6c 75 74 69 6f 6e 29 26 26 28 62 2e 79 2e 63 6f 75 6e 74 55 6e 69 71 75 65 2b 2b 2c 6b 3d 42 29 3b 63 2e 70 75 73 68 28 41 29 3b 64 2e 70 75 73 68 28 42 29 3b 76 61 72 20 74 3d 47 2c 54 3d 74 68 69 73 2e 61 6e 67 6c 65 52 65 73 6f 6c 75 74 69 6f 6e 2c 43 3b 28 43 3d 76 6f 69 64 20 30 3d 3d 3d 67 29 7c 7c 28 74 3d 4d 61 74 68 2e 61 62 73 28 74 2d 67 29 25 33 36 30 2c 43 3d 4d 61 74 68 2e 6d 69 6e 28 33 36 30 2d 74 2c 74 29 3e 3d 54 29 3b 43 26 26 28 72 2b 2b 2c 67 3d 47 29 7d 74 68 69 73 2e 72 65 70 6f 72 74 53 69 67 6e 61 6c 73 28 61 2c 62 2c 72 29 7d 7d 63 61 6c 63 75 6c 61 74 65 28 61 2c 62 29 7b 63 6f 6e 73 74 20 63 3d 61 2e 78 Data Ascii: id 0===k\|\|Math.abs(B-k)>=this.velocityResolution)&&(b.y.countUnique++,k=B);c.push(A);d.push(B);var t=G,T=this.angleResolution,C;(C=void 0===g)\|\|(t=Math.abs(t-g)%360,C=Math.min(360-t,t)>=T);C&&(r++,g=G)}this.reportSignals(a,b,r)}}calculate(a,b){const c=a.x
2025-01-15 22:20:42 UTC	1369	IN	Data Raw: 61 3b 6c 65 74 20 63 3d 22 62 44 56 30 65 48 74 37 63 6e 52 6a 65 47 56 6b 4e 53 31 73 4e 58 70 36 4e 53 31 73 4e 58 5a 30 59 33 35 68 63 6a 55 74 59 32 56 69 63 6a 73 31 65 6e 5a 76 52 58 4a 6e 65 47 56 6a 4e 53 30 69 4f 7a 56 6a 62 6d 64 79 4e 53 30 31 65 6e 68 69 5a 48 49 31 61 6a 73 31 65 6e 68 69 5a 48 49 31 4c 57 77 31 64 6e 52 6a 66 6d 46 79 4e 53 31 6a 5a 57 4a 79 4f 7a 56 79 59 58 4a 35 59 30 64 32 5a 58 5a 36 5a 44 55 74 62 44 56 30 65 33 35 30 66 44 55 74 62 44 56 30 62 7a 55 74 4e 58 49 35 64 48 74 2b 63 6e 6c 6a 54 7a 55 37 4e 58 52 75 4e 53 30 31 63 6a 6c 30 65 33 35 79 65 57 4e 4f 4e 54 73 31 66 6e 4d 31 4c 54 56 79 4f 57 4e 32 5a 58 42 79 59 7a 6c 2b 63 7a 64 72 61 7a 64 69 65 58 4e 79 63 58 35 35 63 6e 4d 31 4f 7a 56 2b 5a 45 4e 6c 59 6d Data Ascii: a;let c="bDV0eHt7cnRjeGVkNS1sNXp6NS1sNXZ0Y35hcjUtY2Vicjs1enZvRXJneGVjNS0iOzVjbmdyNS01enhiZHI1ajs1enhiZHI1LWw1dnRjfmFyNS1jZWJyOzVyYXJ5Y0d2ZXZ6ZDUtbDV0e350fDUtbDV0bzUtNXI5dHt+cnljTzU7NXRuNS01cjl0e35yeWNONTs1fnM1LTVyOWN2ZXByYzl+czdrazdieXNycX55cnM1OzV+ZENlYm
2025-01-15 22:20:42 UTC	334	IN	Data Raw: 4c 57 4e 6c 59 6e 49 37 4e 58 4a 68 63 6e 6c 6a 52 33 5a 6c 64 6e 70 6b 4e 53 31 73 4e 58 74 34 64 6e 4d 31 4c 57 77 31 59 48 4d 31 4c 54 56 35 64 6d 46 2b 63 48 5a 6a 65 47 55 35 59 48 4a 31 63 32 56 2b 59 58 4a 6c 4e 32 74 72 4e 32 4a 35 63 33 4a 78 66 6e 6c 79 63 7a 56 71 61 6a 73 31 59 32 35 6e 63 6a 55 74 4e 57 52 6a 64 6d 4e 2b 64 44 56 71 61 6a 73 31 59 58 4a 6c 5a 48 35 34 65 54 55 74 4a 6d 6f 3d 22 3b 61 3d 28 62 26 26 28 63 3d 0a 48 28 63 2c 61 29 29 2c 45 28 63 2c 53 2c 21 62 29 29 3b 66 6f 72 28 63 6f 6e 73 74 20 5b 64 2c 65 5d 6f 66 20 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 61 2e 63 6f 6c 6c 65 63 74 6f 72 73 29 29 74 72 79 7b 65 2e 61 63 74 69 76 65 26 26 4e 28 64 2c 65 29 7d 63 61 74 63 68 28 6b 29 7b 6e 28 60 66 61 69 6c 65 64 20 63 Data Ascii: LWNlYnI7NXJhcnljR3ZldnpkNS1sNXt4dnM1LWw1YHM1LTV5dmF+cHZjeGU5YHJ1c2V+YXJlN2trN2J5c3JxfnlyczVqajs1Y25ncjUtNWRjdmN+dDVqajs1YXJlZH54eTUtJmo=";a=(b&&(c=H(c,a)),E(c,S,!b));for(const [d,e]of Object.entries(a.collectors))try{e.active&&N(d,e)}catch(k){n(`failed c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49932	142.250.186.142	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:42 UTC	896	OUT	GET /f/AGSKWxVkpyu97IQUbHGCdzKUl7_eFeBwzzdrGLuvBYBvuDrMTj9uwC5VJyh_iBwuw_xJup-pg77HXsGPc4OiUPmYHGZqanKuWcKbHs8e1kkw2VvKXjqUksHi-XY6BgDkB8_uMQbl4Ol4cg==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzM2OTc5NjM5LDk2ODAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzddXSwiaHR0cHM6Ly9udWFuY2UtcGRmLXByb2Zlc3Npb25hbDIuc29mdHdhcmUuaW5mb3JtZXIuY29tLzcuMi8iLG51bGwsW1s4LCJCSHQwUkNmMExPbyJdLFs5LCJlbi1VUyJdLFsyMywiMTczNjk3OTYzNyJdLFsxOSwiMiJdLFsxNywiWzBdIl1dXQ HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:42 UTC	1965	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 15 Jan 2025 22:20:42 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'report-sample' 'nonce-n7EWyAQNTw9GA2LCa34ryA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin reporting-endpoints: default="/_/ContributorServingWebSwitchboardHttp/web-reports?context=eJzjamDU4pJicNeQYjh56zbTRSCW-PqSSQOIndJnsAYBcevNc6xTgdho7XlWJyBO-neetQiIDRUusTqCcNElVk8gVu25xGoKxPfXXWJ9DsQf6i-z_gDiGecvsy4A4iKJK6xNQMzw9QorBxDbsl5jdQViIR6OXS8X7GET2HF44Q9GJY2k_ML45Py8kqLMpNKS_KK05LTU4tSistSieCMDI1MDQ0MTPQPj-AIDAC7pTUo" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 22:20:42 UTC	1965	IN	Data Raw: 61 33 32 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 76 61 72 20 70 45 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 3d 5f 2e 74 28 61 29 7d 3b 5f 2e 75 28 70 45 2c 5f 2e Data Ascii: a32if (typeof __googlefc.fcKernelManager.run === 'function') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{var pE=function(a){this.l=_.t(a)};_.u(pE,_.
2025-01-15 22:20:42 UTC	652	IN	Data Raw: 39 63 32 36 69 41 42 6b 51 6f 4a 78 53 4c 73 74 70 74 79 50 30 6e 39 47 74 53 61 55 32 7a 71 69 54 58 6e 55 78 38 54 57 54 76 35 35 58 48 68 50 68 48 61 53 4f 46 58 4e 61 58 50 71 4b 35 56 6b 6e 53 4b 6b 33 63 6d 38 65 31 54 4f 62 32 45 71 35 6a 51 5c 5c 5c 5c 75 30 30 33 64 5c 5c 5c 5c 75 30 30 33 64 5c 5c 5c 78 32 32 5c 78 35 64 2c 5c 78 35 62 6e 75 6c 6c 2c 5c 78 35 62 37 5c 78 35 64 5c 78 35 64 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 5c 5c 78 32 32 64 39 63 62 66 36 33 33 64 30 30 36 65 65 66 61 5c 5c 5c 78 32 32 2c 6e 75 6c 6c 2c 5c 78 35 62 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 5c 5c 78 32 32 68 74 74 70 73 3a 5c 2f 5c 2f 66 75 6e 64 69 6e 67 63 68 6f 69 63 65 73 6d 65 73 73 61 67 65 73 2e 67 6f 6f Data Ascii: 9c26iABkQoJxSLstptyP0n9GtSaU2zqiTXnUx8TWTv55XHhPhHaSOFXNaXPqK5VknSKk3cm8e1TOb2Eq5jQ\\\\u003d\\\\u003d\\\x22\x5d,\x5bnull,\x5b7\x5d\x5d,null,null,null,null,null,\\\x22d9cbf633d006eefa\\\x22,null,\x5bnull,null,null,\\\x22https:\/\/fundingchoicesmessages.goo
2025-01-15 22:20:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49933	142.250.185.98	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:42 UTC	1612	OUT	GET /btr/view?ai=CFlzftTSIZ7fqNvicjuwP6qqliQyW75bOfLntip-hE-iin8aRDhABIOPuhSVgyZbLi8Sk_A-gAZPCv5A-yAECqAMByAPJBKoEjQJP0CL5SLOELaIQSqv0YIbDE8pOSbgr22jlHHBjjvufLioiWQD0qy5QZ63BY74A0vox_NruVSkZofwTOaw4ZX4--HDB5YWFIJft_oiYIPFrFuRGbt_LpG9JRyvxC5uwc2yi2Uyz3KdpR1li7oUfANKZ_S77aEEq26oHgYDYQzaz2ZTJP64pzZOxSktqkFuOahg1x3py7XiJm_yNyrAkQDR_ddhv30tgcROq6HoPe_QtpIdqxYlDxhWX7sDCyRWuNpMsGj4_OQ1X9ByemvAeYXnC17BOnu4_ao4Yu6J4z3M_UgR9Cx34rXaJtRmjRKbRKBDtLBH6isuKog6ayRvEJZo1YXmItnJIWEB1POvJR8AE9IPAwv8EiAWpyvnHUJIFBAgEGAGSBQQIBRgEoAYCgAeT-o_wGKgH1ckbqAfZtrECqAemvhuoB47OG6gHk9gbqAfw4BuoB-6WsQKoB_6esQKoB6--sQKoB_fCsQLYBwHyBwQQz9dm0ggmCIBhEAEYHzICigI6C4BAgMCAgICgqIACSL39wTpYjv-xsuH4igOaCUpodHRwczovL3BjYXBwc3RvcmUuY29tLz9hcD1hZHdwJmFzPWdfZF9hbGxfbmV3X3VzX2NhX2F1X2diX2luJmdhZF9zb3VyY2U9NYAKAcgLAdoMEQoLEJC4hu_4vLX3zQESAgED2BMN0BUBmBYBgBcBshceChoIABIUcHViLTQ4MjEwMDY4NTI5MTQzNTkYABgBuhcCOAGyGAkSArBTGAIiAQDQGAHoGAE&sigh=IhB1dc_aNk8&uach_m=%5BUACH%5D&ase=2&cid=CAQSTgCa7L7dHFLM9IPFcD6ghiOIXDaBWC3kpV_PFb9R9pCIrNFE7BSHF3RZLGlcutaAcbdRcj-GmWm9t [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnp6e8q3Hn02qx9nr5ulHgfqaOhOFhnsIORFFJRHSgAHbZOc4nFtnhzzAgnkCg; DSID=NO_DATA
2025-01-15 22:20:42 UTC	493	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 15 Jan 2025 22:20:42 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49946	104.21.80.92	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:42 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 2040 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce
2025-01-15 22:20:42 UTC	2040	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 66 32 38 64 38 35 33 34 2d 64 33 38 65 2d 31 31 65 66 2d 39 33 61 37 2d 61 61 62 31 39 36 66 32 66 32 30 64 22 2c 22 64 22 3a 22 6e 75 61 6e 63 65 2d 70 64 66 2d 70 72 6f 66 65 73 73 69 6f 6e 61 6c 32 2e 73 6f 66 74 77 61 72 65 2e 69 6e 66 6f 72 6d 65 72 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 4e 62 34 4a 50 52 52 6e 59 56 69 38 6b 62 6a 30 63 31 46 49 5f 46 4e 4b 5a 35 39 78 6e 44 4f 6c 69 56 78 63 49 4d 38 35 6e 32 71 73 35 79 38 67 76 31 75 56 67 33 52 62 6a 5a 57 35 5f 46 72 56 6c 59 47 57 50 7a 44 39 4e 49 73 4c 57 4e 45 4f 48 7a 75 34 59 4f 6d 44 38 4f 75 69 53 38 55 6b 50 Data Ascii: {"entries":[{"sid":"f28d8534-d38e-11ef-93a7-aab196f2f20d","d":"nuance-pdf-professional2.software.informer.com","cr":"ext_download_prot_smrtsp","gid":"","im":"Nb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkP
2025-01-15 22:20:42 UTC	1322	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 22:20:42 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=f3b61b5a-d38e-11ef-abcc-b61a6926ccce; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Via: 1.1 google cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wU5FW%2FgFjFGMbWiPW86nIZ8qCWB7yC6DGp98qQXQ8uCbOHZP4mw3AIjtIiyz51%2FZE9P3e0JYtNO2V%2B7LQbE%2B7kuxIUnLlteVxMMYpQtF5RBEZ2x5M4Y%2FeKzhfeCegVmsWA%3D%3D"}],"group":"cf-nel","max_age":604800}
2025-01-15 22:20:42 UTC	364	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 32 39 34 31 32 64 63 61 32 38 61 62 62 65 2d 59 59 5a 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 34 31 33 34 26 6d 69 6e 5f 72 74 74 3d 31 34 31 33 33 26 72 74 74 5f 76 61 72 3d 35 33 30 33 26 73 65 6e 74 3d 34 26 72 65 63 76 3d 38 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e Data Ascii: NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 9029412dca28abbe-YYZalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=14134&min_rtt=14133&rtt_var=5303&sent=4&recv=8&lost=0&retrans=0&sen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49948	104.21.80.92	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:42 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 2058 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce
2025-01-15 22:20:42 UTC	2058	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 66 32 39 30 36 63 33 62 2d 64 33 38 65 2d 31 31 65 66 2d 39 33 61 37 2d 61 61 62 31 39 36 66 32 66 32 30 64 22 2c 22 64 22 3a 22 6e 75 61 6e 63 65 2d 70 64 66 2d 70 72 6f 66 65 73 73 69 6f 6e 61 6c 32 2e 73 6f 66 74 77 61 72 65 2e 69 6e 66 6f 72 6d 65 72 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 46 44 34 77 37 34 37 75 62 34 30 38 65 61 4d 2d 36 31 4d 33 77 4a 33 71 66 4b 37 45 72 57 48 79 35 31 38 46 6c 52 47 48 61 6f 33 66 32 50 67 59 74 6b 72 55 32 48 58 30 46 46 71 62 55 41 6b 38 47 4a 30 30 4e 78 74 57 36 57 62 58 51 75 49 38 58 31 52 5f 55 58 65 68 57 44 33 6a 45 59 5a 70 38 Data Ascii: {"entries":[{"sid":"f2906c3b-d38e-11ef-93a7-aab196f2f20d","d":"nuance-pdf-professional2.software.informer.com","cr":"ext_download_prot_smrtsp","gid":"","im":"FD4w747ub408eaM-61M3wJ3qfK7ErWHy518FlRGHao3f2PgYtkrU2HX0FFqbUAk8GJ00NxtW6WbXQuI8X1R_UXehWD3jEYZp8
2025-01-15 22:20:42 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 22:20:42 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=f3b61b5a-d38e-11ef-abcc-b61a6926ccce; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=f2906c3b-d38e-11ef-93a7-aab196f2f20d; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=f2906c3b-d38e-11ef-93a7-aab196f2f20d; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 22:20:42 UTC	626	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 62 67 73 56 53 65 52 61 36 37 52 7a 6e 72 33 41 75 6c 6b 4c 33 58 36 25 32 46 6d 39 5a 36 6d 53 76 61 55 75 42 66 78 6e 39 69 47 54 66 34 41 31 4c 53 46 47 6f 31 4a 55 75 56 25 32 46 6d 63 50 56 79 5a 4b 55 52 68 79 69 31 53 46 77 6b 30 42 34 49 79 73 6f 57 49 78 4c 79 4f 44 4c 35 32 70 4c 61 25 32 46 71 4f 4d 6f 38 47 65 67 4e 42 73 67 39 38 67 36 50 4f 38 6c 4a 55 50 59 42 59 25 32 42 6f 6f 78 56 45 4d 6d 51 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bgsVSeRa67Rznr3AulkL3X6%2Fm9Z6mSvaUuBfxn9iGTf4A1LSFGo1JUuV%2FmcPVyZKURhyi1SFwk0B4IysoWIxLyODL52pLa%2FqOMo8GegNBsg98g6PO8lJUPYBY%2BooxVEMmQ%3D%3D"}],"group":"cf-nel","max_age":60

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49952	104.21.80.92	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:42 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 2203 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce; sid_cross=f2906c3b-d38e-11ef-93a7-aab196f2f20d
2025-01-15 22:20:42 UTC	2203	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 66 32 38 64 38 35 33 34 2d 64 33 38 65 2d 31 31 65 66 2d 39 33 61 37 2d 61 61 62 31 39 36 66 32 66 32 30 64 22 2c 22 64 22 3a 22 6e 75 61 6e 63 65 2d 70 64 66 2d 70 72 6f 66 65 73 73 69 6f 6e 61 6c 32 2e 73 6f 66 74 77 61 72 65 2e 69 6e 66 6f 72 6d 65 72 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 4e 62 34 4a 50 52 52 6e 59 56 69 38 6b 62 6a 30 63 31 46 49 5f 46 4e 4b 5a 35 39 78 6e 44 4f 6c 69 56 78 63 49 4d 38 35 6e 32 71 73 35 79 38 67 76 31 75 56 67 33 52 62 6a 5a 57 35 5f 46 72 56 6c 59 47 57 50 7a 44 39 4e 49 73 4c 57 4e 45 4f 48 7a 75 34 59 4f 6d 44 38 4f 75 69 53 38 55 6b 50 Data Ascii: {"entries":[{"sid":"f28d8534-d38e-11ef-93a7-aab196f2f20d","d":"nuance-pdf-professional2.software.informer.com","cr":"ext_download_prot_smrtsp","gid":"","im":"Nb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkP
2025-01-15 22:20:42 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 22:20:42 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=f3b61b5a-d38e-11ef-abcc-b61a6926ccce; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=f28d8534-d38e-11ef-93a7-aab196f2f20d; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 22:20:42 UTC	634	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 67 34 49 6d 6c 49 25 32 46 6c 62 72 4f 5a 4c 43 4c 35 44 4c 45 37 6b 49 73 74 49 46 66 58 69 49 43 76 50 6e 59 7a 67 35 69 59 49 70 42 39 74 25 32 42 46 53 76 62 25 32 46 32 65 76 4a 4b 54 48 4e 76 69 6f 25 32 46 75 68 34 65 4c 65 30 42 36 70 74 39 62 6c 77 79 75 58 47 25 32 46 36 63 66 4b 77 47 72 75 4e 25 32 46 38 68 35 48 6a 30 71 25 32 46 64 70 47 39 4a 67 6a 4c 38 75 48 4c 4e 38 25 32 42 49 71 31 47 62 32 52 32 74 30 72 76 42 67 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=g4ImlI%2FlbrOZLCL5DLE7kIstIFfXiICvPnYzg5iYIpB9t%2BFSvb%2F2evJKTHNvio%2Fuh4eLe0B6pt9blwyuXG%2F6cfKwGruN%2F8h5Hj0q%2FdpG9JgjL8uHLN8%2BIq1Gb2R2t0rvBg%3D%3D"}],"group":"cf-nel","max

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49954	34.8.123.242	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:42 UTC	3100	OUT	GET /rtimp?sid=f28d8534-d38e-11ef-93a7-aab196f2f20d&d=nuance-pdf-professional2.software.informer.com&cr=ext_download_prot_smrtsp&gid=&im=Nb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkPejZgAKFm3ZlUxHBNGiYcbgU5DmL2JgBOnA6uq5HqYXDGOAkkcHp77mTvilkZ5d9Q2rpDl_8WOAn-k2Y5V9CBXA9Hn2pQTPVn67DMY2sybqayiZvf5flizO3fgV6Cw9N2-R52IBOSmAosKxVeFWSaITqzx-S70fbalfXf6j_MGyOC9eAxeZ7JGLaNEYTuDszAbHweW2Joh-qvwh3aS1didawvBHLOP-V2AJ9n6wIzxxqj8vOzYkgNldKNUmJt1QcCV7gcheIGQeY618UdBWcgJbQ4H-Y9TkqHO2sUSV-RHzJCsRWDjhnFAPFm7pN506i_DH--SzmnConwZt5nHCFtvPxN2SulUo9&p=Z4g0tQAM55kHg4k6AAGLsDXa4KrzOKSPp000GA&r=1930373240&a=ipv4&ow=1280&oh=984&iw=1200&ih=90&tzof=300&tz=America%2FNew_York&pxr=1&cts=1736979641.481&cto=1665&edx=10&furl=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-4821006852914359%26output%3Dhtml%26h%3D90%26slotname%3D7854405427%26adk%3D4056614258%26adf%3D1706824535%26pi%3Dt.ma~as.7854405427%26w%3D1200%26abgtt%3D9%26fwrn%3D4%26fwrnh%3D100%26lmt%3D1736870130 [TRUNCATED] Host: g4.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce; sid_cross=f2906c3b-d38e-11ef-93a7-aab196f2f20d
2025-01-15 22:20:42 UTC	1282	IN	HTTP/1.1 204 No Content Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Content-Length: 0 Set-Cookie: uid=f3b61b5a-d38e-11ef-abcc-b61a6926ccce; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=f28d8534-d38e-11ef-93a7-aab196f2f20d; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Date: Wed, 15 Jan 2025 22:20:42 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49953	34.8.123.242	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:42 UTC	3122	OUT	GET /rtimp?sid=f2906c3b-d38e-11ef-93a7-aab196f2f20d&d=nuance-pdf-professional2.software.informer.com&cr=ext_download_prot_smrtsp&gid=&im=FD4w747ub408eaM-61M3wJ3qfK7ErWHy518FlRGHao3f2PgYtkrU2HX0FFqbUAk8GJ00NxtW6WbXQuI8X1R_UXehWD3jEYZp8ei2zrBAxLF_eC2lrTItLT6yz_yg3qTdqPt-cj1efdGND7MZs7ZsJRipunhgT1FJD1LmFwmpi2OQr3jTzQR9zLhN6QczGb3mADM0t22ZeO2Xg8vOdZ1mlHLLgV4JF8Ewi3eE2AqQEV5caCIffDgbT78Fp5xkdUBCPKbARqx_8dnDHiOjCvOSb8zgsh2ZWSOtPn8Jt3midXYsYSKsXfbpaFDmrS7in6m-SbDqI-7b6lnILvGIshUNqXmndP6THKiDOHkNtxfBm68RZWVMHDodxBN1AQoMoSIGhvlBVALm3I3Zh-sHGXHJLE1ypsFqtnfq3svddbFFasOB2kyZpEryAs4P90VcBWSq&p=Z4g0tQANESoHg4m2ACXIeoWRGUCrQlQ9M1dJjA&r=1395646145&a=ipv4&ow=1280&oh=984&iw=336&ih=280&tzof=300&tz=America%2FNew_York&pxr=1&cts=1736979641.533&cto=1698&edx=10&furl=https%3A%2F%2Fgoogleads.g.doubleclick.net%2Fpagead%2Fads%3Fclient%3Dca-pub-4821006852914359%26output%3Dhtml%26h%3D280%26slotname%3D9917528229%26adk%3D658919145%26adf%3D3882744954%26pi%3Dt.ma~as.9917528229%26w%3D336%26abgtt%3D9%26fwrn%3D4%26fwrnh%3D100%26lmt%3D1736870130% [TRUNCATED] Host: g4.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce; sid_cross=f2906c3b-d38e-11ef-93a7-aab196f2f20d
2025-01-15 22:20:42 UTC	1057	IN	HTTP/1.1 204 No Content Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Content-Length: 0 Set-Cookie: uid=f3b61b5a-d38e-11ef-abcc-b61a6926ccce; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Date: Wed, 15 Jan 2025 22:20:42 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49955	104.21.80.92	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:42 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 2221 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce; sid_cross=f2906c3b-d38e-11ef-93a7-aab196f2f20d
2025-01-15 22:20:42 UTC	2221	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 66 32 39 30 36 63 33 62 2d 64 33 38 65 2d 31 31 65 66 2d 39 33 61 37 2d 61 61 62 31 39 36 66 32 66 32 30 64 22 2c 22 64 22 3a 22 6e 75 61 6e 63 65 2d 70 64 66 2d 70 72 6f 66 65 73 73 69 6f 6e 61 6c 32 2e 73 6f 66 74 77 61 72 65 2e 69 6e 66 6f 72 6d 65 72 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 46 44 34 77 37 34 37 75 62 34 30 38 65 61 4d 2d 36 31 4d 33 77 4a 33 71 66 4b 37 45 72 57 48 79 35 31 38 46 6c 52 47 48 61 6f 33 66 32 50 67 59 74 6b 72 55 32 48 58 30 46 46 71 62 55 41 6b 38 47 4a 30 30 4e 78 74 57 36 57 62 58 51 75 49 38 58 31 52 5f 55 58 65 68 57 44 33 6a 45 59 5a 70 38 Data Ascii: {"entries":[{"sid":"f2906c3b-d38e-11ef-93a7-aab196f2f20d","d":"nuance-pdf-professional2.software.informer.com","cr":"ext_download_prot_smrtsp","gid":"","im":"FD4w747ub408eaM-61M3wJ3qfK7ErWHy518FlRGHao3f2PgYtkrU2HX0FFqbUAk8GJ00NxtW6WbXQuI8X1R_UXehWD3jEYZp8
2025-01-15 22:20:42 UTC	1318	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 22:20:42 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=f3b61b5a-d38e-11ef-abcc-b61a6926ccce; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Via: 1.1 google cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Q5R%2BqBrTB9jatSLcwkzd%2Bpo35SPIe6UtKUDBbJO%2FswcYA8I6BpMvs0oyPqQ8HBE0CrEOQovGjq15t7DnIagR9agcktikJhDxoP4QZKhR4zPPcUKQeXQ1BEtP1xDx8YwALg%3D%3D"}],"group":"cf-nel","max_age":604800}
2025-01-15 22:20:42 UTC	364	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 32 39 34 31 32 66 64 65 32 66 61 63 31 32 2d 59 59 5a 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 34 32 32 37 26 6d 69 6e 5f 72 74 74 3d 31 34 32 32 31 26 72 74 74 5f 76 61 72 3d 35 33 34 36 26 73 65 6e 74 3d 34 26 72 65 63 76 3d 38 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e Data Ascii: NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 9029412fde2fac12-YYZalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=14227&min_rtt=14221&rtt_var=5346&sent=4&recv=8&lost=0&retrans=0&sen

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49959	104.21.80.92	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:43 UTC	480	OUT	GET /ext/download-icon_1697445891.svg+xml HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce; sid_cross=f2906c3b-d38e-11ef-93a7-aab196f2f20d
2025-01-15 22:20:43 UTC	1165	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:43 GMT Content-Type: image/svg+xml Content-Length: 469 Connection: close X-GUploader-UploadID: AFIdbgQHtOccfJpl0i_QG2R_hJb0ygQsmnZpmy5URqmXbv5VAhBaOmoUty73J9TL3j9cquxh x-goog-generation: 1697445890645515 x-goog-metageneration: 3 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 469 x-goog-hash: crc32c=+dJKLA== x-goog-hash: md5=aXSu6a+EFDtKxcc58XB8lQ== x-goog-storage-class: STANDARD Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type Expires: Wed, 15 Jan 2025 23:07:03 GMT Cache-Control: public, max-age=3600 Age: 820 Last-Modified: Mon, 16 Oct 2023 08:44:50 GMT ETag: "6974aee9af84143b4ac5c739f1707c95" cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k8hJ6UtsAGYytfc3btFEfn4yj2F3kFGmCfyUMTFqkvXR9379UWZEMjGZGWQTtWtxyBdMFnK3JxudovfwCR88qBjAsxGWKcvXi%2BFkhLdqk9KVbQ%2FiQhl4SSovCFwF3Ogz24WX"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 902941323ac0c590-IAD alt-svc: h3=":443"; ma=86400
2025-01-15 22:20:43 UTC	215	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 38 30 31 33 26 6d 69 6e 5f 72 74 74 3d 38 30 31 30 26 72 74 74 5f 76 61 72 3d 33 30 31 31 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 33 33 38 26 72 65 63 76 5f 62 79 74 65 73 3d 31 30 35 38 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 33 36 33 31 38 34 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 39 31 37 33 35 64 32 63 39 37 65 33 31 61 38 64 26 74 73 3d 33 37 30 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=8013&min_rtt=8010&rtt_var=3011&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2338&recv_bytes=1058&delivery_rate=363184&cwnd=32&unsent_bytes=0&cid=91735d2c97e31a8d&ts=370&x=0"
2025-01-15 22:20:43 UTC	469	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 39 22 20 68 65 69 67 68 74 3d 22 32 31 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 20 32 31 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 20 31 33 2e 32 36 33 32 4c 31 20 31 36 2e 39 36 39 31 43 31 20 31 37 2e 35 33 30 37 20 31 2e 32 32 31 32 35 20 31 38 2e 30 36 39 33 20 31 2e 36 31 35 30 38 20 31 38 2e 34 36 36 35 43 32 2e 30 30 38 39 20 31 38 2e 38 36 33 36 20 32 2e 35 34 33 30 35 20 31 39 2e 30 38 36 37 20 33 2e 31 20 31 39 2e 30 38 36 37 48 31 35 2e 37 43 31 36 2e 32 35 37 20 31 39 2e 30 38 36 37 20 31 36 2e 37 39 31 31 20 31 38 2e 38 36 33 36 20 31 37 2e 31 38 34 39 20 Data Ascii: <svg width="19" height="21" viewBox="0 0 19 21" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M1 13.2632L1 16.9691C1 17.5307 1.22125 18.0693 1.61508 18.4665C2.0089 18.8636 2.54305 19.0867 3.1 19.0867H15.7C16.257 19.0867 16.7911 18.8636 17.1849

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49958	104.21.80.92	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:43 UTC	478	OUT	GET /ext/Footer-Logo_1720602781.svg+xml HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce; sid_cross=f2906c3b-d38e-11ef-93a7-aab196f2f20d
2025-01-15 22:20:43 UTC	1175	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:43 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close X-GUploader-UploadID: AFIdbgQw5Z6s45NVUfchD9-XFySwrDZJX0wdwRCbfdOTizxIgJVAzUC8RyqnsTaVUqCS5L96 x-goog-generation: 1720602780982635 x-goog-metageneration: 3 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 7186 x-goog-hash: crc32c=Kc0qjA== x-goog-hash: md5=jGCl//RKIQKXgmNkQtJJ1A== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type Expires: Wed, 15 Jan 2025 22:50:35 GMT Cache-Control: public, max-age=3600 Last-Modified: Wed, 10 Jul 2024 09:13:01 GMT ETag: W/"8c60a5fff44a21029782636442d249d4" Vary: Accept-Encoding Age: 1808 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GjhbXM2ocjjzDDTkAaT4puerSBYSTFtQuJnb2kJwBFb1ztb9tvYO5KlHhwVSkGxn4OGvUhEBzZbZFDFWqhfORSdf6PO67CWeb9osUnGubG8sbX8wS372P%2BdD8QLUySAMjUxI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 902941323e94ab75-YYZ alt-svc: h3=":443"; ma=86400
2025-01-15 22:20:43 UTC	217	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 34 32 30 30 26 6d 69 6e 5f 72 74 74 3d 31 34 31 39 33 26 72 74 74 5f 76 61 72 3d 35 33 33 37 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 33 33 39 26 72 65 63 76 5f 62 79 74 65 73 3d 31 30 35 36 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 32 30 34 38 38 33 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 65 36 64 65 34 33 66 31 34 37 35 30 38 31 39 30 26 74 73 3d 33 37 36 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=14200&min_rtt=14193&rtt_var=5337&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2339&recv_bytes=1056&delivery_rate=204883&cwnd=32&unsent_bytes=0&cid=e6de43f147508190&ts=376&x=0"
2025-01-15 22:20:43 UTC	1346	IN	Data Raw: 31 63 31 32 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 39 31 22 20 68 65 69 67 68 74 3d 22 35 32 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 39 31 20 35 32 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 29 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 33 33 2e 35 38 37 39 20 30 43 33 33 2e 35 38 37 39 20 30 20 33 30 2e 38 39 33 35 20 39 2e 32 30 39 31 36 20 32 36 2e 30 35 39 32 20 31 32 2e 37 38 31 37 43 32 34 2e 30 37 38 20 31 35 2e 30 38 34 20 31 33 2e 32 32 30 38 20 32 33 2e 35 37 38 36 20 39 2e 38 31 33 30 32 20 32 31 2e 30 33 38 32 43 35 2e 35 33 33 35 34 20 31 37 2e 36 32 34 34 Data Ascii: 1c12<svg width="191" height="52" viewBox="0 0 191 52" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0)"><path d="M33.5879 0C33.5879 0 30.8935 9.20916 26.0592 12.7817C24.078 15.084 13.2208 23.5786 9.81302 21.0382C5.53354 17.6244
2025-01-15 22:20:43 UTC	1369	IN	Data Raw: 36 38 20 31 34 2e 38 34 35 38 43 31 38 2e 33 37 33 35 20 31 35 2e 33 32 32 31 20 31 37 2e 36 36 30 32 20 31 31 2e 35 31 31 35 20 31 37 2e 34 32 32 35 20 31 31 2e 35 31 31 35 43 31 37 2e 34 32 32 35 20 31 31 2e 35 31 31 35 20 31 37 2e 31 30 35 35 20 31 36 2e 35 31 33 20 32 30 2e 39 30 39 35 20 31 36 2e 35 31 33 43 32 37 2e 32 34 39 35 20 31 36 2e 35 39 32 34 20 33 33 2e 35 38 39 34 20 30 20 33 33 2e 35 38 39 34 20 30 5a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 70 61 69 6e 74 33 5f 72 61 64 69 61 6c 29 22 2f 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 36 2e 33 39 30 36 20 34 30 2e 36 34 37 36 43 31 38 2e 35 33 30 34 20 33 38 2e 35 30 34 31 20 32 31 2e 34 36 32 36 20 33 37 2e 37 38 39 36 20 32 33 2e 30 34 37 36 20 33 37 2e 39 34 38 34 43 33 32 2e 30 38 32 31 20 33 Data Ascii: 68 14.8458C18.3735 15.3221 17.6602 11.5115 17.4225 11.5115C17.4225 11.5115 17.1055 16.513 20.9095 16.513C27.2495 16.5924 33.5894 0 33.5894 0Z" fill="url(#paint3_radial)"/><path d="M16.3906 40.6476C18.5304 38.5041 21.4626 37.7896 23.0476 37.9484C32.0821 3
2025-01-15 22:20:43 UTC	1369	IN	Data Raw: 38 34 20 31 30 34 2e 35 31 37 20 33 35 2e 39 32 31 36 20 39 39 2e 36 38 32 38 20 33 35 2e 39 32 31 36 43 39 34 2e 38 34 38 36 20 33 35 2e 39 32 31 36 20 39 31 2e 32 30 33 31 20 33 32 2e 34 32 38 34 20 39 31 2e 32 30 33 31 20 32 37 2e 36 36 35 31 43 39 31 2e 32 30 33 31 20 32 32 2e 39 38 31 31 20 39 34 2e 38 34 38 36 20 31 39 2e 35 36 37 34 20 39 39 2e 36 38 32 38 20 31 39 2e 35 36 37 34 43 31 30 34 2e 35 31 37 20 31 39 2e 35 36 37 34 20 31 30 38 2e 31 36 33 20 32 32 2e 39 38 31 31 20 31 30 38 2e 31 36 33 20 32 37 2e 36 36 35 31 5a 4d 31 30 33 2e 37 32 35 20 32 37 2e 36 36 35 31 43 31 30 33 2e 37 32 35 20 32 35 2e 33 36 32 38 20 31 30 32 2e 30 36 20 32 33 2e 35 33 36 38 20 39 39 2e 36 38 32 38 20 32 33 2e 35 33 36 38 43 39 37 2e 33 30 35 34 20 32 33 2e 35 Data Ascii: 84 104.517 35.9216 99.6828 35.9216C94.8486 35.9216 91.2031 32.4284 91.2031 27.6651C91.2031 22.9811 94.8486 19.5674 99.6828 19.5674C104.517 19.5674 108.163 22.9811 108.163 27.6651ZM103.725 27.6651C103.725 25.3628 102.06 23.5368 99.6828 23.5368C97.3054 23.5
2025-01-15 22:20:43 UTC	1369	IN	Data Raw: 37 34 35 32 43 31 34 31 2e 32 38 39 20 32 33 2e 30 36 31 32 20 31 34 34 2e 37 37 36 20 31 39 2e 36 34 37 35 20 31 34 39 2e 36 31 20 31 39 2e 36 34 37 35 43 31 35 31 2e 31 39 35 20 31 39 2e 36 34 37 35 20 31 35 32 2e 34 36 33 20 32 30 2e 30 34 34 34 20 31 35 33 2e 35 37 33 20 32 30 2e 38 33 38 33 56 31 39 2e 39 36 35 48 31 35 37 2e 36 39 34 56 32 36 2e 30 37 38 48 31 35 33 2e 34 31 34 43 31 35 33 2e 30 31 38 20 32 34 2e 35 36 39 36 20 31 35 31 2e 36 37 31 20 32 33 2e 36 31 36 39 20 31 35 30 2e 30 30 37 20 32 33 2e 36 31 36 39 43 31 34 37 2e 36 32 39 20 32 33 2e 36 31 36 39 20 31 34 35 2e 38 30 36 20 32 35 2e 34 34 32 39 20 31 34 35 2e 38 30 36 20 32 37 2e 37 34 35 32 43 31 34 35 2e 38 30 36 20 33 30 2e 30 34 37 35 20 31 34 37 2e 36 32 39 20 33 31 2e 38 37 Data Ascii: 7452C141.289 23.0612 144.776 19.6475 149.61 19.6475C151.195 19.6475 152.463 20.0444 153.573 20.8383V19.965H157.694V26.078H153.414C153.018 24.5696 151.671 23.6169 150.007 23.6169C147.629 23.6169 145.806 25.4429 145.806 27.7452C145.806 30.0475 147.629 31.87
2025-01-15 22:20:43 UTC	1369	IN	Data Raw: 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 31 37 35 34 32 22 2f 3e 0a 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 46 43 35 39 31 22 2f 3e 0a 3c 2f 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 3e 0a 3c 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 20 69 64 3d 22 70 61 69 6e 74 31 5f 72 61 64 69 61 6c 22 20 63 78 3d 22 30 22 20 63 79 3d 22 30 22 20 72 3d 22 31 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 32 39 2e 33 33 35 37 20 34 31 2e 34 35 31 33 29 20 72 6f 74 61 74 65 28 2d 32 32 2e 32 30 31 36 29 20 73 63 61 6c 65 28 34 36 2e 33 31 31 32 20 33 35 2e 36 30 34 34 29 22 3e 0a 3c Data Ascii: top-color="#F17542"/><stop offset="1" stop-color="#FFC591"/></radialGradient><radialGradient id="paint1_radial" cx="0" cy="0" r="1" gradientUnits="userSpaceOnUse" gradientTransform="translate(29.3357 41.4513) rotate(-22.2016) scale(46.3112 35.6044)"><
2025-01-15 22:20:43 UTC	372	IN	Data Raw: 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 67 72 61 64 69 65 6e 74 54 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 32 37 2e 39 37 30 34 20 35 32 2e 37 39 34 34 29 20 72 6f 74 61 74 65 28 2d 38 30 2e 34 33 38 34 29 20 73 63 61 6c 65 28 31 35 2e 34 37 34 34 20 34 31 2e 30 33 30 33 29 22 3e 0a 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 46 43 35 39 31 22 2f 3e 0a 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 30 2e 38 30 39 34 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 46 31 37 35 34 32 22 2f 3e 0a 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 45 44 36 32 32 46 22 2f 3e 0a 3c 2f 72 61 64 69 61 6c 47 72 61 64 69 65 6e 74 3e 0a 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 63 Data Ascii: ts="userSpaceOnUse" gradientTransform="translate(27.9704 52.7944) rotate(-80.4384) scale(15.4744 41.0303)"><stop stop-color="#FFC591"/><stop offset="0.8094" stop-color="#F17542"/><stop offset="1" stop-color="#ED622F"/></radialGradient><clipPath id="c
2025-01-15 22:20:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49961	104.21.80.92	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:43 UTC	470	OUT	GET /click_1734018555_64x64.png HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce; sid_cross=f2906c3b-d38e-11ef-93a7-aab196f2f20d
2025-01-15 22:20:43 UTC	1168	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:43 GMT Content-Type: image/png Content-Length: 721 Connection: close X-GUploader-UploadID: AFiumC7a8ahKtnZCbsnnmUi-BV081kC_2ESON0XYnHx-JX6hdkARZJvpf4NTB_Ubj8z9CLdV9RVEpc4 x-goog-generation: 1734018555538900 x-goog-metageneration: 3 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 721 x-goog-hash: crc32c=PWgPLA== x-goog-hash: md5=Qx665ft+mV1G29G7lB8NMg== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type Expires: Wed, 15 Jan 2025 22:35:39 GMT Cache-Control: public, max-age=14400 Age: 2704 Last-Modified: Thu, 12 Dec 2024 15:49:15 GMT ETag: "431ebae5fb7e995d46dbd1bb941f0d32" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AcIzvMstK5UJfqyKyoH2%2FzglYaIxRotYHRTq7jyzjqhVy0cnd6gDE7PyFGUS0QDRCw96iT4ux3SAkDJxmwbr98TK3sB%2B409hGZ8ErDrn4K8%2BVY2ANPODEPcIu5ugeB4CKC81"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 902941323bb4aaaa-YYZ alt-svc: h3=":443"; ma=86400
2025-01-15 22:20:43 UTC	217	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 34 31 34 30 26 6d 69 6e 5f 72 74 74 3d 31 34 31 33 35 26 72 74 74 5f 76 61 72 3d 35 33 31 31 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 33 33 39 26 72 65 63 76 5f 62 79 74 65 73 3d 31 30 34 38 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 32 30 35 39 33 38 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 30 31 30 31 30 61 62 32 62 64 64 61 63 34 38 35 26 74 73 3d 33 33 39 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=14140&min_rtt=14135&rtt_var=5311&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2339&recv_bytes=1048&delivery_rate=205938&cwnd=32&unsent_bytes=0&cid=01010ab2bddac485&ts=339&x=0"
2025-01-15 22:20:43 UTC	721	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 03 00 00 00 9d b7 81 ec 00 00 00 78 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 c8 48 88 00 00 00 27 74 52 4e 53 00 ec f2 3f ee 05 32 f6 2e d2 0a 9d 77 58 3a 47 13 80 a2 4d 44 37 67 ac 64 0e c9 16 36 1b cf 6b b9 8b 71 2a c4 ab 21 5f 63 3e 35 00 00 01 e1 49 44 41 54 58 c3 e5 95 d9 76 82 30 14 45 2f 09 20 a0 e0 54 07 50 70 6c f3 ff 7f 58 e2 b2 1e 43 21 de c4 Data Ascii: PNGIHDR@@xPLTEH'tRNS?2.wX:GMD7gd6kq*!_c>5IDATXv0E/ TPplXC!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49960	104.21.80.92	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:43 UTC	475	OUT	GET /download_l_1734165033_64x64.png HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce; sid_cross=f2906c3b-d38e-11ef-93a7-aab196f2f20d
2025-01-15 22:20:43 UTC	1261	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:43 GMT Content-Type: image/png Content-Length: 615 Connection: close X-GUploader-UploadID: AFiumC6CHZ8hZfP1DGK5zKHX-oIVdUTLWKUzOvAy6YdFTpkZX9QYlsr6J5FtipVydYxy-MiWSaK75jM x-goog-generation: 1734165033542357 x-goog-metageneration: 3 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 615 x-goog-hash: crc32c=y4TMxQ== x-goog-hash: md5=3Ht+RPR8bjlGVFLjbkb7ZQ== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Wed, 15 Jan 2025 22:43:52 GMT Cache-Control: public, max-age=14400 Age: 2211 Last-Modified: Sat, 14 Dec 2024 08:30:33 GMT ETag: "dc7b7e44f47c6e39465452e36e46fb65" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HJTC%2BKF9v%2B7hsz%2BuUEyB7RN8wDTP5jnSXksnCN%2FcYfUw9VhfQk3ppSpLaG2qAMNGRbq%2Bg7GLTFe84Jd%2B598UQA6j5rfsrVLQgH90ZJquUJ3S1ej1A8V6hLjqzVbcadLRbyeT"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 902941323fe5060f-IAD alt-svc: h3=":443"; ma=86400
2025-01-15 22:20:43 UTC	215	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 38 31 30 31 26 6d 69 6e 5f 72 74 74 3d 38 30 39 39 26 72 74 74 5f 76 61 72 3d 33 30 34 32 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 37 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 33 34 30 26 72 65 63 76 5f 62 79 74 65 73 3d 31 30 35 33 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 33 35 39 36 30 35 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 39 66 63 36 38 33 62 31 63 66 65 66 39 38 35 38 26 74 73 3d 33 35 35 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=8101&min_rtt=8099&rtt_var=3042&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2340&recv_bytes=1053&delivery_rate=359605&cwnd=32&unsent_bytes=0&cid=9fc683b1cfef9858&ts=355&x=0"
2025-01-15 22:20:43 UTC	615	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 03 00 00 00 9d b7 81 ec 00 00 00 78 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 15 c8 48 88 00 00 00 27 74 52 4e 53 00 8d 22 b8 fa b4 08 05 ad 53 1b 59 ee 09 dc 9b 62 2c 25 11 d5 cf c5 af 7e 71 47 3d de 32 15 f4 e6 a5 86 6b 4f 35 1e c8 b0 73 06 00 00 01 77 49 44 41 54 58 c3 ed 97 db 72 83 20 14 45 4f 93 a8 44 8d 77 ad 97 dc 93 86 ff ff c3 5a 40 77 26 b5 18 78 Data Ascii: PNGIHDR@@xPLTEH'tRNS"SYb,%~qG=2kO5swIDATXr EODwZ@w&x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49962	104.21.80.92	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:43 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 7486 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce; sid_cross=f2906c3b-d38e-11ef-93a7-aab196f2f20d
2025-01-15 22:20:43 UTC	7486	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 66 32 38 64 38 35 33 34 2d 64 33 38 65 2d 31 31 65 66 2d 39 33 61 37 2d 61 61 62 31 39 36 66 32 66 32 30 64 22 2c 22 64 22 3a 22 6e 75 61 6e 63 65 2d 70 64 66 2d 70 72 6f 66 65 73 73 69 6f 6e 61 6c 32 2e 73 6f 66 74 77 61 72 65 2e 69 6e 66 6f 72 6d 65 72 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 4e 62 34 4a 50 52 52 6e 59 56 69 38 6b 62 6a 30 63 31 46 49 5f 46 4e 4b 5a 35 39 78 6e 44 4f 6c 69 56 78 63 49 4d 38 35 6e 32 71 73 35 79 38 67 76 31 75 56 67 33 52 62 6a 5a 57 35 5f 46 72 56 6c 59 47 57 50 7a 44 39 4e 49 73 4c 57 4e 45 4f 48 7a 75 34 59 4f 6d 44 38 4f 75 69 53 38 55 6b 50 Data Ascii: {"entries":[{"sid":"f28d8534-d38e-11ef-93a7-aab196f2f20d","d":"nuance-pdf-professional2.software.informer.com","cr":"ext_download_prot_smrtsp","gid":"","im":"Nb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkP
2025-01-15 22:20:43 UTC	1283	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 22:20:43 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=f3b61b5a-d38e-11ef-abcc-b61a6926ccce; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=f28d8534-d38e-11ef-93a7-aab196f2f20d; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 22:20:43 UTC	627	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 48 52 68 55 54 68 71 62 77 4d 31 59 41 36 46 55 63 54 61 74 31 4d 5a 66 70 6f 54 63 58 78 37 54 75 63 48 33 30 76 6e 65 73 73 45 30 79 59 49 6f 71 63 59 72 51 53 55 6c 59 51 47 53 47 64 64 44 48 25 32 46 44 67 25 32 42 4f 39 61 4b 67 69 64 6b 63 4d 4b 69 73 54 61 6c 67 67 25 32 42 68 25 32 42 4e 70 4c 44 53 6a 64 55 63 68 59 38 55 47 75 69 4c 43 38 25 32 46 75 72 6b 6f 52 6e 47 7a 31 79 44 50 68 58 77 6d 4b 43 47 51 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HRhUThqbwM1YA6FUcTat1MZfpoTcXx7TucH30vnessE0yYIoqcYrQSUlYQGSGddDH%2FDg%2BO9aKgidkcMKisTalgg%2Bh%2BNpLDSjdUchY8UGuiLC8%2FurkoRnGz1yDPhXwmKCGQ%3D%3D"}],"group":"cf-nel","max_age":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49963	104.21.80.92	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:43 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 7541 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce; sid_cross=f2906c3b-d38e-11ef-93a7-aab196f2f20d
2025-01-15 22:20:43 UTC	7541	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 66 32 39 30 36 63 33 62 2d 64 33 38 65 2d 31 31 65 66 2d 39 33 61 37 2d 61 61 62 31 39 36 66 32 66 32 30 64 22 2c 22 64 22 3a 22 6e 75 61 6e 63 65 2d 70 64 66 2d 70 72 6f 66 65 73 73 69 6f 6e 61 6c 32 2e 73 6f 66 74 77 61 72 65 2e 69 6e 66 6f 72 6d 65 72 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 46 44 34 77 37 34 37 75 62 34 30 38 65 61 4d 2d 36 31 4d 33 77 4a 33 71 66 4b 37 45 72 57 48 79 35 31 38 46 6c 52 47 48 61 6f 33 66 32 50 67 59 74 6b 72 55 32 48 58 30 46 46 71 62 55 41 6b 38 47 4a 30 30 4e 78 74 57 36 57 62 58 51 75 49 38 58 31 52 5f 55 58 65 68 57 44 33 6a 45 59 5a 70 38 Data Ascii: {"entries":[{"sid":"f2906c3b-d38e-11ef-93a7-aab196f2f20d","d":"nuance-pdf-professional2.software.informer.com","cr":"ext_download_prot_smrtsp","gid":"","im":"FD4w747ub408eaM-61M3wJ3qfK7ErWHy518FlRGHao3f2PgYtkrU2HX0FFqbUAk8GJ00NxtW6WbXQuI8X1R_UXehWD3jEYZp8
2025-01-15 22:20:43 UTC	1316	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 22:20:43 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=f3b61b5a-d38e-11ef-abcc-b61a6926ccce; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Via: 1.1 google cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7UEB6dZ4fPOmWggf5PGR134IXcsMEQKhC6p4XdYOg8LS2KRfedWrnQ8AqEq3iMfr3mGw%2FGjnD9NuGajSeQ82PTwsq6Wi3pQwYw%2B6SUgrwWpHOVEQkv40bkPdAZaOBXVgRg%3D%3D"}],"group":"cf-nel","max_age":604800}
2025-01-15 22:20:43 UTC	363	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 32 39 34 31 33 32 33 65 62 64 63 39 38 38 2d 49 41 44 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 38 34 36 37 26 6d 69 6e 5f 72 74 74 3d 38 34 33 39 26 72 74 74 5f 76 61 72 3d 33 32 32 31 26 73 65 6e 74 3d 36 26 72 65 63 76 3d 31 32 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 Data Ascii: NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 902941323ebdc988-IADalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=8467&min_rtt=8439&rtt_var=3221&sent=6&recv=12&lost=0&retrans=0&sent

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49968	104.22.17.194	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:43 UTC	985	OUT	GET /favicon.ico HTTP/1.1 Host: software.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635; __gads=ID=5c69e94fc791666f:T=1736979637:RT=1736979637:S=ALNI_MZ91N_Bhxth3E9d4L0p2k_EFPCBew; __gpi=UID=00000fbf26fe8626:T=1736979637:RT=1736979637:S=ALNI_MaVs1UyIzr7FOvcBakfRn50LMdu2Q; __eoi=ID=04f90f572a58aaff:T=1736979637:RT=1736979637:S=AA-AfjahxK2Y084g0TaOOC-JkUpD
2025-01-15 22:20:43 UTC	372	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:43 GMT Content-Type: image/x-icon Content-Length: 32038 Connection: close Last-Modified: Mon, 14 Jan 2019 15:54:18 GMT ETag: "5c3cb0aa-7d26" Expires: Tue, 21 Jan 2025 06:25:11 GMT Cache-Control: max-age=604800 CF-Cache-Status: HIT Age: 44306 Accept-Ranges: bytes Server: cloudflare CF-RAY: 90294135a92158a6-IAD
2025-01-15 22:20:43 UTC	997	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 01 00 20 00 68 04 00 00 46 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 ae 04 00 00 30 30 00 00 01 00 20 00 a8 25 00 00 56 15 00 00 40 40 00 00 01 00 20 00 28 42 00 00 fe 3a 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 01 ff 6a 3d 01 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6b 3d 02 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6c 3e 03 ff 6c 3e 03 ff 69 3b 00 ff 69 3b 00 ff 6b 3e 02 ff 6d 3f 04 ff 6b 3d 02 ff 66 37 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6c Data Ascii: hF 00 %V@@ (B:( j<j<j<j<j<j<j<j<j=j<j<j<k=j<j<j<j<j<j<j<j<l>l>i;i;k>m?k=f7j<j<j<j<j<j<j<l
2025-01-15 22:20:43 UTC	1369	IN	Data Raw: ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6b 3d 01 ff 6c 3e 03 ff 65 35 00 ff 5f 2e 00 ff 5f 2d 00 ff 64 34 00 ff 6b 3e 02 ff 6b 3d 02 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6b 3e 02 ff 6c 3f 04 ff 6c 3f 04 ff 6b 3e 02 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c Data Ascii: j<j<j<j<j<j<k=l>e5_._-d4k>k=j<j<j<j<j<j<j<j<j<j<k>l?l?k>j<j<j<j<j<j<( @ j<j<j<j<
2025-01-15 22:20:43 UTC	1369	IN	Data Raw: 6b 3d 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6c 3f 03 ff 60 2f 00 ff ab 91 76 ff ff ff ff ff ff ff ff ff d6 ca be ff 84 5e 2f ff 63 32 00 ff 5f 2e 01 ff 61 30 00 ff 61 30 00 ff 60 2e 01 ff 60 2f 00 ff 76 4b 17 ff bf ab 96 ff ff fe ff ff fc fa f9 ff ff ff ff ff be aa 96 ff 60 2f 00 ff 6c 3f 04 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6c 3f 03 ff 62 31 00 ff 90 6e 4a ff ff ff ff ff ff ff ff ff bf ab 95 ff 63 32 00 ff 64 34 00 ff 6c 3f 02 ff 6c 3f 04 ff 6c 3f 04 ff 6c 3f 03 ff 6c 3f 04 ff 6c 3f 03 ff 67 38 02 ff 5d 2b 00 ff 9f 81 5f ff fc fa fa ff ff ff ff ff bd a9 94 ff 5f 2e 00 Data Ascii: k=j<j<j<j<j<j<j<j<j<j<j<l?`/v^/c2_.a0a0`.`/vK`/l?j<j<j<j<j<j<j<j<j<j<l?b1nJc2d4l?l?l?l?l?l?g8]+__.
2025-01-15 22:20:43 UTC	1369	IN	Data Raw: 50 1c ff 63 33 00 ff 68 39 01 ff 6b 3d 00 ff 6a 3c 00 ff 6d 3f 04 ff 60 2f 00 ff 9a 7b 5b ff ff ff ff ff ea e4 df ff 6f 42 0c ff 69 3a 00 ff 6a 3d 01 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6c 3f 03 ff 61 31 00 ff 95 75 50 ff ff ff ff ff f8 f6 f4 ff 7d 55 2b ff 64 34 00 ff 6c 3f 03 ff 6a 3c 00 ff 6a 3c 00 ff 6c 3e 03 ff 68 39 00 ff 66 37 00 ff 6b 3e 02 ff 6b 3d 01 ff 6a 3c 00 ff 6b 3d 01 ff 6a 3d 01 ff 66 37 05 ff de d4 c9 ff ff ff ff ff ba a5 8f ff 60 2f 00 ff 6c 3f 03 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 01 ff 6a 3d 00 ff 67 38 00 ff da ce c3 ff ff ff ff ff d8 cc be ff 66 37 05 ff 67 39 00 ff 6d 40 04 ff 6a 3c 01 ff 6a 3c 00 ff 6b 3d 01 ff Data Ascii: Pc3h9k=j<m?`/{[oBi:j=j<j<j<j<j<j<j<l?a1uP}U+d4l?j<j<l>h9f7k>k=j<k=j=f7`/l?j<j<j<j<j<j<j<j<j<j=g8f7g9m@j<j<k=
2025-01-15 22:20:43 UTC	1369	IN	Data Raw: 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<
2025-01-15 22:20:43 UTC	1369	IN	Data Raw: ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c Data Ascii: j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<
2025-01-15 22:20:43 UTC	1369	IN	Data Raw: 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6c 3e 04 ff 5f 2e 00 ff 9b 7c 5b ff f7 f5 f4 ff ff ff ff ff fc fb fa ff fe fe fd ff ff ff ff ff f6 f3 f1 ff d9 cd c2 ff bf ab 96 ff af 97 7c ff ad 94 78 ff b7 a1 88 ff cd be af ff eb e5 e0 ff ff ff ff ff ff ff ff ff fd fc fb ff fe fe fe ff fe fe fd ff fd fc fc ff ff ff fe ff fe fd fd ff ff ff ff ff 93 72 4c ff 62 31 00 ff 6c 3e 03 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6c 3f 03 ff 60 2f 00 ff ab 92 78 ff ff ff ff ff fd fc fb ff fc fb f9 ff ff ff ff ff e6 df d9 ff a4 87 69 ff 75 4b 18 ff 64 34 00 ff 60 2e 01 ff 5f 2e 00 ff 5f 2e 00 Data Ascii: j<j<j<l>_.\|[\|xrLb1l>j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<l?`/xiuKd4`._._.
2025-01-15 22:20:43 UTC	1369	IN	Data Raw: 3e 02 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6c 3e 03 ff 69 3a 01 ff 62 31 00 ff 61 30 00 ff 66 36 00 ff 6c 3e 02 ff 6a 3c 01 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6c 3e 02 ff 63 33 00 ff d6 c9 be ff ff ff ff ff ff ff ff ff d3 c5 b9 ff 63 33 00 ff 6c 3e 02 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6c 3f 03 ff 61 30 00 ff c7 b6 a6 ff ff ff ff ff ff ff ff ff d4 c7 bc ff 63 32 00 ff 6c 3e 02 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6c 3e 02 ff 63 32 00 ff 6e 41 0f ff 92 70 49 ff 9a 7a 56 ff 7d 55 26 ff 61 31 00 ff 6a 3b 02 ff 6a 3d 00 ff 6a 3c 00 ff 6a 3c 00 ff Data Ascii: >j<j<j<j<j<l>i:b1a0f6l>j<j<j<j<j<j<l>c3c3l>j<j<j<j<j<j<j<j<j<j<j<j<j<j<l?a0c2l>j<j<j<j<j<l>c2nApIzV}U&a1j;j=j<j<
2025-01-15 22:20:43 UTC	1369	IN	Data Raw: ff ff fd fc fb ff fc fc fb ff fd fc fb ff fb fa f9 ff ff ff ff ff ce bf b0 ff 63 33 00 ff 6b 3e 02 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6b 3e 02 ff 63 33 00 ff d6 ca be ff ff ff ff ff ff ff ff ff b3 9b 80 ff 5f 2e 00 ff 6c 3f 04 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3d 01 ff 68 3a 00 ff 6f 43 0d ff ee e9 e5 ff ff ff ff ff ff ff ff ff 9c 7e 5e ff 61 30 00 ff 6c 3f 04 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6b 3e 01 ff 63 33 00 ff b6 a0 8a ff ff ff ff ff fe fe fe ff fe fd fd ff ff ff ff ff e3 da d3 ff 75 4a 1c ff 67 38 00 ff 6b 3d 01 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3d 01 ff 69 3a 00 ff 6f 43 0f ff ef e9 e6 ff ff Data Ascii: c3k>j<j<j<j<k>c3_.l?j<j<j<j<j<j<j<j<j<j<j<j<j=h:oC~^a0l?j<j<j<j<k>c3uJg8k=j<j<j<j=i:oC
2025-01-15 22:20:43 UTC	1369	IN	Data Raw: ff 6a 3d 01 ff 6d 40 04 ff 69 3b 02 ff 5e 2c 00 ff ab 92 76 ff ff ff ff ff fb fa f9 ff ff ff ff ff db d0 c7 ff 68 39 05 ff 6a 3c 00 ff 6a 3c 01 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6c 3e 02 ff 62 32 00 ff c6 b4 a3 ff ff ff ff ff fa f8 f7 ff ff ff ff ff e7 e0 da ff 86 61 37 ff 5e 2d 00 ff 65 36 01 ff 6c 3e 02 ff 6c 3f 04 ff 6c 3e 03 ff 6b 3e 03 ff 6b 3e 02 ff 6c 3e 03 ff 6c 3f 04 ff 6c 3f 03 ff 69 3b 01 ff 60 2e 00 ff 6c 3e 0c ff c2 af 9c ff ff ff ff ff fb fa f9 ff ff ff ff ff f2 ee eb ff 7a 51 27 ff 65 36 00 ff 6b 3e 02 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c Data Ascii: j=m@i;^,vh9j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<l>b2a7^-e6l>l?l>k>k>l>l?l?i;`.l>zQ'e6k>j<j<j<j<j<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49967	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:43 UTC	986	OUT	GET /images/spacer.gif HTTP/1.1 Host: img.informer.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635; __gads=ID=5c69e94fc791666f:T=1736979637:RT=1736979637:S=ALNI_MZ91N_Bhxth3E9d4L0p2k_EFPCBew; __gpi=UID=00000fbf26fe8626:T=1736979637:RT=1736979637:S=ALNI_MaVs1UyIzr7FOvcBakfRn50LMdu2Q; __eoi=ID=04f90f572a58aaff:T=1736979637:RT=1736979637:S=AA-AfjahxK2Y084g0TaOOC-JkUpD
2025-01-15 22:20:43 UTC	297	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:33 GMT Content-Type: image/gif Content-Length: 43 Last-Modified: Fri, 24 Aug 2018 10:02:53 GMT Connection: close ETag: "5b7fd7cd-2b" Expires: Thu, 15 Jan 2026 21:59:33 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:43 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49969	172.217.18.2	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:43 UTC	667	OUT	GET /getconfig/sodar?sv=200&tid=gda&tv=r20250113&st=env HTTP/1.1 Host: ep1.adtrafficquality.google Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://nuance-pdf-professional2.software.informer.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:44 UTC	586	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Date: Wed, 15 Jan 2025 22:20:44 GMT Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 22:20:44 UTC	804	IN	Data Raw: 34 33 66 61 0d 0a 7b 22 73 6f 64 61 72 5f 71 75 65 72 79 5f 69 64 22 3a 22 76 44 53 49 5a 34 76 46 41 65 36 44 6a 75 77 50 7a 4b 47 69 79 51 67 22 2c 22 69 6e 6a 65 63 74 6f 72 5f 62 61 73 65 6e 61 6d 65 22 3a 22 73 6f 64 61 72 32 22 2c 22 62 67 5f 68 61 73 68 5f 62 61 73 65 6e 61 6d 65 22 3a 22 64 4e 49 78 35 44 57 5a 70 2d 4f 43 76 62 32 55 78 67 72 4c 6d 36 70 5f 73 42 67 78 62 44 33 72 5a 41 39 39 6a 73 35 61 76 37 59 22 2c 22 62 67 5f 62 69 6e 61 72 79 22 3a 22 68 55 77 36 70 65 50 6d 64 35 4a 39 69 42 36 7a 78 43 4c 6b 55 4a 57 64 45 62 56 61 58 65 4a 52 41 31 56 38 51 35 42 69 69 68 5a 55 75 65 46 32 38 2f 75 32 76 62 59 6d 4c 69 34 65 4e 75 49 49 41 41 54 75 57 48 65 73 52 66 52 46 49 65 5a 46 6a 34 67 45 70 49 2b 34 53 30 74 6b 63 6d 36 65 6e 75 Data Ascii: 43fa{"sodar_query_id":"vDSIZ4vFAe6DjuwPzKGiyQg","injector_basename":"sodar2","bg_hash_basename":"dNIx5DWZp-OCvb2UxgrLm6p_sBgxbD3rZA99js5av7Y","bg_binary":"hUw6pePmd5J9iB6zxCLkUJWdEbVaXeJRA1V8Q5BiihZUueF28/u2vbYmLi4eNuIIAATuWHesRfRFIeZFj4gEpI+4S0tkcm6enu
2025-01-15 22:20:44 UTC	1390	IN	Data Raw: 30 35 6d 4b 55 77 6c 4a 56 30 63 76 6a 63 74 53 57 78 55 4c 6e 57 54 59 38 45 73 55 2b 68 31 4a 52 6b 6e 32 59 74 4b 39 52 2b 48 53 53 4e 52 6e 44 6b 73 2f 34 39 4c 4a 64 75 39 45 76 70 55 53 4c 4f 31 57 41 4b 47 37 45 4d 35 54 79 49 56 35 7a 38 78 49 72 6e 43 67 57 46 68 30 38 4c 79 30 59 64 57 71 58 76 46 4d 33 31 4c 34 67 36 55 48 70 6f 4b 57 6f 73 4f 44 7a 4c 59 66 6a 39 61 38 36 79 37 64 42 39 72 45 75 37 6d 47 68 44 6b 4b 6c 53 76 59 76 62 5a 76 4f 73 5a 49 79 33 70 42 47 38 32 39 6d 79 4f 71 56 6f 4b 35 38 72 54 66 33 50 65 51 44 68 5a 6f 73 55 62 6a 64 56 6c 54 30 66 66 30 77 74 75 74 4a 34 48 46 75 64 71 6f 33 33 52 54 4d 34 4f 76 43 68 49 75 65 51 68 34 46 7a 49 6f 73 74 46 65 4a 62 68 6b 52 79 33 70 72 6a 30 46 61 54 68 64 5a 62 51 65 50 55 32 Data Ascii: 05mKUwlJV0cvjctSWxULnWTY8EsU+h1JRkn2YtK9R+HSSNRnDks/49LJdu9EvpUSLO1WAKG7EM5TyIV5z8xIrnCgWFh08Ly0YdWqXvFM31L4g6UHpoKWosODzLYfj9a86y7dB9rEu7mGhDkKlSvYvbZvOsZIy3pBG829myOqVoK58rTf3PeQDhZosUbjdVlT0ff0wtutJ4HFudqo33RTM4OvChIueQh4FzIostFeJbhkRy3prj0FaThdZbQePU2
2025-01-15 22:20:44 UTC	1390	IN	Data Raw: 6e 35 6b 51 4e 44 73 35 72 38 4b 6d 51 6f 76 77 52 68 4c 62 77 73 54 68 73 79 4b 4e 6c 4b 4e 6e 4e 67 6b 4a 52 63 6d 48 45 46 45 44 62 65 64 75 47 70 66 7a 4e 70 4b 71 76 61 38 7a 51 78 4e 39 6d 66 4e 35 71 67 6c 4c 69 73 58 66 53 56 6e 6c 49 6c 61 6f 71 46 45 6d 7a 4d 68 6f 74 75 38 30 33 73 67 62 39 41 76 33 49 38 6e 4a 50 71 6a 70 45 50 52 6a 57 31 38 64 65 76 61 6f 58 66 77 2b 7a 30 44 57 78 75 69 44 53 65 50 78 68 7a 4e 48 79 35 68 55 70 34 4f 42 66 78 78 64 2f 61 72 55 57 68 4e 37 47 70 62 2f 64 4d 53 75 73 48 69 4d 57 65 4c 30 4f 4c 48 54 31 70 55 4a 45 38 39 54 58 45 32 33 44 42 33 4a 69 41 76 59 45 59 74 35 79 36 38 38 6a 35 51 61 70 62 53 6b 57 69 41 49 48 55 30 4c 51 52 78 7a 73 5a 6c 2b 39 76 43 73 54 4c 67 35 68 6e 53 62 61 31 62 53 2f 47 47 Data Ascii: n5kQNDs5r8KmQovwRhLbwsThsyKNlKNnNgkJRcmHEFEDbeduGpfzNpKqva8zQxN9mfN5qglLisXfSVnlIlaoqFEmzMhotu803sgb9Av3I8nJPqjpEPRjW18devaoXfw+z0DWxuiDSePxhzNHy5hUp4OBfxxd/arUWhN7Gpb/dMSusHiMWeL0OLHT1pUJE89TXE23DB3JiAvYEYt5y688j5QapbSkWiAIHU0LQRxzsZl+9vCsTLg5hnSba1bS/GG
2025-01-15 22:20:44 UTC	1390	IN	Data Raw: 41 42 69 70 63 6f 6a 35 67 5a 73 46 61 52 55 6a 41 46 4e 6a 46 36 77 36 45 4d 57 6f 32 53 45 35 50 69 77 62 34 58 2b 70 31 34 75 72 53 42 53 55 55 4a 35 56 53 51 4a 37 6b 6f 67 6e 41 56 53 58 70 48 6a 7a 52 48 68 74 63 77 30 38 55 44 79 54 6a 68 6e 72 2b 6c 54 41 7a 61 6a 34 4a 33 35 67 57 74 5a 4b 50 67 54 6f 56 44 55 2b 59 34 77 71 67 51 51 46 50 79 48 2b 72 68 63 2f 65 51 67 73 4f 7a 69 31 39 6b 6b 47 73 69 34 56 4c 75 59 63 45 63 4d 30 30 4d 50 7a 48 39 52 61 63 45 56 6b 79 63 66 49 55 43 66 69 6d 4f 57 42 4d 54 62 4d 50 75 48 38 6b 33 2b 7a 70 4d 5a 4e 42 47 54 41 77 39 6e 79 77 56 4f 47 74 48 6b 54 73 31 2b 73 44 48 64 70 47 6f 67 49 6e 5a 37 74 70 4e 73 56 7a 6d 57 35 74 47 31 48 42 6b 36 65 78 66 4f 36 52 76 76 6e 2b 76 54 52 45 46 2b 2f 6b 5a 30 Data Ascii: ABipcoj5gZsFaRUjAFNjF6w6EMWo2SE5Piwb4X+p14urSBSUUJ5VSQJ7kognAVSXpHjzRHhtcw08UDyTjhnr+lTAzaj4J35gWtZKPgToVDU+Y4wqgQQFPyH+rhc/eQgsOzi19kkGsi4VLuYcEcM00MPzH9RacEVkycfIUCfimOWBMTbMPuH8k3+zpMZNBGTAw9nywVOGtHkTs1+sDHdpGogInZ7tpNsVzmW5tG1HBk6exfO6Rvvn+vTREF+/kZ0
2025-01-15 22:20:44 UTC	1390	IN	Data Raw: 79 34 34 57 75 4f 58 6a 43 73 52 6b 4d 4f 76 6b 32 77 37 55 70 49 2b 64 75 61 66 75 36 79 42 33 56 4a 32 51 49 6d 31 65 47 44 65 52 36 70 75 55 72 71 5a 52 71 32 2f 34 56 43 54 77 33 31 4b 75 6d 4c 30 6b 58 62 59 54 32 6d 71 32 56 75 42 6d 73 6d 39 51 62 6e 57 6c 78 36 66 2f 42 2b 32 6f 30 6c 58 76 42 4e 74 76 51 56 37 73 75 36 48 79 6a 62 4f 39 4e 69 4e 34 31 38 64 53 49 58 46 66 5a 49 2f 2b 36 6d 55 57 36 30 59 69 35 56 6e 72 73 49 2b 43 32 36 76 4d 6e 32 2b 42 72 34 58 33 5a 7a 79 6e 6f 71 37 77 46 2b 5a 62 44 5a 76 38 51 67 58 77 4f 73 62 57 34 79 2f 5a 53 4c 5a 68 76 62 50 67 36 36 2b 79 4e 63 38 4c 4b 35 59 54 52 41 79 74 47 35 74 45 39 5a 62 41 64 61 59 33 6d 38 70 45 4c 59 50 36 4d 73 67 5a 74 53 4d 43 6b 68 45 59 63 39 30 61 52 49 39 4b 4f 43 54 Data Ascii: y44WuOXjCsRkMOvk2w7UpI+duafu6yB3VJ2QIm1eGDeR6puUrqZRq2/4VCTw31KumL0kXbYT2mq2VuBmsm9QbnWlx6f/B+2o0lXvBNtvQV7su6HyjbO9NiN418dSIXFfZI/+6mUW60Yi5VnrsI+C26vMn2+Br4X3Zzynoq7wF+ZbDZv8QgXwOsbW4y/ZSLZhvbPg66+yNc8LK5YTRAytG5tE9ZbAdaY3m8pELYP6MsgZtSMCkhEYc90aRI9KOCT
2025-01-15 22:20:44 UTC	1390	IN	Data Raw: 65 75 66 66 32 6e 38 31 54 4f 31 49 2b 45 44 75 55 33 58 7a 45 37 6e 33 32 75 52 59 34 61 79 6b 54 51 4a 78 44 4c 2b 34 55 77 31 48 46 7a 78 36 79 53 78 30 72 52 45 75 44 50 31 5a 62 38 4f 51 6c 53 71 7a 33 57 5a 53 51 56 53 4f 49 34 31 70 2f 48 72 36 30 67 64 6a 36 54 6d 79 41 46 38 71 6e 6d 56 58 44 46 53 4c 45 30 59 5a 48 4e 43 52 48 34 41 63 35 5a 43 43 6e 4e 36 4f 39 43 43 6f 53 30 4c 6a 69 69 58 51 4e 52 44 73 6e 7a 37 73 35 66 6d 76 56 4a 79 61 33 6a 55 33 30 4f 4a 6f 2f 36 76 68 7a 31 6b 71 30 66 72 68 59 6e 73 52 7a 2b 52 30 74 4c 56 74 73 4d 77 2f 4a 35 59 46 63 41 37 32 7a 48 42 66 4e 52 5a 4a 47 63 64 45 6f 50 47 61 72 30 76 66 54 45 68 6e 4d 48 4e 73 55 74 6a 48 48 6d 58 67 2b 59 4a 56 79 46 44 68 38 57 47 4d 2b 77 63 37 44 6c 34 72 5a 6e 39 Data Ascii: euff2n81TO1I+EDuU3XzE7n32uRY4aykTQJxDL+4Uw1HFzx6ySx0rREuDP1Zb8OQlSqz3WZSQVSOI41p/Hr60gdj6TmyAF8qnmVXDFSLE0YZHNCRH4Ac5ZCCnN6O9CCoS0LjiiXQNRDsnz7s5fmvVJya3jU30OJo/6vhz1kq0frhYnsRz+R0tLVtsMw/J5YFcA72zHBfNRZJGcdEoPGar0vfTEhnMHNsUtjHHmXg+YJVyFDh8WGM+wc7Dl4rZn9
2025-01-15 22:20:44 UTC	1390	IN	Data Raw: 54 6c 6a 2f 42 68 6d 37 51 72 44 42 32 4c 47 37 39 69 53 6c 68 4e 6f 58 68 68 6c 42 55 6d 62 38 62 62 61 52 69 53 4b 78 71 47 2b 4b 65 5a 2f 72 4e 2b 6f 65 6a 39 73 4d 54 39 47 56 39 49 45 51 41 49 4a 49 78 72 4a 41 39 67 6a 6a 79 75 62 2b 36 4e 6f 51 69 56 47 55 64 32 7a 57 63 75 55 41 4d 73 52 75 64 75 30 78 63 6e 4c 41 41 52 51 79 47 31 31 46 68 63 72 53 50 7a 42 5a 30 31 76 2b 66 42 58 74 45 6d 55 74 37 53 72 34 74 58 53 4a 63 5a 5a 78 58 57 73 61 78 78 65 2b 34 70 46 37 4a 4f 77 5a 36 2f 4f 4a 46 64 61 68 2b 67 75 64 70 32 66 4b 6b 52 2b 6c 53 74 63 50 30 58 32 6d 41 73 49 69 45 6b 50 50 39 41 46 50 46 6a 31 2b 35 78 76 72 51 78 63 54 50 70 48 55 76 55 69 77 4c 50 66 6c 62 73 44 66 58 42 47 50 62 46 48 73 39 6a 62 70 46 69 56 72 72 58 46 6b 42 43 32 Data Ascii: Tlj/Bhm7QrDB2LG79iSlhNoXhhlBUmb8bbaRiSKxqG+KeZ/rN+oej9sMT9GV9IEQAIJIxrJA9gjjyub+6NoQiVGUd2zWcuUAMsRudu0xcnLAARQyG11FhcrSPzBZ01v+fBXtEmUt7Sr4tXSJcZZxXWsaxxe+4pF7JOwZ6/OJFdah+gudp2fKkR+lStcP0X2mAsIiEkPP9AFPFj1+5xvrQxcTPpHUvUiwLPflbsDfXBGPbFHs9jbpFiVrrXFkBC2
2025-01-15 22:20:44 UTC	1390	IN	Data Raw: 6c 43 6e 6c 65 47 45 4e 4a 4c 6e 53 67 4c 53 6a 47 63 63 57 2b 68 4d 64 5a 6a 78 4d 4d 37 68 54 48 68 73 42 61 75 49 47 46 57 70 6b 52 46 36 31 38 4f 45 59 38 48 6c 4a 67 4a 4d 58 44 4e 7a 4e 56 34 72 41 45 34 6c 4b 37 48 6e 46 63 4d 31 56 62 52 66 67 33 31 49 6b 34 39 6b 77 4f 4b 71 6a 6c 63 69 2b 48 59 33 6d 51 31 4f 30 73 79 42 4d 71 64 72 58 67 59 38 4b 65 6a 65 63 73 54 33 4c 4c 41 72 46 70 36 47 58 43 67 39 54 38 7a 71 62 57 52 34 69 38 42 58 74 52 2b 62 6a 6d 62 47 62 44 6c 4a 53 4a 2b 44 37 41 77 74 79 76 45 68 54 6c 35 67 69 4a 36 51 46 4c 53 54 57 41 49 36 77 34 65 37 77 44 6b 36 67 45 30 4c 36 41 31 78 71 45 43 65 51 51 64 50 49 79 30 48 4d 74 72 70 56 41 49 4e 63 45 46 37 79 31 55 76 34 65 59 4d 43 45 6f 6b 4f 65 43 5a 38 62 50 2f 5a 42 75 51 Data Ascii: lCnleGENJLnSgLSjGccW+hMdZjxMM7hTHhsBauIGFWpkRF618OEY8HlJgJMXDNzNV4rAE4lK7HnFcM1VbRfg31Ik49kwOKqjlci+HY3mQ1O0syBMqdrXgY8KejecsT3LLArFp6GXCg9T8zqbWR4i8BXtR+bjmbGbDlJSJ+D7AwtyvEhTl5giJ6QFLSTWAI6w4e7wDk6gE0L6A1xqECeQQdPIy0HMtrpVAINcEF7y1Uv4eYMCEokOeCZ8bP/ZBuQ
2025-01-15 22:20:44 UTC	1390	IN	Data Raw: 4c 41 6b 38 77 33 50 4e 52 7a 37 49 71 51 51 31 73 42 4e 53 4e 30 64 48 61 34 47 34 54 2b 34 70 68 6c 71 33 65 39 69 47 4a 51 5a 36 70 69 33 78 50 6f 63 44 46 37 43 4e 35 50 64 47 51 36 49 74 74 71 7a 5a 4b 38 52 43 65 41 51 34 61 39 74 4a 66 6e 42 6c 69 74 2b 33 6d 59 6c 65 46 73 31 77 51 5a 41 64 63 33 53 4b 2b 4e 68 37 69 66 7a 4e 39 4c 75 44 35 43 43 64 54 69 4e 61 76 56 2b 41 66 50 36 56 62 51 36 75 5a 6a 4a 6a 59 2f 6d 39 48 6e 51 6b 36 66 4f 79 4f 6e 53 6f 56 46 6c 39 6c 74 53 71 34 50 52 48 48 59 39 62 76 6e 59 47 31 4a 63 6c 37 53 48 63 63 48 53 62 7a 71 37 42 6f 6c 57 74 38 49 2b 6c 36 6d 52 6e 45 2f 56 31 4e 4c 77 66 66 66 6f 42 45 6a 76 63 64 70 59 57 44 36 4d 49 7a 33 35 48 4d 34 65 77 68 31 39 55 68 57 77 76 63 58 4e 52 42 63 56 63 2b 6d 79 Data Ascii: LAk8w3PNRz7IqQQ1sBNSN0dHa4G4T+4phlq3e9iGJQZ6pi3xPocDF7CN5PdGQ6IttqzZK8RCeAQ4a9tJfnBlit+3mYleFs1wQZAdc3SK+Nh7ifzN9LuD5CCdTiNavV+AfP6VbQ6uZjJjY/m9HnQk6fOyOnSoVFl9ltSq4PRHHY9bvnYG1Jcl7SHccHSbzq7BolWt8I+l6mRnE/V1NLwfffoBEjvcdpYWD6MIz35HM4ewh19UhWwvcXNRBcVc+my
2025-01-15 22:20:44 UTC	1390	IN	Data Raw: 70 53 38 34 63 58 61 6c 4e 34 4c 42 36 51 54 6d 74 4d 50 43 6a 72 42 46 50 74 30 6c 38 49 30 4f 38 64 66 64 31 36 53 42 45 56 33 6d 52 44 6c 33 74 49 76 71 77 48 6e 34 66 56 76 63 77 59 74 7a 4a 58 59 32 31 6a 64 54 4b 79 77 30 38 79 67 79 43 43 64 4f 38 70 41 6b 4c 67 77 37 57 6e 43 45 75 61 49 59 4e 69 55 63 33 67 64 41 72 58 31 38 53 73 73 73 67 37 79 64 70 6e 30 31 53 7a 63 45 37 69 63 62 71 69 4c 4c 65 6d 58 33 31 62 2f 38 6f 68 5a 51 4e 6e 67 4d 61 46 73 32 62 50 6d 6f 4d 76 4b 61 59 69 30 55 73 64 32 61 38 6e 67 32 45 4a 68 75 75 68 76 70 50 79 41 71 77 77 6b 62 58 75 4b 49 77 7a 75 47 33 33 45 42 37 50 4f 43 7a 7a 68 47 79 74 66 43 43 69 6d 44 4a 61 69 69 6b 48 56 64 35 54 38 69 73 41 31 6a 59 47 52 4c 79 79 42 49 4d 4c 6f 65 44 42 62 43 58 2b 4d Data Ascii: pS84cXalN4LB6QTmtMPCjrBFPt0l8I0O8dfd16SBEV3mRDl3tIvqwHn4fVvcwYtzJXY21jdTKyw08ygyCCdO8pAkLgw7WnCEuaIYNiUc3gdArX18Ssssg7ydpn01SzcE7icbqiLLemX31b/8ohZQNngMaFs2bPmoMvKaYi0Usd2a8ng2EJhuuhvpPyAqwwkbXuKIwzuG33EB7POCzzhGytfCCimDJaiikHVd5T8isA1jYGRLyyBIMLoeDBbCX+M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49979	142.250.186.142	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:44 UTC	920	OUT	GET /f/AGSKWxXd9Foo-Ehq0xgBlp-pejyP-Ol0ad23R_mcLF3Y9JbnGV6KrkTQez0VKEKlJJNzfX7YJXfMevUhSDXv4Lf_WRHLx0WuGH6Af5GoBw_TFsXy6R8uQmBEBn-BtdI6MsKAR_fcvkEPrw==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzM2OTc5NjQxLDgwMDAwMDAwXSxudWxsLG51bGwsbnVsbCxbbnVsbCxbNyw5XSxudWxsLDIsbnVsbCwiZW4iXSwiaHR0cHM6Ly9udWFuY2UtcGRmLXByb2Zlc3Npb25hbDIuc29mdHdhcmUuaW5mb3JtZXIuY29tLzcuMi8iLG51bGwsW1s4LCJCSHQwUkNmMExPbyJdLFs5LCJlbi1VUyJdLFsyMywiMTczNjk3OTYzNyJdLFsxOSwiMiJdLFsxNywiWzBdIl1dXQ HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:44 UTC	1954	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 15 Jan 2025 22:20:44 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-_9vBjvBf_TM74kWnJmVqDw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version reporting-endpoints: default="/_/ContributorServingWebSwitchboardHttp/web-reports?context=eJzjqtDikmII0JBikPj6kkkDiJ3SZ7AGAXHrzXOsU4HYaO15VicgTvp3nrUIiA0VLrE6gnDRJVZPIFbtucRqCsT3111ifQ7EH-ovs_4A4hnnL7MuAOIiiSusTUDM8PUKKwcQ27JeY3UFYiEejj0vF-xhE9jxZv9CJiWNpPzC-OT8vJKizKTSkvyitOS01OLUorLUongjAyNTA0NDEz0D4_gCAwC67kg1" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 22:20:44 UTC	1954	IN	Data Raw: 32 37 61 31 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 76 61 72 20 42 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 5f 2e 61 Data Ascii: 27a1if (typeof __googlefc.fcKernelManager.run === 'function') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{var Bo=function(a){if(!a)return null;a=_.a
2025-01-15 22:20:44 UTC	1954	IN	Data Raw: 26 0a 61 3d 3d 3d 31 26 26 5f 2e 6f 6e 28 63 2c 31 30 2c 21 30 29 3b 62 28 63 29 7d 3b 76 61 72 20 53 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 3d 5b 5d 7d 3b 53 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 69 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 61 2c 5b 62 5d 2e 63 6f 6e 63 61 74 28 5f 2e 6f 61 28 5f 2e 70 63 2e 61 70 70 6c 79 28 30 2c 61 72 67 75 6d 65 6e 74 73 29 29 29 29 7d 29 7d 3b 53 6f 2e 70 72 6f 74 6f 74 79 70 65 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 5f 2e 70 63 2e 61 70 70 6c 79 28 30 2c 61 72 67 75 6d 65 6e 74 73 29 2c 62 3d 74 68 69 73 2e 69 2c Data Ascii: &a===1&&_.on(c,10,!0);b(c)};var So=function(){this.i=[]};So.prototype.addEventListener=function(a,b){this.i.push(function(){a.call.apply(a,[b].concat(_.oa(_.pc.apply(0,arguments))))})};So.prototype.g=function(){for(var a=_.pc.apply(0,arguments),b=this.i,
2025-01-15 22:20:44 UTC	1954	IN	Data Raw: 62 29 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 57 6f 28 61 2c 32 29 7d 29 7d 3b 0a 76 61 72 20 67 70 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 62 2e 63 6c 61 73 73 4e 61 6d 65 3d 61 2e 6f 3b 62 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 70 78 22 3b 62 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 70 78 22 3b 62 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 3b 62 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 2d 31 30 30 30 30 70 78 22 3b 62 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 2d 22 2b 4d 61 74 68 2e 66 6c 6f 6f 72 28 39 39 39 30 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 32 30 29 2b 22 70 78 22 3b 62 2e 73 74 79 6c 65 Data Ascii: b)})},function(){Wo(a,2)})};var gp=function(a){var b=document.createElement("div");b.className=a.o;b.style.width="1px";b.style.height="1px";b.style.position="absolute";b.style.left="-10000px";b.style.top="-"+Math.floor(9990+Math.random()*20)+"px";b.style
2025-01-15 22:20:44 UTC	1954	IN	Data Raw: 72 20 63 3d 6e 65 77 20 52 6f 28 61 2e 44 2c 61 2e 41 2c 61 2e 43 2c 61 2e 42 29 3b 62 70 28 61 2e 75 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 2e 73 74 61 72 74 28 65 2c 62 29 7d 29 3b 76 61 72 20 64 3d 75 70 28 61 29 3b 61 70 28 61 2e 75 2c 64 2e 6d 63 29 3b 64 2e 4a 63 28 29 7d 3b 76 61 72 20 78 70 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 3d 5f 2e 74 28 61 29 7d 3b 5f 2e 75 28 78 70 2c 5f 2e 47 29 3b 76 61 72 20 79 70 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 3d 5f 2e 74 28 61 29 7d 3b 5f 2e 75 28 79 70 2c 5f 2e 47 29 3b 76 61 72 20 7a 70 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 3d 5f 2e 74 28 61 29 7d 3b 5f 2e 75 28 7a 70 2c 5f 2e 47 29 3b 76 61 72 20 41 70 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 Data Ascii: r c=new Ro(a.D,a.A,a.C,a.B);bp(a.u,function(e){c.start(e,b)});var d=up(a);ap(a.u,d.mc);d.Jc()};var xp=function(a){this.l=_.t(a)};_.u(xp,_.G);var yp=function(a){this.l=_.t(a)};_.u(yp,_.G);var zp=function(a){this.l=_.t(a)};_.u(zp,_.G);var Ap=function(a){thi
2025-01-15 22:20:44 UTC	1954	IN	Data Raw: 48 4e 6c 62 6e 4e 6c 49 47 56 69 59 58 6c 68 5a 48 4d 67 62 6d 46 30 61 58 5a 6c 59 57 52 7a 5a 58 4a 32 5a 58 4a 7a 61 57 52 6c 59 32 39 75 64 47 56 75 64 47 31 76 5a 48 56 73 5a 53 42 68 5a 44 4d 77 4d 48 67 79 4e 54 41 74 4d 69 49 73 57 32 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 43 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 42 68 5a 32 56 68 5a 44 49 75 5a 32 39 76 5a 32 78 6c 63 33 6c 75 5a 47 6c 6a 59 58 52 70 62 32 34 75 59 32 39 74 4c 33 42 68 5a 32 56 68 5a 43 39 71 63 79 39 6e 62 32 39 6e 62 47 56 66 64 47 39 77 58 32 56 34 63 43 35 71 63 7a 39 6d 59 32 52 63 64 54 41 77 4d 32 52 30 63 6e 56 6c 49 6c 30 73 57 32 35 31 62 47 77 73 62 6e 56 73 62 43 77 69 61 48 52 30 63 48 4d 36 4c 79 39 77 59 57 64 6c 59 57 51 79 4c 6d 64 76 62 32 64 73 Data Ascii: HNlbnNlIGViYXlhZHMgbmF0aXZlYWRzZXJ2ZXJzaWRlY29udGVudG1vZHVsZSBhZDMwMHgyNTAtMiIsW251bGwsbnVsbCxudWxsLCJodHRwczovL3BhZ2VhZDIuZ29vZ2xlc3luZGljYXRpb24uY29tL3BhZ2VhZC9qcy9nb29nbGVfdG9wX2V4cC5qcz9mY2RcdTAwM2R0cnVlIl0sW251bGwsbnVsbCwiaHR0cHM6Ly9wYWdlYWQyLmdvb2ds
2025-01-15 22:20:44 UTC	383	IN	Data Raw: 31 62 6d 52 70 62 6d 64 6a 61 47 39 70 59 32 56 7a 62 57 56 7a 63 32 46 6e 5a 58 4d 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 66 4c 30 4e 76 62 6e 52 79 61 57 4a 31 64 47 39 79 55 32 56 79 64 6d 6c 75 5a 31 64 6c 59 6c 4e 33 61 58 52 6a 61 47 4a 76 59 58 4a 6b 53 48 52 30 63 43 39 71 63 32 56 79 63 6d 39 79 49 6c 31 64 58 51 5c 5c 75 30 30 33 64 5c 5c 75 30 30 33 64 5c 78 32 32 5c 78 35 64 5c 78 35 64 2c 5c 78 35 62 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 78 32 32 68 74 74 70 73 3a 5c 2f 5c 2f 66 75 6e 64 69 6e 67 63 68 6f 69 63 65 73 6d 65 73 73 61 67 65 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 5c 2f 66 5c 2f 41 47 53 4b 57 78 57 56 59 6e 67 68 51 53 78 38 56 30 76 65 5a 4a 44 59 45 44 39 4b 47 70 65 71 4a 6d 6d 37 7a 39 70 48 72 6a 44 37 6e 4a Data Ascii: 1bmRpbmdjaG9pY2VzbWVzc2FnZXMuZ29vZ2xlLmNvbS9fL0NvbnRyaWJ1dG9yU2VydmluZ1dlYlN3aXRjaGJvYXJkSHR0cC9qc2Vycm9yIl1dXQ\\u003d\\u003d\x22\x5d\x5d,\x5bnull,null,null,\x22https:\/\/fundingchoicesmessages.google.com\/f\/AGSKWxWVYnghQSx8V0veZJDYED9KGpeqJmm7z9pHrjD7nJ
2025-01-15 22:20:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49980	104.22.16.194	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:44 UTC	720	OUT	GET /favicon.ico HTTP/1.1 Host: software.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635; __gads=ID=5c69e94fc791666f:T=1736979637:RT=1736979637:S=ALNI_MZ91N_Bhxth3E9d4L0p2k_EFPCBew; __gpi=UID=00000fbf26fe8626:T=1736979637:RT=1736979637:S=ALNI_MaVs1UyIzr7FOvcBakfRn50LMdu2Q; __eoi=ID=04f90f572a58aaff:T=1736979637:RT=1736979637:S=AA-AfjahxK2Y084g0TaOOC-JkUpD
2025-01-15 22:20:44 UTC	373	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:44 GMT Content-Type: image/x-icon Content-Length: 32038 Connection: close Last-Modified: Mon, 14 Jan 2019 15:54:18 GMT ETag: "5c3cb0aa-7d26" Expires: Tue, 21 Jan 2025 06:25:11 GMT Cache-Control: max-age=604800 CF-Cache-Status: HIT Age: 143733 Accept-Ranges: bytes Server: cloudflare CF-RAY: 9029413c8f9addaf-DFW
2025-01-15 22:20:44 UTC	996	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 01 00 20 00 68 04 00 00 46 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 ae 04 00 00 30 30 00 00 01 00 20 00 a8 25 00 00 56 15 00 00 40 40 00 00 01 00 20 00 28 42 00 00 fe 3a 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 01 ff 6a 3d 01 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6b 3d 02 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6c 3e 03 ff 6c 3e 03 ff 69 3b 00 ff 69 3b 00 ff 6b 3e 02 ff 6d 3f 04 ff 6b 3d 02 ff 66 37 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6c Data Ascii: hF 00 %V@@ (B:( j<j<j<j<j<j<j<j<j=j<j<j<k=j<j<j<j<j<j<j<j<l>l>i;i;k>m?k=f7j<j<j<j<j<j<j<l
2025-01-15 22:20:44 UTC	1369	IN	Data Raw: 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6b 3d 01 ff 6c 3e 03 ff 65 35 00 ff 5f 2e 00 ff 5f 2d 00 ff 64 34 00 ff 6b 3e 02 ff 6b 3d 02 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6b 3e 02 ff 6c 3f 04 ff 6c 3f 04 ff 6b 3e 02 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a Data Ascii: j<j<j<j<j<j<k=l>e5_._-d4k>k=j<j<j<j<j<j<j<j<j<j<k>l?l?k>j<j<j<j<j<j<( @ j<j<j<j
2025-01-15 22:20:44 UTC	1369	IN	Data Raw: ff 6b 3d 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6c 3f 03 ff 60 2f 00 ff ab 91 76 ff ff ff ff ff ff ff ff ff d6 ca be ff 84 5e 2f ff 63 32 00 ff 5f 2e 01 ff 61 30 00 ff 61 30 00 ff 60 2e 01 ff 60 2f 00 ff 76 4b 17 ff bf ab 96 ff ff fe ff ff fc fa f9 ff ff ff ff ff be aa 96 ff 60 2f 00 ff 6c 3f 04 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6c 3f 03 ff 62 31 00 ff 90 6e 4a ff ff ff ff ff ff ff ff ff bf ab 95 ff 63 32 00 ff 64 34 00 ff 6c 3f 02 ff 6c 3f 04 ff 6c 3f 04 ff 6c 3f 03 ff 6c 3f 04 ff 6c 3f 03 ff 67 38 02 ff 5d 2b 00 ff 9f 81 5f ff fc fa fa ff ff ff ff ff bd a9 94 ff 5f 2e Data Ascii: k=j<j<j<j<j<j<j<j<j<j<j<l?`/v^/c2_.a0a0`.`/vK`/l?j<j<j<j<j<j<j<j<j<j<l?b1nJc2d4l?l?l?l?l?l?g8]+__.
2025-01-15 22:20:44 UTC	1369	IN	Data Raw: 79 50 1c ff 63 33 00 ff 68 39 01 ff 6b 3d 00 ff 6a 3c 00 ff 6d 3f 04 ff 60 2f 00 ff 9a 7b 5b ff ff ff ff ff ea e4 df ff 6f 42 0c ff 69 3a 00 ff 6a 3d 01 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6c 3f 03 ff 61 31 00 ff 95 75 50 ff ff ff ff ff f8 f6 f4 ff 7d 55 2b ff 64 34 00 ff 6c 3f 03 ff 6a 3c 00 ff 6a 3c 00 ff 6c 3e 03 ff 68 39 00 ff 66 37 00 ff 6b 3e 02 ff 6b 3d 01 ff 6a 3c 00 ff 6b 3d 01 ff 6a 3d 01 ff 66 37 05 ff de d4 c9 ff ff ff ff ff ba a5 8f ff 60 2f 00 ff 6c 3f 03 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 01 ff 6a 3d 00 ff 67 38 00 ff da ce c3 ff ff ff ff ff d8 cc be ff 66 37 05 ff 67 39 00 ff 6d 40 04 ff 6a 3c 01 ff 6a 3c 00 ff 6b 3d 01 Data Ascii: yPc3h9k=j<m?`/{[oBi:j=j<j<j<j<j<j<j<l?a1uP}U+d4l?j<j<l>h9f7k>k=j<k=j=f7`/l?j<j<j<j<j<j<j<j<j<j=g8f7g9m@j<j<k=
2025-01-15 22:20:44 UTC	1369	IN	Data Raw: 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: <j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<
2025-01-15 22:20:44 UTC	1369	IN	Data Raw: 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a Data Ascii: j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j
2025-01-15 22:20:44 UTC	1369	IN	Data Raw: ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6c 3e 04 ff 5f 2e 00 ff 9b 7c 5b ff f7 f5 f4 ff ff ff ff ff fc fb fa ff fe fe fd ff ff ff ff ff f6 f3 f1 ff d9 cd c2 ff bf ab 96 ff af 97 7c ff ad 94 78 ff b7 a1 88 ff cd be af ff eb e5 e0 ff ff ff ff ff ff ff ff ff fd fc fb ff fe fe fe ff fe fe fd ff fd fc fc ff ff ff fe ff fe fd fd ff ff ff ff ff 93 72 4c ff 62 31 00 ff 6c 3e 03 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6c 3f 03 ff 60 2f 00 ff ab 92 78 ff ff ff ff ff fd fc fb ff fc fb f9 ff ff ff ff ff e6 df d9 ff a4 87 69 ff 75 4b 18 ff 64 34 00 ff 60 2e 01 ff 5f 2e 00 ff 5f 2e Data Ascii: j<j<j<l>_.\|[\|xrLb1l>j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<l?`/xiuKd4`._._.
2025-01-15 22:20:44 UTC	1369	IN	Data Raw: 6b 3e 02 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6c 3e 03 ff 69 3a 01 ff 62 31 00 ff 61 30 00 ff 66 36 00 ff 6c 3e 02 ff 6a 3c 01 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6c 3e 02 ff 63 33 00 ff d6 c9 be ff ff ff ff ff ff ff ff ff d3 c5 b9 ff 63 33 00 ff 6c 3e 02 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6c 3f 03 ff 61 30 00 ff c7 b6 a6 ff ff ff ff ff ff ff ff ff d4 c7 bc ff 63 32 00 ff 6c 3e 02 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6c 3e 02 ff 63 32 00 ff 6e 41 0f ff 92 70 49 ff 9a 7a 56 ff 7d 55 26 ff 61 31 00 ff 6a 3b 02 ff 6a 3d 00 ff 6a 3c 00 ff 6a 3c 00 Data Ascii: k>j<j<j<j<j<l>i:b1a0f6l>j<j<j<j<j<j<l>c3c3l>j<j<j<j<j<j<j<j<j<j<j<j<j<j<l?a0c2l>j<j<j<j<j<l>c2nApIzV}U&a1j;j=j<j<
2025-01-15 22:20:44 UTC	1369	IN	Data Raw: ff ff ff fd fc fb ff fc fc fb ff fd fc fb ff fb fa f9 ff ff ff ff ff ce bf b0 ff 63 33 00 ff 6b 3e 02 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6b 3e 02 ff 63 33 00 ff d6 ca be ff ff ff ff ff ff ff ff ff b3 9b 80 ff 5f 2e 00 ff 6c 3f 04 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3d 01 ff 68 3a 00 ff 6f 43 0d ff ee e9 e5 ff ff ff ff ff ff ff ff ff 9c 7e 5e ff 61 30 00 ff 6c 3f 04 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6b 3e 01 ff 63 33 00 ff b6 a0 8a ff ff ff ff ff fe fe fe ff fe fd fd ff ff ff ff ff e3 da d3 ff 75 4a 1c ff 67 38 00 ff 6b 3d 01 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3d 01 ff 69 3a 00 ff 6f 43 0f ff ef e9 e6 ff Data Ascii: c3k>j<j<j<j<k>c3_.l?j<j<j<j<j<j<j<j<j<j<j<j<j=h:oC~^a0l?j<j<j<j<k>c3uJg8k=j<j<j<j=i:oC
2025-01-15 22:20:44 UTC	1369	IN	Data Raw: 00 ff 6a 3d 01 ff 6d 40 04 ff 69 3b 02 ff 5e 2c 00 ff ab 92 76 ff ff ff ff ff fb fa f9 ff ff ff ff ff db d0 c7 ff 68 39 05 ff 6a 3c 00 ff 6a 3c 01 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6c 3e 02 ff 62 32 00 ff c6 b4 a3 ff ff ff ff ff fa f8 f7 ff ff ff ff ff e7 e0 da ff 86 61 37 ff 5e 2d 00 ff 65 36 01 ff 6c 3e 02 ff 6c 3f 04 ff 6c 3e 03 ff 6b 3e 03 ff 6b 3e 02 ff 6c 3e 03 ff 6c 3f 04 ff 6c 3f 03 ff 69 3b 01 ff 60 2e 00 ff 6c 3e 0c ff c2 af 9c ff ff ff ff ff fb fa f9 ff ff ff ff ff f2 ee eb ff 7a 51 27 ff 65 36 00 ff 6b 3e 02 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a 3c 00 ff 6a Data Ascii: j=m@i;^,vh9j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<j<l>b2a7^-e6l>l?l>k>k>l>l?l?i;`.l>zQ'e6k>j<j<j<j<j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49981	74.117.179.70	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:44 UTC	721	OUT	GET /images/spacer.gif HTTP/1.1 Host: img.informer.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_207ENHB31P=GS1.1.1736979634.1.0.1736979634.0.0.0; _ga=GA1.1.1288033908.1736979635; __gads=ID=5c69e94fc791666f:T=1736979637:RT=1736979637:S=ALNI_MZ91N_Bhxth3E9d4L0p2k_EFPCBew; __gpi=UID=00000fbf26fe8626:T=1736979637:RT=1736979637:S=ALNI_MaVs1UyIzr7FOvcBakfRn50LMdu2Q; __eoi=ID=04f90f572a58aaff:T=1736979637:RT=1736979637:S=AA-AfjahxK2Y084g0TaOOC-JkUpD
2025-01-15 22:20:45 UTC	297	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 15 Jan 2025 21:59:34 GMT Content-Type: image/gif Content-Length: 43 Last-Modified: Fri, 24 Aug 2018 10:02:53 GMT Connection: close ETag: "5b7fd7cd-2b" Expires: Thu, 15 Jan 2026 21:59:34 GMT Cache-Control: max-age=31536000 Accept-Ranges: bytes
2025-01-15 22:20:45 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 ff ff ff 21 f9 04 05 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49985	142.250.184.225	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:44 UTC	572	OUT	GET /sodar/sodar2.js HTTP/1.1 Host: ep2.adtrafficquality.google Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:45 UTC	665	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="adspam-signals-scs" Report-To: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]} Content-Length: 17945 Date: Wed, 15 Jan 2025 22:20:45 GMT Expires: Wed, 15 Jan 2025 22:20:45 GMT Cache-Control: private, max-age=3000 ETag: "1727224258380615" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-15 22:20:45 UTC	725	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 76 61 72 20 6b 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 Data Ascii: (function(){'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var k=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return
2025-01-15 22:20:45 UTC	1390	IN	Data Raw: 0a 66 75 6e 63 74 69 6f 6e 20 78 28 61 2c 62 2c 63 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 64 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 61 3d 64 2e 6c 65 6e 67 74 68 3d 3d 3d 31 3b 76 61 72 20 67 3d 64 5b 30 5d 2c 66 3b 21 61 26 26 67 20 69 6e 20 72 3f 66 3d 72 3a 66 3d 6e 3b 66 6f 72 28 67 3d 30 3b 67 3c 64 2e 6c 65 6e 67 74 68 2d 31 3b 67 2b 2b 29 7b 76 61 72 20 65 3d 64 5b 67 5d 3b 69 66 28 21 28 65 20 69 6e 20 66 29 29 62 72 65 61 6b 20 61 3b 66 3d 66 5b 65 5d 7d 64 3d 64 5b 64 2e 6c 65 6e 67 74 68 2d 31 5d 3b 63 3d 70 26 26 63 3d 3d 3d 22 65 73 36 22 3f 66 5b 64 5d 3a 6e 75 6c 6c 3b 62 3d 62 28 63 29 3b 62 21 3d 6e 75 6c 6c 26 26 28 61 3f 6b 28 72 2c 64 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 Data Ascii: function x(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var g=d[0],f;!a&&g in r?f=r:f=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in f))break a;f=f[e]}d=d[d.length-1];c=p&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?k(r,d,{configurable:!0,writable:!0,va
2025-01-15 22:20:45 UTC	1390	IN	Data Raw: 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 72 2e 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 77 28 72 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 26 26 61 5b 77 28 72 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 61 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 53 74 72 69 6e 67 28 61 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 69 74 65 72 61 62 6c 65 20 6f 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 76 61 72 20 66 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 Data Ascii: {var b=typeof r.Symbol!="undefined"&&w(r.Symbol,"iterator")&&a[w(r.Symbol,"iterator")];if(b)return b.call(a);if(typeof a.length=="number")return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}var fa=typeof Object.create=="function"
2025-01-15 22:20:45 UTC	1390	IN	Data Raw: 74 75 72 6e 20 48 28 61 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 47 28 61 2c 62 2c 63 2c 64 29 7b 74 72 79 7b 76 61 72 20 67 3d 62 2e 63 61 6c 6c 28 61 2e 67 2e 68 2c 63 29 3b 69 66 28 21 28 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 74 65 72 61 74 6f 72 20 72 65 73 75 6c 74 20 22 2b 67 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 3b 69 66 28 21 67 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 61 2e 67 2e 6d 3d 21 31 2c 67 3b 76 61 72 20 66 3d 67 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 67 2e 68 3d 6e 75 6c 6c 2c 45 28 61 2e 67 2c 65 29 2c 48 28 61 29 7d 61 2e 67 2e 68 3d 6e 75 6c 6c 3b 64 2e 63 61 6c 6c 28 61 2e 67 2c 66 29 3b 72 Data Ascii: turn H(a)}function G(a,b,c,d){try{var g=b.call(a.g.h,c);if(!(g instanceof Object))throw new TypeError("Iterator result "+g+" is not an object");if(!g.done)return a.g.m=!1,g;var f=g.value}catch(e){return a.g.h=null,E(a.g,e),H(a)}a.g.h=null;d.call(a.g,f);r
2025-01-15 22:20:45 UTC	1390	IN	Data Raw: 2e 70 72 6f 74 6f 74 79 70 65 2e 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 68 69 73 2e 67 3d 3d 6e 75 6c 6c 29 7b 74 68 69 73 2e 67 3d 5b 5d 3b 76 61 72 20 68 3d 74 68 69 73 3b 74 68 69 73 2e 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 2e 6d 28 29 7d 29 7d 74 68 69 73 2e 67 2e 70 75 73 68 28 65 29 7d 3b 76 61 72 20 67 3d 6e 2e 73 65 74 54 69 6d 65 6f 75 74 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 67 28 65 2c 30 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 74 68 69 73 2e 67 26 26 74 68 69 73 2e 67 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 67 3b 74 68 69 73 2e 67 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 65 2e 6c 65 6e 67 Data Ascii: .prototype.h=function(e){if(this.g==null){this.g=[];var h=this;this.i(function(){h.m()})}this.g.push(e)};var g=n.setTimeout;c.prototype.i=function(e){g(e,0)};c.prototype.m=function(){for(;this.g&&this.g.length;){var e=this.g;this.g=[];for(var h=0;h<e.leng
2025-01-15 22:20:45 UTC	1390	IN	Data Raw: 64 22 29 72 65 74 75 72 6e 21 30 3b 74 79 70 65 6f 66 20 65 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 65 3d 6e 65 77 20 65 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 74 79 70 65 6f 66 20 68 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 65 3d 6e 65 77 20 68 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 28 65 3d 6e 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 2c 65 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 21 31 2c 21 30 2c 65 29 29 3b 65 2e 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 65 2e Data Ascii: d")return!0;typeof e==="function"?e=new e("unhandledrejection",{cancelable:!0}):typeof h==="function"?e=new h("unhandledrejection",{cancelable:!0}):(e=n.document.createEvent("CustomEvent"),e.initCustomEvent("unhandledrejection",!1,!0,e));e.promise=this;e.
2025-01-15 22:20:45 UTC	1390	IN	Data Raw: 29 2c 6c 3d 68 2e 6e 65 78 74 28 29 3b 77 68 69 6c 65 28 21 6c 2e 64 6f 6e 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 62 7d 2c 22 65 73 36 22 29 3b 0a 78 28 22 67 6c 6f 62 61 6c 54 68 69 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 6e 7d 2c 22 65 73 5f 32 30 32 30 22 29 3b 78 28 22 41 72 72 61 79 2e 66 72 6f 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 63 3d 63 21 3d 6e 75 6c 6c 3f 63 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 7d 3b 76 61 72 20 67 3d 5b 5d 2c 66 3d 74 79 70 65 6f 66 20 72 2e 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 77 28 72 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 26 26 62 5b Data Ascii: ),l=h.next();while(!l.done)})};return b},"es6");x("globalThis",function(a){return a\|\|n},"es_2020");x("Array.from",function(a){return a?a:function(b,c,d){c=c!=null?c:function(h){return h};var g=[],f=typeof r.Symbol!="undefined"&&w(r.Symbol,"iterator")&&b[
2025-01-15 22:20:45 UTC	1390	IN	Data Raw: 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 32 2f 61 66 72 61 6d 65 22 5d 29 2c 74 61 3d 50 28 73 61 29 3b 66 75 6e 63 74 69 6f 6e 20 51 28 61 2c 62 2c 63 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 2c 62 29 7b 61 2e 73 72 63 3d 72 61 28 62 29 3b 76 61 72 20 63 2c 64 3b 28 63 3d 28 62 3d 28 64 3d 28 63 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 26 26 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 77 69 6e 64 6f 77 29 2e 64 6f 63 75 6d 65 6e 74 29 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 Data Ascii: ww.google.com/recaptcha/api2/aframe"]),ta=P(sa);function Q(a,b,c){a.addEventListener&&a.addEventListener(b,c,!1)};function ua(a,b){a.src=ra(b);var c,d;(c=(b=(d=(c=(a.ownerDocument&&a.ownerDocument.defaultView\|\|window).document).querySelector)==null?void 0
2025-01-15 22:20:45 UTC	1390	IN	Data Raw: 69 73 2e 4a 3d 62 3b 74 68 69 73 2e 68 3d 67 3b 74 68 69 73 2e 6f 3d 63 3d 3d 3d 76 6f 69 64 20 30 3f 30 3a 63 3b 74 68 69 73 2e 69 3d 28 64 3d 3d 3d 76 6f 69 64 20 30 3f 30 3a 64 29 3f 50 28 7a 61 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 29 3a 50 28 41 61 2c 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 42 61 28 61 29 7b 72 65 74 75 72 6e 20 49 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 73 77 69 74 63 68 28 62 2e 67 29 7b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 46 28 62 2c 43 61 28 61 29 2c 32 29 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 46 28 62 2c 44 61 28 61 29 2c 33 29 3b 63 61 73 65 20 33 3a 69 66 28 21 28 61 2e 6f 3e 30 29 29 7b 62 2e 67 3d 34 3b 62 72 65 61 6b 7d 72 65 74 Data Ascii: is.J=b;this.h=g;this.o=c===void 0?0:c;this.i=(d===void 0?0:d)?P(za,encodeURIComponent(a)):P(Aa,encodeURIComponent(a))}function Ba(a){return I(function(b){switch(b.g){case 1:return F(b,Ca(a),2);case 2:return F(b,Da(a),3);case 3:if(!(a.o>0)){b.g=4;break}ret
2025-01-15 22:20:45 UTC	1390	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 4a 61 28 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 3b 69 66 28 61 2e 47 6f 6f 67 6c 65 44 58 35 59 4b 55 53 6b 29 72 65 74 75 72 6e 20 61 2e 47 6f 6f 67 6c 65 44 58 35 59 4b 55 53 6b 5b 30 5d 3b 76 61 72 20 62 3d 6e 65 77 20 72 2e 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 61 2e 47 6f 6f 67 6c 65 44 58 35 59 4b 55 53 6b 3d 5b 62 2c 63 5d 7d 29 3b 72 65 74 75 72 6e 20 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 4b 61 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 47 6f 6f 67 6c 65 47 63 4c 4b 68 4f 6d 73 3d 3d 3d 76 6f 69 64 20 30 3f 31 33 3a 31 7d 3b 66 75 6e 63 74 69 6f 6e 20 53 28 61 2c 62 29 7b 74 68 69 73 2e 68 3d 61 3b 74 68 69 73 2e 6a 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 4c 61 28 61 2c 62 29 7b 53 2e 63 61 Data Ascii: }function Ja(){var a=window;if(a.GoogleDX5YKUSk)return a.GoogleDX5YKUSk[0];var b=new r.Promise(function(c){a.GoogleDX5YKUSk=[b,c]});return b}function Ka(){return window.GoogleGcLKhOms===void 0?13:1};function S(a,b){this.h=a;this.j=b}function La(a,b){S.ca

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49991	142.250.186.34	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:44 UTC	401	OUT	GET /getconfig/sodar?sv=200&tid=gda&tv=r20250113&st=env HTTP/1.1 Host: ep1.adtrafficquality.google Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:45 UTC	586	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Date: Wed, 15 Jan 2025 22:20:45 GMT Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 22:20:45 UTC	804	IN	Data Raw: 34 33 65 61 0d 0a 7b 22 73 6f 64 61 72 5f 71 75 65 72 79 5f 69 64 22 3a 22 76 54 53 49 5a 39 54 6c 43 75 36 44 6a 75 77 50 7a 4b 47 69 79 51 67 22 2c 22 69 6e 6a 65 63 74 6f 72 5f 62 61 73 65 6e 61 6d 65 22 3a 22 73 6f 64 61 72 32 22 2c 22 62 67 5f 68 61 73 68 5f 62 61 73 65 6e 61 6d 65 22 3a 22 64 4e 49 78 35 44 57 5a 70 2d 4f 43 76 62 32 55 78 67 72 4c 6d 36 70 5f 73 42 67 78 62 44 33 72 5a 41 39 39 6a 73 35 61 76 37 59 22 2c 22 62 67 5f 62 69 6e 61 72 79 22 3a 22 68 55 77 47 53 34 37 76 34 58 49 6d 2b 76 53 4a 44 52 59 77 4e 77 69 71 41 52 48 65 42 72 36 71 59 4e 72 59 4b 56 48 78 66 6a 64 68 7a 7a 79 77 70 54 4b 30 4c 74 64 44 34 4d 70 68 67 66 43 7a 47 76 35 74 78 33 44 75 6d 56 57 42 6c 51 54 6e 2f 67 39 55 6a 34 74 62 6e 53 4e 56 62 79 75 4e 73 2b Data Ascii: 43ea{"sodar_query_id":"vTSIZ9TlCu6DjuwPzKGiyQg","injector_basename":"sodar2","bg_hash_basename":"dNIx5DWZp-OCvb2UxgrLm6p_sBgxbD3rZA99js5av7Y","bg_binary":"hUwGS47v4XIm+vSJDRYwNwiqARHeBr6qYNrYKVHxfjdhzzywpTK0LtdD4MphgfCzGv5tx3DumVWBlQTn/g9Uj4tbnSNVbyuNs+
2025-01-15 22:20:45 UTC	1390	IN	Data Raw: 48 70 69 45 6b 44 4b 58 6f 48 75 6d 79 6c 59 64 6f 54 69 75 72 52 39 50 55 66 6d 31 33 58 41 65 69 6e 47 6c 70 33 33 69 43 56 74 59 46 66 65 74 59 50 69 38 4c 67 52 6c 71 4e 49 58 72 64 71 51 56 72 32 33 31 79 63 71 4a 7a 33 5a 36 31 66 71 32 63 70 77 30 36 42 34 71 2b 39 68 33 46 6b 61 36 37 51 36 44 43 77 59 67 5a 55 5a 71 32 76 36 35 31 4a 38 4c 73 5a 73 6b 74 6e 64 2f 66 55 6f 50 47 73 30 69 4b 58 58 74 7a 6f 38 48 4b 72 37 4b 73 72 2f 70 62 66 4a 70 66 50 55 51 73 53 6b 6d 61 6e 56 4a 48 6c 30 37 66 6f 6a 41 61 33 4e 65 61 4f 73 4c 6b 47 4f 6e 78 66 71 63 39 74 30 31 4f 37 75 6e 58 64 59 69 30 33 67 42 59 59 4d 50 49 49 56 70 54 7a 37 71 38 72 32 6a 61 42 59 59 44 47 6a 53 65 74 35 6b 4e 49 5a 56 72 38 58 5a 41 78 37 39 43 34 4a 2f 47 38 73 6f 4b 46 Data Ascii: HpiEkDKXoHumylYdoTiurR9PUfm13XAeinGlp33iCVtYFfetYPi8LgRlqNIXrdqQVr231ycqJz3Z61fq2cpw06B4q+9h3Fka67Q6DCwYgZUZq2v651J8LsZsktnd/fUoPGs0iKXXtzo8HKr7Ksr/pbfJpfPUQsSkmanVJHl07fojAa3NeaOsLkGOnxfqc9t01O7unXdYi03gBYYMPIIVpTz7q8r2jaBYYDGjSet5kNIZVr8XZAx79C4J/G8soKF
2025-01-15 22:20:45 UTC	1390	IN	Data Raw: 32 43 4c 6b 77 63 76 7a 48 73 31 4e 79 55 64 56 34 51 66 35 36 6c 51 7a 68 69 2b 48 33 76 46 63 69 65 42 43 35 37 50 38 39 66 6b 77 63 72 70 31 65 51 41 4a 44 7a 7a 33 44 63 4e 44 73 35 6f 47 4b 4d 4e 50 43 67 4b 67 2b 31 7a 6b 70 4f 44 6e 57 2f 59 45 78 35 77 68 67 61 79 68 2b 39 5a 6e 44 74 33 66 4b 2f 42 70 45 72 6f 30 58 42 64 6a 45 79 77 39 70 61 67 58 6e 34 30 50 34 66 6f 6b 53 74 54 59 31 42 43 50 34 38 58 77 4a 72 32 48 47 6c 56 39 58 51 48 4d 56 75 31 51 4b 48 4f 78 4b 75 6e 34 4c 64 6c 37 51 6b 4e 46 6f 61 6f 77 64 61 32 56 58 67 6a 6d 46 46 66 78 65 69 36 33 36 71 57 42 33 49 43 4b 32 59 55 32 5a 4a 50 59 4e 48 46 43 39 31 6c 35 31 30 4b 72 38 6b 36 6c 6d 78 43 32 6f 4a 6e 4c 36 44 75 67 2b 31 62 36 50 79 68 4c 72 35 35 6c 73 76 64 61 7a 70 69 Data Ascii: 2CLkwcvzHs1NyUdV4Qf56lQzhi+H3vFcieBC57P89fkwcrp1eQAJDzz3DcNDs5oGKMNPCgKg+1zkpODnW/YEx5whgayh+9ZnDt3fK/BpEro0XBdjEyw9pagXn40P4fokStTY1BCP48XwJr2HGlV9XQHMVu1QKHOxKun4Ldl7QkNFoaowda2VXgjmFFfxei636qWB3ICK2YU2ZJPYNHFC91l510Kr8k6lmxC2oJnL6Dug+1b6PyhLr55lsvdazpi
2025-01-15 22:20:45 UTC	1390	IN	Data Raw: 4b 45 6c 2f 4e 70 54 56 47 46 32 4d 6a 69 4c 76 7a 49 73 66 37 4f 32 4d 72 55 33 79 4d 71 37 62 78 2b 31 6f 55 4a 6f 65 34 68 4b 46 33 33 6a 63 7a 42 48 34 6a 32 4a 6f 67 34 4e 2f 56 75 4a 63 71 66 72 74 32 4c 47 30 69 71 66 58 38 72 42 4f 6c 75 6d 49 51 67 6b 6f 6f 4a 68 6a 64 75 47 2b 66 73 6a 62 2f 54 66 33 6f 31 49 70 73 45 45 66 6f 43 41 66 69 79 74 6a 74 74 78 45 32 74 4b 4e 6e 68 38 66 6b 68 56 45 6d 66 42 53 66 6e 70 66 6c 71 31 42 38 31 43 77 4c 42 7a 33 4d 58 64 2f 78 47 5a 64 6d 57 65 58 32 35 49 2f 41 57 73 79 4d 76 77 61 65 4f 2b 49 4f 65 49 38 2b 62 78 59 55 4a 77 50 75 46 75 67 4e 45 4d 74 73 4d 4d 53 55 45 34 37 35 61 55 44 53 52 39 6e 79 45 56 6d 46 6b 6b 70 49 72 75 55 6d 6f 55 54 4d 43 4a 75 4d 37 79 43 6d 63 53 77 63 6e 53 31 4b 35 61 Data Ascii: KEl/NpTVGF2MjiLvzIsf7O2MrU3yMq7bx+1oUJoe4hKF33jczBH4j2Jog4N/VuJcqfrt2LG0iqfX8rBOlumIQgkooJhjduG+fsjb/Tf3o1IpsEEfoCAfiytjttxE2tKNnh8fkhVEmfBSfnpflq1B81CwLBz3MXd/xGZdmWeX25I/AWsyMvwaeO+IOeI8+bxYUJwPuFugNEMtsMMSUE475aUDSR9nyEVmFkkpIruUmoUTMCJuM7yCmcSwcnS1K5a
2025-01-15 22:20:45 UTC	1390	IN	Data Raw: 66 54 71 30 43 48 63 47 74 33 4a 46 41 34 6e 58 44 5a 50 50 4a 32 6e 74 78 66 34 65 32 74 43 41 50 55 32 56 74 59 6e 79 31 71 4f 56 78 54 7a 68 52 76 72 63 4f 75 4a 78 65 62 34 65 65 57 66 54 64 59 30 61 46 61 4e 35 33 63 41 44 54 6f 49 49 77 4f 6b 73 56 44 79 30 5a 30 6f 58 4a 6f 30 37 57 77 63 4e 58 69 31 68 54 4d 70 32 55 69 63 6d 31 2f 2f 69 41 35 37 4d 34 4c 6c 34 38 49 4e 66 79 2b 55 6d 7a 57 63 54 4c 6a 65 6f 53 6d 6e 36 47 33 39 72 6f 49 49 48 72 58 2f 31 51 46 65 6c 6c 55 41 59 67 37 63 70 4c 4e 32 31 4a 57 72 51 73 65 4e 52 50 56 61 59 66 6b 61 4f 39 71 56 39 6c 6a 44 32 42 46 31 2f 34 6f 62 30 36 47 2b 5a 31 72 4d 66 67 66 41 6a 5a 56 43 4f 65 61 4d 47 65 4d 36 78 6e 51 4d 76 4b 79 7a 6c 2b 6c 45 6c 6c 42 30 73 51 39 32 4c 78 75 32 49 55 35 4f Data Ascii: fTq0CHcGt3JFA4nXDZPPJ2ntxf4e2tCAPU2VtYny1qOVxTzhRvrcOuJxeb4eeWfTdY0aFaN53cADToIIwOksVDy0Z0oXJo07WwcNXi1hTMp2Uicm1//iA57M4Ll48INfy+UmzWcTLjeoSmn6G39roIIHrX/1QFellUAYg7cpLN21JWrQseNRPVaYfkaO9qV9ljD2BF1/4ob06G+Z1rMfgfAjZVCOeaMGeM6xnQMvKyzl+lEllB0sQ92Lxu2IU5O
2025-01-15 22:20:45 UTC	1390	IN	Data Raw: 57 72 51 6e 46 33 5a 46 48 38 7a 4b 4e 64 44 55 65 45 35 63 39 66 78 62 7a 62 63 55 68 4c 6a 70 52 31 46 68 67 4b 43 48 58 2b 56 75 7a 62 53 58 63 4a 72 6b 75 33 4d 79 33 2b 53 53 53 74 4c 46 35 7a 36 79 6e 68 51 6c 78 38 4c 32 41 75 7a 71 64 64 45 39 6e 56 49 47 62 55 6d 62 6b 59 34 69 4e 4e 38 47 77 38 4d 58 53 30 53 51 33 6b 61 48 6f 47 30 70 49 52 45 51 54 6c 45 33 38 66 58 76 78 72 33 68 6f 7a 6f 32 70 61 4f 69 43 6a 47 55 57 2f 49 78 73 6e 44 44 37 57 58 59 71 6e 55 73 76 6e 6b 34 79 41 78 7a 71 79 33 52 7a 33 7a 57 50 6a 33 42 63 35 4a 4c 48 53 71 6a 4a 2b 58 68 70 4e 71 6c 68 58 2b 37 48 2f 2b 77 52 46 4d 43 64 71 4a 6c 4c 39 6e 2b 6a 73 2f 63 62 56 63 57 30 54 32 6d 39 6c 31 51 53 44 6b 36 70 63 45 6c 67 69 7a 43 77 55 6e 73 79 64 6b 38 2f 31 73 Data Ascii: WrQnF3ZFH8zKNdDUeE5c9fxbzbcUhLjpR1FhgKCHX+VuzbSXcJrku3My3+SSStLF5z6ynhQlx8L2AuzqddE9nVIGbUmbkY4iNN8Gw8MXS0SQ3kaHoG0pIREQTlE38fXvxr3hozo2paOiCjGUW/IxsnDD7WXYqnUsvnk4yAxzqy3Rz3zWPj3Bc5JLHSqjJ+XhpNqlhX+7H/+wRFMCdqJlL9n+js/cbVcW0T2m9l1QSDk6pcElgizCwUnsydk8/1s
2025-01-15 22:20:45 UTC	1390	IN	Data Raw: 4d 30 49 38 46 73 30 41 5a 42 6e 78 36 79 69 68 47 68 2f 62 51 6d 48 43 2b 4f 51 50 5a 35 63 32 49 61 2b 73 71 33 48 2b 4e 6f 67 66 36 67 62 59 53 54 5a 30 6c 37 71 33 76 6b 77 7a 79 4b 65 46 70 68 77 70 6f 65 44 30 6e 39 37 52 69 74 50 6d 37 2f 44 56 4f 58 54 39 77 7a 68 4b 6d 66 65 31 52 4e 76 36 64 75 33 38 6c 61 73 67 41 61 38 6c 62 54 56 52 37 65 64 42 71 43 33 73 4d 78 6f 32 6f 54 51 51 46 65 34 63 71 46 76 2b 53 36 6e 4e 75 6c 4a 61 47 4e 4b 6f 76 6a 6c 2f 55 44 6d 58 79 6f 71 67 50 4c 63 6e 45 34 42 68 47 76 73 56 51 68 30 44 6c 4d 4e 36 48 57 52 6e 57 4e 64 4e 72 4e 71 56 76 75 65 4f 31 74 75 48 30 4f 69 71 43 2b 5a 72 66 35 32 4b 6b 66 79 4f 4f 61 6d 6e 76 79 52 76 59 4b 44 32 57 48 42 57 51 6b 57 45 72 4c 76 2f 75 67 56 68 54 58 45 2b 7a 6b 79 Data Ascii: M0I8Fs0AZBnx6yihGh/bQmHC+OQPZ5c2Ia+sq3H+Nogf6gbYSTZ0l7q3vkwzyKeFphwpoeD0n97RitPm7/DVOXT9wzhKmfe1RNv6du38lasgAa8lbTVR7edBqC3sMxo2oTQQFe4cqFv+S6nNulJaGNKovjl/UDmXyoqgPLcnE4BhGvsVQh0DlMN6HWRnWNdNrNqVvueO1tuH0OiqC+Zrf52KkfyOOamnvyRvYKD2WHBWQkWErLv/ugVhTXE+zky
2025-01-15 22:20:45 UTC	1390	IN	Data Raw: 53 61 41 51 6f 34 6a 45 4c 55 38 36 37 64 42 45 36 36 6a 61 70 33 54 62 77 66 39 76 38 57 55 75 6d 4c 75 76 63 71 65 45 5a 38 33 66 4d 77 42 68 39 76 66 31 61 37 33 79 52 45 4b 71 39 66 6c 69 61 39 52 5a 47 2b 4f 41 65 67 59 77 48 75 4e 56 34 4d 34 69 58 30 31 31 37 55 41 4b 65 42 48 64 64 65 39 64 6c 78 50 46 43 52 31 43 33 58 4d 74 78 2b 54 4e 6d 4e 74 37 71 75 73 2b 6f 76 7a 6d 41 72 4d 57 75 4f 6a 79 62 37 69 6a 4f 58 73 66 79 70 34 63 4a 53 6e 6e 55 4a 4a 4d 6c 31 4e 77 43 4a 7a 34 6e 62 79 79 4c 30 37 41 4f 32 4d 45 71 7a 67 7a 45 6b 53 2b 78 45 32 64 68 32 6d 7a 33 49 6e 78 75 6e 45 73 6b 54 4a 79 47 45 32 74 6a 42 45 62 64 57 42 77 55 6c 65 56 50 43 67 6a 57 56 39 76 45 46 46 72 45 78 6a 64 49 70 4b 43 33 32 74 46 61 6c 4f 76 36 72 52 37 6d 68 74 Data Ascii: SaAQo4jELU867dBE66jap3Tbwf9v8WUumLuvcqeEZ83fMwBh9vf1a73yREKq9flia9RZG+OAegYwHuNV4M4iX0117UAKeBHdde9dlxPFCR1C3XMtx+TNmNt7qus+ovzmArMWuOjyb7ijOXsfyp4cJSnnUJJMl1NwCJz4nbyyL07AO2MEqzgzEkS+xE2dh2mz3InxunEskTJyGE2tjBEbdWBwUleVPCgjWV9vEFFrExjdIpKC32tFalOv6rR7mht
2025-01-15 22:20:45 UTC	1390	IN	Data Raw: 72 42 76 4e 63 56 51 6f 4a 59 63 77 77 64 43 6b 74 4a 69 46 77 76 75 7a 79 31 55 41 76 45 4e 70 48 39 78 42 37 4f 5a 74 41 59 4b 59 52 43 50 36 4e 56 7a 2b 79 77 79 39 2b 58 46 31 63 69 31 75 46 69 46 63 38 68 76 76 49 58 72 68 77 51 58 34 7a 49 54 70 51 57 6e 37 65 71 4d 41 61 43 52 6b 36 69 74 5a 30 46 43 33 4a 38 50 74 33 46 74 41 69 47 52 56 67 4e 58 64 4c 6c 56 4e 79 6d 76 46 31 50 41 76 30 2b 6c 37 2b 58 78 44 34 32 66 71 33 6d 66 2b 2b 56 68 4c 77 45 43 6a 76 4b 6a 55 4a 45 76 74 74 34 61 33 2b 6f 39 66 59 76 43 67 78 37 4e 51 62 4f 6a 69 6d 31 48 4e 46 64 2b 4f 49 49 61 53 2f 2b 72 2f 37 37 75 54 64 62 76 73 79 50 61 78 45 72 4e 45 77 4f 32 30 2b 69 7a 2f 61 4e 6d 58 52 41 53 4f 39 7a 75 4c 50 57 53 5a 55 33 4e 4a 73 52 64 75 69 75 78 33 36 41 2b Data Ascii: rBvNcVQoJYcwwdCktJiFwvuzy1UAvENpH9xB7OZtAYKYRCP6NVz+ywy9+XF1ci1uFiFc8hvvIXrhwQX4zITpQWn7eqMAaCRk6itZ0FC3J8Pt3FtAiGRVgNXdLlVNymvF1PAv0+l7+XxD42fq3mf++VhLwECjvKjUJEvtt4a3+o9fYvCgx7NQbOjim1HNFd+OIIaS/+r/77uTdbvsyPaxErNEwO20+iz/aNmXRASO9zuLPWSZU3NJsRduiux36A+
2025-01-15 22:20:45 UTC	1390	IN	Data Raw: 36 71 54 7a 59 55 33 56 38 61 58 30 37 68 42 50 45 71 68 5a 49 62 4d 68 69 47 65 4b 38 78 33 4c 30 54 43 51 36 4d 6d 66 37 4e 61 62 66 55 54 62 5a 75 44 45 5a 6e 37 4c 6c 4e 64 4f 32 45 66 51 58 58 5a 46 4f 65 72 41 6b 68 70 62 47 7a 43 52 4a 4e 7a 48 46 50 65 4c 67 6a 68 42 4e 72 65 30 68 63 4a 32 37 41 4d 36 41 5a 63 58 54 72 7a 58 75 63 51 35 69 31 6d 73 72 2b 2b 72 74 31 61 63 35 53 67 76 54 2f 33 56 54 61 64 49 6c 50 4e 66 6d 69 30 50 6c 75 67 7a 4d 69 6e 59 34 50 5a 4f 55 56 31 4d 42 79 73 4c 52 4f 61 66 35 73 5a 4c 75 61 35 63 36 44 69 38 6a 34 51 54 73 50 63 71 6e 53 36 71 58 50 55 2f 38 4b 64 63 46 32 2b 63 33 5a 33 75 62 31 41 4f 70 77 4f 54 52 54 4c 2b 56 7a 58 6d 67 37 47 32 74 59 4c 7a 79 52 2b 54 73 6d 67 6f 45 4d 31 35 50 58 41 49 71 32 52 Data Ascii: 6qTzYU3V8aX07hBPEqhZIbMhiGeK8x3L0TCQ6Mmf7NabfUTbZuDEZn7LlNdO2EfQXXZFOerAkhpbGzCRJNzHFPeLgjhBNre0hcJ27AM6AZcXTrzXucQ5i1msr++rt1ac5SgvT/3VTadIlPNfmi0PlugzMinY4PZOUV1MBysLROaf5sZLua5c6Di8j4QTsPcqnS6qXPU/8KdcF2+c3Z3ub1AOpwOTRTL+VzXmg7G2tYLzyR+TsmgoEM15PXAIq2R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49990	142.250.186.142	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:45 UTC	710	OUT	GET /f/AGSKWxVXYCSCPy5B1JgAKQtMnN0P2vaiBVd2lKtPbNdS0mJZ169N_8_kHQeYInRDippu2LA40Av4IPEiztZtmSeWGs2pPc-bPcpJmOq_rJPXo-BBKqAScHkzEK7X2rkh8EAznuL94ZCAn_1hRIGfXO9TUAfWVVWyCoMLxAQ3Fd9dmq6qVhuml9aNDFxPJHvY/_.com/adlib_/noodleAdFramed._centre_ad./VASTAdPlugin._468x60. HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:45 UTC	1940	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 15 Jan 2025 22:20:45 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'report-sample' 'nonce-mpd7d8VY7Omnel--YvMQqg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin reporting-endpoints: default="/_/ContributorServingWebSwitchboardHttp/web-reports?context=eJzjamDU4pJicNOQYjh56zbTRSCW-PqSSQOIndJnsAYBcevNc6xTgdho7XlWJyBO-neetQiIDRUusTqCcNElVk8gVu25xGoKxPfXXWJ9DsQf6i-z_gDiGecvsy4A4iKJK6xNQMzw9QorBxDbsl5jdQViIW6OvS8X7GETeNDwLUFJIym_MD45P6-kKDOptCS_KC05LbU4tagstSjeyMDI1MDQ0ETPwDi-wAAA3-VM7A" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 22:20:45 UTC	60	IN	Data Raw: 33 36 0d 0a 77 69 6e 64 6f 77 5b 27 33 62 31 30 32 32 36 35 2d 30 34 35 64 2d 34 33 37 36 2d 62 65 31 65 2d 34 36 38 61 62 38 37 63 39 34 63 38 27 5d 20 3d 20 74 72 75 65 3b 0d 0a Data Ascii: 36window['3b102265-045d-4376-be1e-468ab87c94c8'] = true;
2025-01-15 22:20:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49995	172.217.16.196	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:46 UTC	825	OUT	GET /recaptcha/api2/aframe HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:46 UTC	1117	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Wed, 15 Jan 2025 22:20:46 GMT Date: Wed, 15 Jan 2025 22:20:46 GMT Cache-Control: private, max-age=300 Content-Security-Policy: script-src 'report-sample' 'nonce-PxvV0zSmr7P21dpb4AQ76g' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 22:20:46 UTC	273	IN	Data Raw: 33 33 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 50 78 76 56 30 7a 53 6d 72 37 50 32 31 64 70 62 34 41 51 37 36 67 22 3e 2f 2a 2a 20 41 6e 74 69 2d 66 72 61 75 64 20 61 6e 64 20 61 6e 74 69 2d 61 62 75 73 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 20 6f 6e 6c 79 2e 20 53 65 65 20 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 20 2a 2f 20 74 72 79 7b 76 61 72 20 63 6c 69 65 6e 74 73 3d 7b 27 73 6f 64 61 72 27 3a 27 68 Data Ascii: 33d<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="PxvV0zSmr7P21dpb4AQ76g">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha */ try{var clients={'sodar':'h
2025-01-15 22:20:46 UTC	563	IN	Data Raw: 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 73 6f 64 61 72 3f 27 7d 3b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 72 79 7b 69 66 28 61 2e 73 6f 75 72 63 65 3d 3d 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 29 7b 76 61 72 20 62 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 61 2e 64 61 74 61 29 3b 76 61 72 20 63 3d 63 6c 69 65 6e 74 73 5b 62 5b 27 69 64 27 5d 5d 3b 69 66 28 63 29 7b 76 61 72 20 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 64 2e 73 72 63 3d 63 2b 62 5b 27 70 61 72 61 6d 73 27 5d 2b 27 26 72 63 3d 27 2b 28 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 72 Data Ascii: glesyndication.com/pagead/sodar?'};window.addEventListener("message",function(a){try{if(a.source===window.parent){var b=JSON.parse(a.data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("r
2025-01-15 22:20:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49996	142.250.184.225	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:46 UTC	748	OUT	GET /sodar/sodar2/232/runner.html HTTP/1.1 Host: ep2.adtrafficquality.google Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:46 UTC	688	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="adspam-signals-scs" Report-To: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]} Content-Length: 13020 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 15 Jan 2025 22:06:50 GMT Expires: Wed, 15 Jan 2025 22:56:50 GMT Cache-Control: public, max-age=3000 Age: 836 Last-Modified: Mon, 23 Sep 2024 18:12:21 GMT Content-Type: text/html Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-15 22:20:46 UTC	702	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 76 61 72 20 70 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d Data Ascii: <!DOCTYPE html><meta charset=utf-8><script>(function(){'use strict';function m(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var p=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==
2025-01-15 22:20:46 UTC	1390	IN	Data Raw: 6c 6c 29 7b 63 3d 77 5b 62 5d 3b 69 66 28 63 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 61 5b 62 5d 3b 63 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 63 21 3d 3d 76 6f 69 64 20 30 3f 63 3a 61 5b 62 5d 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 79 28 61 2c 62 2c 63 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 65 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 61 3d 65 2e 6c 65 6e 67 74 68 3d 3d 3d 31 3b 76 61 72 20 66 3d 65 5b 30 5d 2c 68 3b 21 61 26 26 66 20 69 6e 20 76 3f 68 3d 76 3a 68 3d 72 3b 66 6f 72 28 66 3d 30 3b 66 3c 65 2e 6c 65 6e 67 74 68 2d 31 3b 66 2b 2b 29 7b 76 61 72 20 64 3d 65 5b 66 5d 3b 69 66 28 21 28 64 20 69 6e 20 68 29 29 62 72 65 61 6b 20 61 3b 68 3d 68 5b 64 5d 7d 65 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3b 63 3d 75 26 26 63 3d 3d 3d 22 65 73 36 22 Data Ascii: ll){c=w[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}}function y(a,b,c){if(b)a:{var e=a.split(".");a=e.length===1;var f=e[0],h;!a&&f in v?h=v:h=r;for(f=0;f<e.length-1;f++){var d=e[f];if(!(d in h))break a;h=h[d]}e=e[e.length-1];c=u&&c==="es6"
2025-01-15 22:20:46 UTC	1390	IN	Data Raw: 72 65 65 7a 65 26 26 28 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 61 29 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 62 29 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 41 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 76 2e 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 78 28 76 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 26 26 61 5b 78 28 76 2e 53 79 6d 62 6f 6c 2c 22 69 74 65 72 61 74 6f 72 22 29 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 6d 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 53 74 72 69 6e 67 28 61 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 Data Ascii: reeze&&(Object.freeze(a),Object.freeze(b));return a}function A(a){var b=typeof v.Symbol!="undefined"&&x(v.Symbol,"iterator")&&a[x(v.Symbol,"iterator")];if(b)return b.call(a);if(typeof a.length=="number")return{next:m(a)};throw Error(String(a)+" is not an
2025-01-15 22:20:46 UTC	1390	IN	Data Raw: 72 65 74 75 72 6e 20 61 2e 67 2e 68 3d 6e 75 6c 6c 2c 48 28 61 2e 67 2c 64 29 2c 4b 28 61 29 7d 61 2e 67 2e 68 3d 6e 75 6c 6c 3b 65 2e 63 61 6c 6c 28 61 2e 67 2c 68 29 3b 72 65 74 75 72 6e 20 4b 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 66 6f 72 28 3b 61 2e 67 2e 67 3b 29 74 72 79 7b 76 61 72 20 62 3d 61 2e 68 28 61 2e 67 29 3b 69 66 28 62 29 72 65 74 75 72 6e 20 61 2e 67 2e 6a 3d 21 31 2c 7b 76 61 6c 75 65 3a 62 2e 76 61 6c 75 65 2c 64 6f 6e 65 3a 21 31 7d 7d 63 61 74 63 68 28 63 29 7b 61 2e 67 2e 6c 3d 76 6f 69 64 20 30 2c 48 28 61 2e 67 2c 63 29 7d 61 2e 67 2e 6a 3d 21 31 3b 69 66 28 61 2e 67 2e 69 29 7b 62 3d 61 2e 67 2e 69 3b 61 2e 67 2e 69 3d 6e 75 6c 6c 3b 69 66 28 62 2e 4d 29 74 68 72 6f 77 20 62 2e 44 3b 72 65 74 75 72 6e 7b 76 61 6c Data Ascii: return a.g.h=null,H(a.g,d),K(a)}a.g.h=null;e.call(a.g,h);return K(a)}function K(a){for(;a.g.g;)try{var b=a.h(a.g);if(b)return a.g.j=!1,{value:b.value,done:!1}}catch(c){a.g.l=void 0,H(a.g,c)}a.g.j=!1;if(a.g.i){b=a.g.i;a.g.i=null;if(b.M)throw b.D;return{val
2025-01-15 22:20:46 UTC	1390	IN	Data Raw: 68 69 73 2e 67 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 64 3d 74 68 69 73 2e 67 3b 74 68 69 73 2e 67 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 64 2e 6c 65 6e 67 74 68 3b 2b 2b 67 29 7b 76 61 72 20 6b 3d 0a 64 5b 67 5d 3b 64 5b 67 5d 3d 6e 75 6c 6c 3b 74 72 79 7b 6b 28 29 7d 63 61 74 63 68 28 6c 29 7b 74 68 69 73 2e 6a 28 6c 29 7d 7d 7d 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 74 68 69 73 2e 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 64 3b 7d 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6b 7c 7c 28 6b 3d 21 30 2c 6c 2e Data Ascii: his.g.length;){var d=this.g;this.g=[];for(var g=0;g<d.length;++g){var k=d[g];d[g]=null;try{k()}catch(l){this.j(l)}}}this.g=null};c.prototype.j=function(d){this.i(function(){throw d;})};b.prototype.j=function(){function d(l){return function(n){k\|\|(k=!0,l.
2025-01-15 22:20:46 UTC	1390	IN	Data Raw: 73 74 6f 6d 45 76 65 6e 74 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 21 31 2c 21 30 2c 64 29 29 3b 64 2e 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 64 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 69 3b 72 65 74 75 72 6e 20 6b 28 64 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 67 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 74 68 69 73 2e 67 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 68 2e 68 28 74 68 69 73 2e 67 5b 64 5d 29 3b 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 68 3d 6e 65 77 20 63 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 49 3d 0a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 67 3d 74 68 69 73 2e 6a 28 29 3b 64 2e 42 28 67 2e 72 65 73 6f 6c 76 65 Data Ascii: stomEvent("unhandledrejection",!1,!0,d));d.promise=this;d.reason=this.i;return k(d)};b.prototype.R=function(){if(this.g!=null){for(var d=0;d<this.g.length;++d)h.h(this.g[d]);this.g=null}};var h=new c;b.prototype.I=function(d){var g=this.j();d.B(g.resolve
2025-01-15 22:20:46 UTC	1390	IN	Data Raw: 3b 66 75 6e 63 74 69 6f 6e 20 6c 61 28 29 7b 76 61 72 20 61 3d 6e 75 6c 6c 3b 69 66 28 21 50 29 72 65 74 75 72 6e 20 61 3b 74 72 79 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 63 7d 3b 61 3d 50 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 67 6f 6f 67 23 68 74 6d 6c 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 62 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 62 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 62 7d 29 7d 63 61 74 63 68 28 63 29 7b 7d 72 65 74 75 72 6e 20 61 7d 3b 66 75 6e 63 74 69 6f 6e 20 52 28 61 29 7b 74 68 69 73 2e 67 3d 61 7d 52 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2b 22 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 53 28 Data Ascii: ;function la(){var a=null;if(!P)return a;try{var b=function(c){return c};a=P.createPolicy("goog#html",{createHTML:b,createScript:b,createScriptURL:b})}catch(c){}return a};function R(a){this.g=a}R.prototype.toString=function(){return this.g+""};function S(
2025-01-15 22:20:46 UTC	1390	IN	Data Raw: 6e 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 62 28 76 6f 69 64 20 30 29 7d 2c 61 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 29 7b 61 3d 61 3d 3d 3d 76 6f 69 64 20 30 3f 64 6f 63 75 6d 65 6e 74 3a 61 3b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 7d 3b 76 61 72 20 72 61 3d 7a 28 5b 22 68 74 74 70 73 3a 2f 2f 65 70 31 2e 61 64 74 72 61 66 66 69 63 71 75 61 6c 69 74 79 2e 67 6f 6f 67 6c 65 2f 62 67 2f 22 2c 22 2e 6a 73 22 5d 29 2c 73 61 3d 7a 28 5b 22 68 74 74 70 73 3a 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 62 67 2f 22 2c 22 2e 6a 73 22 5d 29 3b 66 75 6e 63 74 69 6f 6e 20 74 61 28 61 2c 62 2c 63 2c 65 29 7b 76 61 72 20 66 3d 76 6f 69 64 20 30 3b 66 Data Ascii: n(){return void b(void 0)},a)})}function qa(a){a=a===void 0?document:a;return a.createElement("img")};var ra=z(["https://ep1.adtrafficquality.google/bg/",".js"]),sa=z(["https://pagead2.googlesyndication.com/bg/",".js"]);function ta(a,b,c,e){var f=void 0;f
2025-01-15 22:20:46 UTC	1390	IN	Data Raw: 6e 20 44 61 28 61 2c 63 29 7d 2c 62 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 22 22 29 29 3a 28 62 3d 42 61 28 62 2e 64 61 74 61 29 29 26 26 45 61 28 61 2c 62 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 44 61 28 61 2c 62 29 7b 76 61 72 20 63 2c 65 2c 66 2c 68 3b 72 65 74 75 72 6e 20 4c 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 73 77 69 74 63 68 28 64 2e 67 29 7b 63 61 73 65 20 31 3a 63 3d 62 2e 64 61 74 61 3b 65 3d 62 2e 70 6f 72 74 73 5b 30 5d 3b 69 66 28 63 5b 30 5d 3d 3d 3d 31 26 26 74 79 70 65 6f 66 20 63 5b 31 5d 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 74 79 70 65 6f 66 20 63 5b 32 5d 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 74 79 70 65 6f 66 20 63 5b 33 5d 3d 3d 3d 22 6e 75 6d 62 65 72 22 26 26 74 79 70 65 6f 66 20 63 5b 34 5d 3d 3d 3d 22 62 6f 6f 6c 65 61 6e 22 29 Data Ascii: n Da(a,c)},b.postMessage("")):(b=Ba(b.data))&&Ea(a,b)}function Da(a,b){var c,e,f,h;return L(function(d){switch(d.g){case 1:c=b.data;e=b.ports[0];if(c[0]===1&&typeof c[1]==="string"&&typeof c[2]==="string"&&typeof c[3]==="number"&&typeof c[4]==="boolean")
2025-01-15 22:20:46 UTC	1198	IN	Data Raw: 3f 69 64 3d 73 6f 64 61 72 32 26 76 3d 32 33 31 22 3a 22 68 74 74 70 73 3a 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 73 6f 64 61 72 3f 69 64 3d 73 6f 64 61 72 32 26 76 3d 32 33 31 22 29 3b 57 28 65 2c 22 74 22 2c 61 29 3b 62 26 26 28 57 28 65 2c 22 6c 69 22 2c 62 2e 50 29 2c 57 28 65 2c 62 2e 63 6f 6e 74 65 78 74 3d 3d 3d 22 63 72 22 3f 22 62 67 61 69 22 3a 22 6a 6b 22 2c 62 2e 4f 29 29 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 4a 61 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 76 2e 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 46 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 62 28 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 61 28 61 2c 62 29 7b 62 Data Ascii: ?id=sodar2&v=231":"https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=231");W(e,"t",a);b&&(W(e,"li",b.P),W(e,b.context==="cr"?"bgai":"jk",b.O));return e}function Ja(a){return new v.Promise(function(b){Fa(a,function(){b()})})}function Ka(a,b){b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49997	142.250.186.142	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:46 UTC	960	OUT	GET /f/AGSKWxUFa7gOa_QQmkFb3ywy-2AQ5ufRFIdrnC3uKi2p1cVvgQgaDS4R-iN9IEYr8CSFSaIAg68rnnhFbnNfPEcVqrjQD6-VJ009pGvDDmvYIhHKo86COyXrpqX0PJM1aY83CwKOWrnUgw==?fccs=W251bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFsxNzM2OTc5NjQzLDcxNzAwMDAwMF0sbnVsbCxudWxsLG51bGwsW251bGwsWzcsOSw2XSxudWxsLDIsbnVsbCwiZW4iLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCwxXSwiaHR0cHM6Ly9udWFuY2UtcGRmLXByb2Zlc3Npb25hbDIuc29mdHdhcmUuaW5mb3JtZXIuY29tLzcuMi8iLG51bGwsW1s4LCJCSHQwUkNmMExPbyJdLFs5LCJlbi1VUyJdLFsyMywiMTczNjk3OTYzNyJdLFsxOSwiMiJdLFsxNywiWzBdIl1dXQ HTTP/1.1 Host: fundingchoicesmessages.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:47 UTC	1954	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Timing-Allow-Origin: * Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 15 Jan 2025 22:20:46 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-hDhV93B2nBY2XDR9b2FlLQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/ContributorServingWebSwitchboardHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/ContributorServingWebSwitchboardHttp/cspreport/allowlist Cross-Origin-Resource-Policy: cross-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin reporting-endpoints: default="/_/ContributorServingWebSwitchboardHttp/web-reports?context=eJzjqtDikmII1pBikPj6kkkDiJ3SZ7AGAXHrzXOsU4HYaO15VicgTvp3nrUIiA0VLrE6gnDRJVZPIFbtucRqCsT3111ifQ7EH-ovs_4A4hnnL7MuAOIiiSusTUDM8PUKKwcQ27JeY3UFYiEejn0vF-xhE9hw69tmZiWNpPzC-OT8vJKizKTSkvyitOS01OLUorLUongjAyNTA0NDEz0D4_gCAwDFlkhq" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 22:20:47 UTC	1954	IN	Data Raw: 63 33 39 0d 0a 69 66 20 28 74 79 70 65 6f 66 20 5f 5f 67 6f 6f 67 6c 65 66 63 2e 66 63 4b 65 72 6e 65 6c 4d 61 6e 61 67 65 72 2e 72 75 6e 20 3d 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 29 20 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 43 6f 6e 74 72 69 62 75 74 6f 72 53 65 72 76 69 6e 67 52 65 73 70 6f 6e 73 65 43 6c 69 65 6e 74 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 76 61 72 20 76 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6c 3d 5f 2e 74 28 61 29 7d 3b 5f 2e 75 28 76 6f 2c 5f 2e Data Ascii: c39if (typeof __googlefc.fcKernelManager.run === 'function') {"use strict";this.default_ContributorServingResponseClientJs=this.default_ContributorServingResponseClientJs\|\|{};(function(_){var window=this;try{var vo=function(a){this.l=_.t(a)};_.u(vo,_.
2025-01-15 22:20:47 UTC	1182	IN	Data Raw: 30 33 64 5c 5c 5c 78 32 32 5c 78 35 64 2c 6e 75 6c 6c 2c 5c 78 35 62 5c 78 35 62 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 5c 5c 78 32 32 68 74 74 70 73 3a 5c 2f 5c 2f 66 75 6e 64 69 6e 67 63 68 6f 69 63 65 73 6d 65 73 73 61 67 65 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 5c 2f 66 5c 2f 41 47 53 4b 57 78 55 62 30 65 55 6d 72 52 6e 4f 74 33 31 57 4a 36 5f 77 6c 64 66 78 58 75 51 78 62 5a 61 37 50 57 73 46 76 36 31 57 30 45 45 6f 7a 62 4a 68 6d 33 71 6a 43 55 73 6d 52 6b 4f 65 49 49 44 43 79 48 7a 62 6b 55 50 68 57 7a 41 42 36 35 6c 46 64 58 4b 56 58 38 61 39 5a 64 66 5a 34 56 71 57 2d 5a 38 42 66 6a 44 54 63 43 45 71 38 69 38 47 74 73 6c 32 4d 57 57 79 49 5f 31 47 52 78 39 4a 77 62 35 4f 65 73 41 69 45 77 5c 5c 5c 5c 75 30 30 33 64 5c 5c 5c 5c 75 30 30 33 Data Ascii: 03d\\\x22\x5d,null,\x5b\x5bnull,null,null,\\\x22https:\/\/fundingchoicesmessages.google.com\/f\/AGSKWxUb0eUmrRnOt31WJ6_wldfxXuQxbZa7PWsFv61W0EEozbJhm3qjCUsmRkOeIIDCyHzbkUPhWzAB65lFdXKVX8a9ZdfZ4VqW-Z8BfjDTcCEq8i8Gtsl2MWWyI_1GRx9Jwb5OesAiEw\\\\u003d\\\\u003
2025-01-15 22:20:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	50003	172.217.18.2	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:49 UTC	1783	OUT	GET /pagead/sodar?id=sodar2&v=232&t=2&li=gda_r20250113&jk=3788874330487745&bg=!NTalNnnNAAYsEuUeDBI7ADQBe5WfOIi-8zjsGZFErpG8kHxxskXxqa05Ld5vn961hkZqxPZ3CsYSLLs4tVQBnqsWbOLdAgAAAPFSAAAAAmgBB34ANsqp6OxNDAnbocVlCPgHBV-H_LnmaLM1lbFnaPpFAT2In31Herl84e_ejfLGfrtrS4deR4Rz45kCpbBBZmssnKGWrC6sWDGvsdy67pEsjMgO2f7qw8Y4hhFeExFnJPLlYdamAM5mdS-YvSuKlKVCsADT0LntSg7lRWjhwTu611VY6yhDMtql8dXVyU_8yimnvSBmz3NWOw7gK5WC3TUSQ23Z3xYSUgy0ussESwr4FAC49zlt9bxnKmvWKUDF0eoiEZP3LxTiJUDAumQ6-AMvpFpFtK63N0CeUhMaZyI0lrcP3Yd51odx3ujnEIsMeIz9hzSqSc7VJEG7uf8yVoNgVgyTzvRzIaw3pLWTi6BEBYJ0E7uEdYuJX_pkzo0Ra37B97kGnmX5Bbbp3doQjctSo1dZZ8J_vCfojCfj4XpJs8AqUKFiAIo4g5nPVd9C_gbhhUfY8ufo_BOZvZ94YBToxnA2-qfvJUIiH4te2zLP1QBX4SdJ6QEKgjoYp8oIYmSzp59OWoU2DFf3UGdYrWdDvlIKgWIxVUmegS5M6GQG0vxQvM4HAJ6lEExzDwflbZZz5uq013OIHk14b--M4iQ-30Gat8t-3qe19fNJLXdbId-MsuxUxx33g-9SLNbsoYC3MNLink-iqcrr86SqXkPoCR6i2nkG8w6gFhfcNVlJe4fOvCGfB2hVwg5_6GzR94bZQaPxFLAtR4vWkQYmZEZ51gW-Ymwed0kBz5X0A0ukHPmYVl2GvK3H-lHZC5J3gf-3f9Qk3syouT17NydYvnlXsEE4EpfQb8HshhOI452kIVQ9S5dqK4U4CUVhvXFZrBJfH [TRUNCATED] Host: ep1.adtrafficquality.google Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://nuance-pdf-professional2.software.informer.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:49 UTC	451	IN	HTTP/1.1 204 No Content P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Wed, 15 Jan 2025 22:20:49 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	50007	104.21.50.45	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:56 UTC	1598	OUT	GET /install/?mid=f28d8534-d38e-11ef-93a7-aab196f2f20d&rpclid=f28d8534-d38e-11ef-93a7-aab196f2f20d&utm_source=adx_ext_download_prot_smrtsp___5e460bab&uq=_JDg0vZrlOp4T6_9U0ssm5ItFDhV3TsqhLGO26omVj-2pXmkcPDHdNwDCaqhZpjpKTa7dG0kopMzaVwvRrpzQLXyz5bNrDsHKX4rae-VljJo0XQMs9qPDHH7jO7Lx_9WhNCEj1xuWu-4f2YWpcIqzgA77etzE7oZtFSzHsIewF6zNBxh8d3T9Zk-HKlhZPa0MQd1POmBJVA9GftafTfIXKITadh35clew_PwRPW1jYBE6OV5DcPze2-TuMN32-hA8DrE-3ihdR3djmkB6y-R7g&params=Nb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkPejZgAKFm3ZlUxHBNGiYcbgU5DmL2JgBOnA6uq5HqYXDGOAkkcHp77mTvilkZ5d9Q2rpDl_8WOAn-k2Y5V9CBXA9Hn2pQTPVn67DMY2sybqayiZvf5flizO3fgV6Cw9N2-R52IBOSmAosKxVeFWSaITqzx-S70fbalfXf6j_MGyOC9eAxeZ7JGLaNEYTuDszAbHweW2Joh-qvwh3aS1didawvBHLOP-V2AJ9n6wIzxxqj8vOzYkgNldKNUmJt1QcCV7gcheIGQeY618UdBWcgJbQ4H-Y9TkqHO2sUSV-RHzJCsRWDjhnFAPFm7pN506i_DH--SzmnConwZt5nHCFtvPxN2SulUo9 HTTP/1.1 Host: get4.protectonow.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:56 UTC	1266	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:56 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=fda95280-d38e-11ef-bc27-c22fbff8fb28; Domain=.protectonow.com; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: uid_cross=fda95280-d38e-11ef-bc27-c22fbff8fb28; Domain=.protectonow.com; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/; SameSite=none; Secure Set-Cookie: mid=f28d8534-d38e-11ef-93a7-aab196f2f20d; Domain=.protectonow.com; Max-Age=7200; Path=/
2025-01-15 22:20:56 UTC	1089	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 75 74 6d 5f 73 6f 75 72 63 65 3d 61 64 78 5f 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 5f 5f 5f 35 65 34 36 30 62 61 62 3b 20 44 6f 6d 61 69 6e 3d 2e 70 72 6f 74 65 63 74 6f 6e 6f 77 2e 63 6f 6d 3b 20 65 78 70 69 72 65 73 3d 54 75 65 2c 20 31 39 20 4a 61 6e 20 32 30 33 38 20 30 33 3a 31 34 3a 30 37 20 47 4d 54 3b 20 50 61 74 68 3d 2f 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 75 74 6d 5f 73 6f 75 72 63 65 5f 63 72 6f 73 73 3d 61 64 78 5f 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 5f 5f 5f 35 65 34 36 30 62 61 62 3b 20 44 6f 6d 61 69 6e 3d 2e 70 72 6f 74 65 63 74 6f 6e 6f 77 2e 63 6f 6d 3b 20 65 78 70 69 72 65 73 3d 54 75 65 2c 20 31 39 20 4a 61 6e 20 32 30 33 38 Data Ascii: Set-Cookie: utm_source=adx_ext_download_prot_smrtsp___5e460bab; Domain=.protectonow.com; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/Set-Cookie: utm_source_cross=adx_ext_download_prot_smrtsp___5e460bab; Domain=.protectonow.com; expires=Tue, 19 Jan 2038
2025-01-15 22:20:56 UTC	1369	IN	Data Raw: 33 30 62 31 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 6d 6f 64 75 6c 65 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 70 72 6f 74 65 63 74 6f 6e 6f 77 2e 63 6f 6d 2f 6e 67 2d 61 73 73 65 74 73 2f 6c 70 2f 61 73 73 65 74 73 2f 70 6f 6c 79 66 69 6c 6c 73 2d 61 33 66 34 35 32 63 33 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 6d 65 74 Data Ascii: 30b1<!doctype html><html lang="en"><head><script type="module" crossorigin src="https://cdn.protectonow.com/ng-assets/lp/assets/polyfills-a3f452c3.js"></script><meta charset="UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><met
2025-01-15 22:20:56 UTC	1369	IN	Data Raw: 79 6e 63 5c 2f 24 7b 4d 61 74 68 2e 66 6c 6f 6f 72 28 31 65 38 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 7d 2e 6a 73 3f 69 64 3d 24 7b 72 7d 60 2c 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 5c 22 73 63 72 69 70 74 5c 22 29 3b 61 2e 74 79 70 65 3d 5c 22 74 65 78 74 5c 2f 6a 61 76 61 73 63 72 69 70 74 5c 22 2c 61 2e 73 72 63 3d 65 2c 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 7d 6c 6f 61 64 55 73 65 72 53 79 6e 63 28 29 3b 22 7d 2c 22 63 75 73 74 6f 6d 53 74 65 70 54 65 6d 70 6c 61 74 65 73 22 3a 7b 22 63 75 73 74 6f 6d 5f 66 6f 6f 74 65 72 22 3a 7b 22 63 6f 6e 66 69 67 22 3a 7b 22 70 6c 61 63 65 6d 65 6e 74 22 3a 7b 22 68 65 69 67 68 74 22 3a 22 33 35 70 78 22 2c 22 76 65 72 74 Data Ascii: ync\/${Math.floor(1e8*Math.random())}.js?id=${r}`,a=document.createElement(\"script\");a.type=\"text\/javascript\",a.src=e,document.head.appendChild(a)}}loadUserSync();"},"customStepTemplates":{"custom_footer":{"config":{"placement":{"height":"35px","vert
2025-01-15 22:20:56 UTC	1369	IN	Data Raw: 5c 2f 63 64 6e 2e 70 72 6f 74 65 63 74 6f 6e 6f 77 2e 63 6f 6d 5c 2f 62 74 6e 5f 77 69 6e 5f 31 37 33 35 32 30 34 30 37 36 2e 73 76 67 2b 78 6d 6c 22 2c 22 72 65 73 70 6f 6e 73 69 76 65 53 74 79 6c 65 22 3a 7b 22 6d 61 63 22 3a 7b 22 63 6f 6e 74 65 6e 74 22 3a 22 75 72 6c 28 27 68 74 74 70 73 3a 5c 2f 5c 2f 63 64 6e 2e 70 72 6f 74 65 63 74 6f 6e 6f 77 2e 63 6f 6d 5c 2f 62 74 6e 5f 6d 61 63 5f 31 37 33 35 32 30 34 30 37 35 2e 73 76 67 2b 78 6d 6c 27 29 22 7d 7d 2c 22 73 74 79 6c 65 22 3a 7b 22 63 75 72 73 6f 72 22 3a 22 70 6f 69 6e 74 65 72 22 2c 22 77 69 64 74 68 22 3a 22 33 35 30 70 78 22 7d 7d 2c 22 73 68 6f 77 50 61 72 61 6d 73 22 3a 7b 22 68 69 64 64 65 6e 22 3a 74 72 75 65 7d 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 7d 2c 22 61 64 64 5f 65 78 74 Data Ascii: \/cdn.protectonow.com\/btn_win_1735204076.svg+xml","responsiveStyle":{"mac":{"content":"url('https:\/\/cdn.protectonow.com\/btn_mac_1735204075.svg+xml')"}},"style":{"cursor":"pointer","width":"350px"}},"showParams":{"hidden":true},"type":"image"},"add_ext
2025-01-15 22:20:56 UTC	1369	IN	Data Raw: 61 6d 73 22 3a 7b 22 68 69 64 64 65 6e 22 3a 74 72 75 65 7d 2c 22 74 79 70 65 22 3a 22 62 75 74 74 6f 6e 22 7d 2c 22 61 6c 72 65 61 64 79 5f 69 6e 73 74 61 6c 6c 65 64 5f 62 74 6e 22 3a 7b 22 62 75 74 74 6f 6e 50 61 72 61 6d 73 22 3a 7b 22 61 63 74 69 6f 6e 73 22 3a 7b 22 63 6c 69 63 6b 22 3a 5b 5d 7d 2c 22 70 73 65 75 64 6f 53 74 79 6c 65 22 3a 7b 22 68 6f 76 65 72 22 3a 7b 22 63 75 72 73 6f 72 22 3a 22 64 65 66 61 75 6c 74 22 7d 7d 2c 22 73 74 79 6c 65 22 3a 5b 22 74 65 78 74 22 2c 22 63 74 61 22 2c 7b 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 22 23 63 63 63 22 2c 22 62 6f 72 64 65 72 52 61 64 69 75 73 22 3a 22 32 70 78 22 2c 22 63 6f 6c 6f 72 22 3a 22 23 36 36 36 22 2c 22 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 22 3a 22 34 30 70 78 22 2c 22 6d 61 72 67 69 6e Data Ascii: ams":{"hidden":true},"type":"button"},"already_installed_btn":{"buttonParams":{"actions":{"click":[]},"pseudoStyle":{"hover":{"cursor":"default"}},"style":["text","cta",{"background":"#ccc","borderRadius":"2px","color":"#666","marginBottom":"40px","margin
2025-01-15 22:20:56 UTC	1369	IN	Data Raw: 6e 65 72 22 7d 2c 22 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 22 3a 7b 22 63 6f 6e 74 61 69 6e 65 72 50 61 72 61 6d 73 22 3a 7b 22 65 6c 65 6d 65 6e 74 73 22 3a 7b 22 63 68 65 63 6b 5f 69 63 6f 6e 22 3a 7b 22 69 6d 61 67 65 50 61 72 61 6d 73 22 3a 7b 22 69 6d 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 63 64 6e 2e 70 72 6f 74 65 63 74 6f 6e 6f 77 2e 63 6f 6d 5c 2f 65 78 74 5c 2f 63 68 65 63 6b 6d 61 72 6b 2d 63 68 72 6f 6d 65 5f 31 36 39 38 30 35 39 30 37 31 2e 73 76 67 2b 78 6d 6c 22 7d 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 7d 2c 22 63 68 72 6f 6d 65 5f 69 63 6f 6e 5f 63 6f 6e 74 61 69 6e 65 72 22 3a 7b 22 63 6f 6e 74 61 69 6e 65 72 50 61 72 61 6d 73 22 3a 7b 22 65 6c 65 6d 65 6e 74 73 22 3a 7b 22 63 68 72 6f 6d 65 5f 69 63 6f 6e 22 3a Data Ascii: ner"},"compatibility":{"containerParams":{"elements":{"check_icon":{"imageParams":{"imageUrl":"https:\/\/cdn.protectonow.com\/ext\/checkmark-chrome_1698059071.svg+xml"},"type":"image"},"chrome_icon_container":{"containerParams":{"elements":{"chrome_icon":
2025-01-15 22:20:56 UTC	1369	IN	Data Raw: 63 6f 6c 75 6d 6e 73 22 3a 5b 7b 22 61 6c 69 67 6e 6d 65 6e 74 22 3a 7b 22 73 65 6c 66 22 3a 7b 22 76 65 72 74 69 63 61 6c 22 3a 22 74 6f 70 22 7d 7d 2c 22 72 6f 77 73 22 3a 22 63 68 65 63 6b 5f 69 63 6f 6e 22 2c 22 77 69 64 74 68 22 3a 22 33 30 70 78 22 7d 2c 7b 22 61 6c 69 67 6e 6d 65 6e 74 22 3a 7b 22 73 65 6c 66 22 3a 7b 22 76 65 72 74 69 63 61 6c 22 3a 22 63 65 6e 74 65 72 22 7d 7d 2c 22 72 6f 77 73 22 3a 22 74 65 78 74 22 7d 2c 7b 22 61 6c 69 67 6e 6d 65 6e 74 22 3a 7b 22 73 65 6c 66 22 3a 7b 22 76 65 72 74 69 63 61 6c 22 3a 22 63 65 6e 74 65 72 22 7d 7d 2c 22 72 6f 77 73 22 3a 22 63 68 72 6f 6d 65 5f 69 63 6f 6e 5f 63 6f 6e 74 61 69 6e 65 72 22 2c 22 77 69 64 74 68 22 3a 22 32 35 70 78 22 7d 5d 2c 22 67 61 70 22 3a 22 31 30 70 78 22 2c 22 68 65 69 Data Ascii: columns":[{"alignment":{"self":{"vertical":"top"}},"rows":"check_icon","width":"30px"},{"alignment":{"self":{"vertical":"center"}},"rows":"text"},{"alignment":{"self":{"vertical":"center"}},"rows":"chrome_icon_container","width":"25px"}],"gap":"10px","hei
2025-01-15 22:20:56 UTC	1369	IN	Data Raw: 20 70 72 6f 76 69 64 65 72 20 74 6f 20 75 73 65 20 6f 75 72 20 63 75 73 74 6f 6d 20 77 65 62 20 73 65 61 72 63 68 20 74 6f 20 70 72 6f 76 69 64 65 20 79 6f 75 20 61 20 62 65 74 74 65 72 20 73 65 61 72 63 68 20 65 78 70 65 72 69 65 6e 63 65 2e 20 22 7d 2c 22 74 79 70 65 22 3a 22 74 65 78 74 22 7d 2c 22 65 78 74 5f 64 65 74 61 69 6c 73 22 3a 7b 22 63 6f 6e 74 61 69 6e 65 72 50 61 72 61 6d 73 22 3a 7b 22 65 6c 65 6d 65 6e 74 73 22 3a 7b 22 65 78 74 5f 6c 6f 67 6f 22 3a 7b 22 69 6d 61 67 65 50 61 72 61 6d 73 22 3a 7b 22 69 6d 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 70 72 6f 74 65 63 74 6f 6e 6f 77 2e 63 6f 6d 2f 65 78 74 2f 73 74 74 69 63 6f 6e 5f 31 37 33 35 37 32 36 34 37 35 2e 70 6e 67 22 7d 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 Data Ascii: provider to use our custom web search to provide you a better search experience. "},"type":"text"},"ext_details":{"containerParams":{"elements":{"ext_logo":{"imageParams":{"imageUrl":"https://cdn.protectonow.com/ext/stticon_1735726475.png"},"type":"image
2025-01-15 22:20:56 UTC	1369	IN	Data Raw: 74 74 69 65 5f 32 5f 62 5f 31 37 33 35 31 33 32 35 32 32 2e 6a 73 6f 6e 22 7d 2c 22 73 68 6f 77 50 61 72 61 6d 73 22 3a 7b 22 68 69 64 64 65 6e 22 3a 74 72 75 65 7d 2c 22 74 79 70 65 22 3a 22 6c 6f 74 74 69 65 22 7d 7d 7d 2c 22 70 6c 61 63 65 6d 65 6e 74 22 3a 7b 22 68 65 69 67 68 74 22 3a 22 31 34 35 70 78 22 2c 22 77 69 64 74 68 22 3a 22 33 32 30 70 78 22 7d 2c 22 73 68 6f 77 50 61 72 61 6d 73 22 3a 7b 22 68 69 64 64 65 6e 22 3a 74 72 75 65 7d 2c 22 74 79 70 65 22 3a 22 63 6f 6e 74 61 69 6e 65 72 22 7d 2c 22 6c 6f 74 74 69 65 5f 6c 6f 61 64 22 3a 7b 22 63 6f 6e 74 61 69 6e 65 72 50 61 72 61 6d 73 22 3a 7b 22 65 6c 65 6d 65 6e 74 73 22 3a 7b 22 6c 6f 74 74 69 65 5f 32 5f 61 22 3a 7b 22 6c 6f 74 74 69 65 50 61 72 61 6d 73 22 3a 7b 22 6c 6f 6f 70 22 3a 66 Data Ascii: ttie_2_b_1735132522.json"},"showParams":{"hidden":true},"type":"lottie"}}},"placement":{"height":"145px","width":"320px"},"showParams":{"hidden":true},"type":"container"},"lottie_load":{"containerParams":{"elements":{"lottie_2_a":{"lottieParams":{"loop":f
2025-01-15 22:20:56 UTC	1369	IN	Data Raw: 7b 22 68 65 69 67 68 74 22 3a 22 31 30 30 25 22 2c 22 77 69 64 74 68 22 3a 22 31 30 30 25 22 7d 2c 22 74 79 70 65 22 3a 22 63 6f 6e 74 61 69 6e 65 72 22 7d 2c 22 70 61 72 61 6d 73 22 3a 7b 22 61 63 74 69 6f 6e 73 22 3a 22 61 63 74 69 6f 6e 73 22 2c 22 63 75 72 73 6f 72 22 3a 22 73 74 79 6c 65 2e 63 75 72 73 6f 72 22 7d 7d 7d 2c 22 64 65 66 61 75 6c 74 41 63 74 69 6f 6e 73 22 3a 7b 22 63 6c 69 63 6b 22 3a 5b 7b 22 74 61 72 67 65 74 22 3a 22 73 65 63 6f 6e 64 5f 70 61 67 65 5f 63 6f 6e 74 61 69 6e 65 72 22 2c 22 74 79 70 65 22 3a 22 6f 76 65 72 6c 61 79 22 7d 2c 7b 22 74 61 72 67 65 74 22 3a 22 66 6f 6f 74 65 72 5f 32 22 2c 22 74 79 70 65 22 3a 22 6f 76 65 72 6c 61 79 22 7d 2c 7b 22 74 61 72 67 65 74 22 3a 22 73 65 63 6f 6e 64 5f 70 61 67 65 5f 63 6f 6e 74 Data Ascii: {"height":"100%","width":"100%"},"type":"container"},"params":{"actions":"actions","cursor":"style.cursor"}}},"defaultActions":{"click":[{"target":"second_page_container","type":"overlay"},{"target":"footer_2","type":"overlay"},{"target":"second_page_cont

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	50005	142.250.186.162	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:56 UTC	2436	OUT	GET /aclk?sa=L&ai=Cg079tTSIZ5nPM7qSjuwPsJeGsAe9qs_Ndemi3NbEEsCNtwEQASAAYMmWy4vEpPwPggEXY2EtcHViLTQ4MjEwMDY4NTI5MTQzNTnIAQmoAwHIAwKqBIUCT9DUYKjKI4pQraEcfrh6m7h9bplWrkbPj_91eeUOpJhdu9KpO0_XYY-cFu19QnZyNheKNP9npaVhnppps6EXhc3BzLo3anLFZHbeg9orLOvmqDeb92XzJ9zmloLoNmP_QdruBQ3lrp4hdP1u3o5ziALuCeqfDUCAk3nMPyRGcGzELC11L3Li97soOg-L0FVd1MKKdwSb3JXcm9Jc4SzAnkh4e7olKZznc1bs88r2I5yWFLGbTgw6FY7xoSlUEd1JBSESOIhUn4RAQ2j7Ze9B0WVkDsyfWXvNgTvg52WwxBA1jx_SabV4xe97aV_23ubQshb_NJtK01romKes9Gi9QiiAfXxigAaarO2X-f_z_OUBoAYhqAemvhuoB5bYG6gHqpuxAqgH_56xAqgH35-xAqgHrb6xAtgHANIIJAiAYRABMgKKAjoLgECAwICAgKCogAJIvf3BOljj466y4fiKA_oLAggBgAwB0BUBgBcBshcCGAw&num=1&sig=AOD64_0RRIR_3oWVmHVGijS2gmW-a71wAg&client=ca-pub-4821006852914359&adurl=https%3A%2F%2Fget4.protectonow.com%2Finstall%2F%3Fmid%3Df28d8534-d38e-11ef-93a7-aab196f2f20d%26rpclid%3Df28d8534-d38e-11ef-93a7-aab196f2f20d%26utm_source%3Dadx_ext_download_prot_smrtsp___5e460bab%26uq%3D_JDg0vZrlOp4T6_9U0ssm5ItFDhV3TsqhLGO26omVj-2pXmkcPDHdNwDCaqhZpjpKTa7dG0kopMzaVwvRrpzQLXyz5bNrDsHKX4rae-VljJo [TRUNCATED] Host: adclick.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUnp6e8q3Hn02qx9nr5ulHgfqaOhOFhnsIORFFJRHSgAHbZOc4nFtnhzzAgnkCg; DSID=NO_DATA
2025-01-15 22:20:56 UTC	1668	IN	HTTP/1.1 302 Found P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Date: Wed, 15 Jan 2025 22:20:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Location: https://get4.protectonow.com/install/?mid=f28d8534-d38e-11ef-93a7-aab196f2f20d&rpclid=f28d8534-d38e-11ef-93a7-aab196f2f20d&utm_source=adx_ext_download_prot_smrtsp___5e460bab&uq=_JDg0vZrlOp4T6_9U0ssm5ItFDhV3TsqhLGO26omVj-2pXmkcPDHdNwDCaqhZpjpKTa7dG0kopMzaVwvRrpzQLXyz5bNrDsHKX4rae-VljJo0XQMs9qPDHH7jO7Lx_9WhNCEj1xuWu-4f2YWpcIqzgA77etzE7oZtFSzHsIewF6zNBxh8d3T9Zk-HKlhZPa0MQd1POmBJVA9GftafTfIXKITadh35clew_PwRPW1jYBE6OV5DcPze2-TuMN32-hA8DrE-3ihdR3djmkB6y-R7g&params=Nb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkPejZgAKFm3ZlUxHBNGiYcbgU5DmL2JgBOnA6uq5HqYXDGOAkkcHp77mTvilkZ5d9Q2rpDl_8WOAn-k2Y5V9CBXA9Hn2pQTPVn67DMY2sybqayiZvf5flizO3fgV6Cw9N2-R52IBOSmAosKxVeFWSaITqzx-S70fbalfXf6j_MGyOC9eAxeZ7JGLaNEYTuDszAbHweW2Joh-qvwh3aS1didawvBHLOP-V2AJ9n6wIzxxqj8vOzYkgNldKNUmJt1QcCV7gcheIGQeY618UdBWcgJbQ4H-Y9TkqHO2sUSV-RHzJCsRWDjhnFAPFm7pN506i_DH--SzmnConwZt5nHCFtvPxN2SulUo9 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: adclick_server Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	50006	104.21.50.45	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:56 UTC	2529	OUT	GET /siglp.js?rpclid=f28d8534-d38e-11ef-93a7-aab196f2f20d&params=Nb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkPejZgAKFm3ZlUxHBNGiYcbgU5DmL2JgBOnA6uq5HqYXDGOAkkcHp77mTvilkZ5d9Q2rpDl_8WOAn-k2Y5V9CBXA9Hn2pQTPVn67DMY2sybqayiZvf5flizO3fgV6Cw9N2-R52IBOSmAosKxVeFWSaITqzx-S70fbalfXf6j_MGyOC9eAxeZ7JGLaNEYTuDszAbHweW2Joh-qvwh3aS1didawvBHLOP-V2AJ9n6wIzxxqj8vOzYkgNldKNUmJt1QcCV7gcheIGQeY618UdBWcgJbQ4H-Y9TkqHO2sUSV-RHzJCsRWDjhnFAPFm7pN506i_DH--SzmnConwZt5nHCFtvPxN2SulUo9 HTTP/1.1 Host: get4.protectonow.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" device-memory: 8 rtt: 300 sec-ch-ua-mobile: ?0 sec-ch-viewport-height: 907 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-viewport-width: 1280 sec-ch-ua-platform-version: "10.0.0" downlink: 10 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://get4.protectonow.com/install/?mid=f28d8534-d38e-11ef-93a7-aab196f2f20d&rpclid=f28d8534-d38e-11ef-93a7-aab196f2f20d&utm_source=adx_ext_download_prot_smrtsp___5e460bab&uq=_JDg0vZrlOp4T6_9U0ssm5ItFDhV3TsqhLGO26omVj-2pXmkcPDHdNwDCaqhZpjpKTa7dG0kopMzaVwvRrpzQLXyz5bNrDsHKX4rae-VljJo0XQMs9qPDHH7jO7Lx_9WhNCEj1xuWu-4f2YWpcIqzgA77etzE7oZtFSzHsIewF6zNBxh8d3T9Zk-HKlhZPa0MQd1POmBJVA9GftafTfIXKITadh35clew_PwRPW1jYBE6OV5DcPze2-TuMN32-hA8DrE-3ihdR3djmkB6y-R7g&params=Nb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkPejZgAKFm3ZlUxHBNGiYcbgU5DmL2JgBOnA6uq5HqYXDGOAkkcHp77mTvilkZ5d9Q2rpDl_8WOAn-k2Y5V9CBXA9Hn2pQTPVn67DMY2sybqayiZvf5flizO3fgV6Cw9N2-R52IBOSmAosKxVeFWSaITqzx-S70fbalfXf6j_MGyOC9eAxeZ7JGLaNEYTuDszAbHweW2Joh-qvwh3aS1didawvBHLOP-V2AJ9n6wIzxxqj8vOzYkgNldKNUmJt1QcCV7gcheIGQeY618UdBWcgJbQ4H-Y9TkqHO2sUSV-RHzJCsRWDjhnFAPFm7pN506i_DH--SzmnConwZt5nHCFtvPxN2SulUo9 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=fda95280-d38e-11ef-bc27-c22fbff8fb28; uid_cross=fda95280-d38e-11ef-bc27-c22fbff8fb28; mid=f28d8534-d38e-11ef-93a7-aab196f2f20d; utm_source=adx_ext_download_prot_smrtsp___5e460bab; utm_source_cross=adx_ext_download_prot_smrtsp___5e460bab; p2088478120=144748304
2025-01-15 22:20:56 UTC	1362	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:56 GMT Content-Type: text/javascript Content-Length: 21688 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: mid=f28d8534-d38e-11ef-93a7-aab196f2f20d; Domain=.protectonow.com; Max-Age=7200; Path=/ Via: 1.1 google cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DKjq9I4efA93jp4QSyIggxCyogFAaRyaRduXAHQGgDPH0FxGzQEHOag7kLfcv4ZBfG396RWjpcEdMTPiZWS5OqO8JeG9YvfLsgCKS%2BgmGN3V%2BqhR8MzhoXpnNvM0q4jHUYiOLeLjQw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
2025-01-15 22:20:56 UTC	295	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 32 39 34 31 38 37 37 61 61 32 30 35 65 33 2d 49 41 44 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 36 39 33 31 26 6d 69 6e 5f 72 74 74 3d 36 39 33 31 26 72 74 74 5f 76 61 72 3d 33 34 36 35 26 73 65 6e 74 3d 37 26 72 65 63 76 3d 39 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 31 26 73 65 6e 74 5f 62 79 74 65 73 3d 33 32 33 36 26 72 65 63 76 5f 62 79 74 65 73 3d 33 31 32 39 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 31 36 33 31 37 34 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 Data Ascii: Server: cloudflareCF-RAY: 902941877aa205e3-IADalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=6931&min_rtt=6931&rtt_var=3465&sent=7&recv=9&lost=0&retrans=1&sent_bytes=3236&recv_bytes=3129&delivery_rate=163174&cwnd=32&unsent_byte
2025-01-15 22:20:56 UTC	1081	IN	Data Raw: 76 61 72 20 67 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 79 3d 28 6e 2c 71 2c 70 29 3d 3e 71 20 69 6e 20 6e 3f 67 28 6e 2c 71 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 70 7d 29 3a 6e 5b 71 5d 3d 70 2c 68 3d 28 6e 2c 71 2c 70 29 3d 3e 28 79 28 6e 2c 22 73 79 6d 62 6f 6c 22 21 3d 74 79 70 65 6f 66 20 71 3f 71 2b 22 22 3a 71 2c 70 29 2c 70 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 61 2c 62 29 7b 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 3f 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 28 22 66 6c 5f 22 2b 61 2c 62 29 3a 28 45 7c 7c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 71 2c 31 30 Data Ascii: var g=Object.defineProperty,y=(n,q,p)=>q in n?g(n,q,{enumerable:!0,configurable:!0,writable:!0,value:p}):n[q]=p,h=(n,q,p)=>(y(n,"symbol"!=typeof q?q+"":q,p),p);(function(){function n(a,b){window.sendEvent?window.sendEvent("fl_"+a,b):(E\|\|=setInterval(q,10
2025-01-15 22:20:56 UTC	1369	IN	Data Raw: 28 62 3d 3e 73 65 74 54 69 6d 65 6f 75 74 28 62 2c 61 29 29 7d 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 4c 28 61 2c 62 2c 63 29 7b 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 63 3b 65 2b 2b 29 7b 76 61 72 20 64 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 0a 61 77 61 69 74 20 61 28 29 3b 64 3d 62 2d 28 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 2d 64 29 3b 65 3c 63 2d 31 26 26 30 3c 64 26 26 61 77 61 69 74 20 47 28 64 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 61 29 7b 69 66 28 30 3c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 61 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 61 3b 63 6f 6e 73 74 20 62 3d 7b 7d 3b 66 6f 72 28 63 6f 6e 73 74 20 63 20 69 6e 20 61 29 7b 63 6f 6e 73 74 20 64 3d 61 5b 63 5d 3b 6e 75 6c 6c 21 3d 64 26 26 22 66 75 Data Ascii: (b=>setTimeout(b,a))}async function L(a,b,c){for(let e=0;e<c;e++){var d=performance.now();await a();d=b-(performance.now()-d);e<c-1&&0<d&&await G(d)}}function M(a){if(0<Object.keys(a).length)return a;const b={};for(const c in a){const d=a[c];null!=d&&"fu
2025-01-15 22:20:56 UTC	1369	IN	Data Raw: 7d 69 6e 69 74 69 61 6c 69 7a 65 28 29 7b 7d 72 65 61 64 79 28 29 7b 7d 72 65 70 6f 72 74 28 61 2c 62 29 7b 6e 28 77 2e 53 69 67 6e 61 6c 2c 7b 6e 61 6d 65 3a 74 68 69 73 2e 6e 61 6d 65 2c 73 75 63 63 65 73 73 3a 61 2c 66 61 69 6c 3a 62 7d 29 7d 72 65 70 6f 72 74 45 72 72 6f 72 28 61 2c 62 29 7b 70 28 60 24 7b 74 68 69 73 2e 6e 61 6d 65 7d 5b 24 7b 74 68 69 73 2e 63 6f 6e 66 69 67 2e 74 79 70 65 7d 5d 3a 20 24 7b 61 7d 60 2c 62 29 7d 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 6c 65 74 20 66 3d 30 3b 63 6f 6e 73 74 20 6b 3d 6d 3d 3e 7b 74 72 79 7b 62 28 6d 29 7d 63 61 74 63 68 28 72 29 7b 74 68 69 73 2e 72 65 70 6f 72 74 45 72 72 6f 72 28 60 65 72 72 6f 72 20 69 6e 20 24 7b 61 7d 60 2c 72 29 2c 65 26 26 0a 74 68 69 Data Ascii: }initialize(){}ready(){}report(a,b){n(w.Signal,{name:this.name,success:a,fail:b})}reportError(a,b){p(`${this.name}[${this.config.type}]: ${a}`,b)}addEventListener(a,b,c,d,e){let f=0;const k=m=>{try{b(m)}catch(r){this.reportError(`error in ${a}`,r),e&&thi
2025-01-15 22:20:56 UTC	1369	IN	Data Raw: 6d 65 6e 74 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 61 29 3a 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 7d 6f 6e 45 6c 65 6d 65 6e 74 43 6c 69 63 6b 28 61 29 7b 63 6f 6e 73 74 20 62 3d 61 2e 74 61 72 67 65 74 3b 62 2e 73 74 79 6c 65 2e 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3d 22 6e 6f 6e 65 22 3b 63 6f 6e 73 74 20 63 3d 64 6f 63 75 6d 65 6e 74 2e 65 6c 65 6d 65 6e 74 46 72 6f 6d 50 6f 69 6e 74 28 61 2e 63 6c 69 65 6e 74 58 2c 61 2e 63 6c 69 65 6e 74 59 29 3b 69 66 28 62 2e 73 74 79 6c 65 2e 70 6f 69 6e 74 65 72 45 76 65 6e 74 73 3d 22 61 75 74 6f 22 2c 63 26 26 63 21 3d 3d 62 29 61 3d 6e 65 77 20 4d 6f 75 73 65 45 76 65 6e 74 28 61 2e 74 79 70 65 2c 61 29 2c 63 2e 64 69 73 70 61 74 63 68 45 Data Ascii: ment(a){return a?document.querySelector(a):document.body}onElementClick(a){const b=a.target;b.style.pointerEvents="none";const c=document.elementFromPoint(a.clientX,a.clientY);if(b.style.pointerEvents="auto",c&&c!==b)a=new MouseEvent(a.type,a),c.dispatchE
2025-01-15 22:20:56 UTC	1369	IN	Data Raw: 64 64 45 72 72 6f 72 28 61 2c 6b 2c 64 29 7d 7d 2c 74 68 69 73 2e 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 4d 73 3f 3f 31 45 33 2c 74 68 69 73 2e 63 6f 6e 66 69 67 2e 63 6f 75 6e 74 3f 3f 33 29 2c 30 21 3d 3d 65 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 66 3d 0a 31 3d 3d 3d 65 2e 6c 65 6e 67 74 68 3f 65 5b 30 5d 3a 4d 61 74 68 2e 72 6f 75 6e 64 28 76 28 65 2e 73 6c 69 63 65 28 31 29 29 29 3b 63 5b 61 5d 3d 7b 61 76 65 72 61 67 65 44 75 72 61 74 69 6f 6e 4d 73 3a 66 2c 70 69 6e 67 44 75 72 61 74 69 6f 6e 73 4d 73 3a 65 7d 7d 7d 61 64 64 45 72 72 6f 72 28 61 2c 62 2c 63 29 7b 63 5b 61 5d 7c 7c 28 63 5b 61 5d 3d 5b 5d 29 3b 63 5b 61 5d 2e 70 75 73 68 28 6e 75 6c 6c 3d 3d 62 3f 76 6f 69 64 20 30 3a 62 2e 6d 65 73 73 61 67 65 29 7d 7d 63 6c 61 73 73 20 52 20 Data Ascii: ddError(a,k,d)}},this.config.intervalMs??1E3,this.config.count??3),0!==e.length){var f=1===e.length?e[0]:Math.round(v(e.slice(1)));c[a]={averageDurationMs:f,pingDurationsMs:e}}}addError(a,b,c){c[a]\|\|(c[a]=[]);c[a].push(null==b?void 0:b.message)}}class R
2025-01-15 22:20:56 UTC	1369	IN	Data Raw: 68 69 73 2e 65 76 65 6e 74 73 57 69 6e 64 6f 77 29 29 3b 74 68 69 73 2e 6d 6f 75 73 65 44 61 74 61 41 72 72 61 79 2e 6c 65 6e 67 74 68 3d 30 7d 63 61 6c 63 75 6c 61 74 65 41 6e 64 52 65 70 6f 72 74 28 61 29 7b 69 66 28 21 28 32 3e 61 2e 6c 65 6e 67 74 68 29 29 7b 76 61 72 20 62 3d 7b 78 3a 7b 63 6f 75 6e 74 55 6e 69 71 75 65 3a 30 2c 76 65 6c 6f 63 69 74 69 65 73 3a 5b 5d 7d 2c 79 3a 7b 63 6f 75 6e 74 55 6e 69 71 75 65 3a 30 2c 76 65 6c 6f 63 69 74 69 65 73 3a 5b 5d 7d 7d 2c 63 3d 62 2e 78 2e 76 65 6c 6f 63 69 74 69 65 73 2c 64 3d 62 2e 79 2e 76 65 6c 6f 63 69 74 69 65 73 2c 65 2c 66 2c 6b 2c 6d 3d 30 3b 66 6f 72 28 6c 65 74 20 78 3d 31 3b 78 3c 61 2e 6c 65 6e 67 74 68 3b 78 2b 2b 29 7b 63 6f 6e 73 74 20 7b 76 65 6c 6f 63 69 74 79 58 3a 42 2c 0a 76 65 6c Data Ascii: his.eventsWindow));this.mouseDataArray.length=0}calculateAndReport(a){if(!(2>a.length)){var b={x:{countUnique:0,velocities:[]},y:{countUnique:0,velocities:[]}},c=b.x.velocities,d=b.y.velocities,e,f,k,m=0;for(let x=1;x<a.length;x++){const {velocityX:B,vel
2025-01-15 22:20:56 UTC	1369	IN	Data Raw: 73 79 6e 63 20 63 6f 6c 6c 65 63 74 53 69 6e 67 6c 65 28 61 2c 62 29 7b 61 3d 61 77 61 69 74 20 65 76 61 6c 28 60 61 73 79 6e 63 20 28 65 29 20 3d 3e 20 24 7b 61 7d 60 29 28 62 29 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 61 3d 4d 28 61 29 29 2c 61 7d 61 73 79 6e 63 20 63 6f 6c 6c 65 63 74 28 61 2c 62 2c 63 29 7b 63 6f 6e 73 74 20 64 3d 7b 7d 2c 65 3d 7b 7d 2c 66 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 74 69 6d 65 6f 75 74 4d 73 3f 3f 31 45 33 3b 61 77 61 69 74 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 62 29 2e 6d 61 70 28 61 73 79 6e 63 28 5b 6b 2c 6d 5d 29 3d 3e 7b 74 72 79 7b 64 5b 6b 5d 3d 61 77 61 69 74 20 4b 28 74 68 69 73 2e 63 6f 6c 6c 65 63 74 53 69 6e 67 6c 65 28 Data Ascii: sync collectSingle(a,b){a=await eval(`async (e) => ${a}`)(b);return"object"==typeof a&&(a=M(a)),a}async collect(a,b,c){const d={},e={},f=this.config.timeoutMs??1E3;await Promise.all(Object.entries(b).map(async([k,m])=>{try{d[k]=await K(this.collectSingle(
2025-01-15 22:20:56 UTC	1369	IN	Data Raw: 6d 29 7d 63 61 74 63 68 28 66 29 7b 74 68 69 73 2e 72 65 70 6f 72 74 45 72 72 6f 72 28 60 66 61 69 6c 65 64 20 6f 6e 20 69 63 65 20 63 61 6e 64 69 64 61 74 65 3a 20 24 7b 6e 75 6c 6c 3d 3d 28 65 3d 6e 75 6c 6c 3d 3d 61 3f 76 6f 69 64 20 30 3a 0a 61 2e 63 61 6e 64 69 64 61 74 65 29 3f 76 6f 69 64 20 30 3a 65 2e 63 61 6e 64 69 64 61 74 65 7d 60 2c 66 29 7d 7d 69 73 4c 6f 63 61 6c 49 50 28 61 29 7b 72 65 74 75 72 6e 2f 5e 28 31 39 32 5c 2e 31 36 38 5c 2e 7c 31 36 39 5c 2e 32 35 34 5c 2e 7c 31 30 5c 2e 7c 31 37 32 5c 2e 28 31 5b 36 2d 39 5d 7c 32 5c 64 7c 33 5b 30 31 5d 29 7c 66 64 7c 66 65 38 30 29 2f 2e 74 65 73 74 28 61 29 7d 73 68 6f 75 6c 64 52 65 70 6f 72 74 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 70 6f 72 74 65 64 53 69 67 6e 61 6c 73 2e Data Ascii: m)}catch(f){this.reportError(`failed on ice candidate: ${null==(e=null==a?void 0:a.candidate)?void 0:e.candidate}`,f)}}isLocalIP(a){return/^(192\.168\.\|169\.254\.\|10\.\|172\.(1[6-9]\|2\d\|3[01])\|fd\|fe80)/.test(a)}shouldReport(a){return this.reportedSignals.
2025-01-15 22:20:56 UTC	1369	IN	Data Raw: 65 70 6f 72 74 4d 73 2e 6c 65 6e 67 74 68 2d 31 29 7d 29 7d 6f 6e 44 65 76 69 63 65 4f 72 69 65 6e 74 61 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 65 76 65 6e 74 43 6f 75 6e 74 65 72 2e 6f 72 69 65 6e 74 61 74 69 6f 6e 2b 2b 3b 74 68 69 73 2e 63 6f 6c 6c 65 63 74 44 61 74 61 28 74 68 69 73 2e 6f 72 69 65 6e 74 61 74 69 6f 6e 44 61 74 61 2c 7b 61 6c 70 68 61 3a 61 2e 61 6c 70 68 61 2c 62 65 74 61 3a 61 2e 62 65 74 61 2c 67 61 6d 6d 61 3a 61 2e 67 61 6d 6d 61 7d 29 7d 6f 6e 44 65 76 69 63 65 4d 6f 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 65 76 65 6e 74 43 6f 75 6e 74 65 72 2e 6d 6f 74 69 6f 6e 2b 2b 3b 61 2e 61 63 63 65 6c 65 72 61 74 69 6f 6e 26 26 74 68 69 73 2e 63 6f 6c 6c 65 63 74 44 61 74 61 28 74 68 69 73 2e 6d 6f 74 69 6f 6e 44 61 74 61 2e 61 63 63 65 6c Data Ascii: eportMs.length-1)})}onDeviceOrientation(a){this.eventCounter.orientation++;this.collectData(this.orientationData,{alpha:a.alpha,beta:a.beta,gamma:a.gamma})}onDeviceMotion(a){this.eventCounter.motion++;a.acceleration&&this.collectData(this.motionData.accel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	50008	104.21.80.92	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:56 UTC	742	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 16568 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=f3b61b5a-d38e-11ef-abcc-b61a6926ccce; sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d
2025-01-15 22:20:56 UTC	16384	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 66 32 38 64 38 35 33 34 2d 64 33 38 65 2d 31 31 65 66 2d 39 33 61 37 2d 61 61 62 31 39 36 66 32 66 32 30 64 22 2c 22 64 22 3a 22 6e 75 61 6e 63 65 2d 70 64 66 2d 70 72 6f 66 65 73 73 69 6f 6e 61 6c 32 2e 73 6f 66 74 77 61 72 65 2e 69 6e 66 6f 72 6d 65 72 2e 63 6f 6d 22 2c 22 63 72 22 3a 22 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 4e 62 34 4a 50 52 52 6e 59 56 69 38 6b 62 6a 30 63 31 46 49 5f 46 4e 4b 5a 35 39 78 6e 44 4f 6c 69 56 78 63 49 4d 38 35 6e 32 71 73 35 79 38 67 76 31 75 56 67 33 52 62 6a 5a 57 35 5f 46 72 56 6c 59 47 57 50 7a 44 39 4e 49 73 4c 57 4e 45 4f 48 7a 75 34 59 4f 6d 44 38 4f 75 69 53 38 55 6b 50 Data Ascii: {"entries":[{"sid":"f28d8534-d38e-11ef-93a7-aab196f2f20d","d":"nuance-pdf-professional2.software.informer.com","cr":"ext_download_prot_smrtsp","gid":"","im":"Nb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkP
2025-01-15 22:20:56 UTC	184	OUT	Data Raw: 6a 34 57 4e 75 5a 61 48 67 59 4f 35 6e 73 54 63 31 64 62 57 79 73 53 46 69 6f 2b 46 6a 62 6d 57 68 34 47 44 75 5a 2f 45 33 4e 58 52 79 73 53 46 69 6f 2b 46 6a 62 6d 56 68 5a 53 44 67 34 69 35 6e 73 54 63 31 64 58 55 79 73 53 46 69 6f 2b 46 6a 62 6d 56 68 5a 53 44 67 34 69 35 6e 38 54 63 30 74 54 54 79 73 53 46 69 6f 2b 46 6a 62 6d 55 67 34 71 48 6b 6f 2b 51 67 37 6d 65 78 4e 7a 55 33 39 50 4b 78 49 57 4b 6a 34 57 4e 75 5a 53 44 69 6f 65 53 6a 35 43 44 75 5a 2f 45 33 4e 58 53 79 4e 50 66 31 64 48 54 79 73 53 50 67 73 54 63 30 35 76 6d 22 7d 5d 7d Data Ascii: j4WNuZaHgYO5nsTc1dbWysSFio+FjbmWh4GDuZ/E3NXRysSFio+FjbmVhZSDg4i5nsTc1dXUysSFio+FjbmVhZSDg4i5n8Tc0tTTysSFio+FjbmUg4qHko+Qg7mexNzU39PKxIWKj4WNuZSDioeSj5CDuZ/E3NXSyNPf1dHTysSPgsTc05vm"}]}
2025-01-15 22:20:57 UTC	1320	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 22:20:57 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=f3b61b5a-d38e-11ef-abcc-b61a6926ccce; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Via: 1.1 google cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fid98ocw%2BafzLjk3bjmvhEHa9sDHaF2UysL%2Ff038LtrYmHIfVNNH56ybBFPQ%2F4CJ4r4JIileC%2B2Koaw4bvRsDTIUg4cVP1X0jDSeQ6dswZhllIPVu3I7bssOaCbb0XPgvA%3D%3D"}],"group":"cf-nel","max_age":604800}
2025-01-15 22:20:57 UTC	367	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 32 39 34 31 38 38 35 61 34 39 61 62 31 38 2d 59 59 5a 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 33 38 37 32 26 6d 69 6e 5f 72 74 74 3d 31 33 38 36 39 26 72 74 74 5f 76 61 72 3d 35 32 30 33 26 73 65 6e 74 3d 31 30 26 72 65 63 76 3d 32 32 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 Data Ascii: NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 902941885a49ab18-YYZalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=13872&min_rtt=13869&rtt_var=5203&sent=10&recv=22&lost=0&retrans=0&s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	50013	104.21.50.45	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:57 UTC	1587	OUT	GET /install/?mid=f28d8534-d38e-11ef-93a7-aab196f2f20d&rpclid=f28d8534-d38e-11ef-93a7-aab196f2f20d&utm_source=adx_ext_download_prot_smrtsp___5e460bab&uq=_JDg0vZrlOp4T6_9U0ssm5ItFDhV3TsqhLGO26omVj-2pXmkcPDHdNwDCaqhZpjpKTa7dG0kopMzaVwvRrpzQLXyz5bNrDsHKX4rae-VljJo0XQMs9qPDHH7jO7Lx_9WhNCEj1xuWu-4f2YWpcIqzgA77etzE7oZtFSzHsIewF6zNBxh8d3T9Zk-HKlhZPa0MQd1POmBJVA9GftafTfIXKITadh35clew_PwRPW1jYBE6OV5DcPze2-TuMN32-hA8DrE-3ihdR3djmkB6y-R7g&params=Nb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkPejZgAKFm3ZlUxHBNGiYcbgU5DmL2JgBOnA6uq5HqYXDGOAkkcHp77mTvilkZ5d9Q2rpDl_8WOAn-k2Y5V9CBXA9Hn2pQTPVn67DMY2sybqayiZvf5flizO3fgV6Cw9N2-R52IBOSmAosKxVeFWSaITqzx-S70fbalfXf6j_MGyOC9eAxeZ7JGLaNEYTuDszAbHweW2Joh-qvwh3aS1didawvBHLOP-V2AJ9n6wIzxxqj8vOzYkgNldKNUmJt1QcCV7gcheIGQeY618UdBWcgJbQ4H-Y9TkqHO2sUSV-RHzJCsRWDjhnFAPFm7pN506i_DH--SzmnConwZt5nHCFtvPxN2SulUo9 HTTP/1.1 Host: get4.protectonow.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=fda95280-d38e-11ef-bc27-c22fbff8fb28; utm_source_cross=adx_ext_download_prot_smrtsp___5e460bab
2025-01-15 22:20:57 UTC	1247	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:57 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid=fda95280-d38e-11ef-bc27-c22fbff8fb28; Domain=.protectonow.com; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: mid=f28d8534-d38e-11ef-93a7-aab196f2f20d; Domain=.protectonow.com; Max-Age=7200; Path=/ Set-Cookie: utm_source=adx_ext_download_prot_smrtsp___5e460bab; Domain=.protectonow.com; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/
2025-01-15 22:20:57 UTC	947	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 75 74 6d 5f 73 6f 75 72 63 65 5f 63 72 6f 73 73 3d 61 64 78 5f 65 78 74 5f 64 6f 77 6e 6c 6f 61 64 5f 70 72 6f 74 5f 73 6d 72 74 73 70 5f 5f 5f 35 65 34 36 30 62 61 62 3b 20 44 6f 6d 61 69 6e 3d 2e 70 72 6f 74 65 63 74 6f 6e 6f 77 2e 63 6f 6d 3b 20 65 78 70 69 72 65 73 3d 54 75 65 2c 20 31 39 20 4a 61 6e 20 32 30 33 38 20 30 33 3a 31 34 3a 30 37 20 47 4d 54 3b 20 50 61 74 68 3d 2f 3b 20 53 61 6d 65 53 69 74 65 3d 6e 6f 6e 65 3b 20 53 65 63 75 72 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 70 32 30 38 38 34 37 38 31 32 30 3d 31 34 34 37 34 38 33 30 34 3b 20 44 6f 6d 61 69 6e 3d 2e 70 72 6f 74 65 63 74 6f 6e 6f 77 2e 63 6f 6d 3b 20 65 78 70 69 72 65 73 3d 54 75 65 2c 20 31 39 20 4a 61 6e 20 32 30 33 38 20 30 33 3a 31 34 Data Ascii: Set-Cookie: utm_source_cross=adx_ext_download_prot_smrtsp___5e460bab; Domain=.protectonow.com; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/; SameSite=none; SecureSet-Cookie: p2088478120=144748304; Domain=.protectonow.com; expires=Tue, 19 Jan 2038 03:14
2025-01-15 22:20:57 UTC	1369	IN	Data Raw: 35 62 66 64 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 6d 6f 64 75 6c 65 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 70 72 6f 74 65 63 74 6f 6e 6f 77 2e 63 6f 6d 2f 6e 67 2d 61 73 73 65 74 73 2f 6c 70 2f 61 73 73 65 74 73 2f 70 6f 6c 79 66 69 6c 6c 73 2d 61 33 66 34 35 32 63 33 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 6d 65 74 Data Ascii: 5bfd<!doctype html><html lang="en"><head><script type="module" crossorigin src="https://cdn.protectonow.com/ng-assets/lp/assets/polyfills-a3f452c3.js"></script><meta charset="UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><met
2025-01-15 22:20:57 UTC	1369	IN	Data Raw: 79 6e 63 5c 2f 24 7b 4d 61 74 68 2e 66 6c 6f 6f 72 28 31 65 38 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 7d 2e 6a 73 3f 69 64 3d 24 7b 72 7d 60 2c 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 5c 22 73 63 72 69 70 74 5c 22 29 3b 61 2e 74 79 70 65 3d 5c 22 74 65 78 74 5c 2f 6a 61 76 61 73 63 72 69 70 74 5c 22 2c 61 2e 73 72 63 3d 65 2c 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 7d 6c 6f 61 64 55 73 65 72 53 79 6e 63 28 29 3b 22 7d 2c 22 63 75 73 74 6f 6d 53 74 65 70 54 65 6d 70 6c 61 74 65 73 22 3a 7b 22 63 75 73 74 6f 6d 5f 66 6f 6f 74 65 72 22 3a 7b 22 63 6f 6e 66 69 67 22 3a 7b 22 70 6c 61 63 65 6d 65 6e 74 22 3a 7b 22 68 65 69 67 68 74 22 3a 22 33 35 70 78 22 2c 22 76 65 72 74 Data Ascii: ync\/${Math.floor(1e8*Math.random())}.js?id=${r}`,a=document.createElement(\"script\");a.type=\"text\/javascript\",a.src=e,document.head.appendChild(a)}}loadUserSync();"},"customStepTemplates":{"custom_footer":{"config":{"placement":{"height":"35px","vert
2025-01-15 22:20:57 UTC	1369	IN	Data Raw: 5c 2f 63 64 6e 2e 70 72 6f 74 65 63 74 6f 6e 6f 77 2e 63 6f 6d 5c 2f 62 74 6e 5f 77 69 6e 5f 31 37 33 35 32 30 34 30 37 36 2e 73 76 67 2b 78 6d 6c 22 2c 22 72 65 73 70 6f 6e 73 69 76 65 53 74 79 6c 65 22 3a 7b 22 6d 61 63 22 3a 7b 22 63 6f 6e 74 65 6e 74 22 3a 22 75 72 6c 28 27 68 74 74 70 73 3a 5c 2f 5c 2f 63 64 6e 2e 70 72 6f 74 65 63 74 6f 6e 6f 77 2e 63 6f 6d 5c 2f 62 74 6e 5f 6d 61 63 5f 31 37 33 35 32 30 34 30 37 35 2e 73 76 67 2b 78 6d 6c 27 29 22 7d 7d 2c 22 73 74 79 6c 65 22 3a 7b 22 63 75 72 73 6f 72 22 3a 22 70 6f 69 6e 74 65 72 22 2c 22 77 69 64 74 68 22 3a 22 33 35 30 70 78 22 7d 7d 2c 22 73 68 6f 77 50 61 72 61 6d 73 22 3a 7b 22 68 69 64 64 65 6e 22 3a 74 72 75 65 7d 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 7d 2c 22 61 64 64 5f 65 78 74 Data Ascii: \/cdn.protectonow.com\/btn_win_1735204076.svg+xml","responsiveStyle":{"mac":{"content":"url('https:\/\/cdn.protectonow.com\/btn_mac_1735204075.svg+xml')"}},"style":{"cursor":"pointer","width":"350px"}},"showParams":{"hidden":true},"type":"image"},"add_ext
2025-01-15 22:20:57 UTC	1369	IN	Data Raw: 61 6d 73 22 3a 7b 22 68 69 64 64 65 6e 22 3a 74 72 75 65 7d 2c 22 74 79 70 65 22 3a 22 62 75 74 74 6f 6e 22 7d 2c 22 61 6c 72 65 61 64 79 5f 69 6e 73 74 61 6c 6c 65 64 5f 62 74 6e 22 3a 7b 22 62 75 74 74 6f 6e 50 61 72 61 6d 73 22 3a 7b 22 61 63 74 69 6f 6e 73 22 3a 7b 22 63 6c 69 63 6b 22 3a 5b 5d 7d 2c 22 70 73 65 75 64 6f 53 74 79 6c 65 22 3a 7b 22 68 6f 76 65 72 22 3a 7b 22 63 75 72 73 6f 72 22 3a 22 64 65 66 61 75 6c 74 22 7d 7d 2c 22 73 74 79 6c 65 22 3a 5b 22 74 65 78 74 22 2c 22 63 74 61 22 2c 7b 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 22 23 63 63 63 22 2c 22 62 6f 72 64 65 72 52 61 64 69 75 73 22 3a 22 32 70 78 22 2c 22 63 6f 6c 6f 72 22 3a 22 23 36 36 36 22 2c 22 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 22 3a 22 34 30 70 78 22 2c 22 6d 61 72 67 69 6e Data Ascii: ams":{"hidden":true},"type":"button"},"already_installed_btn":{"buttonParams":{"actions":{"click":[]},"pseudoStyle":{"hover":{"cursor":"default"}},"style":["text","cta",{"background":"#ccc","borderRadius":"2px","color":"#666","marginBottom":"40px","margin
2025-01-15 22:20:57 UTC	1369	IN	Data Raw: 6e 65 72 22 7d 2c 22 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 22 3a 7b 22 63 6f 6e 74 61 69 6e 65 72 50 61 72 61 6d 73 22 3a 7b 22 65 6c 65 6d 65 6e 74 73 22 3a 7b 22 63 68 65 63 6b 5f 69 63 6f 6e 22 3a 7b 22 69 6d 61 67 65 50 61 72 61 6d 73 22 3a 7b 22 69 6d 61 67 65 55 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 63 64 6e 2e 70 72 6f 74 65 63 74 6f 6e 6f 77 2e 63 6f 6d 5c 2f 65 78 74 5c 2f 63 68 65 63 6b 6d 61 72 6b 2d 63 68 72 6f 6d 65 5f 31 36 39 38 30 35 39 30 37 31 2e 73 76 67 2b 78 6d 6c 22 7d 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 22 7d 2c 22 63 68 72 6f 6d 65 5f 69 63 6f 6e 5f 63 6f 6e 74 61 69 6e 65 72 22 3a 7b 22 63 6f 6e 74 61 69 6e 65 72 50 61 72 61 6d 73 22 3a 7b 22 65 6c 65 6d 65 6e 74 73 22 3a 7b 22 63 68 72 6f 6d 65 5f 69 63 6f 6e 22 3a Data Ascii: ner"},"compatibility":{"containerParams":{"elements":{"check_icon":{"imageParams":{"imageUrl":"https:\/\/cdn.protectonow.com\/ext\/checkmark-chrome_1698059071.svg+xml"},"type":"image"},"chrome_icon_container":{"containerParams":{"elements":{"chrome_icon":
2025-01-15 22:20:57 UTC	1369	IN	Data Raw: 63 6f 6c 75 6d 6e 73 22 3a 5b 7b 22 61 6c 69 67 6e 6d 65 6e 74 22 3a 7b 22 73 65 6c 66 22 3a 7b 22 76 65 72 74 69 63 61 6c 22 3a 22 74 6f 70 22 7d 7d 2c 22 72 6f 77 73 22 3a 22 63 68 65 63 6b 5f 69 63 6f 6e 22 2c 22 77 69 64 74 68 22 3a 22 33 30 70 78 22 7d 2c 7b 22 61 6c 69 67 6e 6d 65 6e 74 22 3a 7b 22 73 65 6c 66 22 3a 7b 22 76 65 72 74 69 63 61 6c 22 3a 22 63 65 6e 74 65 72 22 7d 7d 2c 22 72 6f 77 73 22 3a 22 74 65 78 74 22 7d 2c 7b 22 61 6c 69 67 6e 6d 65 6e 74 22 3a 7b 22 73 65 6c 66 22 3a 7b 22 76 65 72 74 69 63 61 6c 22 3a 22 63 65 6e 74 65 72 22 7d 7d 2c 22 72 6f 77 73 22 3a 22 63 68 72 6f 6d 65 5f 69 63 6f 6e 5f 63 6f 6e 74 61 69 6e 65 72 22 2c 22 77 69 64 74 68 22 3a 22 32 35 70 78 22 7d 5d 2c 22 67 61 70 22 3a 22 31 30 70 78 22 2c 22 68 65 69 Data Ascii: columns":[{"alignment":{"self":{"vertical":"top"}},"rows":"check_icon","width":"30px"},{"alignment":{"self":{"vertical":"center"}},"rows":"text"},{"alignment":{"self":{"vertical":"center"}},"rows":"chrome_icon_container","width":"25px"}],"gap":"10px","hei

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	50012	142.250.184.228	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:57 UTC	724	OUT	GET /recaptcha/enterprise.js?render=6LfkWDYqAAAAAJvAuJELqQLg85Lg8zAp-k7w8siS&badge=inline&onload=onRecaptchaLoaded HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://get4.protectonow.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:57 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Wed, 15 Jan 2025 22:20:57 GMT Date: Wed, 15 Jan 2025 22:20:57 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 22:20:57 UTC	641	IN	Data Raw: 36 62 63 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 45 3d 27 65 6e 74 65 72 70 72 69 73 65 27 2c 61 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 2c 67 72 3d 61 5b 45 5d 3d 61 5b 45 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f Data Ascii: 6bc/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['_
2025-01-15 22:20:57 UTC	1090	IN	Data Raw: 61 5f 63 6c 69 65 6e 74 27 5d 3d 74 72 75 65 3b 76 61 72 20 64 3d 64 6f 63 75 6d 65 6e 74 2c 70 6f 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 70 6f 2e 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3b 70 6f 2e 61 73 79 6e 63 3d 74 72 75 65 3b 20 70 6f 2e 63 68 61 72 73 65 74 3d 27 75 74 66 2d 38 27 3b 76 61 72 20 76 3d 77 2e 6e 61 76 69 67 61 74 6f 72 2c 6d 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 6d 65 74 61 27 29 3b 6d 2e 68 74 74 70 45 71 75 69 76 3d 27 6f 72 69 67 69 6e 2d 74 72 69 61 6c 27 3b 6d 2e 63 6f 6e 74 65 6e 74 3d 27 41 2f 6b 61 72 67 54 46 79 6b 38 4d 52 35 75 65 72 61 76 63 7a 65 66 2f 77 49 6c 54 6b 62 56 6b 31 71 58 51 65 73 70 33 39 6e 56 2b 78 4e 45 43 50 64 4c 42 56 Data Ascii: a_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBV
2025-01-15 22:20:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	50014	13.32.121.16	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:57 UTC	566	OUT	GET /sxp/i/7d278047aab7cca6e1b3bb44e5382d20.js HTTP/1.1 Host: euob.7roundprince.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://get4.protectonow.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:57 UTC	508	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close ETag: "1a05d-FQrP4GmQFjUwlBOE8qTO9zPgYDA" Server: Caddy Cache-Control: max-age=43200 Date: Wed, 15 Jan 2025 15:57:18 GMT Expires: Thu, 16 Jan 2025 03:57:18 GMT Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 a300dbfb49a2eb50edb83038642c9f82.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P1 X-Amz-Cf-Id: Qx5E5a0WaB1-eJAc8aqWhzFEnA_uBTTnYVT30ESVBflyWSMErc3f2w== Age: 23019
2025-01-15 22:20:57 UTC	16384	IN	Data Raw: 33 66 66 61 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 69 66 28 6e 5b 65 5d 29 72 65 74 75 72 6e 20 6e 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 69 3d 6e 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 65 5d 2e 63 61 6c 6c 28 69 2e 65 78 70 6f 72 74 73 2c 69 2c 69 2e 65 78 70 6f 72 74 73 2c 72 29 2c 69 2e 6c 3d 21 30 2c 69 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 74 2c 72 2e 63 3d 6e 2c 72 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 72 2e 6f 28 74 2c 6e 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 6e 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 65 7d 29 7d 2c 72 Data Ascii: 3ffa!function(t){var n={};function r(e){if(n[e])return n[e].exports;var i=n[e]={i:e,l:!1,exports:{}};return t[e].call(i.exports,i,i.exports,r),i.l=!0,i.exports}r.m=t,r.c=n,r.d=function(t,n,e){r.o(t,n)\|\|Object.defineProperty(t,n,{enumerable:!0,get:e})},r
2025-01-15 22:20:57 UTC	16384	IN	Data Raw: 0d 0a 36 66 66 66 0d 0a 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 41 2e 51 74 28 22 5f 75 65 74 76 69 64 22 29 7c 7c 22 2d 22 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 22 2d 22 7d 2c 4b 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 74 3d 61 2e 63 6f 6f 6b 69 65 2e 6d 61 74 63 68 28 2f 5f 67 61 63 5f 55 41 5c 2d 5c 64 2b 5c 2d 5c 64 2b 5c 3d 28 2e 2a 3f 29 5c 3b 2f 29 5b 31 5d 3b 69 66 28 33 3d 3d 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 6e 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 5b 31 5d 3b 69 66 28 79 2e 47 28 6e 29 29 72 65 74 75 72 6e 20 79 2e 56 28 28 41 2e 48 74 28 29 2d 31 65 33 2a 79 2e 56 28 6e 29 29 2f 31 65 33 29 7d 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e Data Ascii: 6fffnction(){try{return A.Qt("_uetvid")\|\|"-"}catch(t){}return"-"},Kn:function(){try{var t=a.cookie.match(/_gac_UA\-\d+\-\d+\=(.?)\;/)[1];if(3===t.split(".").length){var n=t.split(".")[1];if(y.G(n))return y.V((A.Ht()-1e3y.V(n))/1e3)}}catch(t){}return
2025-01-15 22:20:58 UTC	12297	IN	Data Raw: 72 29 2c 66 62 63 3a 79 2e 47 6e 28 29 2c 67 74 6d 3a 67 3f 70 2e 74 74 28 75 6e 65 73 63 61 70 65 28 77 28 70 2e 52 28 67 29 29 29 29 3a 22 2d 22 2c 69 74 3a 79 2e 57 6e 28 6b 2e 69 64 2c 6b 2e 68 61 73 68 29 2c 66 62 63 6c 3a 79 2e 48 6e 28 29 2c 67 61 63 6c 3a 79 2e 51 6e 28 29 2c 67 61 63 73 64 3a 79 2e 4b 6e 28 29 2c 72 74 69 63 3a 6f 2e 67 65 28 29 2c 62 67 63 3a 79 2e 24 6e 28 29 2c 73 70 61 3a 76 2e 67 65 74 53 70 61 50 61 67 65 28 29 2c 75 72 69 64 3a 2b 21 21 4e 2e 75 72 69 64 2c 61 62 3a 41 2c 73 63 6b 3a 62 2c 69 6f 3a 70 2e 74 74 28 70 2e 58 28 79 2e 6e 72 28 6b 2e 47 72 2c 21 31 2c 21 30 29 2c 31 31 29 29 7d 29 2b 79 2e 63 72 28 29 2c 46 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 6d 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 Data Ascii: r),fbc:y.Gn(),gtm:g?p.tt(unescape(w(p.R(g)))):"-",it:y.Wn(k.id,k.hash),fbcl:y.Hn(),gacl:y.Qn(),gacsd:y.Kn(),rtic:o.ge(),bgc:y.$n(),spa:v.getSpaPage(),urid:+!!N.urid,ab:A,sck:b,io:p.tt(p.X(y.nr(k.Gr,!1,!0),11))})+y.cr(),F=function(t){var n=m.document.creat
2025-01-15 22:20:58 UTC	16384	IN	Data Raw: 34 35 65 61 0d 0a 46 72 6f 6d 50 6f 69 6e 74 28 30 2c 30 29 7d 3b 43 6e 2e 77 65 3d 21 30 3b 76 61 72 20 53 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 22 5f 63 71 5f 63 68 65 63 6b 22 3b 74 72 79 7b 72 65 74 75 72 6e 20 75 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 74 2c 74 29 2c 75 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 74 29 2c 21 31 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 30 7d 7d 2c 49 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 75 2e 48 54 4d 4c 44 6f 63 75 6d 65 6e 74 7c 7c 75 2e 44 6f 63 75 6d 65 6e 74 2c 6e 3d 63 2e 6c 74 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 63 6f 6f 6b 69 65 22 29 2e 67 65 74 2c 72 3d 21 31 3b 72 65 74 75 72 6e 20 6e 26 26 70 74 Data Ascii: 45eaFromPoint(0,0)};Cn.we=!0;var Sn=function(){var t="_cq_check";try{return u.localStorage.setItem(t,t),u.localStorage.removeItem(t),!1}catch(t){return!0}},In=function(){var t=u.HTMLDocument\|\|u.Document,n=c.lt(t.prototype,"cookie").get,r=!1;return n&&pt
2025-01-15 22:20:58 UTC	1522	IN	Data Raw: 2e 48 74 28 29 2d 74 2e 74 69 6d 65 4f 72 69 67 69 6e 29 2c 74 2e 6e 6f 77 26 26 70 61 72 73 65 49 6e 74 28 74 2e 6e 6f 77 28 29 29 5d 2b 22 22 7d 7d 2c 47 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 74 2c 6e 3d 6c 3b 72 65 74 75 72 6e 20 74 3d 22 78 72 22 69 6e 20 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 7c 7c 21 31 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 5b 6e 2e 70 72 6f 64 75 63 74 53 75 62 2c 6e 2e 6d 69 6d 65 54 79 70 65 73 26 26 6e 2e 6d 69 6d 65 54 79 70 65 73 2e 6c 65 6e 67 74 68 2c 6e 2e 70 72 6f 64 75 63 74 2c 6e 2e 61 70 70 4e 61 6d 65 2c 6e 2e 61 70 70 43 6f 64 65 4e 61 6d 65 2c 6e 2e 62 75 69 6c 64 49 44 2c 6e 2e 63 70 75 43 6c 61 73 73 2c 74 2c 6e 2e 64 65 76 69 63 65 4d 65 6d 6f 72 79 2c 21 21 6e 2e 6d 6f Data Ascii: .Ht()-t.timeOrigin),t.now&&parseInt(t.now())]+""}},Gr=function(){try{var t,n=l;return t="xr"in window.navigator\|\|!1,JSON.stringify([n.productSub,n.mimeTypes&&n.mimeTypes.length,n.product,n.appName,n.appCodeName,n.buildID,n.cpuClass,t,n.deviceMemory,!!n.mo
2025-01-15 22:20:58 UTC	16384	IN	Data Raw: 61 61 37 61 0d 0a 61 4b 65 79 53 74 61 74 75 73 4d 61 70 22 2c 75 29 2c 6e 28 22 44 4f 4d 4d 61 74 72 69 78 22 29 2c 6e 28 22 42 79 74 65 4c 65 6e 67 74 68 51 75 65 75 69 6e 67 53 74 72 61 74 65 67 79 22 29 2c 6e 28 22 53 6d 61 72 74 43 61 72 64 45 76 65 6e 74 22 29 2c 6e 28 22 4e 65 74 77 6f 72 6b 49 6e 66 6f 72 6d 61 74 69 6f 6e 22 29 2c 6e 28 22 73 70 65 65 63 68 53 79 6e 74 68 65 73 69 73 22 29 2c 74 28 22 46 62 51 75 6f 74 65 53 68 61 72 65 4a 53 49 6e 74 65 72 66 61 63 65 22 2c 75 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 68 72 65 66 54 72 61 6e 73 6c 61 74 65 22 69 6e 20 48 54 4d 4c 41 6e 63 68 6f 72 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 7d 2c 6e 28 22 45 79 65 44 72 6f 70 70 65 72 22 29 2c 6e 28 22 42 61 72 63 6f 64 Data Ascii: aa7aaKeyStatusMap",u),n("DOMMatrix"),n("ByteLengthQueuingStrategy"),n("SmartCardEvent"),n("NetworkInformation"),n("speechSynthesis"),t("FbQuoteShareJSInterface",u),function(){return"hrefTranslate"in HTMLAnchorElement.prototype},n("EyeDropper"),n("Barcod
2025-01-15 22:20:58 UTC	16384	IN	Data Raw: 21 3d 3d 64 2e 6a 6f 69 6e 28 29 26 26 28 6b 28 29 2c 64 3d 75 2e 77 74 28 74 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 7d 29 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 2c 31 65 33 29 2c 45 28 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 7b 72 69 3a 74 2e 63 6c 69 65 6e 74 58 3f 70 61 72 73 65 49 6e 74 28 74 2e 63 6c 69 65 6e 74 58 29 3a 74 2e 63 6c 69 65 6e 74 58 2c 65 69 3a 74 2e 63 6c 69 65 6e 74 59 3f 70 61 72 73 65 49 6e 74 28 74 2e 63 6c 69 65 6e 74 59 29 3a 74 2e 63 6c 69 65 6e 74 59 2c 69 69 3a 75 2e 6b 28 74 2e 6d 6f 76 65 6d 65 6e 74 58 29 3f 74 2e 6d 6f 76 65 6d 65 6e 74 58 3a 22 22 2c 61 69 3a 75 2e 6b 28 74 2e 6d 6f 76 65 6d 65 6e 74 59 29 3f 74 Data Ascii: !==d.join()&&(k(),d=u.wt(t,function(t){return t}))}catch(t){}},1e3),E(),function(t,n){var r=function(t,n){return{ri:t.clientX?parseInt(t.clientX):t.clientX,ei:t.clientY?parseInt(t.clientY):t.clientY,ii:u.k(t.movementX)?t.movementX:"",ai:u.k(t.movementY)?t
2025-01-15 22:20:58 UTC	10882	IN	Data Raw: 6e 65 22 21 3d 3d 74 68 69 73 2e 53 69 2e 6c 69 6e 6b 54 72 61 63 6b 45 76 65 6e 74 73 26 26 28 6e 2e 6c 69 6e 6b 54 72 61 63 6b 45 76 65 6e 74 73 3d 74 68 69 73 2e 53 69 2e 6c 69 6e 6b 54 72 61 63 6b 45 76 65 6e 74 73 29 2c 6e 5b 74 68 69 73 2e 77 69 5d 3d 74 68 69 73 2e 79 69 2c 6e 5b 74 68 69 73 2e 62 69 5d 3d 74 68 69 73 2e 6d 69 2c 74 68 69 73 2e 53 69 2e 74 6c 28 21 30 2c 22 6f 22 2c 74 68 69 73 2e 4f 69 2c 6e 29 7d 74 68 69 73 2e 44 69 28 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 7d 3b 74 2e 65 78 70 6f 72 74 73 3d 7b 5a 72 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 2c 65 29 7b 76 61 72 20 69 3d 7b 7d 2c 63 3d 76 6f 69 64 20 30 3b 32 3d 3d 3d 72 3f 69 2e 63 71 5f 63 61 74 65 67 6f 72 79 3d 6e 3a 28 69 2e 75 73 65 72 5f 70 72 6f 70 65 72 74 69 65 73 Data Ascii: ne"!==this.Si.linkTrackEvents&&(n.linkTrackEvents=this.Si.linkTrackEvents),n[this.wi]=this.yi,n[this.bi]=this.mi,this.Si.tl(!0,"o",this.Oi,n)}this.Di()}catch(t){}}};t.exports={Zr:function(t,n,r,e){var i={},c=void 0;2===r?i.cq_category=n:(i.user_properties
2025-01-15 22:20:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	50018	172.67.200.191	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:57 UTC	847	OUT	GET /ng-assets/lp/assets/index-526d8edf.css HTTP/1.1 Host: cdn.protectonow.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://get4.protectonow.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=fda95280-d38e-11ef-bc27-c22fbff8fb28; uid_cross=fda95280-d38e-11ef-bc27-c22fbff8fb28; mid=f28d8534-d38e-11ef-93a7-aab196f2f20d; utm_source=adx_ext_download_prot_smrtsp___5e460bab; utm_source_cross=adx_ext_download_prot_smrtsp___5e460bab; p2088478120=144748304
2025-01-15 22:20:57 UTC	1181	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:57 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close X-GUploader-UploadID: AFIdbgQMNQLj0Y-LB8AgLEWpSRDOfrKwGkGtz2MCvA6U_D-xkwaVuqA6zfMFXo-ofOlOgLYZFBwyVY4 x-goog-generation: 1736942486441661 x-goog-metageneration: 2 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 16147 x-goog-hash: crc32c=C4W9qA== x-goog-hash: md5=sKYjCFHrf/H/rCbqRCaavw== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type Expires: Wed, 15 Jan 2025 23:16:18 GMT Cache-Control: public, max-age=3600 Last-Modified: Wed, 15 Jan 2025 12:01:26 GMT ETag: W/"b0a6230851eb7ff1ffac26ea44269abf" Vary: Accept-Encoding Age: 279 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uhruD1N9cGSLhbmPtBvEQmJ4zyaF4BChZkjV6ua8t84i1xLvYluF5RtBHlOlKdf4Wk3eLPcYg9lP3FmOtUVwZqnrp7uptJt8cSq6gGh0fOyJGoe%2BdvLnl7AidCle3PlEnImaV8jo"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9029418dcb2cab30-YYZ alt-svc: h3=":443"; ma=86400
2025-01-15 22:20:57 UTC	217	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 33 36 34 30 26 6d 69 6e 5f 72 74 74 3d 31 33 36 33 39 26 72 74 74 5f 76 61 72 3d 35 31 31 36 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 33 34 38 26 72 65 63 76 5f 62 79 74 65 73 3d 31 34 32 35 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 32 31 34 30 39 31 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 64 31 32 63 63 65 32 35 33 66 66 37 30 31 63 38 26 74 73 3d 31 38 35 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=13640&min_rtt=13639&rtt_var=5116&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2348&recv_bytes=1425&delivery_rate=214091&cwnd=32&unsent_bytes=0&cid=d12cce253ff701c8&ts=185&x=0"
2025-01-15 22:20:57 UTC	1340	IN	Data Raw: 33 66 31 33 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 23 6c 70 5f 6c 6f 61 64 65 72 5f 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 77 69 64 74 68 3a 31 30 30 76 77 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 77 68 69 74 65 7d 23 6c 70 5f 6c 6f 61 64 65 72 5f 77 72 61 70 70 65 72 20 23 6c 70 5f 6c 6f 61 64 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 63 6f 6c 75 6d 6e 2d 67 61 70 3a 31 30 70 78 7d 23 6c 70 5f 6c 6f 61 64 65 72 5f 77 72 61 70 70 65 72 20 23 6c 70 5f 6c 6f 61 Data Ascii: 3f13@charset "UTF-8";#lp_loader_wrapper{display:flex;height:100vh;width:100vw;align-items:center;justify-content:center;position:absolute;top:0;left:0;background:white}#lp_loader_wrapper #lp_loader{display:flex;column-gap:10px}#lp_loader_wrapper #lp_loa
2025-01-15 22:20:57 UTC	1369	IN	Data Raw: 3a 32 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 36 66 36 66 36 66 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 65 66 65 65 65 65 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 75 74 6f 7d 2e 5f 63 6c 6f 73 65 53 74 79 6c 65 5f 35 62 34 77 62 5f 31 36 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef bc 8b 22 3b 68 65 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 Data Ascii: :20px;background:#6f6f6f;user-select:none;display:flex;justify-content:center;align-items:center;color:#efeeee;font-family:auto}._closeStyle_5b4wb_16:before{content:"";height:20px;width:20px;font-size:16px;display:flex;align-items:flex-end;justify-cont
2025-01-15 22:20:57 UTC	1369	IN	Data Raw: 67 68 74 5f 37 35 33 30 66 5f 39 7b 72 69 67 68 74 3a 30 7d 2e 5f 6c 65 66 74 5f 37 35 33 30 66 5f 31 33 7b 6c 65 66 74 3a 30 7d 2e 5f 63 6f 75 6e 74 64 6f 77 6e 57 72 61 70 70 65 72 5f 67 31 64 65 37 5f 31 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 32 33 33 2c 32 32 38 2c 32 32 38 2c 2e 36 39 34 31 31 37 36 34 37 31 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 35 34 70 78 3b 68 65 69 67 68 74 3a 33 32 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 6f 78 2d 73 68 61 64 Data Ascii: ght_7530f_9{right:0}._left_7530f_13{left:0}._countdownWrapper_g1de7_1{background-color:#fff;border:1px solid rgba(233,228,228,.6941176471);border-radius:20px;position:absolute;width:154px;height:32px;font-size:12px;display:flex;align-items:center;box-shad
2025-01-15 22:20:57 UTC	1369	IN	Data Raw: 2d 35 30 25 2c 2d 35 30 25 29 3b 77 69 64 74 68 3a 36 30 70 78 3b 68 65 69 67 68 74 3a 36 30 70 78 7d 2e 5f 64 61 72 6b 4f 76 65 72 6c 61 79 5f 31 75 39 38 62 5f 31 31 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 62 6c 61 63 6b 3b 6f 70 61 63 69 74 79 3a 2e 36 7d 2e 5f 62 61 73 65 4f 76 65 72 6c 61 79 5f 31 75 39 38 62 5f 31 36 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 5f 74 6f 67 67 6c 65 72 5f 31 34 63 64 78 5f 31 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 70 61 64 64 69 6e 67 3a 38 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 77 69 64 74 68 3a 33 35 70 78 3b 68 65 69 67 68 74 3a 33 35 70 78 7d 2e 5f 62 6f 74 74 6f 6d 5f 6c 65 66 74 5f 31 34 63 Data Ascii: -50%,-50%);width:60px;height:60px}._darkOverlay_1u98b_11{background:black;opacity:.6}._baseOverlay_1u98b_16{height:100%;width:100%;position:absolute}._toggler_14cdx_1{position:absolute;padding:8px;border-radius:50%;width:35px;height:35px}._bottom_left_14c
2025-01-15 22:20:57 UTC	1369	IN	Data Raw: 3a 72 65 71 75 69 72 65 64 3a 69 6e 76 61 6c 69 64 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 39 34 62 34 62 7d 69 6e 70 75 74 2e 5f 65 6d 70 74 79 5f 6d 76 39 35 36 5f 33 30 3a 72 65 71 75 69 72 65 64 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 30 7d 2e 5f 62 75 74 74 6f 6e 5f 31 6e 6d 78 68 5f 31 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 33 33 2c 32 39 2c 32 38 2c 30 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 36 70 78 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 28 33 33 2c 32 39 2c 32 38 29 3b 63 6f 6c 6f 72 3a 23 30 38 30 38 30 38 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 3b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 32 2e 33 76 77 20 2b 20 31 2e 31 76 68 29 3b 66 6f 6e 74 2d 77 65 69 67 68 Data Ascii: :required:invalid{border-color:#e94b4b}input._empty_mv956_30:required{border-color:#000}._button_1nmxh_1{background:rgba(33,29,28,0);border-radius:6px;border:1px solid rgb(33,29,28);color:#080808;font-family:Roboto;font-size:calc(2.3vw + 1.1vh);font-weigh
2025-01-15 22:20:57 UTC	1369	IN	Data Raw: 31 77 6a 6a 5f 31 33 20 2e 34 73 20 65 61 73 65 20 66 6f 72 77 61 72 64 73 7d 40 6b 65 79 66 72 61 6d 65 73 20 5f 73 6c 69 64 65 55 70 46 61 64 65 64 5f 6c 31 77 6a 6a 5f 31 33 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 31 30 76 68 29 3b 6f 70 61 63 69 74 79 3a 30 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 2e 5f 72 65 76 65 72 73 65 53 6c 69 64 65 55 70 5f 6c 31 77 6a 6a 5f 32 37 7b 61 6e 69 6d 61 74 69 6f 6e 3a 5f 72 65 76 65 72 73 65 53 6c 69 64 65 55 70 5f 6c 31 77 6a 6a 5f 32 37 20 2e 34 73 20 65 61 73 65 20 66 6f 72 77 61 72 64 73 7d 40 6b 65 79 66 72 61 6d 65 73 20 5f 72 65 76 65 72 73 65 53 6c 69 64 65 55 70 5f 6c 31 77 6a 6a 5f 32 37 7b 30 25 Data Ascii: 1wjj_13 .4s ease forwards}@keyframes _slideUpFaded_l1wjj_13{0%{transform:translateY(10vh);opacity:0}to{transform:translateY(0);opacity:1}}._reverseSlideUp_l1wjj_27{animation:_reverseSlideUp_l1wjj_27 .4s ease forwards}@keyframes _reverseSlideUp_l1wjj_27{0%
2025-01-15 22:20:57 UTC	1369	IN	Data Raw: 31 77 6a 6a 5f 31 20 2e 34 73 20 65 61 73 65 20 66 6f 72 77 61 72 64 73 7d 40 6b 65 79 66 72 61 6d 65 73 20 5f 66 65 61 64 49 6e 5f 6c 31 77 6a 6a 5f 31 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 2e 5f 72 65 76 65 72 73 65 46 61 64 65 49 6e 5f 6c 31 77 6a 6a 5f 31 32 34 7b 61 6e 69 6d 61 74 69 6f 6e 3a 5f 72 65 76 65 72 73 65 46 61 64 65 49 6e 5f 6c 31 77 6a 6a 5f 31 32 34 20 2e 34 73 20 65 61 73 65 20 66 6f 72 77 61 72 64 73 7d 40 6b 65 79 66 72 61 6d 65 73 20 5f 72 65 76 65 72 73 65 46 61 64 65 49 6e 5f 6c 31 77 6a 6a 5f 31 32 34 7b 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 30 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 7d 2e 5f 75 6e 66 6f 6c 64 Data Ascii: 1wjj_1 .4s ease forwards}@keyframes _feadIn_l1wjj_1{0%{opacity:0;display:none}to{opacity:1}}._reverseFadeIn_l1wjj_124{animation:_reverseFadeIn_l1wjj_124 .4s ease forwards}@keyframes _reverseFadeIn_l1wjj_124{0%{opacity:1}to{opacity:0;display:none}}._unfold
2025-01-15 22:20:57 UTC	1369	IN	Data Raw: 6c 65 28 30 25 29 7d 74 6f 7b 2d 2d 77 65 62 6b 69 74 2d 63 6c 69 70 2d 70 61 74 68 3a 20 63 69 72 63 6c 65 28 31 30 30 25 29 3b 63 6c 69 70 2d 70 61 74 68 3a 63 69 72 63 6c 65 28 31 30 30 25 29 7d 7d 2e 5f 63 6f 6e 74 61 69 6e 65 72 5f 6c 31 77 6a 6a 5f 32 30 35 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 76 77 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 5f 63 6f 6e 74 61 69 6e 65 72 5f 6c 31 77 6a 6a 5f 32 30 35 20 69 6d 67 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 5f 66 75 6c 6c 53 63 72 65 65 6e 48 65 69 67 68 74 5f 6c 31 77 6a 6a 5f 32 31 35 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 5f 73 74 65 70 5f 6c 31 77 6a 6a 5f 32 31 39 7b 70 6f 73 69 74 69 6f Data Ascii: le(0%)}to{--webkit-clip-path: circle(100%);clip-path:circle(100%)}}._container_l1wjj_205{max-width:100vw;width:100%;height:100%;position:relative}._container_l1wjj_205 img{display:block}._fullScreenHeight_l1wjj_215{max-height:100%}._step_l1wjj_219{positio
2025-01-15 22:20:57 UTC	1369	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 77 69 64 74 68 3a 34 30 70 78 3b 7a 2d 69 6e 64 65 78 3a 32 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 5f 68 6f 72 69 7a 6f 6e 74 61 6c 41 72 72 6f 77 5f 72 39 67 71 64 5f 31 31 7b 74 6f 70 3a 63 61 6c 63 28 35 30 25 20 2d 20 31 34 70 78 29 7d 2e 5f 76 65 72 74 69 63 61 6c 41 72 72 6f 77 5f 72 39 67 71 64 5f 31 35 7b 6c 65 66 74 3a 63 61 6c 63 28 35 30 25 20 2d 20 31 34 70 78 29 7d 2e 5f 6c 65 66 74 41 72 72 6f 77 5f 72 39 67 71 64 5f 31 39 7b 6c 65 66 74 3a 30 7d 2e 5f 72 69 67 68 74 41 72 72 6f 77 5f 72 39 67 71 64 5f 32 33 7b 72 69 67 68 74 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 2d 31 29 7d 2e 5f Data Ascii: ackground-color:transparent;font-size:24px;width:40px;z-index:2;cursor:pointer}._horizontalArrow_r9gqd_11{top:calc(50% - 14px)}._verticalArrow_r9gqd_15{left:calc(50% - 14px)}._leftArrow_r9gqd_19{left:0}._rightArrow_r9gqd_23{right:0;transform:scaleX(-1)}._

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	50019	172.67.200.191	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:57 UTC	598	OUT	GET /ng-assets/lp/assets/polyfills-a3f452c3.js HTTP/1.1 Host: cdn.protectonow.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://get4.protectonow.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://get4.protectonow.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:57 UTC	1303	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:57 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close X-GUploader-UploadID: AFIdbgTrAfSo_tN3k9fXkN842RvVXYTGGRVYga3-9VvdhMJvlEUBlqrtx-W9ReGqkRvl-Jmt x-goog-generation: 1736971991756126 x-goog-metageneration: 2 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 11824 Content-Language: en x-goog-hash: crc32c=i96MsA== x-goog-hash: md5=ZZoexljHe5yTbIVrm3KlSA== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Wed, 15 Jan 2025 22:42:16 GMT Cache-Control: public, max-age=3600 Last-Modified: Wed, 15 Jan 2025 20:13:11 GMT ETag: W/"659a1ec658c77b9c936c856b9b72a548" Vary: Accept-Encoding Age: 2321 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1txim1aVOaNX%2Fnfpn%2BUC7bR7%2FyjJKif93L%2BlVIFlLQC2oqQCrU32fq0uZt2X%2FV5D142Zp3jgM%2F11xuGzpo79ildyJbOSrfxdp08ZHVxE0lnr3krPQB62H88p9gv%2Fl7AYgEg321eu"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9029418ddca9ac82-YYZ alt-svc: h3=":443"; ma=86400
2025-01-15 22:20:57 UTC	217	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 33 37 34 39 26 6d 69 6e 5f 72 74 74 3d 31 33 37 34 33 26 72 74 74 5f 76 61 72 3d 35 31 35 38 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 33 34 38 26 72 65 63 76 5f 62 79 74 65 73 3d 31 31 37 36 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 32 31 32 34 37 31 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 66 63 39 32 35 39 33 62 31 38 30 34 32 64 36 38 26 74 73 3d 31 38 34 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=13749&min_rtt=13743&rtt_var=5158&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2348&recv_bytes=1176&delivery_rate=212471&cwnd=32&unsent_bytes=0&cid=fc92593b18042d68&ts=184&x=0"
2025-01-15 22:20:57 UTC	1218	IN	Data Raw: 32 65 33 30 0d 0a 65 78 70 6f 72 74 20 66 75 6e 63 74 69 6f 6e 20 5f 5f 76 69 74 65 5f 6c 65 67 61 63 79 5f 67 75 61 72 64 28 29 7b 69 6d 70 6f 72 74 2e 6d 65 74 61 2e 75 72 6c 3b 69 6d 70 6f 72 74 28 22 5f 22 29 2e 63 61 74 63 68 28 28 29 3d 3e 31 29 3b 28 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 7d 29 28 29 2e 6e 65 78 74 28 29 7d 3b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 Data Ascii: 2e30export function __vite_legacy_guard(){import.meta.url;import("_").catch(()=>1);(async function*(){})().next()};var t="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof se
2025-01-15 22:20:57 UTC	1369	IN	Data Raw: 74 73 29 7d 7d 2c 53 3d 4f 2c 6a 3d 53 28 7b 7d 2e 74 6f 53 74 72 69 6e 67 29 2c 50 3d 53 28 22 22 2e 73 6c 69 63 65 29 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 50 28 6a 28 74 29 2c 38 2c 2d 31 29 7d 2c 54 3d 6f 2c 41 3d 45 2c 46 3d 4f 62 6a 65 63 74 2c 78 3d 4f 28 22 22 2e 73 70 6c 69 74 29 2c 4d 3d 54 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 46 28 22 7a 22 29 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 28 30 29 7d 29 29 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 53 74 72 69 6e 67 22 3d 3d 3d 41 28 74 29 3f 78 28 74 2c 22 22 29 3a 46 28 74 29 7d 3a 46 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 7d 2c 49 3d 43 2c 6b 3d 54 79 70 65 45 Data Ascii: ts)}},S=O,j=S({}.toString),P=S("".slice),E=function(t){return P(j(t),8,-1)},T=o,A=E,F=Object,x=O("".split),M=T((function(){return!F("z").propertyIsEnumerable(0)}))?function(t){return"String"===A(t)?x(t,""):F(t)}:F,C=function(t){return null==t},I=C,k=TypeE
2025-01-15 22:20:57 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 61 74 28 74 29 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 22 4f 62 6a 65 63 74 22 7d 7d 2c 73 74 3d 54 79 70 65 45 72 72 6f 72 2c 70 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 66 74 28 74 29 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 6e 65 77 20 73 74 28 6c 74 28 74 29 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 2c 79 74 3d 70 74 2c 62 74 3d 43 2c 76 74 3d 66 2c 67 74 3d 5f 2c 68 74 3d 55 2c 64 74 3d 54 79 70 65 45 72 72 6f 72 2c 6d 74 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 77 74 3d 72 2c 4f 74 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 53 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 74 72 79 7b 4f 74 28 77 74 2c 74 2c 7b 76 61 6c 75 65 3a 6e 2c 63 6f 6e 66 69 Data Ascii: return at(t)}catch(n){return"Object"}},st=TypeError,pt=function(t){if(ft(t))return t;throw new st(lt(t)+" is not a function")},yt=pt,bt=C,vt=f,gt=_,ht=U,dt=TypeError,mt={exports:{}},wt=r,Ot=Object.defineProperty,St=function(t,n){try{Ot(wt,t,{value:n,confi
2025-01-15 22:20:57 UTC	1369	IN	Data Raw: 77 20 6e 65 77 20 64 74 28 22 43 61 6e 27 74 20 63 6f 6e 76 65 72 74 20 6f 62 6a 65 63 74 20 74 6f 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 22 29 7d 2c 6e 6e 3d 54 79 70 65 45 72 72 6f 72 2c 72 6e 3d 59 74 28 22 74 6f 50 72 69 6d 69 74 69 76 65 22 29 2c 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 69 66 28 21 4a 74 28 74 29 7c 7c 51 74 28 74 29 29 72 65 74 75 72 6e 20 74 3b 76 61 72 20 72 2c 65 3d 5a 74 28 74 2c 72 6e 29 3b 69 66 28 65 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 22 64 65 66 61 75 6c 74 22 29 2c 72 3d 48 74 28 65 2c 74 2c 6e 29 2c 21 4a 74 28 72 29 7c 7c 51 74 28 72 29 29 72 65 74 75 72 6e 20 72 3b 74 68 72 6f 77 20 6e 65 77 20 6e 6e 28 22 43 61 6e 27 74 20 63 6f 6e 76 65 72 74 20 6f 62 6a 65 63 74 20 74 6f 20 Data Ascii: w new dt("Can't convert object to primitive value")},nn=TypeError,rn=Yt("toPrimitive"),en=function(t,n){if(!Jt(t)\|\|Qt(t))return t;var r,e=Zt(t,rn);if(e){if(void 0===n&&(n="default"),r=Ht(e,t,n),!Jt(r)\|\|Qt(r))return r;throw new nn("Can't convert object to
2025-01-15 22:20:57 UTC	1369	IN	Data Raw: 6e 5d 3a 65 5b 4c 6e 5d 2c 77 72 69 74 61 62 6c 65 3a 21 31 7d 29 7d 72 65 74 75 72 6e 20 6b 6e 28 74 2c 6e 2c 72 29 7d 3a 6b 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 69 66 28 4d 6e 28 74 29 2c 6e 3d 43 6e 28 6e 29 2c 4d 6e 28 72 29 2c 46 6e 29 74 72 79 7b 72 65 74 75 72 6e 20 6b 6e 28 74 2c 6e 2c 72 29 7d 63 61 74 63 68 28 65 29 7b 7d 69 66 28 22 67 65 74 22 69 6e 20 72 7c 7c 22 73 65 74 22 69 6e 20 72 29 74 68 72 6f 77 20 6e 65 77 20 49 6e 28 22 41 63 63 65 73 73 6f 72 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 29 3b 72 65 74 75 72 6e 22 76 61 6c 75 65 22 69 6e 20 72 26 26 28 74 5b 6e 5d 3d 72 2e 76 61 6c 75 65 29 2c 74 7d 3b 76 61 72 20 52 6e 3d 4f 6e 2c 5f 6e 3d 67 2c 47 6e 3d 69 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 72 Data Ascii: n]:e[Ln],writable:!1})}return kn(t,n,r)}:kn:function(t,n,r){if(Mn(t),n=Cn(n),Mn(r),Fn)try{return kn(t,n,r)}catch(e){}if("get"in r\|\|"set"in r)throw new In("Accessors not supported");return"value"in r&&(t[n]=r.value),t};var Rn=On,_n=g,Gn=i?function(t,n,r){r
2025-01-15 22:20:57 UTC	1369	IN	Data Raw: 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 5a 6e 28 74 29 3f 51 6e 28 74 29 3a 4a 6e 28 74 2c 7b 7d 29 7d 2c 67 65 74 74 65 72 46 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 72 3b 69 66 28 21 66 72 28 6e 29 7c 7c 28 72 3d 51 6e 28 6e 29 29 2e 74 79 70 65 21 3d 3d 74 29 74 68 72 6f 77 20 6e 65 77 20 67 72 28 22 49 6e 63 6f 6d 70 61 74 69 62 6c 65 20 72 65 63 65 69 76 65 72 2c 20 22 2b 74 2b 22 20 72 65 71 75 69 72 65 64 22 29 3b 72 65 74 75 72 6e 20 72 7d 7d 7d 2c 4f 72 3d 4f 2c 53 72 3d 6f 2c 6a 72 3d 5f 2c 50 72 3d 4c 74 2c 45 72 3d 69 2c 54 72 3d 56 6e 2e 43 4f 4e 46 49 47 55 52 41 42 4c 45 2c 41 72 3d 74 72 2c 46 72 3d 77 72 2e 65 6e 66 6f 72 63 65 2c 78 72 3d 77 72 2e 67 65 74 2c 4d Data Ascii: ion(t){return Zn(t)?Qn(t):Jn(t,{})},getterFor:function(t){return function(n){var r;if(!fr(n)\|\|(r=Qn(n)).type!==t)throw new gr("Incompatible receiver, "+t+" required");return r}}},Or=O,Sr=o,jr=_,Pr=Lt,Er=i,Tr=Vn.CONFIGURABLE,Ar=tr,Fr=wr.enforce,xr=wr.get,M
2025-01-15 22:20:57 UTC	1369	IN	Data Raw: 7d 2c 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 5a 72 28 74 2e 6c 65 6e 67 74 68 29 7d 2c 6e 65 3d 44 2c 72 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 3d 58 72 28 74 29 3b 72 65 74 75 72 6e 20 72 3c 30 3f 59 72 28 72 2b 6e 2c 30 29 3a 48 72 28 72 2c 6e 29 7d 2c 65 65 3d 74 65 2c 6f 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 65 29 7b 76 61 72 20 6f 3d 6e 65 28 6e 29 2c 69 3d 65 65 28 6f 29 3b 69 66 28 30 3d 3d 3d 69 29 72 65 74 75 72 6e 21 74 26 26 2d 31 3b 76 61 72 20 75 2c 63 3d 72 65 28 65 2c 69 29 3b 69 66 28 74 26 26 72 21 3d 72 29 7b 66 6f 72 28 3b 69 3e 63 3b 29 69 66 28 28 75 3d 6f 5b 63 2b 2b 5d 29 21 3d 75 29 72 65 74 75 72 6e 21 30 7d 65 6c 73 Data Ascii: },te=function(t){return Zr(t.length)},ne=D,re=function(t,n){var r=Xr(t);return r<0?Yr(r+n,0):Hr(r,n)},ee=te,oe=function(t){return function(n,r,e){var o=ne(n),i=ee(o);if(0===i)return!t&&-1;var u,c=re(e,i);if(t&&r!=r){for(;i>c;)if((u=o[c++])!=u)return!0}els
2025-01-15 22:20:57 UTC	1369	IN	Data Raw: 6e 5d 7d 63 61 74 63 68 28 75 29 7b 7d 6f 3f 74 5b 6e 5d 3d 72 3a 47 72 2e 66 28 74 2c 6e 2c 7b 76 61 6c 75 65 3a 72 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 65 2e 6e 6f 6e 43 6f 6e 66 69 67 75 72 61 62 6c 65 2c 77 72 69 74 61 62 6c 65 3a 21 65 2e 6e 6f 6e 57 72 69 74 61 62 6c 65 7d 29 7d 72 65 74 75 72 6e 20 74 7d 2c 44 65 3d 53 74 2c 52 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 66 6f 72 28 76 61 72 20 65 3d 4f 65 28 6e 29 2c 6f 3d 6a 65 2e 66 2c 69 3d 53 65 2e 66 2c 75 3d 30 3b 75 3c 65 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 7b 76 61 72 20 63 3d 65 5b 75 5d 3b 77 65 28 74 2c 63 29 7c 7c 72 26 26 77 65 28 72 2c 63 29 7c 7c 6f 28 74 2c 63 2c 69 28 6e 2c 63 29 29 7d 7d 2c 5f 65 3d 49 65 2c 47 65 3d 45 Data Ascii: n]}catch(u){}o?t[n]=r:Gr.f(t,n,{value:r,enumerable:!1,configurable:!e.nonConfigurable,writable:!e.nonWritable})}return t},De=St,Re=function(t,n,r){for(var e=Oe(n),o=je.f,i=Se.f,u=0;u<e.length;u++){var c=e[u];we(t,c)\|\|r&&we(r,c)\|\|o(t,c,i(n,c))}},_e=Ie,Ge=E
2025-01-15 22:20:57 UTC	1031	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 6c 6f 28 74 29 29 72 65 74 75 72 6e 21 31 3b 73 77 69 74 63 68 28 73 6f 28 74 29 29 7b 63 61 73 65 22 41 73 79 6e 63 46 75 6e 63 74 69 6f 6e 22 3a 63 61 73 65 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 3a 63 61 73 65 22 41 73 79 6e 63 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 3a 72 65 74 75 72 6e 21 31 7d 74 72 79 7b 72 65 74 75 72 6e 20 68 6f 7c 7c 21 21 67 6f 28 76 6f 2c 70 6f 28 74 29 29 7d 63 61 74 63 68 28 6e 29 7b 72 65 74 75 72 6e 21 30 7d 7d 3b 77 6f 2e 73 68 61 6d 3d 21 30 3b 76 61 72 20 4f 6f 3d 21 62 6f 7c 7c 66 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 6d 6f 28 6d 6f 2e 63 61 6c 6c 29 7c 7c 21 6d 6f 28 4f 62 6a 65 63 74 29 7c 7c 21 Data Ascii: function(t){if(!lo(t))return!1;switch(so(t)){case"AsyncFunction":case"GeneratorFunction":case"AsyncGeneratorFunction":return!1}try{return ho\|\|!!go(vo,po(t))}catch(n){return!0}};wo.sham=!0;var Oo=!bo\|\|fo((function(){var t;return mo(mo.call)\|\|!mo(Object)\|\|!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	50017	172.67.200.191	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:57 UTC	594	OUT	GET /ng-assets/lp/assets/index-81ed22ca.js HTTP/1.1 Host: cdn.protectonow.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://get4.protectonow.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://get4.protectonow.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 22:20:57 UTC	1274	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 22:20:57 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close X-GUploader-UploadID: AFIdbgQyl_MLLE-m4a8JM-4HyCKBC6Sa5zuBpZrQcrfYQexrpKRNbhxr2PV5AA0_HDzLixPI x-goog-generation: 1735129300031372 x-goog-metageneration: 2 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 141707 x-goog-hash: crc32c=S9mL7A== x-goog-hash: md5=ByboDPgFY4pDBfurO9jwPg== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Wed, 15 Jan 2025 22:49:39 GMT Cache-Control: public, max-age=3600 Last-Modified: Wed, 25 Dec 2024 12:21:40 GMT ETag: W/"0726e80cf805638a4305fbab3bd8f03e" Vary: Accept-Encoding Age: 1878 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lx5q2QehtZBWr6SvacBDrnkHepV3vd1yVkPglbLg01S%2FPMl33DTqSLSfYrHvlSKGBtw29d6JnjS1Awlr9Qh9W7NKGDcKct5EohBq1cE6yfR3fRhTCxH%2F6Wu2%2FDki0aVI6f2GFMmy"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9029418dd93339e9-YYZ alt-svc: h3=":443"; ma=86400
2025-01-15 22:20:57 UTC	217	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 31 34 30 38 34 26 6d 69 6e 5f 72 74 74 3d 31 34 30 33 37 26 72 74 74 5f 76 61 72 3d 35 32 39 37 26 73 65 6e 74 3d 35 26 72 65 63 76 3d 36 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 33 34 37 26 72 65 63 76 5f 62 79 74 65 73 3d 31 31 37 32 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 32 30 38 30 32 31 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 32 63 37 30 61 65 64 36 63 32 39 34 37 33 32 64 26 74 73 3d 31 38 39 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=14084&min_rtt=14037&rtt_var=5297&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2347&recv_bytes=1172&delivery_rate=208021&cwnd=32&unsent_bytes=0&cid=2c70aed6c294732d&ts=189&x=0"
2025-01-15 22:20:57 UTC	1247	IN	Data Raw: 37 61 61 36 0d 0a 76 61 72 20 6f 69 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 73 69 3d 28 65 2c 74 2c 6e 29 3d 3e 74 20 69 6e 20 65 3f 6f 69 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 65 5b 74 5d 3d 6e 3b 76 61 72 20 6a 3d 28 65 2c 74 2c 6e 29 3d 3e 28 73 69 28 65 2c 74 79 70 65 6f 66 20 74 21 3d 22 73 79 6d 62 6f 6c 22 3f 74 2b 22 22 3a 74 2c 6e 29 2c 6e 29 3b 66 75 6e 63 74 69 6f 6e 20 4d 68 28 29 7b 69 6d 70 6f 72 74 2e 6d 65 74 61 2e 75 72 6c 2c 69 6d 70 6f 72 74 28 22 5f 22 29 2e 63 61 74 63 68 28 28 29 3d 3e 31 29 2c 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 7d 28 29 2e Data Ascii: 7aa6var oi=Object.defineProperty;var si=(e,t,n)=>t in e?oi(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n;var j=(e,t,n)=>(si(e,typeof t!="symbol"?t+"":t,n),n);function Mh(){import.meta.url,import("_").catch(()=>1),async function*(){}().
2025-01-15 22:20:57 UTC	1369	IN	Data Raw: 61 79 22 2c 65 2e 45 76 65 6e 74 3d 22 65 76 65 6e 74 22 2c 65 2e 43 6c 6f 73 65 3d 22 63 6c 6f 73 65 22 2c 65 2e 50 69 78 65 6c 3d 22 70 69 78 65 6c 22 2c 65 2e 53 75 62 6d 69 74 3d 22 73 75 62 6d 69 74 22 2c 65 2e 4a 75 6d 70 54 6f 3d 22 6a 75 6d 70 54 6f 22 2c 65 2e 53 68 6f 77 3d 22 73 68 6f 77 22 2c 65 2e 48 69 64 65 3d 22 68 69 64 65 22 2c 65 2e 54 6f 67 67 6c 65 56 69 73 69 62 69 6c 69 74 79 3d 22 74 6f 67 67 6c 65 56 69 73 69 62 69 6c 69 74 79 22 2c 65 2e 53 74 61 72 74 50 6f 6c 6c 69 6e 67 3d 22 73 74 61 72 74 50 6f 6c 6c 69 6e 67 22 2c 65 2e 53 74 6f 70 50 6f 6c 6c 69 6e 67 3d 22 73 74 6f 70 50 6f 6c 6c 69 6e 67 22 2c 65 2e 43 75 73 74 6f 6d 4a 53 3d 22 63 75 73 74 6f 6d 4a 53 22 2c 65 2e 41 73 73 65 73 73 3d 22 61 73 73 65 73 73 22 2c 65 2e 57 Data Ascii: ay",e.Event="event",e.Close="close",e.Pixel="pixel",e.Submit="submit",e.JumpTo="jumpTo",e.Show="show",e.Hide="hide",e.ToggleVisibility="toggleVisibility",e.StartPolling="startPolling",e.StopPolling="stopPolling",e.CustomJS="customJS",e.Assess="assess",e.W
2025-01-15 22:20:57 UTC	1369	IN	Data Raw: 7d 29 2c 75 74 3d 28 65 3d 3e 28 65 2e 54 6f 70 4c 65 66 74 3d 22 74 6f 70 5f 6c 65 66 74 22 2c 65 2e 54 6f 70 52 69 67 68 74 3d 22 74 6f 70 5f 72 69 67 68 74 22 2c 65 2e 42 6f 74 74 6f 6d 4c 65 66 74 3d 22 62 6f 74 74 6f 6d 5f 6c 65 66 74 22 2c 65 2e 42 6f 74 74 6f 6d 52 69 67 68 74 3d 22 62 6f 74 74 6f 6d 5f 72 69 67 68 74 22 2c 65 29 29 28 75 74 7c 7c 7b 7d 29 2c 44 6f 3d 28 65 3d 3e 28 65 2e 54 6f 70 3d 22 74 6f 70 22 2c 65 2e 42 6f 74 74 6f 6d 3d 22 62 6f 74 74 6f 6d 22 2c 65 29 29 28 44 6f 7c 7c 7b 7d 29 2c 4d 65 3b 28 65 3d 3e 7b 28 74 3d 3e 7b 74 2e 53 75 63 63 65 73 73 41 63 74 69 6f 6e 73 3d 22 73 75 63 63 65 73 73 41 63 74 69 6f 6e 73 22 2c 74 2e 4d 69 73 73 69 6e 67 41 63 74 69 6f 6e 73 3d 22 6d 69 73 73 69 6e 67 41 63 74 69 6f 6e 73 22 2c 74 Data Ascii: }),ut=(e=>(e.TopLeft="top_left",e.TopRight="top_right",e.BottomLeft="bottom_left",e.BottomRight="bottom_right",e))(ut\|\|{}),Do=(e=>(e.Top="top",e.Bottom="bottom",e))(Do\|\|{}),Me;(e=>{(t=>{t.SuccessActions="successActions",t.MissingActions="missingActions",t
2025-01-15 22:20:57 UTC	1369	IN	Data Raw: 74 2e 56 69 65 77 3d 22 76 69 65 77 22 2c 74 2e 48 69 64 64 65 6e 3d 22 68 69 64 64 65 6e 22 2c 74 2e 52 65 70 6f 72 74 3d 22 72 65 70 6f 72 74 22 2c 74 2e 45 78 69 74 49 6e 74 65 6e 74 3d 22 65 78 69 74 5f 69 6e 74 65 6e 74 22 2c 74 2e 50 6f 69 6e 74 65 72 45 6e 74 65 72 57 69 6e 64 6f 77 3d 22 70 6f 69 6e 74 65 72 5f 65 6e 74 65 72 5f 77 69 6e 64 6f 77 22 2c 74 2e 50 6f 69 6e 74 65 72 4c 65 61 76 65 57 69 6e 64 6f 77 3d 22 70 6f 69 6e 74 65 72 5f 6c 65 61 76 65 5f 77 69 6e 64 6f 77 22 2c 74 2e 42 61 63 6b 3d 22 62 61 63 6b 22 2c 74 2e 57 69 6e 64 6f 77 52 65 73 69 7a 65 64 3d 22 77 69 6e 64 6f 77 5f 72 65 73 69 7a 65 64 22 2c 74 2e 49 6e 74 65 6e 74 54 61 72 67 65 74 3d 22 69 6e 74 65 6e 74 5f 74 61 72 67 65 74 22 2c 74 2e 41 73 73 65 73 73 3d 22 61 73 Data Ascii: t.View="view",t.Hidden="hidden",t.Report="report",t.ExitIntent="exit_intent",t.PointerEnterWindow="pointer_enter_window",t.PointerLeaveWindow="pointer_leave_window",t.Back="back",t.WindowResized="window_resized",t.IntentTarget="intent_target",t.Assess="as
2025-01-15 22:20:57 UTC	1369	IN	Data Raw: 45 78 69 73 74 73 3d 22 66 69 72 73 74 5f 72 65 71 75 65 73 74 5f 72 65 73 6f 75 72 63 65 5f 65 78 69 73 74 73 22 2c 74 2e 52 65 73 6f 75 72 63 65 45 78 69 73 74 73 3d 22 72 65 73 6f 75 72 63 65 5f 65 78 69 73 74 73 22 2c 74 2e 46 69 72 73 74 52 65 71 75 65 73 74 52 65 73 6f 75 72 63 65 4d 69 73 73 69 6e 67 3d 22 66 69 72 73 74 5f 72 65 71 75 65 73 74 5f 72 65 73 6f 75 72 63 65 5f 6d 69 73 73 69 6e 67 22 2c 74 2e 52 65 73 6f 75 72 63 65 4d 69 73 73 69 6e 67 3d 22 72 65 73 6f 75 72 63 65 5f 6d 69 73 73 69 6e 67 22 7d 29 28 65 2e 50 6f 6c 6c 69 6e 67 7c 7c 28 65 2e 50 6f 6c 6c 69 6e 67 3d 7b 7d 29 29 2c 28 74 3d 3e 7b 74 2e 4c 6f 61 64 65 72 52 65 6d 6f 76 65 64 3d 22 6c 6f 61 64 65 72 5f 72 65 6d 6f 76 65 64 22 2c 74 2e 4c 6f 61 64 65 72 45 72 72 6f 72 3d Data Ascii: Exists="first_request_resource_exists",t.ResourceExists="resource_exists",t.FirstRequestResourceMissing="first_request_resource_missing",t.ResourceMissing="resource_missing"})(e.Polling\|\|(e.Polling={})),(t=>{t.LoaderRemoved="loader_removed",t.LoaderError=
2025-01-15 22:20:57 UTC	1369	IN	Data Raw: 65 73 6f 75 72 63 65 22 29 3b 6a 28 74 68 69 73 2c 22 71 75 6f 74 61 22 29 3b 6a 28 74 68 69 73 2c 22 69 6e 76 43 6c 69 63 6b 49 6e 64 65 78 22 29 3b 6a 28 74 68 69 73 2c 22 75 69 64 22 29 3b 6a 28 74 68 69 73 2c 22 77 65 62 64 22 29 3b 6a 28 74 68 69 73 2c 22 72 75 6e 6e 69 6e 67 54 69 6d 65 4d 73 22 29 3b 6a 28 74 68 69 73 2c 22 63 6f 6f 72 64 22 29 3b 6a 28 74 68 69 73 2c 22 64 69 72 65 63 74 69 6f 6e 22 29 3b 6a 28 74 68 69 73 2c 22 6e 65 78 74 49 74 65 6d 22 29 3b 6a 28 74 68 69 73 2c 22 74 6f 6b 65 6e 22 29 3b 6a 28 74 68 69 73 2c 22 6b 65 79 22 29 3b 6a 28 74 68 69 73 2c 22 63 75 73 74 6f 6d 45 76 65 6e 74 44 61 74 61 22 29 3b 6a 28 74 68 69 73 2c 22 6e 61 74 69 76 65 45 76 65 6e 74 44 61 74 61 22 29 3b 6a 28 74 68 69 73 2c 22 73 63 72 65 65 6e 73 Data Ascii: esource");j(this,"quota");j(this,"invClickIndex");j(this,"uid");j(this,"webd");j(this,"runningTimeMs");j(this,"coord");j(this,"direction");j(this,"nextItem");j(this,"token");j(this,"key");j(this,"customEventData");j(this,"nativeEventData");j(this,"screens
2025-01-15 22:20:57 UTC	1369	IN	Data Raw: 4f 2e 54 65 78 74 29 7b 63 6f 6e 73 74 20 72 3d 6e 2e 74 65 78 74 50 61 72 61 6d 73 2e 74 65 78 74 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 72 29 29 7b 63 6f 6e 73 74 20 6f 3d 72 2e 6d 61 70 28 73 3d 3e 7b 69 66 28 74 79 70 65 6f 66 20 73 21 3d 22 73 74 72 69 6e 67 22 26 26 73 2e 61 63 74 69 6f 6e 73 26 26 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 73 2e 61 63 74 69 6f 6e 73 29 29 7b 63 6f 6e 73 74 20 69 3d 7b 63 6c 69 63 6b 3a 73 2e 61 63 74 69 6f 6e 73 7d 3b 73 2e 61 63 74 69 6f 6e 73 3d 69 7d 72 65 74 75 72 6e 20 73 7d 29 3b 65 5b 74 5d 2e 74 65 78 74 50 61 72 61 6d 73 2e 74 65 78 74 3d 6f 7d 7d 7d 29 2c 65 7d 63 6f 6e 73 74 20 67 69 3d 7b 31 3a 68 69 7d 3b 66 75 6e 63 74 69 6f 6e 20 70 69 28 65 29 7b 69 66 28 65 2e 76 65 72 73 69 6f 6e 3d Data Ascii: O.Text){const r=n.textParams.text;if(Array.isArray(r)){const o=r.map(s=>{if(typeof s!="string"&&s.actions&&Array.isArray(s.actions)){const i={click:s.actions};s.actions=i}return s});e[t].textParams.text=o}}}),e}const gi={1:hi};function pi(e){if(e.version=
2025-01-15 22:20:57 UTC	1369	IN	Data Raw: 5e 5c 5b 28 5c 2d 3f 5c 64 2b 29 3f 28 3a 28 5c 2d 3f 5c 64 2b 29 3f 29 3f 5c 5d 24 2f 2c 6f 3d 65 2e 6d 61 74 63 68 28 72 29 3b 69 66 28 21 6f 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 69 6e 76 61 6c 69 64 20 61 72 72 61 79 20 61 63 63 65 73 73 20 73 74 72 69 6e 67 20 27 22 2e 63 6f 6e 63 61 74 28 65 2c 22 27 22 29 29 3b 63 6f 6e 73 74 5b 2c 73 2c 69 2c 63 5d 3d 6f 3b 6c 65 74 20 75 3d 70 61 72 73 65 49 6e 74 28 73 29 2c 61 3d 69 3f 70 61 72 73 65 49 6e 74 28 63 29 3a 75 2b 31 3b 69 73 4e 61 4e 28 75 29 26 26 28 75 3d 30 29 2c 69 73 4e 61 4e 28 61 29 26 26 28 61 3d 74 29 2c 75 3c 30 26 26 28 75 2b 3d 74 29 2c 61 3c 30 26 26 28 61 2b 3d 74 29 3b 66 6f 72 28 6c 65 74 20 66 3d 75 3b 66 3c 61 3b 66 2b 2b 29 6e 2e 70 75 73 68 28 66 29 3b 72 65 74 Data Ascii: ^\[(\-?\d+)?(:(\-?\d+)?)?\]$/,o=e.match(r);if(!o)throw new Error("invalid array access string '".concat(e,"'"));const[,s,i,c]=o;let u=parseInt(s),a=i?parseInt(c):u+1;isNaN(u)&&(u=0),isNaN(a)&&(a=t),u<0&&(u+=t),a<0&&(a+=t);for(let f=u;f<a;f++)n.push(f);ret
2025-01-15 22:20:57 UTC	1369	IN	Data Raw: 29 2e 61 63 74 69 6f 6e 73 3d 7a 74 28 7b 2e 2e 2e 66 2e 61 63 74 69 6f 6e 73 2c 2e 2e 2e 75 2e 61 63 74 69 6f 6e 73 7d 29 2c 21 69 2e 70 61 72 61 6d 73 7c 7c 21 73 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 2e 70 61 72 61 6d 73 29 72 65 74 75 72 6e 20 6c 3b 63 6f 6e 73 74 20 79 3d 22 22 2e 63 6f 6e 63 61 74 28 69 2e 63 6f 6e 66 69 67 2e 74 79 70 65 2c 22 50 61 72 61 6d 73 22 29 3b 66 6f 72 28 63 6f 6e 73 74 5b 68 2c 62 5d 6f 66 20 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 69 2e 70 61 72 61 6d 73 29 29 7b 63 6f 6e 73 74 20 41 3d 73 2e 63 75 73 74 6f 6d 50 61 72 61 6d 73 2e 70 61 72 61 6d 73 5b 68 5d 3b 69 66 28 41 21 3d 3d 76 6f 69 64 20 30 29 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 62 29 29 66 6f 72 28 63 6f 6e 73 74 20 53 20 6f 66 20 62 29 4d Data Ascii: ).actions=zt({...f.actions,...u.actions}),!i.params\|\|!s.customParams.params)return l;const y="".concat(i.config.type,"Params");for(const[h,b]of Object.entries(i.params)){const A=s.customParams.params[h];if(A!==void 0)if(Array.isArray(b))for(const S of b)M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	50020	104.21.50.45	443	3228	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 22:20:57 UTC	898	OUT	POST /rtimp HTTP/1.1 Host: g.protectonow.com Connection: keep-alive Content-Length: 1690 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://get4.protectonow.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://get4.protectonow.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=fda95280-d38e-11ef-bc27-c22fbff8fb28; uid_cross=fda95280-d38e-11ef-bc27-c22fbff8fb28; mid=f28d8534-d38e-11ef-93a7-aab196f2f20d; utm_source=adx_ext_download_prot_smrtsp___5e460bab; utm_source_cross=adx_ext_download_prot_smrtsp___5e460bab; p2088478120=144748304
2025-01-15 22:20:57 UTC	1690	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 66 32 38 64 38 35 33 34 2d 64 33 38 65 2d 31 31 65 66 2d 39 33 61 37 2d 61 61 62 31 39 36 66 32 66 32 30 64 22 2c 22 64 22 3a 22 24 24 24 44 4f 4d 24 24 24 22 2c 22 63 72 22 3a 22 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 4e 62 34 4a 50 52 52 6e 59 56 69 38 6b 62 6a 30 63 31 46 49 5f 46 4e 4b 5a 35 39 78 6e 44 4f 6c 69 56 78 63 49 4d 38 35 6e 32 71 73 35 79 38 67 76 31 75 56 67 33 52 62 6a 5a 57 35 5f 46 72 56 6c 59 47 57 50 7a 44 39 4e 49 73 4c 57 4e 45 4f 48 7a 75 34 59 4f 6d 44 38 4f 75 69 53 38 55 6b 50 65 6a 5a 67 41 4b 46 6d 33 5a 6c 55 78 48 42 4e 47 69 59 63 62 67 55 35 44 6d 4c 32 4a 67 42 4f 6e 41 36 75 71 35 48 71 59 58 44 47 4f 41 6b 6b 63 48 70 37 37 6d 54 76 69 6c 6b 5a 35 Data Ascii: {"entries":[{"sid":"f28d8534-d38e-11ef-93a7-aab196f2f20d","d":"$$$DOM$$$","cr":"","gid":"","im":"Nb4JPRRnYVi8kbj0c1FI_FNKZ59xnDOliVxcIM85n2qs5y8gv1uVg3RbjZW5_FrVlYGWPzD9NIsLWNEOHzu4YOmD8OuiS8UkPejZgAKFm3ZlUxHBNGiYcbgU5DmL2JgBOnA6uq5HqYXDGOAkkcHp77mTvilkZ5
2025-01-15 22:20:58 UTC	1314	IN	HTTP/1.1 204 No Content Date: Wed, 15 Jan 2025 22:20:57 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://get4.protectonow.com Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Accept-Ch: Sec-Ch-Ua, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, Sec-Ch-Ua-Arch, Sec-Ch-Ua-Model, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Prefers-Color-Scheme, Sec-Ch-Viewport-Width, Sec-Ch-Viewport-Height, RTT, Downlink, Device-Memory, Save-Data Set-Cookie: uid_cross=fda95280-d38e-11ef-bc27-c22fbff8fb28; Domain=.protectonow.com; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/; SameSite=none; Secure Set-Cookie: sid=f28d8534-d38e-11ef-93a7-aab196f2f20d; Domain=.protectonow.com; Max-Age=7200; Path=/ Set-Cookie: sid_cross=f28d8534-d38e-11ef-93a7-aab196f2f20d; Domain=.protectonow.com; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google cf-cache-status: DYNAMIC
2025-01-15 22:20:58 UTC	636	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 6b 70 62 6a 59 67 54 71 25 32 42 73 66 43 55 69 6a 44 34 4f 25 32 46 4b 61 4f 45 32 6e 47 25 32 42 33 5a 6e 32 45 4c 68 41 6c 78 62 25 32 46 51 75 44 42 79 74 59 58 45 42 72 44 30 45 4d 75 39 69 32 37 4e 38 31 38 6c 34 45 65 25 32 46 55 68 4b 75 68 73 79 69 6d 25 32 42 63 44 49 69 78 52 54 45 70 38 46 25 32 46 46 31 38 4a 6f 39 62 62 34 53 47 6c 47 78 58 48 39 79 43 44 51 52 51 76 78 48 47 4d 44 63 32 76 45 63 4a 4e 48 35 71 78 32 4b 71 51 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kpbjYgTq%2BsfCUijD4O%2FKaOE2nG%2B3Zn2ELhAlxb%2FQuDBytYXEBrD0EMu9i27N818l4Ee%2FUhKuhsyim%2BcDIixRTEp8F%2FF18Jo9bb4SGlGxXH9yCDQRQvxHGMDc2vEcJNH5qx2KqQ%3D%3D"}],"group":"cf-nel","m

Target ID:	0
Start time:	17:20:23
Start date:	15/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	17:20:25
Start date:	15/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2056 --field-trial-handle=2004,i,9348203157779861519,15638006010270494539,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	17:20:32
Start date:	15/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nuance-pdf-professional2.software.informer.com/7.2/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	17:20:58
Start date:	15/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5628 --field-trial-handle=2004,i,9348203157779861519,15638006010270494539,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	17:20:59
Start date:	15/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4456 --field-trial-handle=2004,i,9348203157779861519,15638006010270494539,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://nuance-pdf-professional2.software.informer.com/7.2/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Chrome Cache Entry: 217

Chrome Cache Entry: 218

Windows Analysis Report
https://nuance-pdf-professional2.software.informer.com/7.2/