Edit tour

Windows Analysis Report
http://gemineolegim.godaddysites.com/

Overview

General Information

Sample URL:	http://gemineolegim.godaddysites.com/
Analysis ID:	1621573
Infos:

Detection

HTMLPhisher

Score:	64
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Yara detected HtmlPhish64

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML title does not match URL

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4460 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6628 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 --field-trial-handle=2028,i,4280106494234967396,11252398208076785523,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4712 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://gemineolegim.godaddysites.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
1.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

• AV Detection
• Phishing
• Networking
• System Summary
• Boot Survival

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://gemineolegim.godaddysites.com/

Avira URL Cloud: detection malicious, Label: malware

Antivirus detection for URL or domain

Source: https://gemineolegim.godaddysites.com/manifest.webmanifest	Avira URL Cloud: Label: malware
Source: https://gemineolegim.godaddysites.com/sw.js	Avira URL Cloud: Label: malware

Phishing

Yara detected HtmlPhish64

Source: Yara match

File source: 1.0.pages.csv, type: HTML

Source: https://gemineolegim.godaddysites.com/

HTTP Parser: Number of links: 0

Source: https://gemineolegim.godaddysites.com/

HTTP Parser: Title: Gemini: Loin | Sign In does not match URL

Source: https://gemineolegim.godaddysites.com/

HTTP Parser: No <meta name="copyright".. found

Source: global traffic	TCP traffic: 192.168.2.5:49718 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.5:50491 -> 162.159.36.2:53

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: gemineolegim.godaddysites.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1
Source: global traffic	HTTP traffic detected: GET /ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.28.5.js HTTP/1.1Host: img1.wsimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gemineolegim.godaddysites.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://gemineolegim.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/font/LeagueSpartan/league-spartan.css HTTP/1.1Host: img1.wsimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gemineolegim.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/7b447f14-e493-43c9-9689-3542f92042e6/gpub/8186fd600e2f6aba/script.js HTTP/1.1Host: img1.wsimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gemineolegim.godaddysites.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://gemineolegim.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /isteam/ip/7b447f14-e493-43c9-9689-3542f92042e6/Gemini%20update.webp/:/cr=t:0%25,l:0%25,w:100%25,h:100%25/rs=w:1240,cg:true HTTP/1.1Host: img1.wsimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gemineolegim.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /isteam/ip/7b447f14-e493-43c9-9689-3542f92042e6/Gemini%20update.webp/:/cr=t:0%25,l:0%25,w:100%25,h:100%25/rs=w:1240,cg:true HTTP/1.1Host: img1.wsimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/7b447f14-e493-43c9-9689-3542f92042e6/gpub/8186fd600e2f6aba/script.js HTTP/1.1Host: img1.wsimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.28.5.js HTTP/1.1Host: img1.wsimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@widget/LAYOUT/bs-layout13-Theme-publish-Theme-7252afe2.js HTTP/1.1Host: img1.wsimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gemineolegim.godaddysites.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://gemineolegim.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-_rollupPluginBabelHelpers-e83be766.js HTTP/1.1Host: img1.wsimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gemineolegim.godaddysites.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://gemineolegim.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-defaultSocialIconPack-91835b99.js HTTP/1.1Host: img1.wsimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gemineolegim.godaddysites.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://gemineolegim.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-humanisticFilled-91edd0e1.js HTTP/1.1Host: img1.wsimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gemineolegim.godaddysites.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://gemineolegim.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-index-4e26cd6b.js HTTP/1.1Host: img1.wsimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gemineolegim.godaddysites.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://gemineolegim.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-index3-55bc27af.js HTTP/1.1Host: img1.wsimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gemineolegim.godaddysites.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://gemineolegim.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@widget/LAYOUT/bs-layout13-Theme-publish-Theme-7252afe2.js HTTP/1.1Host: img1.wsimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-legacyOverrides-42582241.js HTTP/1.1Host: img1.wsimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gemineolegim.godaddysites.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://gemineolegim.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-loaders-fffeeba5.js HTTP/1.1Host: img1.wsimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gemineolegim.godaddysites.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://gemineolegim.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-_rollupPluginBabelHelpers-e83be766.js HTTP/1.1Host: img1.wsimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-overlayTypes-e1dbe765.js HTTP/1.1Host: img1.wsimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gemineolegim.godaddysites.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://gemineolegim.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-themeOverrides-e736c017.js HTTP/1.1Host: img1.wsimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gemineolegim.godaddysites.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://gemineolegim.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-humanisticFilled-91edd0e1.js HTTP/1.1Host: img1.wsimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-index-4e26cd6b.js HTTP/1.1Host: img1.wsimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-defaultSocialIconPack-91835b99.js HTTP/1.1Host: img1.wsimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/Carousel-3d82957b.js HTTP/1.1Host: img1.wsimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gemineolegim.godaddysites.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://gemineolegim.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/ColorSwatch-4196a0a9.js HTTP/1.1Host: img1.wsimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gemineolegim.godaddysites.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://gemineolegim.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-index3-55bc27af.js HTTP/1.1Host: img1.wsimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-dataAids-6a839d53.js HTTP/1.1Host: img1.wsimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gemineolegim.godaddysites.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://gemineolegim.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-legacyOverrides-42582241.js HTTP/1.1Host: img1.wsimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-index2-87bd33e6.js HTTP/1.1Host: img1.wsimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gemineolegim.godaddysites.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://gemineolegim.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-navigationDrawer-27f5f1f5.js HTTP/1.1Host: img1.wsimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gemineolegim.godaddysites.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://gemineolegim.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-searchFormLocations-c86f2a99.js HTTP/1.1Host: img1.wsimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gemineolegim.godaddysites.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://gemineolegim.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-loaders-fffeeba5.js HTTP/1.1Host: img1.wsimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-themeOverrides-e736c017.js HTTP/1.1Host: img1.wsimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-overlayTypes-e1dbe765.js HTTP/1.1Host: img1.wsimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@wsb/guac-widget-shared/c/_commonjsHelpers-67085353.js HTTP/1.1Host: img1.wsimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gemineolegim.godaddysites.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://gemineolegim.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@wsb/guac-widget-shared/c/_react_commonjs-external-a1351e34.js HTTP/1.1Host: img1.wsimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gemineolegim.godaddysites.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://gemineolegim.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/Carousel-3d82957b.js HTTP/1.1Host: img1.wsimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/ColorSwatch-4196a0a9.js HTTP/1.1Host: img1.wsimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@wsb/guac-widget-shared/c/_rollupPluginBabelHelpers-8ce54c82.js HTTP/1.1Host: img1.wsimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gemineolegim.godaddysites.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://gemineolegim.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-dataAids-6a839d53.js HTTP/1.1Host: img1.wsimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@wsb/guac-widget-shared/c/interopRequireDefault-c83974f7.js HTTP/1.1Host: img1.wsimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gemineolegim.godaddysites.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://gemineolegim.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-index2-87bd33e6.js HTTP/1.1Host: img1.wsimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-searchFormLocations-c86f2a99.js HTTP/1.1Host: img1.wsimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-navigationDrawer-27f5f1f5.js HTTP/1.1Host: img1.wsimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@wsb/guac-widget-shared/c/_commonjsHelpers-67085353.js HTTP/1.1Host: img1.wsimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@wsb/guac-widget-shared/c/_react_commonjs-external-a1351e34.js HTTP/1.1Host: img1.wsimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /manifest.webmanifest HTTP/1.1Host: gemineolegim.godaddysites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://gemineolegim.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sw.js HTTP/1.1Host: gemineolegim.godaddysites.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://gemineolegim.godaddysites.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@wsb/guac-widget-shared/c/_rollupPluginBabelHelpers-8ce54c82.js HTTP/1.1Host: img1.wsimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blobby/go/static/radpack/@wsb/guac-widget-shared/c/interopRequireDefault-c83974f7.js HTTP/1.1Host: img1.wsimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /isteam/ip/7b447f14-e493-43c9-9689-3542f92042e6/favicon/0e61da3a-6a4f-4937-b58d-d14f74e69afc.png/:/rs=w:32,h:32,m HTTP/1.1Host: img1.wsimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gemineolegim.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /isteam/ip/7b447f14-e493-43c9-9689-3542f92042e6/favicon/0e61da3a-6a4f-4937-b58d-d14f74e69afc.png/:/rs=w:192,h:192,m HTTP/1.1Host: img1.wsimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gemineolegim.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: gemineolegim.godaddysites.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gemineolegim.godaddysites.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1
Source: global traffic	HTTP traffic detected: GET /isteam/ip/7b447f14-e493-43c9-9689-3542f92042e6/favicon/0e61da3a-6a4f-4937-b58d-d14f74e69afc.png/:/rs=w:32,h:32,m HTTP/1.1Host: img1.wsimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /isteam/ip/7b447f14-e493-43c9-9689-3542f92042e6/favicon/0e61da3a-6a4f-4937-b58d-d14f74e69afc.png/:/rs=w:192,h:192,m HTTP/1.1Host: img1.wsimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: gemineolegim.godaddysites.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: gemineolegim.godaddysites.com
Source: global traffic	DNS traffic detected: DNS query: img1.wsimg.com
Source: global traffic	DNS traffic detected: DNS query: isteam.wsimg.com

Source: chromecache_125.2.dr, chromecache_137.2.dr, chromecache_97.2.dr, chromecache_124.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_117.2.dr	String found in binary or memory: http://scripts.sil.org/OFL
Source: chromecache_117.2.dr	String found in binary or memory: https://gemineolegim.godaddysites.com/
Source: chromecache_103.2.dr	String found in binary or memory: https://img1.wsimg.com/blobby/go/font/LeagueSpartan/LeagueSpartan.woff)
Source: chromecache_103.2.dr	String found in binary or memory: https://img1.wsimg.com/blobby/go/font/LeagueSpartan/LeagueSpartan.woff2)
Source: chromecache_117.2.dr	String found in binary or memory: https://img1.wsimg.com/poly/v3/polyfill.min.js?rum=0&unknown=polyfill&flags=gated&features=Intl.~loc
Source: chromecache_117.2.dr	String found in binary or memory: https://www.fontsquirrel.com/license/league-spartan

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50606 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50606
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: classification engine

Classification label: mal64.phis.win@17/89@12/9

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 --field-trial-handle=2028,i,4280106494234967396,11252398208076785523,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://gemineolegim.godaddysites.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 --field-trial-handle=2028,i,4280106494234967396,11252398208076785523,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Download Video

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://gemineolegim.godaddysites.com/	100%	Avira URL Cloud	malware

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://gemineolegim.godaddysites.com/manifest.webmanifest	100%	Avira URL Cloud	malware
https://gemineolegim.godaddysites.com/sw.js	100%	Avira URL Cloud	malware

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
gemineolegim.godaddysites.com	13.248.243.5	true	false	unknown
e40258.g.akamaiedge.net	95.101.182.82	true	false	high
www.google.com	172.217.16.196	true	false	high
isteam.wsimg.com	3.126.54.211	true	false	high
img1.wsimg.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/c/_react_commonjs-external-a1351e34.js	false		high
https://img1.wsimg.com/blobby/go/font/LeagueSpartan/league-spartan.css	false		high
https://gemineolegim.godaddysites.com/sw.js	false	Avira URL Cloud: malware	unknown
https://img1.wsimg.com/isteam/ip/7b447f14-e493-43c9-9689-3542f92042e6/favicon/0e61da3a-6a4f-4937-b58d-d14f74e69afc.png/:/rs=w:32,h:32,m	false		high
https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-themeOverrides-e736c017.js	false		high
https://gemineolegim.godaddysites.com/manifest.webmanifest	false	Avira URL Cloud: malware	unknown
https://img1.wsimg.com/blobby/go/7b447f14-e493-43c9-9689-3542f92042e6/gpub/8186fd600e2f6aba/script.js	false		high
https://img1.wsimg.com/isteam/ip/7b447f14-e493-43c9-9689-3542f92042e6/Gemini%20update.webp/:/cr=t:0%25,l:0%25,w:100%25,h:100%25/rs=w:1240,cg:true	false		high
http://gemineolegim.godaddysites.com/	true		unknown
https://img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.28.5.js	false		high
https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-loaders-fffeeba5.js	false		high
https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-_rollupPluginBabelHelpers-e83be766.js	false		high
https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-index3-55bc27af.js	false		high
https://img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/Carousel-3d82957b.js	false		high
https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-searchFormLocations-c86f2a99.js	false		high
https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-index2-87bd33e6.js	false		high
https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-index-4e26cd6b.js	false		high
https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-navigationDrawer-27f5f1f5.js	false		high
https://img1.wsimg.com/isteam/ip/7b447f14-e493-43c9-9689-3542f92042e6/favicon/0e61da3a-6a4f-4937-b58d-d14f74e69afc.png/:/rs=w:192,h:192,m	false		high
https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-legacyOverrides-42582241.js	false		high
https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-dataAids-6a839d53.js	false		high
https://img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/c/_rollupPluginBabelHelpers-8ce54c82.js	false		high
https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-defaultSocialIconPack-91835b99.js	false		high
https://img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/ColorSwatch-4196a0a9.js	false		high
https://img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/c/interopRequireDefault-c83974f7.js	false		high
https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-overlayTypes-e1dbe765.js	false		high
https://gemineolegim.godaddysites.com/	false		unknown
https://img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/c/_commonjsHelpers-67085353.js	false		high
https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-humanisticFilled-91edd0e1.js	false		high
https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/bs-layout13-Theme-publish-Theme-7252afe2.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://img1.wsimg.com/poly/v3/polyfill.min.js?rum=0&unknown=polyfill&flags=gated&features=Intl.~loc	chromecache_117.2.dr	false	high
https://www.fontsquirrel.com/license/league-spartan	chromecache_117.2.dr	false	high
https://img1.wsimg.com/blobby/go/font/LeagueSpartan/LeagueSpartan.woff)	chromecache_103.2.dr	false	high
http://scripts.sil.org/OFL	chromecache_117.2.dr	false	high
https://img1.wsimg.com/blobby/go/font/LeagueSpartan/LeagueSpartan.woff2)	chromecache_103.2.dr	false	high
http://jedwatson.github.io/classnames	chromecache_125.2.dr, chromecache_137.2.dr, chromecache_97.2.dr, chromecache_124.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.248.243.5	gemineolegim.godaddysites.com	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
95.101.182.82	e40258.g.akamaiedge.net	European Union	20940	AKAMAI-ASN1EU	false
172.217.16.196	www.google.com	United States	15169	GOOGLEUS	false
3.126.54.211	isteam.wsimg.com	United States	16509	AMAZON-02US	false
95.101.182.74	unknown	European Union	20940	AKAMAI-ASN1EU	false

Private

IP
192.168.2.7
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1621573
Start date and time:	2025-02-22 00:59:39 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://gemineolegim.godaddysites.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@17/89@12/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.67, 142.250.184.206, 173.194.76.84, 142.250.185.142, 142.250.184.238, 216.58.206.78, 142.250.186.170, 172.217.18.3, 199.232.214.172, 2.23.77.188, 142.250.185.78, 172.217.23.110, 142.250.184.195, 2.19.106.160, 20.12.23.50, 13.107.246.60, 20.109.210.53
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, otelrules.azureedge.net, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, 4.8.2.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.0.2.0.c.0.0.3.0.1.3.0.6.2.ip6.arpa, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://gemineolegim.godaddysites.com/

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Feb 21 23:00:35 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9636962104866367
Encrypted:	false
SSDEEP:	48:89d3TvznHfidAKZdA19ehwiZUklqehLy+3:8H3hMy
MD5:	84151157D76F0EF4A1A8879A9E68F62A
SHA1:	ED9709FEBBC5987E66FD728843656DE88E83D66E
SHA-256:	8FFE97990BFB7C1852714FA0C9F6D19617F3102783E51DA72C480D6F0233196A
SHA-512:	A14014AC90ADE29D24F23EA01931F129571F0D8AB6855EFF3820FC8B1FC4AADA110D297FCBDD2556FFD82459B492C544A8EDBB3D068635971CEC6F148A8AD283
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...._......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IVZ......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VVZ......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VVZ......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VVZ............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VVZ.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............d.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Feb 21 23:00:34 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.979996606316049
Encrypted:	false
SSDEEP:	48:8Pd3TvznHfidAKZdA1weh/iZUkAQkqeh8y+2:8B3T9Q5y
MD5:	F90B5CE87C89AC7031FBFF8C7F52C04E
SHA1:	88C80848620FC8E4BCA6001D33758790C991A80F
SHA-256:	BC3C7EF487AB06C6F3334E5BE0774531A4FCE294AD7BCACB63922E163AB74D68
SHA-512:	4A9A5DE98135BF7CE411DD68AAFFC4F9375456278F3DBA8EE5C6898258C55DA05F6FE2F5397F2090DDA8F2ACC0EE131C24992421E57303289A7D7320E91A8C89
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....E......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IVZ......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VVZ......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VVZ......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VVZ............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VVZ.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............d.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	3.993582250918528
Encrypted:	false
SSDEEP:	48:8x8d3TvzsHfidAKZdA14tseh7sFiZUkmgqeh7sKy+BX:8x83Knwy
MD5:	F25FBB27091A364808C5CEA84A429653
SHA1:	1EACCB718FD4FCFDD27FD57E60117CC0E4679BD0
SHA-256:	9F0314F0C08AFFBBB035F0A27F1418D217D0F0E498931266D39B4D95B40E7B51
SHA-512:	B05BF3A8270E37A45BAA286E041DA8C3DDD1C82DF8CA0F58B31F4ACE9E8DF1182BC3662C70AD61F9CCB22814B3623747D44F57A5859C706873A866C2D32B38FE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IVZ......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VVZ......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VVZ......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VVZ............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............d.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Feb 21 23:00:34 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.976710023132165
Encrypted:	false
SSDEEP:	48:8Id3TvznHfidAKZdA1vehDiZUkwqehoy+R:8g3Qiy
MD5:	5D398A845607BBFF3F115168490303C1
SHA1:	CAA7E1052E82F435023CAF81C9D9B0579D76F078
SHA-256:	ABED8AD9EF5864E6949ED79BD1312AD0DEFD018A6E0BD76186BF07BD63BB0AE4
SHA-512:	18AAC87048C89240CAC416293467E1B102F7F37F8B7818494135047E615130EB01FF9D758CE4FA814332F5D498679BA2135660AE65B171160AD054FF0719DA9C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....xV.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IVZ......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VVZ......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VVZ......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VVZ............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VVZ.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............d.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Feb 21 23:00:35 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.96684860141396
Encrypted:	false
SSDEEP:	48:8Jd3TvznHfidAKZdA1hehBiZUk1W1qehuy+C:8L3Q9Oy
MD5:	65BBFAEB5D381659E17B8CD33350526D
SHA1:	8C9FCB8FC30C5D5F28835621034EF92C8C9FD04C
SHA-256:	26DAC00927A767CF54235F7C5EBBF869BB2C489FC3BADC32E1811D4302F8664E
SHA-512:	CDD0FB29573FDBFC3D6BFA5D1FB482B44C570427B38BC18E274427E84A8E024EB713A1096566EB247A1EF3A66E22F7314DB8ABB70AD43BD02C521FF92FB3DAFC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....3......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IVZ......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VVZ......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VVZ......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VVZ............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VVZ.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............d.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Feb 21 23:00:34 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9800886006262592
Encrypted:	false
SSDEEP:	48:8s8d3TvznHfidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbwy+yT+:8l3eT/TbxWOvTbwy7T
MD5:	EBE1BAEAF990DFF801F612C8D44C4584
SHA1:	D4D41A12FBBAA2D624680B1578A0DB6A02D4A663
SHA-256:	EAB0AF1CE31CD4595F90884E2A6533C99357C7D5E03AE327F9F61AD280CC8242
SHA-512:	16A03091EDEAFFB2D881F5D7F566AAAB555E803A81A843FB7A3BA5445A10AADC2689D67F829E3F54CE40DA028779AE3BED70BA6BD7095DA409F062182729B779
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....j.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IVZ......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VVZ......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VVZ......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VVZ............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VVZ.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............d.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (383)
Category:	dropped
Size (bytes):	437
Entropy (8bit):	5.418011449016951
Encrypted:	false
SSDEEP:	12:cTTgBSyk+Jb8KCjoD3BMXkKbr4Si+THr+pWTDTd:cTTgBL3fCjqMXfr4SiSHrIYDTd
MD5:	21AD22788E6CAA18A4E9E57F7372B108
SHA1:	50EBDD2452193BEAB7D1899F788FBBF32D90DD55
SHA-256:	0FE26F07B9E5D49590F55D31CBC381CA9337850F89B09940E3B384FCD6D26464
SHA-512:	4237775466FC3A94FE9FD769B9A186DBF8559FE5E06442EA107872462B1591DA2EBFC2786DD8D05495538428F668D940A4D851AE8E13DAFBBF8B763EAAD2F063
Malicious:	false
Reputation:	low
Preview:	define("@widget/LAYOUT/c/bs-overlayTypes-e1dbe765.js",["exports"],(function(e){"use strict";const{headerTreatments:{FILL:n,FIT:t,INSET:o,BLUR:a,LEGACY_BLUR:c}}=(global.Core\|\|guac["@wsb/guac-widget-core"]).constants;e.A="accent",e.B=a,e.C="category",e.F=n,e.I=o,e.L=c,e.N="neutral",e.P="primary",e.a="none",e.b=t,e.c="light_dark"})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=bs-overlayTypes-e1dbe765.js.map.

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	304
Entropy (8bit):	5.609970428503769
Encrypted:	false
SSDEEP:	6:FSPOhWNjZTivBSyv5F/kpIdiEjGWF+ktxRmGHr9EJiKWaEkWNjZTiKF:cUZBSyv5ZdihWF+CRTHr+pWTkAF
MD5:	DAA79AD7558674F6A12D962ABF47F2F6
SHA1:	03EEA0EBEBD11EC14CFA5A651EB0ACA2604829A7
SHA-256:	604281887CD770ED21601933E9636A7A9C8A57A30D7D796AE7D760EEF64D5089
SHA-512:	B335EBCB0C982398C56D9A5F68F5D4E36A850AB139976BD94354C7CD18F1F370866A74F46FCD399F46E410D59AF7FBA890A17003BB4FD456DD43A6DE531D28F9
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-searchFormLocations-c86f2a99.js
Preview:	define("@widget/LAYOUT/c/bs-searchFormLocations-c86f2a99.js",["exports"],(function(o){"use strict";o.D="DESKTOP_NAV_COVER",o.M="MOBILE_NAV",o.N="NAV_DRAWER",o.S="SIDEBAR",o.a="DESKTOP_NAV"})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=bs-searchFormLocations-c86f2a99.js.map.

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (383)
Category:	downloaded
Size (bytes):	437
Entropy (8bit):	5.418011449016951
Encrypted:	false
SSDEEP:	12:cTTgBSyk+Jb8KCjoD3BMXkKbr4Si+THr+pWTDTd:cTTgBL3fCjqMXfr4SiSHrIYDTd
MD5:	21AD22788E6CAA18A4E9E57F7372B108
SHA1:	50EBDD2452193BEAB7D1899F788FBBF32D90DD55
SHA-256:	0FE26F07B9E5D49590F55D31CBC381CA9337850F89B09940E3B384FCD6D26464
SHA-512:	4237775466FC3A94FE9FD769B9A186DBF8559FE5E06442EA107872462B1591DA2EBFC2786DD8D05495538428F668D940A4D851AE8E13DAFBBF8B763EAAD2F063
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-overlayTypes-e1dbe765.js
Preview:	define("@widget/LAYOUT/c/bs-overlayTypes-e1dbe765.js",["exports"],(function(e){"use strict";const{headerTreatments:{FILL:n,FIT:t,INSET:o,BLUR:a,LEGACY_BLUR:c}}=(global.Core\|\|guac["@wsb/guac-widget-core"]).constants;e.A="accent",e.B=a,e.C="category",e.F=n,e.I=o,e.L=c,e.N="neutral",e.P="primary",e.a="none",e.b=t,e.c="light_dark"})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=bs-overlayTypes-e1dbe765.js.map.

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	330
Entropy (8bit):	4.909032600712556
Encrypted:	false
SSDEEP:	6:0IFFAfYot0+56ZRWHMqh7pYoRPmespQBiTJBifoPmespQBiTJBinNin:jFKfP0O6ZRoMqtp/PSQK+oPSQK0Y
MD5:	1E154E5ED919387FF6D969C8D6C56619
SHA1:	8E9D50DD4961C69460CF1881232CEA4BACCC6EB4
SHA-256:	45FAAA17694E6BA660358AC8005E4A87EEEB817D99BA2A2E8E6684A591EEFDBC
SHA-512:	FA84A9EB79CD9294FCAFB3DAF91CA08FC45EDCDE1BDE218D71F1448EBAEF4386ACDBAB4C2DA6D1CFA1036B88D6B89635D71FFFE00A84FD53CE9933440776D1E0
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/font/LeagueSpartan/league-spartan.css
Preview:	@font-face {. font-family: 'League Spartan';. font-style: normal;. font-weight: 400;. font-display: swap;. src: local('League Spartan'), url(https://img1.wsimg.com/blobby/go/font/LeagueSpartan/LeagueSpartan.woff2) format('woff2'), url(https://img1.wsimg.com/blobby/go/font/LeagueSpartan/LeagueSpartan.woff) format('woff');.}.

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	304
Entropy (8bit):	5.609970428503769
Encrypted:	false
SSDEEP:	6:FSPOhWNjZTivBSyv5F/kpIdiEjGWF+ktxRmGHr9EJiKWaEkWNjZTiKF:cUZBSyv5ZdihWF+CRTHr+pWTkAF
MD5:	DAA79AD7558674F6A12D962ABF47F2F6
SHA1:	03EEA0EBEBD11EC14CFA5A651EB0ACA2604829A7
SHA-256:	604281887CD770ED21601933E9636A7A9C8A57A30D7D796AE7D760EEF64D5089
SHA-512:	B335EBCB0C982398C56D9A5F68F5D4E36A850AB139976BD94354C7CD18F1F370866A74F46FCD399F46E410D59AF7FBA890A17003BB4FD456DD43A6DE531D28F9
Malicious:	false
Reputation:	low
Preview:	define("@widget/LAYOUT/c/bs-searchFormLocations-c86f2a99.js",["exports"],(function(o){"use strict";o.D="DESKTOP_NAV_COVER",o.M="MOBILE_NAV",o.N="NAV_DRAWER",o.S="SIDEBAR",o.a="DESKTOP_NAV"})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=bs-searchFormLocations-c86f2a99.js.map.

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (516)
Category:	downloaded
Size (bytes):	583
Entropy (8bit):	5.275794886448015
Encrypted:	false
SSDEEP:	12:csTLaBSyTUXaPXAbDTc/NeL2QiTj+RVnIYQ2ofXgYFw1THr+pWT0Lv:cTBLTUXaPXAPTc/tTj+Hn/Q2CQYytHrI
MD5:	0D42FFB998A9CF7C25824CF365C7D0C9
SHA1:	7A95B87AC3B0C813F195EA46EFB9E792023EAFBE
SHA-256:	3418AA0FB5D19C3909DD89CCF081C9B59EBAD2A0334EED58373ED395D228487A
SHA-512:	EE2711CED0E8936C0DDAE9CFBE1FFAFABF56766C4611DC5B68C50919EDFC6CD1F3C850A0599ED107E8F6555D54BB46B3395B957A74697BEA2A749814C270C0FD
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-_rollupPluginBabelHelpers-e83be766.js
Preview:	define("@widget/LAYOUT/c/bs-_rollupPluginBabelHelpers-e83be766.js",["exports"],(function(e){"use strict";function n(){return n=Object.assign?Object.assign.bind():function(e){for(var n=1;n<arguments.length;n++){var r=arguments[n];for(var t in r)Object.prototype.hasOwnProperty.call(r,t)&&(e[t]=r[t])}return e},n.apply(this,arguments)}e._=function(e,n,r){return n in e?Object.defineProperty(e,n,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[n]=r,e},e.a=n})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=bs-_rollupPluginBabelHelpers-e83be766.js.map.

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	266
Entropy (8bit):	5.182741116673583
Encrypted:	false
SSDEEP:	6:F9oNS2BSyRbWsCJwvYtMe1mGHr9EJiKWaO6SZF:HgS2BSyEsCJB1THr+pWIS7
MD5:	8578A331AD09BB2EF6359FEC3916BEFC
SHA1:	38B68F5C02CBDB6E29C50F8858710E0392B0B8D6
SHA-256:	3D7E7552E3801941A408C504AA732223FE2BED5D12E248680847D772182CB639
SHA-512:	B034DDDA04F8DEE0D174651D13A89AF9FE5ED28E1E81FAB229AFA119B9B0A9C418E324FFCE28E909D8D596BEAE98FA1AC0BA09C74E7E7689B945C032088C5E18
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/c/_react_commonjs-external-a1351e34.js
Preview:	define("@wsb/guac-widget-shared/c/_react_commonjs-external-a1351e34.js",["exports"],(function(e){"use strict";const n=global.React\|\|guac.react;e._=n})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=_react_commonjs-external-a1351e34.js.map.

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	26060
Entropy (8bit):	7.982619282687793
Encrypted:	false
SSDEEP:	768:zmWn8RTFjpjxx1eY6r0wX9RjfRQWCFPzZD:NyxVXgr0wLjGNzF
MD5:	FC1D36E1D0CBB80E33C4517D0D79BEBF
SHA1:	64FD582F03E5F397CB69969890186A19510DCFD8
SHA-256:	DF3B6CB9949A74BCABDEE45AB839B1E0B673D066AF19256D052BE50DB06B6B74
SHA-512:	9F552D2C6D1B28C0908335CC811F72FDEB57478C5F6C1CE2749147704133955F85EF5365E31846873AF83F2923CC2F70453223E58CD0E652B5301539BD41272E
Malicious:	false
Reputation:	low
URL:	"https://img1.wsimg.com/isteam/ip/7b447f14-e493-43c9-9689-3542f92042e6/Gemini%20update.webp/:/cr=t:0%25,l:0%25,w:100%25,h:100%25/rs=w:1240,cg:true"
Preview:	RIFF.e..WEBPVP8X..............VP8 .d...........>m6.I$".!!.....in..:d$.b/?...H-...@..'b})\|......l?.z...?...........:......C..}..7.o.O..D.....?.O...{..O..........;..........w......_..o...o...........G..b..x....?......?..u.7..._..\|..C...O.H.LN"v<D.x......'c.N....;."v<D.x......'c.N....;."v<D.x......'c.N....;."v<D.x......'c.N....;."v<D.x......'c..N....;."v<D.x......'c.N........5z5.Ec..ST..Q...)(......B!w.X8[...3.'..O.....?82~pd.......%..!......'./...f.A...)....1.a'X..;..\|L.W.nb....Q\|.o..........?82~pd.......'..O.......-.ULN....6._;......u.H...2.....^.Q.'...\|.J.U.D.x......'c.N....;."v<D.x.{9-.._-F..F..5....`...L......8[5+.C..9.k...;$.Rk..q..b.......'..O.....?82~pd.......~...S,~pd..29.}b......'....O.....?82~pd...s...'.....F.I...h.......X%.2.......BAl.......S.?kYv.......{."]U...^.....k.....t....'..O....(.x.p...(%fUtl..g..T.6.i#..b.."5...&.....fS&=...J..g.`...l ... ...x.Z]..oso.I.....y.\|..6..Yq*.rY......c2b)mt..zW..\j.L(....L..S.^......R.F[....d3R.....

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12251)
Category:	dropped
Size (bytes):	12309
Entropy (8bit):	4.691953487987274
Encrypted:	false
SSDEEP:	192:Y9hgK/4PoduPprRZ14Iwh0DyTDE7JPKSlrZWbFQJJZ7FFS3DQwNp/A+Qd:YoKwodgpehxTMPKSlrAMrLS38UKd
MD5:	DFB4BEE7C6378574342CDFCE62FDD1D7
SHA1:	75679AE1470880C7209353283879CB58C010621B
SHA-256:	BFF3C0C2907BCFFD63DEDC687B8FCA61197E8B783C644B3D665AC3620C383E3C
SHA-512:	76C8042532A9F0FF590606A920713515356C9B9C6366A1447C2D184F6AAA4D5880A399570D5764E84100C7619DB5EF061BA6C4E535FA2473E69060F76112DF4B
Malicious:	false
Reputation:	low
Preview:	define("@widget/LAYOUT/c/bs-humanisticFilled-91edd0e1.js",["exports"],(function(e){"use strict";const a=(global.React\|\|guac.react).createElement("path",{fillRule:"evenodd",d:"M16.056 8.255a4.254 4.254 0 1 1-8.507 0 4.254 4.254 0 0 1 8.507 0zm3.052 11.71H4.496a.503.503 0 0 1-.46-.693 8.326 8.326 0 0 1 7.766-5.328 8.326 8.326 0 0 1 7.766 5.328.503.503 0 0 1-.46.694z"});var l={__proto__:null,account:a,person:a,magGlass:(global.React\|\|guac.react).createElement("path",{fillRule:"evenodd",d:"M15.659 14.107c1.048.434 3.446 3.209 3.446 3.209a1.263 1.263 0 0 1 0 1.789 1.263 1.263 0 0 1-1.789 0s-2.775-2.371-3.209-3.419c-.077-.185 0-.591 0-.591l-.369-.362a6.111 6.111 0 0 1-3.656 1.211C6.729 15.944 4 13.265 4 9.972 4 6.679 6.729 4 10.082 4c3.354 0 6.082 2.679 6.082 5.972a5.88 5.88 0 0 1-1.466 3.878l.261.257s.483-.09.7 0zm-5.577.546c2.628 0 4.767-2.1 4.767-4.681s-2.139-4.681-4.767-4.681c-2.628 0-4.767 2.1-4.767 4.681s2.139 4.681 4.767 4.681z"}),cart1:(global.React\|\|guac.react).createElement("path",

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32946), with no line terminators
Category:	downloaded
Size (bytes):	32946
Entropy (8bit):	5.235904732127857
Encrypted:	false
SSDEEP:	768:8QMz7Xi7utc79QusIPgexnKnPxPC7JWU/VHeLNsiQk/c4ur2McV2xdnGYeCjWQTN:si79wq0xPCFWsHuCleZ0j/TsmUq
MD5:	949724A59F24659AFD91DA750BA12415
SHA1:	D380CE5CE3412B61B428EDC51F156FB627FE6CF5
SHA-256:	96DF1A466E42308F30947AD98AE8BE9CC05EEBEC3281C55D79056833F76B1F4F
SHA-512:	C99212CDF76C52183A84EFAD229222F577CF1CA2E438F99808F71142569CF31B6098E420A11379039E2140D99DCB3B28FE76C90BA3365D204A5222EDD7DD0D30
Malicious:	false
Reputation:	low
URL:	https://gemineolegim.godaddysites.com/sw.js
Preview:	(()=>{"use strict";var e={895:()=>{try{self["workbox:cacheable-response:6.4.1"]&&_()}catch(e){}},259:(e,t,s)=>{s.d(t,{B:()=>a}),s(913);class a{constructor(){this.promise=new Promise(((e,t)=>{this.resolve=e,this.reject=t}))}}},125:(e,t,s)=>{s.d(t,{V:()=>a}),s(913);class a extends Error{constructor(e,t){super(((e,...t)=>{let s=e;return t.length>0&&(s+=` :: ${JSON.stringify(t)}`),s})(e,t)),this.name=e,this.details=t}}},524:(e,t,s)=>{s.d(t,{h:()=>a}),s(125),s(913);const a=null},594:(e,t,s)=>{function a(e,t){const s=new URL(e);for(const e of t)s.searchParams.delete(e);return s.href}async function n(e,t,s,n){const r=a(t.url,s);if(t.url===r)return e.match(t,n);const i=Object.assign(Object.assign({},n),{ignoreSearch:!0}),c=await e.keys(t,i);for(const t of c)if(r===a(t.url,s))return e.match(t,n)}s.d(t,{F:()=>n}),s(913)},536:(e,t,s)=>{s.d(t,{x:()=>r}),s(913);const a={googleAnalytics:"googleAnalytics",precache:"precache-v2",prefix:"workbox",runtime:"runtime",suffix:"undefined"!=typeof registratio

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	242257
Entropy (8bit):	5.517949479561666
Encrypted:	false
SSDEEP:	3072:7u8xUu8gpdmSOvTdTK4Tn9TnatTn9TnApfeVH0pdmSO3iTIT7JlDnDQj3jPGIXSQ:Y3A/6hbCxJFxKhUc
MD5:	55BAF821A59FAD53AA754C85AE19D0EA
SHA1:	B1662F5F5B119836E5E9C91C5E4A448BCD6CCC6D
SHA-256:	D26724E378F16CC4135849CCABF5A1BA738C3F4BA952950ACB34E73F24869E83
SHA-512:	791B8AA2E321324B55731B5F69239F86A0602F19FEB833BFC492D525EA132BC23D1C6A3907957992C655742F38AEDD7819A585E6B7A7F3C68126E0DC739DFC1B
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-index3-55bc27af.js
Preview:	define("@widget/LAYOUT/c/bs-index3-55bc27af.js",["radpack","exports","~/c/bs-_rollupPluginBabelHelpers","~/c/bs-overlayTypes","~/c/bs-index2","~/c/bs-index","~/c/bs-dataAids","@wsb/guac-widget-shared@^1/lib/components/ColorSwatch","@wsb/guac-widget-shared@^1/lib/components/Carousel","~/c/bs-navigationDrawer","~/c/bs-searchFormLocations"],(function(e,t,a,r,o,l,n,i,c,s,g){"use strict";class p extends((global.Core\|\|guac["@wsb/guac-widget-core"]).UX2.utils.createElement("Background")){}a._(p,"propTypes",{className:(global.PropTypes\|\|guac["prop-types"]).string,backgroundSize:(global.PropTypes\|\|guac["prop-types"]).string,backgroundPosition:(global.PropTypes\|\|guac["prop-types"]).string,style:(global.PropTypes\|\|guac["prop-types"]).object,imageData:(global.PropTypes\|\|guac["prop-types"]).object,mobileWidthMultiplier:(global.PropTypes\|\|guac["prop-types"]).number,desktopWidthMultiplier:(global.PropTypes\|\|guac["prop-types"]).number,blur:(global.PropTypes\|\|guac["prop-types"]).bool}),a._(p,"defaultPr

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1094
Entropy (8bit):	7.7558676390315515
Encrypted:	false
SSDEEP:	24:2eb4qGsj/n4ALSczJRtrj9WNEmgz9CGNTjqoo1T7SS0lr:2eb4qVM1E/j2EHZCfNP0x
MD5:	89A3E1400E50BC5619F59B9C04E8E5AB
SHA1:	4D9B213D78EA06C1E73429F77A9A12A4B92ECE48
SHA-256:	03F6FA255814F3F1372821692F43F7F2867F6632FD0EF8AE5A515AC57C9E520C
SHA-512:	98D8CA93A8EEDC529356E6B1851DE2B4079D0F29BC51C7BA43D7EABF91E767C45B32B2E244B382EC741B1B2F4848E0358BE90CA354A0CBD94B552D64D7B9583D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....pHYs..........{Rk....IDATX..WK.TE........,u.....0<4...?@....,....!..@..C.&&....q#,..........n.z.&($3sNu.9......v..>I..........Ql.1.... ......HX@...y8.E&S.66a.V.o....W.p...D.;<...d.%.k<......".F..E...p\|..O.....G.X\.9u._C&... ...U...T>@....@..F...fLM....w".= ^..?...Q.[....;....N..L.LG.....c.W..8....?.[....BS.xn8.R9..\O.=.~K....... ..Hej...g...#..(jN>...p<;..~............!...].....6.r..W...d.N....A\|=.a.w..6.,.o..xB.i.6.b'I^...Y.?......w............0.....=.\....r...l...Y.`.N..1o......o.........D.x....1t...q.z.g......".....j...........P.w.\_.q`.......H.e..I.Is....3......n\...v._.{...>]..~.z...x=........R..C?iN........m4.*..8........S...m.R......`..xr...j..-t-........S8.$~......P8...9a.>...FB.K....\.V.}...H.S..0.h.F......).b.K..6....#.v..p....k..1...(~.LG.T..pr....F<..^.EM.hm.....>.9...q..BQS..d%8pn..SF.B.n....3.i!.5.rx..8C(...G%....S%..M....W...Lv.Un........J......L..n.X ..NN.4Q..BE.zS..bDEIG..Q..,3'....V>..

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (330)
Category:	downloaded
Size (bytes):	390
Entropy (8bit):	5.206764812811324
Encrypted:	false
SSDEEP:	6:F9o8fAX7s4Bszv4yA5FKJyR8aBzzNWLc3oqcqAdfFwC6emGHr9EJiKWayfAX7A:HGs4Bkv4yA5sy+go9Hf+eTHr+pWOA
MD5:	C86B7F8224FA45FB1682AC94D8F75AC6
SHA1:	9561F67AAE74B14702DB79C22F9C7F9E6F3B3239
SHA-256:	010083B88E95F18CEFDB90796ACCE02073E91FC8DFEFB27A7F5F3F75529E4906
SHA-512:	B239BAC43D973D0076F4E0C0720906560B0AED76472F50202841B2EABB66C5AD5774E35449007AA2DC3E6A096330AB14D1AA9374645136C89A20B45E4BBDBC52
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/c/interopRequireDefault-c83974f7.js
Preview:	define("@wsb/guac-widget-shared/c/interopRequireDefault-c83974f7.js",["exports","~/c/_commonjsHelpers"],(function(e,o){"use strict";var t=o.c((function(e){e.exports=function(e){return e&&e.__esModule?e:{default:e}},e.exports.__esModule=!0,e.exports.default=e.exports}));e.i=t})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=interopRequireDefault-c83974f7.js.map.

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	266
Entropy (8bit):	5.182741116673583
Encrypted:	false
SSDEEP:	6:F9oNS2BSyRbWsCJwvYtMe1mGHr9EJiKWaO6SZF:HgS2BSyEsCJB1THr+pWIS7
MD5:	8578A331AD09BB2EF6359FEC3916BEFC
SHA1:	38B68F5C02CBDB6E29C50F8858710E0392B0B8D6
SHA-256:	3D7E7552E3801941A408C504AA732223FE2BED5D12E248680847D772182CB639
SHA-512:	B034DDDA04F8DEE0D174651D13A89AF9FE5ED28E1E81FAB229AFA119B9B0A9C418E324FFCE28E909D8D596BEAE98FA1AC0BA09C74E7E7689B945C032088C5E18
Malicious:	false
Reputation:	low
Preview:	define("@wsb/guac-widget-shared/c/_react_commonjs-external-a1351e34.js",["exports"],(function(e){"use strict";const n=global.React\|\|guac.react;e._=n})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=_react_commonjs-external-a1351e34.js.map.

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3043)
Category:	dropped
Size (bytes):	3092
Entropy (8bit):	5.221416224205306
Encrypted:	false
SSDEEP:	96:/NSXU/vuELNSXtiF7ANSXTJrrBNSXt7X5wqh:VcKncc7ycd3cd5w8
MD5:	852CBC5322260E00B44F2C682F88B2C7
SHA1:	BCAF229E6134F43EB5F974C9891E4D16FAF1D344
SHA-256:	BAE437DBEFE58377D88C9D579DB7C59F4202F3FBF88866D0005FB375BE6B2CD7
SHA-512:	F031B43F7FA0DA001F71DDCFFE5E322A94C5F1F52F7C4D67D34880243D9D361AC55C0E5001DD004390867CB31E5DEF5D4D9282E6E2ECB9AEC0E880AA5B786BA3
Malicious:	false
Reputation:	low
Preview:	define("@widget/LAYOUT/c/bs-loaders-fffeeba5.js",["exports","~/c/bs-index3"],(function(e,a){"use strict";e.B=function(e){const{SVG:c}=(global.Core\|\|guac["@wsb/guac-widget-core"]).UX2.Element;return this.merge({tag:"div",children:(global.React\|\|guac.react).createElement((global.React\|\|guac.react).Fragment,null,(global.React\|\|guac.react).createElement(c,{viewBox:"0 0 44 44",width:"3em",height:"3em",fill:"currentColor"},(global.React\|\|guac.react).createElement("path",{fillRule:"evenodd",d:"M31.968 23H12.032c-.57 0-1.032-.448-1.032-1 0-.553.462-1 1.032-1h19.936c.57 0 1.032.447 1.032 1 0 .552-.462 1-1.032 1"})),(global.React\|\|guac.react).createElement((global.Core\|\|guac["@wsb/guac-widget-core"]).UX.Style,null,a.k.loaderBalance)),style:{"> svg":{animation:"balance 1s infinite cubic-bezier(.62,.06,.33,.79);",transformOrigin:"center"}}},e)},e.C=function(e){const{SVG:c}=(global.Core\|\|guac["@wsb/guac-widget-core"]).UX2.Element;return this.merge({tag:"div",children:(global.React\|\|guac.react).crea

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (330)
Category:	dropped
Size (bytes):	390
Entropy (8bit):	5.206764812811324
Encrypted:	false
SSDEEP:	6:F9o8fAX7s4Bszv4yA5FKJyR8aBzzNWLc3oqcqAdfFwC6emGHr9EJiKWayfAX7A:HGs4Bkv4yA5sy+go9Hf+eTHr+pWOA
MD5:	C86B7F8224FA45FB1682AC94D8F75AC6
SHA1:	9561F67AAE74B14702DB79C22F9C7F9E6F3B3239
SHA-256:	010083B88E95F18CEFDB90796ACCE02073E91FC8DFEFB27A7F5F3F75529E4906
SHA-512:	B239BAC43D973D0076F4E0C0720906560B0AED76472F50202841B2EABB66C5AD5774E35449007AA2DC3E6A096330AB14D1AA9374645136C89A20B45E4BBDBC52
Malicious:	false
Reputation:	low
Preview:	define("@wsb/guac-widget-shared/c/interopRequireDefault-c83974f7.js",["exports","~/c/_commonjsHelpers"],(function(e,o){"use strict";var t=o.c((function(e){e.exports=function(e){return e&&e.__esModule?e:{default:e}},e.exports.__esModule=!0,e.exports.default=e.exports}));e.i=t})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=interopRequireDefault-c83974f7.js.map.

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (516)
Category:	dropped
Size (bytes):	583
Entropy (8bit):	5.275794886448015
Encrypted:	false
SSDEEP:	12:csTLaBSyTUXaPXAbDTc/NeL2QiTj+RVnIYQ2ofXgYFw1THr+pWT0Lv:cTBLTUXaPXAPTc/tTj+Hn/Q2CQYytHrI
MD5:	0D42FFB998A9CF7C25824CF365C7D0C9
SHA1:	7A95B87AC3B0C813F195EA46EFB9E792023EAFBE
SHA-256:	3418AA0FB5D19C3909DD89CCF081C9B59EBAD2A0334EED58373ED395D228487A
SHA-512:	EE2711CED0E8936C0DDAE9CFBE1FFAFABF56766C4611DC5B68C50919EDFC6CD1F3C850A0599ED107E8F6555D54BB46B3395B957A74697BEA2A749814C270C0FD
Malicious:	false
Reputation:	low
Preview:	define("@widget/LAYOUT/c/bs-_rollupPluginBabelHelpers-e83be766.js",["exports"],(function(e){"use strict";function n(){return n=Object.assign?Object.assign.bind():function(e){for(var n=1;n<arguments.length;n++){var r=arguments[n];for(var t in r)Object.prototype.hasOwnProperty.call(r,t)&&(e[t]=r[t])}return e},n.apply(this,arguments)}e._=function(e,n,r){return n in e?Object.defineProperty(e,n,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[n]=r,e},e.a=n})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=bs-_rollupPluginBabelHelpers-e83be766.js.map.

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (5177)
Category:	downloaded
Size (bytes):	18062
Entropy (8bit):	5.441449883259394
Encrypted:	false
SSDEEP:	192:H3oJq3pFosqFTp2mAvwithIm1r53+uyFvz3gkHjbH1jZRAm2jwSAxiMzy+NjwSA3:HF3pUT2bTtXGDgk/RdSQUSMlzQwn
MD5:	F107B02059ECA4FB3A710E5E597EFFD6
SHA1:	237FFE9789A43C526F3895999AAB5E30EF48DB9E
SHA-256:	D31FDB1EB57C1681E83FCE4892BBFFB75BA2316A04E4D453C4B8ACF302879992
SHA-512:	F0DC6DDE983016489EDC0CFB5EF53F5C18EE9B1B897A769BCCF2F679D6D3A1957855B0E0D1932BFD87EFC033A8DAC6E53BAC71B07474129E6B7B371F1A7955C7
Malicious:	false
Reputation:	low
URL:	https://gemineolegim.godaddysites.com/
Preview:	<!DOCTYPE html><html lang="en-IN"><head><link rel="icon" href="//img1.wsimg.com/isteam/ip/7b447f14-e493-43c9-9689-3542f92042e6/favicon/0e61da3a-6a4f-4937-b58d-d14f74e69afc.png/:/rs=w:16,h:16,m" sizes="16x16"/><link rel="icon" href="//img1.wsimg.com/isteam/ip/7b447f14-e493-43c9-9689-3542f92042e6/favicon/0e61da3a-6a4f-4937-b58d-d14f74e69afc.png/:/rs=w:24,h:24,m" sizes="24x24"/><link rel="icon" href="//img1.wsimg.com/isteam/ip/7b447f14-e493-43c9-9689-3542f92042e6/favicon/0e61da3a-6a4f-4937-b58d-d14f74e69afc.png/:/rs=w:32,h:32,m" sizes="32x32"/><link rel="icon" href="//img1.wsimg.com/isteam/ip/7b447f14-e493-43c9-9689-3542f92042e6/favicon/0e61da3a-6a4f-4937-b58d-d14f74e69afc.png/:/rs=w:48,h:48,m" sizes="48x48"/><link rel="icon" href="//img1.wsimg.com/isteam/ip/7b447f14-e493-43c9-9689-3542f92042e6/favicon/0e61da3a-6a4f-4937-b58d-d14f74e69afc.png/:/rs=w:64,h:64,m" sizes="64x64"/><meta charSet="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=d

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (786)
Category:	dropped
Size (bytes):	842
Entropy (8bit):	5.258991916821592
Encrypted:	false
SSDEEP:	24:caBL+qMLVRGqawadlH0rVRrkAeT25Z2HrIY/:jKqSVMqzarH0brkAeq5ZSrI+
MD5:	31B521136207C11FF1F9985264424E8A
SHA1:	9EAF6B9717979CAEB5C7E846E17B2A89A08DC266
SHA-256:	C818B56446AE5A8D0466FC9C51D85104584E36F6D8B1C77E08A2D354E845E2CD
SHA-512:	DB2A8825F8C67B6361B86F5BB1DEE38089DD57E5E74ECBA335EF7D82D9D5E5AD3F64C07195FCDF700415F6F09B11BDB6A20410462ABAEC443335F19ACF8265B1
Malicious:	false
Reputation:	low
Preview:	define("@widget/LAYOUT/c/bs-themeOverrides-e736c017.js",["exports"],(function(e){"use strict";(global.Core\|\|guac["@wsb/guac-widget-core"]).constants;e.a=e=>{let{sectionHeadingHR:t}=e;return t?{sectionHeadingHR:t}:{}},e.b=e=>{let{sectionHeadingColor:t}=e;return{HIGHLIGHT:{style:{color:"highlight"}},HIGH_CONTRAST:{style:{color:"highContrast"}}}[t]\|\|{}},e.c=e=>{let{sectionHeadingSize:t}=e;return t?{style:{fontSize:t}}:{}},e.s=e=>{let{sectionHeadingAlignment:t}=e;return{LEFT:{style:{textAlign:"left","@md":{textAlign:"left"}},alignmentOption:"left"},CENTER:{style:{textAlign:"center","@md":{textAlign:"center"}},alignmentOption:"center"},RIGHT:{style:{textAlign:"right","@md":{textAlign:"right"}},alignmentOption:"right"}}[t]\|\|{}}})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=bs-themeOverrides-e736c017.js.map.

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3043)
Category:	downloaded
Size (bytes):	3092
Entropy (8bit):	5.221416224205306
Encrypted:	false
SSDEEP:	96:/NSXU/vuELNSXtiF7ANSXTJrrBNSXt7X5wqh:VcKncc7ycd3cd5w8
MD5:	852CBC5322260E00B44F2C682F88B2C7
SHA1:	BCAF229E6134F43EB5F974C9891E4D16FAF1D344
SHA-256:	BAE437DBEFE58377D88C9D579DB7C59F4202F3FBF88866D0005FB375BE6B2CD7
SHA-512:	F031B43F7FA0DA001F71DDCFFE5E322A94C5F1F52F7C4D67D34880243D9D361AC55C0E5001DD004390867CB31E5DEF5D4D9282E6E2ECB9AEC0E880AA5B786BA3
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-loaders-fffeeba5.js
Preview:	define("@widget/LAYOUT/c/bs-loaders-fffeeba5.js",["exports","~/c/bs-index3"],(function(e,a){"use strict";e.B=function(e){const{SVG:c}=(global.Core\|\|guac["@wsb/guac-widget-core"]).UX2.Element;return this.merge({tag:"div",children:(global.React\|\|guac.react).createElement((global.React\|\|guac.react).Fragment,null,(global.React\|\|guac.react).createElement(c,{viewBox:"0 0 44 44",width:"3em",height:"3em",fill:"currentColor"},(global.React\|\|guac.react).createElement("path",{fillRule:"evenodd",d:"M31.968 23H12.032c-.57 0-1.032-.448-1.032-1 0-.553.462-1 1.032-1h19.936c.57 0 1.032.447 1.032 1 0 .552-.462 1-1.032 1"})),(global.React\|\|guac.react).createElement((global.Core\|\|guac["@wsb/guac-widget-core"]).UX.Style,null,a.k.loaderBalance)),style:{"> svg":{animation:"balance 1s infinite cubic-bezier(.62,.06,.33,.79);",transformOrigin:"center"}}},e)},e.C=function(e){const{SVG:c}=(global.Core\|\|guac["@wsb/guac-widget-core"]).UX2.Element;return this.merge({tag:"div",children:(global.React\|\|guac.react).crea

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	221
Entropy (8bit):	5.32955468303281
Encrypted:	false
SSDEEP:	6:FSPD8WUDDSBSyFbNemGHr9EJiKWaEwI8WUDDn:c5UDGBSyCTHr+pWTwGUDr
MD5:	8F12765EB30FBDCFCDC116D13F7FC272
SHA1:	506E45B7D3930756EACCE0DAD449A3C8CDB3EAC6
SHA-256:	265995EB76326E95613750F6F6570B850F5C22280D262DE9B9632A16CEB98B9B
SHA-512:	7AA2F396B105BCCF2B943FD2AC60929D8BF3A0EB8574B77451CB29816DF8ACDCD07694B526D7E4585F849DFDA3A0FE6E95661179E13F682DBF54098D98154BFB
Malicious:	false
Reputation:	low
Preview:	define("@widget/LAYOUT/c/bs-navigationDrawer-27f5f1f5.js",["exports"],(function(i){"use strict";i.N="-249vw"})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=bs-navigationDrawer-27f5f1f5.js.map.

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1211)
Category:	downloaded
Size (bytes):	1261
Entropy (8bit):	5.340315611373646
Encrypted:	false
SSDEEP:	24:/BLEQuC0F6lq5lEYwy5WqogVeESgVeId4PXsHrIW:Z4jFYq5lpwW7vdd4PXgrIW
MD5:	CB9BFA0FBDD957FBE7F4841B70341DB2
SHA1:	9CAD12A3580D3E4D340CB867E88B687C75564C5A
SHA-256:	513864FD4EBD1926F3E1E78B436A90C2BC3A5D16835B50415E7B318D7DEEC2A2
SHA-512:	DF98C3262F64DA4EA9CACF75FF7CB685D71B69142D89F726AB3E13CF6F25432DC395D7C0950E1632F0E519F135B02FDA0753739189E51F1C9210ACA6692551DD
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/ColorSwatch-4196a0a9.js
Preview:	define("@wsb/guac-widget-shared/lib/components/ColorSwatch-4196a0a9.js",["exports"],(function(e){"use strict";const o=e=>{let{color:o,isActive:t,inStock:r,isSmall:l}=e;const a=r\|\|void 0===r,c=l?"24px":"38px",n=l?"20px":"32px",i={borderRadius:"50%",borderWidth:"1px",borderStyle:"solid"},s={outer:{...i,display:"flex",alignItems:"center",justifyContent:"center",width:c,height:c,borderColor:t?"lowContrast":"transparent"},inner:{...i,borderColor:"ultraLowContrast",color:"ultraLowContrast",width:n,height:n,background:a?o:`linear-gradient(to left top, ${o} calc(50% - 1px), currentColor, ${o} calc(50% + 1px) )`}};return(global.React\|\|guac.react).createElement((global.Core\|\|guac["@wsb/guac-widget-core"]).UX2.Element.Block,{style:s.outer},(global.React\|\|guac.react).createElement((global.Core\|\|guac["@wsb/guac-widget-core"]).UX2.Element.Block,{style:s.inner}))};o.propTypes={color:(global.PropTypes\|\|guac["prop-types"]).string.isRequired,isActive:(global.PropTypes\|\|guac["prop-types"]).bool,inStock:(

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (829)
Category:	dropped
Size (bytes):	876
Entropy (8bit):	5.561256771975726
Encrypted:	false
SSDEEP:	24:cEBLv5pqMIuHMnH7cmo17Jv0ySaUKdei9hJQE2HrIYpb:f75pqaowmWJcySaUKdTfcrIC
MD5:	9219CF782ED219BD3929A51E99503BC2
SHA1:	6AAC399854EC0405949566FAFDCA8C121F0CDA58
SHA-256:	89388608D7BCECED5AD74231681FFCE822AD580ACB9FD7E492970176E3E38347
SHA-512:	D421851026422D46E1561FA852084CE7B41E32C7451DCF85900838265D330F09389DA18F4D8A5FAF3E0A4076508BA7E93EA9C5F8B5B32ACF32205C9B6E65E709
Malicious:	false
Reputation:	low
Preview:	define("@widget/LAYOUT/c/bs-index-4e26cd6b.js",["exports"],(function(o){"use strict";const{widgetTypes:e,colorPackCategories:t,themeConstants:n,buttons:l}=(global.Core\|\|guac["@wsb/guac-widget-core"]).constants,s=(global.keyMirror\|\|guac.keymirror)({NONE:null,SMALL_UNDERLINE:null,FULL_UNDERLINE:null,INLINE:null}),i=24,r=n.DEFAULT_OVERLAY_TEXT_SHADOW,a={about4:i,introduction5:i,content5:i,ordering1:i,payment2:i,zillow1:i,reviews1:i,rss1:i,subscribe3:i,mlsSearch1:i,contact10:i,countdown1:i,quote1:i},c={spotlight:{fill:l.fills.SOLID},external:{fill:l.fills.NONE,decoration:l.decorations.NONE,shadow:l.shadows.NONE}};o.A="365px",o.B="24px",o.C=c,o.D=25,o.I=28,o.M=40,o.O="0px 2px 10px rgba(0, 0, 0, 0.3)",o.S=40,o.W={about1:!0},o.a=r,o.b="18px",o.c=a,o.d="600px",o.e=t,o.s=s})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=bs-index-4e26cd6b.js.map.

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23126)
Category:	dropped
Size (bytes):	23189
Entropy (8bit):	4.539345073526186
Encrypted:	false
SSDEEP:	384:7UuK/6kvTqLYddu4bV/yiAhSs1hiAhAiSeG3dvBRU+SMkc6e:QuJ5wI45/c1+ipG3TJSMkU
MD5:	3D092EF4ABA019B14F01C40747E40554
SHA1:	1C26145272FCF4CA91AF501288CCE84B1BFFD38B
SHA-256:	B4C48B77BBE6BBACF7D16BDAA81F5509FB8EA0FBFDDFBF2D12307F7A88518846
SHA-512:	F7180D3D98CF17556E27D62EF719DD9E35041679BAB74BD49BD898EB0FB62018EF6C6B64D06E9E0CAC4A646154DB93A1D35096B098DDCFF7B02CD6889A29DA0A
Malicious:	false
Reputation:	low
Preview:	define("@widget/LAYOUT/c/bs-defaultSocialIconPack-91835b99.js",["exports"],(function(a){"use strict";const e=(global.React\|\|guac.react).createElement("path",{d:"M12 2C6.477 2 2 6.477 2 12s4.477 10 10 10 10-4.477 10-10A10 10 0 0 0 12 2zM7.055 13.745a.97.97 0 0 1-.073-.509l.182-2.072a.687.687 0 0 1 .29-.364c.182-.11.582.036.582.036l2.619 1.31s.4.181.4.509c-.037.436-.219.436-.364.509l-3.055.654s-.436.146-.581-.073zm4.945.473l-.036 3.018s.036.437-.219.51c-.144.02-.291.02-.436 0l-2.036-.655a.6.6 0 0 1-.291-.364c-.073-.218.182-.545.182-.545l2.036-2.255s.327-.29.582-.145c.254.145.254.436.218.436zm-.364-3.236a.687.687 0 0 1-.581-.182l-2.51-3.418s-.363-.4-.181-.691a.64.64 0 0 1 .363-.291l2.4-.873c.11-.036.218-.145.582.073.255.145.291.655.291.655l.036 4.145s-.072.51-.4.582zm1.419.582l1.636-2.582s.145-.364.436-.327c.152.002.29.085.364.218l1.382 1.636a.676.676 0 0 1 .072.473c-.072.218-.472.363-.472.363l-2.91.837s-.4.073-.545-.182c-.145-.255 0-.51.037-.436zm3.781 3.309L15.6 16.655a.815.815 0 0 1-.4

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (63425)
Category:	downloaded
Size (bytes):	314664
Entropy (8bit):	5.468234877621491
Encrypted:	false
SSDEEP:	3072:OfpdUw9ySK7x5jfw71wUNdFsh0q312hgBQKQYctGfziZo/c0z6iv8W:g8w9yzc71rNVq31JBQKctGfWZoUW
MD5:	31E273E89FB56A44D86D206F1BCDCDB4
SHA1:	C1D25BAD06F8485EB76D39134C4BEC22A44E5534
SHA-256:	9E3C0FE8C9D6F0325C883709CEDE8898CE5D70F0640420ED058E0709C636531B
SHA-512:	53EFED1036FCC4F3D88D0269BA1348950DB5813B7B7AFE0548DE536AC7532BBEB7451E0BE3537C4FFBA5FE5A1CB1974243793AF0D958537C060EF01DF000674F
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.28.5.js
Preview:	var Core=function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/",n(n.s=68)}([fun

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (20947)
Category:	dropped
Size (bytes):	24399
Entropy (8bit):	5.2375624098374
Encrypted:	false
SSDEEP:	384:UNoz5VHqeg0VzpiyiwffnnPacVorjFtteVT36FCLCpKe9plq2D:ME5qeg0Rp8wffnPVEjFtteEFiSbbl3D
MD5:	753CB19EE1A756E46FAA0F118B1B4E01
SHA1:	248885E3BFE7E71989BA9FFFB33B6EFF18166FEC
SHA-256:	ED9FFA2FBA5ECC75AF2F99E6EBADD5B927086F258037C2A848E94449CC579991
SHA-512:	4482C4D5F2F93DE8E095C549994A7783FA55CD1A6C4C9CC5E697CC2E2F00C98B04D5CB958CC1ADC4D0EF67F300BE014E112AE1D992487F40EB25BC93E8B47AAA
Malicious:	false
Reputation:	low
Preview:	define("@wsb/guac-widget-shared/lib/components/Carousel-3d82957b.js",["exports","~/c/_rollupPluginBabelHelpers","~/c/_commonjsHelpers","~/c/interopRequireDefault","~/c/_react_commonjs-external"],(function(e,t,n,i,r){"use strict";var s=n.c((function(e){function t(n){return e.exports=t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},e.exports.__esModule=!0,e.exports.default=e.exports,t(n)}e.exports=t,e.exports.__esModule=!0,e.exports.default=e.exports})),o=n.c((function(e){var t=s.default;function n(e){if("function"!=typeof WeakMap)return null;var t=new WeakMap,i=new WeakMap;return(n=function(e){return e?i:t})(e)}e.exports=function(e,i){if(!i&&e&&e.__esModule)return e;if(null===e\|\|"object"!==t(e)&&"function"!=typeof e)return{default:e};var r=n(i);if(r&&r.has(e))return r.get(e);var s={},o=Object.defineProperty&&Object.getOwnPropertyDescr

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (522)
Category:	downloaded
Size (bytes):	586
Entropy (8bit):	5.2378887904744955
Encrypted:	false
SSDEEP:	12:H/QL7ANBSyTUXaPXAbDTc/NeL2QiTj+RVngQ2ofXgYhMYTHr+pWgL7AO:cANBLTUXaPXAPTc/tTj+HngQ2CQY/HrQ
MD5:	FADB3719FFA2A9E96CDC64FFEA0220FA
SHA1:	B9B00833E59E99ECE036B518D8429AF5EFEC1163
SHA-256:	E8A5463FF98210D3017DEEE55D5A287AD01AAA11DBE7DEB7D07F7D15D7F609F2
SHA-512:	C6E3581F7676B3204BC0FC8D4DCCF5A383FDE6F17A27D2F855EBEE3D205459BD9866A219808EAB1D4D4B37676D13B516AF546C7125C3FFA22CA74B995A180644
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/c/_rollupPluginBabelHelpers-8ce54c82.js
Preview:	define("@wsb/guac-widget-shared/c/_rollupPluginBabelHelpers-8ce54c82.js",["exports"],(function(e){"use strict";function n(){return n=Object.assign?Object.assign.bind():function(e){for(var n=1;n<arguments.length;n++){var r=arguments[n];for(var t in r)Object.prototype.hasOwnProperty.call(r,t)&&(e[t]=r[t])}return e},n.apply(this,arguments)}e._=n,e.a=function(e,n,r){return n in e?Object.defineProperty(e,n,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[n]=r,e}})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=_rollupPluginBabelHelpers-8ce54c82.js.map.

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1022
Entropy (8bit):	7.223490622143814
Encrypted:	false
SSDEEP:	24:KdIvJFZpEmZgaJXTfiACR5egPVs6QAznak4l:KdiJLpE+rcJWn
MD5:	E3D3071AACAE116052C952E62B1E8A28
SHA1:	ECB0570A61E69F7F215DA1E53ECA982835A9E55C
SHA-256:	22F615E5BF239105D5C9A6863A6C4ECF830A419A7444DF11E9EB5E8098401AEB
SHA-512:	ADEF7DF9756D3ADD2C9094A1FC03174413F1F90FBD00B177FBCB43EFCEBD114B6C07FF87940BE8B9A3CE915888A3C1C8BADA740E121ADB4C9FE4A6475293938A
Malicious:	false
Reputation:	low
URL:	"https://img1.wsimg.com/isteam/ip/7b447f14-e493-43c9-9689-3542f92042e6/favicon/0e61da3a-6a4f-4937-b58d-d14f74e69afc.png/:/rs=w:32,h:32,m"
Preview:	RIFF....WEBPVP8X..............ALPH.......m..Io..d9.....Z.&.0.m.Y.v[..,W%.;H...!"&...}.T4Y....t.C,;l.d..z.X...Ao...O7.h..4..C.'.....[......2....&.t.....L.a..R.x...#.."..?.C.8d-..y.K.z=..e....C.).....I...........f........'._>..{K..0J.......gl.F.f...^Q..2....s.Y.O%.....p2.....,L@l...c.~.y)..I\....5.7..I...J..Y..V.T&.C.._...(.....i...b.a..i.......1.,.AU!H..PG..2.U...^.eX.....#.).9.......:../.<....P......../.H.K;..2X,..i2.3.<.$..fh..9.... ...."=.@..!....wl..O._{..KQ5....W...O.=.e\....D...5}...VP8 &........* . .>m(.E."!....@...N.B:...9c.O.).x.}.v.......P.%..@............0...qi5Ex.....,.n..<....=.$..6RD.:._.YoD...?.l{.^=..M=....[e...?..-...<.a%#~2C......fZ.tuJ)4...d.F.....D'...U....$..E\|5.OK...~.!z.JE........b.:vB...%)..Q...pX......>...+.0._.O(\|.h.....n@..[..x....k....7\|......EXIF....Exif..II*...........................V...........^...(.......................i.......f.......8c......8c................0210....................0100..................

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], baseline, precision 8, 1240x648, components 3
Category:	dropped
Size (bytes):	50723
Entropy (8bit):	7.7071805821875925
Encrypted:	false
SSDEEP:	768:+OuTH0EArrB9DPEVgNavIOPJCJ7CgyJd+jVZDPlLpKxI7qjwmCnQfpicLE8Zwq6y:+/OnvDP9kvIYCJ7wKjrDLKxMqEmD28Hb
MD5:	E1D9D9A3C4BFFB82E06B9772EF979858
SHA1:	848BB962C5DAA972B5A7828A18DB7D930AC2EDEB
SHA-256:	08714D16EB1C4A8D6CE1D4E2B768D10051BE24429015920E7143CFE24767D9D9
SHA-512:	3095022E6432F88EB28293CF191CC1D25842CBEC2617081E8F17175FEA1FAD9C75EF2849243F32AAB87C54EF9DA5D80118550120720D50BDE51B1C375C99A697
Malicious:	false
Reputation:	low
Preview:	......Exif..II...........................V...........^...(.......................i.......f.......8c......8c................0210....................0100...........................................C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...........".........................................^...........................!1.AQ.."aq..256Urst.........#34BR....7FSTVb...$%&'...CDEd..c.eu.................................$.....................!..1...A2BQ"#............?............................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6969)
Category:	dropped
Size (bytes):	7039
Entropy (8bit):	5.2361798012427245
Encrypted:	false
SSDEEP:	192:oLb1MP+fzUiru5feyeCVL+izwhVQ9iPzmHFnYJsvIFO/Esh:oLxmCUiru5fneCVL+izwhVQ9ibmHFnYK
MD5:	DAD318033A09F6ABA68D6EE66F1CDACE
SHA1:	F538D0C3973677A6CDF14E9223AFB432FCF1CF8C
SHA-256:	E8FCFB1552D918B5D9FD715F711255465D6DD4348B4DCEDD362CB00DF9D3DBEF
SHA-512:	6024483003089661D9799000202895EC4ACA6CDEC816BDBC786F6800536AA8E6B93D8B8CA81E1EB6B8122C72CD14172C94C6C49953FFA536E49D71DD7F47499F
Malicious:	false
Reputation:	low
Preview:	define("@widget/LAYOUT/bs-layout13-Theme-publish-Theme-7252afe2.js",["exports","~/c/bs-_rollupPluginBabelHelpers","~/c/bs-index3","~/c/bs-themeOverrides","~/c/bs-legacyOverrides","~/c/bs-humanisticFilled","~/c/bs-defaultSocialIconPack","~/c/bs-loaders","~/c/bs-index","~/c/bs-overlayTypes"],(function(e,t,r,o,a,n,i,s,l,g){"use strict";const{colorPackCategories:d,buttons:c}=(global.Core\|\|guac["@wsb/guac-widget-core"]).constants,{LIGHT:u,LIGHT_ALT:m,LIGHT_COLORFUL:h,DARK:p,DARK_ALT:y,DARK_COLORFUL:f,COLORFUL:b,MVP:x}=(global.Core\|\|guac["@wsb/guac-widget-core"]).constants.paintJobs,I={[g.F]:"category-overlay",[g.b]:"category-overlay",[g.I]:"category-solid",[g.B]:"category-overlay",[g.L]:"category-overlay"},S={defaultHeaderTreatment:g.F,imageTreatments:I,heroContentItems:["tagline","tagline2","cta"],nonHeroContentItems:["phone"]};var C={id:"layout13",name:"modern",packs:{color:"005",font:"league-spartan"},logo:{font:"primary"},packCategories:{color:d.ACCENT},headerProperties:{alignmentOption

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12251)
Category:	downloaded
Size (bytes):	12309
Entropy (8bit):	4.691953487987274
Encrypted:	false
SSDEEP:	192:Y9hgK/4PoduPprRZ14Iwh0DyTDE7JPKSlrZWbFQJJZ7FFS3DQwNp/A+Qd:YoKwodgpehxTMPKSlrAMrLS38UKd
MD5:	DFB4BEE7C6378574342CDFCE62FDD1D7
SHA1:	75679AE1470880C7209353283879CB58C010621B
SHA-256:	BFF3C0C2907BCFFD63DEDC687B8FCA61197E8B783C644B3D665AC3620C383E3C
SHA-512:	76C8042532A9F0FF590606A920713515356C9B9C6366A1447C2D184F6AAA4D5880A399570D5764E84100C7619DB5EF061BA6C4E535FA2473E69060F76112DF4B
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-humanisticFilled-91edd0e1.js
Preview:	define("@widget/LAYOUT/c/bs-humanisticFilled-91edd0e1.js",["exports"],(function(e){"use strict";const a=(global.React\|\|guac.react).createElement("path",{fillRule:"evenodd",d:"M16.056 8.255a4.254 4.254 0 1 1-8.507 0 4.254 4.254 0 0 1 8.507 0zm3.052 11.71H4.496a.503.503 0 0 1-.46-.693 8.326 8.326 0 0 1 7.766-5.328 8.326 8.326 0 0 1 7.766 5.328.503.503 0 0 1-.46.694z"});var l={__proto__:null,account:a,person:a,magGlass:(global.React\|\|guac.react).createElement("path",{fillRule:"evenodd",d:"M15.659 14.107c1.048.434 3.446 3.209 3.446 3.209a1.263 1.263 0 0 1 0 1.789 1.263 1.263 0 0 1-1.789 0s-2.775-2.371-3.209-3.419c-.077-.185 0-.591 0-.591l-.369-.362a6.111 6.111 0 0 1-3.656 1.211C6.729 15.944 4 13.265 4 9.972 4 6.679 6.729 4 10.082 4c3.354 0 6.082 2.679 6.082 5.972a5.88 5.88 0 0 1-1.466 3.878l.261.257s.483-.09.7 0zm-5.577.546c2.628 0 4.767-2.1 4.767-4.681s-2.139-4.681-4.767-4.681c-2.628 0-4.767 2.1-4.767 4.681s2.139 4.681 4.767 4.681z"}),cart1:(global.React\|\|guac.react).createElement("path",

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1824)
Category:	dropped
Size (bytes):	1874
Entropy (8bit):	4.934407477113311
Encrypted:	false
SSDEEP:	48:fCEX2kA83zdkJi1lvietWdcy0cy7mdOrxGfrIK:aE33zdkJiDvietWdR0R7mdOFYX
MD5:	EDC15AD5DAAC3CFA744BFFDB1E0174BE
SHA1:	E314A5CA702D0E77B2C2C023ADDADE266EA223B2
SHA-256:	3B54AEACFDA01BE53800632989A82F6F5A7F92E927159A37A4324B38D3DFFEF8
SHA-512:	8B8805D67FF993BD406EEB6682B1578537A3D6B7DC6711BE7152120689C77147D8C24351ACEBD2A06AE9B81D858EAED19C44E6792FE3C147EEAF3133C635589B
Malicious:	false
Reputation:	low
Preview:	define("@widget/LAYOUT/c/bs-dataAids-6a839d53.js",["exports"],(function(E){"use strict";var R=(global.keyMirror\|\|guac.keymirror)({BACKGROUND_IMAGE_RENDERED:null,HAMBURGER_MENU_LINK:null,HEADER_WIDGET:null,HEADER_SECTION:null,HEADER_VIDEO:null,HEADER_VIDEO_EMBED_WRAPPER:null,HEADER_VIDEO_EMBED:null,HEADER_VIDEO_EMBED_INSET_POSTER:null,HEADER_VIDEO_EMBED_FILL_POSTER:null,HEADER_VIDEO_BACKGROUND:null,HEADER_SLIDESHOW:null,HEADER_SLIDE:null,HEADER_HERO_SLIDE:null,HEADER_PHONE_RENDERED:null,HEADER_PIPE_RENDERED:null,HEADER_ADDRESS_RENDERED:null,HEADER_LOGO_RENDERED:null,HEADER_LOGO_IMAGE_RENDERED:null,HEADER_LOGO_OVERHANG_CONTAINER:null,HEADER_LOGO_TEXT_RENDERED:null,HEADER_TAGLINE_RENDERED:null,HEADER_TAGLINE2_RENDERED:null,HEADER_NAV_RENDERED:null,HEADER_CTA_BTN:null,CART_ICON_RENDER:null,CART_ICON_COUNT:null,CART_ICON_PIPE:null,CART_TEXT:null,CART_DROPDOWN_RENDERED:null,SEARCH_FORM_RENDERED:null,SEARCH_ICON_RENDERED:null,SEARCH_ICON_RENDERED_OPEN:null,SEARCH_CLOSE_RENDERED:null,SEARCH_FI

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (829)
Category:	downloaded
Size (bytes):	876
Entropy (8bit):	5.561256771975726
Encrypted:	false
SSDEEP:	24:cEBLv5pqMIuHMnH7cmo17Jv0ySaUKdei9hJQE2HrIYpb:f75pqaowmWJcySaUKdTfcrIC
MD5:	9219CF782ED219BD3929A51E99503BC2
SHA1:	6AAC399854EC0405949566FAFDCA8C121F0CDA58
SHA-256:	89388608D7BCECED5AD74231681FFCE822AD580ACB9FD7E492970176E3E38347
SHA-512:	D421851026422D46E1561FA852084CE7B41E32C7451DCF85900838265D330F09389DA18F4D8A5FAF3E0A4076508BA7E93EA9C5F8B5B32ACF32205C9B6E65E709
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-index-4e26cd6b.js
Preview:	define("@widget/LAYOUT/c/bs-index-4e26cd6b.js",["exports"],(function(o){"use strict";const{widgetTypes:e,colorPackCategories:t,themeConstants:n,buttons:l}=(global.Core\|\|guac["@wsb/guac-widget-core"]).constants,s=(global.keyMirror\|\|guac.keymirror)({NONE:null,SMALL_UNDERLINE:null,FULL_UNDERLINE:null,INLINE:null}),i=24,r=n.DEFAULT_OVERLAY_TEXT_SHADOW,a={about4:i,introduction5:i,content5:i,ordering1:i,payment2:i,zillow1:i,reviews1:i,rss1:i,subscribe3:i,mlsSearch1:i,contact10:i,countdown1:i,quote1:i},c={spotlight:{fill:l.fills.SOLID},external:{fill:l.fills.NONE,decoration:l.decorations.NONE,shadow:l.shadows.NONE}};o.A="365px",o.B="24px",o.C=c,o.D=25,o.I=28,o.M=40,o.O="0px 2px 10px rgba(0, 0, 0, 0.3)",o.S=40,o.W={about1:!0},o.a=r,o.b="18px",o.c=a,o.d="600px",o.e=t,o.s=s})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=bs-index-4e26cd6b.js.map.

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1022
Entropy (8bit):	7.223490622143814
Encrypted:	false
SSDEEP:	24:KdIvJFZpEmZgaJXTfiACR5egPVs6QAznak4l:KdiJLpE+rcJWn
MD5:	E3D3071AACAE116052C952E62B1E8A28
SHA1:	ECB0570A61E69F7F215DA1E53ECA982835A9E55C
SHA-256:	22F615E5BF239105D5C9A6863A6C4ECF830A419A7444DF11E9EB5E8098401AEB
SHA-512:	ADEF7DF9756D3ADD2C9094A1FC03174413F1F90FBD00B177FBCB43EFCEBD114B6C07FF87940BE8B9A3CE915888A3C1C8BADA740E121ADB4C9FE4A6475293938A
Malicious:	false
Reputation:	low
URL:	"https://img1.wsimg.com/isteam/ip/7b447f14-e493-43c9-9689-3542f92042e6/favicon/0e61da3a-6a4f-4937-b58d-d14f74e69afc.png/:/rs=w:192,h:192,m"
Preview:	RIFF....WEBPVP8X..............ALPH.......m..Io..d9.....Z.&.0.m.Y.v[..,W%.;H...!"&...}.T4Y....t.C,;l.d..z.X...Ao...O7.h..4..C.'.....[......2....&.t.....L.a..R.x...#.."..?.C.8d-..y.K.z=..e....C.).....I...........f........'._>..{K..0J.......gl.F.f...^Q..2....s.Y.O%.....p2.....,L@l...c.~.y)..I\....5.7..I...J..Y..V.T&.C.._...(.....i...b.a..i.......1.,.AU!H..PG..2.U...^.eX.....#.).9.......:../.<....P......../.H.K;..2X,..i2.3.<.$..fh..9.... ...."=.@..!....wl..O._{..KQ5....W...O.=.e\....D...5}...VP8 &........* . .>m(.E."!....@...N.B:...9c.O.).x.}.v.......P.%..@............0...qi5Ex.....,.n..<....=.$..6RD.:._.YoD...?.l{.^=..M=....[e...?..-...<.a%#~2C......fZ.tuJ)4...d.F.....D'...U....$..E\|5.OK...~.!z.JE........b.:vB...%)..Q...pX......>...+.0._.O(\|.h.....n@..[..x....k....7\|......EXIF....Exif..II*...........................V...........^...(.......................i.......f.......8c......8c................0210....................0100..................

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (522)
Category:	dropped
Size (bytes):	586
Entropy (8bit):	5.2378887904744955
Encrypted:	false
SSDEEP:	12:H/QL7ANBSyTUXaPXAbDTc/NeL2QiTj+RVngQ2ofXgYhMYTHr+pWgL7AO:cANBLTUXaPXAPTc/tTj+HngQ2CQY/HrQ
MD5:	FADB3719FFA2A9E96CDC64FFEA0220FA
SHA1:	B9B00833E59E99ECE036B518D8429AF5EFEC1163
SHA-256:	E8A5463FF98210D3017DEEE55D5A287AD01AAA11DBE7DEB7D07F7D15D7F609F2
SHA-512:	C6E3581F7676B3204BC0FC8D4DCCF5A383FDE6F17A27D2F855EBEE3D205459BD9866A219808EAB1D4D4B37676D13B516AF546C7125C3FFA22CA74B995A180644
Malicious:	false
Reputation:	low
Preview:	define("@wsb/guac-widget-shared/c/_rollupPluginBabelHelpers-8ce54c82.js",["exports"],(function(e){"use strict";function n(){return n=Object.assign?Object.assign.bind():function(e){for(var n=1;n<arguments.length;n++){var r=arguments[n];for(var t in r)Object.prototype.hasOwnProperty.call(r,t)&&(e[t]=r[t])}return e},n.apply(this,arguments)}e._=n,e.a=function(e,n,r){return n in e?Object.defineProperty(e,n,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[n]=r,e}})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=_rollupPluginBabelHelpers-8ce54c82.js.map.

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	324
Entropy (8bit):	5.376083689062415
Encrypted:	false
SSDEEP:	6:FSPl39b4BSyRbjGJlI9kXJ3+V0q1EkmGHr9EJiKWaEt39J:cd39MBSyVz0XkTHr+pWTt39J
MD5:	ACD4F2B6117E5054FC9BF848AE8121CA
SHA1:	AE4D5F41D854BA8D99A4A1EC6EE6D6C3C0A859B8
SHA-256:	66774F89FCFA5674BE9AEF60E3FE3CB81E4DD88246BDE4E5392DF8B99FEFD4DB
SHA-512:	906FC9144D4AB81E8000CBE4A7AF7AFF775464347449193337E8738D705888C02B9476E083B3B67BDB3CBC312AAC4644C10737BC1FC5F9F08B38F5F45A2410F9
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-legacyOverrides-42582241.js
Preview:	define("@widget/LAYOUT/c/bs-legacyOverrides-42582241.js",["exports"],(function(e){"use strict";e.g=function(e,i,n){let o={};return"MENU"===i&&"h3"===e&&(o={color:"highlight"},"menu3"===n&&(o.fontSize="large")),o}})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=bs-legacyOverrides-42582241.js.map.

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51229)
Category:	downloaded
Size (bytes):	60011
Entropy (8bit):	5.350279643375839
Encrypted:	false
SSDEEP:	768:RfLoCGFoLE8vvw4xUC/ib7V/Kc5EVou1/RY/LkIT8OTGLFmJ6KhzFmSi6r8BmyMg:zt1/RCD8O8mJ6Khz8Si6r8BmyJ
MD5:	6544F4552370F8945DD8D34A6A036155
SHA1:	C2C09B864A5DD42BA01EFBCB450CF2B34F3D8995
SHA-256:	174B2B1E21F7BB5CAE37A1607C88447A642C8F8287337592420D9B48525CBE03
SHA-512:	F4CEFC11A299AA6F29BA557B2DDE604089F9A9D2A64C92E8A687E3C4288FC0FA65DD0811F822D0751F22F26F390FE81D732533DB83AF902E03D3D937DF6DF5A1
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/7b447f14-e493-43c9-9689-3542f92042e6/gpub/8186fd600e2f6aba/script.js
Preview:	navigator&&navigator.connection&&(window.networkInfo=navigator.connection,navigator.connection.addEventListener&&navigator.connection.addEventListener("change",({target:n})=>window.networkInfo=n));.const imageObserver=new IntersectionObserver((e,r)=>{var a=e=>{if(e.hasAttribute("data-lazyimg")){var t=e.getAttribute("data-srclazy");let o=e.getAttribute("data-srcsetlazy")\|\|"";if(t&&(e.src=t),o&&window.networkInfo){var n=window.networkInfo.downlink;const r=[{min:0,max:5,regex:/(.?(?=, ))/,qMod:!0},{min:5,max:8,regex:/(.2x)/}];r.forEach(({min:e,max:t,regex:r,qMod:a})=>{e<=n&&n<t&&(r=o.match(r),o=(r&&r.length?r[0]:o)+(a?"/qt=q:"+Math.round((n-e)/(t-e)*100):""))})}e.srcset=o,e.removeAttribute("sizes"),e.removeAttribute("data-lazyimg"),e.removeAttribute("data-srclazy"),e.removeAttribute("data-srcsetlazy")}};e.forEach(e=>{if(e.isIntersecting){const t=e.target;window.networkInfo&&0===window.networkInfo.downlink\|\|([t].concat(Array.from(t.querySelectorAll("[data-lazyimg]"))).forEach(a),r.unobse

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (63425)
Category:	dropped
Size (bytes):	314664
Entropy (8bit):	5.468234877621491
Encrypted:	false
SSDEEP:	3072:OfpdUw9ySK7x5jfw71wUNdFsh0q312hgBQKQYctGfziZo/c0z6iv8W:g8w9yzc71rNVq31JBQKctGfWZoUW
MD5:	31E273E89FB56A44D86D206F1BCDCDB4
SHA1:	C1D25BAD06F8485EB76D39134C4BEC22A44E5534
SHA-256:	9E3C0FE8C9D6F0325C883709CEDE8898CE5D70F0640420ED058E0709C636531B
SHA-512:	53EFED1036FCC4F3D88D0269BA1348950DB5813B7B7AFE0548DE536AC7532BBEB7451E0BE3537C4FFBA5FE5A1CB1974243793AF0D958537C060EF01DF000674F
Malicious:	false
Reputation:	low
Preview:	var Core=function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/",n(n.s=68)}([fun

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1824)
Category:	downloaded
Size (bytes):	1874
Entropy (8bit):	4.934407477113311
Encrypted:	false
SSDEEP:	48:fCEX2kA83zdkJi1lvietWdcy0cy7mdOrxGfrIK:aE33zdkJiDvietWdR0R7mdOFYX
MD5:	EDC15AD5DAAC3CFA744BFFDB1E0174BE
SHA1:	E314A5CA702D0E77B2C2C023ADDADE266EA223B2
SHA-256:	3B54AEACFDA01BE53800632989A82F6F5A7F92E927159A37A4324B38D3DFFEF8
SHA-512:	8B8805D67FF993BD406EEB6682B1578537A3D6B7DC6711BE7152120689C77147D8C24351ACEBD2A06AE9B81D858EAED19C44E6792FE3C147EEAF3133C635589B
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-dataAids-6a839d53.js
Preview:	define("@widget/LAYOUT/c/bs-dataAids-6a839d53.js",["exports"],(function(E){"use strict";var R=(global.keyMirror\|\|guac.keymirror)({BACKGROUND_IMAGE_RENDERED:null,HAMBURGER_MENU_LINK:null,HEADER_WIDGET:null,HEADER_SECTION:null,HEADER_VIDEO:null,HEADER_VIDEO_EMBED_WRAPPER:null,HEADER_VIDEO_EMBED:null,HEADER_VIDEO_EMBED_INSET_POSTER:null,HEADER_VIDEO_EMBED_FILL_POSTER:null,HEADER_VIDEO_BACKGROUND:null,HEADER_SLIDESHOW:null,HEADER_SLIDE:null,HEADER_HERO_SLIDE:null,HEADER_PHONE_RENDERED:null,HEADER_PIPE_RENDERED:null,HEADER_ADDRESS_RENDERED:null,HEADER_LOGO_RENDERED:null,HEADER_LOGO_IMAGE_RENDERED:null,HEADER_LOGO_OVERHANG_CONTAINER:null,HEADER_LOGO_TEXT_RENDERED:null,HEADER_TAGLINE_RENDERED:null,HEADER_TAGLINE2_RENDERED:null,HEADER_NAV_RENDERED:null,HEADER_CTA_BTN:null,CART_ICON_RENDER:null,CART_ICON_COUNT:null,CART_ICON_PIPE:null,CART_TEXT:null,CART_DROPDOWN_RENDERED:null,SEARCH_FORM_RENDERED:null,SEARCH_ICON_RENDERED:null,SEARCH_ICON_RENDERED_OPEN:null,SEARCH_CLOSE_RENDERED:null,SEARCH_FI

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1094
Entropy (8bit):	7.7558676390315515
Encrypted:	false
SSDEEP:	24:2eb4qGsj/n4ALSczJRtrj9WNEmgz9CGNTjqoo1T7SS0lr:2eb4qVM1E/j2EHZCfNP0x
MD5:	89A3E1400E50BC5619F59B9C04E8E5AB
SHA1:	4D9B213D78EA06C1E73429F77A9A12A4B92ECE48
SHA-256:	03F6FA255814F3F1372821692F43F7F2867F6632FD0EF8AE5A515AC57C9E520C
SHA-512:	98D8CA93A8EEDC529356E6B1851DE2B4079D0F29BC51C7BA43D7EABF91E767C45B32B2E244B382EC741B1B2F4848E0358BE90CA354A0CBD94B552D64D7B9583D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....pHYs..........{Rk....IDATX..WK.TE........,u.....0<4...?@....,....!..@..C.&&....q#,..........n.z.&($3sNu.9......v..>I..........Ql.1.... ......HX@...y8.E&S.66a.V.o....W.p...D.;<...d.%.k<......".F..E...p\|..O.....G.X\.9u._C&... ...U...T>@....@..F...fLM....w".= ^..?...Q.[....;....N..L.LG.....c.W..8....?.[....BS.xn8.R9..\O.=.~K....... ..Hej...g...#..(jN>...p<;..~............!...].....6.r..W...d.N....A\|=.a.w..6.,.o..xB.i.6.b'I^...Y.?......w............0.....=.\....r...l...Y.`.N..1o......o.........D.x....1t...q.z.g......".....j...........P.w.\_.q`.......H.e..I.Is....3......n\...v._.{...>]..~.z...x=........R..C?iN........m4.*..8........S...m.R......`..xr...j..-t-........S8.$~......P8...9a.>...FB.K....\.V.}...H.S..0.h.F......).b.K..6....#.v..p....k..1...(~.LG.T..pr....F<..^.EM.hm.....>.9...q..BQS..d%8pn..SF.B.n....3.i!.5.rx..8C(...G%....S%..M....W...Lv.Un........J......L..n.X ..NN.4Q..BE.zS..bDEIG..Q..,3'....V>..

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1352)
Category:	downloaded
Size (bytes):	1400
Entropy (8bit):	5.307032039583678
Encrypted:	false
SSDEEP:	24:c6BLQZSwXZSUcUxQAQId+06QyyU+bHJRWIFSPhXCoiCUPGyTiKNPR138IHrIYf:j+SwJSxAQ0H0OpwUSPhXCoiCUeuiKNPd
MD5:	5CC6B93D41889C0A55C6C4FCD2D89713
SHA1:	51A59C1DAE337817C4EBAC39FBE61C232705A893
SHA-256:	8671CFDFA128168DB2136D7C17F55BA98DDBA221CDD1ACBBE559D4969280FD51
SHA-512:	8BCAAB1399B6D4D7475C4CF1DC45B0477A9D2AD37578DFCCF23C0C9303716DA1DECD5FBA858D5DD609CB89BCC784E04B72A0D7136BC6EE60DC3EF69CAB977C33
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-index2-87bd33e6.js
Preview:	define("@widget/LAYOUT/c/bs-index2-87bd33e6.js",["exports"],(function(t){"use strict";t.a=function(){let t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:"medium";return{"> :nth-child(n)":{marginBottom:t}," > :last-child":{marginBottom:"0 !important"}}},t.b=function(){let t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:"medium";return{"> :nth-child(n)":{marginRight:t}," > :last-child":{marginRight:"0 !important"}}},t.c=function(t){const e=function(t){if("string"!=typeof t\|\|"{"!==t[0])return null;try{return JSON.parse(t)}catch(t){return null}}(t)\|\|{};let n=0;return e.blocks&&e.blocks.forEach((t=>{const e=t.text.length;n+=(global._\|\|guac.lodash).clamp(e,25,Math.max(e,25))})),n},t.g=()=>{const t=document.getElementsByClassName("ux-scaled");let e=1;return t&&t.length>0&&(e=t[0].getAttribute("data-scale")),e},t.r=t=>{let{count:e=0,fontSizeMap:n={},defaultFontSize:r}=t;const i=(global._\|\|guac.lodash).reduce(n,((t,e,n)=>{let[r,i=Number.MAX_VALUE]=e;return t.push({range:[r,i],

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (905)
Category:	dropped
Size (bytes):	960
Entropy (8bit):	5.203352394673048
Encrypted:	false
SSDEEP:	24:pzBLgJHHVvC+dKbywqIN6ttVFRJB1i/uwBrV7DtZHrIvyU:zSkjbQxz3+uQ7RxrIx
MD5:	62A914B2C847D4D02B76164D7A2A54C6
SHA1:	20D9F49A90A51FA6C8420640610DF77F7A96D919
SHA-256:	B08C2864EC27736C507B1CA4B3A225A19147841B861CD8494DAF95FA370FE639
SHA-512:	E67D3D9F68EF3151D93DEDAA3530DF89F0C957F08561E93134B219DEC23C2A1FE0D109AC666619526742C5411E4636ECE416A3AD1148C1AD0861F0050B41D3DE
Malicious:	false
Reputation:	low
Preview:	define("@wsb/guac-widget-shared/c/_commonjsHelpers-67085353.js",["exports"],(function(e){"use strict";var n="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};e.a=n,e.b=function(e){if(e.__esModule)return e;var n=Object.defineProperty({},"__esModule",{value:!0});return Object.keys(e).forEach((function(t){var r=Object.getOwnPropertyDescriptor(e,t);Object.defineProperty(n,t,r.get?r:{enumerable:!0,get:function(){return e[t]}})})),n},e.c=function(e,n,t){return e(t={path:n,exports:{},require:function(e,n){return function(){throw new Error("Dynamic requires are not currently supported by @rollup/plugin-commonjs")}(null==n&&t.path)}},t.exports),t.exports},e.g=function(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=_commonjsHelpers-67085353.js.map.

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1352)
Category:	dropped
Size (bytes):	1400
Entropy (8bit):	5.307032039583678
Encrypted:	false
SSDEEP:	24:c6BLQZSwXZSUcUxQAQId+06QyyU+bHJRWIFSPhXCoiCUPGyTiKNPR138IHrIYf:j+SwJSxAQ0H0OpwUSPhXCoiCUeuiKNPd
MD5:	5CC6B93D41889C0A55C6C4FCD2D89713
SHA1:	51A59C1DAE337817C4EBAC39FBE61C232705A893
SHA-256:	8671CFDFA128168DB2136D7C17F55BA98DDBA221CDD1ACBBE559D4969280FD51
SHA-512:	8BCAAB1399B6D4D7475C4CF1DC45B0477A9D2AD37578DFCCF23C0C9303716DA1DECD5FBA858D5DD609CB89BCC784E04B72A0D7136BC6EE60DC3EF69CAB977C33
Malicious:	false
Reputation:	low
Preview:	define("@widget/LAYOUT/c/bs-index2-87bd33e6.js",["exports"],(function(t){"use strict";t.a=function(){let t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:"medium";return{"> :nth-child(n)":{marginBottom:t}," > :last-child":{marginBottom:"0 !important"}}},t.b=function(){let t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:"medium";return{"> :nth-child(n)":{marginRight:t}," > :last-child":{marginRight:"0 !important"}}},t.c=function(t){const e=function(t){if("string"!=typeof t\|\|"{"!==t[0])return null;try{return JSON.parse(t)}catch(t){return null}}(t)\|\|{};let n=0;return e.blocks&&e.blocks.forEach((t=>{const e=t.text.length;n+=(global._\|\|guac.lodash).clamp(e,25,Math.max(e,25))})),n},t.g=()=>{const t=document.getElementsByClassName("ux-scaled");let e=1;return t&&t.length>0&&(e=t[0].getAttribute("data-scale")),e},t.r=t=>{let{count:e=0,fontSizeMap:n={},defaultFontSize:r}=t;const i=(global._\|\|guac.lodash).reduce(n,((t,e,n)=>{let[r,i=Number.MAX_VALUE]=e;return t.push({range:[r,i],

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6969)
Category:	downloaded
Size (bytes):	7039
Entropy (8bit):	5.2361798012427245
Encrypted:	false
SSDEEP:	192:oLb1MP+fzUiru5feyeCVL+izwhVQ9iPzmHFnYJsvIFO/Esh:oLxmCUiru5fneCVL+izwhVQ9ibmHFnYK
MD5:	DAD318033A09F6ABA68D6EE66F1CDACE
SHA1:	F538D0C3973677A6CDF14E9223AFB432FCF1CF8C
SHA-256:	E8FCFB1552D918B5D9FD715F711255465D6DD4348B4DCEDD362CB00DF9D3DBEF
SHA-512:	6024483003089661D9799000202895EC4ACA6CDEC816BDBC786F6800536AA8E6B93D8B8CA81E1EB6B8122C72CD14172C94C6C49953FFA536E49D71DD7F47499F
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/bs-layout13-Theme-publish-Theme-7252afe2.js
Preview:	define("@widget/LAYOUT/bs-layout13-Theme-publish-Theme-7252afe2.js",["exports","~/c/bs-_rollupPluginBabelHelpers","~/c/bs-index3","~/c/bs-themeOverrides","~/c/bs-legacyOverrides","~/c/bs-humanisticFilled","~/c/bs-defaultSocialIconPack","~/c/bs-loaders","~/c/bs-index","~/c/bs-overlayTypes"],(function(e,t,r,o,a,n,i,s,l,g){"use strict";const{colorPackCategories:d,buttons:c}=(global.Core\|\|guac["@wsb/guac-widget-core"]).constants,{LIGHT:u,LIGHT_ALT:m,LIGHT_COLORFUL:h,DARK:p,DARK_ALT:y,DARK_COLORFUL:f,COLORFUL:b,MVP:x}=(global.Core\|\|guac["@wsb/guac-widget-core"]).constants.paintJobs,I={[g.F]:"category-overlay",[g.b]:"category-overlay",[g.I]:"category-solid",[g.B]:"category-overlay",[g.L]:"category-overlay"},S={defaultHeaderTreatment:g.F,imageTreatments:I,heroContentItems:["tagline","tagline2","cta"],nonHeroContentItems:["phone"]};var C={id:"layout13",name:"modern",packs:{color:"005",font:"league-spartan"},logo:{font:"primary"},packCategories:{color:d.ACCENT},headerProperties:{alignmentOption

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	242257
Entropy (8bit):	5.517949479561666
Encrypted:	false
SSDEEP:	3072:7u8xUu8gpdmSOvTdTK4Tn9TnatTn9TnApfeVH0pdmSO3iTIT7JlDnDQj3jPGIXSQ:Y3A/6hbCxJFxKhUc
MD5:	55BAF821A59FAD53AA754C85AE19D0EA
SHA1:	B1662F5F5B119836E5E9C91C5E4A448BCD6CCC6D
SHA-256:	D26724E378F16CC4135849CCABF5A1BA738C3F4BA952950ACB34E73F24869E83
SHA-512:	791B8AA2E321324B55731B5F69239F86A0602F19FEB833BFC492D525EA132BC23D1C6A3907957992C655742F38AEDD7819A585E6B7A7F3C68126E0DC739DFC1B
Malicious:	false
Reputation:	low
Preview:	define("@widget/LAYOUT/c/bs-index3-55bc27af.js",["radpack","exports","~/c/bs-_rollupPluginBabelHelpers","~/c/bs-overlayTypes","~/c/bs-index2","~/c/bs-index","~/c/bs-dataAids","@wsb/guac-widget-shared@^1/lib/components/ColorSwatch","@wsb/guac-widget-shared@^1/lib/components/Carousel","~/c/bs-navigationDrawer","~/c/bs-searchFormLocations"],(function(e,t,a,r,o,l,n,i,c,s,g){"use strict";class p extends((global.Core\|\|guac["@wsb/guac-widget-core"]).UX2.utils.createElement("Background")){}a._(p,"propTypes",{className:(global.PropTypes\|\|guac["prop-types"]).string,backgroundSize:(global.PropTypes\|\|guac["prop-types"]).string,backgroundPosition:(global.PropTypes\|\|guac["prop-types"]).string,style:(global.PropTypes\|\|guac["prop-types"]).object,imageData:(global.PropTypes\|\|guac["prop-types"]).object,mobileWidthMultiplier:(global.PropTypes\|\|guac["prop-types"]).number,desktopWidthMultiplier:(global.PropTypes\|\|guac["prop-types"]).number,blur:(global.PropTypes\|\|guac["prop-types"]).bool}),a._(p,"defaultPr

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23126)
Category:	downloaded
Size (bytes):	23189
Entropy (8bit):	4.539345073526186
Encrypted:	false
SSDEEP:	384:7UuK/6kvTqLYddu4bV/yiAhSs1hiAhAiSeG3dvBRU+SMkc6e:QuJ5wI45/c1+ipG3TJSMkU
MD5:	3D092EF4ABA019B14F01C40747E40554
SHA1:	1C26145272FCF4CA91AF501288CCE84B1BFFD38B
SHA-256:	B4C48B77BBE6BBACF7D16BDAA81F5509FB8EA0FBFDDFBF2D12307F7A88518846
SHA-512:	F7180D3D98CF17556E27D62EF719DD9E35041679BAB74BD49BD898EB0FB62018EF6C6B64D06E9E0CAC4A646154DB93A1D35096B098DDCFF7B02CD6889A29DA0A
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-defaultSocialIconPack-91835b99.js
Preview:	define("@widget/LAYOUT/c/bs-defaultSocialIconPack-91835b99.js",["exports"],(function(a){"use strict";const e=(global.React\|\|guac.react).createElement("path",{d:"M12 2C6.477 2 2 6.477 2 12s4.477 10 10 10 10-4.477 10-10A10 10 0 0 0 12 2zM7.055 13.745a.97.97 0 0 1-.073-.509l.182-2.072a.687.687 0 0 1 .29-.364c.182-.11.582.036.582.036l2.619 1.31s.4.181.4.509c-.037.436-.219.436-.364.509l-3.055.654s-.436.146-.581-.073zm4.945.473l-.036 3.018s.036.437-.219.51c-.144.02-.291.02-.436 0l-2.036-.655a.6.6 0 0 1-.291-.364c-.073-.218.182-.545.182-.545l2.036-2.255s.327-.29.582-.145c.254.145.254.436.218.436zm-.364-3.236a.687.687 0 0 1-.581-.182l-2.51-3.418s-.363-.4-.181-.691a.64.64 0 0 1 .363-.291l2.4-.873c.11-.036.218-.145.582.073.255.145.291.655.291.655l.036 4.145s-.072.51-.4.582zm1.419.582l1.636-2.582s.145-.364.436-.327c.152.002.29.085.364.218l1.382 1.636a.676.676 0 0 1 .072.473c-.072.218-.472.363-.472.363l-2.91.837s-.4.073-.545-.182c-.145-.255 0-.51.037-.436zm3.781 3.309L15.6 16.655a.815.815 0 0 1-.4

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51229)
Category:	dropped
Size (bytes):	60011
Entropy (8bit):	5.350279643375839
Encrypted:	false
SSDEEP:	768:RfLoCGFoLE8vvw4xUC/ib7V/Kc5EVou1/RY/LkIT8OTGLFmJ6KhzFmSi6r8BmyMg:zt1/RCD8O8mJ6Khz8Si6r8BmyJ
MD5:	6544F4552370F8945DD8D34A6A036155
SHA1:	C2C09B864A5DD42BA01EFBCB450CF2B34F3D8995
SHA-256:	174B2B1E21F7BB5CAE37A1607C88447A642C8F8287337592420D9B48525CBE03
SHA-512:	F4CEFC11A299AA6F29BA557B2DDE604089F9A9D2A64C92E8A687E3C4288FC0FA65DD0811F822D0751F22F26F390FE81D732533DB83AF902E03D3D937DF6DF5A1
Malicious:	false
Reputation:	low
Preview:	navigator&&navigator.connection&&(window.networkInfo=navigator.connection,navigator.connection.addEventListener&&navigator.connection.addEventListener("change",({target:n})=>window.networkInfo=n));.const imageObserver=new IntersectionObserver((e,r)=>{var a=e=>{if(e.hasAttribute("data-lazyimg")){var t=e.getAttribute("data-srclazy");let o=e.getAttribute("data-srcsetlazy")\|\|"";if(t&&(e.src=t),o&&window.networkInfo){var n=window.networkInfo.downlink;const r=[{min:0,max:5,regex:/(.?(?=, ))/,qMod:!0},{min:5,max:8,regex:/(.2x)/}];r.forEach(({min:e,max:t,regex:r,qMod:a})=>{e<=n&&n<t&&(r=o.match(r),o=(r&&r.length?r[0]:o)+(a?"/qt=q:"+Math.round((n-e)/(t-e)*100):""))})}e.srcset=o,e.removeAttribute("sizes"),e.removeAttribute("data-lazyimg"),e.removeAttribute("data-srclazy"),e.removeAttribute("data-srcsetlazy")}};e.forEach(e=>{if(e.isIntersecting){const t=e.target;window.networkInfo&&0===window.networkInfo.downlink\|\|([t].concat(Array.from(t.querySelectorAll("[data-lazyimg]"))).forEach(a),r.unobse

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	523
Entropy (8bit):	5.112971118017304
Encrypted:	false
SSDEEP:	12:YWGhtXIoWFJsTPX9iAMpzXPwTPX9iAMpzeIJRFN4n:YZXIoWofdMZPofdM9DN4
MD5:	CBB5AC679B21F203D5959BC01115A150
SHA1:	7C6BB220160EC3EAFB9D23CB22448C23B1863F94
SHA-256:	C2F0024785FFBF8A5A396BB1A309C03683F24018EE7330D34CC345BEC6B25AD0
SHA-512:	A9A22D3BD5D1313080FD58F2472F0F46F223A8D56A2F9607EC05FEC88A85926D5065A0E3AB23D1922C1A5404861FF45F34A9E44DA23BFC67E593740DD8392CE8
Malicious:	false
Reputation:	low
URL:	https://gemineolegim.godaddysites.com/manifest.webmanifest
Preview:	{"scope":"/","start_url":"/","display":"standalone","icons":[{"sizes":"192x192","type":"image/png","src":"//img1.wsimg.com/isteam/ip/7b447f14-e493-43c9-9689-3542f92042e6/favicon/0e61da3a-6a4f-4937-b58d-d14f74e69afc.png/:/rs=w:192,h:192,m"},{"sizes":"512x512","type":"image/png","src":"//img1.wsimg.com/isteam/ip/7b447f14-e493-43c9-9689-3542f92042e6/favicon/0e61da3a-6a4f-4937-b58d-d14f74e69afc.png/:/rs=w:512,h:512,m"}],"name":"gemineolegim","short_name":"gemineolegim","theme_color":"#FFFFFF","background_color":"#FFFFFF"}

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.376083689062415
Encrypted:	false
SSDEEP:	6:FSPl39b4BSyRbjGJlI9kXJ3+V0q1EkmGHr9EJiKWaEt39J:cd39MBSyVz0XkTHr+pWTt39J
MD5:	ACD4F2B6117E5054FC9BF848AE8121CA
SHA1:	AE4D5F41D854BA8D99A4A1EC6EE6D6C3C0A859B8
SHA-256:	66774F89FCFA5674BE9AEF60E3FE3CB81E4DD88246BDE4E5392DF8B99FEFD4DB
SHA-512:	906FC9144D4AB81E8000CBE4A7AF7AFF775464347449193337E8738D705888C02B9476E083B3B67BDB3CBC312AAC4644C10737BC1FC5F9F08B38F5F45A2410F9
Malicious:	false
Reputation:	low
Preview:	define("@widget/LAYOUT/c/bs-legacyOverrides-42582241.js",["exports"],(function(e){"use strict";e.g=function(e,i,n){let o={};return"MENU"===i&&"h3"===e&&(o={color:"highlight"},"menu3"===n&&(o.fontSize="large")),o}})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=bs-legacyOverrides-42582241.js.map.

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (786)
Category:	downloaded
Size (bytes):	842
Entropy (8bit):	5.258991916821592
Encrypted:	false
SSDEEP:	24:caBL+qMLVRGqawadlH0rVRrkAeT25Z2HrIY/:jKqSVMqzarH0brkAeq5ZSrI+
MD5:	31B521136207C11FF1F9985264424E8A
SHA1:	9EAF6B9717979CAEB5C7E846E17B2A89A08DC266
SHA-256:	C818B56446AE5A8D0466FC9C51D85104584E36F6D8B1C77E08A2D354E845E2CD
SHA-512:	DB2A8825F8C67B6361B86F5BB1DEE38089DD57E5E74ECBA335EF7D82D9D5E5AD3F64C07195FCDF700415F6F09B11BDB6A20410462ABAEC443335F19ACF8265B1
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-themeOverrides-e736c017.js
Preview:	define("@widget/LAYOUT/c/bs-themeOverrides-e736c017.js",["exports"],(function(e){"use strict";(global.Core\|\|guac["@wsb/guac-widget-core"]).constants;e.a=e=>{let{sectionHeadingHR:t}=e;return t?{sectionHeadingHR:t}:{}},e.b=e=>{let{sectionHeadingColor:t}=e;return{HIGHLIGHT:{style:{color:"highlight"}},HIGH_CONTRAST:{style:{color:"highContrast"}}}[t]\|\|{}},e.c=e=>{let{sectionHeadingSize:t}=e;return t?{style:{fontSize:t}}:{}},e.s=e=>{let{sectionHeadingAlignment:t}=e;return{LEFT:{style:{textAlign:"left","@md":{textAlign:"left"}},alignmentOption:"left"},CENTER:{style:{textAlign:"center","@md":{textAlign:"center"}},alignmentOption:"center"},RIGHT:{style:{textAlign:"right","@md":{textAlign:"right"}},alignmentOption:"right"}}[t]\|\|{}}})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=bs-themeOverrides-e736c017.js.map.

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1211)
Category:	dropped
Size (bytes):	1261
Entropy (8bit):	5.340315611373646
Encrypted:	false
SSDEEP:	24:/BLEQuC0F6lq5lEYwy5WqogVeESgVeId4PXsHrIW:Z4jFYq5lpwW7vdd4PXgrIW
MD5:	CB9BFA0FBDD957FBE7F4841B70341DB2
SHA1:	9CAD12A3580D3E4D340CB867E88B687C75564C5A
SHA-256:	513864FD4EBD1926F3E1E78B436A90C2BC3A5D16835B50415E7B318D7DEEC2A2
SHA-512:	DF98C3262F64DA4EA9CACF75FF7CB685D71B69142D89F726AB3E13CF6F25432DC395D7C0950E1632F0E519F135B02FDA0753739189E51F1C9210ACA6692551DD
Malicious:	false
Reputation:	low
Preview:	define("@wsb/guac-widget-shared/lib/components/ColorSwatch-4196a0a9.js",["exports"],(function(e){"use strict";const o=e=>{let{color:o,isActive:t,inStock:r,isSmall:l}=e;const a=r\|\|void 0===r,c=l?"24px":"38px",n=l?"20px":"32px",i={borderRadius:"50%",borderWidth:"1px",borderStyle:"solid"},s={outer:{...i,display:"flex",alignItems:"center",justifyContent:"center",width:c,height:c,borderColor:t?"lowContrast":"transparent"},inner:{...i,borderColor:"ultraLowContrast",color:"ultraLowContrast",width:n,height:n,background:a?o:`linear-gradient(to left top, ${o} calc(50% - 1px), currentColor, ${o} calc(50% + 1px) )`}};return(global.React\|\|guac.react).createElement((global.Core\|\|guac["@wsb/guac-widget-core"]).UX2.Element.Block,{style:s.outer},(global.React\|\|guac.react).createElement((global.Core\|\|guac["@wsb/guac-widget-core"]).UX2.Element.Block,{style:s.inner}))};o.propTypes={color:(global.PropTypes\|\|guac["prop-types"]).string.isRequired,isActive:(global.PropTypes\|\|guac["prop-types"]).bool,inStock:(

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (20947)
Category:	downloaded
Size (bytes):	24399
Entropy (8bit):	5.2375624098374
Encrypted:	false
SSDEEP:	384:UNoz5VHqeg0VzpiyiwffnnPacVorjFtteVT36FCLCpKe9plq2D:ME5qeg0Rp8wffnPVEjFtteEFiSbbl3D
MD5:	753CB19EE1A756E46FAA0F118B1B4E01
SHA1:	248885E3BFE7E71989BA9FFFB33B6EFF18166FEC
SHA-256:	ED9FFA2FBA5ECC75AF2F99E6EBADD5B927086F258037C2A848E94449CC579991
SHA-512:	4482C4D5F2F93DE8E095C549994A7783FA55CD1A6C4C9CC5E697CC2E2F00C98B04D5CB958CC1ADC4D0EF67F300BE014E112AE1D992487F40EB25BC93E8B47AAA
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/Carousel-3d82957b.js
Preview:	define("@wsb/guac-widget-shared/lib/components/Carousel-3d82957b.js",["exports","~/c/_rollupPluginBabelHelpers","~/c/_commonjsHelpers","~/c/interopRequireDefault","~/c/_react_commonjs-external"],(function(e,t,n,i,r){"use strict";var s=n.c((function(e){function t(n){return e.exports=t="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},e.exports.__esModule=!0,e.exports.default=e.exports,t(n)}e.exports=t,e.exports.__esModule=!0,e.exports.default=e.exports})),o=n.c((function(e){var t=s.default;function n(e){if("function"!=typeof WeakMap)return null;var t=new WeakMap,i=new WeakMap;return(n=function(e){return e?i:t})(e)}e.exports=function(e,i){if(!i&&e&&e.__esModule)return e;if(null===e\|\|"object"!==t(e)&&"function"!=typeof e)return{default:e};var r=n(i);if(r&&r.has(e))return r.get(e);var s={},o=Object.defineProperty&&Object.getOwnPropertyDescr

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	221
Entropy (8bit):	5.32955468303281
Encrypted:	false
SSDEEP:	6:FSPD8WUDDSBSyFbNemGHr9EJiKWaEwI8WUDDn:c5UDGBSyCTHr+pWTwGUDr
MD5:	8F12765EB30FBDCFCDC116D13F7FC272
SHA1:	506E45B7D3930756EACCE0DAD449A3C8CDB3EAC6
SHA-256:	265995EB76326E95613750F6F6570B850F5C22280D262DE9B9632A16CEB98B9B
SHA-512:	7AA2F396B105BCCF2B943FD2AC60929D8BF3A0EB8574B77451CB29816DF8ACDCD07694B526D7E4585F849DFDA3A0FE6E95661179E13F682DBF54098D98154BFB
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@widget/LAYOUT/c/bs-navigationDrawer-27f5f1f5.js
Preview:	define("@widget/LAYOUT/c/bs-navigationDrawer-27f5f1f5.js",["exports"],(function(i){"use strict";i.N="-249vw"})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=bs-navigationDrawer-27f5f1f5.js.map.

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (905)
Category:	downloaded
Size (bytes):	960
Entropy (8bit):	5.203352394673048
Encrypted:	false
SSDEEP:	24:pzBLgJHHVvC+dKbywqIN6ttVFRJB1i/uwBrV7DtZHrIvyU:zSkjbQxz3+uQ7RxrIx
MD5:	62A914B2C847D4D02B76164D7A2A54C6
SHA1:	20D9F49A90A51FA6C8420640610DF77F7A96D919
SHA-256:	B08C2864EC27736C507B1CA4B3A225A19147841B861CD8494DAF95FA370FE639
SHA-512:	E67D3D9F68EF3151D93DEDAA3530DF89F0C957F08561E93134B219DEC23C2A1FE0D109AC666619526742C5411E4636ECE416A3AD1148C1AD0861F0050B41D3DE
Malicious:	false
Reputation:	low
URL:	https://img1.wsimg.com/blobby/go/static/radpack/@wsb/guac-widget-shared/c/_commonjsHelpers-67085353.js
Preview:	define("@wsb/guac-widget-shared/c/_commonjsHelpers-67085353.js",["exports"],(function(e){"use strict";var n="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};e.a=n,e.b=function(e){if(e.__esModule)return e;var n=Object.defineProperty({},"__esModule",{value:!0});return Object.keys(e).forEach((function(t){var r=Object.getOwnPropertyDescriptor(e,t);Object.defineProperty(n,t,r.get?r:{enumerable:!0,get:function(){return e[t]}})})),n},e.c=function(e,n,t){return e(t={path:n,exports:{},require:function(e,n){return function(){throw new Error("Dynamic requires are not currently supported by @rollup/plugin-commonjs")}(null==n&&t.path)}},t.exports),t.exports},e.g=function(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}})),"undefined"!=typeof window&&(window.global=window);.//# sourceMappingURL=_commonjsHelpers-67085353.js.map.

Static File Info

⊘No static file info

Network Behavior

Download Network PCAP: filtered – full

Network Port Distribution

Total Packets: 822
• 443 (HTTPS)
• 80 (HTTP)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 22, 2025 01:00:26.423660994 CET	49674	443	192.168.2.5	23.1.237.91
Feb 22, 2025 01:00:26.423902988 CET	49675	443	192.168.2.5	23.1.237.91
Feb 22, 2025 01:00:26.548614025 CET	49673	443	192.168.2.5	23.1.237.91
Feb 22, 2025 01:00:36.103269100 CET	49674	443	192.168.2.5	23.1.237.91
Feb 22, 2025 01:00:36.103493929 CET	49675	443	192.168.2.5	23.1.237.91
Feb 22, 2025 01:00:36.306494951 CET	49673	443	192.168.2.5	23.1.237.91
Feb 22, 2025 01:00:38.097951889 CET	443	49703	23.1.237.91	192.168.2.5
Feb 22, 2025 01:00:38.098069906 CET	49703	443	192.168.2.5	23.1.237.91
Feb 22, 2025 01:00:38.709359884 CET	49712	443	192.168.2.5	172.217.16.196
Feb 22, 2025 01:00:38.709405899 CET	443	49712	172.217.16.196	192.168.2.5
Feb 22, 2025 01:00:38.709481955 CET	49712	443	192.168.2.5	172.217.16.196
Feb 22, 2025 01:00:38.709697008 CET	49712	443	192.168.2.5	172.217.16.196
Feb 22, 2025 01:00:38.709707022 CET	443	49712	172.217.16.196	192.168.2.5
Feb 22, 2025 01:00:39.349401951 CET	443	49712	172.217.16.196	192.168.2.5
Feb 22, 2025 01:00:39.349733114 CET	49712	443	192.168.2.5	172.217.16.196
Feb 22, 2025 01:00:39.349764109 CET	443	49712	172.217.16.196	192.168.2.5
Feb 22, 2025 01:00:39.350836039 CET	443	49712	172.217.16.196	192.168.2.5
Feb 22, 2025 01:00:39.350903988 CET	49712	443	192.168.2.5	172.217.16.196
Feb 22, 2025 01:00:39.352504015 CET	49712	443	192.168.2.5	172.217.16.196
Feb 22, 2025 01:00:39.352581978 CET	443	49712	172.217.16.196	192.168.2.5
Feb 22, 2025 01:00:39.399909973 CET	49712	443	192.168.2.5	172.217.16.196
Feb 22, 2025 01:00:39.399945021 CET	443	49712	172.217.16.196	192.168.2.5
Feb 22, 2025 01:00:39.446787119 CET	49712	443	192.168.2.5	172.217.16.196
Feb 22, 2025 01:00:39.633121014 CET	49714	80	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:39.636895895 CET	49715	80	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:39.638226032 CET	80	49714	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:39.638334036 CET	49714	80	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:39.638655901 CET	49714	80	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:39.642016888 CET	80	49715	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:39.642222881 CET	49715	80	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:39.643625021 CET	80	49714	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:40.097081900 CET	80	49714	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:40.112680912 CET	49716	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:40.112782001 CET	443	49716	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:40.112869024 CET	49716	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:40.113137007 CET	49716	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:40.113176107 CET	443	49716	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:40.150733948 CET	49714	80	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:40.608056068 CET	443	49716	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:40.608382940 CET	49716	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:40.608423948 CET	443	49716	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:40.609714985 CET	443	49716	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:40.609816074 CET	49716	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:40.615736961 CET	49716	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:40.615910053 CET	443	49716	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:40.615941048 CET	49716	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:40.659343004 CET	443	49716	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:40.667833090 CET	49716	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:40.667857885 CET	443	49716	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:40.715163946 CET	49716	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:40.753338099 CET	443	49716	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:40.753367901 CET	443	49716	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:40.753375053 CET	443	49716	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:40.753415108 CET	443	49716	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:40.753451109 CET	443	49716	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:40.753478050 CET	49716	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:40.753508091 CET	443	49716	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:40.753529072 CET	443	49716	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:40.753561974 CET	49716	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:40.753561974 CET	49716	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:40.753588915 CET	49716	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:40.819587946 CET	49718	53	192.168.2.5	1.1.1.1
Feb 22, 2025 01:00:40.822139025 CET	443	49716	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:40.822206974 CET	49716	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:40.822254896 CET	443	49716	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:40.822288036 CET	443	49716	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:40.822386980 CET	49716	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:40.823012114 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:40.823049068 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:40.823272943 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:40.823698044 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:40.823713064 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:40.826389074 CET	53	49718	1.1.1.1	192.168.2.5
Feb 22, 2025 01:00:40.826466084 CET	49718	53	192.168.2.5	1.1.1.1
Feb 22, 2025 01:00:40.835268021 CET	49716	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:40.835303068 CET	443	49716	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:40.836462975 CET	49722	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:40.836473942 CET	443	49722	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:40.836554050 CET	49722	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:40.837522984 CET	49723	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:40.837532997 CET	443	49723	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:40.837697983 CET	49723	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:40.838327885 CET	49722	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:40.838339090 CET	443	49722	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:40.838862896 CET	49723	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:40.838877916 CET	443	49723	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:40.839381933 CET	49724	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:40.839447021 CET	443	49724	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:40.839521885 CET	49724	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:40.839708090 CET	49724	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:40.839741945 CET	443	49724	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:40.860485077 CET	49725	443	192.168.2.5	3.126.54.211
Feb 22, 2025 01:00:40.860512972 CET	443	49725	3.126.54.211	192.168.2.5
Feb 22, 2025 01:00:40.860733986 CET	49725	443	192.168.2.5	3.126.54.211
Feb 22, 2025 01:00:40.861032963 CET	49725	443	192.168.2.5	3.126.54.211
Feb 22, 2025 01:00:40.861044884 CET	443	49725	3.126.54.211	192.168.2.5
Feb 22, 2025 01:00:41.525998116 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.528456926 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.528486013 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.529545069 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.529598951 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.530826092 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.530883074 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.531198978 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.531208992 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.539328098 CET	443	49723	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.540010929 CET	49723	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.540019989 CET	443	49723	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.541085005 CET	443	49723	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.541136980 CET	49723	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.542562008 CET	443	49724	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.544272900 CET	49723	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.544327021 CET	443	49723	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.544478893 CET	49723	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.544492006 CET	443	49723	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.544955969 CET	49724	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.544971943 CET	443	49724	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.545958996 CET	443	49724	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.546015024 CET	49724	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.546350956 CET	49724	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.546401024 CET	443	49724	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.546669006 CET	49724	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.546675920 CET	443	49724	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.552071095 CET	443	49722	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.552964926 CET	49722	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.552978039 CET	443	49722	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.554029942 CET	443	49722	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.554101944 CET	49722	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.554959059 CET	49722	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.555051088 CET	49722	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.555056095 CET	443	49722	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.556344986 CET	443	49722	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.571927071 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.587301016 CET	443	49725	3.126.54.211	192.168.2.5
Feb 22, 2025 01:00:41.588119030 CET	49725	443	192.168.2.5	3.126.54.211
Feb 22, 2025 01:00:41.588129044 CET	443	49725	3.126.54.211	192.168.2.5
Feb 22, 2025 01:00:41.589370012 CET	443	49725	3.126.54.211	192.168.2.5
Feb 22, 2025 01:00:41.589529991 CET	49725	443	192.168.2.5	3.126.54.211
Feb 22, 2025 01:00:41.590585947 CET	49724	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.590589046 CET	49725	443	192.168.2.5	3.126.54.211
Feb 22, 2025 01:00:41.590665102 CET	443	49725	3.126.54.211	192.168.2.5
Feb 22, 2025 01:00:41.590703964 CET	49723	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.606180906 CET	49722	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.606194973 CET	443	49722	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.635328054 CET	49725	443	192.168.2.5	3.126.54.211
Feb 22, 2025 01:00:41.635339022 CET	443	49725	3.126.54.211	192.168.2.5
Feb 22, 2025 01:00:41.650760889 CET	49722	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.684066057 CET	49725	443	192.168.2.5	3.126.54.211
Feb 22, 2025 01:00:41.783004999 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.783032894 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.783041954 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.783055067 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.783085108 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.783130884 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.783160925 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.783185959 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.783204079 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.796483994 CET	443	49723	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.796561956 CET	443	49723	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.796652079 CET	49723	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.805562973 CET	443	49724	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.805589914 CET	443	49724	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.805619001 CET	443	49724	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.805658102 CET	443	49724	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.805691004 CET	443	49724	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.805701971 CET	49724	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.805717945 CET	443	49724	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.805772066 CET	49724	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.816557884 CET	443	49722	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.865201950 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.865360975 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.865391970 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.866895914 CET	49722	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.866913080 CET	443	49722	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.875304937 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.875332117 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.875449896 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.875463963 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.883255959 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.883359909 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.883374929 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.891170979 CET	443	49724	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.891282082 CET	49724	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.891299009 CET	443	49724	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.902756929 CET	443	49724	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.902780056 CET	443	49724	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.902873993 CET	49724	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.902888060 CET	443	49724	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.906764030 CET	443	49722	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.906775951 CET	443	49722	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.906796932 CET	443	49722	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.906807899 CET	443	49722	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.906816006 CET	443	49722	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.906871080 CET	49722	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.906891108 CET	443	49722	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.906919003 CET	443	49722	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.906961918 CET	49722	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.906961918 CET	49722	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.907804966 CET	443	49722	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.907812119 CET	443	49722	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.907843113 CET	443	49722	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.907891035 CET	49722	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.907900095 CET	443	49722	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.907916069 CET	443	49722	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.907922983 CET	49722	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.907982111 CET	49722	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.912399054 CET	443	49724	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.912480116 CET	49724	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.912488937 CET	443	49724	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.932646990 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.952214956 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.952243090 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.952357054 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.952373028 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.952425003 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.953326941 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.953345060 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.953402042 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.953408003 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.955554962 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.955904007 CET	49724	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.962163925 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.962186098 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.962246895 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.962256908 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.962312937 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.974968910 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.978077888 CET	443	49724	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.978125095 CET	443	49724	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.978149891 CET	49724	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.978163958 CET	443	49724	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.978218079 CET	443	49724	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.978236914 CET	49724	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.978270054 CET	49724	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.980921984 CET	49723	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.980940104 CET	443	49723	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.983643055 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.983670950 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.983733892 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.983747959 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.983798981 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.987684965 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.987720966 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.988826036 CET	49722	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.988856077 CET	443	49722	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:41.991235018 CET	49724	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:41.991256952 CET	443	49724	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.039237022 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.039330959 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.039352894 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.039984941 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.040005922 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.040049076 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.040055990 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.040090084 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.040225983 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.040278912 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.040287018 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.042602062 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.042619944 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.042743921 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.042743921 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.042752981 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.042788029 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.042840004 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.042848110 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.044604063 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.044620991 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.044662952 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.044668913 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.044708967 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.048175097 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.048257113 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.048264027 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.048315048 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.056437969 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.056462049 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.056525946 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.056535006 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.056572914 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.061544895 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.061615944 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.061623096 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.064795971 CET	49726	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:42.064841986 CET	443	49726	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:42.064872980 CET	49727	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:42.064908028 CET	443	49727	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:42.064930916 CET	49726	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:42.065036058 CET	49727	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:42.065267086 CET	49727	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:42.065283060 CET	443	49727	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:42.065318108 CET	49726	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:42.065335035 CET	443	49726	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:42.104135990 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.104162931 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.104231119 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.104259014 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.125801086 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.125910044 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.125937939 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.126164913 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.126178980 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.126214027 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.126224041 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.126245975 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.126513958 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.126564026 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.126569986 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.127449989 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.127465010 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.127490997 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.127517939 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.127527952 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.127567053 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.128124952 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.128140926 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.128175974 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.128181934 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.128201008 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.128218889 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.129600048 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.129653931 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.129662037 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.129714012 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.129771948 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.141459942 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.143203974 CET	49719	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.143224001 CET	443	49719	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.152389050 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:42.152435064 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:42.152950048 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:42.153122902 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:42.153136015 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:42.176068068 CET	49729	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.176114082 CET	443	49729	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.176204920 CET	49729	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.180286884 CET	49730	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.180330038 CET	443	49730	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.180386066 CET	49730	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.185139894 CET	49731	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.185165882 CET	443	49731	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.185247898 CET	49731	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.188585043 CET	49731	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.188599110 CET	443	49731	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.188617945 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.188661098 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.188707113 CET	49732	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.188708067 CET	49734	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.188750029 CET	443	49732	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.188766956 CET	443	49734	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.188855886 CET	49730	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.188874006 CET	443	49730	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.189009905 CET	49729	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.189026117 CET	443	49729	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.189280987 CET	49732	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.189280987 CET	49734	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.189280987 CET	49734	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.189280987 CET	49732	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.189322948 CET	443	49734	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.189346075 CET	443	49732	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.189410925 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.189410925 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.189455986 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.758830070 CET	443	49726	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:42.764425993 CET	49726	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:42.764450073 CET	443	49726	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:42.765460014 CET	443	49726	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:42.765544891 CET	49726	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:42.766376972 CET	49726	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:42.766455889 CET	443	49726	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:42.766839981 CET	49726	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:42.766855001 CET	443	49726	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:42.774955988 CET	443	49727	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:42.782113075 CET	49727	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:42.782144070 CET	443	49727	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:42.783365011 CET	443	49727	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:42.783428907 CET	49727	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:42.783977032 CET	49727	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:42.783977985 CET	49727	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:42.784056902 CET	443	49727	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:42.810020924 CET	49726	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:42.827491999 CET	49727	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:42.827506065 CET	443	49727	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:42.859570980 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:42.859877110 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:42.859891891 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:42.860934973 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:42.861079931 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:42.861583948 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:42.861583948 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:42.861637115 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:42.869803905 CET	49727	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:42.885556936 CET	443	49730	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.887125015 CET	49730	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.887142897 CET	443	49730	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.887516022 CET	443	49730	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.887890100 CET	49730	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.887952089 CET	443	49730	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.888062000 CET	49730	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.895505905 CET	443	49734	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.895740032 CET	49734	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.895761967 CET	443	49734	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.896816969 CET	443	49734	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.896903038 CET	49734	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.897243023 CET	49734	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.897313118 CET	443	49734	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.897542000 CET	49734	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.897550106 CET	443	49734	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.909800053 CET	443	49732	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.910168886 CET	49732	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.910178900 CET	443	49732	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.910506010 CET	443	49729	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.910692930 CET	49729	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.910717964 CET	443	49729	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.911257982 CET	443	49732	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.911355019 CET	49732	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.911911964 CET	49732	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.911983967 CET	443	49732	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.912097931 CET	49732	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.912173033 CET	443	49729	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.912241936 CET	49729	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.912522078 CET	49729	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.912587881 CET	443	49729	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.912621975 CET	49729	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.916954041 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:42.916986942 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:42.918941021 CET	443	49731	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.919353962 CET	49731	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.919382095 CET	443	49731	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.919773102 CET	443	49731	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.920182943 CET	49731	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.920249939 CET	443	49731	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.920311928 CET	49731	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.921997070 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.922228098 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.922238111 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.923301935 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.923441887 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.923799038 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.923799038 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.923813105 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.923866987 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.931334972 CET	443	49730	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.940818071 CET	49734	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.955329895 CET	443	49732	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.955334902 CET	443	49729	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.963331938 CET	443	49731	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.963499069 CET	49732	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.963511944 CET	443	49732	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.963512897 CET	49729	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.963527918 CET	443	49729	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:42.963670015 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:42.963670015 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:42.963696957 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.010353088 CET	49729	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.010462999 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.010464907 CET	49732	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.048357010 CET	443	49727	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.048388004 CET	443	49727	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.048394918 CET	443	49727	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.048420906 CET	443	49727	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.048429966 CET	443	49727	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.048439026 CET	443	49727	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.048446894 CET	49727	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.048455954 CET	443	49727	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.048502922 CET	49727	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.123531103 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.123573065 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.123584986 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.123609066 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.123625994 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.123648882 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.123686075 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.123686075 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.123703957 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.123748064 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.123748064 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.131858110 CET	443	49727	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.131872892 CET	443	49727	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.132038116 CET	49727	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.132045031 CET	443	49727	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.141177893 CET	443	49730	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.141206980 CET	443	49730	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.141249895 CET	49730	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.141272068 CET	443	49730	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.141288042 CET	443	49730	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.141307116 CET	49730	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.141340017 CET	49730	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.142369986 CET	49730	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.142385960 CET	443	49730	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.143767118 CET	443	49726	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.143793106 CET	443	49726	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.143915892 CET	49726	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.143927097 CET	443	49726	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.144371033 CET	49735	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.144411087 CET	443	49735	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.144545078 CET	49735	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.145065069 CET	49735	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.145076990 CET	443	49735	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.148155928 CET	49736	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.148195982 CET	443	49736	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.148392916 CET	49736	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.148497105 CET	49736	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.148511887 CET	443	49736	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.150366068 CET	443	49727	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.150387049 CET	443	49727	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.150394917 CET	443	49727	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.150412083 CET	443	49726	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.150425911 CET	443	49726	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.150440931 CET	443	49726	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.150465965 CET	49727	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.150473118 CET	443	49727	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.150541067 CET	49726	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.150567055 CET	443	49726	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.150729895 CET	49726	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.159456015 CET	443	49734	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.159969091 CET	443	49734	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.160028934 CET	49734	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.160657883 CET	49734	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.160670996 CET	443	49734	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.161582947 CET	443	49727	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.161645889 CET	49727	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.161653042 CET	443	49727	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.163381100 CET	49737	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.163474083 CET	443	49737	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.163557053 CET	49737	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.163789034 CET	49737	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.163822889 CET	443	49737	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.164984941 CET	49738	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.165031910 CET	443	49738	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.165165901 CET	49738	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.165361881 CET	49738	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.165374994 CET	443	49738	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.171956062 CET	443	49729	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.172013044 CET	443	49729	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.172033072 CET	443	49729	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.172055006 CET	443	49729	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.172071934 CET	49729	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.172091961 CET	443	49729	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.172112942 CET	443	49729	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.172126055 CET	49729	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.172138929 CET	443	49729	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.172141075 CET	49729	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.172288895 CET	443	49729	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.172346115 CET	49729	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.172797918 CET	49729	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.172812939 CET	443	49729	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.182926893 CET	49739	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.183001995 CET	443	49739	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.183084965 CET	49739	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.184247017 CET	443	49732	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.184274912 CET	443	49732	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.184283018 CET	443	49732	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.184295893 CET	443	49732	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.184313059 CET	443	49732	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.184319973 CET	443	49732	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.184351921 CET	49732	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.184370995 CET	443	49732	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.184407949 CET	49732	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.184412003 CET	49739	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.184437990 CET	443	49739	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.184498072 CET	49732	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.185384035 CET	49740	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.185420990 CET	443	49740	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.185518026 CET	49740	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.186060905 CET	49740	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.186086893 CET	443	49740	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.188163042 CET	443	49731	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.188822031 CET	443	49731	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.188884020 CET	49731	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.189207077 CET	49731	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.189219952 CET	443	49731	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.189790010 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.189812899 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.189820051 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.189843893 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.189857006 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.189868927 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.189888954 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.189899921 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.189915895 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.189973116 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.191612005 CET	49741	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.191651106 CET	443	49741	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.191788912 CET	49741	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.192099094 CET	49741	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.192112923 CET	443	49741	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.207150936 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.207176924 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.207334042 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.207341909 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.209280968 CET	49727	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.212539911 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.212554932 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.212606907 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.212624073 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.218543053 CET	443	49727	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.218556881 CET	443	49727	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.218594074 CET	443	49727	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.218609095 CET	49727	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.218612909 CET	443	49727	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.218658924 CET	49727	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.218660116 CET	443	49727	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.218931913 CET	49727	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.218940020 CET	443	49727	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.218949080 CET	49727	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.219398975 CET	49742	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.219446898 CET	443	49742	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.219521046 CET	49742	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.219980955 CET	49742	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.220007896 CET	443	49742	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.222976923 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.223134041 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.223144054 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.230237961 CET	443	49726	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.230355024 CET	49726	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.230362892 CET	443	49726	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.242029905 CET	443	49726	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.242058039 CET	443	49726	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.242126942 CET	49726	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.242135048 CET	443	49726	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.242208958 CET	49726	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.252032042 CET	443	49726	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.252135038 CET	443	49726	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.252137899 CET	49726	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.252207994 CET	49726	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.252652884 CET	49726	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.252667904 CET	443	49726	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.267767906 CET	443	49732	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.267784119 CET	443	49732	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.267853022 CET	49732	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.267870903 CET	443	49732	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.267885923 CET	443	49732	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.267951965 CET	49732	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.268827915 CET	49732	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.268835068 CET	443	49732	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.276619911 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.277694941 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.277709007 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.277800083 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.277818918 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.280668020 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.280684948 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.280775070 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.280775070 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.280783892 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.284852982 CET	49743	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.284904003 CET	443	49743	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.284967899 CET	49743	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.285164118 CET	49743	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.285176039 CET	443	49743	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.289202929 CET	49744	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.289242983 CET	443	49744	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.289310932 CET	49744	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.289628983 CET	49744	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.289650917 CET	443	49744	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.291259050 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.291336060 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.291353941 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.296303988 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.296313047 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.296351910 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.296380043 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.296389103 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.296428919 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.296428919 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.297812939 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.297833920 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.297944069 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.297950983 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.298204899 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.301940918 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.301959038 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.302196980 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.302205086 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.302261114 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.321351051 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.321377993 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.321458101 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.321476936 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.321541071 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.321541071 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.339525938 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.370316982 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.370332003 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.370389938 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.370399952 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.370429993 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.370443106 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.370476007 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.370492935 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.371448994 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.371674061 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.371680021 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.371764898 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.373440981 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.373462915 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.373533010 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.373538971 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.384913921 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.384999990 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.385015965 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.385462999 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.385478020 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.385551929 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.385560036 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.385833025 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.385952950 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.385963917 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.386563063 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.386575937 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.386631012 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.386639118 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.387273073 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.387334108 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.387343884 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.388137102 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.388171911 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.388211012 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.388230085 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.388308048 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.390218973 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.390233994 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.390382051 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.390392065 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.390909910 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.390974045 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.390980959 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.400573015 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.400599003 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.400688887 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.400688887 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.400705099 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.406970024 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.407067060 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.407077074 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.431457043 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.462347031 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.462359905 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.462486029 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.462506056 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.462537050 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.462945938 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.462961912 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.463000059 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.463006973 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.463052034 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.463130951 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.463179111 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.463184118 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.464061975 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.464085102 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.464138985 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.464148998 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.464281082 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.464337111 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.464342117 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.464858055 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.464871883 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.464912891 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.464920044 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.464970112 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.465063095 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.465115070 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.465121984 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.465156078 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.465492964 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.471182108 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.471198082 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.471273899 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.471282959 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.471323967 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.474030018 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.474107981 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.474137068 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.474143982 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.474172115 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.474189997 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.474251032 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.474298954 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.474306107 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.474314928 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.474334002 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.474364996 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.474370956 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.474390030 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.474541903 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.474596024 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.474602938 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.474756956 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.474817038 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.474826097 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.475025892 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.475039959 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.475078106 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.475083113 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.475089073 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.475112915 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.475173950 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.475179911 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.475577116 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.475591898 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.475632906 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.475640059 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.475666046 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.475827932 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.475869894 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.475874901 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.475935936 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.475979090 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.477125883 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.481465101 CET	49728	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.481487036 CET	443	49728	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.483413935 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.483428955 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.483521938 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.483545065 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.527714014 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.554811954 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.554924965 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.554941893 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.555008888 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.555644035 CET	49733	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.555661917 CET	443	49733	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.561666012 CET	49745	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.561711073 CET	443	49745	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.561806917 CET	49745	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.562200069 CET	49745	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.562213898 CET	443	49745	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.564332962 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.564383984 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.564469099 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.564670086 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.564687967 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.877876043 CET	443	49738	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.878222942 CET	49738	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.878254890 CET	443	49738	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.878660917 CET	443	49738	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.878990889 CET	49738	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.879064083 CET	443	49738	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.879137993 CET	49738	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.880651951 CET	443	49737	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.880834103 CET	49737	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.880867004 CET	443	49737	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.881242037 CET	443	49737	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.881525993 CET	49737	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.881603956 CET	443	49737	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.881619930 CET	49737	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.890837908 CET	443	49739	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.891125917 CET	49739	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.891144037 CET	443	49739	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.892082930 CET	443	49736	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.892281055 CET	49736	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.892287970 CET	443	49736	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.892611027 CET	443	49739	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.892688036 CET	49739	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.892944098 CET	443	49736	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.893043995 CET	49739	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.893111944 CET	443	49739	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.893351078 CET	49736	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.893434048 CET	443	49736	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.893457890 CET	49739	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.893465042 CET	443	49739	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.893508911 CET	49736	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.894041061 CET	443	49735	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.894215107 CET	49735	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.894228935 CET	443	49735	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.894536018 CET	443	49735	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.894830942 CET	49735	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.894908905 CET	49735	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.894912958 CET	443	49735	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.896333933 CET	443	49741	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.896584034 CET	49741	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.896590948 CET	443	49741	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.897612095 CET	443	49741	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.897670984 CET	49741	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.897977114 CET	49741	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.898020983 CET	443	49741	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.898086071 CET	49741	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.898092031 CET	443	49741	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.904130936 CET	443	49740	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.904349089 CET	49740	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.904361010 CET	443	49740	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.905401945 CET	443	49740	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.905483007 CET	49740	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.905796051 CET	49740	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.905863047 CET	443	49740	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.905890942 CET	49740	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.919336081 CET	443	49738	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.926572084 CET	49737	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.926585913 CET	443	49737	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.935328960 CET	443	49735	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.935340881 CET	443	49736	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.941937923 CET	49735	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.941942930 CET	49741	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.941943884 CET	49739	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.950552940 CET	443	49742	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.950846910 CET	49742	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.950859070 CET	443	49742	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.951324940 CET	443	49740	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.951948881 CET	443	49742	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.952014923 CET	49742	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.952368975 CET	49742	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.952441931 CET	443	49742	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.952522039 CET	49742	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.952533007 CET	443	49742	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.957231045 CET	49740	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.957243919 CET	443	49740	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.996393919 CET	443	49743	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.996691942 CET	49743	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:43.996705055 CET	443	49743	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:43.996757984 CET	443	49744	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.996917009 CET	49744	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.996941090 CET	443	49744	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.997988939 CET	443	49744	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.998070955 CET	49744	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.998398066 CET	49744	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.998450994 CET	443	49744	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:43.998531103 CET	49744	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:43.998538017 CET	443	49744	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.000464916 CET	443	49743	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.000534058 CET	49743	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.000813007 CET	49743	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.000899076 CET	49743	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.000905037 CET	443	49743	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.000993013 CET	443	49743	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.003170013 CET	49742	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.006778955 CET	49740	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.048986912 CET	49744	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.049189091 CET	49743	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.049202919 CET	443	49743	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.103532076 CET	49743	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.133420944 CET	443	49738	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.133450985 CET	443	49738	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.133527040 CET	49738	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.133548021 CET	443	49738	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.133698940 CET	443	49738	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.133717060 CET	49738	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.133865118 CET	49738	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.134850979 CET	443	49737	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.134913921 CET	443	49737	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.135051966 CET	49737	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.139791012 CET	49737	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.139820099 CET	443	49737	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.141639948 CET	49738	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.141659021 CET	443	49738	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.145353079 CET	49747	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.145406008 CET	443	49747	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.145572901 CET	49747	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.145944118 CET	49747	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.145956993 CET	443	49747	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.152316093 CET	49748	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.152328014 CET	443	49748	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.152575970 CET	49748	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.152868032 CET	49748	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.152879953 CET	443	49748	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.156546116 CET	443	49739	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.156573057 CET	443	49739	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.156616926 CET	49739	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.156629086 CET	443	49739	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.156687975 CET	49739	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.156888008 CET	443	49739	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.156958103 CET	443	49739	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.157022953 CET	49739	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.158541918 CET	49739	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.158554077 CET	443	49739	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.161737919 CET	443	49741	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.161762953 CET	443	49736	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.161824942 CET	443	49736	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.161859989 CET	49736	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.162105083 CET	443	49741	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.162442923 CET	49741	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.163608074 CET	443	49735	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.163675070 CET	443	49735	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.163712025 CET	49735	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.172739983 CET	49749	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.172781944 CET	443	49749	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.172835112 CET	49749	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.173031092 CET	49749	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.173043013 CET	443	49749	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.174207926 CET	443	49740	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.174228907 CET	443	49740	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.174236059 CET	443	49740	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.174247980 CET	443	49740	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.174253941 CET	443	49740	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.174269915 CET	443	49740	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.174280882 CET	49740	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.174310923 CET	443	49740	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.174335957 CET	443	49740	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.174336910 CET	49740	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.174361944 CET	49740	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.174377918 CET	49740	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.176414013 CET	49736	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.176429987 CET	443	49736	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.177531004 CET	49741	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.177539110 CET	443	49741	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.179029942 CET	49735	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.179045916 CET	443	49735	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.182519913 CET	49750	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.182544947 CET	443	49750	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.182790995 CET	49750	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.183021069 CET	49750	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.183033943 CET	443	49750	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.185094118 CET	49751	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.185106039 CET	443	49751	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.185563087 CET	49740	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.185583115 CET	443	49740	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.185600042 CET	49751	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.186532021 CET	49751	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.186538935 CET	443	49751	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.199337959 CET	49752	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.199369907 CET	443	49752	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.199518919 CET	49752	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.200587034 CET	49752	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.200603008 CET	443	49752	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.201440096 CET	49753	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.201467991 CET	443	49753	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.201512098 CET	49753	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.201833010 CET	49753	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.201843977 CET	443	49753	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.220113039 CET	443	49742	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.220415115 CET	443	49742	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.220465899 CET	49742	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.221260071 CET	49742	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.221271038 CET	443	49742	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.221667051 CET	49754	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.221685886 CET	443	49754	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.221743107 CET	49754	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.222711086 CET	49754	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.222719908 CET	443	49754	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.257442951 CET	443	49745	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.257692099 CET	49745	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.257707119 CET	443	49745	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.258677006 CET	443	49743	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.258743048 CET	443	49743	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.258761883 CET	443	49745	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.258764029 CET	443	49743	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.258783102 CET	443	49743	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.258794069 CET	49743	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.258814096 CET	443	49743	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.258836031 CET	49745	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.258838892 CET	443	49743	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.258846045 CET	49743	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.258860111 CET	443	49743	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.258879900 CET	443	49743	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.258886099 CET	49743	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.258908033 CET	49743	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.258925915 CET	443	49743	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.258925915 CET	49743	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.259993076 CET	443	49744	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.260020018 CET	443	49744	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.260027885 CET	443	49744	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.260041952 CET	443	49744	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.260066032 CET	49744	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.260067940 CET	443	49744	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.260091066 CET	443	49744	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.260103941 CET	49744	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.260130882 CET	49744	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.260839939 CET	49745	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.260900021 CET	443	49745	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.261182070 CET	49745	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.261190891 CET	443	49745	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.261373997 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.261678934 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.261691093 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.263672113 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.263736010 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.264463902 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.264547110 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.264858961 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.264867067 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.309420109 CET	49743	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.309449911 CET	49745	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.310009003 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.344110966 CET	443	49743	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.344135046 CET	443	49743	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.344161987 CET	443	49743	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.344278097 CET	49743	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.344300985 CET	443	49743	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.344330072 CET	49743	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.344351053 CET	49743	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.345936060 CET	443	49744	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.346023083 CET	49744	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.346039057 CET	443	49744	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.346055031 CET	443	49744	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.346101999 CET	49744	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.368218899 CET	49744	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.368235111 CET	443	49744	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.370235920 CET	49743	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.370265007 CET	443	49743	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.380165100 CET	49755	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.380214930 CET	443	49755	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.380356073 CET	49755	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.380747080 CET	49755	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.380768061 CET	443	49755	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.518887043 CET	443	49745	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.519336939 CET	443	49745	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.519397974 CET	49745	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.524353027 CET	49745	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.524379969 CET	443	49745	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.526448011 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.526468039 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.526474953 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.526503086 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.526530981 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.526535988 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.526556969 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.526580095 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.526598930 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.531549931 CET	49756	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.531595945 CET	443	49756	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.531961918 CET	49756	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.531961918 CET	49756	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.532002926 CET	443	49756	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.594484091 CET	49757	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.594537973 CET	443	49757	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.594602108 CET	49757	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.595073938 CET	49757	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.595104933 CET	443	49757	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.622374058 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.622461081 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.622488976 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.623747110 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.623766899 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.623811007 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.623816967 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.623856068 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.628427029 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.628503084 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.628510952 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.628550053 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.709460974 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.709481955 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.709619045 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.709645033 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.709687948 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.710287094 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.710325003 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.710350037 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.710356951 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.710382938 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.712928057 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.712946892 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.712991953 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.713002920 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.713035107 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.760243893 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.760263920 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.760319948 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.760341883 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.760379076 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.760437012 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.781621933 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.781790018 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.781820059 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.796602964 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.796622038 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.796777010 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.796786070 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.797816992 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.797899008 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.797909975 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.799369097 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.799384117 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.799454927 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.799465895 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.799581051 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.799639940 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.799647093 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.801274061 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.801287889 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.801367998 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.801376104 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.802258968 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.802320957 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.802329063 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.804384947 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.804405928 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.804444075 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.804450035 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.804475069 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.810966969 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.811070919 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.811078072 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.853935957 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.865315914 CET	443	49747	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.865717888 CET	49747	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.865747929 CET	443	49747	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.866105080 CET	443	49747	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.866547108 CET	49747	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.866630077 CET	443	49747	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.866723061 CET	49747	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.868386030 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.868407965 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.868439913 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.868503094 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.868529081 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.868545055 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.868563890 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.868590117 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.869350910 CET	49746	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.869373083 CET	443	49746	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.869828939 CET	49758	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.869877100 CET	443	49758	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.869954109 CET	49758	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.871062994 CET	49758	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.871078014 CET	443	49758	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.888176918 CET	443	49748	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.888516903 CET	49748	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.888551950 CET	443	49748	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.888950109 CET	443	49748	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.889266014 CET	49748	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.889336109 CET	443	49748	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.889426947 CET	49748	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.890820026 CET	443	49749	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.891063929 CET	49749	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.891087055 CET	443	49749	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.892261028 CET	443	49749	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.892606974 CET	49749	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.892733097 CET	49749	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.892741919 CET	443	49749	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.892787933 CET	443	49749	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.897411108 CET	443	49751	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.897732973 CET	49751	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.897752047 CET	443	49751	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.898242950 CET	443	49750	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.898456097 CET	49750	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.898480892 CET	443	49750	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.898864985 CET	443	49751	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.898929119 CET	49751	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.899245024 CET	49751	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.899334908 CET	443	49751	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.899373055 CET	49751	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.902066946 CET	443	49750	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.902144909 CET	49750	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.902532101 CET	49750	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.902601004 CET	443	49750	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.902730942 CET	49750	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.902740955 CET	443	49750	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.907335043 CET	443	49747	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.909168959 CET	443	49752	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.909410954 CET	49752	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.909421921 CET	443	49752	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.909784079 CET	443	49752	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.910279989 CET	49752	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.910279989 CET	49752	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.910340071 CET	443	49752	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.932847977 CET	49749	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.935338974 CET	443	49748	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.935935020 CET	443	49753	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.936247110 CET	49753	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.936275959 CET	443	49753	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.937391043 CET	443	49753	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.937587023 CET	49753	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.938019991 CET	49753	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.938019991 CET	49753	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.938095093 CET	443	49753	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.943330050 CET	443	49751	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.945195913 CET	443	49754	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.945574045 CET	49754	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.945585966 CET	443	49754	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.946647882 CET	443	49754	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.946731091 CET	49754	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.947628975 CET	49754	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.947628975 CET	49754	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.947710991 CET	443	49754	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.948097944 CET	49751	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.948098898 CET	49750	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.948118925 CET	443	49751	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:44.964253902 CET	49752	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.979753017 CET	49753	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.979789972 CET	443	49753	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:44.994887114 CET	49751	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:44.994894981 CET	49754	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:44.994906902 CET	443	49754	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.025357008 CET	49753	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.040923119 CET	49754	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.106739998 CET	443	49755	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.107120037 CET	49755	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:45.107152939 CET	443	49755	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.108300924 CET	443	49755	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.108692884 CET	49755	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:45.108808041 CET	49755	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:45.108814001 CET	443	49755	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.108870983 CET	443	49755	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.136034012 CET	443	49747	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.136065960 CET	443	49747	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.136169910 CET	49747	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:45.136203051 CET	443	49747	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.136377096 CET	443	49747	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.136452913 CET	49747	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:45.139987946 CET	49747	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:45.140005112 CET	443	49747	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.147694111 CET	49761	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:45.147737980 CET	443	49761	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.147802114 CET	49761	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:45.148155928 CET	49761	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:45.148169041 CET	443	49761	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.149123907 CET	443	49749	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.149597883 CET	443	49749	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.149656057 CET	49749	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:45.151546001 CET	49755	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:45.155180931 CET	49749	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:45.155200005 CET	443	49749	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.156399012 CET	443	49748	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.156488895 CET	443	49748	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.156533003 CET	49748	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.156549931 CET	443	49750	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.156735897 CET	443	49750	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.156841993 CET	49750	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:45.161355972 CET	49762	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:45.161395073 CET	443	49762	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.161464930 CET	49762	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:45.162087917 CET	49762	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:45.162101030 CET	443	49762	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.163919926 CET	49750	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:45.163942099 CET	443	49750	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.164877892 CET	49748	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.164891005 CET	443	49748	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.165267944 CET	443	49751	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.165447950 CET	443	49751	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.165493965 CET	49751	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:45.167766094 CET	443	49752	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.167788029 CET	443	49752	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.167840958 CET	443	49752	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.167850971 CET	49752	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.167891026 CET	49752	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.171896935 CET	49763	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.171931982 CET	443	49763	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.171993971 CET	49763	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.180794954 CET	49763	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.180824041 CET	443	49763	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.200840950 CET	49752	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.200858116 CET	443	49752	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.201169014 CET	49751	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:45.201210022 CET	443	49751	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.205482960 CET	49764	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.205530882 CET	443	49764	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.205607891 CET	49764	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.205826998 CET	49764	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.205843925 CET	443	49764	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.207130909 CET	443	49753	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.207621098 CET	443	49753	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.207755089 CET	49753	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.208081961 CET	49753	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.208100080 CET	443	49753	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.211421967 CET	49765	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.211498022 CET	443	49765	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.211580038 CET	49765	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.211822033 CET	49765	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.211853027 CET	443	49765	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.220319033 CET	443	49754	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.220494986 CET	443	49754	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.220837116 CET	49754	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.222325087 CET	49754	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.222333908 CET	443	49754	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.222692966 CET	49766	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.222743988 CET	443	49766	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.222803116 CET	49766	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.223254919 CET	49766	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.223279953 CET	443	49766	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.256026030 CET	443	49756	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.256571054 CET	49756	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:45.256596088 CET	443	49756	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.257025003 CET	443	49756	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.257426023 CET	49756	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:45.257507086 CET	443	49756	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.257780075 CET	49756	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:45.299338102 CET	443	49756	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.310463905 CET	443	49757	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.310842037 CET	49757	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.310869932 CET	443	49757	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.312093973 CET	443	49757	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.312602997 CET	49757	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.312633991 CET	49757	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.312725067 CET	443	49757	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.354445934 CET	49757	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.372946978 CET	443	49755	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.373384953 CET	443	49755	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.373449087 CET	49755	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:45.373989105 CET	49755	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:45.374011993 CET	443	49755	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.522114992 CET	443	49756	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.522300959 CET	443	49756	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.522377968 CET	49756	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:45.523205042 CET	49756	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:45.523226023 CET	443	49756	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.574614048 CET	443	49757	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.574680090 CET	443	49757	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.574701071 CET	443	49757	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.574743032 CET	443	49757	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.574784994 CET	443	49757	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.574806929 CET	49757	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.574824095 CET	443	49757	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.574835062 CET	49757	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.574865103 CET	49757	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.600157022 CET	443	49758	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.600533962 CET	49758	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.600567102 CET	443	49758	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.601752043 CET	443	49758	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.602119923 CET	49758	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.602200985 CET	443	49758	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.602266073 CET	49758	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.643338919 CET	443	49758	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.653749943 CET	443	49757	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.653860092 CET	49757	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.653888941 CET	443	49757	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.653920889 CET	443	49757	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.653971910 CET	49757	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.654230118 CET	49757	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.654247999 CET	443	49757	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.654723883 CET	49767	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.654778957 CET	443	49767	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.654854059 CET	49767	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.655330896 CET	49767	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.655349970 CET	443	49767	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.801887035 CET	443	49758	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.802109957 CET	443	49758	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.802186012 CET	49758	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.803539991 CET	49758	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.803563118 CET	443	49758	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.804073095 CET	49768	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.804111958 CET	443	49768	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.804199934 CET	49768	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.805139065 CET	49768	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.805165052 CET	443	49768	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.845624924 CET	443	49761	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.845972061 CET	49761	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:45.846003056 CET	443	49761	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.846359968 CET	443	49761	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.846679926 CET	49761	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:45.846756935 CET	443	49761	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.846832037 CET	49761	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:45.883270025 CET	443	49763	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.883620977 CET	49763	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.883651972 CET	443	49763	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.884021044 CET	443	49763	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.886244059 CET	49763	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.886323929 CET	443	49763	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.886467934 CET	49763	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.887341022 CET	443	49761	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.900945902 CET	443	49762	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.907855034 CET	49762	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:45.907876015 CET	443	49762	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.908381939 CET	443	49762	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.908739090 CET	49762	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:45.908814907 CET	443	49762	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.908977032 CET	49762	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:45.916976929 CET	443	49764	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.917248011 CET	49764	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.917274952 CET	443	49764	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.917614937 CET	443	49764	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.918081045 CET	49764	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.918145895 CET	443	49764	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.918294907 CET	49764	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.931338072 CET	443	49763	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.945522070 CET	443	49765	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.945974112 CET	49765	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.945996046 CET	443	49765	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.947077036 CET	443	49765	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.947211981 CET	49765	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.948179960 CET	49765	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.948263884 CET	443	49765	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.948519945 CET	49765	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.948529005 CET	443	49765	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.951349020 CET	443	49762	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:45.958638906 CET	443	49766	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.958970070 CET	49766	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.958988905 CET	443	49766	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.960036039 CET	443	49766	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.960158110 CET	49766	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.960505009 CET	49766	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.960617065 CET	443	49766	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.960653067 CET	49766	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:45.963325977 CET	443	49764	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:45.993572950 CET	49765	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.007391930 CET	443	49766	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.008698940 CET	49766	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.008713961 CET	443	49766	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.055464983 CET	49766	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.103029966 CET	443	49761	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:46.103521109 CET	443	49761	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:46.103595972 CET	49761	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:46.104212999 CET	49761	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:46.104228020 CET	443	49761	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:46.139828920 CET	443	49763	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.139853001 CET	443	49763	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.139934063 CET	49763	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.139971972 CET	443	49763	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.140290022 CET	443	49763	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.140341997 CET	49763	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.140836954 CET	49763	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.140862942 CET	443	49763	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.140878916 CET	49763	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.140908957 CET	49763	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.141335011 CET	49769	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.141381025 CET	443	49769	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.141458035 CET	49769	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.141813040 CET	49769	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.141824961 CET	443	49769	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.170592070 CET	443	49762	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:46.170705080 CET	443	49762	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:46.170787096 CET	49762	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:46.171612978 CET	49762	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:46.171631098 CET	443	49762	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:46.181107044 CET	443	49764	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.181654930 CET	443	49764	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.181739092 CET	49764	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.184165001 CET	49764	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.184191942 CET	443	49764	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.185358047 CET	49770	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.185391903 CET	443	49770	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.185472965 CET	49770	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.185825109 CET	49770	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.185836077 CET	443	49770	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.216730118 CET	443	49765	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.216834068 CET	443	49765	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.216928959 CET	49765	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.224425077 CET	443	49766	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.224524975 CET	443	49766	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.224600077 CET	49766	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.225395918 CET	49771	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:46.225440025 CET	443	49771	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:46.225521088 CET	49771	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:46.225872993 CET	49772	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:46.225914955 CET	443	49772	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:46.225974083 CET	49772	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:46.226109028 CET	49771	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:46.226125956 CET	443	49771	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:46.226277113 CET	49772	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:46.226293087 CET	443	49772	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:46.227268934 CET	49773	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:46.227327108 CET	443	49773	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:46.227391005 CET	49773	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:46.228190899 CET	49773	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:46.228208065 CET	443	49773	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:46.228704929 CET	49765	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.228743076 CET	443	49765	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.236778021 CET	49766	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.236813068 CET	443	49766	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.361485004 CET	443	49767	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.361856937 CET	49767	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.361887932 CET	443	49767	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.362442017 CET	443	49767	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.362787962 CET	49767	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.362855911 CET	443	49767	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.362942934 CET	49767	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.403332949 CET	443	49767	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.504523993 CET	443	49768	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.505534887 CET	49768	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.505559921 CET	443	49768	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.506073952 CET	443	49768	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.506561995 CET	49768	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.506561995 CET	49768	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.506637096 CET	443	49768	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.556845903 CET	49768	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.632956982 CET	443	49767	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.633047104 CET	443	49767	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.633117914 CET	49767	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.633847952 CET	49767	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.633869886 CET	443	49767	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.731906891 CET	443	49771	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:46.732304096 CET	49771	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:46.732327938 CET	443	49771	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:46.733385086 CET	443	49771	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:46.733464956 CET	49771	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:46.733843088 CET	49771	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:46.733899117 CET	443	49771	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:46.734025002 CET	49771	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:46.734031916 CET	443	49771	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:46.739645004 CET	443	49772	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:46.739877939 CET	49772	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:46.739897966 CET	443	49772	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:46.741339922 CET	443	49772	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:46.741812944 CET	49772	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:46.741928101 CET	443	49772	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:46.741988897 CET	49772	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:46.761236906 CET	443	49768	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.761321068 CET	443	49768	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.761496067 CET	49768	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.762572050 CET	49768	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.762597084 CET	443	49768	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.775140047 CET	49771	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:46.783324003 CET	443	49772	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:46.846343040 CET	443	49769	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.846752882 CET	49769	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.846765995 CET	443	49769	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.847120047 CET	443	49769	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.847439051 CET	49769	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.847495079 CET	443	49769	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.847654104 CET	49769	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.849760056 CET	443	49771	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:46.849823952 CET	443	49771	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:46.849895954 CET	49771	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:46.853982925 CET	49775	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:46.854013920 CET	443	49775	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:46.854175091 CET	49775	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:46.854367018 CET	49775	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:46.854377985 CET	443	49775	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:46.855359077 CET	49771	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:46.855387926 CET	443	49771	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:46.863559008 CET	49776	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:46.863605022 CET	443	49776	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:46.863693953 CET	49776	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:46.863903999 CET	49776	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:46.863917112 CET	443	49776	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:46.869849920 CET	443	49772	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:46.869888067 CET	443	49772	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:46.869904041 CET	443	49772	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:46.869961977 CET	49772	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:46.869981050 CET	443	49772	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:46.869999886 CET	49772	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:46.870018959 CET	49772	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:46.895324945 CET	443	49769	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.907653093 CET	443	49770	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.943242073 CET	49770	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.943250895 CET	443	49770	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.943763971 CET	443	49770	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.945882082 CET	443	49773	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:46.955585957 CET	443	49772	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:46.955640078 CET	443	49772	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:46.955698013 CET	49772	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:46.955714941 CET	443	49772	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:46.955745935 CET	49772	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:46.955764055 CET	49772	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:46.955770969 CET	443	49772	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:46.955848932 CET	443	49772	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:46.955888033 CET	49772	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:46.958957911 CET	49773	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:46.958971977 CET	443	49773	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:46.959253073 CET	49770	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.959359884 CET	443	49770	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:46.959462881 CET	49770	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:46.959765911 CET	443	49773	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:46.960329056 CET	49773	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:46.960329056 CET	49773	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:46.960345030 CET	443	49773	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:46.960432053 CET	443	49773	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:46.971587896 CET	49772	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:46.971611023 CET	443	49772	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:47.003338099 CET	443	49770	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:47.009505987 CET	49770	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:47.009505987 CET	49773	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:47.113689899 CET	443	49769	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:47.113903999 CET	443	49769	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:47.113969088 CET	49769	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:47.152194023 CET	49777	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:47.152254105 CET	443	49777	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:47.152312994 CET	49777	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:47.152504921 CET	49769	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:47.152529955 CET	443	49769	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:47.153311968 CET	49777	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:47.153342962 CET	443	49777	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:47.179387093 CET	443	49770	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:47.179476976 CET	443	49770	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:47.179537058 CET	49770	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:47.191338062 CET	49770	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:47.191354036 CET	443	49770	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:47.250117064 CET	443	49773	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:47.250411987 CET	443	49773	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:47.250477076 CET	49773	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:47.265811920 CET	49773	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:47.265825987 CET	443	49773	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:47.273778915 CET	49778	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:47.273817062 CET	443	49778	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:47.273879051 CET	49778	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:47.274244070 CET	49778	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:47.274255037 CET	443	49778	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:47.556987047 CET	443	49775	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:47.560527086 CET	49775	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:47.560539961 CET	443	49775	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:47.560904026 CET	443	49775	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:47.561465025 CET	49775	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:47.561510086 CET	443	49775	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:47.581883907 CET	443	49776	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:47.603477955 CET	49775	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:47.605567932 CET	49776	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:47.605581999 CET	443	49776	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:47.607351065 CET	443	49776	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:47.617849112 CET	49776	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:47.617974997 CET	443	49776	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:47.618294001 CET	49776	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:47.644978046 CET	443	49777	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:47.645324945 CET	49777	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:47.645404100 CET	443	49777	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:47.645791054 CET	443	49777	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:47.646641016 CET	49777	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:47.646744967 CET	443	49777	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:47.647053003 CET	49777	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:47.659332991 CET	443	49776	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:47.687344074 CET	443	49777	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:47.764117956 CET	443	49777	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:47.764142990 CET	443	49777	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:47.764169931 CET	443	49777	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:47.764225006 CET	49777	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:47.764302969 CET	443	49777	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:47.764348984 CET	49777	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:47.764370918 CET	49777	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:47.849581957 CET	443	49777	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:47.849670887 CET	443	49777	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:47.849733114 CET	49777	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:47.849769115 CET	49777	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:47.850646973 CET	49777	443	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:47.850673914 CET	443	49777	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:47.922844887 CET	443	49776	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:47.923005104 CET	443	49776	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:47.923069000 CET	49776	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:47.924412966 CET	49776	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:00:47.924436092 CET	443	49776	95.101.182.82	192.168.2.5
Feb 22, 2025 01:00:47.930228949 CET	49783	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:47.930306911 CET	443	49783	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:47.930396080 CET	49783	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:47.930676937 CET	49783	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:47.930690050 CET	443	49783	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:47.981401920 CET	443	49778	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:47.981745005 CET	49778	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:47.981771946 CET	443	49778	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:47.982173920 CET	443	49778	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:47.982558966 CET	49778	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:47.982633114 CET	443	49778	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:47.982743025 CET	49778	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:48.027338028 CET	443	49778	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:48.325370073 CET	443	49778	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:48.325532913 CET	443	49778	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:48.325607061 CET	49778	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:48.326534033 CET	49778	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:48.326555014 CET	443	49778	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:48.655328989 CET	443	49783	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:48.655772924 CET	49783	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:48.655787945 CET	443	49783	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:48.656126022 CET	443	49783	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:48.664844036 CET	49783	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:48.664941072 CET	443	49783	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:48.665355921 CET	49783	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:48.707340956 CET	443	49783	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:49.088901997 CET	443	49783	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:49.089144945 CET	443	49783	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:49.089195013 CET	49783	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:49.090544939 CET	49783	443	192.168.2.5	95.101.182.74
Feb 22, 2025 01:00:49.090576887 CET	443	49783	95.101.182.74	192.168.2.5
Feb 22, 2025 01:00:49.269057989 CET	443	49712	172.217.16.196	192.168.2.5
Feb 22, 2025 01:00:49.269133091 CET	443	49712	172.217.16.196	192.168.2.5
Feb 22, 2025 01:00:49.271584988 CET	49712	443	192.168.2.5	172.217.16.196
Feb 22, 2025 01:00:50.099014044 CET	80	49714	13.248.243.5	192.168.2.5
Feb 22, 2025 01:00:50.099222898 CET	49714	80	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:51.105102062 CET	49714	80	192.168.2.5	13.248.243.5
Feb 22, 2025 01:00:51.105153084 CET	49712	443	192.168.2.5	172.217.16.196
Feb 22, 2025 01:00:51.105181932 CET	443	49712	172.217.16.196	192.168.2.5
Feb 22, 2025 01:00:51.112557888 CET	80	49714	13.248.243.5	192.168.2.5
Feb 22, 2025 01:01:00.011892080 CET	80	49715	13.248.243.5	192.168.2.5
Feb 22, 2025 01:01:00.012003899 CET	80	49715	13.248.243.5	192.168.2.5
Feb 22, 2025 01:01:00.012104034 CET	49715	80	192.168.2.5	13.248.243.5
Feb 22, 2025 01:01:06.739691019 CET	443	49775	95.101.182.82	192.168.2.5
Feb 22, 2025 01:01:06.739799976 CET	443	49775	95.101.182.82	192.168.2.5
Feb 22, 2025 01:01:06.739888906 CET	49775	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:01:07.105628014 CET	49775	443	192.168.2.5	95.101.182.82
Feb 22, 2025 01:01:07.105659008 CET	443	49775	95.101.182.82	192.168.2.5
Feb 22, 2025 01:01:13.283449888 CET	50491	53	192.168.2.5	162.159.36.2
Feb 22, 2025 01:01:13.288597107 CET	53	50491	162.159.36.2	192.168.2.5
Feb 22, 2025 01:01:13.288732052 CET	50491	53	192.168.2.5	162.159.36.2
Feb 22, 2025 01:01:13.294032097 CET	53	50491	162.159.36.2	192.168.2.5
Feb 22, 2025 01:01:13.733442068 CET	50491	53	192.168.2.5	162.159.36.2
Feb 22, 2025 01:01:13.738780975 CET	53	50491	162.159.36.2	192.168.2.5
Feb 22, 2025 01:01:13.738878012 CET	50491	53	192.168.2.5	162.159.36.2
Feb 22, 2025 01:01:26.649766922 CET	49725	443	192.168.2.5	3.126.54.211
Feb 22, 2025 01:01:26.649795055 CET	443	49725	3.126.54.211	192.168.2.5
Feb 22, 2025 01:01:38.761436939 CET	50606	443	192.168.2.5	172.217.16.196
Feb 22, 2025 01:01:38.761478901 CET	443	50606	172.217.16.196	192.168.2.5
Feb 22, 2025 01:01:38.761574030 CET	50606	443	192.168.2.5	172.217.16.196
Feb 22, 2025 01:01:38.761872053 CET	50606	443	192.168.2.5	172.217.16.196
Feb 22, 2025 01:01:38.761883974 CET	443	50606	172.217.16.196	192.168.2.5
Feb 22, 2025 01:01:39.401459932 CET	443	50606	172.217.16.196	192.168.2.5
Feb 22, 2025 01:01:39.401907921 CET	50606	443	192.168.2.5	172.217.16.196
Feb 22, 2025 01:01:39.401922941 CET	443	50606	172.217.16.196	192.168.2.5
Feb 22, 2025 01:01:39.402561903 CET	443	50606	172.217.16.196	192.168.2.5
Feb 22, 2025 01:01:39.402888060 CET	50606	443	192.168.2.5	172.217.16.196
Feb 22, 2025 01:01:39.402970076 CET	443	50606	172.217.16.196	192.168.2.5
Feb 22, 2025 01:01:39.447540045 CET	50606	443	192.168.2.5	172.217.16.196
Feb 22, 2025 01:01:41.106034994 CET	49715	80	192.168.2.5	13.248.243.5
Feb 22, 2025 01:01:41.106034994 CET	49715	80	192.168.2.5	13.248.243.5
Feb 22, 2025 01:01:41.111098051 CET	80	49715	13.248.243.5	192.168.2.5
Feb 22, 2025 01:01:41.111179113 CET	49715	80	192.168.2.5	13.248.243.5
Feb 22, 2025 01:01:41.402568102 CET	443	49725	3.126.54.211	192.168.2.5
Feb 22, 2025 01:01:41.402662992 CET	443	49725	3.126.54.211	192.168.2.5
Feb 22, 2025 01:01:41.402726889 CET	49725	443	192.168.2.5	3.126.54.211
Feb 22, 2025 01:01:43.105415106 CET	49725	443	192.168.2.5	3.126.54.211
Feb 22, 2025 01:01:43.105437994 CET	443	49725	3.126.54.211	192.168.2.5
Feb 22, 2025 01:01:49.313580990 CET	443	50606	172.217.16.196	192.168.2.5
Feb 22, 2025 01:01:49.313752890 CET	443	50606	172.217.16.196	192.168.2.5
Feb 22, 2025 01:01:49.313942909 CET	50606	443	192.168.2.5	172.217.16.196
Feb 22, 2025 01:01:51.105434895 CET	50606	443	192.168.2.5	172.217.16.196
Feb 22, 2025 01:01:51.105454922 CET	443	50606	172.217.16.196	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 22, 2025 01:00:34.080406904 CET	53	64510	1.1.1.1	192.168.2.5
Feb 22, 2025 01:00:34.196922064 CET	53	54330	1.1.1.1	192.168.2.5
Feb 22, 2025 01:00:35.349095106 CET	53	57229	1.1.1.1	192.168.2.5
Feb 22, 2025 01:00:38.698625088 CET	55983	53	192.168.2.5	1.1.1.1
Feb 22, 2025 01:00:38.698965073 CET	59214	53	192.168.2.5	1.1.1.1
Feb 22, 2025 01:00:38.708076954 CET	53	59214	1.1.1.1	192.168.2.5
Feb 22, 2025 01:00:38.708280087 CET	53	55983	1.1.1.1	192.168.2.5
Feb 22, 2025 01:00:39.621470928 CET	64232	53	192.168.2.5	1.1.1.1
Feb 22, 2025 01:00:39.621643066 CET	63602	53	192.168.2.5	1.1.1.1
Feb 22, 2025 01:00:39.630840063 CET	53	64232	1.1.1.1	192.168.2.5
Feb 22, 2025 01:00:39.632105112 CET	53	63602	1.1.1.1	192.168.2.5
Feb 22, 2025 01:00:40.101387978 CET	57902	53	192.168.2.5	1.1.1.1
Feb 22, 2025 01:00:40.101700068 CET	54887	53	192.168.2.5	1.1.1.1
Feb 22, 2025 01:00:40.110994101 CET	53	54887	1.1.1.1	192.168.2.5
Feb 22, 2025 01:00:40.112104893 CET	53	57902	1.1.1.1	192.168.2.5
Feb 22, 2025 01:00:40.809782982 CET	64720	53	192.168.2.5	1.1.1.1
Feb 22, 2025 01:00:40.810213089 CET	63539	53	192.168.2.5	1.1.1.1
Feb 22, 2025 01:00:40.818372011 CET	53	49648	1.1.1.1	192.168.2.5
Feb 22, 2025 01:00:40.819586039 CET	53	63539	1.1.1.1	192.168.2.5
Feb 22, 2025 01:00:40.820460081 CET	53	64720	1.1.1.1	192.168.2.5
Feb 22, 2025 01:00:40.826452971 CET	61908	53	192.168.2.5	1.1.1.1
Feb 22, 2025 01:00:40.830637932 CET	63090	53	192.168.2.5	1.1.1.1
Feb 22, 2025 01:00:40.841949940 CET	53	63090	1.1.1.1	192.168.2.5
Feb 22, 2025 01:00:40.858659029 CET	53	61908	1.1.1.1	192.168.2.5
Feb 22, 2025 01:00:42.055478096 CET	49441	53	192.168.2.5	1.1.1.1
Feb 22, 2025 01:00:42.055640936 CET	50756	53	192.168.2.5	1.1.1.1
Feb 22, 2025 01:00:42.063133955 CET	53	50756	1.1.1.1	192.168.2.5
Feb 22, 2025 01:00:42.064224005 CET	53	49441	1.1.1.1	192.168.2.5
Feb 22, 2025 01:00:52.333149910 CET	53	49565	1.1.1.1	192.168.2.5
Feb 22, 2025 01:01:11.284560919 CET	53	60551	1.1.1.1	192.168.2.5
Feb 22, 2025 01:01:13.282850027 CET	53	56876	162.159.36.2	192.168.2.5
Feb 22, 2025 01:01:13.763849020 CET	53	57286	1.1.1.1	192.168.2.5
Feb 22, 2025 01:01:34.050987005 CET	53	64653	1.1.1.1	192.168.2.5
Feb 22, 2025 01:01:34.333580971 CET	53	55899	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Feb 22, 2025 01:00:38.698625088 CET	192.168.2.5	1.1.1.1	0xc044	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:00:38.698965073 CET	192.168.2.5	1.1.1.1	0x7088	Standard query (0)	www.google.com	65	IN (0x0001)	false
Feb 22, 2025 01:00:39.621470928 CET	192.168.2.5	1.1.1.1	0xd1c9	Standard query (0)	gemineolegim.godaddysites.com	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:00:39.621643066 CET	192.168.2.5	1.1.1.1	0x27f9	Standard query (0)	gemineolegim.godaddysites.com	65	IN (0x0001)	false
Feb 22, 2025 01:00:40.101387978 CET	192.168.2.5	1.1.1.1	0x1f43	Standard query (0)	gemineolegim.godaddysites.com	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:00:40.101700068 CET	192.168.2.5	1.1.1.1	0xce18	Standard query (0)	gemineolegim.godaddysites.com	65	IN (0x0001)	false
Feb 22, 2025 01:00:40.809782982 CET	192.168.2.5	1.1.1.1	0x7c6e	Standard query (0)	img1.wsimg.com	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:00:40.810213089 CET	192.168.2.5	1.1.1.1	0xd7bd	Standard query (0)	img1.wsimg.com	65	IN (0x0001)	false
Feb 22, 2025 01:00:40.826452971 CET	192.168.2.5	1.1.1.1	0x16bc	Standard query (0)	isteam.wsimg.com	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:00:40.830637932 CET	192.168.2.5	1.1.1.1	0x21db	Standard query (0)	isteam.wsimg.com	65	IN (0x0001)	false
Feb 22, 2025 01:00:42.055478096 CET	192.168.2.5	1.1.1.1	0x32f8	Standard query (0)	img1.wsimg.com	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:00:42.055640936 CET	192.168.2.5	1.1.1.1	0x7151	Standard query (0)	img1.wsimg.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Feb 22, 2025 01:00:38.708076954 CET	1.1.1.1	192.168.2.5	0x7088	No error (0)	www.google.com			65	IN (0x0001)	false
Feb 22, 2025 01:00:38.708280087 CET	1.1.1.1	192.168.2.5	0xc044	No error (0)	www.google.com		172.217.16.196	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:00:39.630840063 CET	1.1.1.1	192.168.2.5	0xd1c9	No error (0)	gemineolegim.godaddysites.com		13.248.243.5	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:00:39.630840063 CET	1.1.1.1	192.168.2.5	0xd1c9	No error (0)	gemineolegim.godaddysites.com		76.223.105.230	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:00:40.112104893 CET	1.1.1.1	192.168.2.5	0x1f43	No error (0)	gemineolegim.godaddysites.com		13.248.243.5	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:00:40.112104893 CET	1.1.1.1	192.168.2.5	0x1f43	No error (0)	gemineolegim.godaddysites.com		76.223.105.230	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:00:40.819586039 CET	1.1.1.1	192.168.2.5	0xd7bd	No error (0)	img1.wsimg.com	global-wildcard.wsimg.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 22, 2025 01:00:40.819586039 CET	1.1.1.1	192.168.2.5	0xd7bd	No error (0)	global-wildcard.wsimg.com.sni-only.edgekey.net	e40258.g.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 22, 2025 01:00:40.820460081 CET	1.1.1.1	192.168.2.5	0x7c6e	No error (0)	img1.wsimg.com	global-wildcard.wsimg.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 22, 2025 01:00:40.820460081 CET	1.1.1.1	192.168.2.5	0x7c6e	No error (0)	global-wildcard.wsimg.com.sni-only.edgekey.net	e40258.g.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 22, 2025 01:00:40.820460081 CET	1.1.1.1	192.168.2.5	0x7c6e	No error (0)	e40258.g.akamaiedge.net		95.101.182.82	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:00:40.820460081 CET	1.1.1.1	192.168.2.5	0x7c6e	No error (0)	e40258.g.akamaiedge.net		95.101.182.74	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:00:40.858659029 CET	1.1.1.1	192.168.2.5	0x16bc	No error (0)	isteam.wsimg.com		3.126.54.211	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:00:40.858659029 CET	1.1.1.1	192.168.2.5	0x16bc	No error (0)	isteam.wsimg.com		3.121.91.69	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:00:42.063133955 CET	1.1.1.1	192.168.2.5	0x7151	No error (0)	img1.wsimg.com	global-wildcard.wsimg.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 22, 2025 01:00:42.063133955 CET	1.1.1.1	192.168.2.5	0x7151	No error (0)	global-wildcard.wsimg.com.sni-only.edgekey.net	e40258.g.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 22, 2025 01:00:42.064224005 CET	1.1.1.1	192.168.2.5	0x32f8	No error (0)	img1.wsimg.com	global-wildcard.wsimg.com.sni-only.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 22, 2025 01:00:42.064224005 CET	1.1.1.1	192.168.2.5	0x32f8	No error (0)	global-wildcard.wsimg.com.sni-only.edgekey.net	e40258.g.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 22, 2025 01:00:42.064224005 CET	1.1.1.1	192.168.2.5	0x32f8	No error (0)	e40258.g.akamaiedge.net		95.101.182.74	A (IP address)	IN (0x0001)	false
Feb 22, 2025 01:00:42.064224005 CET	1.1.1.1	192.168.2.5	0x32f8	No error (0)	e40258.g.akamaiedge.net		95.101.182.82	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

gemineolegim.godaddysites.com

https:

img1.wsimg.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49714	13.248.243.5	80	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Feb 22, 2025 01:00:39.638655901 CET	444	OUT	GET / HTTP/1.1 Host: gemineolegim.godaddysites.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Feb 22, 2025 01:00:40.097081900 CET	355	IN	HTTP/1.1 301 Moved Permanently location: https://gemineolegim.godaddysites.com/ vary: Accept-Encoding server: DPS/2.0.0+sha-999b56c x-version: 999b56c x-siteid: us-east-1 set-cookie: dps_site_id=us-east-1; path=/ etag: f107b02059eca4fb3a710e5e597effd6 date: Sat, 22 Feb 2025 00:00:40 GMT keep-alive: timeout=5 transfer-encoding: chunked Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49715	13.248.243.5	80	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Feb 22, 2025 01:01:00.011892080 CET	233	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49716	13.248.243.5	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:40 UTC	703	OUT	GET / HTTP/1.1 Host: gemineolegim.godaddysites.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1
2025-02-22 00:00:40 UTC	858	IN	HTTP/1.1 200 OK Link: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.28.5.js>; rel=preload; as=script; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Content-Type: text/html;charset=utf-8 Vary: Accept-Encoding Server: DPS/2.0.0+sha-999b56c X-Version: 999b56c X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: f107b02059eca4fb3a710e5e597effd6 Date: Sat, 22 Feb 2025 00:00:40 GMT Connection: close Transfer-Encoding: chunked
2025-02-22 00:00:40 UTC	15526	IN	Data Raw: 34 36 38 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 49 4e 22 3e 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 69 70 2f 37 62 34 34 37 66 31 34 2d 65 34 39 33 2d 34 33 63 39 2d 39 36 38 39 2d 33 35 34 32 66 39 32 30 34 32 65 36 2f 66 61 76 69 63 6f 6e 2f 30 65 36 31 64 61 33 61 2d 36 61 34 66 2d 34 39 33 37 2d 62 35 38 64 2d 64 31 34 66 37 34 65 36 39 61 66 63 2e 70 6e 67 2f 3a 2f 72 73 3d 77 3a 31 36 2c 68 3a 31 36 2c 6d 22 20 73 69 7a 65 73 3d 22 31 36 78 31 36 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f Data Ascii: 468e<!DOCTYPE html><html lang="en-IN"><head><link rel="icon" href="//img1.wsimg.com/isteam/ip/7b447f14-e493-43c9-9689-3542f92042e6/favicon/0e61da3a-6a4f-4937-b58d-d14f74e69afc.png/:/rs=w:16,h:16,m" sizes="16x16"/><link rel="icon" href="//img1.wsimg.com/
2025-02-22 00:00:40 UTC	2549	IN	Data Raw: 3c 64 69 76 20 69 64 3d 22 35 34 61 37 33 35 62 66 2d 63 64 36 62 2d 34 37 64 34 2d 39 30 39 38 2d 31 32 31 39 62 34 30 33 30 36 63 37 22 20 63 6c 61 73 73 3d 22 77 69 64 67 65 74 20 77 69 64 67 65 74 2d 66 6f 6f 74 65 72 20 77 69 64 67 65 74 2d 66 6f 6f 74 65 72 2d 66 6f 6f 74 65 72 2d 31 22 3e 3c 64 69 76 20 64 61 74 61 2d 75 78 3d 22 57 69 64 67 65 74 22 20 72 6f 6c 65 3d 22 63 6f 6e 74 65 6e 74 69 6e 66 6f 22 20 69 64 3d 22 35 34 61 37 33 35 62 66 2d 63 64 36 62 2d 34 37 64 34 2d 39 30 39 38 2d 31 32 31 39 62 34 30 33 30 36 63 37 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 20 78 2d 65 6c 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 33 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 20 63 31 Data Ascii: <div id="54a735bf-cd6b-47d4-9098-1219b40306c7" class="widget widget-footer widget-footer-footer-1"><div data-ux="Widget" role="contentinfo" id="54a735bf-cd6b-47d4-9098-1219b40306c7" class="x-el x-el-div x-el c1-1 c1-2 c1-3 c1-b c1-c c1-d c1-e c1-f c1-g c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49719	95.101.182.82	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:41 UTC	635	OUT	GET /ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.28.5.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://gemineolegim.godaddysites.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://gemineolegim.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:41 UTC	708	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "31e273e89fb56a44d86d206f1bcdcdb4" Last-Modified: Wed, 09 Nov 2022 17:28:26 GMT x-amzn-trace-id: Root=1-636be339-1e3f8f232a9278302e78dad0 x-forwarded-port: 443 X-Forwarded-For: 64.202.160.109 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:41 GMT Date: Sat, 22 Feb 2025 00:00:41 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:41 UTC	15676	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 76 61 72 20 43 6f 72 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 Data Ascii: 00006000var Core=function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enume
2025-02-22 00:00:41 UTC	8912	IN	Data Raw: 65 72 28 74 3d 3d 3d 4c 74 3f 65 2e 6c 65 6e 67 74 68 2d 31 3a 74 2c 30 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 2c 6f 3d 2d 31 2c 61 3d 65 72 28 72 2e 6c 65 6e 67 74 68 2d 74 2c 30 29 2c 6c 3d 41 72 72 61 79 28 61 29 3b 2b 2b 6f 3c 61 3b 29 6c 5b 6f 5d 3d 72 5b 74 2b 6f 5d 3b 66 6f 72 28 6f 3d 2d 31 2c 61 3d 41 72 72 61 79 28 74 2b 31 29 3b 2b 2b 6f 3c 74 3b 29 61 5b 6f 5d 3d 72 5b 6f 5d 3b 72 65 74 75 72 6e 20 61 5b 74 5d 3d 6e 28 6c 29 2c 69 28 65 2c 74 68 69 73 2c 61 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 74 29 7b 69 66 28 28 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 21 3d 3d 74 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 5b 74 5d 29 26 26 22 5f 5f 70 72 6f 74 6f 5f Data Ascii: er(t===Lt?e.length-1:t,0),function(){for(var r=arguments,o=-1,a=er(r.length-t,0),l=Array(a);++o<a;)l[o]=r[t+o];for(o=-1,a=Array(t+1);++o<t;)a[o]=r[o];return a[t]=n(l),i(e,this,a)}}function Ue(e,t){if(("constructor"!==t\|\|"function"!=typeof e[t])&&"__proto_
2025-02-22 00:00:41 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 6f 62 6a 65 63 74 20 45 72 72 6f 72 5d 22 5d 3d 63 6e 5b 22 5b 6f 62 6a 65 63 74 20 46 75 6e 63 74 69 6f 6e 5d 22 5d 3d 63 6e 5b 22 5b 6f 62 6a 65 63 74 20 4d 61 70 5d 22 5d 3d 63 6e 5b 22 5b 6f 62 6a 65 63 74 20 4e 75 6d 62 65 72 5d 22 5d 3d 63 6e 5b 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 5d 3d 63 6e 5b 22 5b 6f 62 6a 65 63 74 20 52 65 67 45 78 70 5d 22 5d 3d 63 6e 5b 22 5b 6f 62 6a 65 63 74 20 53 65 74 5d 22 5d 3d 63 6e 5b 22 5b 6f 62 6a 65 63 74 20 53 74 72 69 6e 67 5d 22 5d 3d 63 6e 5b 22 5b 6f 62 6a 65 63 74 20 57 65 61 6b 4d 61 70 5d 22 5d 3d 21 31 3b 76 61 72 20 66 6e 3d 7b 7d 3b 66 6e 5b 22 5b 6f 62 6a 65 63 74 20 41 72 67 75 6d 65 6e 74 73 5d 22 5d 3d 66 6e 5b 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d Data Ascii: 00006000object Error]"]=cn["[object Function]"]=cn["[object Map]"]=cn["[object Number]"]=cn["[object Object]"]=cn["[object RegExp]"]=cn["[object Set]"]=cn["[object String]"]=cn["[object WeakMap]"]=!1;var fn={};fn["[object Arguments]"]=fn["[object Array]
2025-02-22 00:00:41 UTC	8204	IN	Data Raw: 7d 2c 6f 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 26 26 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 65 29 69 66 28 22 64 65 66 61 75 6c 74 22 21 3d 3d 61 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 61 29 29 7b 76 61 72 20 69 3d 6f 3f 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 61 29 3a 6e 75 6c 6c 3b 69 26 26 28 69 2e 67 65 74 7c 7c 69 2e 73 65 74 29 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 2c 61 2c 69 29 3a 72 5b 61 5d 3d 65 5b 61 5d 7d 72 2e 64 65 66 61 75 6c 74 3d 65 2c 6e Data Ascii: },o=Object.defineProperty&&Object.getOwnPropertyDescriptor;for(var a in e)if("default"!==a&&Object.prototype.hasOwnProperty.call(e,a)){var i=o?Object.getOwnPropertyDescriptor(e,a):null;i&&(i.get\|\|i.set)?Object.defineProperty(r,a,i):r[a]=e[a]}r.default=e,n
2025-02-22 00:00:41 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6f 75 70 22 3a 22 67 72 6f 75 70 22 2c 22 66 69 65 6c 64 2d 69 64 22 3a 22 66 69 65 6c 64 22 2c 22 66 69 65 6c 64 2d 72 6f 75 74 65 22 3a 22 72 6f 75 74 65 22 7d 2c 43 3d 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 7b 66 6f 6e 74 44 69 61 6c 73 3a 4f 2e 64 69 61 6c 73 2e 66 6f 6e 74 44 69 61 6c 73 2c 63 6f 6c 6f 72 44 69 61 6c 73 3a 4f 2e 64 69 61 6c 73 2e 63 6f 6c 6f 72 44 69 61 6c 73 2c 74 68 65 6d 65 4f 76 65 72 72 69 64 65 73 3a 4f 2e 74 68 65 6d 65 2e 6f 76 65 72 72 69 64 65 73 7d 29 2e 63 6f 6e 63 61 74 28 5f 2e 73 65 6c 65 63 74 6f 72 4d 61 70 45 6e 74 72 69 65 73 29 3b 74 2e 73 65 6c 65 63 74 6f 72 4d 61 70 45 6e 74 72 69 65 73 3d 43 3b 63 6f 6e 73 74 20 52 3d 65 3d 3e 28 30 2c 69 2e 74 72 61 6e 73 66 6f 72 6d 29 28 Data Ascii: 00004000oup":"group","field-id":"field","field-route":"route"},C=Object.entries({fontDials:O.dials.fontDials,colorDials:O.dials.colorDials,themeOverrides:O.theme.overrides}).concat(_.selectorMapEntries);t.selectorMapEntries=C;const R=e=>(0,i.transform)(
2025-02-22 00:00:41 UTC	12	IN	Data Raw: 76 6f 69 64 20 30 3b 76 61 72 0d 0a Data Ascii: void 0;var
2025-02-22 00:00:41 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 20 72 3d 6e 28 31 33 29 2c 6f 3d 6e 28 39 29 3b 63 6f 6e 73 74 20 61 3d 28 30 2c 6f 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 53 65 6c 65 63 74 6f 72 29 28 22 66 6f 6e 74 73 22 2c 5b 5d 29 3b 74 2e 66 6f 6e 74 73 3d 61 3b 63 6f 6e 73 74 20 69 3d 28 30 2c 6f 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 53 65 6c 65 63 74 6f 72 29 28 22 63 6f 6c 6f 72 73 22 2c 5b 5d 29 3b 74 2e 63 6f 6c 6f 72 73 3d 69 3b 63 6f 6e 73 74 20 6c 3d 28 30 2c 6f 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 53 65 6c 65 63 74 6f 72 29 28 22 66 6f 6e 74 53 63 61 6c 65 22 2c 22 6d 65 64 69 75 6d 22 29 3b 74 2e 66 6f 6e 74 53 63 61 6c 65 3d 6c 3b 63 6f 6e 73 74 20 75 3d 28 30 2c 6f 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 53 65 6c 65 63 74 6f 72 29 28 22 6c 6f Data Ascii: 00004000 r=n(13),o=n(9);const a=(0,o.createContextSelector)("fonts",[]);t.fonts=a;const i=(0,o.createContextSelector)("colors",[]);t.colors=i;const l=(0,o.createContextSelector)("fontScale","medium");t.fontScale=l;const u=(0,o.createContextSelector)("lo
2025-02-22 00:00:41 UTC	12	IN	Data Raw: 2c 74 68 69 73 2e 5f 6d 65 74 0d 0a Data Ascii: ,this._met
2025-02-22 00:00:41 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 61 4f 76 65 72 72 69 64 65 73 5b 6e 5d 7d 6d 61 70 53 74 79 6c 65 73 28 65 3d 7b 7d 2c 74 3d 7b 7d 2c 6e 29 7b 74 3d 7b 64 65 76 69 63 65 3a 61 2e 58 53 4d 41 4c 4c 2c 61 70 70 6c 79 4d 65 74 61 53 74 79 6c 65 73 3a 21 30 2c 66 61 6d 69 6c 79 3a 65 2e 66 6f 6e 74 46 61 6d 69 6c 79 2c 2e 2e 2e 74 7d 2c 6e 3d 6e 7c 7c 74 68 69 73 2e 67 65 74 4d 65 74 61 57 69 74 68 4f 76 65 72 72 69 64 65 73 28 74 29 3b 63 6f 6e 73 74 20 72 3d 74 2e 64 65 76 69 63 65 3d 3d 3d 61 2e 58 53 4d 41 4c 4c 2c 75 3d 74 2e 61 70 70 6c 79 4d 65 74 61 53 74 79 6c 65 73 26 26 72 26 26 74 68 69 73 2e 67 65 74 28 74 2e 66 61 6d 69 6c 79 2b 22 2e 73 74 79 6c 65 73 22 2c 6e 75 6c 6c 2c 6e 29 3b 6c 65 74 20 73 3b 69 66 28 73 3d 74 2e 75 73 65 46 6f 6e 74 44 65 Data Ascii: 00004000aOverrides[n]}mapStyles(e={},t={},n){t={device:a.XSMALL,applyMetaStyles:!0,family:e.fontFamily,...t},n=n\|\|this.getMetaWithOverrides(t);const r=t.device===a.XSMALL,u=t.applyMetaStyles&&r&&this.get(t.family+".styles",null,n);let s;if(s=t.useFontDe
2025-02-22 00:00:41 UTC	12	IN	Data Raw: 3d 3d 6f 3f 28 6e 2e 70 75 73 0d 0a Data Ascii: ==o?(n.pus

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49723	95.101.182.82	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:41 UTC	588	OUT	GET /blobby/go/font/LeagueSpartan/league-spartan.css HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://gemineolegim.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:41 UTC	777	IN	HTTP/1.1 200 OK Content-Type: text/css x-version: 0.7.3+sha-a7223ca ETag: "1e154e5ed919387ff6d969c8d6c56619" Last-Modified: Sat, 27 Jun 2020 05:40:41 GMT x-scheme: https x-forwarded-host: blobby.wsimg.com x-request-id: ec219ddeb7f4b0ab6c7f63a56763f7fb x-forwarded-port: 443 x-original-uri: /go/font/LeagueSpartan/league-spartan.css x-real-ip: 10.47.3.229 X-Forwarded-For: 10.47.3.229 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:41 GMT Date: Sat, 22 Feb 2025 00:00:41 GMT Content-Length: 330 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:41 UTC	330	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4c 65 61 67 75 65 20 53 70 61 72 74 61 6e 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 20 20 73 72 63 3a 20 6c 6f 63 61 6c 28 27 4c 65 61 67 75 65 20 53 70 61 72 74 61 6e 27 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 62 6c 6f 62 62 79 2f 67 6f 2f 66 6f 6e 74 2f 4c 65 61 67 75 65 53 70 61 72 74 61 6e 2f 4c 65 61 67 75 65 53 70 61 72 74 61 6e 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 69 6d 67 31 2e 77 73 Data Ascii: @font-face { font-family: 'League Spartan'; font-style: normal; font-weight: 400; font-display: swap; src: local('League Spartan'), url(https://img1.wsimg.com/blobby/go/font/LeagueSpartan/LeagueSpartan.woff2) format('woff2'), url(https://img1.ws

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49724	95.101.182.82	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:41 UTC	649	OUT	GET /blobby/go/7b447f14-e493-43c9-9689-3542f92042e6/gpub/8186fd600e2f6aba/script.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://gemineolegim.godaddysites.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://gemineolegim.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:41 UTC	708	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "6544f4552370f8945dd8d34a6a036155" Last-Modified: Tue, 15 Nov 2022 09:32:25 GMT x-amzn-trace-id: Root=1-63735ca7-64dd0862174c716c4180feac x-forwarded-port: 443 X-Forwarded-For: 64.202.160.104 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:41 GMT Date: Sat, 22 Feb 2025 00:00:41 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:41 UTC	15676	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 6e 61 76 69 67 61 74 6f 72 26 26 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6e 6e 65 63 74 69 6f 6e 26 26 28 77 69 6e 64 6f 77 2e 6e 65 74 77 6f 72 6b 49 6e 66 6f 3d 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6e 6e 65 63 74 69 6f 6e 2c 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6e 6e 65 63 74 69 6f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6e 6e 65 63 74 69 6f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 68 61 6e 67 65 22 2c 28 7b 74 61 72 67 65 74 3a 6e 7d 29 3d 3e 77 69 6e 64 6f 77 2e 6e 65 74 77 6f 72 6b 49 6e 66 6f 3d 6e 29 29 3b 0a 63 6f 6e 73 74 20 69 6d 61 67 65 4f 62 73 65 72 76 65 72 3d 6e 65 77 20 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 28 65 Data Ascii: 00006000navigator&&navigator.connection&&(window.networkInfo=navigator.connection,navigator.connection.addEventListener&&navigator.connection.addEventListener("change",({target:n})=>window.networkInfo=n));const imageObserver=new IntersectionObserver((e
2025-02-22 00:00:41 UTC	8912	IN	Data Raw: 36 5d 7d 5d 5d 2c 5b 5c 22 63 6f 6e 74 61 63 74 35 5c 22 2c 5b 7b 5c 22 76 5c 22 3a 5b 30 5d 2c 5c 22 66 5c 22 3a 5c 22 63 6f 6e 74 61 63 74 35 2d 34 33 39 31 63 66 39 32 2e 6a 73 5c 22 2c 5c 22 73 5c 22 3a 5b 32 35 2c 32 36 2c 32 39 5d 7d 5d 5d 2c 5b 5c 22 63 6f 6e 74 61 63 74 36 5c 22 2c 5b 7b 5c 22 76 5c 22 3a 5b 30 5d 2c 5c 22 66 5c 22 3a 5c 22 63 6f 6e 74 61 63 74 36 2d 38 37 37 39 35 39 36 63 2e 6a 73 5c 22 2c 5c 22 73 5c 22 3a 5b 32 34 2c 32 35 2c 32 36 5d 7d 5d 5d 2c 5b 5c 22 63 6f 6e 74 61 63 74 37 5c 22 2c 5b 7b 5c 22 76 5c 22 3a 5b 30 5d 2c 5c 22 66 5c 22 3a 5c 22 63 6f 6e 74 61 63 74 37 2d 38 39 38 31 34 34 61 62 2e 6a 73 5c 22 2c 5c 22 73 5c 22 3a 5b 32 33 2c 32 35 2c 32 36 5d 7d 5d 5d 2c 5b 5c 22 63 6f 6e 74 61 63 74 38 5c 22 2c 5b 7b 5c 22 Data Ascii: 6]}]],[\"contact5\",[{\"v\":[0],\"f\":\"contact5-4391cf92.js\",\"s\":[25,26,29]}]],[\"contact6\",[{\"v\":[0],\"f\":\"contact6-8779596c.js\",\"s\":[24,25,26]}]],[\"contact7\",[{\"v\":[0],\"f\":\"contact7-898144ab.js\",\"s\":[23,25,26]}]],[\"contact8\",[{\"
2025-02-22 00:00:41 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 5b 7b 5c 22 76 5c 22 3a 5b 30 5d 2c 5c 22 66 5c 22 3a 5c 22 63 2f 69 6e 64 65 78 32 2d 38 31 36 65 37 33 62 66 2e 6a 73 5c 22 2c 5c 22 73 5c 22 3a 5b 31 30 2c 36 5d 7d 5d 5d 2c 5c 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 73 68 61 72 65 64 40 5e 31 2f 6c 69 62 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 53 6f 63 69 61 6c 4c 69 6e 6b 73 5c 22 5d 2c 5c 22 76 5c 22 3a 5b 5b 30 2c 30 2c 31 5d 5d 7d 2c 5c 22 40 77 69 64 67 65 74 2f 4a 4f 42 5f 50 4f 53 54 49 4e 47 5c 22 3a 7b 5c 22 64 5c 22 3a 5b 5b 5c 22 62 73 2d 4a 6f 62 50 6f 73 74 69 6e 67 46 6f 72 6d 5c 22 2c 5b 7b 5c 22 76 5c 22 3a 5b 30 5d 2c 5c 22 66 5c 22 3a 5c 22 62 73 2d 4a 6f 62 50 6f 73 74 69 6e 67 46 6f 72 6d 2d 30 66 34 66 33 66 63 32 2e 6a 73 5c 22 2c 5c 22 73 Data Ascii: 00006000[{\"v\":[0],\"f\":\"c/index2-816e73bf.js\",\"s\":[10,6]}]],\"@wsb/guac-widget-shared@^1/lib/components/SocialLinks\"],\"v\":[[0,0,1]]},\"@widget/JOB_POSTING\":{\"d\":[[\"bs-JobPostingForm\",[{\"v\":[0],\"f\":\"bs-JobPostingForm-0f4f3fc2.js\",\"s
2025-02-22 00:00:41 UTC	8204	IN	Data Raw: 73 2d 64 61 74 61 41 69 64 73 5c 22 2c 5b 7b 5c 22 76 5c 22 3a 5b 30 5d 2c 5c 22 66 5c 22 3a 5c 22 63 2f 62 73 2d 64 61 74 61 41 69 64 73 2d 63 66 61 62 37 30 63 38 2e 6a 73 5c 22 7d 5d 5d 2c 5b 5c 22 63 2f 62 73 2d 67 65 74 51 75 65 72 79 53 74 72 69 6e 67 56 61 6c 75 65 5c 22 2c 5b 7b 5c 22 76 5c 22 3a 5b 30 5d 2c 5c 22 66 5c 22 3a 5c 22 63 2f 62 73 2d 67 65 74 51 75 65 72 79 53 74 72 69 6e 67 56 61 6c 75 65 2d 63 30 62 39 31 66 30 33 2e 6a 73 5c 22 2c 5c 22 73 5c 22 3a 5b 33 33 5d 7d 5d 5d 2c 5b 5c 22 63 2f 62 73 2d 69 6e 64 65 78 5c 22 2c 5b 7b 5c 22 76 5c 22 3a 5b 30 5d 2c 5c 22 66 5c 22 3a 5c 22 63 2f 62 73 2d 69 6e 64 65 78 2d 34 31 36 66 39 37 33 33 2e 6a 73 5c 22 7d 5d 5d 2c 5b 5c 22 63 2f 62 73 2d 69 6e 64 65 78 32 5c 22 2c 5b 7b 5c 22 76 5c 22 Data Ascii: s-dataAids\",[{\"v\":[0],\"f\":\"c/bs-dataAids-cfab70c8.js\"}]],[\"c/bs-getQueryStringValue\",[{\"v\":[0],\"f\":\"c/bs-getQueryStringValue-c0b91f03.js\",\"s\":[33]}]],[\"c/bs-index\",[{\"v\":[0],\"f\":\"c/bs-index-416f9733.js\"}]],[\"c/bs-index2\",[{\"v\"
2025-02-22 00:00:41 UTC	10871	IN	Data Raw: 30 30 30 30 32 41 36 42 0d 0a 76 5c 22 3a 5b 30 5d 2c 5c 22 66 5c 22 3a 5c 22 63 2f 62 73 2d 49 6d 61 67 65 5a 6f 6f 6d 2d 38 32 38 65 30 63 63 31 2e 6a 73 5c 22 2c 5c 22 73 5c 22 3a 5b 30 2c 35 5d 7d 5d 5d 2c 5b 5c 22 63 2f 62 73 2d 69 6e 64 65 78 5c 22 2c 5b 7b 5c 22 76 5c 22 3a 5b 30 5d 2c 5c 22 66 5c 22 3a 5c 22 63 2f 62 73 2d 69 6e 64 65 78 2d 39 64 37 37 64 34 61 39 2e 6a 73 5c 22 2c 5c 22 73 5c 22 3a 5b 30 2c 31 32 2c 31 38 2c 31 39 2c 32 30 2c 35 5d 7d 5d 5d 2c 5b 5c 22 63 2f 62 73 2d 4f 6e 65 43 6f 6c 75 6d 6e 5c 22 2c 5b 7b 5c 22 76 5c 22 3a 5b 30 5d 2c 5c 22 66 5c 22 3a 5c 22 63 2f 62 73 2d 4f 6e 65 43 6f 6c 75 6d 6e 2d 62 35 38 38 65 65 66 61 2e 6a 73 5c 22 2c 5c 22 73 5c 22 3a 5b 31 31 2c 32 31 2c 35 5d 7d 5d 5d 2c 5b 5c 22 63 2f 62 73 2d 50 Data Ascii: 00002A6Bv\":[0],\"f\":\"c/bs-ImageZoom-828e0cc1.js\",\"s\":[0,5]}]],[\"c/bs-index\",[{\"v\":[0],\"f\":\"c/bs-index-9d77d4a9.js\",\"s\":[0,12,18,19,20,5]}]],[\"c/bs-OneColumn\",[{\"v\":[0],\"f\":\"c/bs-OneColumn-b588eefa.js\",\"s\":[11,21,5]}]],[\"c/bs-P
2025-02-22 00:00:41 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49722	95.101.182.82	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:41 UTC	709	OUT	GET /isteam/ip/7b447f14-e493-43c9-9689-3542f92042e6/Gemini%20update.webp/:/cr=t:0%25,l:0%25,w:100%25,h:100%25/rs=w:1240,cg:true HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gemineolegim.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:41 UTC	646	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 26060 x-version: 0.4.8+sha-7c787a5 x-track-origin-referer: https://gemineolegim.godaddysites.com/ Access-Control-Request-Method: GET Access-Control-Max-Age: 864000 ETag: 2847236782 x-width: 1240 x-height: 648 x-isteam-meta: {"orientation":1} Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:41 GMT Date: Sat, 22 Feb 2025 00:00:41 GMT Connection: close Edge-Cache-Tag: /isteam/ip/7b447f14-e493-43c9-9689-3542f92042e6/Gemini%20update.webp/:/cr=t:0%25,l:0%25,w:100%25,h:100%25/rs=w:1240,cg:true Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:41 UTC	1303	IN	Data Raw: 52 49 46 46 c4 65 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 d7 04 00 87 02 00 56 50 38 20 e4 64 00 00 90 1a 02 9d 01 2a d8 04 88 02 3e 6d 36 97 49 24 22 a5 21 21 b2 d9 a0 a0 0d 89 69 6e ff b3 3a 64 24 e1 62 2f 3f ca 90 ce d8 48 2d f0 c6 df 40 e4 eb 27 62 7d 29 7c cb f8 1f f1 7f df bf 6c 3f c3 7a 8b e4 87 d2 3f be fe df ff 81 fd b2 fb cd fc ff 3a fe ff fd e7 fd df 43 bf 99 7d d4 fd 37 f7 6f dd 4f f2 ff 44 7f a6 ff 95 e2 3f c9 4f f5 bf ca 7b 05 fe 4f fc e7 fc c7 f7 af dc cf ef 1f 3b af fb d3 7f fb fe a1 1e d9 fd 77 fd e7 f8 bf de bf f4 5f 14 ff 6f ff ab d2 6f d6 bf c9 7f de ff 19 f0 07 fd 17 fb 47 fd 7f 62 bf f3 78 ca fa 7f b0 3f e9 8f fe 1f ec fd 98 3f f6 ff 75 ea 37 ea df fd 5f e9 bf d6 7c 8e 7f 43 fe f9 ff 4f fc 48 96 4c 4e 22 76 3c 44 ec 78 Data Ascii: RIFFeWEBPVP8XVP8 d*>m6I$"!!in:d$b/?H-@'b})\|l?z?:C}7oOD?O{O;w_ooGbx??u7_\|COHLN"v<Dx
2025-02-22 00:00:41 UTC	16384	IN	Data Raw: f8 a1 e8 f6 c7 a2 6e df 8d 55 44 4c 1a 8c 5f ea 5f a5 85 b6 b0 25 a8 0d ba 65 a2 d7 14 cb bf f4 a4 69 e0 3f bf cd 66 9d cf 71 56 29 e6 bf ff 82 63 92 99 e9 93 92 83 f7 26 f5 0b c3 66 63 38 a5 b1 a5 52 38 45 98 c6 32 a0 55 e9 04 18 3b e3 11 d6 7b 9c 17 5f 64 74 5b 20 16 73 96 a0 c0 76 f5 d9 fd d4 4a bc 38 2b 84 04 79 54 fe cb 31 2c 84 bc 62 8a c1 2b 84 98 19 8c 73 38 e6 68 04 18 bf c8 d5 c3 e3 3d cb 7d 4a d1 f1 25 52 8f 6b 80 d2 9a 80 73 1d 23 51 ae e2 60 b0 34 fe 87 7a 4c c1 4c a7 44 0e bd 08 9d 8f 11 3b 1e 22 76 3c 44 bd 98 f1 fe 45 3b 5f 86 fb fe cc 50 79 8f dc 46 2d fd 28 f1 61 82 dc ad 39 ac f6 07 f5 5f c0 2a c8 fa 45 86 5e d7 20 fd 34 3a 22 c5 e9 74 10 ad 36 85 fe 7f 09 88 c4 a0 cf 43 d8 b4 ca d8 3e ff 48 fb af 83 93 e3 e6 70 58 0d af c3 d4 ae cc af Data Ascii: nUDL__%ei?fqV)c&fc8R8E2U;{_dt[ svJ8+yT1,b+s8h=}J%Rks#Q`4zLLD;"v<DE;_PyF-(a9_*E^ 4:"t6C>HpX
2025-02-22 00:00:41 UTC	8192	IN	Data Raw: 31 a9 8c af 64 3b 68 eb 81 11 39 48 e1 d0 90 62 85 c3 0a e8 2e 03 8f de a4 6a 7e fb 1b 86 d9 31 5f 75 ec f9 cc a6 7a 01 78 86 b4 70 4c 4d ea 72 4e c4 d9 94 db c1 24 6b 73 a2 a0 64 1b 08 1b f9 60 33 43 15 29 8e 44 8d ff 99 50 1c 6b 30 0d 98 d9 bd 13 91 9b 91 53 6e 15 e8 59 d3 62 cb 3b c7 72 e7 cf 8d 13 2c fc c1 fc f0 ff 67 02 88 95 29 2d 51 e4 d6 83 b4 70 5b d7 8a f8 e2 32 08 0e f6 f0 1d 33 30 45 7d 3a 0c be 00 cc ae c2 33 38 da b1 e9 85 e6 f9 0e 6a 63 89 f4 f4 da 01 ca b0 17 b6 6b f5 f6 ce a6 4f a4 28 2a 91 6c 56 a2 73 27 4c ea 1b 9a db 0e 3d 09 06 cf 1f 1d da 2b a0 17 83 1d 72 78 24 3f 45 96 54 ff 68 08 fd cd 7b eb 75 9f aa f5 62 5a 51 63 76 ad 64 87 44 4c 6d 19 c6 17 8f 89 42 f5 06 f7 a7 e9 db 59 14 10 ec 2c 81 1e a3 75 24 0c 4f 39 2c 64 65 e3 a9 7e c2 Data Ascii: 1d;h9Hb.j~1_uzxpLMrN$ksd`3C)DPk0SnYb;r,g)-Qp[230E}:38jckO(*lVs'L=+rx$?ETh{ubZQcvdDLmBY,u$O9,de~
2025-02-22 00:00:41 UTC	181	IN	Data Raw: 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 38 63 00 00 e8 03 00 00 38 63 00 00 e8 03 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 d8 04 00 00 03 a0 04 00 01 00 00 00 88 02 00 00 00 00 00 00 Data Ascii: II*V^(if8c8c02100100

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49726	95.101.182.74	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:42 UTC	460	OUT	GET /isteam/ip/7b447f14-e493-43c9-9689-3542f92042e6/Gemini%20update.webp/:/cr=t:0%25,l:0%25,w:100%25,h:100%25/rs=w:1240,cg:true HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:43 UTC	723	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 50723 x-version: 0.4.8+sha-7c787a5 x-track-origin-referer: /ip/7b447f14-e493-43c9-9689-3542f92042e6/Gemini%20update.webp/:/cr=t:0%25,l:0%25,w:100%25,h:100%25/rs=w:1240,cg:true Access-Control-Request-Method: GET Access-Control-Max-Age: 864000 ETag: 973161155 x-width: 1240 x-height: 648 x-isteam-meta: {"orientation":1} Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:43 GMT Date: Sat, 22 Feb 2025 00:00:43 GMT Connection: close Edge-Cache-Tag: /isteam/ip/7b447f14-e493-43c9-9689-3542f92042e6/Gemini%20update.webp/:/cr=t:0%25,l:0%25,w:100%25,h:100%25/rs=w:1240,cg:true Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:43 UTC	1512	IN	Data Raw: ff d8 ff e1 00 bc 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 38 63 00 00 e8 03 00 00 38 63 00 00 e8 03 00 00 06 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 d8 04 00 00 03 a0 04 00 01 00 00 00 88 02 00 00 00 00 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d Data Ascii: ExifIIV^(if8c8c02100100C%# , #&'))-0-
2025-02-22 00:00:43 UTC	16384	IN	Data Raw: f0 35 e7 be e6 fe 91 c3 be e6 fe 91 40 d8 75 db 96 aa f6 b6 83 e7 ff 00 81 1f 77 2d 55 ed 6d 07 cf 7f 03 5e 92 ae 64 ff 00 d4 77 ca 3b ee 6f d3 77 ca 11 b0 e9 b7 1d 55 ed 6d bf e7 ff 00 80 fb b8 ea af 6b 6d ff 00 3f fc 0d 79 ef b9 bf a4 77 ca 4f 7d cd fd 23 be 50 6b 60 fe ee 3a ab da ea 1f 9f fe 04 fd dc 75 57 b5 d4 3f 3f fc 0d 79 4a c9 93 f3 d4 77 f4 dd 6f 5f 94 26 b6 17 ee e5 aa bd ae a0 f9 e5 ff 00 49 3f 77 2d 55 ed 75 0f cf ff 00 03 5e 96 b2 55 4f 54 e4 f8 c8 ef a9 7f a4 7f ca 17 5b 0b f7 71 d5 3e d6 d0 fc ff 00 f0 3b 1b b7 0d 50 8b 95 b5 d1 3b fc 5c fe c3 5e 5b 59 2e 3d 5b ff 00 58 e5 df 72 7f 49 27 eb 05 6c f5 ab 6f 73 b1 e8 97 9b 14 cc 6f 5a c3 c5 10 c9 3a 53 68 fa 77 52 b5 a9 49 5a c6 4c bc e3 91 70 e4 f1 1a 45 4b 77 ac 85 cd 56 4e f5 c7 3c a9 72 Data Ascii: 5@uw-Um^dw;owUmkm?ywO}#Pk`:uW??yJwo_&I?w-Uu^UOT[q>;P;\^[Y.=[XrI'losoZ:ShwRIZLpEKwVN<r
2025-02-22 00:00:43 UTC	8192	IN	Data Raw: 8b e7 03 db 05 05 b2 ef 6f ba 31 5f 6e ad a6 aa 6a 73 58 64 47 a7 d0 57 e4 80 08 28 9b 72 a4 eb ab 81 7f eb 41 82 b8 1d 31 4c c9 5b bd 1b 9a f6 af 25 6a e4 f2 26 d5 76 28 6a d2 9a 6b bd 03 2a 15 db 9d 13 a7 6a 3b 7b b3 05 91 35 ee 64 92 96 5a c8 20 dd e9 a5 8e 3d ef 53 be e4 4c f9 0e bf b2 34 a8 e6 b7 be a0 57 39 70 d4 df 4e 20 d5 69 27 0d ef 17 d0 15 dd 81 5c c1 42 fa fa 64 ca 77 d4 3c b3 c5 e8 73 a6 a9 8a 76 aa c1 24 72 e3 d5 6e 3b 38 26 0a b0 51 c9 5f 49 13 d5 92 d4 c2 c7 a7 36 ab d1 15 0e 51 d4 c7 2a af 43 23 1e a9 c5 51 ae 45 e0 05 57 00 79 77 2b c5 be d4 dd eb 9d 65 3d 23 17 92 cb 22 35 17 e5 39 5b af 36 eb ab 15 d6 ca da 6a b6 a2 e1 56 29 11 c9 f4 17 13 5e 91 0e 3a f7 f8 e1 aa 75 d4 d4 43 0b 5a e9 e4 8e 36 e7 28 af 76 38 85 5a 1a a3 69 7a 67 4c dc Data Ascii: o1_njsXdGW(rA1L[%j&v(jkj;{5dZ =SL4W9pN i'\Bdw<sv$rn;8&Q_I6QC#QEWyw+e=#"59[6jV)^:uCZ6(v8ZizgL
2025-02-22 00:00:43 UTC	16384	IN	Data Raw: 0a 4b 4b 50 c5 6b 9a be 74 f1 9e 8a 31 1a 98 4e 47 2f 28 d6 a3 4b b6 93 b1 2d 41 a7 27 9a a2 d7 4a fb 85 ad 33 b8 f8 78 ca c4 ea ca 73 55 f2 18 d5 d6 db a5 2e f7 fb 0d 74 2e 55 44 72 2c 12 37 7b cb c3 89 f4 75 0e 89 a8 e9 a6 76 f4 d0 42 f7 76 bd 88 aa 3d 87 cf ed 35 a1 35 26 a1 a9 8e 96 d5 66 ac cb 97 8a cd 1a c6 d6 a7 6a b9 d8 43 6c f6 2d b2 8a 7d 09 4e fa ba e7 47 53 7a 99 a8 8f 95 a9 e0 b1 3b 1a 65 36 31 b1 b5 12 36 a3 51 3a 90 e4 cf 52 83 44 80 0c d4 15 70 68 c6 d9 ec 77 7a 8d a8 ea 19 60 b5 57 cb 13 aa 11 5b 24 74 cf 73 5c 9b ad e4 a8 9c 4d e6 54 c8 c7 8c d4 b8 35 bf b9 32 86 b6 82 6b ff 00 7f 51 55 d2 ef 22 2a 74 f0 3a 3c f1 4e 59 4e 25 e5 dd 37 4b 51 59 b3 47 b2 92 9e 7a 89 7a 76 62 38 63 73 dc bc 7b 11 15 4c bc a8 71 dd cf 5a 8b 7b d1 f3 c6 d7 60 Data Ascii: KKPkt1NG/(K-A'J3xsU.t.UDr,7{uvBv=55&fjCl-}NGSz;e616Q:RDphwz`W[$ts\MT52kQU"*t:<NYN%7KQYGzzvb8cs{LqZ{`
2025-02-22 00:00:43 UTC	409	IN	Data Raw: 30 ce 91 c7 22 46 c7 e3 84 aa bf a3 fc 40 ba 51 11 02 a7 14 3c 79 75 05 23 68 69 ea 62 49 26 e9 ff 00 16 c6 35 55 ce c7 3f 90 49 7f a3 8a 19 64 9b a5 62 47 27 44 e4 dc 55 5d ec 22 e3 09 e5 03 d9 40 5a e9 ab 69 56 48 b1 4f 32 c2 f6 2b dd 2f 0c 33 1d 4a 87 39 75 6d 14 4d 54 74 55 09 2f 15 48 f7 38 ab 51 bb db dd 98 c0 17 28 3c 3b 66 a2 a4 b8 b6 65 89 b2 b1 63 8b a6 c3 db 85 73 3b 53 cc 52 2e b2 b7 46 dc cc ca 98 d5 c8 8b 1b 56 25 cc 88 aa 89 94 4f 2a a0 17 38 2d d8 f5 3d 34 8e 6b 22 8a 69 24 ca f4 8c 6b 78 c6 88 b8 55 5f 22 95 16 ad 41 47 74 a9 7c 54 ca e5 56 a2 b9 ae 54 e0 f6 f6 a7 d0 07 b4 32 5a f2 ea da 3e 9b a2 66 5a e6 4a 8c 7e 79 6e aa 2a ef 67 e2 fa 4e 2c d6 96 c9 11 89 1b 66 92 57 b9 11 91 b5 8a aa e4 5c aa 2f 67 50 17 50 2d bb 6e aa 82 b3 bd 5a ea Data Ascii: 0"F@Q<yu#hibI&5U?IdbG'DU]"@ZiVHO2+/3J9umMTtU/H8Q(<;fecs;SR.FV%O8-=4k"i$kxU_"AGt\|TVT2Z>fZJ~yngN,fW\/gPP-nZ
2025-02-22 00:00:43 UTC	7842	IN	Data Raw: af 48 f6 f8 2c 45 8d 1d 85 c7 fe 71 3d 5b 45 fa 8e ed 24 cc a5 57 2c 91 a6 f6 eb 93 1b cd ea 54 f9 40 f6 00 00 00 00 6b 57 76 27 f3 6b fc 6f dd 30 ce 83 f5 fe 9b e3 33 2f 76 1f f3 6b cb 37 ee 98 6b 42 7b 20 a7 f8 c0 db ad 9c 7a f7 78 f7 2c fd a6 41 43 1e ec db d7 ab c7 b9 67 ed 32 10 bd 80 20 11 35 20 02 a8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 24 00 00 00 00 00 00 00 00 00 20 90 00 00 00 00 00 82 40 00 00 00 00 00 00 00 00 02 09 00 00 00 00 00 08 24 00 00 00 00 00 20 90 00 00 00 00 00 82 40 00 00 00 00 02 09 00 00 00 08 24 00 20 90 00 00 00 00 00 82 40 00 00 02 09 00 08 24 00 00 00 20 90 00 82 40 00 00 00 00 02 09 00 00 00 08 24 00 20 90 3c fb ef ac 95 fe f1 27 a2 a6 8e 6b bf 5e 2e de fa df 45 0d e3 be fa Data Ascii: H,Eq=[E$W,T@kWv'ko03/vk7kB{ zx,ACg2 5 $ @$ @$ @$ @$ <'k^.E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49727	95.101.182.74	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:42 UTC	416	OUT	GET /blobby/go/7b447f14-e493-43c9-9689-3542f92042e6/gpub/8186fd600e2f6aba/script.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:43 UTC	708	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "6544f4552370f8945dd8d34a6a036155" Last-Modified: Tue, 15 Nov 2022 09:32:25 GMT x-amzn-trace-id: Root=1-63735ca7-64dd0862174c716c4180feac x-forwarded-port: 443 X-Forwarded-For: 64.202.160.104 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:42 GMT Date: Sat, 22 Feb 2025 00:00:42 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:43 UTC	15676	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 6e 61 76 69 67 61 74 6f 72 26 26 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6e 6e 65 63 74 69 6f 6e 26 26 28 77 69 6e 64 6f 77 2e 6e 65 74 77 6f 72 6b 49 6e 66 6f 3d 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6e 6e 65 63 74 69 6f 6e 2c 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6e 6e 65 63 74 69 6f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6e 6e 65 63 74 69 6f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 68 61 6e 67 65 22 2c 28 7b 74 61 72 67 65 74 3a 6e 7d 29 3d 3e 77 69 6e 64 6f 77 2e 6e 65 74 77 6f 72 6b 49 6e 66 6f 3d 6e 29 29 3b 0a 63 6f 6e 73 74 20 69 6d 61 67 65 4f 62 73 65 72 76 65 72 3d 6e 65 77 20 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 28 65 Data Ascii: 00006000navigator&&navigator.connection&&(window.networkInfo=navigator.connection,navigator.connection.addEventListener&&navigator.connection.addEventListener("change",({target:n})=>window.networkInfo=n));const imageObserver=new IntersectionObserver((e
2025-02-22 00:00:43 UTC	8912	IN	Data Raw: 36 5d 7d 5d 5d 2c 5b 5c 22 63 6f 6e 74 61 63 74 35 5c 22 2c 5b 7b 5c 22 76 5c 22 3a 5b 30 5d 2c 5c 22 66 5c 22 3a 5c 22 63 6f 6e 74 61 63 74 35 2d 34 33 39 31 63 66 39 32 2e 6a 73 5c 22 2c 5c 22 73 5c 22 3a 5b 32 35 2c 32 36 2c 32 39 5d 7d 5d 5d 2c 5b 5c 22 63 6f 6e 74 61 63 74 36 5c 22 2c 5b 7b 5c 22 76 5c 22 3a 5b 30 5d 2c 5c 22 66 5c 22 3a 5c 22 63 6f 6e 74 61 63 74 36 2d 38 37 37 39 35 39 36 63 2e 6a 73 5c 22 2c 5c 22 73 5c 22 3a 5b 32 34 2c 32 35 2c 32 36 5d 7d 5d 5d 2c 5b 5c 22 63 6f 6e 74 61 63 74 37 5c 22 2c 5b 7b 5c 22 76 5c 22 3a 5b 30 5d 2c 5c 22 66 5c 22 3a 5c 22 63 6f 6e 74 61 63 74 37 2d 38 39 38 31 34 34 61 62 2e 6a 73 5c 22 2c 5c 22 73 5c 22 3a 5b 32 33 2c 32 35 2c 32 36 5d 7d 5d 5d 2c 5b 5c 22 63 6f 6e 74 61 63 74 38 5c 22 2c 5b 7b 5c 22 Data Ascii: 6]}]],[\"contact5\",[{\"v\":[0],\"f\":\"contact5-4391cf92.js\",\"s\":[25,26,29]}]],[\"contact6\",[{\"v\":[0],\"f\":\"contact6-8779596c.js\",\"s\":[24,25,26]}]],[\"contact7\",[{\"v\":[0],\"f\":\"contact7-898144ab.js\",\"s\":[23,25,26]}]],[\"contact8\",[{\"
2025-02-22 00:00:43 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 5b 7b 5c 22 76 5c 22 3a 5b 30 5d 2c 5c 22 66 5c 22 3a 5c 22 63 2f 69 6e 64 65 78 32 2d 38 31 36 65 37 33 62 66 2e 6a 73 5c 22 2c 5c 22 73 5c 22 3a 5b 31 30 2c 36 5d 7d 5d 5d 2c 5c 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 73 68 61 72 65 64 40 5e 31 2f 6c 69 62 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 53 6f 63 69 61 6c 4c 69 6e 6b 73 5c 22 5d 2c 5c 22 76 5c 22 3a 5b 5b 30 2c 30 2c 31 5d 5d 7d 2c 5c 22 40 77 69 64 67 65 74 2f 4a 4f 42 5f 50 4f 53 54 49 4e 47 5c 22 3a 7b 5c 22 64 5c 22 3a 5b 5b 5c 22 62 73 2d 4a 6f 62 50 6f 73 74 69 6e 67 46 6f 72 6d 5c 22 2c 5b 7b 5c 22 76 5c 22 3a 5b 30 5d 2c 5c 22 66 5c 22 3a 5c 22 62 73 2d 4a 6f 62 50 6f 73 74 69 6e 67 46 6f 72 6d 2d 30 66 34 66 33 66 63 32 2e 6a 73 5c 22 2c 5c 22 73 Data Ascii: 00006000[{\"v\":[0],\"f\":\"c/index2-816e73bf.js\",\"s\":[10,6]}]],\"@wsb/guac-widget-shared@^1/lib/components/SocialLinks\"],\"v\":[[0,0,1]]},\"@widget/JOB_POSTING\":{\"d\":[[\"bs-JobPostingForm\",[{\"v\":[0],\"f\":\"bs-JobPostingForm-0f4f3fc2.js\",\"s
2025-02-22 00:00:43 UTC	8204	IN	Data Raw: 73 2d 64 61 74 61 41 69 64 73 5c 22 2c 5b 7b 5c 22 76 5c 22 3a 5b 30 5d 2c 5c 22 66 5c 22 3a 5c 22 63 2f 62 73 2d 64 61 74 61 41 69 64 73 2d 63 66 61 62 37 30 63 38 2e 6a 73 5c 22 7d 5d 5d 2c 5b 5c 22 63 2f 62 73 2d 67 65 74 51 75 65 72 79 53 74 72 69 6e 67 56 61 6c 75 65 5c 22 2c 5b 7b 5c 22 76 5c 22 3a 5b 30 5d 2c 5c 22 66 5c 22 3a 5c 22 63 2f 62 73 2d 67 65 74 51 75 65 72 79 53 74 72 69 6e 67 56 61 6c 75 65 2d 63 30 62 39 31 66 30 33 2e 6a 73 5c 22 2c 5c 22 73 5c 22 3a 5b 33 33 5d 7d 5d 5d 2c 5b 5c 22 63 2f 62 73 2d 69 6e 64 65 78 5c 22 2c 5b 7b 5c 22 76 5c 22 3a 5b 30 5d 2c 5c 22 66 5c 22 3a 5c 22 63 2f 62 73 2d 69 6e 64 65 78 2d 34 31 36 66 39 37 33 33 2e 6a 73 5c 22 7d 5d 5d 2c 5b 5c 22 63 2f 62 73 2d 69 6e 64 65 78 32 5c 22 2c 5b 7b 5c 22 76 5c 22 Data Ascii: s-dataAids\",[{\"v\":[0],\"f\":\"c/bs-dataAids-cfab70c8.js\"}]],[\"c/bs-getQueryStringValue\",[{\"v\":[0],\"f\":\"c/bs-getQueryStringValue-c0b91f03.js\",\"s\":[33]}]],[\"c/bs-index\",[{\"v\":[0],\"f\":\"c/bs-index-416f9733.js\"}]],[\"c/bs-index2\",[{\"v\"
2025-02-22 00:00:43 UTC	10871	IN	Data Raw: 30 30 30 30 32 41 36 42 0d 0a 76 5c 22 3a 5b 30 5d 2c 5c 22 66 5c 22 3a 5c 22 63 2f 62 73 2d 49 6d 61 67 65 5a 6f 6f 6d 2d 38 32 38 65 30 63 63 31 2e 6a 73 5c 22 2c 5c 22 73 5c 22 3a 5b 30 2c 35 5d 7d 5d 5d 2c 5b 5c 22 63 2f 62 73 2d 69 6e 64 65 78 5c 22 2c 5b 7b 5c 22 76 5c 22 3a 5b 30 5d 2c 5c 22 66 5c 22 3a 5c 22 63 2f 62 73 2d 69 6e 64 65 78 2d 39 64 37 37 64 34 61 39 2e 6a 73 5c 22 2c 5c 22 73 5c 22 3a 5b 30 2c 31 32 2c 31 38 2c 31 39 2c 32 30 2c 35 5d 7d 5d 5d 2c 5b 5c 22 63 2f 62 73 2d 4f 6e 65 43 6f 6c 75 6d 6e 5c 22 2c 5b 7b 5c 22 76 5c 22 3a 5b 30 5d 2c 5c 22 66 5c 22 3a 5c 22 63 2f 62 73 2d 4f 6e 65 43 6f 6c 75 6d 6e 2d 62 35 38 38 65 65 66 61 2e 6a 73 5c 22 2c 5c 22 73 5c 22 3a 5b 31 31 2c 32 31 2c 35 5d 7d 5d 5d 2c 5b 5c 22 63 2f 62 73 2d 50 Data Ascii: 00002A6Bv\":[0],\"f\":\"c/bs-ImageZoom-828e0cc1.js\",\"s\":[0,5]}]],[\"c/bs-index\",[{\"v\":[0],\"f\":\"c/bs-index-9d77d4a9.js\",\"s\":[0,12,18,19,20,5]}]],[\"c/bs-OneColumn\",[{\"v\":[0],\"f\":\"c/bs-OneColumn-b588eefa.js\",\"s\":[11,21,5]}]],[\"c/bs-P
2025-02-22 00:00:43 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49728	95.101.182.74	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:42 UTC	402	OUT	GET /ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.28.5.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:43 UTC	708	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "31e273e89fb56a44d86d206f1bcdcdb4" Last-Modified: Wed, 09 Nov 2022 17:28:26 GMT x-amzn-trace-id: Root=1-636be339-1e3f8f232a9278302e78dad0 x-forwarded-port: 443 X-Forwarded-For: 64.202.160.109 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:43 GMT Date: Sat, 22 Feb 2025 00:00:43 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:43 UTC	15676	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 76 61 72 20 43 6f 72 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 72 29 7b 69 66 28 74 5b 72 5d 29 72 65 74 75 72 6e 20 74 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6f 3d 74 5b 72 5d 3d 7b 69 3a 72 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 6f 2e 6c 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 72 65 74 75 72 6e 20 6e 2e 6d 3d 65 2c 6e 2e 63 3d 74 2c 6e 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 6e 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 Data Ascii: 00006000var Core=function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enume
2025-02-22 00:00:43 UTC	8912	IN	Data Raw: 65 72 28 74 3d 3d 3d 4c 74 3f 65 2e 6c 65 6e 67 74 68 2d 31 3a 74 2c 30 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 2c 6f 3d 2d 31 2c 61 3d 65 72 28 72 2e 6c 65 6e 67 74 68 2d 74 2c 30 29 2c 6c 3d 41 72 72 61 79 28 61 29 3b 2b 2b 6f 3c 61 3b 29 6c 5b 6f 5d 3d 72 5b 74 2b 6f 5d 3b 66 6f 72 28 6f 3d 2d 31 2c 61 3d 41 72 72 61 79 28 74 2b 31 29 3b 2b 2b 6f 3c 74 3b 29 61 5b 6f 5d 3d 72 5b 6f 5d 3b 72 65 74 75 72 6e 20 61 5b 74 5d 3d 6e 28 6c 29 2c 69 28 65 2c 74 68 69 73 2c 61 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 74 29 7b 69 66 28 28 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 21 3d 3d 74 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 5b 74 5d 29 26 26 22 5f 5f 70 72 6f 74 6f 5f Data Ascii: er(t===Lt?e.length-1:t,0),function(){for(var r=arguments,o=-1,a=er(r.length-t,0),l=Array(a);++o<a;)l[o]=r[t+o];for(o=-1,a=Array(t+1);++o<t;)a[o]=r[o];return a[t]=n(l),i(e,this,a)}}function Ue(e,t){if(("constructor"!==t\|\|"function"!=typeof e[t])&&"__proto_
2025-02-22 00:00:43 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 6f 62 6a 65 63 74 20 45 72 72 6f 72 5d 22 5d 3d 63 6e 5b 22 5b 6f 62 6a 65 63 74 20 46 75 6e 63 74 69 6f 6e 5d 22 5d 3d 63 6e 5b 22 5b 6f 62 6a 65 63 74 20 4d 61 70 5d 22 5d 3d 63 6e 5b 22 5b 6f 62 6a 65 63 74 20 4e 75 6d 62 65 72 5d 22 5d 3d 63 6e 5b 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 5d 3d 63 6e 5b 22 5b 6f 62 6a 65 63 74 20 52 65 67 45 78 70 5d 22 5d 3d 63 6e 5b 22 5b 6f 62 6a 65 63 74 20 53 65 74 5d 22 5d 3d 63 6e 5b 22 5b 6f 62 6a 65 63 74 20 53 74 72 69 6e 67 5d 22 5d 3d 63 6e 5b 22 5b 6f 62 6a 65 63 74 20 57 65 61 6b 4d 61 70 5d 22 5d 3d 21 31 3b 76 61 72 20 66 6e 3d 7b 7d 3b 66 6e 5b 22 5b 6f 62 6a 65 63 74 20 41 72 67 75 6d 65 6e 74 73 5d 22 5d 3d 66 6e 5b 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d Data Ascii: 00006000object Error]"]=cn["[object Function]"]=cn["[object Map]"]=cn["[object Number]"]=cn["[object Object]"]=cn["[object RegExp]"]=cn["[object Set]"]=cn["[object String]"]=cn["[object WeakMap]"]=!1;var fn={};fn["[object Arguments]"]=fn["[object Array]
2025-02-22 00:00:43 UTC	8204	IN	Data Raw: 7d 2c 6f 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 26 26 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3b 66 6f 72 28 76 61 72 20 61 20 69 6e 20 65 29 69 66 28 22 64 65 66 61 75 6c 74 22 21 3d 3d 61 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 61 29 29 7b 76 61 72 20 69 3d 6f 3f 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 61 29 3a 6e 75 6c 6c 3b 69 26 26 28 69 2e 67 65 74 7c 7c 69 2e 73 65 74 29 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 2c 61 2c 69 29 3a 72 5b 61 5d 3d 65 5b 61 5d 7d 72 2e 64 65 66 61 75 6c 74 3d 65 2c 6e Data Ascii: },o=Object.defineProperty&&Object.getOwnPropertyDescriptor;for(var a in e)if("default"!==a&&Object.prototype.hasOwnProperty.call(e,a)){var i=o?Object.getOwnPropertyDescriptor(e,a):null;i&&(i.get\|\|i.set)?Object.defineProperty(r,a,i):r[a]=e[a]}r.default=e,n
2025-02-22 00:00:43 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6f 75 70 22 3a 22 67 72 6f 75 70 22 2c 22 66 69 65 6c 64 2d 69 64 22 3a 22 66 69 65 6c 64 22 2c 22 66 69 65 6c 64 2d 72 6f 75 74 65 22 3a 22 72 6f 75 74 65 22 7d 2c 43 3d 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 7b 66 6f 6e 74 44 69 61 6c 73 3a 4f 2e 64 69 61 6c 73 2e 66 6f 6e 74 44 69 61 6c 73 2c 63 6f 6c 6f 72 44 69 61 6c 73 3a 4f 2e 64 69 61 6c 73 2e 63 6f 6c 6f 72 44 69 61 6c 73 2c 74 68 65 6d 65 4f 76 65 72 72 69 64 65 73 3a 4f 2e 74 68 65 6d 65 2e 6f 76 65 72 72 69 64 65 73 7d 29 2e 63 6f 6e 63 61 74 28 5f 2e 73 65 6c 65 63 74 6f 72 4d 61 70 45 6e 74 72 69 65 73 29 3b 74 2e 73 65 6c 65 63 74 6f 72 4d 61 70 45 6e 74 72 69 65 73 3d 43 3b 63 6f 6e 73 74 20 52 3d 65 3d 3e 28 30 2c 69 2e 74 72 61 6e 73 66 6f 72 6d 29 28 Data Ascii: 00004000oup":"group","field-id":"field","field-route":"route"},C=Object.entries({fontDials:O.dials.fontDials,colorDials:O.dials.colorDials,themeOverrides:O.theme.overrides}).concat(_.selectorMapEntries);t.selectorMapEntries=C;const R=e=>(0,i.transform)(
2025-02-22 00:00:43 UTC	12	IN	Data Raw: 76 6f 69 64 20 30 3b 76 61 72 0d 0a Data Ascii: void 0;var
2025-02-22 00:00:43 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 20 72 3d 6e 28 31 33 29 2c 6f 3d 6e 28 39 29 3b 63 6f 6e 73 74 20 61 3d 28 30 2c 6f 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 53 65 6c 65 63 74 6f 72 29 28 22 66 6f 6e 74 73 22 2c 5b 5d 29 3b 74 2e 66 6f 6e 74 73 3d 61 3b 63 6f 6e 73 74 20 69 3d 28 30 2c 6f 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 53 65 6c 65 63 74 6f 72 29 28 22 63 6f 6c 6f 72 73 22 2c 5b 5d 29 3b 74 2e 63 6f 6c 6f 72 73 3d 69 3b 63 6f 6e 73 74 20 6c 3d 28 30 2c 6f 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 53 65 6c 65 63 74 6f 72 29 28 22 66 6f 6e 74 53 63 61 6c 65 22 2c 22 6d 65 64 69 75 6d 22 29 3b 74 2e 66 6f 6e 74 53 63 61 6c 65 3d 6c 3b 63 6f 6e 73 74 20 75 3d 28 30 2c 6f 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 53 65 6c 65 63 74 6f 72 29 28 22 6c 6f Data Ascii: 00004000 r=n(13),o=n(9);const a=(0,o.createContextSelector)("fonts",[]);t.fonts=a;const i=(0,o.createContextSelector)("colors",[]);t.colors=i;const l=(0,o.createContextSelector)("fontScale","medium");t.fontScale=l;const u=(0,o.createContextSelector)("lo
2025-02-22 00:00:43 UTC	12	IN	Data Raw: 2c 74 68 69 73 2e 5f 6d 65 74 0d 0a Data Ascii: ,this._met
2025-02-22 00:00:43 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 61 4f 76 65 72 72 69 64 65 73 5b 6e 5d 7d 6d 61 70 53 74 79 6c 65 73 28 65 3d 7b 7d 2c 74 3d 7b 7d 2c 6e 29 7b 74 3d 7b 64 65 76 69 63 65 3a 61 2e 58 53 4d 41 4c 4c 2c 61 70 70 6c 79 4d 65 74 61 53 74 79 6c 65 73 3a 21 30 2c 66 61 6d 69 6c 79 3a 65 2e 66 6f 6e 74 46 61 6d 69 6c 79 2c 2e 2e 2e 74 7d 2c 6e 3d 6e 7c 7c 74 68 69 73 2e 67 65 74 4d 65 74 61 57 69 74 68 4f 76 65 72 72 69 64 65 73 28 74 29 3b 63 6f 6e 73 74 20 72 3d 74 2e 64 65 76 69 63 65 3d 3d 3d 61 2e 58 53 4d 41 4c 4c 2c 75 3d 74 2e 61 70 70 6c 79 4d 65 74 61 53 74 79 6c 65 73 26 26 72 26 26 74 68 69 73 2e 67 65 74 28 74 2e 66 61 6d 69 6c 79 2b 22 2e 73 74 79 6c 65 73 22 2c 6e 75 6c 6c 2c 6e 29 3b 6c 65 74 20 73 3b 69 66 28 73 3d 74 2e 75 73 65 46 6f 6e 74 44 65 Data Ascii: 00004000aOverrides[n]}mapStyles(e={},t={},n){t={device:a.XSMALL,applyMetaStyles:!0,family:e.fontFamily,...t},n=n\|\|this.getMetaWithOverrides(t);const r=t.device===a.XSMALL,u=t.applyMetaStyles&&r&&this.get(t.family+".styles",null,n);let s;if(s=t.useFontDe
2025-02-22 00:00:43 UTC	12	IN	Data Raw: 3d 3d 6f 3f 28 6e 2e 70 75 73 0d 0a Data Ascii: ==o?(n.pus

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49730	95.101.182.82	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:42 UTC	654	OUT	GET /blobby/go/static/radpack/@widget/LAYOUT/bs-layout13-Theme-publish-Theme-7252afe2.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://gemineolegim.godaddysites.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://gemineolegim.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:43 UTC	670	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "dad318033a09f6aba68d6ee66f1cdace" Last-Modified: Tue, 18 Oct 2022 15:47:49 GMT x-amzn-trace-id: Root=1-634ecaa4-1eea6e7909c133af5b345138 x-forwarded-port: 443 X-Forwarded-For: 64.202.160.107 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:43 GMT Date: Sat, 22 Feb 2025 00:00:43 GMT Content-Length: 7039 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:43 UTC	7039	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 69 64 67 65 74 2f 4c 41 59 4f 55 54 2f 62 73 2d 6c 61 79 6f 75 74 31 33 2d 54 68 65 6d 65 2d 70 75 62 6c 69 73 68 2d 54 68 65 6d 65 2d 37 32 35 32 61 66 65 32 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 2c 22 7e 2f 63 2f 62 73 2d 5f 72 6f 6c 6c 75 70 50 6c 75 67 69 6e 42 61 62 65 6c 48 65 6c 70 65 72 73 22 2c 22 7e 2f 63 2f 62 73 2d 69 6e 64 65 78 33 22 2c 22 7e 2f 63 2f 62 73 2d 74 68 65 6d 65 4f 76 65 72 72 69 64 65 73 22 2c 22 7e 2f 63 2f 62 73 2d 6c 65 67 61 63 79 4f 76 65 72 72 69 64 65 73 22 2c 22 7e 2f 63 2f 62 73 2d 68 75 6d 61 6e 69 73 74 69 63 46 69 6c 6c 65 64 22 2c 22 7e 2f 63 2f 62 73 2d 64 65 66 61 75 6c 74 53 6f 63 69 61 6c 49 63 6f 6e 50 61 63 6b 22 2c 22 7e 2f 63 2f 62 73 2d 6c 6f 61 64 65 72 73 22 2c 22 7e Data Ascii: define("@widget/LAYOUT/bs-layout13-Theme-publish-Theme-7252afe2.js",["exports","~/c/bs-_rollupPluginBabelHelpers","~/c/bs-index3","~/c/bs-themeOverrides","~/c/bs-legacyOverrides","~/c/bs-humanisticFilled","~/c/bs-defaultSocialIconPack","~/c/bs-loaders","~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49734	95.101.182.82	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:42 UTC	653	OUT	GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-_rollupPluginBabelHelpers-e83be766.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://gemineolegim.godaddysites.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://gemineolegim.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:43 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "0d42ffb998a9cf7c25824cf365c7d0c9" Last-Modified: Tue, 18 Oct 2022 15:47:48 GMT x-amzn-trace-id: Root=1-634ecaa3-5959a1ba44b2faaf1233fe85 x-forwarded-port: 443 X-Forwarded-For: 64.202.160.107 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:43 GMT Date: Sat, 22 Feb 2025 00:00:43 GMT Content-Length: 583 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:43 UTC	583	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 69 64 67 65 74 2f 4c 41 59 4f 55 54 2f 63 2f 62 73 2d 5f 72 6f 6c 6c 75 70 50 6c 75 67 69 6e 42 61 62 65 6c 48 65 6c 70 65 72 73 2d 65 38 33 62 65 37 36 36 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 72 65 74 75 72 6e 20 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 31 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 72 29 4f 62 6a 65 63 74 2e 70 72 6f 74 Data Ascii: define("@widget/LAYOUT/c/bs-_rollupPluginBabelHelpers-e83be766.js",["exports"],(function(e){"use strict";function n(){return n=Object.assign?Object.assign.bind():function(e){for(var n=1;n<arguments.length;n++){var r=arguments[n];for(var t in r)Object.prot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49732	95.101.182.82	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:42 UTC	649	OUT	GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-defaultSocialIconPack-91835b99.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://gemineolegim.godaddysites.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://gemineolegim.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:43 UTC	671	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "3d092ef4aba019b14f01c40747e40554" Last-Modified: Thu, 14 Oct 2021 23:04:40 GMT x-amzn-trace-id: Root=1-6168b787-4da6cb7921e50d3f24b2beb8 x-forwarded-port: 443 X-Forwarded-For: 64.202.160.110 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:43 GMT Date: Sat, 22 Feb 2025 00:00:43 GMT Content-Length: 23189 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:43 UTC	15713	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 69 64 67 65 74 2f 4c 41 59 4f 55 54 2f 63 2f 62 73 2d 64 65 66 61 75 6c 74 53 6f 63 69 61 6c 49 63 6f 6e 50 61 63 6b 2d 39 31 38 33 35 62 39 39 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 65 3d 28 67 6c 6f 62 61 6c 2e 52 65 61 63 74 7c 7c 67 75 61 63 2e 72 65 61 63 74 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 31 32 20 32 43 36 2e 34 37 37 20 32 20 32 20 36 2e 34 37 37 20 32 20 31 32 73 34 2e 34 37 37 20 31 30 20 31 30 20 31 30 20 31 30 2d 34 2e 34 37 37 20 31 30 2d 31 30 41 31 30 20 31 30 20 30 20 30 20 30 20 31 32 20 32 7a 4d 37 2e 30 35 35 20 31 33 2e 37 34 35 61 2e 39 37 2e 39 37 Data Ascii: define("@widget/LAYOUT/c/bs-defaultSocialIconPack-91835b99.js",["exports"],(function(a){"use strict";const e=(global.React\|\|guac.react).createElement("path",{d:"M12 2C6.477 2 2 6.477 2 12s4.477 10 10 10 10-4.477 10-10A10 10 0 0 0 12 2zM7.055 13.745a.97.97
2025-02-22 00:00:43 UTC	7476	IN	Data Raw: 31 34 2e 33 33 35 63 2e 30 32 35 2d 2e 34 35 2e 30 33 38 2d 31 2e 32 36 32 2e 30 33 38 2d 32 2e 34 33 35 73 2d 2e 30 31 33 2d 31 2e 39 38 35 2d 2e 30 33 38 2d 32 2e 34 33 35 63 2d 2e 30 35 32 2d 31 2e 30 36 36 2d 2e 33 37 2d 31 2e 38 39 2d 2e 39 35 33 2d 32 2e 34 37 34 2d 2e 35 38 34 2d 2e 35 38 34 2d 31 2e 34 30 38 2d 2e 39 30 31 2d 32 2e 34 37 34 2d 2e 39 35 33 43 31 33 2e 38 38 35 20 36 2e 30 31 33 20 31 33 2e 30 37 33 20 36 20 31 31 2e 39 20 36 73 2d 31 2e 39 38 35 2e 30 31 33 2d 32 2e 34 33 35 2e 30 33 38 63 2d 31 2e 30 36 36 2e 30 35 32 2d 31 2e 38 39 2e 33 37 2d 32 2e 34 37 34 2e 39 35 33 2d 2e 35 38 34 2e 35 38 34 2d 2e 39 30 31 20 31 2e 34 30 38 2d 2e 39 35 33 20 32 2e 34 37 34 43 36 2e 30 31 33 20 39 2e 39 31 35 20 36 20 31 30 2e 37 32 37 20 36 Data Ascii: 14.335c.025-.45.038-1.262.038-2.435s-.013-1.985-.038-2.435c-.052-1.066-.37-1.89-.953-2.474-.584-.584-1.408-.901-2.474-.953C13.885 6.013 13.073 6 11.9 6s-1.985.013-2.435.038c-1.066.052-1.89.37-2.474.953-.584.584-.901 1.408-.953 2.474C6.013 9.915 6 10.727 6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49729	95.101.182.82	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:42 UTC	644	OUT	GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-humanisticFilled-91edd0e1.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://gemineolegim.godaddysites.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://gemineolegim.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:43 UTC	671	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "dfb4bee7c6378574342cdfce62fdd1d7" Last-Modified: Tue, 18 Oct 2022 15:47:53 GMT x-amzn-trace-id: Root=1-634ecaa8-43c1f78d71be10d7594cdd7f x-forwarded-port: 443 X-Forwarded-For: 64.202.160.109 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:43 GMT Date: Sat, 22 Feb 2025 00:00:43 GMT Content-Length: 12309 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:43 UTC	12309	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 69 64 67 65 74 2f 4c 41 59 4f 55 54 2f 63 2f 62 73 2d 68 75 6d 61 6e 69 73 74 69 63 46 69 6c 6c 65 64 2d 39 31 65 64 64 30 65 31 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 61 3d 28 67 6c 6f 62 61 6c 2e 52 65 61 63 74 7c 7c 67 75 61 63 2e 72 65 61 63 74 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 66 69 6c 6c 52 75 6c 65 3a 22 65 76 65 6e 6f 64 64 22 2c 64 3a 22 4d 31 36 2e 30 35 36 20 38 2e 32 35 35 61 34 2e 32 35 34 20 34 2e 32 35 34 20 30 20 31 20 31 2d 38 2e 35 30 37 20 30 20 34 2e 32 35 34 20 34 2e 32 35 34 20 30 20 30 20 31 20 38 2e 35 30 37 20 30 7a 6d 33 2e 30 35 32 20 31 31 2e 37 31 48 34 Data Ascii: define("@widget/LAYOUT/c/bs-humanisticFilled-91edd0e1.js",["exports"],(function(e){"use strict";const a=(global.React\|\|guac.react).createElement("path",{fillRule:"evenodd",d:"M16.056 8.255a4.254 4.254 0 1 1-8.507 0 4.254 4.254 0 0 1 8.507 0zm3.052 11.71H4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49731	95.101.182.82	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:42 UTC	633	OUT	GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-index-4e26cd6b.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://gemineolegim.godaddysites.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://gemineolegim.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:43 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "9219cf782ed219bd3929a51e99503bc2" Last-Modified: Tue, 18 Oct 2022 15:47:49 GMT x-amzn-trace-id: Root=1-634ecaa4-01886e4b7a7aeb6259ec4241 x-forwarded-port: 443 X-Forwarded-For: 64.202.160.108 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:43 GMT Date: Sat, 22 Feb 2025 00:00:43 GMT Content-Length: 876 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:43 UTC	876	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 69 64 67 65 74 2f 4c 41 59 4f 55 54 2f 63 2f 62 73 2d 69 6e 64 65 78 2d 34 65 32 36 63 64 36 62 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 7b 77 69 64 67 65 74 54 79 70 65 73 3a 65 2c 63 6f 6c 6f 72 50 61 63 6b 43 61 74 65 67 6f 72 69 65 73 3a 74 2c 74 68 65 6d 65 43 6f 6e 73 74 61 6e 74 73 3a 6e 2c 62 75 74 74 6f 6e 73 3a 6c 7d 3d 28 67 6c 6f 62 61 6c 2e 43 6f 72 65 7c 7c 67 75 61 63 5b 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 63 6f 72 65 22 5d 29 2e 63 6f 6e 73 74 61 6e 74 73 2c 73 3d 28 67 6c 6f 62 61 6c 2e 6b 65 79 4d 69 72 72 6f 72 7c 7c 67 75 61 63 2e 6b 65 79 6d 69 72 72 6f 72 29 28 7b 4e 4f 4e 45 3a 6e 75 Data Ascii: define("@widget/LAYOUT/c/bs-index-4e26cd6b.js",["exports"],(function(o){"use strict";const{widgetTypes:e,colorPackCategories:t,themeConstants:n,buttons:l}=(global.Core\|\|guac["@wsb/guac-widget-core"]).constants,s=(global.keyMirror\|\|guac.keymirror)({NONE:nu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49733	95.101.182.82	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:42 UTC	634	OUT	GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-index3-55bc27af.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://gemineolegim.godaddysites.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://gemineolegim.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:43 UTC	708	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "55baf821a59fad53aa754c85ae19d0ea" Last-Modified: Tue, 18 Oct 2022 15:47:52 GMT x-amzn-trace-id: Root=1-634ecaa7-2d56acd4525839f224b33503 x-forwarded-port: 443 X-Forwarded-For: 64.202.160.108 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:43 GMT Date: Sat, 22 Feb 2025 00:00:43 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:43 UTC	15676	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 64 65 66 69 6e 65 28 22 40 77 69 64 67 65 74 2f 4c 41 59 4f 55 54 2f 63 2f 62 73 2d 69 6e 64 65 78 33 2d 35 35 62 63 32 37 61 66 2e 6a 73 22 2c 5b 22 72 61 64 70 61 63 6b 22 2c 22 65 78 70 6f 72 74 73 22 2c 22 7e 2f 63 2f 62 73 2d 5f 72 6f 6c 6c 75 70 50 6c 75 67 69 6e 42 61 62 65 6c 48 65 6c 70 65 72 73 22 2c 22 7e 2f 63 2f 62 73 2d 6f 76 65 72 6c 61 79 54 79 70 65 73 22 2c 22 7e 2f 63 2f 62 73 2d 69 6e 64 65 78 32 22 2c 22 7e 2f 63 2f 62 73 2d 69 6e 64 65 78 22 2c 22 7e 2f 63 2f 62 73 2d 64 61 74 61 41 69 64 73 22 2c 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 73 68 61 72 65 64 40 5e 31 2f 6c 69 62 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 43 6f 6c 6f 72 53 77 61 74 63 68 22 2c 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 Data Ascii: 00006000define("@widget/LAYOUT/c/bs-index3-55bc27af.js",["radpack","exports","~/c/bs-_rollupPluginBabelHelpers","~/c/bs-overlayTypes","~/c/bs-index2","~/c/bs-index","~/c/bs-dataAids","@wsb/guac-widget-shared@^1/lib/components/ColorSwatch","@wsb/guac-wid
2025-02-22 00:00:43 UTC	8912	IN	Data Raw: 6f 70 2d 74 79 70 65 73 22 5d 29 2e 6f 62 6a 65 63 74 29 7d 29 3b 63 6c 61 73 73 20 49 20 65 78 74 65 6e 64 73 28 28 67 6c 6f 62 61 6c 2e 43 6f 72 65 7c 7c 67 75 61 63 5b 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 63 6f 72 65 22 5d 29 2e 55 58 32 2e 75 74 69 6c 73 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 53 70 6c 69 74 4c 61 79 6f 75 74 22 29 29 7b 7d 61 2e 5f 28 49 2c 22 70 72 6f 70 54 79 70 65 73 22 2c 7b 62 6c 65 65 64 3a 28 67 6c 6f 62 61 6c 2e 50 72 6f 70 54 79 70 65 73 7c 7c 67 75 61 63 5b 22 70 72 6f 70 2d 74 79 70 65 73 22 5d 29 2e 62 6f 6f 6c 2c 66 6c 75 69 64 3a 28 67 6c 6f 62 61 6c 2e 50 72 6f 70 54 79 70 65 73 7c 7c 67 75 61 63 5b 22 70 72 6f 70 2d 74 79 70 65 73 22 5d 29 2e 62 6f 6f 6c 2c 72 65 76 65 72 73 65 3a 28 67 6c 6f Data Ascii: op-types"]).object)});class I extends((global.Core\|\|guac["@wsb/guac-widget-core"]).UX2.utils.createElement("SplitLayout")){}a._(I,"propTypes",{bleed:(global.PropTypes\|\|guac["prop-types"]).bool,fluid:(global.PropTypes\|\|guac["prop-types"]).bool,reverse:(glo
2025-02-22 00:00:43 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 74 79 70 65 73 22 5d 29 2e 6f 62 6a 65 63 74 7d 29 3b 63 6c 61 73 73 20 71 20 65 78 74 65 6e 64 73 28 28 67 6c 6f 62 61 6c 2e 43 6f 72 65 7c 7c 67 75 61 63 5b 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 63 6f 72 65 22 5d 29 2e 55 58 32 2e 75 74 69 6c 73 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 43 6f 6d 6d 65 72 63 65 43 61 72 64 22 2c 22 4f 76 65 72 6c 61 79 22 29 29 7b 7d 61 2e 5f 28 71 2c 22 70 72 6f 70 54 79 70 65 73 22 2c 7b 6e 61 6d 65 3a 28 67 6c 6f 62 61 6c 2e 50 72 6f 70 54 79 70 65 73 7c 7c 67 75 61 63 5b 22 70 72 6f 70 2d 74 79 70 65 73 22 5d 29 2e 73 74 72 69 6e 67 2c 70 72 69 63 65 3a 28 67 6c 6f 62 61 6c 2e 50 72 6f 70 54 79 70 65 73 7c 7c 67 75 61 63 5b 22 70 72 6f 70 2d 74 79 70 65 73 22 5d 29 Data Ascii: 00006000types"]).object});class q extends((global.Core\|\|guac["@wsb/guac-widget-core"]).UX2.utils.createElement("CommerceCard","Overlay")){}a._(q,"propTypes",{name:(global.PropTypes\|\|guac["prop-types"]).string,price:(global.PropTypes\|\|guac["prop-types"])
2025-02-22 00:00:43 UTC	8204	IN	Data Raw: 65 69 67 68 74 60 29 7c 7c 34 30 30 2c 74 68 69 73 2e 6d 61 70 50 72 6f 70 56 61 6c 75 65 28 22 66 6f 6e 74 44 69 61 6c 22 2c 60 24 7b 74 68 69 73 2e 62 61 73 65 2e 66 6f 6e 74 46 61 6d 69 6c 79 7c 7c 22 70 72 69 6d 61 72 79 22 7d 2e 77 65 69 67 68 74 73 60 29 29 5b 65 5d 7d 2c 68 61 73 46 6f 6e 74 53 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 5b 5d 2c 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 22 6f 6c 64 2d 73 74 61 6e 64 61 72 64 2d 74 74 22 3b 72 Data Ascii: eight`)\|\|400,this.mapPropValue("fontDial",`${this.base.fontFamily\|\|"primary"}.weights`))[e]},hasFontSet:function(){let e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:[],t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:"old-standard-tt";r
2025-02-22 00:00:43 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6c 2e 52 65 61 63 74 7c 7c 67 75 61 63 2e 72 65 61 63 74 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 28 67 6c 6f 62 61 6c 2e 43 6f 72 65 7c 7c 67 75 61 63 5b 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 63 6f 72 65 22 5d 29 2e 55 58 32 2e 45 6c 65 6d 65 6e 74 2e 48 65 61 64 69 6e 67 2c 61 2e 61 28 7b 6b 65 79 3a 22 68 65 61 64 69 6e 67 22 7d 2c 6e 29 29 2c 28 67 6c 6f 62 61 6c 2e 52 65 61 63 74 7c 7c 67 75 61 63 2e 72 65 61 63 74 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 28 67 6c 6f 62 61 6c 2e 43 6f 72 65 7c 7c 67 75 61 63 5b 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 63 6f 72 65 22 5d 29 2e 55 58 32 2e 45 6c 65 6d 65 6e 74 2e 48 65 61 64 69 6e 67 2e 53 75 62 2c 61 2e 61 28 7b 6b 65 79 3a 22 73 Data Ascii: 00004000l.React\|\|guac.react).createElement((global.Core\|\|guac["@wsb/guac-widget-core"]).UX2.Element.Heading,a.a({key:"heading"},n)),(global.React\|\|guac.react).createElement((global.Core\|\|guac["@wsb/guac-widget-core"]).UX2.Element.Heading.Sub,a.a({key:"s
2025-02-22 00:00:43 UTC	12	IN	Data Raw: 6f 72 65 7c 7c 67 75 61 63 5b 0d 0a Data Ascii: ore\|\|guac[
2025-02-22 00:00:43 UTC	15220	IN	Data Raw: 30 30 30 30 33 42 36 38 0d 0a 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 63 6f 72 65 22 5d 29 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2c 74 61 3d 28 67 6c 6f 62 61 6c 2e 50 72 6f 70 54 79 70 65 73 7c 7c 67 75 61 63 5b 22 70 72 6f 70 2d 74 79 70 65 73 22 5d 29 2e 73 68 61 70 65 28 7b 75 72 6c 3a 28 67 6c 6f 62 61 6c 2e 50 72 6f 70 54 79 70 65 73 7c 7c 67 75 61 63 5b 22 70 72 6f 70 2d 74 79 70 65 73 22 5d 29 2e 73 74 72 69 6e 67 2c 70 61 67 65 49 64 3a 28 67 6c 6f 62 61 6c 2e 50 72 6f 70 54 79 70 65 73 7c 7c 67 75 61 63 5b 22 70 72 6f 70 2d 74 79 70 65 73 22 5d 29 2e 73 74 72 69 6e 67 2c 77 69 64 67 65 74 49 64 3a 28 67 6c 6f 62 61 6c 2e 50 72 6f 70 54 79 70 65 73 7c 7c 67 75 61 63 5b 22 70 72 6f 70 2d 74 79 70 65 73 22 5d 29 2e 73 74 72 69 6e 67 2c 6c Data Ascii: 00003B68"@wsb/guac-widget-core"]).components,ta=(global.PropTypes\|\|guac["prop-types"]).shape({url:(global.PropTypes\|\|guac["prop-types"]).string,pageId:(global.PropTypes\|\|guac["prop-types"]).string,widgetId:(global.PropTypes\|\|guac["prop-types"]).string,l
2025-02-22 00:00:43 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 65 72 67 65 28 7b 74 61 67 3a 28 67 6c 6f 62 61 6c 2e 43 6f 72 65 7c 7c 67 75 61 63 5b 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 63 6f 72 65 22 5d 29 2e 55 58 32 2e 45 6c 65 6d 65 6e 74 2e 42 6c 6f 63 6b 2c 73 74 79 6c 65 3a 7b 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 3a 6e 3f 22 78 6c 61 72 67 65 22 3a 22 6d 65 64 69 75 6d 22 2c 74 65 78 74 41 6c 69 67 6e 3a 74 7d 2c 63 68 69 6c 64 72 65 6e 3a 5b 70 2c 67 5d 7d 2c 6c 29 7d 66 75 6e 63 74 69 6f 6e 20 50 61 28 65 29 7b 6c 65 74 7b 62 65 66 6f 72 65 43 6f 6e 74 65 6e 74 3a 74 2c 62 75 74 74 6f 6e 3a 72 3d 7b 7d 2c 73 65 63 6f 6e 64 61 72 79 42 75 74 74 6f 6e 3a 6f 2c 61 66 74 65 72 43 6f 6e 74 65 6e 74 3a 6c 2c 72 65 6e 64 65 72 Data Ascii: 00004000;return this.merge({tag:(global.Core\|\|guac["@wsb/guac-widget-core"]).UX2.Element.Block,style:{marginBottom:n?"xlarge":"medium",textAlign:t},children:[p,g]},l)}function Pa(e){let{beforeContent:t,button:r={},secondaryButton:o,afterContent:l,render
2025-02-22 00:00:43 UTC	12	IN	Data Raw: 72 6e 20 74 68 69 73 2e 6d 65 0d 0a Data Ascii: rn this.me
2025-02-22 00:00:43 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 72 67 65 28 7b 63 68 69 6c 64 72 65 6e 3a 68 7d 2c 70 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 61 28 65 29 7b 6c 65 74 7b 74 69 74 6c 65 3a 74 2c 69 73 44 69 67 69 74 61 6c 50 72 6f 64 75 63 74 3a 72 2c 64 61 74 61 41 69 64 73 3a 6f 3d 7b 7d 2c 2e 2e 2e 6c 7d 3d 65 3b 63 6f 6e 73 74 20 6e 3d 28 67 6c 6f 62 61 6c 2e 52 65 61 63 74 7c 7c 67 75 61 63 2e 72 65 61 63 74 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 28 67 6c 6f 62 61 6c 2e 43 6f 72 65 7c 7c 67 75 61 63 5b 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 63 6f 72 65 22 5d 29 2e 55 58 32 2e 45 6c 65 6d 65 6e 74 2e 48 65 61 64 69 6e 67 2c 61 2e 61 28 7b 66 65 61 74 75 72 65 64 3a 21 30 2c 22 64 61 74 61 2d 61 69 64 22 3a 6f 2e 6e 61 6d 65 7d 2c 6c 29 2c 72 26 26 28 Data Ascii: 00006000rge({children:h},p)}function Oa(e){let{title:t,isDigitalProduct:r,dataAids:o={},...l}=e;const n=(global.React\|\|guac.react).createElement((global.Core\|\|guac["@wsb/guac-widget-core"]).UX2.Element.Heading,a.a({featured:!0,"data-aid":o.name},l),r&&(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49738	95.101.182.74	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:43 UTC	421	OUT	GET /blobby/go/static/radpack/@widget/LAYOUT/bs-layout13-Theme-publish-Theme-7252afe2.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:44 UTC	670	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "dad318033a09f6aba68d6ee66f1cdace" Last-Modified: Tue, 18 Oct 2022 15:47:49 GMT x-amzn-trace-id: Root=1-634ecaa4-1eea6e7909c133af5b345138 x-forwarded-port: 443 X-Forwarded-For: 64.202.160.107 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:44 GMT Date: Sat, 22 Feb 2025 00:00:44 GMT Content-Length: 7039 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:44 UTC	7039	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 69 64 67 65 74 2f 4c 41 59 4f 55 54 2f 62 73 2d 6c 61 79 6f 75 74 31 33 2d 54 68 65 6d 65 2d 70 75 62 6c 69 73 68 2d 54 68 65 6d 65 2d 37 32 35 32 61 66 65 32 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 2c 22 7e 2f 63 2f 62 73 2d 5f 72 6f 6c 6c 75 70 50 6c 75 67 69 6e 42 61 62 65 6c 48 65 6c 70 65 72 73 22 2c 22 7e 2f 63 2f 62 73 2d 69 6e 64 65 78 33 22 2c 22 7e 2f 63 2f 62 73 2d 74 68 65 6d 65 4f 76 65 72 72 69 64 65 73 22 2c 22 7e 2f 63 2f 62 73 2d 6c 65 67 61 63 79 4f 76 65 72 72 69 64 65 73 22 2c 22 7e 2f 63 2f 62 73 2d 68 75 6d 61 6e 69 73 74 69 63 46 69 6c 6c 65 64 22 2c 22 7e 2f 63 2f 62 73 2d 64 65 66 61 75 6c 74 53 6f 63 69 61 6c 49 63 6f 6e 50 61 63 6b 22 2c 22 7e 2f 63 2f 62 73 2d 6c 6f 61 64 65 72 73 22 2c 22 7e Data Ascii: define("@widget/LAYOUT/bs-layout13-Theme-publish-Theme-7252afe2.js",["exports","~/c/bs-_rollupPluginBabelHelpers","~/c/bs-index3","~/c/bs-themeOverrides","~/c/bs-legacyOverrides","~/c/bs-humanisticFilled","~/c/bs-defaultSocialIconPack","~/c/bs-loaders","~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49737	95.101.182.82	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:43 UTC	643	OUT	GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-legacyOverrides-42582241.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://gemineolegim.godaddysites.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://gemineolegim.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:44 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "acd4f2b6117e5054fc9bf848ae8121ca" Last-Modified: Tue, 18 Oct 2022 15:47:52 GMT x-amzn-trace-id: Root=1-634ecaa7-6a4fef5d742e08b052d431ff x-forwarded-port: 443 X-Forwarded-For: 64.202.160.110 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:44 GMT Date: Sat, 22 Feb 2025 00:00:44 GMT Content-Length: 324 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:44 UTC	324	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 69 64 67 65 74 2f 4c 41 59 4f 55 54 2f 63 2f 62 73 2d 6c 65 67 61 63 79 4f 76 65 72 72 69 64 65 73 2d 34 32 35 38 32 32 34 31 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 6e 29 7b 6c 65 74 20 6f 3d 7b 7d 3b 72 65 74 75 72 6e 22 4d 45 4e 55 22 3d 3d 3d 69 26 26 22 68 33 22 3d 3d 3d 65 26 26 28 6f 3d 7b 63 6f 6c 6f 72 3a 22 68 69 67 68 6c 69 67 68 74 22 7d 2c 22 6d 65 6e 75 33 22 3d 3d 3d 6e 26 26 28 6f 2e 66 6f 6e 74 53 69 7a 65 3d 22 6c 61 72 67 65 22 29 29 2c 6f 7d 7d 29 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 28 77 69 6e 64 6f 77 2e 67 6c 6f Data Ascii: define("@widget/LAYOUT/c/bs-legacyOverrides-42582241.js",["exports"],(function(e){"use strict";e.g=function(e,i,n){let o={};return"MENU"===i&&"h3"===e&&(o={color:"highlight"},"menu3"===n&&(o.fontSize="large")),o}})),"undefined"!=typeof window&&(window.glo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49739	95.101.182.82	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:43 UTC	635	OUT	GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-loaders-fffeeba5.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://gemineolegim.godaddysites.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://gemineolegim.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:44 UTC	670	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "852cbc5322260e00b44f2c682f88b2c7" Last-Modified: Thu, 14 Oct 2021 23:04:41 GMT x-amzn-trace-id: Root=1-6168b788-04e31f272fd746490d747855 x-forwarded-port: 443 X-Forwarded-For: 64.202.160.110 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:44 GMT Date: Sat, 22 Feb 2025 00:00:44 GMT Content-Length: 3092 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:44 UTC	3092	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 69 64 67 65 74 2f 4c 41 59 4f 55 54 2f 63 2f 62 73 2d 6c 6f 61 64 65 72 73 2d 66 66 66 65 65 62 61 35 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 2c 22 7e 2f 63 2f 62 73 2d 69 6e 64 65 78 33 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 42 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 7b 53 56 47 3a 63 7d 3d 28 67 6c 6f 62 61 6c 2e 43 6f 72 65 7c 7c 67 75 61 63 5b 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 63 6f 72 65 22 5d 29 2e 55 58 32 2e 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 65 72 67 65 28 7b 74 61 67 3a 22 64 69 76 22 2c 63 68 69 6c 64 72 65 6e 3a 28 67 6c 6f 62 61 6c 2e 52 65 61 63 74 7c 7c 67 75 61 63 2e 72 65 61 63 74 29 Data Ascii: define("@widget/LAYOUT/c/bs-loaders-fffeeba5.js",["exports","~/c/bs-index3"],(function(e,a){"use strict";e.B=function(e){const{SVG:c}=(global.Core\|\|guac["@wsb/guac-widget-core"]).UX2.Element;return this.merge({tag:"div",children:(global.React\|\|guac.react)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49736	95.101.182.74	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:43 UTC	420	OUT	GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-_rollupPluginBabelHelpers-e83be766.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:44 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "0d42ffb998a9cf7c25824cf365c7d0c9" Last-Modified: Tue, 18 Oct 2022 15:47:48 GMT x-amzn-trace-id: Root=1-634ecaa3-5959a1ba44b2faaf1233fe85 x-forwarded-port: 443 X-Forwarded-For: 64.202.160.107 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:44 GMT Date: Sat, 22 Feb 2025 00:00:44 GMT Content-Length: 583 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:44 UTC	583	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 69 64 67 65 74 2f 4c 41 59 4f 55 54 2f 63 2f 62 73 2d 5f 72 6f 6c 6c 75 70 50 6c 75 67 69 6e 42 61 62 65 6c 48 65 6c 70 65 72 73 2d 65 38 33 62 65 37 36 36 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 72 65 74 75 72 6e 20 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 31 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 72 29 4f 62 6a 65 63 74 2e 70 72 6f 74 Data Ascii: define("@widget/LAYOUT/c/bs-_rollupPluginBabelHelpers-e83be766.js",["exports"],(function(e){"use strict";function n(){return n=Object.assign?Object.assign.bind():function(e){for(var n=1;n<arguments.length;n++){var r=arguments[n];for(var t in r)Object.prot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49735	95.101.182.82	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:43 UTC	640	OUT	GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-overlayTypes-e1dbe765.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://gemineolegim.godaddysites.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://gemineolegim.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:44 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "21ad22788e6caa18a4e9e57f7372b108" Last-Modified: Mon, 13 Dec 2021 22:59:02 GMT x-amzn-trace-id: Root=1-61b7d035-018188ae176241301ebce646 x-forwarded-port: 443 X-Forwarded-For: 64.202.160.105 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:44 GMT Date: Sat, 22 Feb 2025 00:00:44 GMT Content-Length: 437 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:44 UTC	437	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 69 64 67 65 74 2f 4c 41 59 4f 55 54 2f 63 2f 62 73 2d 6f 76 65 72 6c 61 79 54 79 70 65 73 2d 65 31 64 62 65 37 36 35 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 7b 68 65 61 64 65 72 54 72 65 61 74 6d 65 6e 74 73 3a 7b 46 49 4c 4c 3a 6e 2c 46 49 54 3a 74 2c 49 4e 53 45 54 3a 6f 2c 42 4c 55 52 3a 61 2c 4c 45 47 41 43 59 5f 42 4c 55 52 3a 63 7d 7d 3d 28 67 6c 6f 62 61 6c 2e 43 6f 72 65 7c 7c 67 75 61 63 5b 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 63 6f 72 65 22 5d 29 2e 63 6f 6e 73 74 61 6e 74 73 3b 65 2e 41 3d 22 61 63 63 65 6e 74 22 2c 65 2e 42 3d 61 2c 65 2e 43 3d 22 63 61 74 65 67 6f 72 79 22 2c 65 2e 46 3d 6e 2c Data Ascii: define("@widget/LAYOUT/c/bs-overlayTypes-e1dbe765.js",["exports"],(function(e){"use strict";const{headerTreatments:{FILL:n,FIT:t,INSET:o,BLUR:a,LEGACY_BLUR:c}}=(global.Core\|\|guac["@wsb/guac-widget-core"]).constants;e.A="accent",e.B=a,e.C="category",e.F=n,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49741	95.101.182.82	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:43 UTC	642	OUT	GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-themeOverrides-e736c017.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://gemineolegim.godaddysites.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://gemineolegim.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:44 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "31b521136207c11ff1f9985264424e8a" Last-Modified: Mon, 13 Dec 2021 22:59:04 GMT x-amzn-trace-id: Root=1-61b7d037-215e219c2a10ce7034ebcf80 x-forwarded-port: 443 X-Forwarded-For: 64.202.160.105 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:44 GMT Date: Sat, 22 Feb 2025 00:00:44 GMT Content-Length: 842 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:44 UTC	842	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 69 64 67 65 74 2f 4c 41 59 4f 55 54 2f 63 2f 62 73 2d 74 68 65 6d 65 4f 76 65 72 72 69 64 65 73 2d 65 37 33 36 63 30 31 37 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 2e 43 6f 72 65 7c 7c 67 75 61 63 5b 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 63 6f 72 65 22 5d 29 2e 63 6f 6e 73 74 61 6e 74 73 3b 65 2e 61 3d 65 3d 3e 7b 6c 65 74 7b 73 65 63 74 69 6f 6e 48 65 61 64 69 6e 67 48 52 3a 74 7d 3d 65 3b 72 65 74 75 72 6e 20 74 3f 7b 73 65 63 74 69 6f 6e 48 65 61 64 69 6e 67 48 52 3a 74 7d 3a 7b 7d 7d 2c 65 2e 62 3d 65 3d 3e 7b 6c 65 74 7b 73 65 63 74 69 6f 6e 48 65 61 64 69 6e 67 43 6f 6c 6f 72 3a 74 7d 3d 65 3b 72 Data Ascii: define("@widget/LAYOUT/c/bs-themeOverrides-e736c017.js",["exports"],(function(e){"use strict";(global.Core\|\|guac["@wsb/guac-widget-core"]).constants;e.a=e=>{let{sectionHeadingHR:t}=e;return t?{sectionHeadingHR:t}:{}},e.b=e=>{let{sectionHeadingColor:t}=e;r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49740	95.101.182.74	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:43 UTC	411	OUT	GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-humanisticFilled-91edd0e1.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:44 UTC	671	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "dfb4bee7c6378574342cdfce62fdd1d7" Last-Modified: Tue, 18 Oct 2022 15:47:53 GMT x-amzn-trace-id: Root=1-634ecaa8-43c1f78d71be10d7594cdd7f x-forwarded-port: 443 X-Forwarded-For: 64.202.160.109 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:44 GMT Date: Sat, 22 Feb 2025 00:00:44 GMT Content-Length: 12309 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:44 UTC	12309	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 69 64 67 65 74 2f 4c 41 59 4f 55 54 2f 63 2f 62 73 2d 68 75 6d 61 6e 69 73 74 69 63 46 69 6c 6c 65 64 2d 39 31 65 64 64 30 65 31 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 61 3d 28 67 6c 6f 62 61 6c 2e 52 65 61 63 74 7c 7c 67 75 61 63 2e 72 65 61 63 74 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 66 69 6c 6c 52 75 6c 65 3a 22 65 76 65 6e 6f 64 64 22 2c 64 3a 22 4d 31 36 2e 30 35 36 20 38 2e 32 35 35 61 34 2e 32 35 34 20 34 2e 32 35 34 20 30 20 31 20 31 2d 38 2e 35 30 37 20 30 20 34 2e 32 35 34 20 34 2e 32 35 34 20 30 20 30 20 31 20 38 2e 35 30 37 20 30 7a 6d 33 2e 30 35 32 20 31 31 2e 37 31 48 34 Data Ascii: define("@widget/LAYOUT/c/bs-humanisticFilled-91edd0e1.js",["exports"],(function(e){"use strict";const a=(global.React\|\|guac.react).createElement("path",{fillRule:"evenodd",d:"M16.056 8.255a4.254 4.254 0 1 1-8.507 0 4.254 4.254 0 0 1 8.507 0zm3.052 11.71H4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49742	95.101.182.74	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:43 UTC	400	OUT	GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-index-4e26cd6b.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:44 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "9219cf782ed219bd3929a51e99503bc2" Last-Modified: Tue, 18 Oct 2022 15:47:49 GMT x-amzn-trace-id: Root=1-634ecaa4-01886e4b7a7aeb6259ec4241 x-forwarded-port: 443 X-Forwarded-For: 64.202.160.108 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:44 GMT Date: Sat, 22 Feb 2025 00:00:44 GMT Content-Length: 876 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:44 UTC	876	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 69 64 67 65 74 2f 4c 41 59 4f 55 54 2f 63 2f 62 73 2d 69 6e 64 65 78 2d 34 65 32 36 63 64 36 62 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 7b 77 69 64 67 65 74 54 79 70 65 73 3a 65 2c 63 6f 6c 6f 72 50 61 63 6b 43 61 74 65 67 6f 72 69 65 73 3a 74 2c 74 68 65 6d 65 43 6f 6e 73 74 61 6e 74 73 3a 6e 2c 62 75 74 74 6f 6e 73 3a 6c 7d 3d 28 67 6c 6f 62 61 6c 2e 43 6f 72 65 7c 7c 67 75 61 63 5b 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 63 6f 72 65 22 5d 29 2e 63 6f 6e 73 74 61 6e 74 73 2c 73 3d 28 67 6c 6f 62 61 6c 2e 6b 65 79 4d 69 72 72 6f 72 7c 7c 67 75 61 63 2e 6b 65 79 6d 69 72 72 6f 72 29 28 7b 4e 4f 4e 45 3a 6e 75 Data Ascii: define("@widget/LAYOUT/c/bs-index-4e26cd6b.js",["exports"],(function(o){"use strict";const{widgetTypes:e,colorPackCategories:t,themeConstants:n,buttons:l}=(global.Core\|\|guac["@wsb/guac-widget-core"]).constants,s=(global.keyMirror\|\|guac.keymirror)({NONE:nu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49744	95.101.182.74	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:43 UTC	416	OUT	GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-defaultSocialIconPack-91835b99.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:44 UTC	671	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "3d092ef4aba019b14f01c40747e40554" Last-Modified: Thu, 14 Oct 2021 23:04:40 GMT x-amzn-trace-id: Root=1-6168b787-4da6cb7921e50d3f24b2beb8 x-forwarded-port: 443 X-Forwarded-For: 64.202.160.110 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:44 GMT Date: Sat, 22 Feb 2025 00:00:44 GMT Content-Length: 23189 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:44 UTC	15713	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 69 64 67 65 74 2f 4c 41 59 4f 55 54 2f 63 2f 62 73 2d 64 65 66 61 75 6c 74 53 6f 63 69 61 6c 49 63 6f 6e 50 61 63 6b 2d 39 31 38 33 35 62 39 39 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 65 3d 28 67 6c 6f 62 61 6c 2e 52 65 61 63 74 7c 7c 67 75 61 63 2e 72 65 61 63 74 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 31 32 20 32 43 36 2e 34 37 37 20 32 20 32 20 36 2e 34 37 37 20 32 20 31 32 73 34 2e 34 37 37 20 31 30 20 31 30 20 31 30 20 31 30 2d 34 2e 34 37 37 20 31 30 2d 31 30 41 31 30 20 31 30 20 30 20 30 20 30 20 31 32 20 32 7a 4d 37 2e 30 35 35 20 31 33 2e 37 34 35 61 2e 39 37 2e 39 37 Data Ascii: define("@widget/LAYOUT/c/bs-defaultSocialIconPack-91835b99.js",["exports"],(function(a){"use strict";const e=(global.React\|\|guac.react).createElement("path",{d:"M12 2C6.477 2 2 6.477 2 12s4.477 10 10 10 10-4.477 10-10A10 10 0 0 0 12 2zM7.055 13.745a.97.97
2025-02-22 00:00:44 UTC	7476	IN	Data Raw: 31 34 2e 33 33 35 63 2e 30 32 35 2d 2e 34 35 2e 30 33 38 2d 31 2e 32 36 32 2e 30 33 38 2d 32 2e 34 33 35 73 2d 2e 30 31 33 2d 31 2e 39 38 35 2d 2e 30 33 38 2d 32 2e 34 33 35 63 2d 2e 30 35 32 2d 31 2e 30 36 36 2d 2e 33 37 2d 31 2e 38 39 2d 2e 39 35 33 2d 32 2e 34 37 34 2d 2e 35 38 34 2d 2e 35 38 34 2d 31 2e 34 30 38 2d 2e 39 30 31 2d 32 2e 34 37 34 2d 2e 39 35 33 43 31 33 2e 38 38 35 20 36 2e 30 31 33 20 31 33 2e 30 37 33 20 36 20 31 31 2e 39 20 36 73 2d 31 2e 39 38 35 2e 30 31 33 2d 32 2e 34 33 35 2e 30 33 38 63 2d 31 2e 30 36 36 2e 30 35 32 2d 31 2e 38 39 2e 33 37 2d 32 2e 34 37 34 2e 39 35 33 2d 2e 35 38 34 2e 35 38 34 2d 2e 39 30 31 20 31 2e 34 30 38 2d 2e 39 35 33 20 32 2e 34 37 34 43 36 2e 30 31 33 20 39 2e 39 31 35 20 36 20 31 30 2e 37 32 37 20 36 Data Ascii: 14.335c.025-.45.038-1.262.038-2.435s-.013-1.985-.038-2.435c-.052-1.066-.37-1.89-.953-2.474-.584-.584-1.408-.901-2.474-.953C13.885 6.013 13.073 6 11.9 6s-1.985.013-2.435.038c-1.066.052-1.89.37-2.474.953-.584.584-.901 1.408-.953 2.474C6.013 9.915 6 10.727 6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49743	95.101.182.82	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:43 UTC	655	OUT	GET /blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/Carousel-3d82957b.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://gemineolegim.godaddysites.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://gemineolegim.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:44 UTC	671	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "753cb19ee1a756e46faa0f118b1b4e01" Last-Modified: Tue, 13 Sep 2022 20:51:07 GMT x-amzn-trace-id: Root=1-6320ed3a-63510b321c43bb775186e613 x-forwarded-port: 443 X-Forwarded-For: 64.202.160.106 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:44 GMT Date: Sat, 22 Feb 2025 00:00:44 GMT Content-Length: 24399 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:44 UTC	15713	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 73 68 61 72 65 64 2f 6c 69 62 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 43 61 72 6f 75 73 65 6c 2d 33 64 38 32 39 35 37 62 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 2c 22 7e 2f 63 2f 5f 72 6f 6c 6c 75 70 50 6c 75 67 69 6e 42 61 62 65 6c 48 65 6c 70 65 72 73 22 2c 22 7e 2f 63 2f 5f 63 6f 6d 6d 6f 6e 6a 73 48 65 6c 70 65 72 73 22 2c 22 7e 2f 63 2f 69 6e 74 65 72 6f 70 52 65 71 75 69 72 65 44 65 66 61 75 6c 74 22 2c 22 7e 2f 63 2f 5f 72 65 61 63 74 5f 63 6f 6d 6d 6f 6e 6a 73 2d 65 78 74 65 72 6e 61 6c 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 73 3d 6e 2e 63 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e Data Ascii: define("@wsb/guac-widget-shared/lib/components/Carousel-3d82957b.js",["exports","~/c/_rollupPluginBabelHelpers","~/c/_commonjsHelpers","~/c/interopRequireDefault","~/c/_react_commonjs-external"],(function(e,t,n,i,r){"use strict";var s=n.c((function(e){fun
2025-02-22 00:00:44 UTC	8686	IN	Data Raw: 69 73 2e 73 74 61 74 65 2e 6c 6f 61 64 65 64 49 6d 61 67 65 73 2c 5b 65 5d 3a 7b 77 69 64 74 68 3a 74 2e 77 69 64 74 68 7c 7c 22 61 75 74 6f 22 2c 68 65 69 67 68 74 3a 74 2e 68 65 69 67 68 74 7c 7c 22 61 75 74 6f 22 7d 7d 7d 2c 28 28 29 3d 3e 7b 65 3d 3d 3d 6c 26 26 74 68 69 73 2e 68 61 6e 64 6c 65 49 6e 69 74 69 61 6c 4c 6f 61 64 28 29 7d 29 29 7d 2c 74 2e 73 72 63 3d 65 7d 29 29 3a 74 68 69 73 2e 63 61 6c 63 4c 65 66 74 4f 66 66 73 65 74 28 29 7d 67 65 74 43 6f 6e 74 72 6f 6c 73 28 29 7b 63 6f 6e 73 74 7b 61 72 72 6f 77 73 3a 65 2c 64 6f 74 73 3a 74 2c 63 6f 6e 74 72 6f 6c 73 3a 6e 7d 3d 74 68 69 73 2e 70 72 6f 70 73 3b 6c 65 74 20 69 3d 6e 2e 73 6c 69 63 65 28 30 29 3b 72 65 74 75 72 6e 20 74 26 26 69 2e 70 75 73 68 28 7b 63 6f 6d 70 6f 6e 65 6e 74 3a Data Ascii: is.state.loadedImages,[e]:{width:t.width\|\|"auto",height:t.height\|\|"auto"}}},(()=>{e===l&&this.handleInitialLoad()}))},t.src=e})):this.calcLeftOffset()}getControls(){const{arrows:e,dots:t,controls:n}=this.props;let i=n.slice(0);return t&&i.push({component:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49745	95.101.182.82	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:44 UTC	658	OUT	GET /blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/ColorSwatch-4196a0a9.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://gemineolegim.godaddysites.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://gemineolegim.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:44 UTC	670	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "cb9bfa0fbdd957fbe7f4841b70341db2" Last-Modified: Tue, 13 Sep 2022 20:51:08 GMT x-amzn-trace-id: Root=1-6320ed3b-6c5c5f0d6dd6c2ec69a41ad3 x-forwarded-port: 443 X-Forwarded-For: 64.202.160.111 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:44 GMT Date: Sat, 22 Feb 2025 00:00:44 GMT Content-Length: 1261 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:44 UTC	1261	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 73 68 61 72 65 64 2f 6c 69 62 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 43 6f 6c 6f 72 53 77 61 74 63 68 2d 34 31 39 36 61 30 61 39 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 6f 3d 65 3d 3e 7b 6c 65 74 7b 63 6f 6c 6f 72 3a 6f 2c 69 73 41 63 74 69 76 65 3a 74 2c 69 6e 53 74 6f 63 6b 3a 72 2c 69 73 53 6d 61 6c 6c 3a 6c 7d 3d 65 3b 63 6f 6e 73 74 20 61 3d 72 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 2c 63 3d 6c 3f 22 32 34 70 78 22 3a 22 33 38 70 78 22 2c 6e 3d 6c 3f 22 32 30 70 78 22 3a 22 33 32 70 78 22 2c 69 3d 7b 62 6f 72 64 65 72 52 61 64 69 75 73 3a 22 35 30 25 22 2c 62 6f 72 64 65 72 57 Data Ascii: define("@wsb/guac-widget-shared/lib/components/ColorSwatch-4196a0a9.js",["exports"],(function(e){"use strict";const o=e=>{let{color:o,isActive:t,inStock:r,isSmall:l}=e;const a=r\|\|void 0===r,c=l?"24px":"38px",n=l?"20px":"32px",i={borderRadius:"50%",borderW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49746	95.101.182.74	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:44 UTC	401	OUT	GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-index3-55bc27af.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:44 UTC	708	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "55baf821a59fad53aa754c85ae19d0ea" Last-Modified: Tue, 18 Oct 2022 15:47:52 GMT x-amzn-trace-id: Root=1-634ecaa7-2d56acd4525839f224b33503 x-forwarded-port: 443 X-Forwarded-For: 64.202.160.108 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:44 GMT Date: Sat, 22 Feb 2025 00:00:44 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:44 UTC	15676	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 64 65 66 69 6e 65 28 22 40 77 69 64 67 65 74 2f 4c 41 59 4f 55 54 2f 63 2f 62 73 2d 69 6e 64 65 78 33 2d 35 35 62 63 32 37 61 66 2e 6a 73 22 2c 5b 22 72 61 64 70 61 63 6b 22 2c 22 65 78 70 6f 72 74 73 22 2c 22 7e 2f 63 2f 62 73 2d 5f 72 6f 6c 6c 75 70 50 6c 75 67 69 6e 42 61 62 65 6c 48 65 6c 70 65 72 73 22 2c 22 7e 2f 63 2f 62 73 2d 6f 76 65 72 6c 61 79 54 79 70 65 73 22 2c 22 7e 2f 63 2f 62 73 2d 69 6e 64 65 78 32 22 2c 22 7e 2f 63 2f 62 73 2d 69 6e 64 65 78 22 2c 22 7e 2f 63 2f 62 73 2d 64 61 74 61 41 69 64 73 22 2c 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 73 68 61 72 65 64 40 5e 31 2f 6c 69 62 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 43 6f 6c 6f 72 53 77 61 74 63 68 22 2c 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 Data Ascii: 00006000define("@widget/LAYOUT/c/bs-index3-55bc27af.js",["radpack","exports","~/c/bs-_rollupPluginBabelHelpers","~/c/bs-overlayTypes","~/c/bs-index2","~/c/bs-index","~/c/bs-dataAids","@wsb/guac-widget-shared@^1/lib/components/ColorSwatch","@wsb/guac-wid
2025-02-22 00:00:44 UTC	8912	IN	Data Raw: 6f 70 2d 74 79 70 65 73 22 5d 29 2e 6f 62 6a 65 63 74 29 7d 29 3b 63 6c 61 73 73 20 49 20 65 78 74 65 6e 64 73 28 28 67 6c 6f 62 61 6c 2e 43 6f 72 65 7c 7c 67 75 61 63 5b 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 63 6f 72 65 22 5d 29 2e 55 58 32 2e 75 74 69 6c 73 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 53 70 6c 69 74 4c 61 79 6f 75 74 22 29 29 7b 7d 61 2e 5f 28 49 2c 22 70 72 6f 70 54 79 70 65 73 22 2c 7b 62 6c 65 65 64 3a 28 67 6c 6f 62 61 6c 2e 50 72 6f 70 54 79 70 65 73 7c 7c 67 75 61 63 5b 22 70 72 6f 70 2d 74 79 70 65 73 22 5d 29 2e 62 6f 6f 6c 2c 66 6c 75 69 64 3a 28 67 6c 6f 62 61 6c 2e 50 72 6f 70 54 79 70 65 73 7c 7c 67 75 61 63 5b 22 70 72 6f 70 2d 74 79 70 65 73 22 5d 29 2e 62 6f 6f 6c 2c 72 65 76 65 72 73 65 3a 28 67 6c 6f Data Ascii: op-types"]).object)});class I extends((global.Core\|\|guac["@wsb/guac-widget-core"]).UX2.utils.createElement("SplitLayout")){}a._(I,"propTypes",{bleed:(global.PropTypes\|\|guac["prop-types"]).bool,fluid:(global.PropTypes\|\|guac["prop-types"]).bool,reverse:(glo
2025-02-22 00:00:44 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 74 79 70 65 73 22 5d 29 2e 6f 62 6a 65 63 74 7d 29 3b 63 6c 61 73 73 20 71 20 65 78 74 65 6e 64 73 28 28 67 6c 6f 62 61 6c 2e 43 6f 72 65 7c 7c 67 75 61 63 5b 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 63 6f 72 65 22 5d 29 2e 55 58 32 2e 75 74 69 6c 73 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 43 6f 6d 6d 65 72 63 65 43 61 72 64 22 2c 22 4f 76 65 72 6c 61 79 22 29 29 7b 7d 61 2e 5f 28 71 2c 22 70 72 6f 70 54 79 70 65 73 22 2c 7b 6e 61 6d 65 3a 28 67 6c 6f 62 61 6c 2e 50 72 6f 70 54 79 70 65 73 7c 7c 67 75 61 63 5b 22 70 72 6f 70 2d 74 79 70 65 73 22 5d 29 2e 73 74 72 69 6e 67 2c 70 72 69 63 65 3a 28 67 6c 6f 62 61 6c 2e 50 72 6f 70 54 79 70 65 73 7c 7c 67 75 61 63 5b 22 70 72 6f 70 2d 74 79 70 65 73 22 5d 29 Data Ascii: 00006000types"]).object});class q extends((global.Core\|\|guac["@wsb/guac-widget-core"]).UX2.utils.createElement("CommerceCard","Overlay")){}a._(q,"propTypes",{name:(global.PropTypes\|\|guac["prop-types"]).string,price:(global.PropTypes\|\|guac["prop-types"])
2025-02-22 00:00:44 UTC	8204	IN	Data Raw: 65 69 67 68 74 60 29 7c 7c 34 30 30 2c 74 68 69 73 2e 6d 61 70 50 72 6f 70 56 61 6c 75 65 28 22 66 6f 6e 74 44 69 61 6c 22 2c 60 24 7b 74 68 69 73 2e 62 61 73 65 2e 66 6f 6e 74 46 61 6d 69 6c 79 7c 7c 22 70 72 69 6d 61 72 79 22 7d 2e 77 65 69 67 68 74 73 60 29 29 5b 65 5d 7d 2c 68 61 73 46 6f 6e 74 53 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 5b 5d 2c 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 22 6f 6c 64 2d 73 74 61 6e 64 61 72 64 2d 74 74 22 3b 72 Data Ascii: eight`)\|\|400,this.mapPropValue("fontDial",`${this.base.fontFamily\|\|"primary"}.weights`))[e]},hasFontSet:function(){let e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:[],t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:"old-standard-tt";r
2025-02-22 00:00:44 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6c 2e 52 65 61 63 74 7c 7c 67 75 61 63 2e 72 65 61 63 74 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 28 67 6c 6f 62 61 6c 2e 43 6f 72 65 7c 7c 67 75 61 63 5b 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 63 6f 72 65 22 5d 29 2e 55 58 32 2e 45 6c 65 6d 65 6e 74 2e 48 65 61 64 69 6e 67 2c 61 2e 61 28 7b 6b 65 79 3a 22 68 65 61 64 69 6e 67 22 7d 2c 6e 29 29 2c 28 67 6c 6f 62 61 6c 2e 52 65 61 63 74 7c 7c 67 75 61 63 2e 72 65 61 63 74 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 28 67 6c 6f 62 61 6c 2e 43 6f 72 65 7c 7c 67 75 61 63 5b 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 63 6f 72 65 22 5d 29 2e 55 58 32 2e 45 6c 65 6d 65 6e 74 2e 48 65 61 64 69 6e 67 2e 53 75 62 2c 61 2e 61 28 7b 6b 65 79 3a 22 73 Data Ascii: 00004000l.React\|\|guac.react).createElement((global.Core\|\|guac["@wsb/guac-widget-core"]).UX2.Element.Heading,a.a({key:"heading"},n)),(global.React\|\|guac.react).createElement((global.Core\|\|guac["@wsb/guac-widget-core"]).UX2.Element.Heading.Sub,a.a({key:"s
2025-02-22 00:00:44 UTC	12	IN	Data Raw: 6f 72 65 7c 7c 67 75 61 63 5b 0d 0a Data Ascii: ore\|\|guac[
2025-02-22 00:00:44 UTC	15220	IN	Data Raw: 30 30 30 30 33 42 36 38 0d 0a 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 63 6f 72 65 22 5d 29 2e 63 6f 6d 70 6f 6e 65 6e 74 73 2c 74 61 3d 28 67 6c 6f 62 61 6c 2e 50 72 6f 70 54 79 70 65 73 7c 7c 67 75 61 63 5b 22 70 72 6f 70 2d 74 79 70 65 73 22 5d 29 2e 73 68 61 70 65 28 7b 75 72 6c 3a 28 67 6c 6f 62 61 6c 2e 50 72 6f 70 54 79 70 65 73 7c 7c 67 75 61 63 5b 22 70 72 6f 70 2d 74 79 70 65 73 22 5d 29 2e 73 74 72 69 6e 67 2c 70 61 67 65 49 64 3a 28 67 6c 6f 62 61 6c 2e 50 72 6f 70 54 79 70 65 73 7c 7c 67 75 61 63 5b 22 70 72 6f 70 2d 74 79 70 65 73 22 5d 29 2e 73 74 72 69 6e 67 2c 77 69 64 67 65 74 49 64 3a 28 67 6c 6f 62 61 6c 2e 50 72 6f 70 54 79 70 65 73 7c 7c 67 75 61 63 5b 22 70 72 6f 70 2d 74 79 70 65 73 22 5d 29 2e 73 74 72 69 6e 67 2c 6c Data Ascii: 00003B68"@wsb/guac-widget-core"]).components,ta=(global.PropTypes\|\|guac["prop-types"]).shape({url:(global.PropTypes\|\|guac["prop-types"]).string,pageId:(global.PropTypes\|\|guac["prop-types"]).string,widgetId:(global.PropTypes\|\|guac["prop-types"]).string,l
2025-02-22 00:00:44 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 65 72 67 65 28 7b 74 61 67 3a 28 67 6c 6f 62 61 6c 2e 43 6f 72 65 7c 7c 67 75 61 63 5b 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 63 6f 72 65 22 5d 29 2e 55 58 32 2e 45 6c 65 6d 65 6e 74 2e 42 6c 6f 63 6b 2c 73 74 79 6c 65 3a 7b 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 3a 6e 3f 22 78 6c 61 72 67 65 22 3a 22 6d 65 64 69 75 6d 22 2c 74 65 78 74 41 6c 69 67 6e 3a 74 7d 2c 63 68 69 6c 64 72 65 6e 3a 5b 70 2c 67 5d 7d 2c 6c 29 7d 66 75 6e 63 74 69 6f 6e 20 50 61 28 65 29 7b 6c 65 74 7b 62 65 66 6f 72 65 43 6f 6e 74 65 6e 74 3a 74 2c 62 75 74 74 6f 6e 3a 72 3d 7b 7d 2c 73 65 63 6f 6e 64 61 72 79 42 75 74 74 6f 6e 3a 6f 2c 61 66 74 65 72 43 6f 6e 74 65 6e 74 3a 6c 2c 72 65 6e 64 65 72 Data Ascii: 00004000;return this.merge({tag:(global.Core\|\|guac["@wsb/guac-widget-core"]).UX2.Element.Block,style:{marginBottom:n?"xlarge":"medium",textAlign:t},children:[p,g]},l)}function Pa(e){let{beforeContent:t,button:r={},secondaryButton:o,afterContent:l,render
2025-02-22 00:00:44 UTC	12	IN	Data Raw: 72 6e 20 74 68 69 73 2e 6d 65 0d 0a Data Ascii: rn this.me
2025-02-22 00:00:44 UTC	16384	IN	Data Raw: 30 30 30 30 36 30 30 30 0d 0a 72 67 65 28 7b 63 68 69 6c 64 72 65 6e 3a 68 7d 2c 70 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 61 28 65 29 7b 6c 65 74 7b 74 69 74 6c 65 3a 74 2c 69 73 44 69 67 69 74 61 6c 50 72 6f 64 75 63 74 3a 72 2c 64 61 74 61 41 69 64 73 3a 6f 3d 7b 7d 2c 2e 2e 2e 6c 7d 3d 65 3b 63 6f 6e 73 74 20 6e 3d 28 67 6c 6f 62 61 6c 2e 52 65 61 63 74 7c 7c 67 75 61 63 2e 72 65 61 63 74 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 28 67 6c 6f 62 61 6c 2e 43 6f 72 65 7c 7c 67 75 61 63 5b 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 63 6f 72 65 22 5d 29 2e 55 58 32 2e 45 6c 65 6d 65 6e 74 2e 48 65 61 64 69 6e 67 2c 61 2e 61 28 7b 66 65 61 74 75 72 65 64 3a 21 30 2c 22 64 61 74 61 2d 61 69 64 22 3a 6f 2e 6e 61 6d 65 7d 2c 6c 29 2c 72 26 26 28 Data Ascii: 00006000rge({children:h},p)}function Oa(e){let{title:t,isDigitalProduct:r,dataAids:o={},...l}=e;const n=(global.React\|\|guac.react).createElement((global.Core\|\|guac["@wsb/guac-widget-core"]).UX2.Element.Heading,a.a({featured:!0,"data-aid":o.name},l),r&&(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49747	95.101.182.82	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:44 UTC	636	OUT	GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-dataAids-6a839d53.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://gemineolegim.godaddysites.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://gemineolegim.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:45 UTC	670	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "edc15ad5daac3cfa744bffdb1e0174be" Last-Modified: Mon, 13 Dec 2021 22:59:00 GMT x-amzn-trace-id: Root=1-61b7d033-2da3a4b6382be71e0d8c5ecb x-forwarded-port: 443 X-Forwarded-For: 64.202.160.105 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:45 GMT Date: Sat, 22 Feb 2025 00:00:45 GMT Content-Length: 1874 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:45 UTC	1874	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 69 64 67 65 74 2f 4c 41 59 4f 55 54 2f 63 2f 62 73 2d 64 61 74 61 41 69 64 73 2d 36 61 38 33 39 64 35 33 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 45 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 52 3d 28 67 6c 6f 62 61 6c 2e 6b 65 79 4d 69 72 72 6f 72 7c 7c 67 75 61 63 2e 6b 65 79 6d 69 72 72 6f 72 29 28 7b 42 41 43 4b 47 52 4f 55 4e 44 5f 49 4d 41 47 45 5f 52 45 4e 44 45 52 45 44 3a 6e 75 6c 6c 2c 48 41 4d 42 55 52 47 45 52 5f 4d 45 4e 55 5f 4c 49 4e 4b 3a 6e 75 6c 6c 2c 48 45 41 44 45 52 5f 57 49 44 47 45 54 3a 6e 75 6c 6c 2c 48 45 41 44 45 52 5f 53 45 43 54 49 4f 4e 3a 6e 75 6c 6c 2c 48 45 41 44 45 52 5f 56 49 44 45 4f 3a 6e 75 6c 6c 2c 48 45 41 44 45 52 5f 56 49 44 45 4f Data Ascii: define("@widget/LAYOUT/c/bs-dataAids-6a839d53.js",["exports"],(function(E){"use strict";var R=(global.keyMirror\|\|guac.keymirror)({BACKGROUND_IMAGE_RENDERED:null,HAMBURGER_MENU_LINK:null,HEADER_WIDGET:null,HEADER_SECTION:null,HEADER_VIDEO:null,HEADER_VIDEO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49748	95.101.182.74	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:44 UTC	410	OUT	GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-legacyOverrides-42582241.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:45 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "acd4f2b6117e5054fc9bf848ae8121ca" Last-Modified: Tue, 18 Oct 2022 15:47:52 GMT x-amzn-trace-id: Root=1-634ecaa7-6a4fef5d742e08b052d431ff x-forwarded-port: 443 X-Forwarded-For: 64.202.160.110 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:45 GMT Date: Sat, 22 Feb 2025 00:00:45 GMT Content-Length: 324 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:45 UTC	324	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 69 64 67 65 74 2f 4c 41 59 4f 55 54 2f 63 2f 62 73 2d 6c 65 67 61 63 79 4f 76 65 72 72 69 64 65 73 2d 34 32 35 38 32 32 34 31 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 69 2c 6e 29 7b 6c 65 74 20 6f 3d 7b 7d 3b 72 65 74 75 72 6e 22 4d 45 4e 55 22 3d 3d 3d 69 26 26 22 68 33 22 3d 3d 3d 65 26 26 28 6f 3d 7b 63 6f 6c 6f 72 3a 22 68 69 67 68 6c 69 67 68 74 22 7d 2c 22 6d 65 6e 75 33 22 3d 3d 3d 6e 26 26 28 6f 2e 66 6f 6e 74 53 69 7a 65 3d 22 6c 61 72 67 65 22 29 29 2c 6f 7d 7d 29 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 28 77 69 6e 64 6f 77 2e 67 6c 6f Data Ascii: define("@widget/LAYOUT/c/bs-legacyOverrides-42582241.js",["exports"],(function(e){"use strict";e.g=function(e,i,n){let o={};return"MENU"===i&&"h3"===e&&(o={color:"highlight"},"menu3"===n&&(o.fontSize="large")),o}})),"undefined"!=typeof window&&(window.glo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49749	95.101.182.82	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:44 UTC	634	OUT	GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-index2-87bd33e6.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://gemineolegim.godaddysites.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://gemineolegim.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:45 UTC	670	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "5cc6b93d41889c0a55c6c4fcd2d89713" Last-Modified: Tue, 18 Oct 2022 15:47:53 GMT x-amzn-trace-id: Root=1-634ecaa8-5441fae57a8929061baf3c6b x-forwarded-port: 443 X-Forwarded-For: 64.202.160.104 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:45 GMT Date: Sat, 22 Feb 2025 00:00:45 GMT Content-Length: 1400 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:45 UTC	1400	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 69 64 67 65 74 2f 4c 41 59 4f 55 54 2f 63 2f 62 73 2d 69 6e 64 65 78 32 2d 38 37 62 64 33 33 65 36 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 22 6d 65 64 69 75 6d 22 3b 72 65 74 75 72 6e 7b 22 3e 20 3a 6e 74 68 2d 63 68 69 6c 64 28 6e 29 22 3a 7b 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 3a 74 7d 2c 22 20 3e 20 3a 6c 61 73 74 2d 63 68 69 6c 64 22 3a 7b 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 3a 22 30 20 21 69 6d 70 6f 72 74 61 Data Ascii: define("@widget/LAYOUT/c/bs-index2-87bd33e6.js",["exports"],(function(t){"use strict";t.a=function(){let t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:"medium";return{"> :nth-child(n)":{marginBottom:t}," > :last-child":{marginBottom:"0 !importa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49751	95.101.182.82	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:44 UTC	644	OUT	GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-navigationDrawer-27f5f1f5.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://gemineolegim.godaddysites.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://gemineolegim.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:45 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "8f12765eb30fbdcfcdc116d13f7fc272" Last-Modified: Thu, 28 Jul 2022 17:59:29 GMT x-amzn-trace-id: Root=1-62e2ce80-4ef8fc4a33c151912970138f x-forwarded-port: 443 X-Forwarded-For: 64.202.160.107 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:45 GMT Date: Sat, 22 Feb 2025 00:00:45 GMT Content-Length: 221 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:45 UTC	221	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 69 64 67 65 74 2f 4c 41 59 4f 55 54 2f 63 2f 62 73 2d 6e 61 76 69 67 61 74 69 6f 6e 44 72 61 77 65 72 2d 32 37 66 35 66 31 66 35 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 4e 3d 22 2d 32 34 39 76 77 22 7d 29 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 28 77 69 6e 64 6f 77 2e 67 6c 6f 62 61 6c 3d 77 69 6e 64 6f 77 29 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 62 73 2d 6e 61 76 69 67 61 74 69 6f 6e 44 72 61 77 65 72 2d 32 37 66 35 66 31 66 35 2e 6a 73 2e 6d 61 70 0a Data Ascii: define("@widget/LAYOUT/c/bs-navigationDrawer-27f5f1f5.js",["exports"],(function(i){"use strict";i.N="-249vw"})),"undefined"!=typeof window&&(window.global=window);//# sourceMappingURL=bs-navigationDrawer-27f5f1f5.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49750	95.101.182.82	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:44 UTC	647	OUT	GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-searchFormLocations-c86f2a99.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://gemineolegim.godaddysites.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://gemineolegim.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:45 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "daa79ad7558674f6a12d962abf47f2f6" Last-Modified: Thu, 14 Oct 2021 23:04:37 GMT x-amzn-trace-id: Root=1-6168b784-1438c006715eea557e6c9f7f x-forwarded-port: 443 X-Forwarded-For: 64.202.160.110 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:45 GMT Date: Sat, 22 Feb 2025 00:00:45 GMT Content-Length: 304 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:45 UTC	304	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 69 64 67 65 74 2f 4c 41 59 4f 55 54 2f 63 2f 62 73 2d 73 65 61 72 63 68 46 6f 72 6d 4c 6f 63 61 74 69 6f 6e 73 2d 63 38 36 66 32 61 39 39 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 2e 44 3d 22 44 45 53 4b 54 4f 50 5f 4e 41 56 5f 43 4f 56 45 52 22 2c 6f 2e 4d 3d 22 4d 4f 42 49 4c 45 5f 4e 41 56 22 2c 6f 2e 4e 3d 22 4e 41 56 5f 44 52 41 57 45 52 22 2c 6f 2e 53 3d 22 53 49 44 45 42 41 52 22 2c 6f 2e 61 3d 22 44 45 53 4b 54 4f 50 5f 4e 41 56 22 7d 29 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 28 77 69 6e 64 6f 77 2e 67 6c 6f 62 61 6c 3d 77 69 6e 64 6f 77 29 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d Data Ascii: define("@widget/LAYOUT/c/bs-searchFormLocations-c86f2a99.js",["exports"],(function(o){"use strict";o.D="DESKTOP_NAV_COVER",o.M="MOBILE_NAV",o.N="NAV_DRAWER",o.S="SIDEBAR",o.a="DESKTOP_NAV"})),"undefined"!=typeof window&&(window.global=window);//# sourceM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49752	95.101.182.74	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:44 UTC	402	OUT	GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-loaders-fffeeba5.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:45 UTC	670	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "852cbc5322260e00b44f2c682f88b2c7" Last-Modified: Thu, 14 Oct 2021 23:04:41 GMT x-amzn-trace-id: Root=1-6168b788-04e31f272fd746490d747855 x-forwarded-port: 443 X-Forwarded-For: 64.202.160.110 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:45 GMT Date: Sat, 22 Feb 2025 00:00:45 GMT Content-Length: 3092 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:45 UTC	3092	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 69 64 67 65 74 2f 4c 41 59 4f 55 54 2f 63 2f 62 73 2d 6c 6f 61 64 65 72 73 2d 66 66 66 65 65 62 61 35 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 2c 22 7e 2f 63 2f 62 73 2d 69 6e 64 65 78 33 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 42 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 74 7b 53 56 47 3a 63 7d 3d 28 67 6c 6f 62 61 6c 2e 43 6f 72 65 7c 7c 67 75 61 63 5b 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 63 6f 72 65 22 5d 29 2e 55 58 32 2e 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 65 72 67 65 28 7b 74 61 67 3a 22 64 69 76 22 2c 63 68 69 6c 64 72 65 6e 3a 28 67 6c 6f 62 61 6c 2e 52 65 61 63 74 7c 7c 67 75 61 63 2e 72 65 61 63 74 29 Data Ascii: define("@widget/LAYOUT/c/bs-loaders-fffeeba5.js",["exports","~/c/bs-index3"],(function(e,a){"use strict";e.B=function(e){const{SVG:c}=(global.Core\|\|guac["@wsb/guac-widget-core"]).UX2.Element;return this.merge({tag:"div",children:(global.React\|\|guac.react)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49753	95.101.182.74	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:44 UTC	409	OUT	GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-themeOverrides-e736c017.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:45 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "31b521136207c11ff1f9985264424e8a" Last-Modified: Mon, 13 Dec 2021 22:59:04 GMT x-amzn-trace-id: Root=1-61b7d037-215e219c2a10ce7034ebcf80 x-forwarded-port: 443 X-Forwarded-For: 64.202.160.105 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:45 GMT Date: Sat, 22 Feb 2025 00:00:45 GMT Content-Length: 842 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:45 UTC	842	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 69 64 67 65 74 2f 4c 41 59 4f 55 54 2f 63 2f 62 73 2d 74 68 65 6d 65 4f 76 65 72 72 69 64 65 73 2d 65 37 33 36 63 30 31 37 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 67 6c 6f 62 61 6c 2e 43 6f 72 65 7c 7c 67 75 61 63 5b 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 63 6f 72 65 22 5d 29 2e 63 6f 6e 73 74 61 6e 74 73 3b 65 2e 61 3d 65 3d 3e 7b 6c 65 74 7b 73 65 63 74 69 6f 6e 48 65 61 64 69 6e 67 48 52 3a 74 7d 3d 65 3b 72 65 74 75 72 6e 20 74 3f 7b 73 65 63 74 69 6f 6e 48 65 61 64 69 6e 67 48 52 3a 74 7d 3a 7b 7d 7d 2c 65 2e 62 3d 65 3d 3e 7b 6c 65 74 7b 73 65 63 74 69 6f 6e 48 65 61 64 69 6e 67 43 6f 6c 6f 72 3a 74 7d 3d 65 3b 72 Data Ascii: define("@widget/LAYOUT/c/bs-themeOverrides-e736c017.js",["exports"],(function(e){"use strict";(global.Core\|\|guac["@wsb/guac-widget-core"]).constants;e.a=e=>{let{sectionHeadingHR:t}=e;return t?{sectionHeadingHR:t}:{}},e.b=e=>{let{sectionHeadingColor:t}=e;r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49754	95.101.182.74	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:44 UTC	407	OUT	GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-overlayTypes-e1dbe765.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:45 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "21ad22788e6caa18a4e9e57f7372b108" Last-Modified: Mon, 13 Dec 2021 22:59:02 GMT x-amzn-trace-id: Root=1-61b7d035-018188ae176241301ebce646 x-forwarded-port: 443 X-Forwarded-For: 64.202.160.105 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:45 GMT Date: Sat, 22 Feb 2025 00:00:45 GMT Content-Length: 437 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:45 UTC	437	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 69 64 67 65 74 2f 4c 41 59 4f 55 54 2f 63 2f 62 73 2d 6f 76 65 72 6c 61 79 54 79 70 65 73 2d 65 31 64 62 65 37 36 35 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 7b 68 65 61 64 65 72 54 72 65 61 74 6d 65 6e 74 73 3a 7b 46 49 4c 4c 3a 6e 2c 46 49 54 3a 74 2c 49 4e 53 45 54 3a 6f 2c 42 4c 55 52 3a 61 2c 4c 45 47 41 43 59 5f 42 4c 55 52 3a 63 7d 7d 3d 28 67 6c 6f 62 61 6c 2e 43 6f 72 65 7c 7c 67 75 61 63 5b 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 63 6f 72 65 22 5d 29 2e 63 6f 6e 73 74 61 6e 74 73 3b 65 2e 41 3d 22 61 63 63 65 6e 74 22 2c 65 2e 42 3d 61 2c 65 2e 43 3d 22 63 61 74 65 67 6f 72 79 22 2c 65 2e 46 3d 6e 2c Data Ascii: define("@widget/LAYOUT/c/bs-overlayTypes-e1dbe765.js",["exports"],(function(e){"use strict";const{headerTreatments:{FILL:n,FIT:t,INSET:o,BLUR:a,LEGACY_BLUR:c}}=(global.Core\|\|guac["@wsb/guac-widget-core"]).constants;e.A="accent",e.B=a,e.C="category",e.F=n,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49755	95.101.182.82	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:45 UTC	650	OUT	GET /blobby/go/static/radpack/@wsb/guac-widget-shared/c/_commonjsHelpers-67085353.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://gemineolegim.godaddysites.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://gemineolegim.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:45 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "62a914b2c847d4d02b76164d7a2a54c6" Last-Modified: Tue, 13 Sep 2022 20:51:08 GMT x-amzn-trace-id: Root=1-6320ed3b-3de8a43b0cf7990c68d55390 x-forwarded-port: 443 X-Forwarded-For: 64.202.160.110 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:45 GMT Date: Sat, 22 Feb 2025 00:00:45 GMT Content-Length: 960 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:45 UTC	960	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 73 68 61 72 65 64 2f 63 2f 5f 63 6f 6d 6d 6f 6e 6a 73 48 65 6c 70 65 72 73 2d 36 37 30 38 35 33 35 33 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 3b 65 2e 61 3d Data Ascii: define("@wsb/guac-widget-shared/c/_commonjsHelpers-67085353.js",["exports"],(function(e){"use strict";var n="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};e.a=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49756	95.101.182.82	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:45 UTC	658	OUT	GET /blobby/go/static/radpack/@wsb/guac-widget-shared/c/_react_commonjs-external-a1351e34.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://gemineolegim.godaddysites.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://gemineolegim.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:45 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "8578a331ad09bb2ef6359fec3916befc" Last-Modified: Tue, 13 Sep 2022 20:51:08 GMT x-amzn-trace-id: Root=1-6320ed3b-311ca1193326a1db522ca4d2 x-forwarded-port: 443 X-Forwarded-For: 64.202.160.106 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:45 GMT Date: Sat, 22 Feb 2025 00:00:45 GMT Content-Length: 266 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:45 UTC	266	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 73 68 61 72 65 64 2f 63 2f 5f 72 65 61 63 74 5f 63 6f 6d 6d 6f 6e 6a 73 2d 65 78 74 65 72 6e 61 6c 2d 61 31 33 35 31 65 33 34 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 6e 3d 67 6c 6f 62 61 6c 2e 52 65 61 63 74 7c 7c 67 75 61 63 2e 72 65 61 63 74 3b 65 2e 5f 3d 6e 7d 29 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 28 77 69 6e 64 6f 77 2e 67 6c 6f 62 61 6c 3d 77 69 6e 64 6f 77 29 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 5f 72 65 61 63 74 5f 63 6f 6d 6d 6f 6e 6a 73 2d 65 78 74 65 72 6e 61 6c 2d 61 31 33 35 31 Data Ascii: define("@wsb/guac-widget-shared/c/_react_commonjs-external-a1351e34.js",["exports"],(function(e){"use strict";const n=global.React\|\|guac.react;e._=n})),"undefined"!=typeof window&&(window.global=window);//# sourceMappingURL=_react_commonjs-external-a1351

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49757	95.101.182.74	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:45 UTC	422	OUT	GET /blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/Carousel-3d82957b.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:45 UTC	671	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "753cb19ee1a756e46faa0f118b1b4e01" Last-Modified: Tue, 13 Sep 2022 20:51:07 GMT x-amzn-trace-id: Root=1-6320ed3a-63510b321c43bb775186e613 x-forwarded-port: 443 X-Forwarded-For: 64.202.160.106 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:45 GMT Date: Sat, 22 Feb 2025 00:00:45 GMT Content-Length: 24399 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:45 UTC	15713	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 73 68 61 72 65 64 2f 6c 69 62 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 43 61 72 6f 75 73 65 6c 2d 33 64 38 32 39 35 37 62 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 2c 22 7e 2f 63 2f 5f 72 6f 6c 6c 75 70 50 6c 75 67 69 6e 42 61 62 65 6c 48 65 6c 70 65 72 73 22 2c 22 7e 2f 63 2f 5f 63 6f 6d 6d 6f 6e 6a 73 48 65 6c 70 65 72 73 22 2c 22 7e 2f 63 2f 69 6e 74 65 72 6f 70 52 65 71 75 69 72 65 44 65 66 61 75 6c 74 22 2c 22 7e 2f 63 2f 5f 72 65 61 63 74 5f 63 6f 6d 6d 6f 6e 6a 73 2d 65 78 74 65 72 6e 61 6c 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 69 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 73 3d 6e 2e 63 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e Data Ascii: define("@wsb/guac-widget-shared/lib/components/Carousel-3d82957b.js",["exports","~/c/_rollupPluginBabelHelpers","~/c/_commonjsHelpers","~/c/interopRequireDefault","~/c/_react_commonjs-external"],(function(e,t,n,i,r){"use strict";var s=n.c((function(e){fun
2025-02-22 00:00:45 UTC	8686	IN	Data Raw: 69 73 2e 73 74 61 74 65 2e 6c 6f 61 64 65 64 49 6d 61 67 65 73 2c 5b 65 5d 3a 7b 77 69 64 74 68 3a 74 2e 77 69 64 74 68 7c 7c 22 61 75 74 6f 22 2c 68 65 69 67 68 74 3a 74 2e 68 65 69 67 68 74 7c 7c 22 61 75 74 6f 22 7d 7d 7d 2c 28 28 29 3d 3e 7b 65 3d 3d 3d 6c 26 26 74 68 69 73 2e 68 61 6e 64 6c 65 49 6e 69 74 69 61 6c 4c 6f 61 64 28 29 7d 29 29 7d 2c 74 2e 73 72 63 3d 65 7d 29 29 3a 74 68 69 73 2e 63 61 6c 63 4c 65 66 74 4f 66 66 73 65 74 28 29 7d 67 65 74 43 6f 6e 74 72 6f 6c 73 28 29 7b 63 6f 6e 73 74 7b 61 72 72 6f 77 73 3a 65 2c 64 6f 74 73 3a 74 2c 63 6f 6e 74 72 6f 6c 73 3a 6e 7d 3d 74 68 69 73 2e 70 72 6f 70 73 3b 6c 65 74 20 69 3d 6e 2e 73 6c 69 63 65 28 30 29 3b 72 65 74 75 72 6e 20 74 26 26 69 2e 70 75 73 68 28 7b 63 6f 6d 70 6f 6e 65 6e 74 3a Data Ascii: is.state.loadedImages,[e]:{width:t.width\|\|"auto",height:t.height\|\|"auto"}}},(()=>{e===l&&this.handleInitialLoad()}))},t.src=e})):this.calcLeftOffset()}getControls(){const{arrows:e,dots:t,controls:n}=this.props;let i=n.slice(0);return t&&i.push({component:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49758	95.101.182.74	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:45 UTC	425	OUT	GET /blobby/go/static/radpack/@wsb/guac-widget-shared/lib/components/ColorSwatch-4196a0a9.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:45 UTC	670	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "cb9bfa0fbdd957fbe7f4841b70341db2" Last-Modified: Tue, 13 Sep 2022 20:51:08 GMT x-amzn-trace-id: Root=1-6320ed3b-6c5c5f0d6dd6c2ec69a41ad3 x-forwarded-port: 443 X-Forwarded-For: 64.202.160.111 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:45 GMT Date: Sat, 22 Feb 2025 00:00:45 GMT Content-Length: 1261 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:45 UTC	1261	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 73 68 61 72 65 64 2f 6c 69 62 2f 63 6f 6d 70 6f 6e 65 6e 74 73 2f 43 6f 6c 6f 72 53 77 61 74 63 68 2d 34 31 39 36 61 30 61 39 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 6f 3d 65 3d 3e 7b 6c 65 74 7b 63 6f 6c 6f 72 3a 6f 2c 69 73 41 63 74 69 76 65 3a 74 2c 69 6e 53 74 6f 63 6b 3a 72 2c 69 73 53 6d 61 6c 6c 3a 6c 7d 3d 65 3b 63 6f 6e 73 74 20 61 3d 72 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 2c 63 3d 6c 3f 22 32 34 70 78 22 3a 22 33 38 70 78 22 2c 6e 3d 6c 3f 22 32 30 70 78 22 3a 22 33 32 70 78 22 2c 69 3d 7b 62 6f 72 64 65 72 52 61 64 69 75 73 3a 22 35 30 25 22 2c 62 6f 72 64 65 72 57 Data Ascii: define("@wsb/guac-widget-shared/lib/components/ColorSwatch-4196a0a9.js",["exports"],(function(e){"use strict";const o=e=>{let{color:o,isActive:t,inStock:r,isSmall:l}=e;const a=r\|\|void 0===r,c=l?"24px":"38px",n=l?"20px":"32px",i={borderRadius:"50%",borderW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49761	95.101.182.82	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:45 UTC	659	OUT	GET /blobby/go/static/radpack/@wsb/guac-widget-shared/c/_rollupPluginBabelHelpers-8ce54c82.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://gemineolegim.godaddysites.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://gemineolegim.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:46 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "fadb3719ffa2a9e96cdc64ffea0220fa" Last-Modified: Tue, 13 Sep 2022 20:51:07 GMT x-amzn-trace-id: Root=1-6320ed3a-239be6cd0632f6776811c293 x-forwarded-port: 443 X-Forwarded-For: 64.202.160.104 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:46 GMT Date: Sat, 22 Feb 2025 00:00:46 GMT Content-Length: 586 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:46 UTC	586	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 73 68 61 72 65 64 2f 63 2f 5f 72 6f 6c 6c 75 70 50 6c 75 67 69 6e 42 61 62 65 6c 48 65 6c 70 65 72 73 2d 38 63 65 35 34 63 38 32 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 72 65 74 75 72 6e 20 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 31 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 72 29 4f 62 6a 65 63 Data Ascii: define("@wsb/guac-widget-shared/c/_rollupPluginBabelHelpers-8ce54c82.js",["exports"],(function(e){"use strict";function n(){return n=Object.assign?Object.assign.bind():function(e){for(var n=1;n<arguments.length;n++){var r=arguments[n];for(var t in r)Objec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49763	95.101.182.74	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:45 UTC	403	OUT	GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-dataAids-6a839d53.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:46 UTC	670	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "edc15ad5daac3cfa744bffdb1e0174be" Last-Modified: Mon, 13 Dec 2021 22:59:00 GMT x-amzn-trace-id: Root=1-61b7d033-2da3a4b6382be71e0d8c5ecb x-forwarded-port: 443 X-Forwarded-For: 64.202.160.105 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:46 GMT Date: Sat, 22 Feb 2025 00:00:46 GMT Content-Length: 1874 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:46 UTC	1874	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 69 64 67 65 74 2f 4c 41 59 4f 55 54 2f 63 2f 62 73 2d 64 61 74 61 41 69 64 73 2d 36 61 38 33 39 64 35 33 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 45 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 52 3d 28 67 6c 6f 62 61 6c 2e 6b 65 79 4d 69 72 72 6f 72 7c 7c 67 75 61 63 2e 6b 65 79 6d 69 72 72 6f 72 29 28 7b 42 41 43 4b 47 52 4f 55 4e 44 5f 49 4d 41 47 45 5f 52 45 4e 44 45 52 45 44 3a 6e 75 6c 6c 2c 48 41 4d 42 55 52 47 45 52 5f 4d 45 4e 55 5f 4c 49 4e 4b 3a 6e 75 6c 6c 2c 48 45 41 44 45 52 5f 57 49 44 47 45 54 3a 6e 75 6c 6c 2c 48 45 41 44 45 52 5f 53 45 43 54 49 4f 4e 3a 6e 75 6c 6c 2c 48 45 41 44 45 52 5f 56 49 44 45 4f 3a 6e 75 6c 6c 2c 48 45 41 44 45 52 5f 56 49 44 45 4f Data Ascii: define("@widget/LAYOUT/c/bs-dataAids-6a839d53.js",["exports"],(function(E){"use strict";var R=(global.keyMirror\|\|guac.keymirror)({BACKGROUND_IMAGE_RENDERED:null,HAMBURGER_MENU_LINK:null,HEADER_WIDGET:null,HEADER_SECTION:null,HEADER_VIDEO:null,HEADER_VIDEO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49762	95.101.182.82	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:45 UTC	655	OUT	GET /blobby/go/static/radpack/@wsb/guac-widget-shared/c/interopRequireDefault-c83974f7.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://gemineolegim.godaddysites.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://gemineolegim.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:46 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "c86b7f8224fa45fb1682ac94d8f75ac6" Last-Modified: Tue, 13 Sep 2022 20:51:07 GMT x-amzn-trace-id: Root=1-6320ed3a-044169b84eb7e18f3216950e x-forwarded-port: 443 X-Forwarded-For: 64.202.160.111 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:46 GMT Date: Sat, 22 Feb 2025 00:00:46 GMT Content-Length: 390 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:46 UTC	390	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 73 68 61 72 65 64 2f 63 2f 69 6e 74 65 72 6f 70 52 65 71 75 69 72 65 44 65 66 61 75 6c 74 2d 63 38 33 39 37 34 66 37 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 2c 22 7e 2f 63 2f 5f 63 6f 6d 6d 6f 6e 6a 73 48 65 6c 70 65 72 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 6f 2e 63 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 2c 65 2e 65 78 70 6f 72 74 73 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 65 2e 65 78 70 6f 72 74 73 2e 64 65 66 61 75 6c Data Ascii: define("@wsb/guac-widget-shared/c/interopRequireDefault-c83974f7.js",["exports","~/c/_commonjsHelpers"],(function(e,o){"use strict";var t=o.c((function(e){e.exports=function(e){return e&&e.__esModule?e:{default:e}},e.exports.__esModule=!0,e.exports.defaul

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49764	95.101.182.74	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:45 UTC	401	OUT	GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-index2-87bd33e6.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:46 UTC	670	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "5cc6b93d41889c0a55c6c4fcd2d89713" Last-Modified: Tue, 18 Oct 2022 15:47:53 GMT x-amzn-trace-id: Root=1-634ecaa8-5441fae57a8929061baf3c6b x-forwarded-port: 443 X-Forwarded-For: 64.202.160.104 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:46 GMT Date: Sat, 22 Feb 2025 00:00:46 GMT Content-Length: 1400 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:46 UTC	1400	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 69 64 67 65 74 2f 4c 41 59 4f 55 54 2f 63 2f 62 73 2d 69 6e 64 65 78 32 2d 38 37 62 64 33 33 65 36 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 22 6d 65 64 69 75 6d 22 3b 72 65 74 75 72 6e 7b 22 3e 20 3a 6e 74 68 2d 63 68 69 6c 64 28 6e 29 22 3a 7b 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 3a 74 7d 2c 22 20 3e 20 3a 6c 61 73 74 2d 63 68 69 6c 64 22 3a 7b 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 3a 22 30 20 21 69 6d 70 6f 72 74 61 Data Ascii: define("@widget/LAYOUT/c/bs-index2-87bd33e6.js",["exports"],(function(t){"use strict";t.a=function(){let t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:"medium";return{"> :nth-child(n)":{marginBottom:t}," > :last-child":{marginBottom:"0 !importa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49765	95.101.182.74	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:45 UTC	414	OUT	GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-searchFormLocations-c86f2a99.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:46 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "daa79ad7558674f6a12d962abf47f2f6" Last-Modified: Thu, 14 Oct 2021 23:04:37 GMT x-amzn-trace-id: Root=1-6168b784-1438c006715eea557e6c9f7f x-forwarded-port: 443 X-Forwarded-For: 64.202.160.110 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:46 GMT Date: Sat, 22 Feb 2025 00:00:46 GMT Content-Length: 304 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:46 UTC	304	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 69 64 67 65 74 2f 4c 41 59 4f 55 54 2f 63 2f 62 73 2d 73 65 61 72 63 68 46 6f 72 6d 4c 6f 63 61 74 69 6f 6e 73 2d 63 38 36 66 32 61 39 39 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 2e 44 3d 22 44 45 53 4b 54 4f 50 5f 4e 41 56 5f 43 4f 56 45 52 22 2c 6f 2e 4d 3d 22 4d 4f 42 49 4c 45 5f 4e 41 56 22 2c 6f 2e 4e 3d 22 4e 41 56 5f 44 52 41 57 45 52 22 2c 6f 2e 53 3d 22 53 49 44 45 42 41 52 22 2c 6f 2e 61 3d 22 44 45 53 4b 54 4f 50 5f 4e 41 56 22 7d 29 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 28 77 69 6e 64 6f 77 2e 67 6c 6f 62 61 6c 3d 77 69 6e 64 6f 77 29 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d Data Ascii: define("@widget/LAYOUT/c/bs-searchFormLocations-c86f2a99.js",["exports"],(function(o){"use strict";o.D="DESKTOP_NAV_COVER",o.M="MOBILE_NAV",o.N="NAV_DRAWER",o.S="SIDEBAR",o.a="DESKTOP_NAV"})),"undefined"!=typeof window&&(window.global=window);//# sourceM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49766	95.101.182.74	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:45 UTC	411	OUT	GET /blobby/go/static/radpack/@widget/LAYOUT/c/bs-navigationDrawer-27f5f1f5.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:46 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "8f12765eb30fbdcfcdc116d13f7fc272" Last-Modified: Thu, 28 Jul 2022 17:59:29 GMT x-amzn-trace-id: Root=1-62e2ce80-4ef8fc4a33c151912970138f x-forwarded-port: 443 X-Forwarded-For: 64.202.160.107 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:46 GMT Date: Sat, 22 Feb 2025 00:00:46 GMT Content-Length: 221 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:46 UTC	221	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 69 64 67 65 74 2f 4c 41 59 4f 55 54 2f 63 2f 62 73 2d 6e 61 76 69 67 61 74 69 6f 6e 44 72 61 77 65 72 2d 32 37 66 35 66 31 66 35 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 4e 3d 22 2d 32 34 39 76 77 22 7d 29 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 28 77 69 6e 64 6f 77 2e 67 6c 6f 62 61 6c 3d 77 69 6e 64 6f 77 29 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 62 73 2d 6e 61 76 69 67 61 74 69 6f 6e 44 72 61 77 65 72 2d 32 37 66 35 66 31 66 35 2e 6a 73 2e 6d 61 70 0a Data Ascii: define("@widget/LAYOUT/c/bs-navigationDrawer-27f5f1f5.js",["exports"],(function(i){"use strict";i.N="-249vw"})),"undefined"!=typeof window&&(window.global=window);//# sourceMappingURL=bs-navigationDrawer-27f5f1f5.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49767	95.101.182.74	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:46 UTC	417	OUT	GET /blobby/go/static/radpack/@wsb/guac-widget-shared/c/_commonjsHelpers-67085353.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:46 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "62a914b2c847d4d02b76164d7a2a54c6" Last-Modified: Tue, 13 Sep 2022 20:51:08 GMT x-amzn-trace-id: Root=1-6320ed3b-3de8a43b0cf7990c68d55390 x-forwarded-port: 443 X-Forwarded-For: 64.202.160.110 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:46 GMT Date: Sat, 22 Feb 2025 00:00:46 GMT Content-Length: 960 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:46 UTC	960	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 73 68 61 72 65 64 2f 63 2f 5f 63 6f 6d 6d 6f 6e 6a 73 48 65 6c 70 65 72 73 2d 36 37 30 38 35 33 35 33 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 3b 65 2e 61 3d Data Ascii: define("@wsb/guac-widget-shared/c/_commonjsHelpers-67085353.js",["exports"],(function(e){"use strict";var n="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};e.a=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49768	95.101.182.74	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:46 UTC	425	OUT	GET /blobby/go/static/radpack/@wsb/guac-widget-shared/c/_react_commonjs-external-a1351e34.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:46 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "8578a331ad09bb2ef6359fec3916befc" Last-Modified: Tue, 13 Sep 2022 20:51:08 GMT x-amzn-trace-id: Root=1-6320ed3b-311ca1193326a1db522ca4d2 x-forwarded-port: 443 X-Forwarded-For: 64.202.160.106 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:46 GMT Date: Sat, 22 Feb 2025 00:00:46 GMT Content-Length: 266 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:46 UTC	266	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 73 68 61 72 65 64 2f 63 2f 5f 72 65 61 63 74 5f 63 6f 6d 6d 6f 6e 6a 73 2d 65 78 74 65 72 6e 61 6c 2d 61 31 33 35 31 65 33 34 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 6e 3d 67 6c 6f 62 61 6c 2e 52 65 61 63 74 7c 7c 67 75 61 63 2e 72 65 61 63 74 3b 65 2e 5f 3d 6e 7d 29 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 28 77 69 6e 64 6f 77 2e 67 6c 6f 62 61 6c 3d 77 69 6e 64 6f 77 29 3b 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 5f 72 65 61 63 74 5f 63 6f 6d 6d 6f 6e 6a 73 2d 65 78 74 65 72 6e 61 6c 2d 61 31 33 35 31 Data Ascii: define("@wsb/guac-widget-shared/c/_react_commonjs-external-a1351e34.js",["exports"],(function(e){"use strict";const n=global.React\|\|guac.react;e._=n})),"undefined"!=typeof window&&(window.global=window);//# sourceMappingURL=_react_commonjs-external-a1351

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49771	13.248.243.5	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:46 UTC	562	OUT	GET /manifest.webmanifest HTTP/1.1 Host: gemineolegim.godaddysites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://gemineolegim.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:46 UTC	739	IN	HTTP/1.1 200 OK Link: <https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Content-Type: application/manifest+json Vary: Accept-Encoding Server: DPS/2.0.0+sha-999b56c X-Version: 999b56c X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: cbb5ac679b21f203d5959bc01115a150 Date: Sat, 22 Feb 2025 00:00:46 GMT Connection: close Transfer-Encoding: chunked
2025-02-22 00:00:46 UTC	535	IN	Data Raw: 32 30 62 0d 0a 7b 22 73 63 6f 70 65 22 3a 22 2f 22 2c 22 73 74 61 72 74 5f 75 72 6c 22 3a 22 2f 22 2c 22 64 69 73 70 6c 61 79 22 3a 22 73 74 61 6e 64 61 6c 6f 6e 65 22 2c 22 69 63 6f 6e 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 22 31 39 32 78 31 39 32 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 2f 70 6e 67 22 2c 22 73 72 63 22 3a 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 69 70 2f 37 62 34 34 37 66 31 34 2d 65 34 39 33 2d 34 33 63 39 2d 39 36 38 39 2d 33 35 34 32 66 39 32 30 34 32 65 36 2f 66 61 76 69 63 6f 6e 2f 30 65 36 31 64 61 33 61 2d 36 61 34 66 2d 34 39 33 37 2d 62 35 38 64 2d 64 31 34 66 37 34 65 36 39 61 66 63 2e 70 6e 67 2f 3a 2f 72 73 3d 77 3a 31 39 32 2c 68 3a 31 39 32 2c 6d 22 7d 2c 7b 22 73 69 7a 65 73 22 3a 22 Data Ascii: 20b{"scope":"/","start_url":"/","display":"standalone","icons":[{"sizes":"192x192","type":"image/png","src":"//img1.wsimg.com/isteam/ip/7b447f14-e493-43c9-9689-3542f92042e6/favicon/0e61da3a-6a4f-4937-b58d-d14f74e69afc.png/:/rs=w:192,h:192,m"},{"sizes":"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49772	13.248.243.5	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:46 UTC	510	OUT	GET /sw.js HTTP/1.1 Host: gemineolegim.godaddysites.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://gemineolegim.godaddysites.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1
2025-02-22 00:00:46 UTC	736	IN	HTTP/1.1 200 OK Link: <https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Content-Type: application/javascript Vary: Accept-Encoding Server: DPS/2.0.0+sha-999b56c X-Version: 999b56c X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: 949724a59f24659afd91da750ba12415 Date: Sat, 22 Feb 2025 00:00:46 GMT Connection: close Transfer-Encoding: chunked
2025-02-22 00:00:46 UTC	15648	IN	Data Raw: 38 30 62 32 0d 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 38 39 35 3a 28 29 3d 3e 7b 74 72 79 7b 73 65 6c 66 5b 22 77 6f 72 6b 62 6f 78 3a 63 61 63 68 65 61 62 6c 65 2d 72 65 73 70 6f 6e 73 65 3a 36 2e 34 2e 31 22 5d 26 26 5f 28 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 2c 32 35 39 3a 28 65 2c 74 2c 73 29 3d 3e 7b 73 2e 64 28 74 2c 7b 42 3a 28 29 3d 3e 61 7d 29 2c 73 28 39 31 33 29 3b 63 6c 61 73 73 20 61 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 70 72 6f 6d 69 73 65 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 65 2c 74 29 3d 3e 7b 74 68 69 73 2e 72 65 73 6f 6c 76 65 3d 65 2c 74 68 69 73 2e 72 65 6a 65 63 74 3d 74 7d 29 29 7d 7d 7d 2c 31 32 35 3a 28 65 2c 74 2c 73 29 3d 3e 7b 73 2e 64 28 74 2c 7b 56 3a Data Ascii: 80b2(()=>{"use strict";var e={895:()=>{try{self["workbox:cacheable-response:6.4.1"]&&_()}catch(e){}},259:(e,t,s)=>{s.d(t,{B:()=>a}),s(913);class a{constructor(){this.promise=new Promise(((e,t)=>{this.resolve=e,this.reject=t}))}}},125:(e,t,s)=>{s.d(t,{V:
2025-02-22 00:00:46 UTC	16384	IN	Data Raw: 2c 72 29 2c 72 7d 76 61 72 20 52 3b 52 3d 64 2c 64 3d 7b 2e 2e 2e 52 2c 67 65 74 3a 28 65 2c 74 2c 73 29 3d 3e 5f 28 65 2c 74 29 7c 7c 52 2e 67 65 74 28 65 2c 74 2c 73 29 2c 68 61 73 3a 28 65 2c 74 29 3d 3e 21 21 5f 28 65 2c 74 29 7c 7c 52 2e 68 61 73 28 65 2c 74 29 7d 2c 73 28 35 35 30 29 3b 63 6f 6e 73 74 20 76 3d 22 63 61 63 68 65 2d 65 6e 74 72 69 65 73 22 2c 62 3d 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 55 52 4c 28 65 2c 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 72 65 74 75 72 6e 20 74 2e 68 61 73 68 3d 22 22 2c 74 2e 68 72 65 66 7d 3b 63 6c 61 73 73 20 78 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 74 68 69 73 2e 5f 64 62 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 63 61 63 68 65 4e 61 6d 65 3d 65 7d 5f 75 70 67 72 61 64 65 44 62 28 65 29 7b Data Ascii: ,r),r}var R;R=d,d={...R,get:(e,t,s)=>_(e,t)\|\|R.get(e,t,s),has:(e,t)=>!!_(e,t)\|\|R.has(e,t)},s(550);const v="cache-entries",b=e=>{const t=new URL(e,location.href);return t.hash="",t.href};class x{constructor(e){this._db=null,this._cacheName=e}_upgradeDb(e){
2025-02-22 00:00:46 UTC	927	IN	Data Raw: 68 65 61 62 6c 65 52 65 73 70 6f 6e 73 65 50 6c 75 67 69 6e 28 7b 73 74 61 74 75 73 65 73 3a 5b 32 30 30 5d 7d 29 5d 7d 29 29 2c 28 30 2c 65 2e 72 65 67 69 73 74 65 72 52 6f 75 74 65 29 28 28 28 7b 72 65 71 75 65 73 74 3a 65 7d 29 3d 3e 22 73 74 79 6c 65 22 3d 3d 3d 65 2e 64 65 73 74 69 6e 61 74 69 6f 6e 7c 7c 22 73 63 72 69 70 74 22 3d 3d 3d 65 2e 64 65 73 74 69 6e 61 74 69 6f 6e 29 2c 6e 65 77 20 74 2e 53 74 61 6c 65 57 68 69 6c 65 52 65 76 61 6c 69 64 61 74 65 28 7b 63 61 63 68 65 4e 61 6d 65 3a 22 73 74 61 74 69 63 2d 72 65 73 6f 75 72 63 65 73 22 2c 70 6c 75 67 69 6e 73 3a 5b 6e 65 77 20 61 2e 43 61 63 68 65 61 62 6c 65 52 65 73 70 6f 6e 73 65 50 6c 75 67 69 6e 28 7b 73 74 61 74 75 73 65 73 3a 5b 32 30 30 5d 7d 29 5d 7d 29 29 2c 28 30 2c 65 2e 72 65 Data Ascii: heableResponsePlugin({statuses:[200]})]})),(0,e.registerRoute)((({request:e})=>"style"===e.destination\|\|"script"===e.destination),new t.StaleWhileRevalidate({cacheName:"static-resources",plugins:[new a.CacheableResponsePlugin({statuses:[200]})]})),(0,e.re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49769	95.101.182.74	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:46 UTC	426	OUT	GET /blobby/go/static/radpack/@wsb/guac-widget-shared/c/_rollupPluginBabelHelpers-8ce54c82.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:47 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "fadb3719ffa2a9e96cdc64ffea0220fa" Last-Modified: Tue, 13 Sep 2022 20:51:07 GMT x-amzn-trace-id: Root=1-6320ed3a-239be6cd0632f6776811c293 x-forwarded-port: 443 X-Forwarded-For: 64.202.160.104 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:47 GMT Date: Sat, 22 Feb 2025 00:00:47 GMT Content-Length: 586 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:47 UTC	586	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 73 68 61 72 65 64 2f 63 2f 5f 72 6f 6c 6c 75 70 50 6c 75 67 69 6e 42 61 62 65 6c 48 65 6c 70 65 72 73 2d 38 63 65 35 34 63 38 32 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 72 65 74 75 72 6e 20 6e 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 2e 62 69 6e 64 28 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 31 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 72 29 4f 62 6a 65 63 Data Ascii: define("@wsb/guac-widget-shared/c/_rollupPluginBabelHelpers-8ce54c82.js",["exports"],(function(e){"use strict";function n(){return n=Object.assign?Object.assign.bind():function(e){for(var n=1;n<arguments.length;n++){var r=arguments[n];for(var t in r)Objec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49770	95.101.182.74	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:46 UTC	422	OUT	GET /blobby/go/static/radpack/@wsb/guac-widget-shared/c/interopRequireDefault-c83974f7.js HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:47 UTC	669	IN	HTTP/1.1 200 OK Content-Type: application/javascript x-version: 0.7.3+sha-a7223ca ETag: "c86b7f8224fa45fb1682ac94d8f75ac6" Last-Modified: Tue, 13 Sep 2022 20:51:07 GMT x-amzn-trace-id: Root=1-6320ed3a-044169b84eb7e18f3216950e x-forwarded-port: 443 X-Forwarded-For: 64.202.160.111 x-forwarded-proto: https Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 86400 Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:47 GMT Date: Sat, 22 Feb 2025 00:00:47 GMT Content-Length: 390 Connection: close Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:47 UTC	390	IN	Data Raw: 64 65 66 69 6e 65 28 22 40 77 73 62 2f 67 75 61 63 2d 77 69 64 67 65 74 2d 73 68 61 72 65 64 2f 63 2f 69 6e 74 65 72 6f 70 52 65 71 75 69 72 65 44 65 66 61 75 6c 74 2d 63 38 33 39 37 34 66 37 2e 6a 73 22 2c 5b 22 65 78 70 6f 72 74 73 22 2c 22 7e 2f 63 2f 5f 63 6f 6d 6d 6f 6e 6a 73 48 65 6c 70 65 72 73 22 5d 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 6f 2e 63 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 2c 65 2e 65 78 70 6f 72 74 73 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3d 21 30 2c 65 2e 65 78 70 6f 72 74 73 2e 64 65 66 61 75 6c Data Ascii: define("@wsb/guac-widget-shared/c/interopRequireDefault-c83974f7.js",["exports","~/c/_commonjsHelpers"],(function(e,o){"use strict";var t=o.c((function(e){e.exports=function(e){return e&&e.__esModule?e:{default:e}},e.exports.__esModule=!0,e.exports.defaul

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49773	95.101.182.82	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:46 UTC	699	OUT	GET /isteam/ip/7b447f14-e493-43c9-9689-3542f92042e6/favicon/0e61da3a-6a4f-4937-b58d-d14f74e69afc.png/:/rs=w:32,h:32,m HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gemineolegim.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:47 UTC	632	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 1022 x-version: 0.4.8+sha-7c787a5 x-track-origin-referer: https://gemineolegim.godaddysites.com/ Access-Control-Request-Method: GET Access-Control-Max-Age: 864000 ETag: 3565736158 x-width: 32 x-height: 32 x-isteam-meta: {"orientation":1} Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:47 GMT Date: Sat, 22 Feb 2025 00:00:47 GMT Connection: close Edge-Cache-Tag: /isteam/ip/7b447f14-e493-43c9-9689-3542f92042e6/favicon/0e61da3a-6a4f-4937-b58d-d14f74e69afc.png/:/rs=w:32,h:32,m Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:47 UTC	1022	IN	Data Raw: 52 49 46 46 f6 03 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 18 00 00 00 1f 00 00 1f 00 00 41 4c 50 48 e8 01 00 00 01 90 ac 6d db 19 49 6f db ee 64 39 b5 1a db b6 e7 00 5a b9 26 c7 30 b6 6d db 9e 59 da 76 5b cb b1 dd 2c 57 25 ff 3b 48 fe bf 0e 21 22 26 00 aa 09 7d d7 54 34 59 d1 1f 0f 17 74 89 43 2c 3b 6c fe 64 d3 d1 7a b5 58 8b c1 c8 2a 41 6f c5 91 b5 eb 4f 37 86 68 df e9 a9 34 e6 0d 43 17 27 e7 02 88 d7 8b 1e 5b ac e9 a9 d0 b1 9e ad f3 32 e1 aa ed 0c f1 b6 26 95 74 88 c1 19 09 90 4c db 61 8b c5 52 c3 9b 78 2a 0d d2 fa 23 be ec 22 b3 85 3f 07 43 b1 38 64 2d 90 c8 79 c1 4b c9 2a 7a 3d 1f ba 65 8d fb ce e3 43 86 29 8e b8 cb 1f 0e 49 c3 b6 94 7f b7 19 f2 2a 87 19 fd af e3 a1 66 92 14 ee 14 ee b4 00 8c a9 27 7f 5f 3e 1e 12 7b 4b 0c c3 30 4a f6 8a e0 8a 12 e3 Data Ascii: RIFFWEBPVP8XALPHmIod9Z&0mYv[,W%;H!"&}T4YtC,;ldzXAoO7h4C'[2&tLaRx#"?C8d-yKz=eC)If'_>{K0J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49776	95.101.182.82	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:47 UTC	701	OUT	GET /isteam/ip/7b447f14-e493-43c9-9689-3542f92042e6/favicon/0e61da3a-6a4f-4937-b58d-d14f74e69afc.png/:/rs=w:192,h:192,m HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gemineolegim.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:47 UTC	634	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 1022 x-version: 0.4.8+sha-7c787a5 x-track-origin-referer: https://gemineolegim.godaddysites.com/ Access-Control-Request-Method: GET Access-Control-Max-Age: 864000 ETag: 3565736158 x-width: 32 x-height: 32 x-isteam-meta: {"orientation":1} Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:47 GMT Date: Sat, 22 Feb 2025 00:00:47 GMT Connection: close Edge-Cache-Tag: /isteam/ip/7b447f14-e493-43c9-9689-3542f92042e6/favicon/0e61da3a-6a4f-4937-b58d-d14f74e69afc.png/:/rs=w:192,h:192,m Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:47 UTC	1022	IN	Data Raw: 52 49 46 46 f6 03 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 18 00 00 00 1f 00 00 1f 00 00 41 4c 50 48 e8 01 00 00 01 90 ac 6d db 19 49 6f db ee 64 39 b5 1a db b6 e7 00 5a b9 26 c7 30 b6 6d db 9e 59 da 76 5b cb b1 dd 2c 57 25 ff 3b 48 fe bf 0e 21 22 26 00 aa 09 7d d7 54 34 59 d1 1f 0f 17 74 89 43 2c 3b 6c fe 64 d3 d1 7a b5 58 8b c1 c8 2a 41 6f c5 91 b5 eb 4f 37 86 68 df e9 a9 34 e6 0d 43 17 27 e7 02 88 d7 8b 1e 5b ac e9 a9 d0 b1 9e ad f3 32 e1 aa ed 0c f1 b6 26 95 74 88 c1 19 09 90 4c db 61 8b c5 52 c3 9b 78 2a 0d d2 fa 23 be ec 22 b3 85 3f 07 43 b1 38 64 2d 90 c8 79 c1 4b c9 2a 7a 3d 1f ba 65 8d fb ce e3 43 86 29 8e b8 cb 1f 0e 49 c3 b6 94 7f b7 19 f2 2a 87 19 fd af e3 a1 66 92 14 ee 14 ee b4 00 8c a9 27 7f 5f 3e 1e 12 7b 4b 0c c3 30 4a f6 8a e0 8a 12 e3 Data Ascii: RIFFWEBPVP8XALPHmIod9Z&0mYv[,W%;H!"&}T4YtC,;ldzXAoO7h4C'[2&tLaRx#"?C8d-yKz=eC)If'_>{K0J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49777	13.248.243.5	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:47 UTC	488	OUT	GET / HTTP/1.1 Host: gemineolegim.godaddysites.com Connection: keep-alive Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://gemineolegim.godaddysites.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1
2025-02-22 00:00:47 UTC	858	IN	HTTP/1.1 200 OK Link: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.28.5.js>; rel=preload; as=script; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Strict-Transport-Security: max-age=63072000; includeSubDomains; preload Content-Type: text/html;charset=utf-8 Vary: Accept-Encoding Server: DPS/2.0.0+sha-999b56c X-Version: 999b56c X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: f107b02059eca4fb3a710e5e597effd6 Date: Sat, 22 Feb 2025 00:00:47 GMT Connection: close Transfer-Encoding: chunked
2025-02-22 00:00:47 UTC	15526	IN	Data Raw: 34 36 38 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 49 4e 22 3e 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 69 70 2f 37 62 34 34 37 66 31 34 2d 65 34 39 33 2d 34 33 63 39 2d 39 36 38 39 2d 33 35 34 32 66 39 32 30 34 32 65 36 2f 66 61 76 69 63 6f 6e 2f 30 65 36 31 64 61 33 61 2d 36 61 34 66 2d 34 39 33 37 2d 62 35 38 64 2d 64 31 34 66 37 34 65 36 39 61 66 63 2e 70 6e 67 2f 3a 2f 72 73 3d 77 3a 31 36 2c 68 3a 31 36 2c 6d 22 20 73 69 7a 65 73 3d 22 31 36 78 31 36 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f Data Ascii: 468e<!DOCTYPE html><html lang="en-IN"><head><link rel="icon" href="//img1.wsimg.com/isteam/ip/7b447f14-e493-43c9-9689-3542f92042e6/favicon/0e61da3a-6a4f-4937-b58d-d14f74e69afc.png/:/rs=w:16,h:16,m" sizes="16x16"/><link rel="icon" href="//img1.wsimg.com/
2025-02-22 00:00:47 UTC	2549	IN	Data Raw: 3c 64 69 76 20 69 64 3d 22 35 34 61 37 33 35 62 66 2d 63 64 36 62 2d 34 37 64 34 2d 39 30 39 38 2d 31 32 31 39 62 34 30 33 30 36 63 37 22 20 63 6c 61 73 73 3d 22 77 69 64 67 65 74 20 77 69 64 67 65 74 2d 66 6f 6f 74 65 72 20 77 69 64 67 65 74 2d 66 6f 6f 74 65 72 2d 66 6f 6f 74 65 72 2d 31 22 3e 3c 64 69 76 20 64 61 74 61 2d 75 78 3d 22 57 69 64 67 65 74 22 20 72 6f 6c 65 3d 22 63 6f 6e 74 65 6e 74 69 6e 66 6f 22 20 69 64 3d 22 35 34 61 37 33 35 62 66 2d 63 64 36 62 2d 34 37 64 34 2d 39 30 39 38 2d 31 32 31 39 62 34 30 33 30 36 63 37 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 20 78 2d 65 6c 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 33 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 20 63 31 Data Ascii: <div id="54a735bf-cd6b-47d4-9098-1219b40306c7" class="widget widget-footer widget-footer-footer-1"><div data-ux="Widget" role="contentinfo" id="54a735bf-cd6b-47d4-9098-1219b40306c7" class="x-el x-el-div x-el c1-1 c1-2 c1-3 c1-b c1-c c1-d c1-e c1-f c1-g c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49778	95.101.182.74	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:47 UTC	450	OUT	GET /isteam/ip/7b447f14-e493-43c9-9689-3542f92042e6/favicon/0e61da3a-6a4f-4937-b58d-d14f74e69afc.png/:/rs=w:32,h:32,m HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:48 UTC	699	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1094 x-version: 0.4.8+sha-7c787a5 x-track-origin-referer: /ip/7b447f14-e493-43c9-9689-3542f92042e6/favicon/0e61da3a-6a4f-4937-b58d-d14f74e69afc.png/:/rs=w:32,h:32,m Access-Control-Request-Method: GET Access-Control-Max-Age: 864000 ETag: 3506455388 x-width: 32 x-height: 32 x-isteam-meta: {"orientation":1} Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:48 GMT Date: Sat, 22 Feb 2025 00:00:48 GMT Connection: close Edge-Cache-Tag: /isteam/ip/7b447f14-e493-43c9-9689-3542f92042e6/favicon/0e61da3a-6a4f-4937-b58d-d14f74e69afc.png/:/rs=w:32,h:32,m Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:48 UTC	1094	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 03 e8 00 00 03 e8 01 b5 7b 52 6b 00 00 03 f8 49 44 41 54 58 85 ad 57 4b 8f 54 45 14 fe 98 11 13 0c af 0d 2c 75 85 99 8d 0b d8 30 3c 34 86 8d 09 3f 40 89 13 fd 0d 2c 8c 8e 99 8d 21 10 16 40 82 0b 43 02 26 26 1a 13 97 02 71 23 2c 06 12 95 97 c9 c8 d2 b9 a7 ee ed 6e 18 7a 80 26 28 24 33 73 4e 75 b7 39 a7 aa bb a7 87 db 76 f7 ed 3e 49 a5 1f b7 ea d6 a9 f3 f8 ea fb 80 51 6c a9 31 89 cc ef 85 93 93 20 be 0d e2 1a 12 f6 48 58 40 bc 0c e2 79 38 99 45 26 53 a8 36 36 61 ac 56 f2 6f c2 c9 19 10 57 90 70 1d 8b dc 44 92 3b 3c 88 17 e1 64 0e 25 bf 6b 3c 9b a7 f2 2e 88 ef 22 e1 46 dc e4 45 8c c0 b7 70 7c 0a 8e 4f 83 f8 07 10 df 47 c2 ab 58 5c Data Ascii: PNGIHDR szzpHYs{RkIDATXWKTE,u0<4?@,!@C&&q#,nz&($3sNu9v>IQl1 HX@y8E&S66aVoWpD;<d%k<."FEp\|OGX\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49783	95.101.182.74	443	6628	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-22 00:00:48 UTC	452	OUT	GET /isteam/ip/7b447f14-e493-43c9-9689-3542f92042e6/favicon/0e61da3a-6a4f-4937-b58d-d14f74e69afc.png/:/rs=w:192,h:192,m HTTP/1.1 Host: img1.wsimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-22 00:00:49 UTC	703	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1094 x-version: 0.4.8+sha-7c787a5 x-track-origin-referer: /ip/7b447f14-e493-43c9-9689-3542f92042e6/favicon/0e61da3a-6a4f-4937-b58d-d14f74e69afc.png/:/rs=w:192,h:192,m Access-Control-Request-Method: GET Access-Control-Max-Age: 864000 ETag: 3506455388 x-width: 32 x-height: 32 x-isteam-meta: {"orientation":1} Cache-Control: public, max-age=31536000 Expires: Sun, 22 Feb 2026 00:00:49 GMT Date: Sat, 22 Feb 2025 00:00:49 GMT Connection: close Edge-Cache-Tag: /isteam/ip/7b447f14-e493-43c9-9689-3542f92042e6/favicon/0e61da3a-6a4f-4937-b58d-d14f74e69afc.png/:/rs=w:192,h:192,m Timing-Allow-Origin: * Access-Control-Allow-Origin: *
2025-02-22 00:00:49 UTC	1094	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 03 e8 00 00 03 e8 01 b5 7b 52 6b 00 00 03 f8 49 44 41 54 58 85 ad 57 4b 8f 54 45 14 fe 98 11 13 0c af 0d 2c 75 85 99 8d 0b d8 30 3c 34 86 8d 09 3f 40 89 13 fd 0d 2c 8c 8e 99 8d 21 10 16 40 82 0b 43 02 26 26 1a 13 97 02 71 23 2c 06 12 95 97 c9 c8 d2 b9 a7 ee ed 6e 18 7a 80 26 28 24 33 73 4e 75 b7 39 a7 aa bb a7 87 db 76 f7 ed 3e 49 a5 1f b7 ea d6 a9 f3 f8 ea fb 80 51 6c a9 31 89 cc ef 85 93 93 20 be 0d e2 1a 12 f6 48 58 40 bc 0c e2 79 38 99 45 26 53 a8 36 36 61 ac 56 f2 6f c2 c9 19 10 57 90 70 1d 8b dc 44 92 3b 3c 88 17 e1 64 0e 25 bf 6b 3c 9b a7 f2 2e 88 ef 22 e1 46 dc e4 45 8c c0 b7 70 7c 0a 8e 4f 83 f8 07 10 df 47 c2 ab 58 5c Data Ascii: PNGIHDR szzpHYs{RkIDATXWKTE,u0<4?@,!@C&&q#,nz&($3sNu9v>IQl1 HX@y8E&S66aVoWpD;<d%k<."FEp\|OGX\

Statistics

CPU Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Memory Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 4460, Parent PID: 5424

Function Logs

General

Target ID:	0
Start time:	19:00:28
Start date:	21/02/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

File Activities

File Opened

Show Windows behavior

Registry Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Process Activities

Process Created

Process Terminated

Show Windows behavior

Thread Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Memory Activities

Memory Usage Statistics

Show Windows behavior

Timing Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Windows UI Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Process Token Activities

Token Adjusted

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6628, Parent PID: 4460

Function Logs

General

Target ID:	2
Start time:	19:00:32
Start date:	21/02/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2108 --field-trial-handle=2028,i,4280106494234967396,11252398208076785523,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

File Activities

File Opened

Show Windows behavior

Thread Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Memory Activities

Memory Usage Statistics

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4712, Parent PID: 5424

Function Logs

General

Target ID:	3
Start time:	19:00:38
Start date:	21/02/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://gemineolegim.godaddysites.com/"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

File Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Process Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://gemineolegim.godaddysites.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Windows Analysis Report
http://gemineolegim.godaddysites.com/