Edit tour

macOS Analysis Report
http://googletagmanger.com

Overview

General Information

Sample URL:	http://googletagmanger.com
Analysis ID:	11891
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Writes 64-bit Mach-O files to disk

Reads launchservices plist files

Classification

General Information

Joe Sandbox Version:	37.0.0 Beryl
Analysis ID:	11891
Start date and time:	2023-03-01 20:16:53 +01:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 3m 36s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://googletagmanger.com
Analysis system description:	Virtual Machine, High Sierra (Office 2016 16.16, Java 11.0.2+9, Adobe Reader 2019.010.20099)
Analysis Mode:	default
Detection:	MAL
Classification:	mal56.mac@0/9@5/0

Warnings

Excluded IPs from analysis (whitelisted): 3.73.166.250, 35.181.25.252, 23.54.112.17, 172.217.16.194, 142.250.186.35, 172.217.18.99, 142.250.185.202
Excluded domains from analysis (whitelisted): e673.dsce9.akamaiedge.net, fonts.gstatic.com, partner.googleadservices.com, api-glb-aeuw3c.smoot.apple.com, api.smoot.apple.com, bag-smoot.v.aaplimg.com, configuration.apple.com, partner46.googleadservices.com, smoot-searchv2-aeuw3c.v.aaplimg.com, configuration.apple.com.akadns.net, configuration.apple.com.edgekey.net, safebrowsing.googleapis.com, www.gstatic.com
Report size getting too big, too many PREAD calls found.

Process Tree

System is macvm-highsierra

mono-sgen32 New Fork (PID: 879, Parent: 811)

open (MD5: 40ed6d8f35c9f20484b97582d296398f) Arguments:

xpcproxy New Fork (PID: 880, Parent: 1)

Safari (MD5: 8e18be737fe87f19fe7a97b4821e2005) Arguments: /Applications/Safari.app/Contents/MacOS/Safari

cleanup

Joe Sandbox Signatures

• AV Detection
• Compliance
• Networking
• System Summary
• Persistence and Installation Behavior
• Language, Device and Operating System Detection

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://googletagmanger.com

Avira URL Cloud: detection malicious, Label: malware

Multi AV Scanner detection for submitted file

Source: http://googletagmanger.com

Virustotal: Detection: 10%

Perma Link

Source: unknown	HTTPS traffic detected: 18.66.121.122:443 -> 192.168.11.11:49316 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.100:443 -> 192.168.11.11:49319 version: TLS 1.2

Source: unknown

DNS traffic detected: queries for: googletagmanger.com

Source: unknown	Network traffic detected: HTTP traffic on port 49326 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49323
Source: unknown	Network traffic detected: HTTP traffic on port 49323 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49321
Source: unknown	Network traffic detected: HTTP traffic on port 49304 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49320
Source: unknown	Network traffic detected: HTTP traffic on port 49319 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49316 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49320 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49321 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49319
Source: unknown	Network traffic detected: HTTP traffic on port 49328 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49316

Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.202.112
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.160.210
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.202.112
Source: unknown	TCP traffic detected without corresponding DNS query: 69.192.160.210
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.145.234
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.145.234
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.145.234
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.145.234
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.145.234
Source: unknown	TCP traffic detected without corresponding DNS query: 17.248.145.234
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /themes/registrar/images/logo_dynadot3.png HTTP/1.1Host: d1lxhc4jvstzrp.cloudfront.netConnection: keep-aliveAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://googletagmanger.com/Accept-Encoding: br, gzip, deflate
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=6016880802&pcsa=false&channel=000001%2Cbucket103&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fgoogletagmanger.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQxMDN8fHx8fHw2M2ZmYTRlODEzZmJlfHx8MTY3NzY5ODI4MC4wODh8MmJmMThlMzlmMzI0ZTc1NDc5OTY3ZjA3MmE3ZjBkMzVjYmZhOWNjY3x8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8ZXlKb2JDSTZJbVZ1SW4wPXx8MXxXMTA9fDM4MmJkY2ZjNDQxMzlmMTQzYjNhMDAzNDgwNjhiMTZkNDUyMTg4MGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHww&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2997149969328928&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002&format=r3%7Cs&nocache=351677701879796&num=0&output=afd_ads&domain_name=googletagmanger.com&v=3&bsl=8&pac=2&u_his=1&u_tz=60&dt=1677701879810&u_w=1024&u_h=768&biw=1009&bih=655&psw=1009&psh=848&frm=0&cl=512915031&uio=--&cont=tc&jsid=caf&jsv=512915031&rurl=http%3A%2F%2Fgoogletagmanger.com%2F&adbw=master-1%3A530 HTTP/1.1Host: www.google.comConnection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://googletagmanger.com/Accept-Encoding: br, gzip, deflate
Source: global traffic	HTTP traffic detected: GET /sorry/index?continue=https://www.google.com/afs/ads%3Fadtest%3Doff%26psid%3D6016880802%26pcsa%3Dfalse%26channel%3D000001%252Cbucket103%26client%3Ddp-teaminternet09_3ph%26r%3Dm%26hl%3Den%26rpbu%3Dhttp%253A%252F%252Fgoogletagmanger.com%252F%253Fts%253DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQxMDN8fHx8fHw2M2ZmYTRlODEzZmJlfHx8MTY3NzY5ODI4MC4wODh8MmJmMThlMzlmMzI0ZTc1NDc5OTY3ZjA3MmE3ZjBkMzVjYmZhOWNjY3x8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8ZXlKb2JDSTZJbVZ1SW4wPXx8MXxXMTA9fDM4MmJkY2ZjNDQxMzlmMTQzYjNhMDAzNDgwNjhiMTZkNDUyMTg4MGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHww%26max_radlink_len%3D40%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-2997149969328928%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%252C17300002%26format%3Dr3%257Cs%26nocache%3D351677701879796%26num%3D0%26output%3Dafd_ads%26domain_name%3Dgoogletagmanger.com%26v%3D3%26bsl%3D8%26pac%3D2%26u_his%3D1%26u_tz%3D60%26dt%3D1677701879810%26u_w%3D1024%26u_h%3D768%26biw%3D1009%26bih%3D655%26psw%3D1009%26psh%3D848%26frm%3D0%26cl%3D512915031%26uio%3D--%26cont%3Dtc%26jsid%3Dcaf%26jsv%3D512915031%26rurl%3Dhttp%253A%252F%252Fgoogletagmanger.com%252F%26adbw%3Dmaster-1%253A530&hl=en&q=EgRUETQ2GOjJ_p8GIjA7OVPaazSDpILENXCcxt0OZCvQ_9NQzNN7GiGeZLgyxzAVep3JrZT0P5XGAreaMaAyAXI HTTP/1.1Host: www.google.comConnection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://googletagmanger.com/Accept-Encoding: br, gzip, deflate
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-aliveAccept: /User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: https://www.google.com/sorry/index?continue=https://www.google.com/afs/ads%3Fadtest%3Doff%26psid%3D6016880802%26pcsa%3Dfalse%26channel%3D000001%252Cbucket103%26client%3Ddp-teaminternet09_3ph%26r%3Dm%26hl%3Den%26rpbu%3Dhttp%253A%252F%252Fgoogletagmanger.com%252F%253Fts%253DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQxMDN8fHx8fHw2M2ZmYTRlODEzZmJlfHx8MTY3NzY5ODI4MC4wODh8MmJmMThlMzlmMzI0ZTc1NDc5OTY3ZjA3MmE3ZjBkMzVjYmZhOWNjY3x8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8ZXlKb2JDSTZJbVZ1SW4wPXx8MXxXMTA9fDM4MmJkY2ZjNDQxMzlmMTQzYjNhMDAzNDgwNjhiMTZkNDUyMTg4MGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHww%26max_radlink_len%3D40%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-2997149969328928%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%252C17300002%26format%3Dr3%257Cs%26nocache%3D351677701879796%26num%3D0%26output%3Dafd_ads%26domain_name%3Dgoogletagmanger.com%26v%3D3%26bsl%3D8%26pac%3D2%26u_his%3D1%26u_tz%3D60%26dt%3D1677701879810%26u_w%3D1024%26u_h%3D768%26biw%3D1009%26bih%3D655%26psw%3D1009%26psh%3D848%26frm%3D0%26cl%3D512915031%26uio%3D--%26cont%3Dtc%26jsid%3Dcaf%26jsv%3D512915031%26rurl%3Dhttp%253A%252F%252Fgoogletagmanger.com%252F%26adbw%3Dmaster-1%253A530&hl=en&q=EgRUETQ2GOjJ_p8GIjA7OVPaazSDpILENXCcxt0OZCvQ_9NQzNN7GiGeZLgyxzAVep3JrZT0P5XGAreaMaAyAXIAccept-Encoding: br, gzip, deflate
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=Nh10qRQB5k2ucc5SCBLAQ4nA&size=normal&s=xm9cbRwB5nrvDvLcxNAXqtvN802uLDWWkS1MQ0zsGj0SY-52ktT8zLzKzybGJYCImSNZBjRA0-tg95KCXuTVuS23mF6_HLs99gHNYakMK1-6wi4_GyvfnQWpMxq9Lf3axbW62QeIrpsqF_ZuU71X2KX8LGYcaXArH1EI_1gTGWn3uun6pKchjRvQ_rtwCSFWTdkNch30h0Hmj9VwVwIY6LPiKJ2GE2w-dACtS0fogsZj2tHlyJXR4R1wPJUOuksj7e8_5pV_elAX3dRP2V4Eol76yyUI-eA&cb=9puivbc71jry HTTP/1.1Host: www.google.comConnection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: https://www.google.com/sorry/index?continue=https://www.google.com/afs/ads%3Fadtest%3Doff%26psid%3D6016880802%26pcsa%3Dfalse%26channel%3D000001%252Cbucket103%26client%3Ddp-teaminternet09_3ph%26r%3Dm%26hl%3Den%26rpbu%3Dhttp%253A%252F%252Fgoogletagmanger.com%252F%253Fts%253DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQxMDN8fHx8fHw2M2ZmYTRlODEzZmJlfHx8MTY3NzY5ODI4MC4wODh8MmJmMThlMzlmMzI0ZTc1NDc5OTY3ZjA3MmE3ZjBkMzVjYmZhOWNjY3x8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8ZXlKb2JDSTZJbVZ1SW4wPXx8MXxXMTA9fDM4MmJkY2ZjNDQxMzlmMTQzYjNhMDAzNDgwNjhiMTZkNDUyMTg4MGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHww%26max_radlink_len%3D40%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-2997149969328928%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%252C17300002%26format%3Dr3%257Cs%26nocache%3D351677701879796%26num%3D0%26output%3Dafd_ads%26domain_name%3Dgoogletagmanger.com%26v%3D3%26bsl%3D8%26pac%3D2%26u_his%3D1%26u_tz%3D60%26dt%3D1677701879810%26u_w%3D1024%26u_h%3D768%26biw%3D1009%26bih%3D655%26psw%3D1009%26psh%3D848%26frm%3D0%26cl%3D512915031%26uio%3D--%26cont%3Dtc%26jsid%3Dcaf%26jsv%3D512915031%26rurl%3Dhttp%253A%252F%252Fgoogletagmanger.com%252F%26adbw%3Dmaster-1%253A530&hl=en&q=EgRUETQ2GOjJ_p8GIjA7OVPaazSDpILENXCcxt0OZCvQ_9NQzNN7GiGeZLgyxzAVep3JrZT0P5XGAreaMaAyAXIAccept-Encoding: br, gzip, deflate
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=Nh10qRQB5k2ucc5SCBLAQ4nA HTTP/1.1Host: www.google.comConnection: keep-aliveAccept: /User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=Nh10qRQB5k2ucc5SCBLAQ4nA&size=normal&s=xm9cbRwB5nrvDvLcxNAXqtvN802uLDWWkS1MQ0zsGj0SY-52ktT8zLzKzybGJYCImSNZBjRA0-tg95KCXuTVuS23mF6_HLs99gHNYakMK1-6wi4_GyvfnQWpMxq9Lf3axbW62QeIrpsqF_ZuU71X2KX8LGYcaXArH1EI_1gTGWn3uun6pKchjRvQ_rtwCSFWTdkNch30h0Hmj9VwVwIY6LPiKJ2GE2w-dACtS0fogsZj2tHlyJXR4R1wPJUOuksj7e8_5pV_elAX3dRP2V4Eol76yyUI-eA&cb=9puivbc71jryAccept-Encoding: br, gzip, deflate
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=Nh10qRQB5k2ucc5SCBLAQ4nA&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-aliveAccept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: https://www.google.com/sorry/index?continue=https://www.google.com/afs/ads%3Fadtest%3Doff%26psid%3D6016880802%26pcsa%3Dfalse%26channel%3D000001%252Cbucket103%26client%3Ddp-teaminternet09_3ph%26r%3Dm%26hl%3Den%26rpbu%3Dhttp%253A%252F%252Fgoogletagmanger.com%252F%253Fts%253DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQxMDN8fHx8fHw2M2ZmYTRlODEzZmJlfHx8MTY3NzY5ODI4MC4wODh8MmJmMThlMzlmMzI0ZTc1NDc5OTY3ZjA3MmE3ZjBkMzVjYmZhOWNjY3x8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8ZXlKb2JDSTZJbVZ1SW4wPXx8MXxXMTA9fDM4MmJkY2ZjNDQxMzlmMTQzYjNhMDAzNDgwNjhiMTZkNDUyMTg4MGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHww%26max_radlink_len%3D40%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-2997149969328928%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%252C17300002%26format%3Dr3%257Cs%26nocache%3D351677701879796%26num%3D0%26output%3Dafd_ads%26domain_name%3Dgoogletagmanger.com%26v%3D3%26bsl%3D8%26pac%3D2%26u_his%3D1%26u_tz%3D60%26dt%3D1677701879810%26u_w%3D1024%26u_h%3D768%26biw%3D1009%26bih%3D655%26psw%3D1009%26psh%3D848%26frm%3D0%26cl%3D512915031%26uio%3D--%26cont%3Dtc%26jsid%3Dcaf%26jsv%3D512915031%26rurl%3Dhttp%253A%252F%252Fgoogletagmanger.com%252F%26adbw%3Dmaster-1%253A530&hl=en&q=EgRUETQ2GOjJ_p8GIjA7OVPaazSDpILENXCcxt0OZCvQ_9NQzNN7GiGeZLgyxzAVep3JrZT0P5XGAreaMaAyAXIAccept-Encoding: br, gzip, deflate
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: googletagmanger.comUpgrade-Insecure-Requests: 1Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usAccept-Encoding: gzip, deflateConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1 HTTP/1.1Host: www.google.comConnection: keep-aliveAccept: /User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://googletagmanger.com/Accept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /track.php?domain=googletagmanger.com&toggle=browserjs&uid=MTY3NzY5ODI4MC4wODE5OjIxYTM5YmZjZjNhOTMxMjBjODM4YmM0MzRmMGM2OGNiNzBlNDQ3Y2Q4YmM0NjQyZWI4MDA2ODBlMGJjMzUzYWU6NjNmZmE0ZTgxM2ZmYg%3D%3D HTTP/1.1Host: googletagmanger.comConnection: keep-aliveAccept: /User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://googletagmanger.com/Accept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1Host: d38psrni17bvxu.cloudfront.netConnection: keep-aliveAccept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://googletagmanger.com/Accept-Encoding: gzip, deflate
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: googletagmanger.comAccept: /Connection: keep-aliveCookie: __gsas=ID=f2d2c90cdd36c77a:T=1677698280:S=ALNI_MYElcHU_EJLnJGOiNVOn-GDo8RRkwUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Accept-Language: en-usReferer: http://googletagmanger.com/Accept-Encoding: gzip, deflate

Source: .dat.nosync0370.UfxUk8.260.dr

String found in binary or memory: http://googletagmanger.com/

Source: unknown

HTTP traffic detected: POST /ls.php HTTP/1.1Host: googletagmanger.comContent-Type: application/x-www-form-urlencoded; charset=UTF-8Origin: http://googletagmanger.comAccept-Encoding: gzip, deflateCookie: GoogleAdServingTest=GoodConnection: keep-aliveAccept: */*User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7Referer: http://googletagmanger.com/Content-Length: 2401Accept-Language: en-us

Source: unknown	HTTPS traffic detected: 18.66.121.122:443 -> 192.168.11.11:49316 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.100:443 -> 192.168.11.11:49319 version: TLS 1.2

Source: classification engine

Classification label: mal56.mac@0/9@5/0

Source: /Applications/Safari.app/Contents/MacOS/Safari (PID: 880)	File written: /private/var/tmp/NSCreateObjectFileImageFromMemory-PZfXiG	Jump to dropped file
Source: /Applications/Safari.app/Contents/MacOS/Safari (PID: 880)	File written: /private/var/tmp/NSCreateObjectFileImageFromMemory-pWXCho	Jump to dropped file
Source: /Applications/Safari.app/Contents/MacOS/Safari (PID: 880)	File written: /private/var/tmp/NSCreateObjectFileImageFromMemory-paJQle	Jump to dropped file

Source: /usr/bin/open (PID: 879)

Launchservices plist file read: /System/Library/Preferences/Logging/Subsystems/com.apple.launchservices.plist

Jump to behavior

Source: /Applications/Safari.app/Contents/MacOS/Safari (PID: 880)

AppleKeyboardLayouts info plist opened: /System/Library/Keyboard Layouts/AppleKeyboardLayouts.bundle/Contents/Info.plist

Jump to behavior

Source: /Applications/Safari.app/Contents/MacOS/Safari (PID: 880)

Random device file read: /dev/urandom

Jump to behavior

Source: /Applications/Safari.app/Contents/MacOS/Safari (PID: 880)	Binary plist file created: /Users/berri/Library/WebKit/com.apple.Safari/WebsiteData/ResourceLoadStatistics/full_browsing_session_resourceLog.plist	Jump to dropped file
Source: /Applications/Safari.app/Contents/MacOS/Safari (PID: 880)	Binary plist file created: /private/var/folders/ql/8wfqxrtx52n95h35b6cz4nyw0000gn/0/SafariFamily/Safari/.dat.nosync0370.yZTpVR	Jump to dropped file
Source: /Applications/Safari.app/Contents/MacOS/Safari (PID: 880)	Binary plist file created: /Users/berri/Library/Safari/.dat.nosync0370.UfxUk8	Jump to dropped file

Source: /usr/bin/open (PID: 879)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist			Jump to behavior
Source: /Applications/Safari.app/Contents/MacOS/Safari (PID: 880)	System or server version plist file read: /System/Library/CoreServices/SystemVersion.plist			Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	1 Plist Modification	1 Plist Modification	Direct Volume Access	OS Credential Dumping	11 System Information Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	3 Non-Application Layer Protocol	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	4 Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	1 Ingress Tool Transfer	SIM Card Swap		Carrier Billing Fraud

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Shell
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://googletagmanger.com	100%	Avira URL Cloud	malware
http://googletagmanger.com	10%	Virustotal		Browse

Name	IP	Active	Malicious	Reputation
googletagmanger.com	75.2.18.233	true	false	unknown
www.google.com	142.250.185.100	true	false	high
d1lxhc4jvstzrp.cloudfront.net	18.66.121.122	true	false	high
d38psrni17bvxu.cloudfront.net	13.224.194.209	true	false	high
www.dynadot.com	104.16.59.53	true	false	high

Contacted URLs

Name	Malicious	Reputation
http://www.google.com/adsense/domains/caf.js?abp=1	false	high
http://googletagmanger.com/	true	unknown
http://googletagmanger.com/track.php?domain=googletagmanger.com&toggle=browserjs&uid=MTY3NzY5ODI4MC4wODE5OjIxYTM5YmZjZjNhOTMxMjBjODM4YmM0MzRmMGM2OGNiNzBlNDQ3Y2Q4YmM0NjQyZWI4MDA2ODBlMGJjMzUzYWU6NjNmZmE0ZTgxM2ZmYg%3D%3D	true	unknown
http://googletagmanger.com/ls.php	true	unknown
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=Nh10qRQB5k2ucc5SCBLAQ4nA&size=normal&s=xm9cbRwB5nrvDvLcxNAXqtvN802uLDWWkS1MQ0zsGj0SY-52ktT8zLzKzybGJYCImSNZBjRA0-tg95KCXuTVuS23mF6_HLs99gHNYakMK1-6wi4_GyvfnQWpMxq9Lf3axbW62QeIrpsqF_ZuU71X2KX8LGYcaXArH1EI_1gTGWn3uun6pKchjRvQ_rtwCSFWTdkNch30h0Hmj9VwVwIY6LPiKJ2GE2w-dACtS0fogsZj2tHlyJXR4R1wPJUOuksj7e8_5pV_elAX3dRP2V4Eol76yyUI-eA&cb=9puivbc71jry	false	high
https://d1lxhc4jvstzrp.cloudfront.net/themes/registrar/images/logo_dynadot3.png	false	high
https://www.google.com/recaptcha/api2/bframe?hl=en&v=Nh10qRQB5k2ucc5SCBLAQ4nA&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	false	high
http://d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png	false	high
https://www.google.com/recaptcha/api.js	false	high
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=Nh10qRQB5k2ucc5SCBLAQ4nA	false	high
http://googletagmanger.com/favicon.ico	true	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.100	www.google.com	United States	15169	GOOGLEUS	false
13.224.194.209	d38psrni17bvxu.cloudfront.net	United States	16509	AMAZON-02US	false
75.2.18.233	googletagmanger.com	United States	16509	AMAZON-02US	false
69.192.160.210	unknown	United States	16625	AKAMAI-ASUS	false
18.66.121.122	d1lxhc4jvstzrp.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
2.16.202.112	unknown	European Union	16625	AKAMAI-ASUS	false

Process:	/Applications/Safari.app/Contents/MacOS/Safari
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	1495
Entropy (8bit):	7.27659287608869
Encrypted:	false
SSDEEP:	24:/MVp+dVGmEH3oFqBJmlHoTAqg9Om8S7uIsCEesAokrFGWtm9on0Rs7:E3NmrHpoTlg95ztpo4FGWc9o6+
MD5:	5DBE66A56040AC3501919571AF30A3DA
SHA1:	10D462C795BD11F7AEA9E9C2A29EFE64C104436F
SHA-256:	D15ABF1580C52FAA5E759C7F4B61C7901D2583BE3AA13489371F387F99115693
SHA-512:	AE351CE8BCF438B0C39721417D68AFF73936F110060A68928F2C8896BDDD2493472F43C045ACCD0241150442CE6D690B2675F17BDE54DF598EB40830A178695C
Malicious:	false
Reputation:	low
Preview:	bplist00.....^SessionVersion^SessionWindowsS1.0............................9_..SelectedTabIndex\TabBarHiddenZDateClosed_..FavoritesBarHidden]IsPopupWindow_. PrefersReadingListSidebarVisible\Miniaturized_..WindowStateVersionZWindowUUID_..WindowContentRectYTabStates_..IsPrivateWindow_..SelectedPinnedTabIndex...3A...A9Y.....S2.0_.$936229AC-F8A5-4CED-9DDD-932980572C5A_..{{0, 52}, {1024, 693}}.... !."#.$%&'().,-...0123456.\IsDisposable\SessionState_..AncestorTabIdentifers_..SessionStateIsEncryptedXTabIndex]LastVisitTimeWTabUUIDVTabURL]TabIdentifierXTabTitle_..ProcessIdentifierWIsMuted.O..M>.{_.v^/...f1/..J..s.....NpgJ#.]...+..x....../..2.....wI<.....$..\f...........b. 8f..B..15.Kp....}q..yl....v.a..j.......z'z.5OKX..S.g..+..]..K....<.;\...Z....-..@O...(.....{w=6./.y.>D.t..V.v3G.:..^;........c.....H...S,.!=q.=@..['.f-P.....-..h5.m.$..'u.g...9...k(f..?./.jz..'<.....@..C/b...../..O..j..~..{...C.G.Yi..Zs....oi).3...U....Z.1... !....*....q.jmK.}.o.Y...6..>C...f.k.5.75..

/Users/berri/Library/WebKit/com.apple.Safari/WebsiteData/ResourceLoadStatistics/full_browsing_session_resourceLog.plist

Download File

Process:	/Applications/Safari.app/Contents/MacOS/Safari
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	1655
Entropy (8bit):	5.733033655339974
Encrypted:	false
SSDEEP:	48:jw3Gs6i5FKSs6NSOKSf2i+2KSs6anlMJ6wKSs62iFtHPyIf:jw3G5iP95NSO9f2i+295alU95tfHPyIf
MD5:	899C45ADD20C527809AC4101736F1952
SHA1:	A49F546C1B0220891ECE45EB8A3ED528D9C8C6C3
SHA-256:	883B4B831C048F9C3CA13C541494206681B0B50351CE72230A7ECA091FBB3FE4
SHA-512:	8A173EE25AB5CB4C0404E8565797D3C402C782C9A81C7EFC693FDF04AF66E32DD1FB9E6477781B1CB9AEA279DD89DA7067C9DF5460C5E1D97B6A19DB392A8DA1
Malicious:	false
Reputation:	low
Preview:	bplist00.......bc^operatingDates_..browsingStatistics_..endOfGrandfatheringTimestampWversion.....Tdate#A...`..... 0DS................._..PrevalentResourceOrigin_..mostRecentUserInteractionXlastSeen]grandfathered_..isPrevalentResource_..subresourceUnderTopFrameOrigins_..hadUserInteraction_..dataRecordsRemoved_..d1lxhc4jvstzrp.cloudfront.net#........#A...............VoriginUcount_..googletagmanger.com......!".#$%&'(....+.._..PrevalentResourceOrigin_..mostRecentUserInteraction]grandfathered_..isPrevalentResource_..subresourceUnderTopFrameOrigins_..hadUserInteraction_..dataRecordsRemoved[gstatic.com...,...-._..googletagmanger.com....12.3456789...;>..._..PrevalentResourceOrigin_..mostRecentUserInteraction]grandfathered_..subframeUnderTopFrameOrigins_..subresourceUnderTopFrameOrigins_..hadUserInteraction_..isPrevalentResource_..dataRecordsRemovedZgoogle.com..<...=._..googletagmanger.com.?...@A_..googletagmanger.com.....EF.GHIJKL....O.._..PrevalentResourceOrigin_..mostRecentUserInteraction]g

/dev/null

Download File

Process:	/Applications/Safari.app/Contents/MacOS/Safari
File Type:	ASCII text
Category:	dropped
Size (bytes):	661
Entropy (8bit):	5.285298387026625
Encrypted:	false
SSDEEP:	12:k2lr5frv2Ep1o/LgS4p1o/LgPOup1o/Lg/ap1o/Lg+5ap1o/LW:f5fT2Epgh4pgZupgUapgTapgW
MD5:	63332136281DA91F7E8606FA2604030C
SHA1:	DEFAA02948CDDEA9C67EF797BE2E4C1CD8BCFD02
SHA-256:	C011BFB1E3209632DBE799BB177A8DCF5785BB485D930244AE3DA9B29884ECE2
SHA-512:	41336965F831E68E4B72F223B80FCB746BB10673BCF0707F0C3DB59B12C0D4DFBA7FD6CB242143B291336C867C1A6F720624338B46842C03F8640484D84CD0E7
Malicious:	false
Reputation:	low
Preview:	2023-03-01 21:17:54.945 Safari[880:6804] ApplePersistence=NO.2023-03-01 21:17:56.293 Safari[880:6851] NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9813).2023-03-01 21:17:56.742 Safari[880:6834] NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9813).2023-03-01 21:17:57.369 Safari[880:6850] NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9813).2023-03-01 21:17:58.897 Safari[880:6854] NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9813).2023-03-01 21:17:58.953 Safari[880:6854] NSURLSession/NSURLConnection HTTP load failed (kCFStreamErrorDomainSSL, -9813).

/private/var/folders/ql/8wfqxrtx52n95h35b6cz4nyw0000gn/0/SafariFamily/Safari/.dat.nosync0370.yZTpVR

Download File

Process:	/Applications/Safari.app/Contents/MacOS/Safari
File Type:	Apple binary property list
Category:	dropped
Size (bytes):	76
Entropy (8bit):	3.9370658315190226
Encrypted:	false
SSDEEP:	3:N1n6qMvRGNMTAnd/t1tH:N1nleRaMTAltH
MD5:	CDC65B5F112547EAFAE0F16F9C149426
SHA1:	AEAF9908A5B6FF3E2F7B738ABF5FE9E79108BA01
SHA-256:	1C6D085D871A855CE4A3902BAB4B9B92631B8EE8F0B7F6536768A2AAF427B45C
SHA-512:	E8B0E4CE6A760A718A19976D3CFE9063F04FB4BF179947AECA84E94C83F21459FB9DC0FFABEA8F633BD2D0BA94FE1E15D8C97E9604FDE8BD0DEA961EB83BDDB7
Malicious:	false
Reputation:	low
Preview:	bplist00..._..ExtensionArchivesExtracted...(...............................)

/private/var/folders/ql/8wfqxrtx52n95h35b6cz4nyw0000gn/C/mds/mdsDirectory.db_

Download File

Process:	/Applications/Safari.app/Contents/MacOS/Safari
File Type:	Mac OS X Keychain File
Category:	dropped
Size (bytes):	48908
Entropy (8bit):	3.533948990143748
Encrypted:	false
SSDEEP:	384:xSMdGleGkIG7FF3theSMVXBD0tgcNrGBOmBfbouR6/chQOnGqwc2U+v+h/:8MdGleOGmBouRwchQOnGqwc2U+v+h/
MD5:	09070E01FA6ED1973D94FAD50C35E3ED
SHA1:	7546663E66F9889EE3365A7A0BE372300C6022CA
SHA-256:	2E6EC437A97DD88F9067B2E99AC64789670D9B9C1FC50B2856E392E66163211F
SHA-512:	621399FF832F1A8352E5E9A54984B878C7D3432156D9CF9986A1A5B75662E92D9A00FA1BA6714D679286BB49E71916F72655AADA2B99880A2806FAFC6F86E7F3
Malicious:	false
Reputation:	low
Preview:	kych...........................`...X...p..S0..SX..Th..T...T...[...^h...........L...X...............T...........d...................t...............t...........<...............P...........0...........$...p...........l...........X.......@.......................!...%........CSSM_DL_DB_SCHEMA_INFO.....D.......................!...%........CSSM_DL_DB_SCHEMA_ATTRIBUTES...D.......................!...%........CSSM_DL_DB_SCHEMA_INDEXES......H.......................!...%....... CSSM_DL_DB_SCHEMA_PARSING_MODULE...D.......................!...%@.......MDS_CDSADIR_CSSM_RECORDTYPE....D.......................!...%@.......MDS_CDSADIR_KRMM_RECORDTYPE....D.......................!...%@.......MDS_CDSADIR_EMM_RECORDTYPE.....L.......................!...%@......"MDS_CDSADIR_EMM_PRIMARY_RECORDTYPE.....H.......................!...%@.......MDS_CDSADIR_COMMON_RECORDTYPE......L.......................!...%@......"MDS_CDSADIR_CSP_PRIMARY_RECORDTYPE.....P.......................!...%@......%MDS_CDSADIR_CSP_CAPABILITY_R

/private/var/folders/ql/8wfqxrtx52n95h35b6cz4nyw0000gn/C/mds/mdsObject.db_

Download File

Process:	/Applications/Safari.app/Contents/MacOS/Safari
File Type:	Mac OS X Keychain File
Category:	dropped
Size (bytes):	4404
Entropy (8bit):	3.5113078915037033
Encrypted:	false
SSDEEP:	48:m6Xsh+CLjL3Pe3T5FFKfEuyu+iYxGv4sS:3X6LjLfe3wEuyu9YxGQX
MD5:	D487F899A14AE98519B46D51BC810F1B
SHA1:	64877ECFBE47ED66EED545B2449BBE8B22B775D0
SHA-256:	4835899C464487946E281D535381D4CAB8BC90EC08CD00A6A0ECB97854E9321D
SHA-512:	EB4FABD61B4FD2B9EF3C9E93793CA5F11353A1F81EA4DA22E0F79ED45D89180B77469B9E5DCD5350AE650B31DE9018743DA7716EFA7B5CDDFC3FA7A13C476F40
Malicious:	false
Reputation:	low
Preview:	kych.......................................d...................0...............0...p...........@...@.......................!...%........CSSM_DL_DB_SCHEMA_INFO.....D.......................!...%........CSSM_DL_DB_SCHEMA_ATTRIBUTES...D.......................!...%........CSSM_DL_DB_SCHEMA_INDEXES......H.......................!...%....... CSSM_DL_DB_SCHEMA_PARSING_MODULE...@.......................!...%@.......MDS_OBJECT_RECORDTYPE..............h........... ...`........... ...@.......................-...1...5...9...=@..............................X...............P................... ...p...........l...........d...........P...........H...........,...............h...........P.......................1...5...9...=.......M................RelationID.........P.......................1...5...9...=.......M................RelationName.......P.......................1...5...9...=.......M................RelationID.........P.......................1...5...9...=.......M................AttributeID........X....

/private/var/tmp/NSCreateObjectFileImageFromMemory-PZfXiG

Download File

Process:	/Applications/Safari.app/Contents/MacOS/Safari
File Type:	Mach-O 64-bit x86_64 bundle, flags:<NOUNDEFS\|DYLDLINK\|TWOLEVEL>
Category:	dropped
Size (bytes):	4780
Entropy (8bit):	5.78784933687558
Encrypted:	false
SSDEEP:	96:xav2J2yfQoIeVyCxVaBHlZF/jllllllllKflPz5w65:keJ2OQYTTarllllllllKflT
MD5:	6903FFA70C6EF8F2493E3E49101C694D
SHA1:	B70A5F8C3F48BB2251B114500DFFF1CCCE72D966
SHA-256:	633CEE31BFBF56590F6B62891CD0CB55264FD0F01E183036D8E3556B9EFF72D5
SHA-512:	2A8A297AEE0F285EAA494BA5B731D023BF6438E207B83495FF490EB67BE3D9B4E887F91680761E759973D9FEC782B9E0CEC7E1957C4E794739A0DF90E2346D87
Malicious:	false
Reputation:	low
Preview:	.................... ...............(...__TEXT..........................................................__text..........__TEXT..................[.......................................__const.........__TEXT..........`.......@.......`...............................__literal4......__TEXT..........................................................__compact_unwind__LD....................@.......................................__eh_frame......__TEXT..................h..........................h............__opencl........__TEXT..........P...............P...................................H...__LINKEDIT................................................................P/^(G....@.`.."...0.......................................h...........h...................P...................................................................................................................................................................................................................................................

/private/var/tmp/NSCreateObjectFileImageFromMemory-pWXCho

Download File

Process:	/Applications/Safari.app/Contents/MacOS/Safari
File Type:	Mach-O 64-bit x86_64 bundle, flags:<NOUNDEFS\|DYLDLINK\|TWOLEVEL>
Category:	dropped
Size (bytes):	17444
Entropy (8bit):	4.344516009852464
Encrypted:	false
SSDEEP:	384:wkjJcXgiRVP7J3AMqLllllllKfllJlROW:wMa13AMqAOW
MD5:	F0DFD4AA54E21E19FE01D7FCE5C6F204
SHA1:	5E9E99F771C34D6AB3F1B5662357BBC24415CA7D
SHA-256:	B18BF256FE6081226055D76705FB653CC362619DE30B1977747D09CFE42C4003
SHA-512:	CD00F44C39A37E3B9EEB96EEC7F97BB5650A42F867C5721B7D01C926327F3CD7718235E6E7939D90C75EC56B9DC9417BA89187315BB50B9B6995139E10D88CB8
Malicious:	false
Reputation:	low
Preview:	........................................__TEXT...................0...............0......................__text..........__TEXT..........P...............P...............................__const.........__TEXT...........(......P........(..............................__literal4......__TEXT..........0+..............0+..............................__compact_unwind__LD............H+......@.......H+..............................__eh_frame......__TEXT...........+......h........+.................h............__symbol_stub1..__TEXT...........+...............+..............................__stub_helper...__TEXT...........+...............+..............................__opencl........__TEXT...........,...............,......................................__DATA...........0...............0..............................__nl_symbol_ptr.__DATA...........0...............0..............................__la_symbol_ptr.__DATA...........0...............0..................................H...__LINKEDIT......

/private/var/tmp/NSCreateObjectFileImageFromMemory-paJQle

Download File

Process:	/Applications/Safari.app/Contents/MacOS/Safari
File Type:	Mach-O 64-bit x86_64 bundle, flags:<NOUNDEFS\|DYLDLINK\|TWOLEVEL>
Category:	dropped
Size (bytes):	4752
Entropy (8bit):	5.761647040683616
Encrypted:	false
SSDEEP:	96:xKvjeoJ2eQIMA1EVQvOsD1cbY2vF/jllllllllKflNJz5w6w:0dJ2eQpMtxmvrllllllllKfly
MD5:	1D6F449D22D11E760495CE85C933ADF8
SHA1:	D77F5B05549E51310D0C96347482178EBD23C476
SHA-256:	BEF505FE1329E19B4AF2FFFD868C753A0824B96FB4531BD106C810D96EFB1D94
SHA-512:	4A9F4BD053BC5069625D60DDD3E1225E01FCE6B31824C35A12D7CAFAC2AD9BF79EE7785A6860E5549836970D8A4C7968355EC715C652EE1C771EDD9D9D1616A6
Malicious:	false
Reputation:	low
Preview:	.................... ...............(...__TEXT..........................................................__text..........__TEXT..................k.......................................__const.........__TEXT..................@.......................................__literal4......__TEXT..........................................................__compact_unwind__LD....................@.......................................__eh_frame......__TEXT..................h..........................h............__opencl........__TEXT..........p...............p...................................H...__LINKEDIT...............................................................{..T@_.d...a.C"...0.......................................X...........X...................P...................................................................................................................................................................................................................................................

Total Packets: 208
• 443 (HTTPS)
• 80 (HTTP)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 1, 2023 20:17:56.058604956 CET	49295	80	192.168.11.11	2.16.202.112
Mar 1, 2023 20:17:56.058959961 CET	49296	80	192.168.11.11	69.192.160.210
Mar 1, 2023 20:17:56.070017099 CET	80	49295	2.16.202.112	192.168.11.11
Mar 1, 2023 20:17:56.070676088 CET	49295	80	192.168.11.11	2.16.202.112
Mar 1, 2023 20:17:56.082274914 CET	80	49296	69.192.160.210	192.168.11.11
Mar 1, 2023 20:17:56.082986116 CET	49296	80	192.168.11.11	69.192.160.210
Mar 1, 2023 20:17:59.938888073 CET	49314	80	192.168.11.11	75.2.18.233
Mar 1, 2023 20:17:59.949765921 CET	80	49314	75.2.18.233	192.168.11.11
Mar 1, 2023 20:17:59.950504065 CET	49314	80	192.168.11.11	75.2.18.233
Mar 1, 2023 20:17:59.953483105 CET	49314	80	192.168.11.11	75.2.18.233
Mar 1, 2023 20:17:59.964587927 CET	80	49314	75.2.18.233	192.168.11.11
Mar 1, 2023 20:18:00.126115084 CET	80	49314	75.2.18.233	192.168.11.11
Mar 1, 2023 20:18:00.126203060 CET	80	49314	75.2.18.233	192.168.11.11
Mar 1, 2023 20:18:00.126267910 CET	80	49314	75.2.18.233	192.168.11.11
Mar 1, 2023 20:18:00.126317978 CET	80	49314	75.2.18.233	192.168.11.11
Mar 1, 2023 20:18:00.126379013 CET	80	49314	75.2.18.233	192.168.11.11
Mar 1, 2023 20:18:00.126441956 CET	80	49314	75.2.18.233	192.168.11.11
Mar 1, 2023 20:18:00.126503944 CET	80	49314	75.2.18.233	192.168.11.11
Mar 1, 2023 20:18:00.126559973 CET	80	49314	75.2.18.233	192.168.11.11
Mar 1, 2023 20:18:00.126988888 CET	49314	80	192.168.11.11	75.2.18.233
Mar 1, 2023 20:18:00.126988888 CET	49314	80	192.168.11.11	75.2.18.233
Mar 1, 2023 20:18:00.126990080 CET	49314	80	192.168.11.11	75.2.18.233
Mar 1, 2023 20:18:00.127129078 CET	49314	80	192.168.11.11	75.2.18.233
Mar 1, 2023 20:18:00.127562046 CET	49314	80	192.168.11.11	75.2.18.233
Mar 1, 2023 20:18:00.130723953 CET	49314	80	192.168.11.11	75.2.18.233
Mar 1, 2023 20:18:00.207607031 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.217238903 CET	49316	443	192.168.11.11	18.66.121.122
Mar 1, 2023 20:18:00.217387915 CET	443	49316	18.66.121.122	192.168.11.11
Mar 1, 2023 20:18:00.218034983 CET	49316	443	192.168.11.11	18.66.121.122
Mar 1, 2023 20:18:00.218539000 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.218590975 CET	49316	443	192.168.11.11	18.66.121.122
Mar 1, 2023 20:18:00.218683958 CET	443	49316	18.66.121.122	192.168.11.11
Mar 1, 2023 20:18:00.219129086 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.219875097 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.230658054 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.240560055 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.240636110 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.240679026 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.240740061 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.240804911 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.240848064 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.240886927 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.240931988 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.240971088 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.241009951 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.241334915 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.241334915 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.241751909 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.242575884 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.242662907 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.242662907 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.243308067 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.244029045 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.252044916 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.252125025 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.252435923 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.252510071 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.252938032 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.253118992 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.253249884 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.253315926 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.253346920 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.253900051 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.254082918 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.254122019 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.254180908 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.254678011 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.254839897 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.254909039 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.254910946 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.255470037 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.255630970 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.255706072 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.255712986 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.256233931 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.256457090 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.256527901 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.256639004 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.256933928 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.257016897 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.257183075 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.257289886 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.257853985 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.258024931 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.258116961 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.258691072 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.258804083 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.258896112 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.259324074 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.259421110 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.259645939 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.263633013 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.263725996 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.263991117 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.264106989 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.264365911 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.264594078 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.264821053 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.265166044 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.265256882 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.265532970 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.265625000 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.265836000 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.266088963 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.266191006 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.266275883 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.266350031 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.266771078 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.266877890 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.266971111 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.267051935 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.267466068 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.267559052 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.267627954 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.267704964 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.268213987 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.281212091 CET	443	49316	18.66.121.122	192.168.11.11
Mar 1, 2023 20:18:00.282018900 CET	49316	443	192.168.11.11	18.66.121.122
Mar 1, 2023 20:18:00.282174110 CET	49316	443	192.168.11.11	18.66.121.122
Mar 1, 2023 20:18:00.307527065 CET	49316	443	192.168.11.11	18.66.121.122
Mar 1, 2023 20:18:00.307580948 CET	443	49316	18.66.121.122	192.168.11.11
Mar 1, 2023 20:18:00.308279037 CET	443	49316	18.66.121.122	192.168.11.11
Mar 1, 2023 20:18:00.308778048 CET	49316	443	192.168.11.11	18.66.121.122
Mar 1, 2023 20:18:00.309793949 CET	49316	443	192.168.11.11	18.66.121.122
Mar 1, 2023 20:18:00.323990107 CET	443	49316	18.66.121.122	192.168.11.11
Mar 1, 2023 20:18:00.324095011 CET	443	49316	18.66.121.122	192.168.11.11
Mar 1, 2023 20:18:00.324220896 CET	443	49316	18.66.121.122	192.168.11.11
Mar 1, 2023 20:18:00.324456930 CET	443	49316	18.66.121.122	192.168.11.11
Mar 1, 2023 20:18:00.325607061 CET	49316	443	192.168.11.11	18.66.121.122
Mar 1, 2023 20:18:00.325689077 CET	49316	443	192.168.11.11	18.66.121.122
Mar 1, 2023 20:18:00.325689077 CET	49316	443	192.168.11.11	18.66.121.122
Mar 1, 2023 20:18:00.325735092 CET	49316	443	192.168.11.11	18.66.121.122
Mar 1, 2023 20:18:00.325783968 CET	49316	443	192.168.11.11	18.66.121.122
Mar 1, 2023 20:18:00.325833082 CET	49316	443	192.168.11.11	18.66.121.122
Mar 1, 2023 20:18:00.325931072 CET	49316	443	192.168.11.11	18.66.121.122
Mar 1, 2023 20:18:00.326001883 CET	49316	443	192.168.11.11	18.66.121.122
Mar 1, 2023 20:18:00.327425003 CET	49316	443	192.168.11.11	18.66.121.122
Mar 1, 2023 20:18:00.327455997 CET	443	49316	18.66.121.122	192.168.11.11
Mar 1, 2023 20:18:00.333723068 CET	49314	80	192.168.11.11	75.2.18.233
Mar 1, 2023 20:18:00.344827890 CET	80	49314	75.2.18.233	192.168.11.11
Mar 1, 2023 20:18:00.463998079 CET	80	49314	75.2.18.233	192.168.11.11
Mar 1, 2023 20:18:00.464099884 CET	80	49314	75.2.18.233	192.168.11.11
Mar 1, 2023 20:18:00.464672089 CET	49314	80	192.168.11.11	75.2.18.233
Mar 1, 2023 20:18:00.464780092 CET	49314	80	192.168.11.11	75.2.18.233
Mar 1, 2023 20:18:00.478662014 CET	49314	80	192.168.11.11	75.2.18.233
Mar 1, 2023 20:18:00.481172085 CET	49314	80	192.168.11.11	75.2.18.233
Mar 1, 2023 20:18:00.489980936 CET	80	49314	75.2.18.233	192.168.11.11
Mar 1, 2023 20:18:00.492584944 CET	80	49314	75.2.18.233	192.168.11.11
Mar 1, 2023 20:18:00.492687941 CET	80	49314	75.2.18.233	192.168.11.11
Mar 1, 2023 20:18:00.546863079 CET	49318	80	192.168.11.11	13.224.194.209
Mar 1, 2023 20:18:00.558136940 CET	80	49318	13.224.194.209	192.168.11.11
Mar 1, 2023 20:18:00.558885098 CET	49318	80	192.168.11.11	13.224.194.209
Mar 1, 2023 20:18:00.563656092 CET	49318	80	192.168.11.11	13.224.194.209
Mar 1, 2023 20:18:00.574877977 CET	80	49318	13.224.194.209	192.168.11.11
Mar 1, 2023 20:18:00.575170994 CET	80	49318	13.224.194.209	192.168.11.11
Mar 1, 2023 20:18:00.575360060 CET	80	49318	13.224.194.209	192.168.11.11
Mar 1, 2023 20:18:00.575504065 CET	80	49318	13.224.194.209	192.168.11.11
Mar 1, 2023 20:18:00.575593948 CET	80	49318	13.224.194.209	192.168.11.11
Mar 1, 2023 20:18:00.575680017 CET	80	49318	13.224.194.209	192.168.11.11
Mar 1, 2023 20:18:00.575764894 CET	80	49318	13.224.194.209	192.168.11.11
Mar 1, 2023 20:18:00.575764894 CET	49318	80	192.168.11.11	13.224.194.209
Mar 1, 2023 20:18:00.575850010 CET	80	49318	13.224.194.209	192.168.11.11
Mar 1, 2023 20:18:00.575932980 CET	80	49318	13.224.194.209	192.168.11.11
Mar 1, 2023 20:18:00.576016903 CET	80	49318	13.224.194.209	192.168.11.11
Mar 1, 2023 20:18:00.576025963 CET	49318	80	192.168.11.11	13.224.194.209
Mar 1, 2023 20:18:00.576100111 CET	80	49318	13.224.194.209	192.168.11.11
Mar 1, 2023 20:18:00.576188087 CET	49318	80	192.168.11.11	13.224.194.209
Mar 1, 2023 20:18:00.576260090 CET	49318	80	192.168.11.11	13.224.194.209
Mar 1, 2023 20:18:00.576457977 CET	49318	80	192.168.11.11	13.224.194.209
Mar 1, 2023 20:18:00.576524973 CET	49318	80	192.168.11.11	13.224.194.209
Mar 1, 2023 20:18:00.576668024 CET	49318	80	192.168.11.11	13.224.194.209
Mar 1, 2023 20:18:00.588182926 CET	49318	80	192.168.11.11	13.224.194.209
Mar 1, 2023 20:18:00.590856075 CET	49318	80	192.168.11.11	13.224.194.209
Mar 1, 2023 20:18:00.676417112 CET	49319	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.676539898 CET	443	49319	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.677303076 CET	49319	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.677921057 CET	49319	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.678024054 CET	443	49319	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.744755030 CET	443	49319	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.745606899 CET	49319	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.745606899 CET	49319	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.755480051 CET	49319	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.755548954 CET	443	49319	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.756270885 CET	443	49319	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.756807089 CET	49319	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.757390976 CET	49319	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:00.800517082 CET	443	49319	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:00.870935917 CET	80	49314	75.2.18.233	192.168.11.11
Mar 1, 2023 20:18:00.871051073 CET	80	49314	75.2.18.233	192.168.11.11
Mar 1, 2023 20:18:00.871726990 CET	49314	80	192.168.11.11	75.2.18.233
Mar 1, 2023 20:18:00.871726990 CET	49314	80	192.168.11.11	75.2.18.233
Mar 1, 2023 20:18:01.179183006 CET	443	49319	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.179655075 CET	443	49319	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.179879904 CET	49319	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.180003881 CET	443	49319	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.180063963 CET	443	49319	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.180238008 CET	49319	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.180923939 CET	49319	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.181220055 CET	49319	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.185611010 CET	49319	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.185722113 CET	443	49319	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.200520992 CET	49320	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.200669050 CET	443	49320	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.201576948 CET	49320	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.202131987 CET	49320	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.202220917 CET	443	49320	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.252026081 CET	443	49320	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.253231049 CET	49320	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.253762960 CET	49320	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.253842115 CET	443	49320	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.254787922 CET	49320	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.254868984 CET	443	49320	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.282740116 CET	443	49320	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.283008099 CET	443	49320	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.283268929 CET	443	49320	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.283477068 CET	443	49320	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.283495903 CET	49320	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.283565044 CET	443	49320	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.283811092 CET	443	49320	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.284025908 CET	443	49320	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.284357071 CET	49320	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.284357071 CET	49320	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.284548044 CET	49320	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.284940958 CET	49320	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.285396099 CET	49320	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.285430908 CET	443	49320	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.285845995 CET	49320	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.285904884 CET	443	49320	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.314594984 CET	49321	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.314716101 CET	443	49321	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.315454006 CET	49321	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.316401005 CET	49321	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.316479921 CET	443	49321	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.361665964 CET	443	49321	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.362915039 CET	49321	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.371061087 CET	49321	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.371140003 CET	443	49321	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.372560978 CET	49321	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.372634888 CET	443	49321	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.395221949 CET	443	49321	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.396003962 CET	443	49321	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.396024942 CET	49321	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.396575928 CET	49321	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.397526979 CET	49321	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.397622108 CET	443	49321	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.397932053 CET	49321	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.398025990 CET	443	49321	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.672276974 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.672419071 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.673120022 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.673434019 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.673518896 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.720551968 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.721436024 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.722038984 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.722116947 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.722924948 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.723036051 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.765029907 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.765320063 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.765548944 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.765779018 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.765853882 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.766266108 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.766285896 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.766372919 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.766537905 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.766590118 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.766836882 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.767056942 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.767268896 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.767293930 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.767323017 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.767580032 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.767781973 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.767813921 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.767813921 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.767905951 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.767932892 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.768388033 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.768436909 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.769315004 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.770088911 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.776117086 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.776633978 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.776859999 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.776967049 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.777035952 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.777371883 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.777592897 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.777816057 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.777987003 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.778076887 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.778104067 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.778126001 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.778281927 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.778565884 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.778630972 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.778939962 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.778996944 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.779267073 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.779480934 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.779582024 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.779623032 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.780132055 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.780200958 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.780283928 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.780352116 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.780430079 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.780930042 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.780999899 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.781035900 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.781403065 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.781675100 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.781745911 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.782293081 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.782330990 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.782370090 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.782521963 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.782782078 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.782926083 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.782968044 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.783276081 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.783344984 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.783809900 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.784033060 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.784286976 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.784356117 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.784547091 CET	49323	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.784605980 CET	443	49323	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.977768898 CET	49326	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.977874041 CET	443	49326	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:01.978497028 CET	49326	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.979441881 CET	49326	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:01.979490042 CET	443	49326	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:02.030841112 CET	443	49326	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:02.031550884 CET	49326	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:02.100100040 CET	49326	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:02.100191116 CET	443	49326	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:02.101413012 CET	49326	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:02.101476908 CET	443	49326	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:02.123560905 CET	443	49326	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:02.124322891 CET	49326	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:02.124372959 CET	443	49326	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:02.124969006 CET	49326	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:02.177944899 CET	49326	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:02.178082943 CET	443	49326	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:02.178117990 CET	49326	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:02.178155899 CET	443	49326	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:02.187442064 CET	49328	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:02.187556028 CET	443	49328	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:02.188416958 CET	49328	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:02.190156937 CET	49328	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:02.190258026 CET	443	49328	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:02.264635086 CET	443	49328	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:02.265552044 CET	49328	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:02.265912056 CET	49328	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:02.265925884 CET	443	49328	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:02.276292086 CET	49328	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:02.276319981 CET	443	49328	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:02.304023027 CET	443	49328	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:02.304341078 CET	443	49328	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:02.304553986 CET	443	49328	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:02.304702997 CET	49328	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:02.304768085 CET	443	49328	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:02.304948092 CET	443	49328	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:02.305068970 CET	443	49328	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:02.305227995 CET	49328	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:02.305310011 CET	49328	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:02.305354118 CET	443	49328	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:02.305532932 CET	443	49328	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:02.305836916 CET	49328	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:02.305836916 CET	49328	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:02.306668997 CET	49328	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:02.306844950 CET	49328	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:02.319140911 CET	49328	443	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:02.319200039 CET	443	49328	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:02.660298109 CET	49329	80	192.168.11.11	75.2.18.233
Mar 1, 2023 20:18:02.671531916 CET	80	49329	75.2.18.233	192.168.11.11
Mar 1, 2023 20:18:02.672341108 CET	49329	80	192.168.11.11	75.2.18.233
Mar 1, 2023 20:18:02.673738956 CET	49329	80	192.168.11.11	75.2.18.233
Mar 1, 2023 20:18:02.685089111 CET	80	49329	75.2.18.233	192.168.11.11
Mar 1, 2023 20:18:02.831553936 CET	80	49329	75.2.18.233	192.168.11.11
Mar 1, 2023 20:18:02.832315922 CET	49329	80	192.168.11.11	75.2.18.233
Mar 1, 2023 20:18:20.600426912 CET	443	49304	17.248.145.234	192.168.11.11
Mar 1, 2023 20:18:20.600498915 CET	443	49304	17.248.145.234	192.168.11.11
Mar 1, 2023 20:18:20.600545883 CET	443	49304	17.248.145.234	192.168.11.11
Mar 1, 2023 20:18:20.601759911 CET	49304	443	192.168.11.11	17.248.145.234
Mar 1, 2023 20:18:20.602008104 CET	49304	443	192.168.11.11	17.248.145.234
Mar 1, 2023 20:18:20.602260113 CET	49304	443	192.168.11.11	17.248.145.234
Mar 1, 2023 20:18:20.605667114 CET	49304	443	192.168.11.11	17.248.145.234
Mar 1, 2023 20:18:20.605987072 CET	49304	443	192.168.11.11	17.248.145.234
Mar 1, 2023 20:18:20.606626987 CET	49304	443	192.168.11.11	17.248.145.234
Mar 1, 2023 20:18:20.614406109 CET	443	49304	17.248.145.234	192.168.11.11
Mar 1, 2023 20:18:20.614466906 CET	443	49304	17.248.145.234	192.168.11.11
Mar 1, 2023 20:18:20.615158081 CET	443	49304	17.248.145.234	192.168.11.11
Mar 1, 2023 20:18:30.731086969 CET	49318	80	192.168.11.11	13.224.194.209
Mar 1, 2023 20:18:30.731431961 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:18:30.742408037 CET	80	49315	142.250.185.100	192.168.11.11
Mar 1, 2023 20:18:30.742479086 CET	80	49318	13.224.194.209	192.168.11.11
Mar 1, 2023 20:18:30.743733883 CET	49318	80	192.168.11.11	13.224.194.209
Mar 1, 2023 20:18:30.743851900 CET	49315	80	192.168.11.11	142.250.185.100
Mar 1, 2023 20:19:00.864576101 CET	80	49314	75.2.18.233	192.168.11.11
Mar 1, 2023 20:19:00.865888119 CET	49314	80	192.168.11.11	75.2.18.233
Mar 1, 2023 20:19:00.866133928 CET	49314	80	192.168.11.11	75.2.18.233
Mar 1, 2023 20:19:00.877319098 CET	80	49314	75.2.18.233	192.168.11.11
Mar 1, 2023 20:19:02.833353043 CET	80	49329	75.2.18.233	192.168.11.11
Mar 1, 2023 20:19:02.834667921 CET	49329	80	192.168.11.11	75.2.18.233
Mar 1, 2023 20:19:02.834870100 CET	49329	80	192.168.11.11	75.2.18.233
Mar 1, 2023 20:19:02.846129894 CET	80	49329	75.2.18.233	192.168.11.11

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 1, 2023 20:17:59.751593113 CET	57771	53	192.168.11.11	1.1.1.1
Mar 1, 2023 20:17:59.931255102 CET	53	57771	1.1.1.1	192.168.11.11
Mar 1, 2023 20:18:00.196275949 CET	51936	53	192.168.11.11	1.1.1.1
Mar 1, 2023 20:18:00.197381020 CET	55956	53	192.168.11.11	1.1.1.1
Mar 1, 2023 20:18:00.206048965 CET	53	51936	1.1.1.1	192.168.11.11
Mar 1, 2023 20:18:00.214435101 CET	53	55956	1.1.1.1	192.168.11.11
Mar 1, 2023 20:18:00.334650040 CET	51957	53	192.168.11.11	1.1.1.1
Mar 1, 2023 20:18:00.345411062 CET	53	51957	1.1.1.1	192.168.11.11
Mar 1, 2023 20:18:00.529122114 CET	62941	53	192.168.11.11	1.1.1.1
Mar 1, 2023 20:18:00.540051937 CET	53	62941	1.1.1.1	192.168.11.11
Mar 1, 2023 20:18:01.601569891 CET	137	137	192.168.11.11	192.168.11.255
Mar 1, 2023 20:18:01.601978064 CET	137	137	192.168.11.11	192.168.11.255
Mar 1, 2023 20:18:02.553010941 CET	137	137	192.168.11.11	192.168.11.255
Mar 1, 2023 20:18:02.553436041 CET	137	137	192.168.11.11	192.168.11.255
Mar 1, 2023 20:18:03.133162975 CET	137	137	192.168.11.11	192.168.11.255

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 1, 2023 20:17:59.751593113 CET	192.168.11.11	1.1.1.1	0xf05f	Standard query (0)	googletagmanger.com	A (IP address)	IN (0x0001)	false
Mar 1, 2023 20:18:00.196275949 CET	192.168.11.11	1.1.1.1	0x1220	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 1, 2023 20:18:00.197381020 CET	192.168.11.11	1.1.1.1	0x22e5	Standard query (0)	d1lxhc4jvstzrp.cloudfront.net	A (IP address)	IN (0x0001)	false
Mar 1, 2023 20:18:00.334650040 CET	192.168.11.11	1.1.1.1	0xdd40	Standard query (0)	www.dynadot.com	A (IP address)	IN (0x0001)	false
Mar 1, 2023 20:18:00.529122114 CET	192.168.11.11	1.1.1.1	0xd6b7	Standard query (0)	d38psrni17bvxu.cloudfront.net	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Mar 1, 2023 20:17:59.931255102 CET	1.1.1.1	192.168.11.11	0xf05f	No error (0)	googletagmanger.com	75.2.18.233	A (IP address)	IN (0x0001)	false
Mar 1, 2023 20:18:00.206048965 CET	1.1.1.1	192.168.11.11	0x1220	No error (0)	www.google.com	142.250.185.100	A (IP address)	IN (0x0001)	false
Mar 1, 2023 20:18:00.214435101 CET	1.1.1.1	192.168.11.11	0x22e5	No error (0)	d1lxhc4jvstzrp.cloudfront.net	18.66.121.122	A (IP address)	IN (0x0001)	false
Mar 1, 2023 20:18:00.214435101 CET	1.1.1.1	192.168.11.11	0x22e5	No error (0)	d1lxhc4jvstzrp.cloudfront.net	18.66.121.80	A (IP address)	IN (0x0001)	false
Mar 1, 2023 20:18:00.214435101 CET	1.1.1.1	192.168.11.11	0x22e5	No error (0)	d1lxhc4jvstzrp.cloudfront.net	18.66.121.123	A (IP address)	IN (0x0001)	false
Mar 1, 2023 20:18:00.214435101 CET	1.1.1.1	192.168.11.11	0x22e5	No error (0)	d1lxhc4jvstzrp.cloudfront.net	18.66.121.59	A (IP address)	IN (0x0001)	false
Mar 1, 2023 20:18:00.345411062 CET	1.1.1.1	192.168.11.11	0xdd40	No error (0)	www.dynadot.com	104.16.59.53	A (IP address)	IN (0x0001)	false
Mar 1, 2023 20:18:00.345411062 CET	1.1.1.1	192.168.11.11	0xdd40	No error (0)	www.dynadot.com	104.16.60.53	A (IP address)	IN (0x0001)	false
Mar 1, 2023 20:18:00.540051937 CET	1.1.1.1	192.168.11.11	0xd6b7	No error (0)	d38psrni17bvxu.cloudfront.net	13.224.194.209	A (IP address)	IN (0x0001)	false
Mar 1, 2023 20:18:00.540051937 CET	1.1.1.1	192.168.11.11	0xd6b7	No error (0)	d38psrni17bvxu.cloudfront.net	13.224.194.153	A (IP address)	IN (0x0001)	false
Mar 1, 2023 20:18:00.540051937 CET	1.1.1.1	192.168.11.11	0xd6b7	No error (0)	d38psrni17bvxu.cloudfront.net	13.224.194.90	A (IP address)	IN (0x0001)	false
Mar 1, 2023 20:18:00.540051937 CET	1.1.1.1	192.168.11.11	0xd6b7	No error (0)	d38psrni17bvxu.cloudfront.net	13.224.194.80	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

googletagmanger.com

d1lxhc4jvstzrp.cloudfront.net

www.google.com

d38psrni17bvxu.cloudfront.net

https:

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.11.11	49316	18.66.121.122	443

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.11.11	49319	142.250.185.100	443

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.11.11	49329	75.2.18.233	80

Timestamp	kBytes transferred	Direction	Data
Mar 1, 2023 20:18:02.673738956 CET	851	OUT	GET /favicon.ico HTTP/1.1 Host: googletagmanger.com Accept: / Connection: keep-alive Cookie: __gsas=ID=f2d2c90cdd36c77a:T=1677698280:S=ALNI_MYElcHU_EJLnJGOiNVOn-GDo8RRkw User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://googletagmanger.com/ Accept-Encoding: gzip, deflate
Mar 1, 2023 20:18:02.831553936 CET	852	IN	HTTP/1.1 200 OK Date: Wed, 01 Mar 2023 19:18:02 GMT Content-Type: image/x-icon Content-Length: 0 Connection: keep-alive Server: nginx Last-Modified: Tue, 12 May 2020 14:25:52 GMT ETag: "5ebab1f0-0" Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.11.11	49320	142.250.185.100	443

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.11.11	49321	142.250.185.100	443

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.11.11	49323	142.250.185.100	443

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.11.11	49326	142.250.185.100	443

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.11.11	49328	142.250.185.100	443

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.11.11	49314	75.2.18.233	80

Timestamp	kBytes transferred	Direction	Data
Mar 1, 2023 20:17:59.953483105 CET	100	OUT	GET / HTTP/1.1 Host: googletagmanger.com Upgrade-Insecure-Requests: 1 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Accept-Encoding: gzip, deflate Connection: keep-alive
Mar 1, 2023 20:18:00.126115084 CET	101	IN	HTTP/1.1 200 OK Date: Wed, 01 Mar 2023 19:18:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Server: nginx Vary: Accept-Encoding X-Buckets: bucket103 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_TG5ZEN62H90VHlzFEjPTMTTH3+IL2ga16Cg2qDFx28K0Haaa9mfB9Rmc4voSkbA9xhqkfdCdN8cpH4Ut1LBF+w== X-Template: tpl_CleanPeppermintBlack_twoclick X-Language: german Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Domain: googletagmanger.com X-Subdomain: Content-Encoding: gzip Data Raw: 63 61 61 0d 0a 1f 8b 08 00 00 00 00 00 04 03 e5 5c e9 7b da 56 b3 ff 7c f3 57 a8 f4 79 03 be 35 8b 04 38 c6 09 ee b5 0d b6 21 46 04 2c d6 3e bd 79 b4 01 02 2d 44 12 66 79 9b ff fd fe e6 68 41 d8 38 69 fb b6 fd 72 9d d6 a0 b3 cc 76 66 e6 cc 99 33 f2 87 1f 6a ed 1b 69 f4 a9 ce cd 7c cb bc 7c f3 81 3e 38 4d f6 e5 ac ac 29 a6 a3 2e 16 fa b6 9a 6a dd ae d7 b5 ce a8 f9 d1 19 37 66 4f aa 78 d5 a9 5f 5f 77 ae 6a 8f eb ab f5 e3 55 f3 fa ea e1 cb aa 76 5b 97 86 5d bb 70 ef 16 ca 93 de a7 77 f5 a6 f4 ee dd 66 64 7f b2 ba ca b2 b5 2d 3d 2d ce 3f 8e 8c 7b 7b 21 2e 75 cd 9e b7 af c4 a6 2a 0f 6b 43 f5 63 a7 29 16 ec e1 c7 71 f3 e1 9d a4 1a cd da f9 95 73 3f fc c8 97 cf 6f ae d6 f5 ab ab 4e b5 fa 59 ba 2b 8f eb e2 99 70 5f 29 f4 ef cd dd 6d 7d fe 49 6a 49 d2 7d f1 a7 c6 83 30 95 f9 b3 9b a9 f0 a5 76 bb 11 ce 3f 16 ee 65 59 ae 58 93 eb 4a d7 52 4b 4f ce e3 42 b9 aa 6c 66 5f 16 13 ed 46 13 cf d5 e5 7d a9 e7 f3 0f d7 b7 3f ad ab d5 14 b7 b1 4c db ab a6 66 be bf bc c8 e7 d7 eb 75 6e 5d cc 39 ee 34 cf 57 2a 95 fc 86 e4 c1 06 5d 98 b2 3d ad a6 74 3b c5 c5 df 48 5e ba ac 5d be e1 f0 f3 c1 d2 7d 19 62 f4 97 59 fd cb ca 78 aa a6 6e 1c db d7 6d 3f 2b 6d 97 7a 8a 53 83 Data Ascii: caa\{V\|Wy58!F,>y-DfyhA8irvf3ji\|\|>8M).j7fOx__wjUv[]pwfd-=-?{{!.ukCc)qs?oNY+p_)m}IjI}0v?eYXJRKOBlf_F}?Lfun]94W]=t;H^]}bYxnm?+mzS
Mar 1, 2023 20:18:00.126203060 CET	103	IN	Data Raw: a7 6a ca d7 37 7e 9e e0 be e7 d4 99 ec 7a ba 5f 5d f9 93 ec 79 2a 9f 04 64 cb 96 5e 4d 3d 19 fa 7a e9 b8 7e 62 fa da d0 fc 59 55 d3 9f 0c 55 cf b2 87 53 ce b0 0d df 90 cd ac a7 ca a6 5e e5 4f 39 6f e6 1a f6 22 eb 3b d9 89 e1 57 6d 27 86 ed 1b be Data Ascii: j7~z_]yd^M=z~bYUUS^O9o";Wm'_Ngjt7:\|9U@5O==9l^^',\|C>\|[S,]3j:x&'{`nRdu1u]p+yx\)OUN56q!y[g`<g;YW_
Mar 1, 2023 20:18:00.126267910 CET	104	IN	Data Raw: 68 6e 62 ea a1 04 58 40 90 45 58 66 21 b0 49 86 05 b1 6f e5 a2 dd 9d 20 24 f7 5b 66 0d 84 ee 6b 24 76 d3 99 3a a1 d0 23 54 61 90 46 73 0f 68 8a 85 b0 f7 a7 f0 2e 4f eb 88 7c b6 41 71 14 8c 1d 60 08 b4 20 0e 78 0f 97 5b be 38 e6 6e b9 1f 0b 05 a6 Data Ascii: hnbX@EXf!Io $[fk$v:#TaFsh.O\|Aq` x[8nDf\UDK e0<lARS5Nm@tR-R4c\|9*"S]}mm(ON8YM18M8>+8/LjXw["^1
Mar 1, 2023 20:18:00.126317978 CET	104	IN	Data Raw: 36 ad f9 f5 bc 5d 6b 95 46 56 ab d0 da 75 ad d6 5d 4b 68 df 89 86 b8 bb 36 c5 5a a7 38 12 3a ac 4f 9c 77 b6 e3 01 60 d5 ae 84 76 ed da 6c dd 35 e7 ad 5d 6f 37 1a f4 ce c4 b9 68 8d ad 7a 61 2c 4d 37 2d 61 6c 8d a6 d5 6a 7a 4f 9c c7 d4 a0 9a 4e 34 Data Ascii: 6]kFVu]Kh6Z8:Ow`vl5]o7hza,M7-aljzON4 'unWZoMo4x14<M&O7-0dRs4%jyrW_;Dv`l:\|[^q4ow^]s&<DGbtqj
Mar 1, 2023 20:18:00.126379013 CET	106	IN	Data Raw: 31 31 66 66 0d 0a 9a 39 69 15 af 1d 46 eb d5 c1 02 04 a1 48 35 7d 24 74 4e ac 49 b0 3d 7d 92 71 2f 98 5c 2a 59 f3 11 e9 56 d3 0e 34 fa 3d 17 eb f1 b7 77 b3 4b 63 92 c1 e6 9b 83 5f 61 77 24 3f 54 ab d1 57 9c 28 11 59 ee bb 72 ec 44 15 f5 e6 96 ae Data Ascii: 11ff9iFH5}$tNI=}q/\*YV4=wKc_aw$?TW(YrD;+'wi\|]3KJ2@{`?#yVEha[RoM1TBF)F']==P=vl%vn/PfEBS]r+G=W{I&
Mar 1, 2023 20:18:00.126441956 CET	107	IN	Data Raw: 31 15 3a ff cf 14 b0 bd 86 2b dc 01 d8 70 67 e5 23 59 54 a5 3b 8a b7 9a fb fa ce 93 24 2f 98 1f dc 8b 20 43 e9 3f 0f 8c f6 8b 70 dc 36 6d 28 83 e7 a2 12 56 5f 1f f3 af 87 dd a1 a7 7c be 40 7f 9f 15 27 d0 ff 51 a3 0c 54 9f ae 54 63 bd 23 3b 88 2c Data Ascii: 1:+pg#YT;$/ C?p6m(V_\|@'QTTc#;,P1WraNcQY/eG@?/D3Tt6K9x<_5q<&0_g*2zJ~Yqqj@+a$pp&Xao0?
Mar 1, 2023 20:18:00.126503944 CET	108	IN	Data Raw: 1f d4 35 21 2e 08 6c 25 87 0b 3a 24 32 d9 0b e1 b9 1b 79 f2 9e 22 0a b9 7a e5 ba f2 36 a8 0c a1 60 20 e7 a1 20 40 cf d1 dd 5a 06 f5 f5 41 1d c4 c9 7b 6f 6d 50 86 52 0e af 82 09 ba 8a 5a 06 8e bf 08 03 4d 8a 84 d4 8c 8c bb e6 93 f7 ac 47 78 d9 73 Data Ascii: 5!.l%:$2y"z6` @ZA{omPRZMGxsGW1F5wbt!^5xTj/PBBa-:LL{LV+lf.4v(Z6020oO"O)iR6&t1Wkhf>.
Mar 1, 2023 20:18:00.126559973 CET	109	IN	Data Raw: eb b1 04 d9 36 a6 3d 01 f5 ab c3 e6 12 6d 42 ab d6 59 01 4e 91 68 1d 99 15 94 56 97 6d e6 7b 06 25 5f 1b b6 02 39 14 43 5b 85 bc b4 fb 26 3f 7e c4 d8 41 17 a7 36 b1 40 63 15 d4 75 b3 f9 58 4b ac 7f e1 b1 d7 21 9e bf 71 c2 9b 12 dc 02 d9 47 a4 f3 Data Ascii: 6=mBYNhVm{%_9C[&?~A6@cuXK!qG*\|fO+\|J\\|"Me 2&#ypn9r<l6;G-]~Etb<`k,#Vy]NotUv\|al_T~{7,
Mar 1, 2023 20:18:00.333723068 CET	187	OUT	GET /track.php?domain=googletagmanger.com&toggle=browserjs&uid=MTY3NzY5ODI4MC4wODE5OjIxYTM5YmZjZjNhOTMxMjBjODM4YmM0MzRmMGM2OGNiNzBlNDQ3Y2Q4YmM0NjQyZWI4MDA2ODBlMGJjMzUzYWU6NjNmZmE0ZTgxM2ZmYg%3D%3D HTTP/1.1 Host: googletagmanger.com Connection: keep-alive Accept: / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://googletagmanger.com/ Accept-Encoding: gzip, deflate
Mar 1, 2023 20:18:00.463998079 CET	188	IN	HTTP/1.1 200 OK Date: Wed, 01 Mar 2023 19:18:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a Data Ascii: 14
Mar 1, 2023 20:18:00.464099884 CET	188	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Mar 1, 2023 20:18:00.478662014 CET	189	OUT	POST /ls.php HTTP/1.1 Host: googletagmanger.com Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Origin: http://googletagmanger.com Accept-Encoding: gzip, deflate Cookie: GoogleAdServingTest=Good Connection: keep-alive Accept: / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Referer: http://googletagmanger.com/ Content-Length: 2401 Accept-Language: en-us
Mar 1, 2023 20:18:00.481172085 CET	191	OUT	Data Raw: 5f 3d 32 33 34 35 7c 7c 7c 36 33 66 66 61 34 65 38 31 35 63 66 33 65 79 4a 76 64 32 35 6c 63 69 6c 73 64 32 35 31 63 62 32 37 66 62 49 36 49 6a 49 30 4f 54 59 78 49 69 77 69 5a 47 39 74 59 57 6c 75 49 6a 6f 69 5a 32 39 76 5a 32 78 6c 64 47 46 6e Data Ascii: _=2345\|\|\|63ffa4e815cf3eyJvd25lcilsd251cb27fbI6IjI0OTYxIiwiZG9tYWluIjoiZ29vZ2xldGFnbWFuZ2VyLmNvbSIsInVuaXFJRCI6Ik1UWTNOelk1T0RJNE1DNHdPREU1T2pJeFlUTTVZbVpqWmpOaE9UTXhNakJqT0RNNFltTTBNelJtTUdNMk9HTmlOekJsTkRRM1kyUTRZbU0wTmpReVpXSTRNREEyT0RCbE1HS
Mar 1, 2023 20:18:00.870935917 CET	219	IN	HTTP/1.1 201 Created Date: Wed, 01 Mar 2023 19:18:00 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Server: nginx Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Log-Success: 63ffa4e8046d7a710d5bb9dc Charset: utf-8 Access-Control-Allow-Origin: http://googletagmanger.com Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Max-Age: 86400 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_uiatFWBFj4NasDczChfMXob8KnoOrNzv6g4un9HPnbgUnDnnnwRZMyarotqOFs8wiZBgifLWLyfVGytZduEiRg== Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a Data Ascii: 10{"success":true}
Mar 1, 2023 20:18:00.871051073 CET	219	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.11.11	49315	142.250.185.100	80

Timestamp	kBytes transferred	Direction	Data
Mar 1, 2023 20:18:00.219875097 CET	111	OUT	GET /adsense/domains/caf.js?abp=1 HTTP/1.1 Host: www.google.com Connection: keep-alive Accept: / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://googletagmanger.com/ Accept-Encoding: gzip, deflate
Mar 1, 2023 20:18:00.240560055 CET	112	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Date: Wed, 01 Mar 2023 19:18:00 GMT Expires: Wed, 01 Mar 2023 19:18:00 GMT Cache-Control: private, max-age=3600 ETag: "6528194100687023379" X-Content-Type-Options: nosniff Content-Encoding: gzip Transfer-Encoding: chunked Server: sffe X-XSS-Protection: 0 Data Raw: 31 38 31 39 0d 0a 1f 8b 08 00 00 00 00 00 02 ff a4 3b fb 77 93 48 db bf fb 57 24 b8 6f 84 0d 4d d3 ba af bb 82 98 a3 b5 5e 6b 5b ad be ae c6 d8 33 33 0c 04 4b 20 02 69 1b 5b fe f7 ef 79 66 06 18 92 74 b7 9e cf e3 29 93 61 2e cf fd 36 43 14 98 dd 8b 28 f1 d3 8b f1 bd 30 4d c3 98 1f 3e fb 70 7a 6f 62 5d 6d ea f5 cc 84 5f 74 9e 91 82 9b 96 35 08 79 f1 21 9a 41 d3 2d cd 60 91 b0 22 4a 13 d3 ea a8 99 03 39 f1 49 5c 1c a4 c4 e7 99 77 df 3d 27 59 27 0f 02 0e 0b 90 53 ef 2a e7 d9 79 c4 f8 e9 34 cd 0b c7 b8 b8 a8 a6 0c 58 3a 33 ec 29 c9 a7 8e f1 e7 83 3f 1f 3e d8 dd fd f3 c1 f0 e1 ce ee ee 83 9d 9d 07 3b 86 3d 27 ec 8c 84 3c 77 0c 3f 9d 91 28 c9 0d 7b 96 fa 8b 98 3b 06 f1 e1 c7 39 cf 72 80 c5 31 60 ec cc b9 62 3c 82 e6 9f f7 87 f0 6f d7 b0 c9 d4 29 b2 05 b7 17 a4 98 39 ff 1d 0e 6d ce 02 b6 2b fb e2 38 9b 39 3b 30 0e 5a 7e ec 18 f4 e4 bf 3f bf 7c 7a be 64 cb ff 7e a7 bb 43 0f 66 d3 c0 b9 32 4e 83 e8 72 af 60 07 51 72 96 1f 25 af d2 dc 90 f3 8d 53 44 61 3f 21 34 e6 ef 16 f3 ba 77 91 f3 13 c0 96 67 c7 59 7a 1e f9 dc 7f 26 00 af df 5f 90 a8 38 4a f6 d2 24 e7 49 f1 3c cd 9e 47 59 5e 1c 93 ac 58 ee a5 e9 59 c4 ab 81 5c ac bc 9f 4c 49 c2 b8 ff 81 64 c0 83 28 09 df e7 69 c2 da 63 0e d3 84 c6 29 3b 83 b7 27 24 d7 57 29 ed 99 3f 77 76 fe 42 72 0c ed 3c 47 3c 3f ff fd f4 82 dd 7f 7a ee ef 09 3c f3 cf b3 cb f3 2f f7 0f 2f e8 fd 77 8b cf bb 0f 8b 83 17 af 97 07 b3 c3 73 7a 72 f9 9d 2e d5 98 dd cb 73 ff d3 fb 19 9b 3d 5c c0 bc c5 97 bf df e5 5f fe fe a8 c6 4f cf d9 cb f7 e7 07 b3 87 cb 2f cb cb 39 8d e4 7b ff e5 eb 29 4d 0e f3 cf 7f bf 8f 0f 66 fe 39 dd 65 b9 ff 29 97 73 5e fe ef a7 da e3 fe 97 4f af Data Ascii: 1819;wHW$oM^k[33K i[yft)a.6C(0M>pzob]m_t5y!A-`"J9I\w='Y'S*y4X:3)?>;='<w?({;9r1`b<o)9m+89;0Z~?\|zd~Cf2Nr`Qr%SDa?!4wgYz&_8J$I<GY^XY\LId(ic);'$W)?wvBr<G<?z<//wszr.s=\_O/9{)Mf9e)s^O
Mar 1, 2023 20:18:00.240636110 CET	114	IN	Data Raw: 16 08 93 51 96 ee f6 ef 77 ee 74 f6 d2 f9 32 8b c2 69 d1 f9 30 e5 9d bd 38 cd 17 19 ef 1c 44 34 23 d9 b2 f3 64 51 4c d3 2c 1f dc e9 9c 1c 3f fb 7b eb 00 a4 0a 28 b9 f5 ca 07 6a 46 41 c4 33 a7 f3 04 84 66 ca b7 76 07 c3 3b bf 6f df 41 49 9c b9 95 Data Ascii: Qwt2i08D4#dQL,?{(jFA3fv;oAIv(1u/YiDJGd$,+?MI~R:{X%gTW,<:G;gAp9MKfUdYYZ5u&.7@ZGJNM_xc#4qJIa^6
Mar 1, 2023 20:18:00.240679026 CET	115	IN	Data Raw: 19 da 43 98 a6 0f 39 e6 ba 79 46 09 93 10 7c ea f5 d4 6e ca 41 49 09 0a 15 f0 6e 03 7b 25 95 53 ef ce d0 9d 3e 0a 9b c0 72 2a e7 c4 5e 38 9e 4e 5c fc 23 08 2e 38 17 9b 15 9f ce 14 21 28 87 26 04 f9 3a 6b 5a a0 52 de c2 66 03 a1 a4 02 87 2e 90 ca Data Ascii: C9yF\|nAIn{%S>r*^8N\#.8!(&:kZRf.LBw{f&?=pgmL&1JPxU=&yFIs%8\|Q"a)+t`\I_e#0J!C;S Q)#>k
Mar 1, 2023 20:18:00.240740061 CET	116	IN	Data Raw: 0e 1e 71 37 a8 b4 22 04 19 0e 64 01 4d 8a 37 b3 43 3b 80 cc df ba a2 4d 3e 50 96 54 05 eb 65 ad bd 58 19 dc c4 3c 00 2a 2b fe 5f ec d3 56 a8 19 b8 8a 46 53 4c fd 15 0e 86 1e c6 32 41 af c7 80 06 92 75 60 1f 04 eb 42 78 ae b1 2e 7c ec 05 65 4b 53 Data Ascii: q7"dM7C;M>PTeX<+_VFSL2Au`Bx.\|eKSfyG6Wvy%%J5d,UqAoS)&<YXs?<Dr((?$:XLotUa.x}?wCVJ(a
Mar 1, 2023 20:18:00.240804911 CET	118	IN	Data Raw: ba 91 ee 7c 03 dd 39 12 fb 0d 6b 11 fb 83 14 f5 f7 3c 4f 17 19 e3 1f b3 58 f7 db 09 6d 14 0e 18 c1 3c c1 68 71 31 2f a5 83 82 e7 05 88 6b fb f8 eb 55 02 d9 29 e8 d6 fa c2 58 bb 9a 91 02 8b be 4c dc 6f 19 64 7c 1e 13 c6 cd 39 6d 12 0d ac b7 89 8c Data Ascii: \|9k<OXm<hq1/kU)XLod\|9mV9[{Bgv{-,#x+VGc> m>9:P1oOX_9$Ia6_iJqvN\_/V)d4(cd:
Mar 1, 2023 20:18:00.240848064 CET	118	IN	Data Raw: d0 f5 c1 80 17 16 67 02 3c de 17 3d 5a d3 45 b6 25 3c 43 2a 78 a0 52 8c 55 48 74 41 49 49 06 ab aa c5 5b 47 a4 18 f3 a9 92 62 b7 7d c1 60 09 24 59 e9 10 e7 cc 6b ea 23 ea 2b a0 3e b4 a5 3e 08 ab 53 d7 4a 61 f9 e7 54 de ac 92 c7 6a 55 50 c4 aa c2 Data Ascii: g<=ZE%<C*xRUHtAII[Gb}`$Yk#+>>SJaTjUP3dnd(DK<+FC%VW;;0qXA97,22d\|N'Xq/sVI$4]D?bSjhi1wDM M6SLL:N
Mar 1, 2023 20:18:00.240886927 CET	120	IN	Data Raw: 31 36 36 30 0d 0a a4 3d 6b 77 d3 38 d3 df f9 15 8d 77 9f 1e bb 71 73 81 65 77 49 10 39 6d 1a 68 a0 37 7a 67 d3 3c 1c d9 72 d2 40 2e 25 09 b4 81 f6 bf bf 33 a3 ab 1d a7 b0 ef 73 ce b2 8d 64 69 24 8f 46 a3 d1 dc ec 04 dc 43 d5 cf 61 c0 0f 2d 54 dd Data Ascii: 1660=kw8wqsewI9mh7zg<r@.%3sdi$FCa-TLY'VXxc[&;oK^+lCmlOC@/<>?iP`NC{^M(Wr2-m\rR"u@&EP&In0WFj@i
Mar 1, 2023 20:18:00.240931988 CET	121	IN	Data Raw: b9 a7 17 24 99 7a aa 0c 04 a1 f7 78 4f d3 72 62 4b 9a 58 7a 7a 79 38 2d 4f ac 96 a7 67 98 9c eb d0 ea a8 25 be a7 3c 6d 32 1a 98 78 c9 4d 67 36 84 2b 82 f2 bc d1 5e 8e 61 05 98 32 4a 67 d3 85 b5 8f 49 07 47 72 72 75 35 0f cb d6 c9 04 58 5b c2 7e Data Ascii: $zxOrbKXzzy8-Og%<m2xMg6+^a2JgIGrru5X[~hl&x'g YI{bp2@e\|Vkq:Tt)H$TeI'}3,-:4c*:Hj#DA"AZ`A&8{4'fMx_r\
Mar 1, 2023 20:18:00.240971088 CET	122	IN	Data Raw: 46 9c 90 88 b3 55 81 00 a4 c8 85 c7 50 0b 64 4d a9 ec 05 3e d6 86 11 fc cf 99 d3 37 a1 b5 86 53 b4 f6 da c1 1f 5b 21 b3 40 21 cf 92 3e 20 1d c3 80 4a b7 a4 95 b6 6f 77 2b 8c 46 e5 4e 48 c9 77 8f b3 aa 4a 19 f7 8e bb 4a 6e 38 20 6f 5d 7a 6b af 3a Data Ascii: FUPdM>7S[!@!> Jow+FNHwJJn8 o]zk:@[\SyQT5i/54ql,(s)3JA{'pqwJ]K>^SYZ<+pAXx\|ZL>w@vtCMv-:NCw=2\|EGVA
Mar 1, 2023 20:18:00.241009951 CET	124	IN	Data Raw: f0 e1 cc 6b 9e 9c 54 51 cf c4 c9 28 85 1e 52 f0 13 4f 20 e7 40 52 ef 5d 43 79 5c 2c ea 69 8e a3 dd a6 2e 88 e9 e8 d2 ae e2 3b 66 f4 f3 14 e1 c2 26 99 4e 86 43 a0 31 05 bb b1 5c 55 7b 8d b9 79 9c f9 15 b2 f3 c3 d9 dc df e7 cd 33 53 e3 60 e1 c2 ec Data Ascii: kTQ(RO @R]Cy\,i.;f&NC1\U{y3S`S%(>v'n08MkS&`Y3{pD5b`O JFGc/'$$9t${#yse>aZ?k> o\j4j9-o+ah;,Y
Mar 1, 2023 20:18:00.252044916 CET	125	IN	Data Raw: e1 57 5e 45 24 2e 93 cb 39 ec 60 e5 80 dd 4b 58 f9 b7 7b 37 84 bb 9f b8 ce 84 f8 29 30 3e 05 86 de 43 ef 24 9d 1c be 92 9f ae 9e f9 82 b9 29 3a 05 2a 5e 05 26 b0 57 77 27 22 c1 69 13 08 79 6b ee 8b cd 2a 9d 9a cf fe 66 ac 77 7f ff e7 33 f8 13 50 Data Ascii: W^E$.9`KX{7)0>C$):^&Ww'"iykfw3PtblPv\-JYR>b@W"w3`;~I0((KI b8u$!3V_!AU~*1smw_k ,8pRW{!sj@

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.11.11	49318	13.224.194.209	80

Timestamp	kBytes transferred	Direction	Data
Mar 1, 2023 20:18:00.563656092 CET	193	OUT	GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1 Host: d38psrni17bvxu.cloudfront.net Connection: keep-alive Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://googletagmanger.com/ Accept-Encoding: gzip, deflate
Mar 1, 2023 20:18:00.575170994 CET	194	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11375 Connection: keep-alive Server: nginx Date: Wed, 01 Mar 2023 01:21:53 GMT Last-Modified: Thu, 23 Jun 2022 10:44:43 GMT Accept-Ranges: bytes ETag: "62b4441b-2c6f" X-Cache: Hit from cloudfront Via: 1.1 c28c128e9402fb070daca09bab68490a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA2-C1 X-Amz-Cf-Id: A1Yjj_8fHyKcaGLu0YL8Tra09pnUFy0k6QFde67bYU4Ni6yWRBYjNw== Age: 64567
Mar 1, 2023 20:18:00.575360060 CET	195	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 58 08 03 00 00 00 4f 6d d4 16 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 00 50 4c 54 45 00 00 00 ff Data Ascii: PNGIHDRXOmtEXtSoftwareAdobe ImageReadyqe<PLTEcdtIK^IK]IK\03IHK_acsceubdtcet0=@SHK]IL]HK\MPbNQbORc.0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes-0 5!6"7#8
Mar 1, 2023 20:18:00.575504065 CET	197	IN	Data Raw: 0f c7 1d de 89 88 54 d2 3e 0a 77 78 27 22 12 d9 08 bb 47 e2 0e ef 44 44 ea 68 af 83 3b bc 13 11 29 a3 bd 1e ee f0 4e 44 a4 8a f6 ba b8 c3 3b 11 91 22 da eb e3 0e ef 44 44 6a 68 6f 82 7b 27 7e 58 22 22 0d b4 37 c4 1d de 89 88 34 d0 de 18 77 78 27 Data Ascii: T>wx'"GDDh;)ND;"DDjho{'~X""74wx'"OND$v/H6;dqw""}+DD2io;ND$;@DDh;=ND$P;Q~GND$;DD"h;=<ND;Q"8wx
Mar 1, 2023 20:18:00.575593948 CET	198	IN	Data Raw: 8d eb 4c 54 b3 cf b2 5a d2 e2 9e 86 f6 64 b8 27 e2 1d dc 57 e3 c0 3b f1 dd 2e 10 f7 54 b4 27 c4 7d 7e fe e4 97 c1 1d dd 09 db 4b c6 3d 1d ed 49 71 4f c0 3b b8 a3 3b 61 bb 58 dc 53 d2 9e 18 f7 e8 bc 83 3b 87 66 a8 49 5c 5d 4a 88 7b 5a da 93 e3 1e Data Ascii: LTZd'W;.T'}~K=IqO;;aXS;fI\]J{ZwpGwj+$i{Tf="py[gwp2=p;W{1\|=#QxJ}q-5-q;Ww=wkVfwYqL{vU)~
Mar 1, 2023 20:18:00.575680017 CET	199	IN	Data Raw: fb 40 da 0d e2 8e ee 84 ed 02 70 4f c5 fb dc 03 01 41 0e 89 7b 0a de 57 e6 0c 14 83 3b 07 de 49 6a 17 26 4b c2 3d 05 ef 41 69 0f 8d 7b 64 de 2f 0d a7 dd 24 ee 1c 89 24 99 59 5c 6b 13 c3 7d 89 cb 7b 60 da c3 e3 1e 91 f7 91 b4 1b c5 1d dd 09 db 45 Data Ascii: @pOA{W;Ij&K=Ai{d/$$Y\k}{`Eo?GVqGwvq{-$OO{Kh{`knwn,G=vs$d_4c~7v;aCH{\v;$=*qoG
Mar 1, 2023 20:18:00.575764894 CET	200	IN	Data Raw: de ad e1 ce b5 54 12 dd a3 65 e0 9e 90 f6 e6 bc 0f a2 7d 08 ee 8d 4e 46 a6 a5 7d f0 73 4d 13 d8 4e 84 ee 41 71 4f 4c 7b b3 e7 9a 9e 79 7f b0 e0 43 70 af cd 7b 7a da 07 f1 6e 0b 77 e8 20 f9 59 c7 3d 03 ed b5 79 ef 3f 20 53 1f f7 0e ef df 7f 4b 26 Data Ascii: Te}NF}sMNAqOL{yCp{znw Y=y? SK&=2\K%]{&k7<NpH}yi\K%5]gF]>&O`;2\|;l'BK: W-q:X{
Mar 1, 2023 20:18:00.575850010 CET	202	IN	Data Raw: ca 5b da 19 69 cf 8a fb 32 ef 01 69 b7 80 3b ba 13 b6 eb c7 7d 99 f7 ac b4 67 c6 bd c3 fb 37 1e 9a 9d 05 f7 35 7d 84 11 a4 b3 6d e0 be ae 7f fd c6 d7 f2 ea 9a 15 f7 f1 b3 fb f7 7f ed fe 87 c0 9d 0f 77 e2 d3 dd 16 ee cf df 3f be 7f ff d9 f1 42 71 Data Ascii: [i2i;}g75}mw?Bq- qHs/{{c;Wi@{8uv;#p_O{F=sNq=Naxv"t{5xwbhb}w=q?DxW;&n,aGw^b"}4
Mar 1, 2023 20:18:00.575932980 CET	203	IN	Data Raw: e9 a9 16 b8 2f 35 69 ec ee dc b4 67 c5 9d 8d 77 a2 10 bd b9 28 0a f7 d4 bc d7 a7 7d 24 ef ae ce 75 54 79 bc 57 d2 9e 19 77 74 27 52 6d 7b 35 ee 29 79 6f 46 fb 08 de 5d 30 da 13 f2 3e 80 f6 dc b8 a3 3b 91 66 db 07 e1 9e 8a f7 e6 b4 0f e5 dd 05 a4 Data Ascii: /5igw(}$uTyWwt'Rm{5)yoF]0>;f{FD2.!'}qGw"=6=2Ci;}81yoG]p#>v;VGW">(R!=5h;w>RA=0h
Mar 1, 2023 20:18:00.576016903 CET	204	IN	Data Raw: 29 ed d5 bc 2f 60 3b 11 ba 87 c2 3d 0b ed c1 78 77 6a 69 af e2 7d 01 db 89 d0 3d 0c ee d9 68 0f c4 bb 53 4c 7b 3f ef 99 70 67 9c 0c 91 05 dd 17 a4 d0 1e 84 77 a7 9a f6 8d bc 2f 60 3b 91 85 0e 64 c6 3d 3b ed 01 78 77 ca 69 5f cf 7b 16 dc 19 27 43 Data Ascii: )/`;=xwji}=hSL{?pgw/`;d=;xwi_{'C]ywi_7pC{KWy;#IEwg+/`;.^O&]"v"tBmk,+"Mf?1T<xwh\|4agGSpGwlqf
Mar 1, 2023 20:18:00.576100111 CET	206	IN	Data Raw: e4 f5 2b f0 c8 48 67 88 f6 68 b8 b3 96 88 4a d0 3d 37 ee 61 79 0f 86 7b cc a7 51 33 e3 ce 4a 22 2a 42 f7 fc b8 87 e4 dd 85 a2 7d 4a 42 47 a0 9d 08 de 35 e3 1e 8e f7 20 b8 ff 83 0c da 63 e0 ce 38 19 22 a1 5d 36 8a 7b 28 de 03 e0 3e 23 e5 17 89 80 Data Ascii: +HghJ=7ay{Q3J"*B}JBG5 c8"]6{(>#;BwF1=8NT8{b&#h;8f2.rgv;Cz7{Aqg?!qvvf3OMCTG3D{@Y/D~D0nyo

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.11.11	49316	18.66.121.122	443

Timestamp	Direction	Data
2023-03-01 19:18:00 UTC	OUT	GET /themes/registrar/images/logo_dynadot3.png HTTP/1.1 Host: d1lxhc4jvstzrp.cloudfront.net Connection: keep-alive Accept: image/png,image/svg+xml,image/;q=0.8,/*;q=0.5 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://googletagmanger.com/ Accept-Encoding: br, gzip, deflate
2023-03-01 19:18:00 UTC	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11597 Connection: close Server: nginx Date: Wed, 01 Mar 2023 01:18:59 GMT Last-Modified: Mon, 15 Mar 2021 08:16:37 GMT Accept-Ranges: bytes ETag: "604f17e5-2d4d" X-Cache: Hit from cloudfront Via: 1.1 2816426ad1adbedbdd23d4cdf80c2de2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: 1hfTeySGCnmAPXiYa1qFl74u00arPpTChKzJ_QqIk1oU__OfRkhbHg== Age: 64741
2023-03-01 19:18:00 UTC	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 01 68 08 06 00 00 00 21 37 43 50 00 00 2d 14 49 44 41 54 78 01 ec dd 65 74 1d 57 f6 60 f1 23 c9 20 b3 c3 cc 9c 34 85 99 99 b1 b9 83 7f 6c 66 66 66 66 66 c6 30 27 13 66 66 06 27 dd 61 43 c7 2c bd 33 7b 78 46 6b ec c8 d6 7b 4f b7 aa 76 ad f5 ab af 62 d5 2e ba 27 dc dc dc dc 46 6d fb f1 fd 2f c6 eb 11 5d 26 89 9d 24 75 db 54 fc 06 89 33 10 92 0c 00 49 f5 35 11 df c2 53 48 24 be 81 a8 1f c9 00 90 a4 55 f0 36 cc 42 0e f1 ef 88 fa 90 0c 00 49 1a 8b 23 f0 2c 72 09 76 46 d4 83 64 00 48 d2 a1 b8 15 83 c8 a5 98 8c 90 64 00 48 aa ae 1e ec 84 bf 60 10 f9 02 1e 46 48 32 00 24 55 53 0f a6 e3 7b c8 e1 a8 f6 1b 00 92 01 20 49 63 f1 11 3c 89 5c 46 9f 43 48 32 00 24 55 47 2f 8e c5 8d c8 e5 74 3c 42 52 f9 01 Data Ascii: PNGIHDRh!7CP-IDATxetW`# 4lfffff0'ff'aC,3{xFk{Ovb.'Fm/]&$uT3I5SH$U6BI#,rvFdHdH`FH2$US{ Ic<\FCH2$UG/t<BR

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.11.11	49319	142.250.185.100	443

Timestamp	kBytes transferred	Direction	Data
2023-03-01 19:18:00 UTC	12	OUT	GET /afs/ads?adtest=off&psid=6016880802&pcsa=false&channel=000001%2Cbucket103&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fgoogletagmanger.com%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQxMDN8fHx8fHw2M2ZmYTRlODEzZmJlfHx8MTY3NzY5ODI4MC4wODh8MmJmMThlMzlmMzI0ZTc1NDc5OTY3ZjA3MmE3ZjBkMzVjYmZhOWNjY3x8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8ZXlKb2JDSTZJbVZ1SW4wPXx8MXxXMTA9fDM4MmJkY2ZjNDQxMzlmMTQzYjNhMDAzNDgwNjhiMTZkNDUyMTg4MGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHww&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2997149969328928&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002&format=r3%7Cs&nocache=351677701879796&num=0&output=afd_ads&domain_name=googletagmanger.com&v=3&bsl=8&pac=2&u_his=1&u_tz=60&dt=1677701879810&u_w=1024&u_h=768&biw=1009&bih=655&psw=1009&psh=848&frm=0&cl=512915031&uio=--&cont=tc&jsid=caf&jsv=512915031&rurl=http%3A%2F%2Fgoogletagmanger.com%2F&adbw=master-1%3A530 HTTP/1.1 Host: www.google.com Connection: keep-alive Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://googletagmanger.com/ Accept-Encoding: br, gzip, deflate
2023-03-01 19:18:01 UTC	13	IN	HTTP/1.1 302 Found Location: https://www.google.com/sorry/index?continue=https://www.google.com/afs/ads%3Fadtest%3Doff%26psid%3D6016880802%26pcsa%3Dfalse%26channel%3D000001%252Cbucket103%26client%3Ddp-teaminternet09_3ph%26r%3Dm%26hl%3Den%26rpbu%3Dhttp%253A%252F%252Fgoogletagmanger.com%252F%253Fts%253DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQxMDN8fHx8fHw2M2ZmYTRlODEzZmJlfHx8MTY3NzY5ODI4MC4wODh8MmJmMThlMzlmMzI0ZTc1NDc5OTY3ZjA3MmE3ZjBkMzVjYmZhOWNjY3x8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8ZXlKb2JDSTZJbVZ1SW4wPXx8MXxXMTA9fDM4MmJkY2ZjNDQxMzlmMTQzYjNhMDAzNDgwNjhiMTZkNDUyMTg4MGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHww%26max_radlink_len%3D40%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-2997149969328928%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%252C17300002%26format%3Dr3%257Cs%26nocache%3D351677701879796%26num%3D0%26output%3Dafd_ads%26domain_name%3Dgoogletagmanger.com%26v%3D3%26bsl%3D8%26pac%3D2%26u_his%3D1%26u_tz%3D60%26dt%3D1677701879810%26u_w%3D1024%26u_h%3D768%26biw%3D1009%26bih%3D655%26psw%3D1009%26psh%3D848%26frm%3D0%26cl%3D512915031%26uio%3D--%26cont%3Dtc%26jsid%3Dcaf%26jsv%3D512915031%26rurl%3Dhttp%253A%252F%252Fgoogletagmanger.com%252F%26adbw%3Dmaster-1%253A530&hl=en&q=EgRUETQ2GOjJ_p8GIjA7OVPaazSDpILENXCcxt0OZCvQ_9NQzNN7GiGeZLgyxzAVep3JrZT0P5XGAreaMaAyAXI x-hallmonitor-challenge: CgsI6cn-nwYQofLpTBIEVBE0Ng Content-Type: text/html; charset=UTF-8 P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Wed, 01 Mar 2023 19:18:01 GMT Server: gws Content-Length: 1471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: NID=511=WoFMsboyKkezaNyTsraIf-dNyzHEMtNowK5FyYRV1xFjCLt573zSEpP6DleIhdnasiH5Wt8zeaxelSjCTMRUmj3LiV2iuzFw1n4hYneHvbBsINb9L8C6C0u1Sh3XR3er6NttaTb4wWuolhpqTYVWW5FjXg8gzvJugEfQBzQqTwg; expires=Thu, 31-Aug-2023 19:18:00 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Set-Cookie: CONSENT=PENDING+323; expires=Fri, 28-Feb-2025 19:18:00 GMT; path=/; domain=.google.com; Secure Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-03-01 19:18:01 UTC	15	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 6f 72 72 79 2f 69 6e 64 65 78 3f 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 66 73 2f 61 64 73 25 33 46 61 64 74 65 73 74 25 33 44 6f Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/sorry/index?continue=https://www.google.com/afs/ads%3Fadtest%3Do

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.11.11	49320	142.250.185.100	443

Timestamp	kBytes transferred	Direction	Data
2023-03-01 19:18:01 UTC	16	OUT	GET /sorry/index?continue=https://www.google.com/afs/ads%3Fadtest%3Doff%26psid%3D6016880802%26pcsa%3Dfalse%26channel%3D000001%252Cbucket103%26client%3Ddp-teaminternet09_3ph%26r%3Dm%26hl%3Den%26rpbu%3Dhttp%253A%252F%252Fgoogletagmanger.com%252F%253Fts%253DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQxMDN8fHx8fHw2M2ZmYTRlODEzZmJlfHx8MTY3NzY5ODI4MC4wODh8MmJmMThlMzlmMzI0ZTc1NDc5OTY3ZjA3MmE3ZjBkMzVjYmZhOWNjY3x8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8ZXlKb2JDSTZJbVZ1SW4wPXx8MXxXMTA9fDM4MmJkY2ZjNDQxMzlmMTQzYjNhMDAzNDgwNjhiMTZkNDUyMTg4MGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHww%26max_radlink_len%3D40%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-2997149969328928%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%252C17300002%26format%3Dr3%257Cs%26nocache%3D351677701879796%26num%3D0%26output%3Dafd_ads%26domain_name%3Dgoogletagmanger.com%26v%3D3%26bsl%3D8%26pac%3D2%26u_his%3D1%26u_tz%3D60%26dt%3D1677701879810%26u_w%3D1024%26u_h%3D768%26biw%3D1009%26bih%3D655%26psw%3D1009%26psh%3D848%26frm%3D0%26cl%3D512915031%26uio%3D--%26cont%3Dtc%26jsid%3Dcaf%26jsv%3D512915031%26rurl%3Dhttp%253A%252F%252Fgoogletagmanger.com%252F%26adbw%3Dmaster-1%253A530&hl=en&q=EgRUETQ2GOjJ_p8GIjA7OVPaazSDpILENXCcxt0OZCvQ_9NQzNN7GiGeZLgyxzAVep3JrZT0P5XGAreaMaAyAXI HTTP/1.1 Host: www.google.com Connection: keep-alive Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: http://googletagmanger.com/ Accept-Encoding: br, gzip, deflate
2023-03-01 19:18:01 UTC	18	IN	HTTP/1.1 429 Too Many Requests Date: Wed, 01 Mar 2023 19:18:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html Server: HTTP server (unknown) Content-Length: 6265 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2023-03-01 19:18:01 UTC	18	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 66 73 2f 61 64 73 3f 61 64 74 65 73 74 3d 6f 66 66 26 61 6d 70 3b 70 73 69 64 3d 36 30 31 36 38 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><meta name="viewport" content="initial-scale=1"><title>https://www.google.com/afs/ads?adtest=off&psid=60168
2023-03-01 19:18:01 UTC	19	IN	Data Raw: 72 33 25 37 43 73 26 61 6d 70 3b 6e 6f 63 61 63 68 65 3d 33 35 31 36 37 37 37 30 31 38 37 39 37 39 36 26 61 6d 70 3b 6e 75 6d 3d 30 26 61 6d 70 3b 6f 75 74 70 75 74 3d 61 66 64 5f 61 64 73 26 61 6d 70 3b 64 6f 6d 61 69 6e 5f 6e 61 6d 65 3d 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 67 65 72 2e 63 6f 6d 26 61 6d 70 3b 76 3d 33 26 61 6d 70 3b 62 73 6c 3d 38 26 61 6d 70 3b 70 61 63 3d 32 26 61 6d 70 3b 75 5f 68 69 73 3d 31 26 61 6d 70 3b 75 5f 74 7a 3d 36 30 26 61 6d 70 3b 64 74 3d 31 36 37 37 37 30 31 38 37 39 38 31 30 26 61 6d 70 3b 75 5f 77 3d 31 30 32 34 26 61 6d 70 3b 75 5f 68 3d 37 36 38 26 61 6d 70 3b 62 69 77 3d 31 30 30 39 26 61 6d 70 3b 62 69 68 3d 36 35 35 26 61 6d 70 3b 70 73 77 3d 31 30 30 39 26 61 6d 70 3b 70 73 68 3d 38 34 38 26 61 6d 70 3b 66 72 6d Data Ascii: r3%7Cs&nocache=351677701879796&num=0&output=afd_ads&domain_name=googletagmanger.com&v=3&bsl=8&pac=2&u_his=1&u_tz=60&dt=1677701879810&u_w=1024&u_h=768&biw=1009&bih=655&psw=1009&psh=848&frm
2023-03-01 19:18:01 UTC	20	IN	Data Raw: 62 52 77 42 35 6e 72 76 44 76 4c 63 78 4e 41 58 71 74 76 4e 38 30 32 75 4c 44 57 57 6b 53 31 4d 51 30 7a 73 47 6a 30 53 59 2d 35 32 6b 74 54 38 7a 4c 7a 4b 7a 79 62 47 4a 59 43 49 6d 53 4e 5a 42 6a 52 41 30 2d 74 67 39 35 4b 43 58 75 54 56 75 53 32 33 6d 46 36 5f 48 4c 73 39 39 67 48 4e 59 61 6b 4d 4b 31 2d 36 77 69 34 5f 47 79 76 66 6e 51 57 70 4d 78 71 39 4c 66 33 61 78 62 57 36 32 51 65 49 72 70 73 71 46 5f 5a 75 55 37 31 58 32 4b 58 38 4c 47 59 63 61 58 41 72 48 31 45 49 5f 31 67 54 47 57 6e 33 75 75 6e 36 70 4b 63 68 6a 52 76 51 5f 72 74 77 43 53 46 57 54 64 6b 4e 63 68 33 30 68 30 48 6d 6a 39 56 77 56 77 49 59 36 4c 50 69 4b 4a 32 47 45 32 77 2d 64 41 43 74 53 30 66 6f 67 73 5a 6a 32 74 48 6c 79 4a 58 52 34 52 31 77 50 4a 55 4f 75 6b 73 6a 37 65 38 Data Ascii: bRwB5nrvDvLcxNAXqtvN802uLDWWkS1MQ0zsGj0SY-52ktT8zLzKzybGJYCImSNZBjRA0-tg95KCXuTVuS23mF6_HLs99gHNYakMK1-6wi4_GyvfnQWpMxq9Lf3axbW62QeIrpsqF_ZuU71X2KX8LGYcaXArH1EI_1gTGWn3uun6pKchjRvQ_rtwCSFWTdkNch30h0Hmj9VwVwIY6LPiKJ2GE2w-dACtS0fogsZj2tHlyJXR4R1wPJUOuksj7e8
2023-03-01 19:18:01 UTC	22	IN	Data Raw: 67 65 72 2e 63 6f 6d 26 61 6d 70 3b 76 3d 33 26 61 6d 70 3b 62 73 6c 3d 38 26 61 6d 70 3b 70 61 63 3d 32 26 61 6d 70 3b 75 5f 68 69 73 3d 31 26 61 6d 70 3b 75 5f 74 7a 3d 36 30 26 61 6d 70 3b 64 74 3d 31 36 37 37 37 30 31 38 37 39 38 31 30 26 61 6d 70 3b 75 5f 77 3d 31 30 32 34 26 61 6d 70 3b 75 5f 68 3d 37 36 38 26 61 6d 70 3b 62 69 77 3d 31 30 30 39 26 61 6d 70 3b 62 69 68 3d 36 35 35 26 61 6d 70 3b 70 73 77 3d 31 30 30 39 26 61 6d 70 3b 70 73 68 3d 38 34 38 26 61 6d 70 3b 66 72 6d 3d 30 26 61 6d 70 3b 63 6c 3d 35 31 32 39 31 35 30 33 31 26 61 6d 70 3b 75 69 6f 3d 2d 2d 26 61 6d 70 3b 63 6f 6e 74 3d 74 63 26 61 6d 70 3b 6a 73 69 64 3d 63 61 66 26 61 6d 70 3b 6a 73 76 3d 35 31 32 39 31 35 30 33 31 26 61 6d 70 3b 72 75 72 6c 3d 68 74 74 70 25 33 41 25 32 Data Ascii: ger.com&v=3&bsl=8&pac=2&u_his=1&u_tz=60&dt=1677701879810&u_w=1024&u_h=768&biw=1009&bih=655&psw=1009&psh=848&frm=0&cl=512915031&uio=--&cont=tc&jsid=caf&jsv=512915031&rurl=http%3A%2
2023-03-01 19:18:01 UTC	23	IN	Data Raw: 69 6e 2c 20 6f 72 20 61 20 73 63 72 69 70 74 20 74 68 61 74 20 73 65 6e 64 73 20 61 75 74 6f 6d 61 74 65 64 20 72 65 71 75 65 73 74 73 2e 20 20 49 66 20 79 6f 75 20 73 68 61 72 65 20 79 6f 75 72 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 6e 65 63 74 69 6f 6e 2c 20 61 73 6b 20 79 6f 75 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 20 66 6f 72 20 68 65 6c 70 20 26 6d 64 61 73 68 3b 20 61 20 64 69 66 66 65 72 65 6e 74 20 63 6f 6d 70 75 74 65 72 20 75 73 69 6e 67 20 74 68 65 20 73 61 6d 65 20 49 50 20 61 64 64 72 65 73 73 20 6d 61 79 20 62 65 20 72 65 73 70 6f 6e 73 69 62 6c 65 2e 20 20 3c 61 20 68 72 65 66 3d 22 2f 2f 73 75 70 70 6f 72 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 77 65 62 73 65 61 72 63 68 2f 61 6e 73 77 65 72 2f 38 36 36 34 30 22 3e 4c 65 61 72 6e 20 6d Data Ascii: in, or a script that sends automated requests. If you share your network connection, ask your administrator for help — a different computer using the same IP address may be responsible. <a href="//support.google.com/websearch/answer/86640">Learn m
2023-03-01 19:18:01 UTC	24	IN	Data Raw: 61 69 6e 5f 6e 61 6d 65 3d 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 67 65 72 2e 63 6f 6d 26 61 6d 70 3b 76 3d 33 26 61 6d 70 3b 62 73 6c 3d 38 26 61 6d 70 3b 70 61 63 3d 32 26 61 6d 70 3b 75 5f 68 69 73 3d 31 26 61 6d 70 3b 75 5f 74 7a 3d 36 30 26 61 6d 70 3b 64 74 3d 31 36 37 37 37 30 31 38 37 39 38 31 30 26 61 6d 70 3b 75 5f 77 3d 31 30 32 34 26 61 6d 70 3b 75 5f 68 3d 37 36 38 26 61 6d 70 3b 62 69 77 3d 31 30 30 39 26 61 6d 70 3b 62 69 68 3d 36 35 35 26 61 6d 70 3b 70 73 77 3d 31 30 30 39 26 61 6d 70 3b 70 73 68 3d 38 34 38 26 61 6d 70 3b 66 72 6d 3d 30 26 61 6d 70 3b 63 6c 3d 35 31 32 39 31 35 30 33 31 26 61 6d 70 3b 75 69 6f 3d 2d 2d 26 61 6d 70 3b 63 6f 6e 74 3d 74 63 26 61 6d 70 3b 6a 73 69 64 3d 63 61 66 26 61 6d 70 3b 6a 73 76 3d 35 31 32 39 31 35 30 Data Ascii: ain_name=googletagmanger.com&v=3&bsl=8&pac=2&u_his=1&u_tz=60&dt=1677701879810&u_w=1024&u_h=768&biw=1009&bih=655&psw=1009&psh=848&frm=0&cl=512915031&uio=--&cont=tc&jsid=caf&jsv=5129150

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.11.11	49321	142.250.185.100	443

Timestamp	kBytes transferred	Direction	Data
2023-03-01 19:18:01 UTC	24	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive Accept: / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: https://www.google.com/sorry/index?continue=https://www.google.com/afs/ads%3Fadtest%3Doff%26psid%3D6016880802%26pcsa%3Dfalse%26channel%3D000001%252Cbucket103%26client%3Ddp-teaminternet09_3ph%26r%3Dm%26hl%3Den%26rpbu%3Dhttp%253A%252F%252Fgoogletagmanger.com%252F%253Fts%253DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQxMDN8fHx8fHw2M2ZmYTRlODEzZmJlfHx8MTY3NzY5ODI4MC4wODh8MmJmMThlMzlmMzI0ZTc1NDc5OTY3ZjA3MmE3ZjBkMzVjYmZhOWNjY3x8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8ZXlKb2JDSTZJbVZ1SW4wPXx8MXxXMTA9fDM4MmJkY2ZjNDQxMzlmMTQzYjNhMDAzNDgwNjhiMTZkNDUyMTg4MGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHww%26max_radlink_len%3D40%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-2997149969328928%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%252C17300002%26format%3Dr3%257Cs%26nocache%3D351677701879796%26num%3D0%26output%3Dafd_ads%26domain_name%3Dgoogletagmanger.com%26v%3D3%26bsl%3D8%26pac%3D2%26u_his%3D1%26u_tz%3D60%26dt%3D1677701879810%26u_w%3D1024%26u_h%3D768%26biw%3D1009%26bih%3D655%26psw%3D1009%26psh%3D848%26frm%3D0%26cl%3D512915031%26uio%3D--%26cont%3Dtc%26jsid%3Dcaf%26jsv%3D512915031%26rurl%3Dhttp%253A%252F%252Fgoogletagmanger.com%252F%26adbw%3Dmaster-1%253A530&hl=en&q=EgRUETQ2GOjJ_p8GIjA7OVPaazSDpILENXCcxt0OZCvQ_9NQzNN7GiGeZLgyxzAVep3JrZT0P5XGAreaMaAyAXI Accept-Encoding: br, gzip, deflate
2023-03-01 19:18:01 UTC	26	IN	HTTP/1.1 200 OK Expires: Wed, 01 Mar 2023 19:18:01 GMT Date: Wed, 01 Mar 2023 19:18:01 GMT Cache-Control: private, max-age=300 Content-Type: text/javascript; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-03-01 19:18:01 UTC	26	IN	Data Raw: 33 35 32 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 352/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2023-03-01 19:18:01 UTC	27	IN	Data Raw: 72 69 62 75 74 65 28 27 6e 6f 6e 63 65 27 29 29 3b 69 66 28 6e 29 7b 70 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 6e 6f 6e 63 65 27 2c 6e 29 3b 7d 76 61 72 20 73 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 73 63 72 69 70 74 27 29 5b 30 5d 3b 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 70 6f 2c 20 73 29 3b 7d 29 28 29 3b 0d 0a Data Ascii: ribute('nonce'));if(n){po.setAttribute('nonce',n);}var s=d.getElementsByTagName('script')[0];s.parentNode.insertBefore(po, s);})();
2023-03-01 19:18:01 UTC	27	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.11.11	49323	142.250.185.100	443

Timestamp	kBytes transferred	Direction	Data
2023-03-01 19:18:01 UTC	27	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=Nh10qRQB5k2ucc5SCBLAQ4nA&size=normal&s=xm9cbRwB5nrvDvLcxNAXqtvN802uLDWWkS1MQ0zsGj0SY-52ktT8zLzKzybGJYCImSNZBjRA0-tg95KCXuTVuS23mF6_HLs99gHNYakMK1-6wi4_GyvfnQWpMxq9Lf3axbW62QeIrpsqF_ZuU71X2KX8LGYcaXArH1EI_1gTGWn3uun6pKchjRvQ_rtwCSFWTdkNch30h0Hmj9VwVwIY6LPiKJ2GE2w-dACtS0fogsZj2tHlyJXR4R1wPJUOuksj7e8_5pV_elAX3dRP2V4Eol76yyUI-eA&cb=9puivbc71jry HTTP/1.1 Host: www.google.com Connection: keep-alive Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: https://www.google.com/sorry/index?continue=https://www.google.com/afs/ads%3Fadtest%3Doff%26psid%3D6016880802%26pcsa%3Dfalse%26channel%3D000001%252Cbucket103%26client%3Ddp-teaminternet09_3ph%26r%3Dm%26hl%3Den%26rpbu%3Dhttp%253A%252F%252Fgoogletagmanger.com%252F%253Fts%253DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQxMDN8fHx8fHw2M2ZmYTRlODEzZmJlfHx8MTY3NzY5ODI4MC4wODh8MmJmMThlMzlmMzI0ZTc1NDc5OTY3ZjA3MmE3ZjBkMzVjYmZhOWNjY3x8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8ZXlKb2JDSTZJbVZ1SW4wPXx8MXxXMTA9fDM4MmJkY2ZjNDQxMzlmMTQzYjNhMDAzNDgwNjhiMTZkNDUyMTg4MGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHww%26max_radlink_len%3D40%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-2997149969328928%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%252C17300002%26format%3Dr3%257Cs%26nocache%3D351677701879796%26num%3D0%26output%3Dafd_ads%26domain_name%3Dgoogletagmanger.com%26v%3D3%26bsl%3D8%26pac%3D2%26u_his%3D1%26u_tz%3D60%26dt%3D1677701879810%26u_w%3D1024%26u_h%3D768%26biw%3D1009%26bih%3D655%26psw%3D1009%26psh%3D848%26frm%3D0%26cl%3D512915031%26uio%3D--%26cont%3Dtc%26jsid%3Dcaf%26jsv%3D512915031%26rurl%3Dhttp%253A%252F%252Fgoogletagmanger.com%252F%26adbw%3Dmaster-1%253A530&hl=en&q=EgRUETQ2GOjJ_p8GIjA7OVPaazSDpILENXCcxt0OZCvQ_9NQzNN7GiGeZLgyxzAVep3JrZT0P5XGAreaMaAyAXI Accept-Encoding: br, gzip, deflate
2023-03-01 19:18:01 UTC	29	IN	HTTP/1.1 200 OK Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 01 Mar 2023 19:18:01 GMT Content-Security-Policy: script-src 'nonce-WikpTywiOAbHo8oExSRGSA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'self';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-03-01 19:18:01 UTC	30	IN	Data Raw: 32 62 31 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2b1b<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2023-03-01 19:18:01 UTC	31	IN	Data Raw: 32 46 72 31 4d 75 37 32 78 4b 4b 54 55 31 4b 76 6e 7a 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 Data Ascii: 2Fr1Mu72xKKTU1Kvnz.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstati
2023-03-01 19:18:01 UTC	32	IN	Data Raw: 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4b 54 55 31 4b 76 6e 7a 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 34 46 2c 20 55 2b 30 32 35 39 2c 20 55 2b 31 45 30 30 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 46 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 Data Ascii: 0; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKKTU1Kvnz.woff2) format('woff2'); unicode-range: U+0100-024F, U+0259, U+1E00-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-fa
2023-03-01 19:18:01 UTC	33	IN	Data Raw: 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 41 4d 50 36 6c 62 42 50 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 Data Ascii: //fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4AMP6lbBP.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v
2023-03-01 19:18:01 UTC	34	IN	Data Raw: 55 2b 30 32 44 43 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 37 34 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 Data Ascii: U+02DC, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}/* cyrillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmY
2023-03-01 19:18:01 UTC	35	IN	Data Raw: 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 41 4d 50 36 6c 62 42 50 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f Data Ascii: KFOlCnqEu92Fr1MmYUtfCxc4AMP6lbBP.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+1EA0-1EF9, U+20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; fo
2023-03-01 19:18:01 UTC	37	IN	Data Raw: 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 57 69 6b 70 54 79 77 69 4f 41 62 48 6f 38 6f 45 78 53 52 47 53 41 22 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 72 63 2d 61 6e 63 68 6f 72 2d 61 6c 65 72 74 22 20 63 6c 61 73 73 3d 22 72 63 2d 61 6e 63 68 6f 72 2d 61 6c 65 72 74 22 3e 3c 2f 64 69 76 3e 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 2d 74 6f 6b 65 6e 22 20 76 61 6c 75 65 3d 22 30 33 41 46 59 5f 61 38 57 43 5f 53 4a 37 79 4d 6b 4c 65 51 76 36 78 78 32 78 41 65 46 77 5a 4e 66 33 36 37 72 52 55 62 31 6a 6a 4a 62 49 58 6b 55 47 75 4e 5a 45 4b 55 30 56 50 4e 6b 53 35 70 75 42 39 4a 54 6b 63 4b Data Ascii: ha__en.js" nonce="WikpTywiOAbHo8oExSRGSA"> </script></head><body><div id="rc-anchor-alert" class="rc-anchor-alert"></div><input type="hidden" id="recaptcha-token" value="03AFY_a8WC_SJ7yMkLeQv6xx2xAeFwZNf367rRUb1jjJbIXkUGuNZEKU0VPNkS5puB9JTkcK
2023-03-01 19:18:01 UTC	38	IN	Data Raw: 65 50 6a 34 69 47 4b 74 42 76 77 34 5f 35 6c 41 70 71 73 63 39 43 32 58 6f 35 41 4d 51 4c 71 43 43 71 6a 6c 55 76 37 57 5f 75 6a 48 75 2d 32 37 41 74 34 6a 61 39 52 66 62 4b 32 4b 38 61 54 73 48 58 74 5a 72 31 6e 38 63 74 39 5f 67 64 46 59 50 6c 61 61 70 4c 44 72 64 4d 59 35 67 41 55 49 58 76 68 5a 4a 47 4b 42 68 76 31 49 79 44 31 66 2d 74 39 4c 30 44 74 6c 53 56 37 56 79 75 34 62 64 5a 47 2d 4f 5a 33 36 61 62 79 76 65 63 73 61 44 38 59 6c 55 54 36 59 4d 32 5a 76 56 4c 78 61 66 35 61 33 47 44 6f 66 43 59 6c 37 49 61 7a 54 52 54 33 70 4e 42 76 77 35 63 31 65 36 56 57 49 57 5f 50 70 55 50 78 62 74 5a 76 77 70 73 33 35 4c 41 7a 4b 5f 67 37 6d 4b 39 63 79 62 36 63 64 6f 44 55 6c 6c 67 70 65 62 74 45 6b 54 74 49 76 70 39 51 4b 6a 48 46 36 78 68 37 4c 6a 7a 6f Data Ascii: ePj4iGKtBvw4_5lApqsc9C2Xo5AMQLqCCqjlUv7W_ujHu-27At4ja9RfbK2K8aTsHXtZr1n8ct9_gdFYPlaapLDrdMY5gAUIXvhZJGKBhv1IyD1f-t9L0DtlSV7Vyu4bdZG-OZ36abyvecsaD8YlUT6YM2ZvVLxaf5a3GDofCYl7IazTRT3pNBvw5c1e6VWIW_PpUPxbtZvwps35LAzK_g7mK9cyb6cdoDUllgpebtEkTtIvp9QKjHF6xh7Ljzo
2023-03-01 19:18:01 UTC	39	IN	Data Raw: 7a 4b 53 77 68 52 79 6c 38 66 43 46 48 4c 6d 4e 79 5a 57 46 30 5a 56 42 76 62 47 6c 6a 65 53 6c 79 5a 58 52 31 63 6d 34 67 55 6a 74 30 63 6e 6c 37 55 6a 31 48 4c 6d 4e 79 5a 57 46 30 5a 56 42 76 62 47 6c 6a 65 53 67 69 59 6d 63 69 4c 48 74 6a 63 6d 56 68 64 47 56 49 56 45 31 4d 4f 6b 67 73 59 33 4a 6c 59 58 52 6c 55 32 4e 79 61 58 42 30 4f 6b 67 73 59 33 4a 6c 59 58 52 6c 55 32 4e 79 61 58 42 30 56 56 4a 4d 4f 6b 68 39 4b 58 31 6a 59 58 52 6a 61 43 68 75 4b 58 74 44 4c 6d 4e 76 62 6e 4e 76 62 47 55 6d 4a 6b 4d 75 59 32 39 75 63 32 39 73 5a 53 35 6c 63 6e 4a 76 63 69 68 75 4c 6d 31 6c 63 33 4e 68 5a 32 55 70 66 58 4a 6c 64 48 56 79 62 69 42 53 66 53 78 49 50 57 5a 31 62 6d 4e 30 61 57 39 75 4b 46 49 70 65 33 4a 6c 64 48 56 79 62 69 42 53 66 53 78 44 50 58 Data Ascii: zKSwhRyl8fCFHLmNyZWF0ZVBvbGljeSlyZXR1cm4gUjt0cnl7Uj1HLmNyZWF0ZVBvbGljeSgiYmciLHtjcmVhdGVIVE1MOkgsY3JlYXRlU2NyaXB0OkgsY3JlYXRlU2NyaXB0VVJMOkh9KX1jYXRjaChuKXtDLmNvbnNvbGUmJkMuY29uc29sZS5lcnJvcihuLm1lc3NhZ2UpfXJldHVybiBSfSxIPWZ1bmN0aW9uKFIpe3JldHVybiBSfSxDPX
2023-03-01 19:18:01 UTC	40	IN	Data Raw: 73 4e 79 70 44 4b 53 78 69 4a 6a 30 33 66 53 78 4d 4c 6d 4e 76 62 6d 4e 68 64 44 31 6d 64 57 35 6a 64 47 6c 76 62 69 68 52 4b 58 74 79 5a 58 52 31 63 6d 34 6f 55 54 30 6f 55 54 30 6f 55 54 31 53 4a 54 45 32 4b 7a 45 73 4c 56 45 71 52 53 73 6f 62 69 67 70 66 44 41 70 4b 6c 45 74 4d 54 63 7a 4f 53 70 53 4b 6b 55 74 4d 6a 4d 31 4b 6c 49 71 55 69 70 46 4b 53 74 49 57 32 49 72 4d 6a 63 6d 4e 31 30 71 55 69 70 52 4c 54 49 31 4d 7a 67 71 52 53 74 69 4b 7a 55 71 55 69 70 53 4b 6c 45 72 4e 44 63 71 52 53 70 46 4c 45 68 62 55 56 30 70 4c 45 55 39 64 6d 39 70 5a 43 41 77 4c 45 67 70 57 79 68 69 4b 7a 4d 33 4a 6a 63 70 4b 79 68 44 4a 6a 49 70 58 54 31 52 4c 45 68 62 59 69 73 6f 51 79 59 79 4b 56 30 39 4d 7a 63 73 55 58 30 73 54 48 30 73 52 6a 31 37 63 47 46 7a 63 32 Data Ascii: sNypDKSxiJj03fSxMLmNvbmNhdD1mdW5jdGlvbihRKXtyZXR1cm4oUT0oUT0oUT1SJTE2KzEsLVEqRSsobigpfDApKlEtMTczOSpSKkUtMjM1KlIqUipFKStIW2IrMjcmN10qUipRLTI1MzgqRStiKzUqUipSKlErNDcqRSpFLEhbUV0pLEU9dm9pZCAwLEgpWyhiKzM3JjcpKyhDJjIpXT1RLEhbYisoQyYyKV09MzcsUX0sTH0sRj17cGFzc2
2023-03-01 19:18:01 UTC	41	IN	Data Raw: 34 35 38 31 0d 0a 38 4d 6a 51 77 4c 46 4a 62 54 43 73 72 58 54 31 44 50 6a 34 78 4d 69 59 32 4d 33 77 78 4d 6a 67 70 4f 6c 4a 62 54 43 73 72 58 54 31 44 50 6a 34 78 4d 6e 77 79 4d 6a 51 73 55 6c 74 4d 4b 79 74 64 50 55 4d 2b 50 6a 59 6d 4e 6a 4e 38 4d 54 49 34 4b 53 78 53 57 30 77 72 4b 31 30 39 51 79 59 32 4d 33 77 78 4d 6a 67 70 4f 33 4a 6c 64 48 56 79 62 69 42 53 66 53 78 56 50 57 5a 31 62 6d 4e 30 61 57 39 75 4b 45 63 73 55 69 78 44 4b 58 74 44 50 58 52 6f 61 58 4d 37 64 48 4a 35 65 32 4a 57 4b 45 63 73 64 47 68 70 63 79 78 53 4b 58 31 6a 59 58 52 6a 61 43 68 49 4b 58 74 35 4b 45 67 73 64 47 68 70 63 79 6b 73 52 79 68 6d 64 57 35 6a 64 47 6c 76 62 69 68 4d 4b 58 74 4d 4b 45 4d 75 53 43 6c 39 4b 58 31 39 4c 46 46 55 50 57 5a 31 62 6d 4e 30 61 57 39 75 Data Ascii: 45818MjQwLFJbTCsrXT1DPj4xMiY2M3wxMjgpOlJbTCsrXT1DPj4xMnwyMjQsUltMKytdPUM+PjYmNjN8MTI4KSxSW0wrK109QyY2M3wxMjgpO3JldHVybiBSfSxVPWZ1bmN0aW9uKEcsUixDKXtDPXRoaXM7dHJ5e2JWKEcsdGhpcyxSKX1jYXRjaChIKXt5KEgsdGhpcyksRyhmdW5jdGlvbihMKXtMKEMuSCl9KX19LFFUPWZ1bmN0aW9u
2023-03-01 19:18:01 UTC	42	IN	Data Raw: 47 6c 6b 5a 47 56 75 4c 43 68 75 50 54 51 39 50 55 4d 75 64 69 6c 38 66 45 55 2f 51 79 35 51 4b 43 6b 36 51 79 35 4a 4b 53 78 4d 4c 55 4d 75 53 53 6b 73 55 54 34 2b 4d 54 51 70 4c 45 4d 75 64 53 59 6d 4b 45 4d 75 64 56 34 39 59 69 6f 6f 55 54 77 38 4d 69 6b 70 4c 45 4d 70 4c 6b 38 72 50 57 49 73 51 79 6b 75 55 7a 31 69 66 48 78 44 4c 6c 4d 73 62 6e 78 38 52 53 6c 44 4c 6e 59 39 4d 43 78 44 4c 6b 6b 39 54 44 74 70 5a 69 67 68 52 58 78 38 54 43 31 44 4c 6c 55 38 51 79 35 45 4c 53 68 53 50 7a 49 31 4e 54 70 48 50 7a 55 36 4d 69 6b 70 63 6d 56 30 64 58 4a 75 49 47 5a 68 62 48 4e 6c 4f 33 4a 6c 64 48 56 79 62 69 45 6f 4b 45 73 6f 51 79 77 6f 55 6a 31 79 4b 45 63 2f 4d 54 55 30 4f 6a 49 34 4d 53 77 6f 51 79 35 59 50 55 67 73 51 79 6b 70 4c 44 49 34 4d 53 6b 73 Data Ascii: GlkZGVuLChuPTQ9PUMudil8fEU/Qy5QKCk6Qy5JKSxMLUMuSSksUT4+MTQpLEMudSYmKEMudV49YiooUTw8MikpLEMpLk8rPWIsQykuUz1ifHxDLlMsbnx8RSlDLnY9MCxDLkk9TDtpZighRXx8TC1DLlU8Qy5ELShSPzI1NTpHPzU6MikpcmV0dXJuIGZhbHNlO3JldHVybiEoKEsoQywoUj1yKEc/MTU0OjI4MSwoQy5YPUgsQykpLDI4MSks
2023-03-01 19:18:01 UTC	43	IN	Data Raw: 57 59 6f 49 55 55 70 63 6d 56 30 64 58 4a 75 49 45 55 39 51 79 68 69 4b 53 78 75 4a 69 5a 75 4b 45 55 70 4c 45 55 37 53 44 39 57 4b 43 6b 36 4b 46 45 39 54 43 78 4d 50 57 5a 31 62 6d 4e 30 61 57 39 75 4b 43 6c 37 55 53 67 70 4c 48 6f 6f 56 69 6c 39 4b 58 30 70 66 58 30 73 59 7a 55 39 5a 6e 56 75 59 33 52 70 62 32 34 6f 52 79 78 53 4c 45 4d 73 53 43 6c 37 5a 79 68 48 4c 43 68 49 50 55 51 6f 4b 45 4d 39 52 43 68 48 4b 53 78 48 4b 53 6b 73 59 53 68 79 4b 45 4d 73 52 79 6b 73 55 69 6b 70 4c 45 67 70 66 53 78 55 50 57 5a 31 62 6d 4e 30 61 57 39 75 4b 45 63 73 55 69 78 44 4b 58 74 53 57 30 73 6f 52 79 78 44 4c 46 49 70 4c 48 68 6c 58 54 30 79 4e 7a 6b 32 66 53 78 6c 50 57 5a 31 62 6d 4e 30 61 57 39 75 4b 45 63 73 55 69 78 44 4c 45 67 73 54 43 78 75 4b 58 74 70 Data Ascii: WYoIUUpcmV0dXJuIEU9QyhiKSxuJiZuKEUpLEU7SD9WKCk6KFE9TCxMPWZ1bmN0aW9uKCl7USgpLHooVil9KX0pfX0sYzU9ZnVuY3Rpb24oRyxSLEMsSCl7ZyhHLChIPUQoKEM9RChHKSxHKSksYShyKEMsRyksUikpLEgpfSxUPWZ1bmN0aW9uKEcsUixDKXtSW0soRyxDLFIpLHhlXT0yNzk2fSxlPWZ1bmN0aW9uKEcsUixDLEgsTCxuKXtp
2023-03-01 19:18:01 UTC	45	IN	Data Raw: 33 52 6f 4c 44 49 70 4c 45 77 70 4c 45 67 70 4c 45 77 70 66 53 78 56 54 54 31 6d 64 57 35 6a 64 47 6c 76 62 69 68 48 4c 46 49 70 65 33 4a 6c 64 48 56 79 62 69 42 53 50 55 6f 6f 52 79 6b 73 55 69 59 78 4d 6a 67 6d 4a 69 68 53 50 56 49 6d 4d 54 49 33 66 45 6f 6f 52 79 6b 38 50 44 63 70 4c 46 4a 39 4c 47 31 71 50 57 5a 31 62 6d 4e 30 61 57 39 75 4b 45 63 73 55 69 78 44 4c 45 67 73 54 43 78 75 4b 58 74 6d 64 57 35 6a 64 47 6c 76 62 69 42 46 4b 43 6c 37 61 57 59 6f 52 79 35 54 50 54 31 48 4b 58 74 70 5a 69 68 48 4c 6b 77 70 65 33 5a 68 63 69 42 69 50 56 74 58 4c 45 4d 73 55 69 78 32 62 32 6c 6b 49 44 41 73 54 43 78 75 4c 47 46 79 5a 33 56 74 5a 57 35 30 63 31 30 37 61 57 59 6f 4d 6a 30 39 53 43 6c 32 59 58 49 67 55 54 31 32 4b 47 5a 68 62 48 4e 6c 4c 47 5a 68 Data Ascii: 3RoLDIpLEwpLEgpLEwpfSxVTT1mdW5jdGlvbihHLFIpe3JldHVybiBSPUooRyksUiYxMjgmJihSPVImMTI3fEooRyk8PDcpLFJ9LG1qPWZ1bmN0aW9uKEcsUixDLEgsTCxuKXtmdW5jdGlvbiBFKCl7aWYoRy5TPT1HKXtpZihHLkwpe3ZhciBiPVtXLEMsUix2b2lkIDAsTCxuLGFyZ3VtZW50c107aWYoMj09SCl2YXIgUT12KGZhbHNlLGZh
2023-03-01 19:18:01 UTC	46	IN	Data Raw: 31 74 44 58 54 74 6d 62 33 49 6f 51 7a 30 6f 52 7a 31 62 4d 54 4d 73 4f 43 77 78 4d 79 77 78 4d 69 77 78 4e 69 77 31 4c 44 4d 73 4d 54 41 73 4d 54 56 64 4c 44 41 70 4f 7a 6b 2b 51 7a 74 44 4b 79 73 70 55 6c 73 7a 58 53 68 53 4c 45 4d 6c 4d 79 78 48 57 30 4e 64 4b 58 31 39 4c 48 64 68 50 57 5a 31 62 6d 4e 30 61 57 39 75 4b 45 63 73 55 69 6c 37 63 6d 56 30 64 58 4a 75 4b 45 63 39 52 79 35 6a 63 6d 56 68 64 47 55 6f 4b 53 35 7a 61 47 6c 6d 64 43 67 70 4c 46 49 75 62 43 6b 75 59 33 4a 6c 59 58 52 6c 4b 43 6b 75 62 47 56 75 5a 33 52 6f 66 48 78 53 4c 6c 6f 75 59 33 4a 6c 59 58 52 6c 4b 43 6b 75 62 47 56 75 5a 33 52 6f 66 48 77 6f 55 69 35 61 50 58 5a 76 61 57 51 67 4d 43 78 53 4c 6d 77 39 64 6d 39 70 5a 43 41 77 4b 53 78 48 66 53 78 4b 50 57 5a 31 62 6d 4e 30 Data Ascii: 1tDXTtmb3IoQz0oRz1bMTMsOCwxMywxMiwxNiw1LDMsMTAsMTVdLDApOzk+QztDKyspUlszXShSLEMlMyxHW0NdKX19LHdhPWZ1bmN0aW9uKEcsUil7cmV0dXJuKEc9Ry5jcmVhdGUoKS5zaGlmdCgpLFIubCkuY3JlYXRlKCkubGVuZ3RofHxSLlouY3JlYXRlKCkubGVuZ3RofHwoUi5aPXZvaWQgMCxSLmw9dm9pZCAwKSxHfSxKPWZ1bmN0
2023-03-01 19:18:01 UTC	47	IN	Data Raw: 47 6c 76 62 69 68 75 4b 58 74 35 56 43 68 75 4c 44 4d 70 66 53 77 6f 53 79 68 53 4c 43 68 4c 4b 46 49 73 4b 46 51 6f 4b 46 49 75 64 6c 59 39 4b 46 51 6f 55 69 77 6f 56 43 67 6f 56 43 67 6f 4b 46 51 6f 4b 46 51 6f 55 69 78 6d 64 57 35 6a 64 47 6c 76 62 69 68 75 4b 58 74 6a 4e 53 68 75 4c 44 45 70 66 53 77 6f 56 43 67 6f 53 79 68 53 4c 43 68 55 4b 46 49 73 4b 46 51 6f 55 69 78 6d 64 57 35 6a 64 47 6c 76 62 69 68 75 4c 45 55 70 65 79 68 75 50 53 68 46 50 55 51 6f 62 69 6b 73 63 69 68 46 4c 47 34 75 55 79 6b 70 4c 47 34 70 57 7a 42 64 4c 6e 4a 6c 62 57 39 32 5a 55 56 32 5a 57 35 30 54 47 6c 7a 64 47 56 75 5a 58 49 6f 62 6c 73 78 58 53 78 75 57 7a 4a 64 4c 45 59 70 66 53 77 6f 53 79 68 53 4c 43 68 55 4b 46 49 73 5a 6e 56 75 59 33 52 70 62 32 34 6f 62 69 78 46 Data Ascii: GlvbihuKXt5VChuLDMpfSwoSyhSLChLKFIsKFQoKFIudlY9KFQoUiwoVCgoVCgoKFQoKFQoUixmdW5jdGlvbihuKXtjNShuLDEpfSwoVCgoSyhSLChUKFIsKFQoUixmdW5jdGlvbihuLEUpeyhuPShFPUQobikscihFLG4uUykpLG4pWzBdLnJlbW92ZUV2ZW50TGlzdGVuZXIoblsxXSxuWzJdLEYpfSwoSyhSLChUKFIsZnVuY3Rpb24obixF
2023-03-01 19:18:01 UTC	48	IN	Data Raw: 44 45 73 59 69 6c 39 4c 44 49 79 4f 53 6b 73 4d 6a 4d 70 4b 53 78 6d 64 57 35 6a 64 47 6c 76 62 69 68 75 4c 45 55 73 59 69 78 52 4b 58 74 4c 4b 47 34 73 4b 47 49 39 63 69 67 6f 52 54 30 6f 55 54 31 45 4b 43 68 69 50 55 51 6f 62 69 6b 73 62 69 6b 70 4c 45 51 6f 62 69 6b 70 4c 46 45 39 63 69 68 52 4c 47 34 70 4c 47 49 70 4c 47 34 70 4c 45 55 70 4c 47 4a 62 55 56 30 70 66 53 6b 73 4d 54 67 70 4c 44 55 30 4b 53 78 53 4b 53 78 53 4b 53 78 6d 64 57 35 6a 64 47 6c 76 62 69 68 75 4c 45 55 73 59 69 6c 37 52 54 30 6f 52 54 30 6f 59 6a 30 6f 52 54 31 45 4b 47 34 70 4c 45 51 6f 62 69 6b 70 4c 48 49 6f 52 53 78 75 4b 53 6b 73 5a 6a 63 6f 52 53 6b 70 4c 45 73 6f 62 69 78 69 4c 45 55 70 66 53 77 30 4d 6a 45 70 4c 44 51 30 4f 43 6b 70 4c 46 49 70 4c 47 5a 31 62 6d 4e 30 Data Ascii: DEsYil9LDIyOSksMjMpKSxmdW5jdGlvbihuLEUsYixRKXtLKG4sKGI9cigoRT0oUT1EKChiPUQobiksbikpLEQobikpLFE9cihRLG4pLGIpLG4pLEUpLGJbUV0pfSksMTgpLDU0KSxSKSxSKSxmdW5jdGlvbihuLEUsYil7RT0oRT0oYj0oRT1EKG4pLEQobikpLHIoRSxuKSksZjcoRSkpLEsobixiLEUpfSw0MjEpLDQ0OCkpLFIpLGZ1bmN0
2023-03-01 19:18:01 UTC	49	IN	Data Raw: 6a 6b 70 4c 47 5a 31 62 6d 4e 30 61 57 39 75 4b 47 34 73 52 53 6c 37 55 56 51 6f 4b 45 55 39 63 69 68 45 4b 47 34 70 4c 47 34 70 4c 45 55 70 4c 47 34 75 55 79 6c 39 4b 53 77 30 4e 6a 6b 70 4c 44 41 70 4c 45 73 70 4b 46 49 73 4e 6a 59 73 57 7a 41 73 4d 43 77 77 58 53 6b 73 5a 6e 56 75 59 33 52 70 62 32 34 6f 62 69 78 46 4c 47 49 73 55 53 78 57 4c 47 77 73 59 79 78 34 4c 47 30 73 54 79 78 54 4c 47 67 70 65 32 5a 31 62 6d 4e 30 61 57 39 75 49 48 41 6f 57 53 78 31 4b 58 74 6d 62 33 49 6f 4f 32 49 38 57 54 73 70 61 48 77 39 53 69 68 75 4b 54 77 38 59 69 78 69 4b 7a 30 34 4f 33 4a 6c 64 48 56 79 62 69 42 6f 50 6a 34 39 4b 48 55 39 4b 47 49 74 50 56 6b 73 61 43 59 6f 4d 54 77 38 57 53 6b 74 4d 53 6b 73 57 53 6b 73 64 58 31 6d 62 33 49 6f 65 44 31 57 50 53 68 54 Data Ascii: jkpLGZ1bmN0aW9uKG4sRSl7UVQoKEU9cihEKG4pLG4pLEUpLG4uUyl9KSw0NjkpLDApLEspKFIsNjYsWzAsMCwwXSksZnVuY3Rpb24obixFLGIsUSxWLGwsYyx4LG0sTyxTLGgpe2Z1bmN0aW9uIHAoWSx1KXtmb3IoO2I8WTspaHw9SihuKTw8YixiKz04O3JldHVybiBoPj49KHU9KGItPVksaCYoMTw8WSktMSksWSksdX1mb3IoeD1WPShT
2023-03-01 19:18:01 UTC	51	IN	Data Raw: 6e 56 6c 4c 47 34 73 52 53 6b 70 65 32 6c 6d 4b 43 4a 76 59 6d 70 6c 59 33 51 69 50 54 31 6d 4e 79 67 6f 62 6a 30 6f 55 54 31 79 4b 43 68 57 50 58 49 6f 4b 45 55 39 4b 45 55 39 52 43 67 6f 59 6a 31 45 4b 43 68 52 50 53 68 57 50 55 51 6f 62 69 6b 73 52 43 6b 6f 62 69 6b 73 62 69 6b 70 4c 47 34 70 4b 53 78 79 4b 53 68 46 4c 47 34 70 4c 46 59 70 4c 47 34 70 4c 46 45 70 4c 47 34 70 4c 48 49 70 4b 47 49 73 62 69 6b 73 56 69 6b 70 4b 58 74 6d 62 33 49 6f 62 43 42 70 62 69 42 69 50 56 74 64 4c 46 59 70 59 69 35 77 64 58 4e 6f 4b 47 77 70 4f 31 59 39 59 6e 31 6d 62 33 49 6f 62 6a 30 6f 62 44 30 77 4c 44 41 38 62 6a 39 75 4f 6a 45 70 4c 47 49 39 56 69 35 73 5a 57 35 6e 64 47 67 37 62 44 78 69 4f 32 77 72 50 57 34 70 55 53 68 57 4c 6e 4e 73 61 57 4e 6c 4b 47 77 73 Data Ascii: nVlLG4sRSkpe2lmKCJvYmplY3QiPT1mNygobj0oUT1yKChWPXIoKEU9KEU9RCgoYj1EKChRPShWPUQobiksRCkobiksbikpLG4pKSxyKShFLG4pLFYpLG4pLFEpLG4pLHIpKGIsbiksVikpKXtmb3IobCBpbiBiPVtdLFYpYi5wdXNoKGwpO1Y9Yn1mb3Iobj0obD0wLDA8bj9uOjEpLGI9Vi5sZW5ndGg7bDxiO2wrPW4pUShWLnNsaWNlKGws
2023-03-01 19:18:01 UTC	52	IN	Data Raw: 44 41 73 62 56 73 78 58 53 78 74 57 7a 4a 64 58 53 78 57 4c 6e 55 70 4b 53 78 73 58 6a 31 44 4c 6b 74 62 62 69 5a 46 58 53 6b 73 54 48 77 39 4b 47 77 2b 50 6a 67 74 4b 47 4e 38 4d 43 6b 74 4b 46 46 38 4d 43 6b 6d 4b 44 45 38 50 46 45 70 4c 54 45 70 50 44 77 6f 59 6e 77 77 4b 53 30 6f 55 58 77 77 4b 53 78 69 4c 54 31 52 4c 48 67 72 50 56 45 37 63 6d 56 30 64 58 4a 75 49 45 73 6f 51 79 77 79 4f 44 45 73 4b 46 49 39 54 43 78 49 66 44 41 70 4b 79 68 48 66 44 41 70 4b 53 78 53 66 53 78 36 56 7a 31 6d 64 57 35 6a 64 47 6c 76 62 69 68 48 4c 46 49 73 51 79 78 49 4b 58 74 6d 62 33 49 6f 4f 31 49 75 56 43 35 73 5a 57 35 6e 64 47 67 37 4b 58 74 44 50 53 68 53 4c 6b 45 39 62 6e 56 73 62 43 78 53 4c 6c 51 75 63 47 39 77 4b 43 6b 70 4f 33 52 79 65 58 74 49 50 55 73 33 Data Ascii: DAsbVsxXSxtWzJdXSxWLnUpKSxsXj1DLktbbiZFXSksTHw9KGw+PjgtKGN8MCktKFF8MCkmKDE8PFEpLTEpPDwoYnwwKS0oUXwwKSxiLT1RLHgrPVE7cmV0dXJuIEsoQywyODEsKFI9TCxIfDApKyhHfDApKSxSfSx6Vz1mdW5jdGlvbihHLFIsQyxIKXtmb3IoO1IuVC5sZW5ndGg7KXtDPShSLkE9bnVsbCxSLlQucG9wKCkpO3RyeXtIPUs3
2023-03-01 19:18:01 UTC	53	IN	Data Raw: 47 56 6d 61 57 35 6c 5a 43 49 68 50 58 52 35 63 47 56 76 5a 69 42 48 4c 6d 4e 68 62 47 77 6d 4a 69 4a 31 62 6d 52 6c 5a 6d 6c 75 5a 57 51 69 49 54 31 30 65 58 42 6c 62 32 59 67 52 79 35 77 63 6d 39 77 5a 58 4a 30 65 55 6c 7a 52 57 35 31 62 57 56 79 59 57 4a 73 5a 53 59 6d 49 55 63 75 63 48 4a 76 63 47 56 79 64 48 6c 4a 63 30 56 75 64 57 31 6c 63 6d 46 69 62 47 55 6f 49 6d 4e 68 62 47 77 69 4b 53 6c 79 5a 58 52 31 63 6d 34 69 5a 6e 56 75 59 33 52 70 62 32 34 69 66 57 56 73 63 32 55 67 63 6d 56 30 64 58 4a 75 49 6d 35 31 62 47 77 69 4f 32 56 73 63 32 55 67 61 57 59 6f 49 6d 5a 31 62 6d 4e 30 61 57 39 75 49 6a 30 39 51 79 59 6d 49 6e 56 75 5a 47 56 6d 61 57 35 6c 5a 43 49 39 50 58 52 35 63 47 56 76 5a 69 42 48 4c 6d 4e 68 62 47 77 70 63 6d 56 30 64 58 4a 75 Data Ascii: GVmaW5lZCIhPXR5cGVvZiBHLmNhbGwmJiJ1bmRlZmluZWQiIT10eXBlb2YgRy5wcm9wZXJ0eUlzRW51bWVyYWJsZSYmIUcucHJvcGVydHlJc0VudW1lcmFibGUoImNhbGwiKSlyZXR1cm4iZnVuY3Rpb24ifWVsc2UgcmV0dXJuIm51bGwiO2Vsc2UgaWYoImZ1bmN0aW9uIj09QyYmInVuZGVmaW5lZCI9PXR5cGVvZiBHLmNhbGwpcmV0dXJu
2023-03-01 19:18:01 UTC	54	IN	Data Raw: 57 35 6a 64 47 6c 76 62 69 68 75 4c 45 55 70 65 31 49 75 52 79 68 75 4c 48 52 79 64 57 55 73 52 53 6c 39 4c 47 5a 31 62 6d 4e 30 61 57 39 75 4b 47 34 70 65 79 68 30 4b 43 68 75 50 53 46 53 4c 6c 51 75 62 47 56 75 5a 33 52 6f 4c 46 49 70 4c 46 74 73 56 6c 30 70 4c 47 34 70 4a 69 5a 32 4b 48 52 79 64 57 55 73 5a 6d 46 73 63 32 55 73 55 69 6c 39 4b 58 31 6c 62 48 4e 6c 65 32 6c 6d 4b 45 67 39 50 56 63 70 63 6d 56 30 64 58 4a 75 49 45 4d 39 52 31 73 79 58 53 78 4c 4b 46 49 73 4d 54 6b 73 52 31 73 32 58 53 6b 73 53 79 68 53 4c 44 49 7a 4e 53 78 44 4b 53 78 53 4c 6d 6f 6f 52 79 6b 37 53 44 30 39 62 46 59 2f 4b 46 49 75 57 54 31 62 58 53 78 53 4c 6d 63 39 57 31 30 73 55 69 35 4d 50 57 35 31 62 47 77 70 4f 6b 67 39 50 58 68 6c 4a 69 59 69 62 47 39 68 5a 47 6c 75 Data Ascii: W5jdGlvbihuLEUpe1IuRyhuLHRydWUsRSl9LGZ1bmN0aW9uKG4peyh0KChuPSFSLlQubGVuZ3RoLFIpLFtsVl0pLG4pJiZ2KHRydWUsZmFsc2UsUil9KX1lbHNle2lmKEg9PVcpcmV0dXJuIEM9R1syXSxLKFIsMTksR1s2XSksSyhSLDIzNSxDKSxSLmooRyk7SD09bFY/KFIuWT1bXSxSLmc9W10sUi5MPW51bGwpOkg9PXhlJiYibG9hZGlu
2023-03-01 19:18:01 UTC	56	IN	Data Raw: 79 6c 37 63 6d 56 30 64 58 4a 75 49 45 64 65 4b 43 68 53 50 53 68 53 58 6a 31 53 50 44 77 78 4d 79 78 53 58 6a 31 53 50 6a 34 78 4e 79 77 6f 55 6c 35 53 50 44 77 31 4b 53 5a 44 4b 53 6c 38 66 43 68 53 50 54 45 70 4c 46 49 70 66 53 78 33 4b 53 35 51 50 53 68 33 61 57 35 6b 62 33 63 75 63 47 56 79 5a 6d 39 79 62 57 46 75 59 32 56 38 66 48 74 39 4b 53 35 75 62 33 63 2f 5a 6e 56 75 59 33 52 70 62 32 34 6f 4b 58 74 79 5a 58 52 31 63 6d 34 67 64 47 68 70 63 79 35 31 61 79 74 33 61 57 35 6b 62 33 63 75 63 47 56 79 5a 6d 39 79 62 57 46 75 59 32 55 75 62 6d 39 33 4b 43 6c 39 4f 6d 5a 31 62 6d 4e 30 61 57 39 75 4b 43 6c 37 63 6d 56 30 64 58 4a 75 4b 32 35 6c 64 79 42 45 59 58 52 6c 66 53 78 33 4b 53 35 48 50 57 5a 31 62 6d 4e 30 61 57 39 75 4b 45 63 73 55 69 78 44 Data Ascii: yl7cmV0dXJuIEdeKChSPShSXj1SPDwxMyxSXj1SPj4xNywoUl5SPDw1KSZDKSl8fChSPTEpLFIpfSx3KS5QPSh3aW5kb3cucGVyZm9ybWFuY2V8fHt9KS5ub3c/ZnVuY3Rpb24oKXtyZXR1cm4gdGhpcy51ayt3aW5kb3cucGVyZm9ybWFuY2Uubm93KCl9OmZ1bmN0aW9uKCl7cmV0dXJuK25ldyBEYXRlfSx3KS5HPWZ1bmN0aW9uKEcsUixD
2023-03-01 19:18:01 UTC	57	IN	Data Raw: 69 59 6f 61 46 74 34 4b 79 74 64 50 55 55 6d 4d 6a 55 31 4c 45 55 2b 50 6a 30 34 4b 53 78 6f 57 33 67 72 4b 31 30 39 52 54 74 4c 4b 48 52 6f 61 58 4d 73 4e 44 63 79 4c 46 73 77 4c 43 68 30 61 47 6c 7a 4c 6b 59 39 4b 48 52 6f 61 58 4d 75 57 54 31 6f 4c 48 52 6f 61 58 4d 75 57 53 6b 75 62 47 56 75 5a 33 52 6f 50 44 77 7a 4c 44 41 70 4c 44 42 64 4b 58 31 6a 59 58 52 6a 61 43 68 77 4b 58 74 6c 4b 44 45 33 4c 48 41 73 64 47 68 70 63 79 6b 37 63 6d 56 30 64 58 4a 75 66 56 68 5a 4b 44 67 77 4d 44 45 73 64 47 68 70 63 79 6c 39 5a 57 78 7a 5a 53 42 70 5a 69 68 54 50 54 31 61 4b 55 4e 62 4d 56 30 75 63 48 56 7a 61 43 68 79 4b 44 45 32 4c 48 52 6f 61 58 4d 70 4c 6d 78 6c 62 6d 64 30 61 43 78 79 4b 44 59 33 4c 48 52 6f 61 58 4d 70 4c 6d 78 6c 62 6d 64 30 61 43 78 79 Data Ascii: iYoaFt4KytdPUUmMjU1LEU+Pj04KSxoW3grK109RTtLKHRoaXMsNDcyLFswLCh0aGlzLkY9KHRoaXMuWT1oLHRoaXMuWSkubGVuZ3RoPDwzLDApLDBdKX1jYXRjaChwKXtlKDE3LHAsdGhpcyk7cmV0dXJufVhZKDgwMDEsdGhpcyl9ZWxzZSBpZihTPT1aKUNbMV0ucHVzaChyKDE2LHRoaXMpLmxlbmd0aCxyKDY3LHRoaXMpLmxlbmd0aCxy
2023-03-01 19:18:01 UTC	58	IN	Data Raw: 57 5a 30 4b 43 6b 73 63 69 67 30 4f 53 78 30 61 47 6c 7a 4b 53 6b 75 62 47 56 75 5a 33 52 6f 50 56 59 75 63 32 68 70 5a 6e 51 6f 4b 53 78 57 4c 6e 4e 6f 61 57 5a 30 4b 43 6b 70 4b 53 78 34 66 57 6c 6d 4b 46 4d 39 50 53 52 6c 4b 56 4d 33 4b 45 4e 62 4d 6c 30 73 51 31 73 78 58 53 78 30 61 47 6c 7a 4b 54 74 6c 62 48 4e 6c 49 47 6c 6d 4b 46 4d 39 50 56 63 70 63 6d 56 30 64 58 4a 75 49 46 4d 33 4b 44 67 77 4d 44 45 73 51 31 73 78 58 53 78 30 61 47 6c 7a 4b 58 31 39 5a 6d 6c 75 59 57 78 73 65 58 74 53 50 55 68 39 66 58 30 6f 4b 53 77 76 4c 69 38 70 4c 47 6c 57 4c 46 52 58 50 53 68 56 4c 6e 42 79 62 33 52 76 64 48 6c 77 5a 56 74 6c 4e 31 30 39 57 7a 41 73 4d 43 77 78 4c 44 45 73 4b 43 67 6f 56 53 35 77 63 6d 39 30 62 33 52 35 63 47 55 75 55 6b 67 39 4d 43 78 56 Data Ascii: WZ0KCkscig0OSx0aGlzKSkubGVuZ3RoPVYuc2hpZnQoKSxWLnNoaWZ0KCkpKSx4fWlmKFM9PSRlKVM3KENbMl0sQ1sxXSx0aGlzKTtlbHNlIGlmKFM9PVcpcmV0dXJuIFM3KDgwMDEsQ1sxXSx0aGlzKX19ZmluYWxseXtSPUh9fX0oKSwvLi8pLGlWLFRXPShVLnByb3RvdHlwZVtlN109WzAsMCwxLDEsKCgoVS5wcm90b3R5cGUuUkg9MCxV
2023-03-01 19:18:01 UTC	58	IN	Data Raw: 33 65 65 34 0d 0a 62 47 73 39 5a 6e 56 75 59 33 52 70 62 32 34 6f 52 79 78 53 4c 45 4d 73 53 43 6c 37 61 57 59 6f 55 6a 31 33 61 57 35 6b 62 33 63 75 59 6e 52 76 59 53 6c 37 5a 6d 39 79 4b 45 67 39 49 69 49 73 51 7a 30 77 4f 30 4d 38 52 79 35 73 5a 57 35 6e 64 47 67 37 51 79 73 39 4f 44 45 35 4d 69 6c 49 4b 7a 31 54 64 48 4a 70 62 6d 63 75 5a 6e 4a 76 62 55 4e 6f 59 58 4a 44 62 32 52 6c 4c 6d 46 77 63 47 78 35 4b 47 35 31 62 47 77 73 52 79 35 7a 62 47 6c 6a 5a 53 68 44 4c 45 4d 72 4f 44 45 35 4d 69 6b 70 4f 30 63 39 55 69 68 49 4b 53 35 79 5a 58 42 73 59 57 4e 6c 4b 43 39 63 58 43 73 76 5a 79 77 69 4c 53 49 70 4c 6e 4a 6c 63 47 78 68 59 32 55 6f 4c 31 78 63 4c 79 39 6e 4c 43 4a 66 49 69 6b 75 63 6d 56 77 62 47 46 6a 5a 53 67 76 50 53 39 6e 4c 43 49 69 4b Data Ascii: 3ee4bGs9ZnVuY3Rpb24oRyxSLEMsSCl7aWYoUj13aW5kb3cuYnRvYSl7Zm9yKEg9IiIsQz0wO0M8Ry5sZW5ndGg7Qys9ODE5MilIKz1TdHJpbmcuZnJvbUNoYXJDb2RlLmFwcGx5KG51bGwsRy5zbGljZShDLEMrODE5MikpO0c9UihIKS5yZXBsYWNlKC9cXCsvZywiLSIpLnJlcGxhY2UoL1xcLy9nLCJfIikucmVwbGFjZSgvPS9nLCIiK
2023-03-01 19:18:01 UTC	60	IN	Data Raw: 32 65 6b 4e 6b 4b 31 6c 7a 5a 57 64 53 4d 7a 5a 51 52 58 6f 30 56 57 5a 4b 55 6d 64 6c 4b 30 52 5a 55 47 70 5a 57 56 64 7a 64 54 4a 76 4f 47 73 34 53 55 73 7a 64 6b 52 6a 51 55 39 42 54 32 39 52 56 6e 56 51 63 6e 6c 72 62 79 74 70 53 6e 64 52 4f 56 63 32 61 6d 6c 61 62 57 64 32 63 6b 70 69 56 46 56 4a 55 57 4e 33 56 48 52 4e 53 6c 5a 4a 65 6d 56 49 5a 46 6b 72 59 32 56 49 53 30 56 35 64 47 4e 68 62 6e 68 35 56 45 78 70 65 45 4a 50 55 31 6c 30 61 47 4a 70 52 6d 5a 59 4e 33 42 4a 61 7a 41 76 65 6a 5a 31 53 58 56 34 57 57 52 4c 4c 30 4d 72 54 30 46 71 51 56 4e 4e 54 48 56 43 62 32 4e 79 51 6b 45 78 4e 47 73 30 55 44 6c 30 65 45 46 55 4d 45 56 72 57 46 52 58 52 47 56 76 53 55 39 6b 51 6d 4e 55 63 54 5a 69 55 57 70 52 61 6e 6c 49 55 47 4e 55 63 57 4a 75 64 7a Data Ascii: 2ekNkK1lzZWdSMzZQRXo0VWZKUmdlK0RZUGpZWVdzdTJvOGs4SUszdkRjQU9BT29RVnVQcnlrbytpSndROVc2amlabWd2ckpiVFVJUWN3VHRNSlZJemVIZFkrY2VIS0V5dGNhbnh5VExpeEJPU1l0aGJpRmZYN3BJazAvejZ1SXV4WWRLL0MrT0FqQVNNTHVCb2NyQkExNGs0UDl0eEFUMEVrWFRXRGVvSU9kQmNUcTZiUWpRanlIUGNUcWJudz
2023-03-01 19:18:01 UTC	61	IN	Data Raw: 33 56 30 59 76 56 45 56 71 64 54 4e 4f 61 33 68 50 56 31 70 6e 61 47 68 45 57 55 64 50 54 48 63 31 4d 54 52 6d 61 56 46 71 52 6e 70 34 52 7a 68 6c 51 57 4a 71 64 57 52 56 61 54 68 68 57 45 73 32 4f 47 39 69 63 58 6c 46 63 31 4a 69 57 57 5a 75 65 54 5a 70 56 6a 55 33 62 45 78 74 57 56 64 4c 53 54 42 70 55 53 74 59 64 58 4e 4a 4c 32 31 58 5a 57 74 48 62 57 74 51 55 58 6c 45 54 6e 52 78 54 30 35 30 64 32 31 7a 64 6c 42 4e 55 54 52 35 61 7a 67 79 63 6c 52 36 65 45 68 32 5a 6d 64 61 4f 56 42 79 56 53 74 42 54 32 70 35 61 32 35 61 56 6a 63 76 63 31 64 45 52 47 31 4f 55 7a 4e 56 4d 31 46 4c 57 48 64 7a 55 30 35 44 62 56 70 74 56 58 4a 49 52 32 70 44 59 32 5a 6a 4f 45 6b 31 63 54 56 32 57 47 56 76 65 6e 70 34 63 47 6b 7a 64 48 51 77 61 6d 56 47 4e 48 68 4f 54 43 Data Ascii: 3V0YvVEVqdTNOa3hPV1pnaGhEWUdPTHc1MTRmaVFqRnp4RzhlQWJqdWRVaThhWEs2OG9icXlFc1JiWWZueTZpVjU3bExtWVdLSTBpUStYdXNJL21XZWtHbWtQUXlETnRxT050d21zdlBNUTR5azgyclR6eEh2ZmdaOVByVStBT2p5a25aVjcvc1dERG1OUzNVM1FLWHdzU05DbVptVXJIR2pDY2ZjOEk1cTV2WGVvenp4cGkzdHQwamVGNHhOTC
2023-03-01 19:18:01 UTC	62	IN	Data Raw: 78 52 6a 41 30 61 31 4d 30 53 47 39 34 53 7a 49 78 64 6c 6c 52 4f 47 45 32 4f 45 55 79 59 53 39 4d 52 53 74 6d 56 6b 5a 36 51 7a 4d 72 52 6d 34 30 59 6d 5a 36 52 56 45 30 65 44 4a 61 52 47 6c 55 63 6e 52 79 59 56 64 78 51 6c 4a 58 4f 55 6c 57 56 55 35 50 63 6a 5a 77 62 6d 38 78 63 55 78 51 55 6d 31 6f 51 6d 6c 47 5a 47 4a 44 52 54 49 31 54 6b 5a 78 53 55 4e 6d 62 58 4e 72 4e 48 52 76 4d 6b 39 52 55 6c 6c 69 63 44 56 4d 57 57 4a 6c 52 45 6f 31 64 58 42 45 54 43 74 50 52 33 64 33 5a 47 4e 4d 55 45 35 46 62 46 68 79 54 45 5a 53 59 6b 74 42 53 54 42 45 56 56 4a 49 5a 57 64 77 56 55 59 35 64 6d 35 4e 55 30 6c 4c 53 48 56 56 53 32 31 75 56 45 31 48 55 53 39 47 64 31 6c 72 52 48 6c 71 61 54 64 31 63 54 6b 72 61 55 73 33 4c 32 35 6a 4e 55 6c 7a 61 45 5a 52 64 31 Data Ascii: xRjA0a1M0SG94SzIxdllROGE2OEUyYS9MRStmVkZ6QzMrRm40YmZ6RVE0eDJaRGlUcnRyYVdxQlJXOUlWVU5PcjZwbm8xcUxQUm1oQmlGZGJDRTI1TkZxSUNmbXNrNHRvMk9RUllicDVMWWJlREo1dXBETCtPR3d3ZGNMUE5FbFhyTEZSYktBSTBEVVJIZWdwVUY5dm5NU0lLSHVVS21uVE1HUS9Gd1lrRHlqaTd1cTkraUs3L25jNUlzaEZRd1
2023-03-01 19:18:01 UTC	63	IN	Data Raw: 56 51 53 74 54 52 57 5a 4a 52 55 78 4f 52 45 78 74 63 57 74 6b 5a 6c 56 4f 4d 7a 46 73 5a 57 74 57 4e 32 46 5a 54 56 56 6a 52 47 4e 34 51 58 46 69 52 6c 4e 48 61 32 31 4e 5a 45 31 46 59 57 31 70 62 33 51 78 55 69 74 53 59 55 46 35 56 54 4e 49 65 45 68 6d 61 6b 74 43 62 6b 64 31 5a 33 41 30 4d 56 56 34 51 6c 4e 36 54 32 4d 32 63 58 4a 4c 54 6a 6c 5a 56 32 64 55 56 45 74 33 51 58 64 77 53 6b 4a 58 52 48 46 4c 4f 56 52 79 57 6c 64 4c 57 55 6c 75 64 6c 5a 4a 55 7a 52 54 56 44 68 43 53 32 38 35 5a 48 6b 79 65 44 52 53 53 57 78 79 61 7a 46 71 4f 48 64 51 5a 56 4a 76 56 6b 45 78 62 6b 74 54 53 6e 52 76 5a 6e 68 7a 5a 57 5a 76 4d 54 52 4d 51 6a 68 55 54 57 68 43 5a 33 4e 5a 65 54 46 36 55 32 39 6f 62 32 56 50 5a 6b 67 77 55 6d 56 6c 64 47 64 4f 57 6e 6c 32 4d 47 Data Ascii: VQStTRWZJRUxORExtcWtkZlVOMzFsZWtWN2FZTVVjRGN4QXFiRlNHa21NZE1FYW1pb3QxUitSYUF5VTNIeEhmaktCbkd1Z3A0MVV4QlN6T2M2cXJLTjlZV2dUVEt3QXdwSkJXRHFLOVRyWldLWUludlZJUzRTVDhCS285ZHkyeDRSSWxyazFqOHdQZVJvVkExbktTSnRvZnhzZWZvMTRMQjhUTWhCZ3NZeTF6U29ob2VPZkgwUmVldGdOWnl2MG
2023-03-01 19:18:01 UTC	64	IN	Data Raw: 6f 61 57 35 4f 62 58 5a 6e 53 54 55 32 5a 31 70 71 55 30 4e 44 63 47 68 46 56 6c 67 32 64 45 35 5a 57 44 59 30 53 47 6c 55 57 6c 42 75 4d 6a 4a 33 51 6e 6c 42 61 6e 5a 57 59 56 42 4e 65 45 46 34 4b 32 64 53 63 55 78 54 51 32 35 70 4b 79 73 31 57 58 4d 78 61 58 6b 79 55 6e 42 58 61 6d 6f 78 51 55 68 35 52 56 5a 50 4e 32 35 32 4f 55 68 5a 57 55 78 4c 65 54 4a 61 61 6b 56 6b 4d 54 46 56 59 6b 5a 69 61 46 68 4c 54 30 52 72 52 56 68 71 4c 31 55 76 61 46 6f 72 53 6e 41 33 55 31 5a 59 62 55 52 6f 53 56 68 78 65 55 74 31 61 47 4e 58 51 56 42 5a 4e 30 52 5a 53 45 35 6f 5a 6a 45 79 53 6a 68 4d 64 58 42 45 63 30 68 6a 51 33 5a 50 57 54 4e 34 5a 46 4d 72 55 6d 4d 35 53 6d 56 6d 64 58 68 48 65 46 70 48 4f 44 41 33 65 48 4a 52 4f 57 59 79 54 30 70 56 4e 56 6c 46 59 6d Data Ascii: oaW5ObXZnSTU2Z1pqU0NDcGhFVlg2dE5ZWDY0SGlUWlBuMjJ3QnlBanZWYVBNeEF4K2dScUxTQ25pKys1WXMxaXkyUnBXamoxQUh5RVZPN252OUhZWUxLeTJaakVkMTFVYkZiaFhLT0RrRVhqL1UvaForSnA3U1ZYbURoSVhxeUt1aGNXQVBZN0RZSE5oZjEySjhMdXBEc0hjQ3ZPWTN4ZFMrUmM5SmVmdXhHeFpHODA3eHJROWYyT0pVNVlFYm
2023-03-01 19:18:01 UTC	66	IN	Data Raw: 45 63 54 46 43 52 6e 52 75 55 47 55 76 61 58 70 4d 55 6d 64 57 61 56 46 4f 51 55 4e 70 5a 79 39 57 4f 57 46 51 65 6e 64 70 63 30 64 76 55 58 41 76 64 30 78 75 61 6c 70 76 4e 6b 30 32 54 30 49 78 55 57 46 31 52 54 4a 4c 4f 46 6f 34 56 58 6c 44 56 54 64 6d 53 33 46 57 5a 30 35 73 51 6b 35 69 51 57 6c 4e 61 6a 68 54 4e 30 74 44 65 44 68 79 54 6d 51 78 57 57 64 6b 4f 57 78 72 5a 56 5a 55 61 56 70 61 64 31 4e 5a 62 30 4a 6e 61 55 31 4a 65 45 49 33 63 45 4a 74 57 6d 52 76 59 6d 70 68 63 46 6c 53 51 54 42 71 5a 6d 70 4f 59 58 56 56 52 30 49 76 5a 6a 4e 59 55 30 56 6e 4b 33 45 77 4b 30 5a 57 54 6b 74 61 65 55 70 4e 53 33 42 4e 63 6c 56 48 55 31 6c 6d 61 7a 46 75 4f 54 4e 4f 4e 6a 51 31 64 48 6c 49 63 45 64 6d 61 57 74 4f 64 7a 42 4c 53 6b 39 32 4c 31 52 4a 57 6b Data Ascii: EcTFCRnRuUGUvaXpMUmdWaVFOQUNpZy9WOWFQendpc0dvUXAvd0xualpvNk02T0IxUWF1RTJLOFo4VXlDVTdmS3FWZ05sQk5iQWlNajhTN0tDeDhyTmQxWWdkOWxrZVZUaVpad1NZb0JnaU1JeEI3cEJtWmRvYmphcFlSQTBqZmpOYXVVR0IvZjNYU0VnK3EwK0ZWTktaeUpNS3BNclVHU1lmazFuOTNONjQ1dHlIcEdmaWtOdzBLSk92L1RJWk
2023-03-01 19:18:01 UTC	67	IN	Data Raw: 50 4e 6a 64 36 4e 58 5a 5a 63 30 78 4b 63 31 70 6c 4d 55 78 49 4c 32 6c 34 55 6b 68 76 61 6e 5a 6f 4e 56 52 56 55 44 64 6c 61 54 68 32 54 46 6b 72 4d 57 34 76 64 45 35 42 55 55 59 32 55 45 35 6e 64 47 6c 75 62 6b 39 71 65 6e 6c 49 55 45 68 77 56 57 6b 30 55 6a 51 30 63 46 70 69 62 7a 52 49 55 32 74 55 53 55 52 4b 4d 48 4e 46 56 56 52 42 52 56 64 74 4d 57 4e 30 56 6d 4a 77 52 56 63 32 55 30 68 4e 4c 32 52 68 61 45 30 35 53 6d 35 72 56 57 70 4b 4d 48 4e 6e 65 6b 4a 46 4b 31 70 61 53 6c 5a 48 4e 33 55 7a 56 44 55 33 63 6d 35 55 54 46 56 6d 64 47 6c 73 4b 7a 4a 6e 62 57 4e 46 5a 6e 6f 31 51 6c 6c 30 65 46 46 4a 52 33 4e 4d 64 55 35 4e 65 6e 68 54 51 6b 35 50 59 32 39 31 63 48 68 53 56 58 4a 44 63 6e 59 31 64 32 73 35 55 54 67 34 4f 46 56 75 5a 55 4e 73 51 55 Data Ascii: PNjd6NXZZc0xKc1plMUxIL2l4UkhvanZoNVRVUDdlaTh2TFkrMW4vdE5BUUY2UE5ndGlubk9qenlIUEhwVWk0UjQ0cFpibzRIU2tUSURKMHNFVVRBRVdtMWN0VmJwRVc2U0hNL2RhaE05Sm5rVWpKMHNnekJFK1paSlZHN3UzVDU3cm5UTFVmdGlsKzJnbWNFZno1Qll0eFFJR3NMdU5NenhTQk5PY291cHhSVXJDcnY1d2s5UTg4OFVuZUNsQU
2023-03-01 19:18:01 UTC	68	IN	Data Raw: 6e 51 57 77 78 53 45 34 31 4e 6a 4e 5a 51 55 4e 6b 56 57 4a 4b 4e 58 46 4e 5a 31 59 33 4c 30 78 79 56 57 5a 72 61 56 70 45 55 6b 5a 42 55 57 4e 45 53 6e 6b 77 63 47 4e 32 53 56 56 61 51 57 6b 32 62 55 49 79 4d 31 70 6c 63 46 5a 6b 54 6d 4e 51 64 57 35 75 51 33 59 34 55 47 77 78 59 56 46 4b 63 57 45 72 57 57 74 6a 52 69 74 51 61 46 6f 33 55 44 6b 77 56 54 5a 78 52 57 4e 6c 55 32 59 7a 55 6a 49 35 5a 32 46 49 57 57 35 6e 56 57 64 61 62 54 4a 43 4d 48 68 5a 53 6e 6b 7a 51 58 52 45 64 56 68 6c 5a 6b 52 32 62 55 74 4b 59 56 5a 6f 65 56 64 6a 4b 33 5a 54 59 58 52 54 4e 7a 51 78 64 30 78 30 53 32 67 77 56 32 34 72 57 56 46 69 62 47 4e 35 4e 6d 67 32 61 44 42 4f 51 55 35 59 64 53 38 34 4d 6c 4e 68 4d 7a 6c 74 56 47 4d 77 4f 48 6c 79 4e 7a 5a 44 54 6d 56 75 57 6d Data Ascii: nQWwxSE41NjNZQUNkVWJKNXFNZ1Y3L0xyVWZraVpEUkZBUWNESnkwcGN2SVVaQWk2bUIyM1plcFZkTmNQdW5uQ3Y4UGwxYVFKcWErWWtjRitQaFo3UDkwVTZxRWNlU2YzUjI5Z2FIWW5nVWdabTJCMHhZSnkzQXREdVhlZkR2bUtKYVZoeVdjK3ZTYXRTNzQxd0x0S2gwV24rWVFibGN5Nmg2aDBOQU5YdS84MlNhMzltVGMwOHlyNzZDTmVuWm
2023-03-01 19:18:01 UTC	69	IN	Data Raw: 4e 63 6b 49 34 4d 6d 64 7a 5a 6b 52 4f 56 30 56 73 64 54 46 6c 51 30 46 79 56 55 4e 6a 4f 45 5a 43 61 6e 64 54 4c 32 74 45 57 45 70 55 63 57 35 6f 61 45 56 31 57 55 6c 6c 53 48 46 6d 59 32 52 32 4e 56 56 30 61 48 5a 46 56 6b 70 45 5a 33 46 75 54 30 56 50 64 47 35 68 61 47 74 4e 59 30 63 32 51 6e 4a 46 54 45 4d 76 56 44 42 73 51 30 59 34 55 55 6c 6c 54 45 5a 49 4e 6d 31 53 61 47 4e 79 57 56 68 6b 56 30 35 53 4e 69 39 6b 63 79 74 68 52 6d 78 5a 56 6c 4a 51 4c 32 51 79 4e 6b 35 7a 4e 30 35 30 4e 58 6c 76 51 6d 52 49 54 30 4d 77 4e 48 42 4f 61 31 56 33 64 6b 68 5a 56 31 56 77 59 6b 68 45 52 7a 46 30 61 46 4d 34 4e 6d 38 79 52 6b 56 7a 4c 32 70 6c 51 6e 63 72 4d 57 74 4a 63 57 52 44 64 45 78 6c 4e 47 64 76 65 57 78 54 64 69 38 7a 4d 47 6c 58 61 47 31 76 53 30 Data Ascii: NckI4MmdzZkROV0VsdTFlQ0FyVUNjOEZCandTL2tEWEpUcW5oaEV1WUllSHFmY2R2NVV0aHZFVkpEZ3FuT0VPdG5haGtNY0c2QnJFTEMvVDBsQ0Y4UUllTEZINm1SaGNyWVhkV05SNi9kcythRmxZVlJQL2QyNk5zN050NXlvQmRIT0MwNHBOa1V3dkhZV1VwYkhERzF0aFM4Nm8yRkVzL2plQncrMWtJcWRDdExlNGdveWxTdi8zMGlXaG1vS0
2023-03-01 19:18:01 UTC	71	IN	Data Raw: 49 4e 47 6c 57 52 6d 49 34 56 56 42 42 55 47 31 71 61 58 68 4b 55 56 6f 32 56 47 35 79 51 6d 68 6d 64 30 59 78 59 57 46 4b 63 55 46 45 63 57 73 35 53 30 35 46 52 47 4a 33 61 46 52 69 52 56 4a 61 56 6d 31 4f 57 53 74 50 62 45 52 46 55 6e 4e 52 57 6d 70 4f 62 45 4a 44 65 45 74 33 54 31 56 49 53 54 4e 34 52 32 68 75 52 33 63 77 56 7a 42 46 61 57 35 44 57 6d 56 6e 55 6d 4e 53 54 33 51 34 56 56 52 75 4e 54 45 76 53 30 31 70 62 6e 5a 4e 57 57 45 72 64 69 74 34 4e 44 42 34 4d 6e 4a 36 4e 43 74 4d 64 6d 45 79 5a 6d 39 34 64 54 4a 4a 59 31 46 5a 53 6a 56 6f 63 48 4e 33 59 33 68 56 59 6e 63 7a 63 30 74 42 57 6e 4e 33 65 58 4a 33 61 6d 6c 74 64 57 38 35 4f 45 4a 4d 54 45 64 58 5a 47 68 76 63 56 52 6a 65 6a 56 77 61 30 39 33 61 44 59 78 61 58 63 7a 57 54 64 73 53 32 Data Ascii: INGlWRmI4VVBBUG1qaXhKUVo2VG5yQmhmd0YxYWFKcUFEcWs5S05FRGJ3aFRiRVJaVm1OWStPbERFUnNRWmpObEJDeEt3T1VISTN4R2huR3cwVzBFaW5DWmVnUmNST3Q4VVRuNTEvS01pbnZNWWErdit4NDB4MnJ6NCtMdmEyZm94dTJJY1FZSjVocHN3Y3hVYnczc0tBWnN3eXJ3amltdW85OEJMTEdXZGhvcVRjejVwa093aDYxaXczWTdsS2
2023-03-01 19:18:01 UTC	72	IN	Data Raw: 56 55 57 6c 77 4e 6b 49 31 61 55 31 48 63 46 64 71 52 54 6c 70 62 43 74 7a 56 7a 42 4e 5a 47 39 48 51 55 45 30 55 58 5a 4b 5a 46 51 33 51 6b 56 43 4d 6c 46 53 54 53 74 36 52 6e 64 73 64 55 55 31 51 6c 41 79 4e 56 64 79 4f 45 38 34 4e 32 31 33 63 6e 4a 46 4d 48 46 33 4e 57 73 35 62 48 56 51 61 54 4a 6b 65 58 6c 49 4e 30 46 6d 61 33 5a 72 54 33 56 46 52 6e 52 47 56 45 35 58 4e 44 46 34 59 58 42 71 4b 30 73 32 61 6a 63 35 4b 33 4e 78 57 6d 4e 45 65 44 59 30 54 57 4e 46 4e 55 4e 51 5a 55 31 61 4e 6b 39 50 4f 46 6b 77 55 33 68 4d 4e 31 42 6a 57 6b 46 57 61 54 46 58 55 30 68 70 57 44 56 31 4c 32 46 4f 4c 33 6c 33 64 44 56 72 57 57 30 79 4c 30 5a 57 56 57 31 56 55 6b 35 4e 65 6d 5a 50 63 57 52 4b 61 6b 78 44 61 54 4e 46 59 6e 4e 43 54 46 52 50 55 57 67 31 57 56 Data Ascii: VUWlwNkI1aU1HcFdqRTlpbCtzVzBNZG9HQUE0UXZKZFQ3QkVCMlFSTSt6RndsdUU1QlAyNVdyOE84N213cnJFMHF3NWs5bHVQaTJkeXlIN0Fma3ZrT3VFRnRGVE5XNDF4YXBqK0s2ajc5K3NxWmNEeDY0TWNFNUNQZU1aNk9POFkwU3hMN1BjWkFWaTFXU0hpWDV1L2FOL3l3dDVrWW0yL0ZWVW1VUk5NemZPcWRKakxDaTNFYnNCTFRPUWg1WV
2023-03-01 19:18:01 UTC	73	IN	Data Raw: 79 65 6b 63 77 5a 45 6c 34 5a 30 49 79 59 30 77 76 54 48 4e 34 65 48 4a 52 63 47 39 48 64 30 64 47 5a 31 4e 36 54 54 64 46 4f 58 55 78 62 46 70 4b 61 30 70 56 4d 32 74 4a 51 30 31 36 64 47 55 31 54 7a 4e 78 4d 31 46 55 4e 46 5a 4f 52 46 4a 6f 57 45 34 7a 65 47 4e 75 57 57 68 4a 63 58 51 33 64 48 52 50 51 31 70 74 4e 47 74 6c 65 6d 64 76 59 58 68 49 4b 30 78 6a 4d 47 49 79 64 47 4e 59 5a 55 56 6e 5a 57 4e 79 65 45 49 31 4f 45 52 73 62 6b 38 77 4e 53 39 53 63 56 6b 78 54 32 6c 55 51 58 4d 34 56 48 56 6b 63 57 30 7a 53 48 6c 36 56 32 56 5a 63 6b 68 4f 54 6d 56 42 56 47 39 4a 4e 54 4e 34 54 6b 34 7a 53 48 68 7a 51 33 68 43 64 32 52 70 64 6b 70 51 4e 6e 6c 4b 62 56 70 4d 51 54 6c 75 53 7a 45 77 4e 30 78 35 53 47 35 61 52 46 63 32 56 58 42 32 52 6a 46 58 62 45 Data Ascii: yekcwZEl4Z0IyY0wvTHN4eHJRcG9Hd0dGZ1N6TTdFOXUxbFpKa0pVM2tJQ016dGU1TzNxM1FUNFZORFJoWE4zeGNuWWhJcXQ3dHRPQ1ptNGtlemdvYXhIK0xjMGIydGNYZUVnZWNyeEI1OERsbk8wNS9ScVkxT2lUQXM4VHVkcW0zSHl6V2VZckhOTmVBVG9JNTN4Tk4zSHhzQ3hCd2RpdkpQNnlKbVpMQTluSzEwN0x5SG5aRFc2VXB2RjFXbE
2023-03-01 19:18:01 UTC	74	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.11.11	49326	142.250.185.100	443

Timestamp	kBytes transferred	Direction	Data
2023-03-01 19:18:02 UTC	74	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=Nh10qRQB5k2ucc5SCBLAQ4nA HTTP/1.1 Host: www.google.com Connection: keep-alive Accept: / User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=Nh10qRQB5k2ucc5SCBLAQ4nA&size=normal&s=xm9cbRwB5nrvDvLcxNAXqtvN802uLDWWkS1MQ0zsGj0SY-52ktT8zLzKzybGJYCImSNZBjRA0-tg95KCXuTVuS23mF6_HLs99gHNYakMK1-6wi4_GyvfnQWpMxq9Lf3axbW62QeIrpsqF_ZuU71X2KX8LGYcaXArH1EI_1gTGWn3uun6pKchjRvQ_rtwCSFWTdkNch30h0Hmj9VwVwIY6LPiKJ2GE2w-dACtS0fogsZj2tHlyJXR4R1wPJUOuksj7e8_5pV_elAX3dRP2V4Eol76yyUI-eA&cb=9puivbc71jry Accept-Encoding: br, gzip, deflate
2023-03-01 19:18:02 UTC	75	IN	HTTP/1.1 200 OK Expires: Wed, 01 Mar 2023 19:18:02 GMT Date: Wed, 01 Mar 2023 19:18:02 GMT Cache-Control: private, max-age=300 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-03-01 19:18:02 UTC	75	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 4e 68 31 30 71 52 51 42 35 6b 32 75 63 63 35 53 43 42 4c 41 51 34 6e 41 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/Nh10qRQB5k2ucc5SCBLAQ4nA/recaptcha__en.js');
2023-03-01 19:18:02 UTC	76	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.11.11	49328	142.250.185.100	443

Timestamp	kBytes transferred	Direction	Data
2023-03-01 19:18:02 UTC	76	OUT	GET /recaptcha/api2/bframe?hl=en&v=Nh10qRQB5k2ucc5SCBLAQ4nA&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/604.4.7 (KHTML, like Gecko) Version/11.0.2 Safari/604.4.7 Accept-Language: en-us Referer: https://www.google.com/sorry/index?continue=https://www.google.com/afs/ads%3Fadtest%3Doff%26psid%3D6016880802%26pcsa%3Dfalse%26channel%3D000001%252Cbucket103%26client%3Ddp-teaminternet09_3ph%26r%3Dm%26hl%3Den%26rpbu%3Dhttp%253A%252F%252Fgoogletagmanger.com%252F%253Fts%253DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQxMDN8fHx8fHw2M2ZmYTRlODEzZmJlfHx8MTY3NzY5ODI4MC4wODh8MmJmMThlMzlmMzI0ZTc1NDc5OTY3ZjA3MmE3ZjBkMzVjYmZhOWNjY3x8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8ZXlKb2JDSTZJbVZ1SW4wPXx8MXxXMTA9fDM4MmJkY2ZjNDQxMzlmMTQzYjNhMDAzNDgwNjhiMTZkNDUyMTg4MGN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHww%26max_radlink_len%3D40%26type%3D3%26uiopt%3Dtrue%26swp%3Das-drid-2997149969328928%26oe%3DUTF-8%26ie%3DUTF-8%26fexp%3D21404%252C17300002%26format%3Dr3%257Cs%26nocache%3D351677701879796%26num%3D0%26output%3Dafd_ads%26domain_name%3Dgoogletagmanger.com%26v%3D3%26bsl%3D8%26pac%3D2%26u_his%3D1%26u_tz%3D60%26dt%3D1677701879810%26u_w%3D1024%26u_h%3D768%26biw%3D1009%26bih%3D655%26psw%3D1009%26psh%3D848%26frm%3D0%26cl%3D512915031%26uio%3D--%26cont%3Dtc%26jsid%3Dcaf%26jsv%3D512915031%26rurl%3Dhttp%253A%252F%252Fgoogletagmanger.com%252F%26adbw%3Dmaster-1%253A530&hl=en&q=EgRUETQ2GOjJ_p8GIjA7OVPaazSDpILENXCcxt0OZCvQ_9NQzNN7GiGeZLgyxzAVep3JrZT0P5XGAreaMaAyAXI Accept-Encoding: br, gzip, deflate
2023-03-01 19:18:02 UTC	77	IN	HTTP/1.1 200 OK Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 01 Mar 2023 19:18:02 GMT Content-Security-Policy: script-src 'nonce-WzdxKBJEJbrrgre-OA_CtA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'self';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2023-03-01 19:18:02 UTC	78	IN	Data Raw: 31 62 36 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1b67<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2023-03-01 19:18:02 UTC	78	IN	Data Raw: 39 32 46 72 31 4d 75 37 32 78 4b 4b 54 55 31 4b 76 6e 7a 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 Data Ascii: 92Fr1Mu72xKKTU1Kvnz.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstat
2023-03-01 19:18:02 UTC	80	IN	Data Raw: 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4b 54 55 31 4b 76 6e 7a 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 34 46 2c 20 55 2b 30 32 35 39 2c 20 55 2b 31 45 30 30 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 46 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 Data Ascii: 00; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKKTU1Kvnz.woff2) format('woff2'); unicode-range: U+0100-024F, U+0259, U+1E00-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-f
2023-03-01 19:18:02 UTC	81	IN	Data Raw: 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 41 4d 50 36 6c 62 42 50 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f Data Ascii: (//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4AMP6lbBP.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/
2023-03-01 19:18:02 UTC	82	IN	Data Raw: 20 55 2b 30 32 44 43 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 37 34 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d Data Ascii: U+02DC, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}/* cyrillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1Mm
2023-03-01 19:18:02 UTC	83	IN	Data Raw: 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 41 4d 50 36 6c 62 42 50 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 Data Ascii: /KFOlCnqEu92Fr1MmYUtfCxc4AMP6lbBP.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+1EA0-1EF9, U+20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; f
2023-03-01 19:18:02 UTC	85	IN	Data Raw: 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 57 7a 64 78 4b 42 4a 45 4a 62 72 72 67 72 65 2d 4f 41 5f 43 74 41 22 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 2d 74 6f 6b 65 6e 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 57 7a 64 78 4b 42 4a 45 4a 62 72 72 67 72 65 2d 4f 41 5f 43 74 41 22 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 66 72 61 6d 65 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 66 69 6e 70 75 74 5c 78 32 32 2c 6e 75 6c 6c 2c 5b 5c 78 32 32 63 6f 6e Data Ascii: cha__en.js" nonce="WzdxKBJEJbrrgre-OA_CtA"> </script></head><body><input type="hidden" id="recaptcha-token"><script type="text/javascript" nonce="WzdxKBJEJbrrgre-OA_CtA"> recaptcha.frame.Main.init("[\x22finput\x22,null,[\x22con
2023-03-01 19:18:02 UTC	85	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

System Behavior

Analysis Process: mono-sgen32 PID: 879, Parent PID: 811

General

Start time:	20:17:53
Start date:	01/03/2023
Path:	/Library/Frameworks/Mono.framework/Versions/4.4.2/bin/mono-sgen32
Arguments:	n/a
File size:	3722408 bytes
MD5 hash:	8910349f44a940d8d79318367855b236

Start time:	20:17:53
Start date:	01/03/2023
Path:	/usr/bin/open
Arguments:
File size:	105952 bytes
MD5 hash:	40ed6d8f35c9f20484b97582d296398f

Start time:	20:17:53
Start date:	01/03/2023
Path:	/usr/libexec/xpcproxy
Arguments:	n/a
File size:	43488 bytes
MD5 hash:	d1bb9a4899f0af921e8188218b20d744

Start time:	20:17:53
Start date:	01/03/2023
Path:	/Applications/Safari.app/Contents/MacOS/Safari
Arguments:	/Applications/Safari.app/Contents/MacOS/Safari
File size:	20896 bytes
MD5 hash:	8e18be737fe87f19fe7a97b4821e2005

Description:	Adversaries may modify plist files to run a program during system boot or user login. Property list (plist) files contain all of the information that macOS and OS X uses to configure applications and services. These files are UTF-8 encoded and formatted like XML documents via a series of keys surrounded by < >. They detail when programs should execute, file paths to the executables, program arguments, required OS permissions, and many others. plists are located in certain locations depending on their purpose such as `/Library/Preferences` (which execute with elevated privileges) and `~/Library/Preferences` (which execute with a user's privileges).
Tactics:	Persistence, Privilege Escalation
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	macOS
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

macOS Analysis Report http://googletagmanger.com

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Process Tree

Yara Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Persistence and Installation Behavior

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/Users/berri/Library/Safari/.dat.nosync0370.UfxUk8

/Users/berri/Library/WebKit/com.apple.Safari/WebsiteData/ResourceLoadStatistics/full_browsing_session_resourceLog.plist

/dev/null

/private/var/folders/ql/8wfqxrtx52n95h35b6cz4nyw0000gn/0/SafariFamily/Safari/.dat.nosync0370.yZTpVR

/private/var/folders/ql/8wfqxrtx52n95h35b6cz4nyw0000gn/C/mds/mdsDirectory.db_

/private/var/folders/ql/8wfqxrtx52n95h35b6cz4nyw0000gn/C/mds/mdsObject.db_

/private/var/tmp/NSCreateObjectFileImageFromMemory-PZfXiG

/private/var/tmp/NSCreateObjectFileImageFromMemory-pWXCho

/private/var/tmp/NSCreateObjectFileImageFromMemory-paJQle

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

System Behavior

Analysis Process: mono-sgen32 PID: 879, Parent PID: 811

General

File Activities

File Read (Anonymous Pipes)

Process Activities

Process Overlayed (Execve)

Chronological Activities

Analysis Process: open PID: 879, Parent PID: 811

General

File Activities

File Opened

File Read

File Seeked

Directory Enumerated

macOS Analysis Report
http://googletagmanger.com